diff --git a/.claude/CLAUDE.md b/.claude/CLAUDE.md
new file mode 100644
index 000000000000..216448a3cdb5
--- /dev/null
+++ b/.claude/CLAUDE.md
@@ -0,0 +1,301 @@
+# ComplianceAsCode/content
+
+## Project Overview
+
+This repository produces SCAP data streams, Ansible playbooks, Bash scripts, and other artifacts for compliance scanning and remediation.
+
+Each supported operating system or platform is called a **product**. To see the full list of products, check the subdirectories under `products/` — each subdirectory name is a product ID (e.g., `rhel9`, `ocp4`, `ubuntu2404`). Product-specific configuration lives in `products/<product>/product.yml`.
+
+## Repository Structure
+
+```
+applications/openshift/    # OCP4 and Kubernetes rules, organized by component
+linux_os/guide/            # Linux rules (RHEL, RHCOS, etc.), organized by system area
+controls/                  # Compliance framework mappings (CIS, STIG, SRG, NIST, etc.)
+products/                  # Product definitions, profiles, and product-specific controls
+shared/templates/          # Reusable check/remediation templates (60+ types)
+shared/macros/             # Jinja2 macro files for generating OVAL, Ansible, Bash, etc.
+components/                # Component definitions mapping rules to packages/groups
+```
+
+### Discovering Rule Directories
+
+- **OCP4/Kubernetes rules** live under `applications/openshift/`, organized by component (e.g., `api-server/`, `kubelet/`, `etcd/`). Each component directory contains rule subdirectories. The rule ID prefix typically matches the component directory name with hyphens replaced by underscores (e.g., rules in `api-server/` use the `api_server_` prefix). Browse `applications/openshift/` to see all component directories.
+- **Linux rules** (RHEL, RHCOS, Fedora, Ubuntu, etc.) live under `linux_os/guide/`, organized by system area (e.g., `system/`, `services/`, `auditing/`). Browse the subdirectories to find the appropriate category for a rule.
+- When placing a new rule, find 2-3 existing rules with a similar prefix or topic and place the new rule alongside them.
+
+## Rule Format
+
+Each rule lives in its own directory. The **directory name is the rule ID**. The directory contains `rule.yml` and optionally a `tests/` subdirectory.
+
+### `rule.yml` Fields
+
+```yaml
+documentation_complete: true          # Must be true for the rule to be built
+
+title: 'Short descriptive title'
+
+description: |-                        # Full description, supports HTML tags and Jinja2 macros
+    Description text here.
+
+rationale: |-                          # Why this rule matters
+    Rationale text here.
+
+severity: medium                       # low, medium, high, unknown
+
+identifiers:                           # Product-specific CCE identifiers
+    cce@ocp4: CCE-XXXXX-X
+    cce@rhel9: CCE-XXXXX-X
+
+references:                            # Compliance framework references
+    cis@ocp4: 1.2.3                    # CIS benchmark section
+    nist: CM-6,CM-6(1)                 # NIST 800-53 controls
+    srg: SRG-APP-000516-CTR-001325     # DISA SRG ID
+    stigid@rhel9: RHEL-09-XXXXXX       # STIG rule ID (product-scoped)
+    nerc-cip: CIP-003-8 R6             # NERC CIP references
+    pcidss: Req-2.2                    # PCI DSS requirements
+
+ocil_clause: 'condition when rule fails'  # Used in OCIL questionnaire
+
+ocil: |-                               # Manual check instructions
+    Run the following command:
+    <pre>$ oc get ...</pre>
+
+platform: ocp4                         # Platform applicability (optional)
+
+warnings:                              # Optional warnings section
+    - general: |-
+        Warning text, often includes openshift_cluster_setting macro.
+
+template:                              # Optional - uses a shared template for checks
+    name: yamlfile_value
+    vars:
+        ocp_data: "true"
+        filepath: '/api/path/here'
+        yamlpath: '.spec.field'
+        values:
+          - value: 'expected_value'
+            operation: "pattern match"
+
+fixtext: 'Remediation instructions'    # STIG fixtext (optional)
+srg_requirement: 'SRG requirement'     # SRG requirement text (optional)
+```
+
+## Templates
+
+Templates generate OVAL checks, Ansible playbooks, and Bash remediation scripts automatically.
+
+### `yamlfile_value` (primary OCP4 template)
+
+Checks values in YAML/JSON files or API responses.
+
+```yaml
+template:
+    name: yamlfile_value
+    vars:
+        ocp_data: "true"                        # "true" for OCP API data
+        filepath: '/apis/...'                   # API path or file path
+        yamlpath: '.spec.config.field'          # JSONPath-like expression
+        check_existence: "at_least_one_exists"  # Optional existence check
+        entity_check: "at least one"            # How to evaluate multiple matches
+        values:
+          - value: 'expected'                   # Expected value or regex
+            type: "string"                      # string, int, boolean
+            operation: "pattern match"          # equals, not equal, pattern match,
+                                                # greater than or equal, less than or equal
+            entity_check: "at least one"        # Per-value entity check
+```
+
+### `file_permissions` (RHEL)
+
+```yaml
+template:
+    name: file_permissions
+    vars:
+        filepath: /etc/cron.d/
+        filemode: '0700'
+```
+
+### `shell_lineinfile` (RHEL)
+
+```yaml
+template:
+    name: shell_lineinfile
+    vars:
+        path: '/etc/sysconfig/sshd'
+        parameter: 'SSH_USE_STRONG_RNG'
+        value: '32'
+        datatype: int                       # Optional
+        no_quotes: 'true'                   # Optional
+```
+
+### `sysctl` (RHEL)
+
+```yaml
+template:
+    name: sysctl
+    vars:
+        sysctlvar: net.ipv6.conf.all.accept_ra
+        datatype: int
+```
+
+### `service_enabled` / `service_disabled` (RHEL)
+
+```yaml
+template:
+    name: service_disabled
+    vars:
+        servicename: avahi
+```
+
+### `package_installed` / `package_removed` (RHEL)
+
+```yaml
+template:
+    name: package_removed
+    vars:
+        pkgname: avahi
+        pkgname@ubuntu2204: avahi-daemon    # Platform-specific overrides
+```
+
+## Common Jinja2 Macros
+
+Used in rule descriptions, OCIL, fixtext, and warnings fields:
+
+- `{{{ openshift_cluster_setting("/api/path") }}}` - Generates OCP API check instructions
+- `{{{ openshift_filtered_cluster_setting({'/api/path': jqfilter}) }}}` - Filtered API check with jq
+- `{{{ openshift_filtered_path('/api/path', jqfilter) }}}` - Generates filtered filepath for templates
+- `{{{ full_name }}}` - Expands to product full name (e.g., "Red Hat Enterprise Linux 9")
+- `{{{ xccdf_value("var_name") }}}` - References an XCCDF variable
+- `{{{ weblink("https://...") }}}` - Creates an HTML link
+- `{{{ describe_service_disable(service="name") }}}` - Standard service disable description
+- `{{{ describe_service_enable(service="name") }}}` - Standard service enable description
+- `{{{ describe_file_permissions(file="/path", perms="0700") }}}` - File permission description
+- `{{{ describe_sysctl_option_value(sysctl="key", value="val") }}}` - Sysctl description
+- `{{{ complete_ocil_entry_sysctl_option_value(sysctl="key", value="val") }}}` - Full OCIL for sysctl
+- `{{{ complete_ocil_entry_package(package="name") }}}` - Full OCIL for package check
+- `{{{ fixtext_package_removed("name") }}}` - Fixtext for package removal
+- `{{{ fixtext_sysctl("key", "value") }}}` - Fixtext for sysctl setting
+- `{{{ fixtext_directory_permissions(file="/path", mode="0600") }}}` - Fixtext for dir permissions
+
+## Control File Format
+
+Control files map compliance framework requirements to rules. They exist in two layouts:
+
+### Single-file format
+
+```yaml
+# controls/stig_rhel9.yml (or products/rhel9/controls/stig_rhel9.yml)
+policy: 'Red Hat Enterprise Linux 9 STIG'
+title: 'DISA STIG for RHEL 9'
+id: stig_rhel9
+source: https://www.cyber.mil/stigs/downloads/
+version: V2R7
+reference_type: stigid
+product: rhel9
+
+levels:
+    - id: high
+    - id: medium
+    - id: low
+
+controls:
+    - id: RHEL-09-211010
+      levels:
+          - high
+      title: RHEL 9 must be a vendor-supported release.
+      rules:
+          - installed_OS_is_vendor_supported
+      status: automated
+```
+
+### Split-directory format
+
+```
+controls/cis_ocp.yml          # Top-level: policy, title, id, levels
+controls/cis_ocp/             # Directory with section files
+    section-1.yml             # Controls for section 1
+    section-2.yml             # Controls for section 2
+    ...
+```
+
+Section files contain nested controls:
+
+```yaml
+controls:
+    - id: '1'
+      title: Control Plane Components
+      controls:
+          - id: '1.1'
+            title: Master Node Configuration Files
+            controls:
+                - id: 1.1.1
+                  title: Ensure that the API server pod specification...
+                  status: automated
+                  rules:
+                      - file_permissions_kube_apiserver
+                  levels:
+                      - level_1
+```
+
+### Control entry fields
+
+- `id` - Control identifier (e.g., "RHEL-09-211010", "1.2.3")
+- `title` - Human-readable title
+- `levels` - Applicable compliance levels
+- `rules` - List of rule IDs that satisfy this control
+- `status` - `automated`, `manual`, `inherently met`, `does not meet`, `pending`, `not applicable`
+- `notes` - Optional notes explaining status or implementation
+
+## Profile File Format
+
+Profiles select which rules apply to a product. Located at `products/<product>/profiles/<name>.profile`.
+
+```yaml
+documentation_complete: true
+title: 'Profile Title'
+description: |-
+    Profile description text.
+platform: ocp4
+metadata:
+    version: V2R7
+    SMEs:
+        - github_username
+
+selections:
+    - control_id:all              # Include all rules from a control file
+    - rule_id                     # Include a specific rule
+    - '!rule_id'                  # Exclude a specific rule
+    - var_name=value              # Set a variable value
+```
+
+Common selection patterns:
+- `stig_rhel9:all` - Pull in all rules from the stig_rhel9 control file
+- `cis_ocp:all` - Pull in all rules from the cis_ocp control file
+- `!audit_rules_immutable_login_uids` - Exclude a specific rule
+- `var_sshd_set_keepalive=1` - Set a variable
+
+## Build Instructions
+
+```bash
+# Build a single product (full build)
+./build_product ocp4
+
+# Build data stream only (faster, skips guides and tables)
+./build_product ocp4 --datastream-only
+
+# Build with only specific rules (fastest, for testing individual rules)
+./build_product ocp4 --datastream-only --rule-id api_server_tls_security_profile
+```
+
+Build output goes to `build/`. The data stream file is at:
+`build/ssg-<product>-ds.xml`
+
+## Guidelines for Claude
+
+1. **Always show proposals before making changes.** Present the full content of any new or modified file and wait for explicit approval.
+2. **Follow existing patterns.** Before creating a rule, find 2-3 similar existing rules and match their style exactly.
+3. **Check for duplicates.** Before creating a new rule, search for existing rules that might already cover the requirement.
+4. **Use the correct directory.** Find existing rules with the same prefix to determine the right directory. When in doubt, browse `applications/openshift/` or `linux_os/guide/` to find the appropriate component or category.
+5. **Preserve formatting.** This project uses consistent YAML formatting. Match the indentation and style of surrounding content.
+6. **Don't invent references.** Only include reference IDs (CCE, CIS, STIG, SRG, NIST) that the user provides or that exist in source documents.
diff --git a/.claude/skills/find-rule/SKILL.md b/.claude/skills/find-rule/SKILL.md
new file mode 100644
index 000000000000..78e7b37e3f63
--- /dev/null
+++ b/.claude/skills/find-rule/SKILL.md
@@ -0,0 +1,77 @@
+---
+disable-model-invocation: true
+---
+
+Search for existing rules that match the following requirement:
+
+$ARGUMENTS
+
+Follow these steps:
+
+1. **Extract key concepts** from the requirement text. Identify:
+   - Technical terms (e.g., "TLS", "audit", "encryption", "RBAC")
+   - Component references (e.g., "API server", "kubelet", "etcd", "SSH")
+   - Specific settings or parameters mentioned
+   - Any reference IDs (SRG-xxx, CIS section numbers, STIG IDs, NIST controls)
+
+2. **Respect scope constraints.** If the user specifies a scope (e.g., "only OpenShift control plane", "only node-level"), restrict results to that scope. Do not return rules outside the requested scope. OCP4/Kubernetes rules live under `applications/openshift/` and Linux rules live under `linux_os/guide/`. If no scope is specified, search both.
+
+3. **Search broadly** across rule titles, descriptions, and template configurations:
+   - Search `applications/openshift/` and `linux_os/guide/` for `rule.yml` files
+   - Search for keywords in titles, descriptions, template vars, and reference fields
+   - If reference IDs were provided, search for those exact IDs in rule.yml files
+
+4. **Check control files** in `controls/` and `products/*/controls/` for matching control IDs or titles that already map to this requirement.
+
+5. **Note product applicability** for each matched rule. Check the `identifiers` section of each rule.yml for `cce@<product>` entries (e.g., `cce@ocp4`, `cce@rhel9`). The product IDs after `@` correspond to subdirectory names under `products/`. This tells the user which products the rule applies to.
+
+6. **Present results** organized by match strength. For every rule, include a **Rationale** — a concise (1-2 sentence) explanation of why this rule satisfies or partially satisfies the requirement. Write the rationale so that a maintainer unfamiliar with the rule can understand the connection without reading the full rule.yml. Focus on *what the rule checks* and *how that maps to the requirement*.
+
+   **Strong matches** (title or template directly addresses the requirement):
+   - Rule ID, file path, title, severity
+   - Template type and key vars (if templated)
+   - Matching references (SRG, CIS, STIG, NIST)
+   - Product applicability (which products have CCE identifiers)
+   - Whether the rule has an automated template or is manual review only
+   - **Rationale:** Why this rule is a strong match for the requirement
+
+   **Partial matches** (related but not exact):
+   - Same fields as above
+   - **Rationale:** What aspect of the requirement this rule covers and what it does not
+
+   **Weak matches** (tangentially related):
+   - Rule ID, file path, title
+   - **Rationale:** Why it was included despite being tangential
+
+7. **Include a summary table** at the end mapping requirement aspects to rule IDs, so the user can quickly see coverage.
+
+8. **Always suggest a control structure** with a `notes` field that includes a concise rationale for each rule, explaining why it was included for this control. This helps maintainers understand the reasoning without needing to read every rule.yml. When no strong automated matches exist, say so clearly and use `status: partial` or `status: manual` as appropriate. Example:
+
+   ```yaml
+   - id: X.Y.Z
+     title: Control Title
+     status: automated
+     notes: |-
+         automated_rule_1 - Rationale for why this rule satisfies the control.
+         automated_rule_2 - Rationale for why this rule satisfies the control.
+     rules:
+         - automated_rule_1
+         - automated_rule_2
+   ```
+
+   For partial or manual controls, also include guidance for assessors:
+
+   ```yaml
+   - id: X.Y.Z
+     title: Control Title
+     status: partial
+     notes: |-
+         automated_rule_1 - Rationale for why this rule partially covers the control.
+         The remaining aspects of this control require manual verification: [manual steps].
+     rules:
+         - automated_rule_1
+   ```
+
+   When suggesting rules for partial/manual controls, only include rules that provide automated value. Omit rules that are themselves manual-only (no template, no automated check) unless they are the only matches available.
+
+9. **Rules can appear in multiple controls.** The build system handles this correctly. Each control should list the complete set of rules needed to satisfy it, even if some rules also appear in other controls. This ensures each control is self-contained and readers don't need to cross-reference other controls to understand coverage.
diff --git a/.claude/skills/manage-profile/SKILL.md b/.claude/skills/manage-profile/SKILL.md
new file mode 100644
index 000000000000..775f873fefb0
--- /dev/null
+++ b/.claude/skills/manage-profile/SKILL.md
@@ -0,0 +1,135 @@
+---
+disable-model-invocation: true
+---
+
+Create or update a versioned profile.
+
+Arguments: $ARGUMENTS
+
+Expected arguments: `<action> <profile_name> <product(s)> [version]`
+
+Actions:
+- `create` — Create a new versioned profile pair (versioned + unversioned)
+- `update` — Bump an existing profile to a new version
+
+For example:
+- `create cis ocp4 1.7.0`
+- `update cis ocp4 1.8.0`
+
+## Background: Profile Versioning Pattern
+
+This project uses a two-file versioning pattern for profiles (browse existing profiles under `products/<product>/profiles/` for examples):
+
+- **Versioned profile** (e.g., `cis-v1-7-0.profile`): Contains the actual `selections`, `metadata.version`, and all profile configuration. Users pin to this for a stable baseline.
+- **Unversioned profile** (e.g., `cis.profile`): Contains `extends: cis-v1-7-0` and no `selections` of its own. Users referencing this always get the latest version.
+
+When multiple products are specified (e.g., `ocp4,rhcos4`), both profile pairs are created/updated under their respective `products/<product>/profiles/` directories.
+
+---
+
+## Action: `create`
+
+### Step 1: Validate
+
+1. Parse the product list (comma-separated). Valid product IDs are subdirectory names under `products/`.
+2. Verify `products/<product>/profiles/` exists for each product.
+3. Check that the profile does not already exist. If it does, suggest using `update` instead.
+4. Convert the version to a filename-safe format by replacing dots with dashes (e.g., `2.0.0` → `v2-0-0`).
+
+### Step 2: Check for a Control File
+
+Check if a control file exists that matches the profile name. Control files live under `controls/` and `products/*/controls/`, typically named `<profile>_<product>.yml` or as a split directory with the same base name. If found:
+
+1. Read the control file's top-level YAML to check the `product` field.
+2. If the `product` field does not list all the products from the argument, warn the user and offer to update it. A control file needs all target products listed in its `product` field to work with each product's profile. Check existing multi-product control files for examples of this pattern.
+
+### Step 3: Show the Proposed Files
+
+For each product, show the two files that will be created:
+
+**Versioned profile** (`products/<product>/profiles/<name>-<version>.profile`):
+```yaml
+---
+documentation_complete: true
+
+title: '<Title> for <Product Full Name>'
+
+platform: <product>
+
+metadata:
+    version: <Version>
+
+description: |-
+    <Description text.>
+
+selections:
+    - <control_id>:all
+```
+
+**Unversioned profile** (`products/<product>/profiles/<name>.profile`):
+```yaml
+---
+documentation_complete: true
+
+title: '<Title> for <Product Full Name>'
+
+platform: <product>
+
+metadata:
+    version: <Version>
+
+description: |-
+    <Description text.>
+
+extends: <name>-<version>
+```
+
+Ask the user to confirm before creating.
+
+### Step 4: Apply
+
+Create all files for each product after approval.
+
+---
+
+## Action: `update`
+
+### Step 1: Validate
+
+1. Parse the product list.
+2. Locate the existing unversioned profile for each product at `products/<product>/profiles/<name>.profile`.
+3. Read the unversioned profile to find the current `extends` target (e.g., `cis-v1-7-0`).
+4. Read the current versioned profile to get its `selections` and other configuration.
+5. Convert the new version to filename-safe format (e.g., `2.1.0` → `v2-1-0`).
+
+If the unversioned profile doesn't use `extends`, warn the user that it doesn't follow the versioning pattern and offer to convert it.
+
+### Step 2: Show the Proposed Changes
+
+For each product, show what will happen:
+
+1. **New versioned profile** (`<name>-<new_version>.profile`): Created with the same `selections` as the current versioned profile (the user can modify selections afterward).
+2. **Previous versioned profile** (`<name>-<old_version>.profile`): Add `status: deprecated` to mark it as superseded.
+3. **Unversioned profile** (`<name>.profile`): Update `extends` to point to the new version and update `metadata.version`.
+
+Ask the user to confirm before applying.
+
+### Step 3: Apply
+
+After approval:
+
+1. Create the new versioned profile by copying the current versioned profile's content and updating `metadata.version`.
+2. Add `status: deprecated` to the previous versioned profile.
+3. Update the unversioned profile's `extends` field to reference the new versioned profile.
+4. Update the unversioned profile's `metadata.version` to the new version.
+5. Show the final state of all modified/created files.
+
+---
+
+## Notes
+
+- **Product full names** for titles/descriptions: Read the `full_name` field from `products/<product>/product.yml` for each product.
+- **Version format in filenames**: Replace dots with dashes and prefix with `v` (e.g., `2.0.0` → `v2-0-0`, `V2R3` → `v2r3`).
+- **Version format in metadata**: Use the version as provided by the user (e.g., `V2.0.0`, `V2R3`).
+- Always show the full proposed file contents before creating or modifying.
+- When updating, preserve all existing `selections`, `filter_rules`, variables, and other configuration from the current versioned profile.
diff --git a/.github/workflows/automatus-cs9.yaml b/.github/workflows/automatus-cs9.yaml
index 08e494a96134..3a56db1f7708 100644
--- a/.github/workflows/automatus-cs9.yaml
+++ b/.github/workflows/automatus-cs9.yaml
@@ -40,7 +40,7 @@ jobs:
       - name: Test if there are no content changes
         run: echo "CTF_OUTPUT_SIZE=$(stat --printf="%s" output.json)" >> $GITHUB_OUTPUT
         id: ctf
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
         with:
           name: output.json
@@ -58,7 +58,7 @@ jobs:
       - name: Build product
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
         run: ./build_product rhel9 --derivatives
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
         with:
           name: ${{ env.DATASTREAM }}
@@ -73,7 +73,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
       - name: Get cached CTF output
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v4
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v4
         id: get_ctf_output
         with:
           name: output.json
@@ -130,7 +130,7 @@ jobs:
         with:
           path: 'output.json'
           prop_path: 'ansible'
-      - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v4
+      - uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v4
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
         with:
           name: ${{ env.DATASTREAM }}
@@ -151,7 +151,7 @@ jobs:
         continue-on-error: true
       - name: Upload logs in case of failure
         if: ${{steps.bash.outputs.prop == 'True' && steps.check_results_bash.outcome == 'success' && steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         with:
           name: logs_bash
           path: logs_bash/
@@ -167,7 +167,7 @@ jobs:
         continue-on-error: true
       - name: Upload logs in case of failure
         if: ${{ steps.ansible.outputs.prop == 'True' && steps.check_results_ansible.outcome == 'success' && steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         with:
           name: logs_ansible
           path: logs_ansible/
diff --git a/.github/workflows/automatus-debian12.yaml b/.github/workflows/automatus-debian12.yaml
index 396b65549587..5632fdfba0fb 100644
--- a/.github/workflows/automatus-debian12.yaml
+++ b/.github/workflows/automatus-debian12.yaml
@@ -38,7 +38,7 @@ jobs:
       - name: Test if there are no content changes
         run: echo "CTF_OUTPUT_SIZE=$(stat --printf="%s" output.json)" >> $GITHUB_OUTPUT
         id: ctf
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
         with:
           name: output.json
@@ -65,7 +65,7 @@ jobs:
       - name: Build product
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
         run: ./build_product debian12
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
         with:
           name: ${{ env.DATASTREAM }}
@@ -80,7 +80,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
       - name: Get cached CTF output
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v4
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v4
         id: get_ctf_output
         with:
           name: output.json
@@ -146,7 +146,7 @@ jobs:
         with:
           path: 'output.json'
           prop_path: 'ansible'
-      - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v4
+      - uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v4
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
         with:
           name: ${{ env.DATASTREAM }}
@@ -167,7 +167,7 @@ jobs:
         continue-on-error: true
       - name: Upload logs in case of failure
         if: ${{steps.bash.outputs.prop == 'True' && steps.check_results_bash.outcome == 'success' && steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         with:
           name: logs_bash
           path: logs_bash/
@@ -183,7 +183,7 @@ jobs:
         continue-on-error: true
       - name: Upload logs in case of failure
         if: ${{ steps.ansible.outputs.prop == 'True' && steps.check_results_ansible.outcome == 'success' && steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         with:
           name: logs_ansible
           path: logs_ansible/
diff --git a/.github/workflows/automatus-sanity.yaml b/.github/workflows/automatus-sanity.yaml
index c5e958fb7d5f..a54fa84f19c9 100644
--- a/.github/workflows/automatus-sanity.yaml
+++ b/.github/workflows/automatus-sanity.yaml
@@ -22,7 +22,7 @@ jobs:
           fetch-depth: 0
       - name: Build product
         run: ./build_product fedora --debug
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         with:
           name: ${{ env.DATASTREAM }}
           path: build/${{ env.DATASTREAM }}
@@ -49,7 +49,7 @@ jobs:
           sudo chown root:root /usr/local/bin/oscap-ssh
           rm -f oscap-ssh
       - name: Get Datastream
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v4
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v4
         with:
           name: ${{ env.DATASTREAM }}
       - name: Check One Rule
diff --git a/.github/workflows/automatus-sle15.yaml b/.github/workflows/automatus-sle15.yaml
index a0d833cec24b..d9b4a40e2bd5 100644
--- a/.github/workflows/automatus-sle15.yaml
+++ b/.github/workflows/automatus-sle15.yaml
@@ -48,7 +48,7 @@ jobs:
       - name: Test if there are no content changes
         run: echo "CTF_OUTPUT_SIZE=$(stat --printf="%s" output.json)" >> $GITHUB_OUTPUT
         id: ctf
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
         with:
           name: output.json
@@ -66,7 +66,7 @@ jobs:
       - name: Build product
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
         run: ./build_product sle15
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
         with:
           name: ${{ env.DATASTREAM }}
@@ -81,7 +81,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
       - name: Get cached CTF output
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v4
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v4
         id: get_ctf_output
         with:
           name: output.json
@@ -138,7 +138,7 @@ jobs:
         with:
           path: 'output.json'
           prop_path: 'ansible'
-      - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v4
+      - uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v4
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
         with:
           name: ${{ env.DATASTREAM }}
@@ -159,7 +159,7 @@ jobs:
         continue-on-error: true
       - name: Upload logs in case of failure
         if: ${{steps.bash.outputs.prop == 'True' && steps.check_results_bash.outcome == 'success' && steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         with:
           name: logs_bash
           path: logs_bash/
@@ -175,7 +175,7 @@ jobs:
         continue-on-error: true
       - name: Upload logs in case of failure
         if: ${{ steps.ansible.outputs.prop == 'True' && steps.check_results_ansible.outcome == 'success' && steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         with:
           name: logs_ansible
           path: logs_ansible/
diff --git a/.github/workflows/automatus-ubi8.yaml b/.github/workflows/automatus-ubi8.yaml
index 411e2ea05700..79036463cb87 100644
--- a/.github/workflows/automatus-ubi8.yaml
+++ b/.github/workflows/automatus-ubi8.yaml
@@ -40,7 +40,7 @@ jobs:
       - name: Test if there are no content changes
         run: echo "CTF_OUTPUT_SIZE=$(stat --printf="%s" output.json)" >> $GITHUB_OUTPUT
         id: ctf
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
         with:
           name: output.json
@@ -58,7 +58,7 @@ jobs:
       - name: Build product
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
         run: ./build_product rhel8 --derivatives
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
         with:
           name: ${{ env.DATASTREAM }}
@@ -73,7 +73,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
       - name: Get cached CTF output
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v4
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v4
         id: get_ctf_output
         with:
           name: output.json
@@ -130,7 +130,7 @@ jobs:
         with:
           path: 'output.json'
           prop_path: 'ansible'
-      - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v4
+      - uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v4
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
         with:
           name: ${{ env.DATASTREAM }}
@@ -151,7 +151,7 @@ jobs:
         continue-on-error: true
       - name: Upload logs in case of failure
         if: ${{steps.bash.outputs.prop == 'True' && steps.check_results_bash.outcome == 'success' && steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         with:
           name: logs_bash
           path: logs_bash/
@@ -167,7 +167,7 @@ jobs:
         continue-on-error: true
       - name: Upload logs in case of failure
         if: ${{ steps.ansible.outputs.prop == 'True' && steps.check_results_ansible.outcome == 'success' && steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         with:
           name: logs_ansible
           path: logs_ansible/
diff --git a/.github/workflows/automatus-ubuntu2204.yaml b/.github/workflows/automatus-ubuntu2204.yaml
index e43f19b9b6b0..08edc1f8b6de 100644
--- a/.github/workflows/automatus-ubuntu2204.yaml
+++ b/.github/workflows/automatus-ubuntu2204.yaml
@@ -38,7 +38,7 @@ jobs:
       - name: Test if there are no content changes
         run: echo "CTF_OUTPUT_SIZE=$(stat --printf="%s" output.json)" >> $GITHUB_OUTPUT
         id: ctf
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
         with:
           name: output.json
@@ -65,7 +65,7 @@ jobs:
       - name: Build product
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
         run: ./build_product ubuntu2204
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
         with:
           name: ${{ env.DATASTREAM }}
@@ -80,7 +80,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
       - name: Get cached CTF output
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v4
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v4
         id: get_ctf_output
         with:
           name: output.json
@@ -146,7 +146,7 @@ jobs:
         with:
           path: 'output.json'
           prop_path: 'ansible'
-      - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v4
+      - uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v4
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
         with:
           name: ${{ env.DATASTREAM }}
@@ -167,7 +167,7 @@ jobs:
         continue-on-error: true
       - name: Upload logs in case of failure
         if: ${{steps.bash.outputs.prop == 'True' && steps.check_results_bash.outcome == 'success' && steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         with:
           name: logs_bash
           path: logs_bash/
@@ -183,7 +183,7 @@ jobs:
         continue-on-error: true
       - name: Upload logs in case of failure
         if: ${{ steps.ansible.outputs.prop == 'True' && steps.check_results_ansible.outcome == 'success' && steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         with:
           name: logs_ansible
           path: logs_ansible/
diff --git a/.github/workflows/automatus-ubuntu2404.yml b/.github/workflows/automatus-ubuntu2404.yml
index 95a264ffb007..c671289ba934 100644
--- a/.github/workflows/automatus-ubuntu2404.yml
+++ b/.github/workflows/automatus-ubuntu2404.yml
@@ -40,7 +40,7 @@ jobs:
       - name: Test if there are no content changes
         run: echo "CTF_OUTPUT_SIZE=$(stat --printf="%s" output.json)" >> $GITHUB_OUTPUT
         id: ctf
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
         with:
           name: output.json
@@ -58,7 +58,7 @@ jobs:
       - name: Build product
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
         run: ./build_product ubuntu2404 --datastream-only
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
         with:
           name: ${{ env.DATASTREAM }}
@@ -73,7 +73,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
       - name: Get cached CTF output
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v4
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v4
         id: get_ctf_output
         with:
           name: output.json
@@ -122,7 +122,7 @@ jobs:
         with:
           path: 'output.json'
           prop_path: 'ansible'
-      - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v4
+      - uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v4
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
         with:
           name: ${{ env.DATASTREAM }}
@@ -143,7 +143,7 @@ jobs:
         continue-on-error: true
       - name: Upload logs in case of failure
         if: ${{steps.bash.outputs.prop == 'True' && steps.check_results_bash.outcome == 'success' && steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         with:
           name: logs_bash
           path: logs_bash/
@@ -159,7 +159,7 @@ jobs:
         continue-on-error: true
       - name: Upload logs in case of failure
         if: ${{ steps.ansible.outputs.prop == 'True' && steps.check_results_ansible.outcome == 'success' && steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         with:
           name: logs_ansible
           path: logs_ansible/
diff --git a/.github/workflows/automatus.yaml b/.github/workflows/automatus.yaml
index ad3c7dcc319b..883604aa1f77 100644
--- a/.github/workflows/automatus.yaml
+++ b/.github/workflows/automatus.yaml
@@ -38,7 +38,7 @@ jobs:
       - name: Test if there are no content changes
         run: echo "CTF_OUTPUT_SIZE=$(stat --printf="%s" output.json)" >> $GITHUB_OUTPUT
         id: ctf
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
         with:
           name: output.json
@@ -56,7 +56,7 @@ jobs:
       - name: Build product
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
         run: ./build_product ${{steps.product.outputs.prop}} --datastream-only
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
         with:
           name: ssg-${{steps.product.outputs.prop}}-ds.xml
@@ -73,7 +73,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
       - name: Get cached CTF output
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v4
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v4
         id: get_ctf_output
         with:
           name: output.json
@@ -130,7 +130,7 @@ jobs:
         with:
           path: 'output.json'
           prop_path: 'ansible'
-      - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v4
+      - uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v4
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
         with:
           name: ssg-${{steps.product.outputs.prop}}-ds.xml
@@ -151,7 +151,7 @@ jobs:
         continue-on-error: true
       - name: Upload logs in case of failure
         if: ${{steps.bash.outputs.prop == 'True' && steps.check_results_bash.outcome == 'success' && steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         with:
           name: logs_bash
           path: logs_bash/
@@ -167,7 +167,7 @@ jobs:
         continue-on-error: true
       - name: Upload logs in case of failure
         if: ${{ steps.ansible.outputs.prop == 'True' && steps.check_results_ansible.outcome == 'success' && steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         with:
           name: logs_ansible
           path: logs_ansible/
diff --git a/.github/workflows/compare-ds-build.yml b/.github/workflows/compare-ds-build.yml
index 55eafa329eca..a57473e1bf4d 100644
--- a/.github/workflows/compare-ds-build.yml
+++ b/.github/workflows/compare-ds-build.yml
@@ -61,7 +61,7 @@ jobs:
                     tar -czvf artifacts.tar.gz artifacts
             -   name: Upload artifacts
                 if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
-                uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+                uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
                 with:
                     name: pr-artifacts-${{ github.event.pull_request.head.sha }}
                     retention-days: 1
@@ -74,7 +74,7 @@ jobs:
                     echo "${{ github.base_ref }}" > pr-info/base-branch.txt
                     echo "${{ steps.fork_point.outputs.FORK_POINT }}" > pr-info/fork-point.txt
             -   name: Upload PR info
-                uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+                uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
                 with:
                     name: pr-info
                     retention-days: 1
diff --git a/.github/workflows/compare-ds.yaml b/.github/workflows/compare-ds.yaml
index bb4b4041b990..dc30f49ffc4d 100644
--- a/.github/workflows/compare-ds.yaml
+++ b/.github/workflows/compare-ds.yaml
@@ -20,7 +20,7 @@ jobs:
       - name: Install deps python
         run: pip install gitpython xmldiff
       - name: Download PR info
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           run-id: ${{ github.event.workflow_run.id }}
@@ -72,7 +72,7 @@ jobs:
           prop_path: 'product'
       - name: Download built product ${{ steps.pr_info.outputs.base_branch }} (${{ steps.pr_info.outputs.fork_point }})
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
         with:
             github-token: ${{ secrets.GITHUB_TOKEN }}
             name: pr-artifacts-${{ github.event.workflow_run.head_sha }}
@@ -86,7 +86,7 @@ jobs:
         run: ./build_product ${{steps.product.outputs.prop}} --datastream-only
       - name: Compare datastreams
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
-        run: utils/compare_ds.py pr_artifacts/artifacts/ssg-${{steps.product.outputs.prop}}-ds.xml build/ssg-${{steps.product.outputs.prop}}-ds.xml | tee diff.log
+        run: utils/compare_ds.py build/ssg-${{steps.product.outputs.prop}}-ds.xml pr_artifacts/artifacts/ssg-${{steps.product.outputs.prop}}-ds.xml | tee diff.log
         env:
           PYTHONPATH: ${{ github.workspace }}
       - name: Test if there are datastream changes
diff --git a/.github/workflows/gate-lint-ansible-roles.yaml b/.github/workflows/gate-lint-ansible-roles.yaml
index 4677e8c16fd9..dd540cb2beed 100644
--- a/.github/workflows/gate-lint-ansible-roles.yaml
+++ b/.github/workflows/gate-lint-ansible-roles.yaml
@@ -20,7 +20,7 @@ jobs:
         run: cmake -DSSG_PRODUCT_RHEL8=ON -DSSG_PRODUCT_RHEL9=ON -DSSG_PRODUCT_RHEL10=ON -G Ninja ..
         working-directory: ./build
       - name: Build
-        run: ninja -j2 rhel10-profile-playbooks  rhel9-profile-playbooks rhel8-profile-playbooks
+        run: ninja -j$(nproc) rhel10-profile-playbooks rhel9-profile-playbooks rhel8-profile-playbooks
         working-directory: ./build
       - name: Build Ansible Roles
         run: PYTHONPATH=. python3 utils/ansible_playbook_to_role.py --build-playbooks-dir ./build/ansible/ --dry-run ./build/ansible_roles
diff --git a/.github/workflows/gate.yaml b/.github/workflows/gate.yaml
index ac71f9dcd90c..ed304455555f 100644
--- a/.github/workflows/gate.yaml
+++ b/.github/workflows/gate.yaml
@@ -37,7 +37,7 @@ jobs:
       - name: Build
         run: ./build_product sle12 sle15
       - name: Test
-        run: ctest -j2 --output-on-failure -E unique-stigids
+        run: ctest -j$(nproc) --output-on-failure -E unique-stigids
         working-directory: ./build
 
   validate-suse:
@@ -55,7 +55,7 @@ jobs:
         env:
           ADDITIONAL_CMAKE_OPTIONS: "-DSSG_OVAL_SCHEMATRON_VALIDATION_ENABLED=OFF"
       - name: Test
-        run: ctest -j2 --output-on-failure -E unique-stigids
+        run: ctest -j$(nproc) --output-on-failure -E unique-stigids
         working-directory: ./build
 
   validate-debian:
@@ -81,7 +81,7 @@ jobs:
           ./build_product debian11 debian12 debian13
       - name: Test
         working-directory: ./build
-        run: ctest -j2 --output-on-failure -E unique-stigids
+        run: ctest -j$(nproc) --output-on-failure -E unique-stigids
 
   validate-ubuntu-22-04:
     name: Build, Test on Ubuntu 22.04
@@ -99,7 +99,7 @@ jobs:
         run: |-
           ./build_product ubuntu2204
       - name: Test
-        run: ctest -j2 --output-on-failure -E unique-stigids
+        run: ctest -j$(nproc) --output-on-failure -E unique-stigids
         working-directory: ./build
 
   validate-ubuntu-24-04:
@@ -118,7 +118,7 @@ jobs:
         run: |-
           ./build_product ubuntu2404
       - name: Test
-        run: ctest -j2 --output-on-failure -E unique-stigids
+        run: ctest -j$(nproc) --output-on-failure -E unique-stigids
         working-directory: ./build
 
   validate-fedora-rawhide:
@@ -141,5 +141,5 @@ jobs:
           env:
             ADDITIONAL_CMAKE_OPTIONS: "-DSSG_OVAL_SCHEMATRON_VALIDATION_ENABLED=OFF"
       -   name: Test
-          run: ctest -j2 --output-on-failure -E unique-stigids
+          run: ctest -j$(nproc) --output-on-failure -E unique-stigids
           working-directory: ./build
diff --git a/.github/workflows/gate_fedora.yml b/.github/workflows/gate_fedora.yml
index 22c686c8f9d4..27ddc8cdf3d0 100644
--- a/.github/workflows/gate_fedora.yml
+++ b/.github/workflows/gate_fedora.yml
@@ -24,7 +24,7 @@ jobs:
                 run: pip install pcre2==0.4.0 -r requirements.txt -r test-requirements.txt
             -   name: Build
                 run: |-
-                    ./build_product -j2 \
+                    ./build_product -j$(nproc) \
                         al2023 \
                         alinux2 \
                         alinux3 \
@@ -69,16 +69,9 @@ jobs:
                 unzip /__w/content/content/old_release.zip -d /__w/content/content/old_release
                 mv /__w/content/content/old_release/*/* /__w/content/content/old_release/
             -   name: Test
-                run: ctest -j2 --output-on-failure -E unique-stigids
+                run: ctest -j$(nproc) --output-on-failure -E unique-stigids
                 working-directory: ./build
             -   name: "Set git safe directory, ref: https://github.com/actions/checkout/issues/760"
                 run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
-            -   name: Upload coverage to Qlty  # Requires: git package
-                if: ${{ github.repository == 'ComplianceAsCode/content' }}
-                uses: qltysh/qlty-action/coverage@a19242102d17e497f437d7466aa01b528537e899 # v2.2.0
-                with:
-                    token: qltcp_kdIPsqNZzW5rYoxq
-                    files: build/tests/coverage.xml
-                    strip-prefix: /__w/content/content
             -   name: Validate gitmailmap
                 run: grep -E "\S" .mailmap | grep -Ev '^#' | git check-mailmap --stdin
diff --git a/.github/workflows/gh-pages.yaml b/.github/workflows/gh-pages.yaml
index b18fbe5a6814..145ef3168fe9 100644
--- a/.github/workflows/gh-pages.yaml
+++ b/.github/workflows/gh-pages.yaml
@@ -30,13 +30,13 @@ jobs:
         run: cmake .. -G Ninja -DCMAKE_BUILD_TYPE=Debug
         working-directory: ./build
       - name: Build Guides and Mapping Tables
-        run: ninja -j2
+        run: ninja -j$(nproc)
         working-directory: ./build
       - name: Build Statistics
-        run: ninja html-stats html-profile-stats -j2
+        run: ninja html-stats html-profile-stats -j$(nproc)
         working-directory: ./build
       - name: Render Policies (Using control files)
-        run: ninja render-policies -j2
+        run: ninja render-policies -j$(nproc)
         working-directory: ./build
       - name: Generate Prometheus Metrics
         run: utils/controleval_metrics.py prometheus -p fedora ocp4 rhcos4 rhel10 rhel9 rhel8 sle12 sle15 -f ./build/policies_metrics
@@ -63,7 +63,7 @@ jobs:
           git-config-name: openscap-ci
           git-config-email: openscap-ci@gmail.com
       - name: Upload artifact if the event is pull request
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         if: ${{ github.event_name == 'pull_request' }}
         with:
           name: built-content
diff --git a/.github/workflows/nightly_build.yml b/.github/workflows/nightly_build.yml
index be4ec6457e5f..26b58412d74a 100644
--- a/.github/workflows/nightly_build.yml
+++ b/.github/workflows/nightly_build.yml
@@ -20,19 +20,19 @@ jobs:
                 run: cmake -G Ninja ..
                 working-directory: ./build
             -   name: Build All
-                run: ninja -j2 all
+                run: ninja -j$(nproc) all
                 working-directory: ./build
             -   name: Build ZIP
-                run: ninja -j2 zipfile
+                run: ninja -j$(nproc) zipfile
                 working-directory: ./build
             -   name: Test
-                run: ctest -j2 --output-on-failure -E linkchecker
+                run: ctest -j$(nproc) --output-on-failure -E linkchecker
                 working-directory: ./build
             -   name: Build Package Source
-                run: ninja -j2 package_source
+                run: ninja -j$(nproc) package_source
                 working-directory: ./build
             -   name: 'Upload Artifact'
-                uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+                uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
                 with:
                   name: Nightly Build
                   path: |
diff --git a/.github/workflows/ocp-test-profiles.yaml b/.github/workflows/ocp-test-profiles.yaml
index d294af997921..5da0a67da393 100644
--- a/.github/workflows/ocp-test-profiles.yaml
+++ b/.github/workflows/ocp-test-profiles.yaml
@@ -40,7 +40,7 @@ jobs:
       - name: Test if there are no content changes
         run: echo "CTF_OUTPUT_SIZE=$(stat --printf="%s" ctf-output.json)" >> $GITHUB_OUTPUT
         id: ctf
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         if: ${{ steps.ctf.outputs.CTF_OUTPUT_SIZE != '0' }}
         with:
           name: ctf-output
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 71bec17c9275..c42b14e96f7d 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -19,16 +19,16 @@ jobs:
         run: cmake ..
         working-directory: ./build
       - name: Build All
-        run: make -j2 all
+        run: make -j$(nproc) all
         working-directory: ./build
       - name: Build ZIP
-        run: make -j2 zipfile
+        run: make -j$(nproc) zipfile
         working-directory: ./build
       - name: Test
-        run: ctest -j2 --output-on-failure -E linkchecker
+        run: ctest -j$(nproc) --output-on-failure -E linkchecker
         working-directory: ./build
       - name: Build Package Source
-        run: make -j2 package_source
+        run: make -j$(nproc) package_source
         working-directory: ./build
       - name: Set Version
         id: set_version
@@ -39,7 +39,7 @@ jobs:
           GITHUB_REF: ${{ github.ref }}
       - name: Build Changelog
         id: build_changelog
-        uses: mikepenz/release-changelog-builder-action@6faf020194b7c8853f9e55c4fd92e40b02122a04 # v4
+        uses: mikepenz/release-changelog-builder-action@a34a8009a9588bb86b02a873cf592440e96a5da8 # v4
         with:
           configuration: .github/workflows/release-changelog.json
         env:
diff --git a/.github/workflows/srg-mapping-table.yaml b/.github/workflows/srg-mapping-table.yaml
index 9a53ef550953..a61ee372cbb1 100644
--- a/.github/workflows/srg-mapping-table.yaml
+++ b/.github/workflows/srg-mapping-table.yaml
@@ -30,7 +30,7 @@ jobs:
         run: cmake .. -G Ninja
         working-directory: ./build
       - name: Build
-        run: ninja -j2 rhel10 rhel9 ocp4
+        run: ninja -j$(nproc) rhel10 rhel9 ocp4
         working-directory: ./build
       - name: Build rule dir json
         run: python3 utils/rule_dir_json.py
@@ -62,33 +62,33 @@ jobs:
         run: python3 utils/create_srg_export.py -c controls/srg_gpos.yml -p rhel10 -m shared/references/disa-os-srg-v3r2.xml --out-format html --output $PAGES_DIR/srg-mapping-rhel10.html
         env:
           PYTHONPATH: ${{ github.workspace }}
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         if: ${{ github.event_name == 'pull_request' }}
         with:
           name: srg-mapping-rhel9.xlsx
           path: ${{ env.PAGES_DIR }}/srg-mapping-rhel9.xlsx
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         if: ${{ github.event_name == 'pull_request' }}
         with:
           name: srg-mapping-rhel9.html
           path: ${{ env.PAGES_DIR }}/srg-mapping-rhel9.html
 
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         if: ${{ github.event_name == 'pull_request' }}
         with:
           name: srg-mapping-rhel10.xlsx
           path: ${{ env.PAGES_DIR }}/srg-mapping-rhel10.xlsx
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         if: ${{ github.event_name == 'pull_request' }}
         with:
           name: srg-mapping-rhel10.html
           path: ${{ env.PAGES_DIR }}/srg-mapping-rhel10.html
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         if: ${{ github.event_name == 'pull_request' }}
         with:
           name: srg-mapping-ocp4.xlsx
           path: ${{ env.PAGES_DIR }}/srg-mapping-ocp4.xlsx
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4
         if: ${{ github.event_name == 'pull_request' }}
         with:
           name: srg-mapping-ocp4.html
diff --git a/.github/workflows/stabilize.yaml b/.github/workflows/stabilize.yaml
index ca18e3a388c4..57a80b63e741 100644
--- a/.github/workflows/stabilize.yaml
+++ b/.github/workflows/stabilize.yaml
@@ -24,7 +24,7 @@ jobs:
         run: cmake -DSSG_OVAL_SCHEMATRON_VALIDATION_ENABLED=OFF -DANSIBLE_CHECKS=ON -DENABLE_SCAPVAL13=ON -DSCAPVAL_PATH='/opt/scapval/SCAP-Content-Validation-Tool-1.3.5/scapval-1.3.5.jar' ..
         working-directory: ./build
       - name: Build All
-        run: make -j2 all
+        run: make -j$(nproc) all
         working-directory: ./build
       - name: Get SCAPVAL
         run: wget $SCAPVAL_URL/$SCAPVAL_FILENAME.zip
@@ -32,12 +32,12 @@ jobs:
         run: mkdir -p /opt/scapval/ && unar $SCAPVAL_FILENAME.zip -o /opt/scapval/
       - name: Run SCAPVal
         # Runs SCAPVal on all built datastream
-        run: ctest -j2 -R scapval --output-on-failure
+        run: ctest -j$(nproc) -R scapval --output-on-failure
       - name: Lint Check
         # Performs ansible-lint and yamllint checks on generated ansible playbooks
-        run: ctest -j2 -R ansible-playbook --output-on-failure
+        run: ctest -j$(nproc) -R ansible-playbook --output-on-failure
         working-directory: ./build
       - name: Link Check
         # Performs linkcheck across all build tables and html guides to ensure there are no broken references.
-        run: ctest -j2 -R linkchecker --output-on-failure
+        run: ctest -j$(nproc) -R linkchecker --output-on-failure
         working-directory: ./build
diff --git a/.github/workflows/sync-cac-oscal.yml b/.github/workflows/sync-cac-oscal.yml
index d1b03ec3167a..b79b752ccb68 100644
--- a/.github/workflows/sync-cac-oscal.yml
+++ b/.github/workflows/sync-cac-oscal.yml
@@ -73,7 +73,7 @@ jobs:
       # Step 6: Get changed files and detect updates
       - name: Get changed files
         if: ${{ env.SKIP == 'false' }}
-        uses: tj-actions/changed-files@8cba46e29c11878d930bca7870bb54394d3e8b21 # v47.0.2
+        uses: tj-actions/changed-files@22103cc46bda19c2b464ffe86db46df6922fd323 # v47.0.5
         id: changed-files
         with:
           path: "cac-content"
diff --git a/.gitignore b/.gitignore
index cafff35ee5ea..14087bb896ca 100644
--- a/.gitignore
+++ b/.gitignore
@@ -82,3 +82,9 @@ coverage.xml
 
 # Trestle specfic
 shared/references/oscal/.trestle/cache
+
+# Ignore user-specific CLAUDE preferences
+CLAUDE.local.md
+
+# Ignore BAS CMakeFiles
+products/bascontrol22d4/CMakeFiles/
diff --git a/.packit.yaml b/.packit.yaml
index 8d456d18d276..9b9987caac16 100644
--- a/.packit.yaml
+++ b/.packit.yaml
@@ -23,138 +23,32 @@ jobs:
   trigger: commit
   branch: "gh-readonly-queue/.*"
 
-- &test-static-checks
+- &contest-oscap
   job: tests
   trigger: pull_request
-  fmf_path: tests/tmt
-  identifier: /static-checks
-  tmt_plan: /plans/contest/static-checks$
+  fmf_url: https://github.com/RHSecurityCompliance/contest.git
+  fmf_ref: main
+  tmt_plan: /plans/upstream-parallel/oscap
+  identifier: contest-oscap
   targets:
     centos-stream-8: {}
     centos-stream-9: {}
     centos-stream-10: {}
+  tf_extra_params:
+    settings:
+      pipeline:
+        parallel-limit: 32
 
-# when modifying this, modify also tests/tmt-plans/
-
-- <<: *test-static-checks
-  identifier: /rpmbuild-ctest-fedora
-  tmt_plan: /plans/contest/rpmbuild-ctest-fedora$
-  targets:
-    fedora-all: {}
-- <<: *test-static-checks
-  identifier: /hardening/host-os/ansible/anssi_bp28_high
-  tmt_plan: /plans/contest/hardening/host-os/ansible/anssi_bp28_high$
-- <<: *test-static-checks
-  identifier: /hardening/host-os/ansible/bsi
-  tmt_plan: /plans/contest/hardening/host-os/ansible/bsi$
-  targets:
-    centos-stream-9: {}
-    centos-stream-10: {}
-- <<: *test-static-checks
-  identifier: /hardening/host-os/ansible/ccn_advanced
-  tmt_plan: /plans/contest/hardening/host-os/ansible/ccn_advanced$
-  targets:
-    centos-stream-9: {}
-- <<: *test-static-checks
-  identifier: /hardening/host-os/ansible/cis
-  tmt_plan: /plans/contest/hardening/host-os/ansible/cis$
-- <<: *test-static-checks
-  identifier: /hardening/host-os/ansible/cis_server_l1
-  tmt_plan: /plans/contest/hardening/host-os/ansible/cis_server_l1$
-- <<: *test-static-checks
-  identifier: /hardening/host-os/ansible/cis_workstation_l1
-  tmt_plan: /plans/contest/hardening/host-os/ansible/cis_workstation_l1$
-- <<: *test-static-checks
-  identifier: /hardening/host-os/ansible/cis_workstation_l2
-  tmt_plan: /plans/contest/hardening/host-os/ansible/cis_workstation_l2$
-- <<: *test-static-checks
-  identifier: /hardening/host-os/ansible/cui
-  tmt_plan: /plans/contest/hardening/host-os/ansible/cui$
-  targets:
-    centos-stream-8: {}
-    centos-stream-9: {}
-- <<: *test-static-checks
-  identifier: /hardening/host-os/ansible/e8
-  tmt_plan: /plans/contest/hardening/host-os/ansible/e8$
-- <<: *test-static-checks
-  identifier: /hardening/host-os/ansible/hipaa
-  tmt_plan: /plans/contest/hardening/host-os/ansible/hipaa$
-- <<: *test-static-checks
-  identifier: /hardening/host-os/ansible/ism_o
-  tmt_plan: /plans/contest/hardening/host-os/ansible/ism_o$
-- <<: *test-static-checks
-  identifier: /hardening/host-os/ansible/ism_o_top_secret
-  tmt_plan: /plans/contest/hardening/host-os/ansible/ism_o_top_secret$
-  targets:
-    centos-stream-10: {}
-- <<: *test-static-checks
-  identifier: /hardening/host-os/ansible/ospp
-  tmt_plan: /plans/contest/hardening/host-os/ansible/ospp$
-- <<: *test-static-checks
-  identifier: /hardening/host-os/ansible/pci-dss
-  tmt_plan: /plans/contest/hardening/host-os/ansible/pci-dss$
-- <<: *test-static-checks
-  identifier: /hardening/host-os/ansible/stig
-  tmt_plan: /plans/contest/hardening/host-os/ansible/stig$
+- <<: *contest-oscap
+  tmt_plan: /plans/upstream-parallel/ansible
+  identifier: contest-ansible
 
-- <<: *test-static-checks
-  identifier: /hardening/host-os/oscap/anssi_bp28_high
-  tmt_plan: /plans/contest/hardening/host-os/oscap/anssi_bp28_high$
-- <<: *test-static-checks
-  identifier: /hardening/host-os/oscap/bsi
-  tmt_plan: /plans/contest/hardening/host-os/oscap/bsi$
-  targets:
-    centos-stream-9: {}
-    centos-stream-10: {}
-- <<: *test-static-checks
-  identifier: /hardening/host-os/oscap/ccn_advanced
-  tmt_plan: /plans/contest/hardening/host-os/oscap/ccn_advanced$
-  targets:
-    centos-stream-9: {}
-- <<: *test-static-checks
-  identifier: /hardening/host-os/oscap/cis
-  tmt_plan: /plans/contest/hardening/host-os/oscap/cis$
-- <<: *test-static-checks
-  identifier: /hardening/host-os/oscap/cis_server_l1
-  tmt_plan: /plans/contest/hardening/host-os/oscap/cis_server_l1$
-- <<: *test-static-checks
-  identifier: /hardening/host-os/oscap/cis_workstation_l1
-  tmt_plan: /plans/contest/hardening/host-os/oscap/cis_workstation_l1$
-- <<: *test-static-checks
-  identifier: /hardening/host-os/oscap/cis_workstation_l2
-  tmt_plan: /plans/contest/hardening/host-os/oscap/cis_workstation_l2$
-- <<: *test-static-checks
-  identifier: /hardening/host-os/oscap/cui
-  tmt_plan: /plans/contest/hardening/host-os/oscap/cui$
-  targets:
-    centos-stream-8: {}
-    centos-stream-9: {}
-- <<: *test-static-checks
-  identifier: /hardening/host-os/oscap/e8
-  tmt_plan: /plans/contest/hardening/host-os/oscap/e8$
-- <<: *test-static-checks
-  identifier: /hardening/host-os/oscap/hipaa
-  tmt_plan: /plans/contest/hardening/host-os/oscap/hipaa$
-- <<: *test-static-checks
-  identifier: /hardening/host-os/oscap/ism_o
-  tmt_plan: /plans/contest/hardening/host-os/oscap/ism_o$
-- <<: *test-static-checks
-  identifier: /hardening/host-os/oscap/ism_o_top_secret
-  tmt_plan: /plans/contest/hardening/host-os/oscap/ism_o_top_secret$
-  targets:
-    centos-stream-10: {}
-- <<: *test-static-checks
-  identifier: /hardening/host-os/oscap/ospp
-  tmt_plan: /plans/contest/hardening/host-os/oscap/ospp$
-- <<: *test-static-checks
-  identifier: /hardening/host-os/oscap/pci-dss
-  tmt_plan: /plans/contest/hardening/host-os/oscap/pci-dss$
-- <<: *test-static-checks
-  identifier: /hardening/host-os/oscap/stig
-  tmt_plan: /plans/contest/hardening/host-os/oscap/stig$
+# when modifying anything below, modify also tests/tmt/
 
-- <<: *test-static-checks
+- job: tests
+  trigger: pull_request
+  fmf_path: tests/tmt
+  tmt_plan: /fedora-cis/plan$
   identifier: fedora-cis
-  tmt_plan: /plans/fedora-cis$
   targets:
     fedora-all: {}
diff --git a/CMakeLists.txt b/CMakeLists.txt
index 48b206911bb3..4f66e2c03277 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -33,7 +33,7 @@ include(SSGCommon)
 # Define Version values
 set(SSG_MAJOR_VERSION 0)
 set(SSG_MINOR_VERSION 1)
-set(SSG_PATCH_VERSION 80)
+set(SSG_PATCH_VERSION 81)
 set(SSG_VERSION "${SSG_MAJOR_VERSION}.${SSG_MINOR_VERSION}.${SSG_PATCH_VERSION}")
 
 set(SSG_VENDOR "ssgproject" CACHE STRING "Specify the XCCDF 1.2 vendor string.")
@@ -89,6 +89,7 @@ option(SSG_PRODUCT_ALINUX3 "If enabled, the Alibaba Cloud Linux 3 SCAP content w
 option(SSG_PRODUCT_ALMALINUX9 "If enabled, the AlmaLinux OS 9 SCAP content will be built" ${SSG_PRODUCT_DEFAULT})
 option(SSG_PRODUCT_ANOLIS8 "If enabled, the Anolis OS 8 SCAP content will be built" ${SSG_PRODUCT_DEFAULT})
 option(SSG_PRODUCT_ANOLIS23 "If enabled, the Anolis OS 23 SCAP content will be built" ${SSG_PRODUCT_DEFAULT})
+option(SSG_PRODUCT_BASCONTROL22D4 "If enabled, the Contemporary Controls BAScontrol22D 4 SCAP content will be built" ${SSG_PRODUCT_DEFAULT})
 option(SSG_PRODUCT_DEBIAN11 "If enabled, the Debian 11 SCAP content will be built" ${SSG_PRODUCT_DEFAULT})
 option(SSG_PRODUCT_DEBIAN12 "If enabled, the Debian 12 SCAP content will be built" ${SSG_PRODUCT_DEFAULT})
 option(SSG_PRODUCT_DEBIAN13 "If enabled, the Debian 13 SCAP content will be built" ${SSG_PRODUCT_DEFAULT})
@@ -326,6 +327,7 @@ message(STATUS "Alibaba Cloud Linux 3: ${SSG_PRODUCT_ALINUX3}")
 message(STATUS "AlmaLinux OS 9: ${SSG_PRODUCT_ALMALINUX9}")
 message(STATUS "Anolis OS 8: ${SSG_PRODUCT_ANOLIS8}")
 message(STATUS "Anolis OS 23: ${SSG_PRODUCT_ANOLIS23}")
+message(STATUS "Contemporary Controls BAScontrol22D 4: ${SSG_PRODUCT_BASCONTROL22D4}")
 message(STATUS "Debian 11: ${SSG_PRODUCT_DEBIAN11}")
 message(STATUS "Debian 12: ${SSG_PRODUCT_DEBIAN12}")
 message(STATUS "Debian 13: ${SSG_PRODUCT_DEBIAN13}")
@@ -347,9 +349,9 @@ message(STATUS "RHEL 8: ${SSG_PRODUCT_RHEL8}")
 message(STATUS "RHEL 9: ${SSG_PRODUCT_RHEL9}")
 message(STATUS "RHEL 10: ${SSG_PRODUCT_RHEL10}")
 message(STATUS "RHV 4: ${SSG_PRODUCT_RHV4}")
-message(STATUS "SUSE 12: ${SSG_PRODUCT_SLE12}")
-message(STATUS "SUSE 15: ${SSG_PRODUCT_SLE15}")
-message(STATUS "SUSE 16: ${SSG_PRODUCT_SLE16}")
+message(STATUS "SLES 12: ${SSG_PRODUCT_SLE12}")
+message(STATUS "SLES 15: ${SSG_PRODUCT_SLE15}")
+message(STATUS "SLES 16: ${SSG_PRODUCT_SLE16}")
 message(STATUS "SLE Micro 5: ${SSG_PRODUCT_SLMICRO5}")
 message(STATUS "SLE Micro 6: ${SSG_PRODUCT_SLMICRO6}")
 message(STATUS "TencentOS Server 4: ${SSG_PRODUCT_TENCENTOS4}")
@@ -397,6 +399,9 @@ endif()
 if(SSG_PRODUCT_ANOLIS23)
     add_subdirectory("products/anolis23" "anolis23")
 endif()
+#if(SSG_PRODUCT_BASCONTROL22D4)
+#    add_subdirectory("products/bascontrol22d4" "bascontrol22d4")
+#endif()
 if(SSG_PRODUCT_DEBIAN11)
     add_subdirectory("products/debian11" "debian11")
 endif()
diff --git a/Contributors.md b/Contributors.md
index 55250d73f1a4..101b83176b2f 100644
--- a/Contributors.md
+++ b/Contributors.md
@@ -1,5 +1,5 @@
 <!---This file is generated using the contributors.py script. DO NOT MANUALLY EDIT!!!!
-Last Modified: 2025-11-20 08:44 UTC
+Last Modified: 2026-02-16 16:01 UTC
 --->
 
 The following people have contributed to the SCAP Security Guide project
@@ -73,6 +73,7 @@ The following people have contributed to the SCAP Security Guide project
 * cyarbrough76 <42849651+cyarbrough76@users.noreply.github.com>
 * Maura Dailey <maura@eclipse.ncsc.mil>
 * Benjamin Deering <ben_deering@jeepingben.net>
+* Shane Dell <shanedell100@gmail.com>
 * Klaas Demter <demter@atix.de>
 * denknorr <dennis.knorr@suse.com>
 * dhanushkar-wso2 <dhanushkar@wso2.com>
@@ -82,6 +83,7 @@ The following people have contributed to the SCAP Security Guide project
 * Marco De Donno <mdedonno1337@gmail.com>
 * dperrone <dperrone@redhat.com>
 * drax <applezip@gmail.com>
+* Qingmin Duanmu <qduanmu@redhat.com>
 * Sebastian Dunne <sdunne@redhat.com>
 * François Duthilleul <francoisduthilleul@gmail.com>
 * Greg Elin <gregelin@gitmachines.com>
@@ -91,6 +93,8 @@ The following people have contributed to the SCAP Security Guide project
 * Evelyn <evansvevelyn@gmail.com>
 * Alexis Facques <alexis.facques@mythalesgroup.io>
 * Jan Fader <jan.fader@web.de>
+* felixmarch <felixmarch@users.noreply.github.com>
+* Asser Schrøder Femø <asser@asser.org>
 * Henry Finucane <hfinucane@zscaler.com>
 * Leah Fisher <lfisher047@gmail.com>
 * Marco Fortina <marco_fortina@hotmail.it>
@@ -135,6 +139,7 @@ The following people have contributed to the SCAP Security Guide project
 * Simon John <sjohn@tuxcare.com>
 * Hunter Jones <hjones2199@gmail.com>
 * Jono <jono@ubuntu-18.localdomain>
+* julius.ish <julius.ish@zetier.com>
 * justchris1 <justchris1@justchris1.email>
 * Kacper <kacper@kacper.se>
 * Kai Kang <kai.kang@windriver.com>
@@ -303,6 +308,7 @@ The following people have contributed to the SCAP Security Guide project
 * Nico Truzzolino <nico.truzzolino@gmx.de>
 * Brian Turek <brian.turek@gmail.com>
 * Matěj Týč <matyc@redhat.com>
+* Jörgen Uhr <jorgen.uhr@sitevision.se>
 * VadimDor <29509093+VadimDor@users.noreply.github.com>
 * Trevor Vaughan <tvaughan@onyxpoint.com>
 * vtrubovics <82443408+vtrubovics@users.noreply.github.com>
diff --git a/Contributors.xml b/Contributors.xml
index edbff6a8b209..4ddf06841137 100644
--- a/Contributors.xml
+++ b/Contributors.xml
@@ -1,5 +1,5 @@
 <!--This file is generated using the contributors.py script. DO NOT MANUALLY EDIT!!!!
-Last Modified: 2025-11-20 08:44 UTC
+Last Modified: 2026-02-16 16:01 UTC
 -->
 
 <text>
@@ -71,6 +71,7 @@ Last Modified: 2025-11-20 08:44 UTC
 <contributor>cyarbrough76 &lt;42849651+cyarbrough76@users.noreply.github.com&gt;</contributor>
 <contributor>Maura Dailey &lt;maura@eclipse.ncsc.mil&gt;</contributor>
 <contributor>Benjamin Deering &lt;ben_deering@jeepingben.net&gt;</contributor>
+<contributor>Shane Dell &lt;shanedell100@gmail.com&gt;</contributor>
 <contributor>Klaas Demter &lt;demter@atix.de&gt;</contributor>
 <contributor>denknorr &lt;dennis.knorr@suse.com&gt;</contributor>
 <contributor>dhanushkar-wso2 &lt;dhanushkar@wso2.com&gt;</contributor>
@@ -80,6 +81,7 @@ Last Modified: 2025-11-20 08:44 UTC
 <contributor>Marco De Donno &lt;mdedonno1337@gmail.com&gt;</contributor>
 <contributor>dperrone &lt;dperrone@redhat.com&gt;</contributor>
 <contributor>drax &lt;applezip@gmail.com&gt;</contributor>
+<contributor>Qingmin Duanmu &lt;qduanmu@redhat.com&gt;</contributor>
 <contributor>Sebastian Dunne &lt;sdunne@redhat.com&gt;</contributor>
 <contributor>François Duthilleul &lt;francoisduthilleul@gmail.com&gt;</contributor>
 <contributor>Greg Elin &lt;gregelin@gitmachines.com&gt;</contributor>
@@ -89,6 +91,8 @@ Last Modified: 2025-11-20 08:44 UTC
 <contributor>Evelyn &lt;evansvevelyn@gmail.com&gt;</contributor>
 <contributor>Alexis Facques &lt;alexis.facques@mythalesgroup.io&gt;</contributor>
 <contributor>Jan Fader &lt;jan.fader@web.de&gt;</contributor>
+<contributor>felixmarch &lt;felixmarch@users.noreply.github.com&gt;</contributor>
+<contributor>Asser Schrøder Femø &lt;asser@asser.org&gt;</contributor>
 <contributor>Henry Finucane &lt;hfinucane@zscaler.com&gt;</contributor>
 <contributor>Leah Fisher &lt;lfisher047@gmail.com&gt;</contributor>
 <contributor>Marco Fortina &lt;marco_fortina@hotmail.it&gt;</contributor>
@@ -133,6 +137,7 @@ Last Modified: 2025-11-20 08:44 UTC
 <contributor>Simon John &lt;sjohn@tuxcare.com&gt;</contributor>
 <contributor>Hunter Jones &lt;hjones2199@gmail.com&gt;</contributor>
 <contributor>Jono &lt;jono@ubuntu-18.localdomain&gt;</contributor>
+<contributor>julius.ish &lt;julius.ish@zetier.com&gt;</contributor>
 <contributor>justchris1 &lt;justchris1@justchris1.email&gt;</contributor>
 <contributor>Kacper &lt;kacper@kacper.se&gt;</contributor>
 <contributor>Kai Kang &lt;kai.kang@windriver.com&gt;</contributor>
@@ -301,6 +306,7 @@ Last Modified: 2025-11-20 08:44 UTC
 <contributor>Nico Truzzolino &lt;nico.truzzolino@gmx.de&gt;</contributor>
 <contributor>Brian Turek &lt;brian.turek@gmail.com&gt;</contributor>
 <contributor>Matěj Týč &lt;matyc@redhat.com&gt;</contributor>
+<contributor>Jörgen Uhr &lt;jorgen.uhr@sitevision.se&gt;</contributor>
 <contributor>VadimDor &lt;29509093+VadimDor@users.noreply.github.com&gt;</contributor>
 <contributor>Trevor Vaughan &lt;tvaughan@onyxpoint.com&gt;</contributor>
 <contributor>vtrubovics &lt;82443408+vtrubovics@users.noreply.github.com&gt;</contributor>
diff --git a/Dockerfiles/test_suite-ubuntu2204 b/Dockerfiles/test_suite-ubuntu2204
index 1aab55c4e4fa..bd312a61a3c3 100644
--- a/Dockerfiles/test_suite-ubuntu2204
+++ b/Dockerfiles/test_suite-ubuntu2204
@@ -26,11 +26,9 @@ RUN true \
 RUN true \
         && ssh-keygen -A \
         && mkdir -p /root/.ssh \
+        && mkdir /run/sshd && chmod 0755 /run/sshd \
         && printf "%s\n" "$CLIENT_PUBLIC_KEY" >> "$AUTH_KEYS" \
         && chmod og-rw /root/.ssh "$AUTH_KEYS" \
         && sed -i '/session\s\+required\s\+pam_loginuid.so/d' /etc/pam.d/sshd \
         && echo CPE_NAME="cpe:/o:canonical:ubuntu_linux:22.04" >> /etc/os-release \
 && true
-
-RUN mkdir /run/sshd
-CMD ["/usr/sbin/sshd", "-D"]
diff --git a/Dockerfiles/test_suite-ubuntu2404 b/Dockerfiles/test_suite-ubuntu2404
index 8b922eaa1828..8186af8740ca 100644
--- a/Dockerfiles/test_suite-ubuntu2404
+++ b/Dockerfiles/test_suite-ubuntu2404
@@ -19,10 +19,9 @@ RUN true \
 RUN true \
         && ssh-keygen -A \
         && mkdir -p /root/.ssh \
+        && mkdir /run/sshd && chmod 0755 /run/sshd \
         && printf "%s\n" "$CLIENT_PUBLIC_KEY" >> "$AUTH_KEYS" \
         && chmod og-rw /root/.ssh "$AUTH_KEYS" \
         && sed -i '/session\s\+required\s\+pam_loginuid.so/d' /etc/pam.d/sshd \
-        && echo CPE_NAME="cpe:/o:canonical:ubuntu_linux:24.04" >> /etc/os-release
-
-RUN mkdir /run/sshd
-CMD ["/usr/sbin/sshd", "-D"]
+        && echo CPE_NAME="cpe:/o:canonical:ubuntu_linux:24.04" >> /etc/os-release \
+&& true
diff --git a/applications/openshift/networking/configure_network_policies/rule.yml b/applications/openshift/networking/configure_network_policies/rule.yml
index e30efa56270b..d01c98935abb 100644
--- a/applications/openshift/networking/configure_network_policies/rule.yml
+++ b/applications/openshift/networking/configure_network_policies/rule.yml
@@ -50,6 +50,5 @@ template:
     yamlpath: "[:]"
     check_existence: "any_exist"
     entity_check: "all"
-    values:
-      - value: "OpenShiftSDN|OVN|Calico"
-        operation: "pattern match"
+    regex_data: "true"
+    xccdf_variable: var_configure_network_policies_regex
diff --git a/applications/openshift/networking/var_configure_network_policies_regex.var b/applications/openshift/networking/var_configure_network_policies_regex.var
new file mode 100644
index 000000000000..d899bd0c4527
--- /dev/null
+++ b/applications/openshift/networking/var_configure_network_policies_regex.var
@@ -0,0 +1,20 @@
+documentation_complete: true
+
+title: 'Network Provider which provide Support for Network Policies'
+
+description: |-
+    Regular expression explicitly describing
+    which CNI plugins provide the cluster with the
+    network policies feature/capability
+    You can chose to either allow multiple providers
+    by adding them like "Provider1|Provider2" or only
+    allow one, by overwriting the value
+
+type: string
+
+operator: equals
+
+interactive: true
+
+options:
+  default: "OpenShiftSDN|OVN|Calico|Cilium"
diff --git a/build-scripts/collect_remediations.py b/build-scripts/collect_remediations.py
index ecf3e867f00d..93eeb7b24f38 100755
--- a/build-scripts/collect_remediations.py
+++ b/build-scripts/collect_remediations.py
@@ -118,7 +118,7 @@ def collect_remediations(
             msg = (
                 "Failed to dispatch {lang} remediation for {rule_id}: {error}"
                 .format(lang=lang, rule_id=rule.id_, error=str(exc)))
-            raise RuntimeError(msg)
+            raise RuntimeError(msg) from exc
 
 
 def main():
diff --git a/build/.gitkeep b/build/.gitkeep
deleted file mode 100644
index e69de29bb2d1..000000000000
diff --git a/build_product b/build_product
index 76e3d3a69854..003e9a356d7f 100755
--- a/build_product
+++ b/build_product
@@ -333,6 +333,7 @@ all_cmake_products=(
 	ALMALINUX9
 	ANOLIS23
 	ANOLIS8
+        BASCONTROL22D4
 	DEBIAN11
 	DEBIAN12
 	DEBIAN13
diff --git a/components/audit.yml b/components/audit.yml
index bd1807988a47..018ead72842e 100644
--- a/components/audit.yml
+++ b/components/audit.yml
@@ -131,6 +131,7 @@ rules:
 - audit_rules_mac_modification_etc_apparmor_d
 - audit_rules_mac_modification_etc_selinux
 - audit_rules_mac_modification_usr_share
+- audit_rules_mac_modification_var_lib_selinux
 - audit_rules_media_export
 - audit_rules_networkconfig_modification
 - audit_rules_networkconfig_modification_etc_hosts
diff --git a/components/nfs-common.yml b/components/nfs-common.yml
new file mode 100644
index 000000000000..31b0f2666976
--- /dev/null
+++ b/components/nfs-common.yml
@@ -0,0 +1,5 @@
+name: nfs-common
+packages:
+- nfs-common
+rules:
+- package_nfs-common_removed
diff --git a/components/operating-system.yml b/components/operating-system.yml
index 45d050bf1724..d8a27adbd67f 100644
--- a/components/operating-system.yml
+++ b/components/operating-system.yml
@@ -6,6 +6,7 @@ rules:
 - accounts_user_home_paths_only
 - accounts_user_interactive_home_directory_defined
 - accounts_user_interactive_home_directory_exists
+- accounts_user_interactive_home_directory_on_separate_partition
 - bios_assign_password
 - bios_disable_usb_boot
 - bios_enable_execution_restrictions
diff --git a/controls/ccn_ol9.yml b/controls/ccn_ol9.yml
index 9c0756c3efa1..c065f65c5eb2 100644
--- a/controls/ccn_ol9.yml
+++ b/controls/ccn_ol9.yml
@@ -623,10 +623,15 @@ controls:
           - banner_etc_motd
           - dconf_gnome_banner_enabled
           - dconf_gnome_login_banner_text
+          - dconf_login_banner_text=cis_default
+          - dconf_login_banner_contents=cis_default
           - sshd_enable_warning_banner_net
           - login_banner_text=cis_default
+          - login_banner_contents=cis_default
           - motd_banner_text=cis_default
+          - motd_banner_contents=cis_default
           - remote_login_banner_text=cis_default
+          - remote_login_banner_contents=cis_default
 
     - id: A.11.SEC-OL5
       title: Network Acess to the System is Controlled
diff --git a/controls/cis_al2023.yml b/controls/cis_al2023.yml
index 666a5322499e..ffb74aa0621b 100644
--- a/controls/cis_al2023.yml
+++ b/controls/cis_al2023.yml
@@ -468,6 +468,7 @@ controls:
       rules:
           - banner_etc_motd
           - motd_banner_text=cis_banners
+          - motd_banner_contents=cis_default
 
     - id: 1.7.2
       title: Ensure local login warning banner is configured properly (Automated)
@@ -477,6 +478,7 @@ controls:
       rules:
           - banner_etc_issue
           - login_banner_text=cis_banners
+          - login_banner_contents=cis_default
 
     - id: 1.7.3
       title: Ensure remote login warning banner is configured properly (Automated)
@@ -486,6 +488,7 @@ controls:
       rules:
           - banner_etc_issue_net
           - remote_login_banner_text=cis_banners
+          - remote_login_banner_contents=cis_default
 
     - id: 1.7.4
       title: Ensure permissions on /etc/motd are configured (Automated)
diff --git a/controls/cis_almalinux9.yml b/controls/cis_almalinux9.yml
index 29fa4bd9b124..6d7189ce2877 100644
--- a/controls/cis_almalinux9.yml
+++ b/controls/cis_almalinux9.yml
@@ -691,7 +691,8 @@ controls:
       rules:
           - dconf_gnome_banner_enabled
           - dconf_gnome_login_banner_text
-          - login_banner_text=cis_banners
+          - dconf_login_banner_text=cis_banners
+          - dconf_login_banner_contents=cis_default
 
     - id: 1.8.3
       title: Ensure GDM disable-user-list option is enabled (Automated)
diff --git a/controls/cis_debian12.yml b/controls/cis_debian12.yml
index 8e0208f77309..6ffb09b7dda3 100644
--- a/controls/cis_debian12.yml
+++ b/controls/cis_debian12.yml
@@ -540,7 +540,8 @@ controls:
           - l1_server
           - l1_workstation
       rules:
-          - login_banner_text=cis_default
+          - dconf_login_banner_text=cis_default
+          - dconf_login_banner_contents=cis_default
           - dconf_gnome_banner_enabled
           - dconf_gnome_login_banner_text
       status: automated
diff --git a/controls/cis_fedora.yml b/controls/cis_fedora.yml
index 031e276bc3d5..b22ccfbd7f1c 100644
--- a/controls/cis_fedora.yml
+++ b/controls/cis_fedora.yml
@@ -369,9 +369,14 @@ controls:
       levels:
           - l1_server
           - l1_workstation
-      status: manual
-      related_rules:
+      status: partial
+      rules:
           - ensure_fedora_gpgkey_installed
+      notes: >
+        In CIS Benchmark, the requirement is manual, because of GPG keys for 3rd party repositories.
+        But, add the rule ensure_fedora_gpgkey_installed to the profile because the requirement 1.2.1.2
+        adds ensure_gpgcheck_globally_activated which requires GPG key checking. If the Fedora
+        GPG key wouldn't be installed, people won't be able to install any RPM package using dnf.
 
     - id: 1.2.1.2
       title: Ensure gpgcheck is configured (Automated)
@@ -710,7 +715,8 @@ controls:
       rules:
           - dconf_gnome_banner_enabled
           - dconf_gnome_login_banner_text
-          - login_banner_text=cis_banners
+          - dconf_login_banner_text=cis_banners
+          - dconf_login_banner_contents=cis_default
 
     - id: 1.8.2
       title: Ensure GDM disable-user-list is configured (Automated)
@@ -2957,6 +2963,7 @@ controls:
       rules:
           - audit_rules_mac_modification_etc_selinux
           - audit_rules_mac_modification_usr_share
+          - audit_rules_mac_modification_var_lib_selinux
 
     - id: 6.3.3.24
       title: Ensure successful and unsuccessful attempts to use the chcon command are collected (Automated)
diff --git a/controls/cis_ocp_190.yml b/controls/cis_ocp_190.yml
new file mode 100644
index 000000000000..67106b1b5a9e
--- /dev/null
+++ b/controls/cis_ocp_190.yml
@@ -0,0 +1,11 @@
+---
+policy: CIS Red Hat OpenShift Container Platform 4 Benchmark
+title: CIS Red Hat OpenShift Container Platform 4 Benchmark
+id: cis_ocp_190
+source: https://www.cisecurity.org/benchmark/kubernetes
+
+levels:
+    - id: level_1
+    - id: level_2
+      inherits_from:
+          - level_1
diff --git a/controls/cis_ocp_190/section-1.yml b/controls/cis_ocp_190/section-1.yml
new file mode 100644
index 000000000000..62fadd96bc76
--- /dev/null
+++ b/controls/cis_ocp_190/section-1.yml
@@ -0,0 +1,506 @@
+---
+controls:
+    - id: '1'
+      title: Control Plane Components
+      status: pending
+      rules: []
+      controls:
+          - id: '1.1'
+            title: Master Node Configuration Files
+            status: automated
+            rules: []
+            controls:
+                - id: 1.1.1
+                  title: Ensure that the API server pod specification file permissions are set to 600
+                      or more restrictive
+                  status: automated
+                  rules:
+                      - file_permissions_kube_apiserver
+                  levels:
+                      - level_1
+                - id: 1.1.2
+                  title: Ensure that the API server pod specification file ownership is set to root:root
+                  status: automated
+                  rules:
+                      - file_owner_kube_apiserver
+                      - file_groupowner_kube_apiserver
+                  levels:
+                      - level_1
+                - id: 1.1.3
+                  title: Ensure that the controller manager pod specification file permissions are set
+                      to 600 or more restrictive
+                  status: automated
+                  rules:
+                      - file_permissions_kube_controller_manager
+                  levels:
+                      - level_1
+                - id: 1.1.4
+                  title: Ensure that the controller manager pod specification file ownership is set to
+                      root:root
+                  status: automated
+                  rules:
+                      - file_owner_kube_controller_manager
+                      - file_groupowner_kube_controller_manager
+                  levels:
+                      - level_1
+                - id: 1.1.5
+                  title: Ensure that the scheduler pod specification file permissions are set to 600
+                      or more restrictive
+                  status: automated
+                  rules:
+                      - file_permissions_scheduler
+                  levels:
+                      - level_1
+                - id: 1.1.6
+                  title: Ensure that the scheduler pod specification file ownership is set to root:root
+                  status: automated
+                  rules:
+                      - file_owner_kube_scheduler
+                      - file_groupowner_kube_scheduler
+                  levels:
+                      - level_1
+                - id: 1.1.7
+                  title: Ensure that the etcd pod specification file permissions are set to 600 or more
+                      restrictive
+                  status: automated
+                  rules:
+                      - file_permissions_etcd_member
+                  levels:
+                      - level_1
+                - id: 1.1.8
+                  title: Ensure that the etcd pod specification file ownership is set to root:root
+                  status: automated
+                  rules:
+                      - file_groupowner_etcd_member
+                      - file_owner_etcd_member
+                  levels:
+                      - level_1
+                - id: 1.1.9
+                  title: Ensure that the Container Network Interface file permissions are set to 600
+                      or more restrictive
+                  status: automated
+                  rules:
+                      - file_permissions_cni_conf
+                      - file_permissions_multus_conf
+                      - file_permissions_ip_allocations
+                      - file_perms_openshift_sdn_cniserver_config
+                      - file_permissions_ovs_pid
+                      - file_permissions_ovs_conf_db
+                      - file_permissions_ovs_sys_id_conf
+                      - file_permissions_ovs_conf_db_lock
+                      - file_permissions_ovs_vswitchd_pid
+                      - file_permissions_ovsdb_server_pid
+                      - file_permissions_ovn_cni_server_sock
+                      - file_permissions_ovn_db_files
+                  levels:
+                      - level_1
+                - id: 1.1.10
+                  title: Ensure that the Container Network Interface file ownership is set to root:root
+                  status: automated
+                  rules:
+                      - file_owner_cni_conf
+                      - file_groupowner_cni_conf
+                      - file_owner_multus_conf
+                      - file_groupowner_multus_conf
+                      - file_owner_ip_allocations
+                      - file_groupowner_ip_allocations
+                      - file_owner_openshift_sdn_cniserver_config
+                      - file_groupowner_openshift_sdn_cniserver_config
+                      - file_owner_ovs_pid
+                      - file_groupowner_ovs_pid
+                      - file_owner_ovs_conf_db
+                      - file_groupowner_ovs_conf_db_openvswitch
+                      - file_groupowner_ovs_conf_db_hugetlbfs
+                      - file_owner_ovs_sys_id_conf
+                      - file_groupowner_ovs_sys_id_conf_openvswitch
+                      - file_groupowner_ovs_sys_id_conf_hugetlbfs
+                      - file_owner_ovs_conf_db_lock
+                      - file_groupowner_ovs_conf_db_lock_openvswitch
+                      - file_groupowner_ovs_conf_db_lock_hugetlbfs
+                      - file_owner_ovs_vswitchd_pid
+                      - file_groupowner_ovs_vswitchd_pid
+                      - file_owner_ovsdb_server_pid
+                      - file_groupowner_ovsdb_server_pid
+                      - file_groupowner_ovn_cni_server_sock
+                      - file_owner_ovn_cni_server_sock
+                      - file_owner_ovn_db_files
+                      - file_groupowner_ovn_db_files
+                  levels:
+                      - level_1
+                - id: 1.1.11
+                  title: Ensure that the etcd data directory permissions are set to 700 or more restrictive
+                  status: automated
+                  rules:
+                      - file_permissions_etcd_data_dir
+                      - file_permissions_etcd_data_files
+                  levels:
+                      - level_1
+                - id: 1.1.12
+                  title: Ensure that the etcd data directory ownership is set to root:root
+                  status: automated
+                  rules:
+                      - file_owner_etcd_data_dir
+                      - file_groupowner_etcd_data_dir
+                      - file_owner_etcd_data_files
+                      - file_groupowner_etcd_data_files
+                  levels:
+                      - level_1
+                - id: 1.1.13
+                  title: Ensure that the kubeconfig file permissions are set to 600 or more restrictive
+                  status: automated
+                  rules:
+                      - file_permissions_master_admin_kubeconfigs
+                  levels:
+                      - level_1
+                - id: 1.1.14
+                  title: Ensure that the kubeconfig file ownership is set to root:root
+                  status: automated
+                  rules:
+                      - file_owner_master_admin_kubeconfigs
+                      - file_groupowner_master_admin_kubeconfigs
+                  levels:
+                      - level_1
+                - id: 1.1.15
+                  title: Ensure that the Scheduler kubeconfig file permissions are set to 600 or more
+                      restrictive
+                  status: automated
+                  rules:
+                      - file_permissions_scheduler_kubeconfig
+                  levels:
+                      - level_1
+                - id: 1.1.16
+                  title: Ensure that the Scheduler kubeconfig file ownership is set to root:root
+                  status: automated
+                  rules:
+                      - file_owner_scheduler_kubeconfig
+                      - file_groupowner_scheduler_kubeconfig
+                  levels:
+                      - level_1
+                - id: 1.1.17
+                  title: Ensure that the Controller Manager kubeconfig file permissions are set to 600
+                      or more restrictive
+                  status: automated
+                  rules:
+                      - file_permissions_controller_manager_kubeconfig
+                  levels:
+                      - level_1
+                - id: 1.1.18
+                  title: Ensure that the Controller Manager kubeconfig file ownership is set to root:root
+                  status: automated
+                  rules:
+                      - file_owner_controller_manager_kubeconfig
+                      - file_groupowner_controller_manager_kubeconfig
+                  levels:
+                      - level_1
+                - id: 1.1.19
+                  title: Ensure that the OpenShift PKI directory and file ownership is set to root:root
+                  status: automated
+                  rules:
+                      - file_owner_openshift_pki_key_files
+                      - file_groupowner_openshift_pki_key_files
+                      - file_owner_openshift_pki_cert_files
+                      - file_groupowner_openshift_pki_cert_files
+                      - file_owner_etcd_pki_cert_files
+                      - file_groupowner_etcd_pki_cert_files
+                  levels:
+                      - level_1
+                - id: 1.1.20
+                  title: Ensure that the OpenShift PKI certificate file permissions are set to 600 or
+                      more restrictive
+                  status: automated
+                  rules:
+                      - file_permissions_openshift_pki_cert_files
+                      - file_permissions_etcd_pki_cert_files
+                  levels:
+                      - level_1
+                - id: 1.1.21
+                  title: Ensure that the OpenShift PKI key file permissions are set to 600
+                  status: automated
+                  rules:
+                      - file_permissions_openshift_pki_key_files
+                  levels:
+                      - level_1
+          - id: '1.2'
+            title: API Server
+            status: pending
+            rules: []
+            controls:
+                - id: 1.2.1
+                  title: Ensure that anonymous requests are authorized
+                  status: automated
+                  rules:
+                      - api_server_anonymous_auth
+                  levels:
+                      - level_1
+                - id: 1.2.2
+                  title: Use https for kubelet connections
+                  status: automated
+                  rules:
+                      - api_server_https_for_kubelet_conn
+                      - api_server_openshift_https_serving_cert
+                      - api_server_oauth_https_serving_cert
+                  levels:
+                      - level_1
+                - id: 1.2.3
+                  title: Ensure that the kubelet uses certificates to authenticate
+                  status: automated
+                  rules:
+                      - api_server_kubelet_client_cert
+                      - api_server_kubelet_client_key
+                  levels:
+                      - level_1
+                - id: 1.2.4
+                  title: Verify that the kubelet certificate authority is set as appropriate
+                  status: automated
+                  rules:
+                      - api_server_kubelet_certificate_authority
+                  levels:
+                      - level_1
+                - id: 1.2.5
+                  title: Ensure that the --authorization-mode argument is not set to AlwaysAllow
+                  status: automated
+                  rules:
+                      - api_server_auth_mode_no_aa
+                  levels:
+                      - level_1
+                - id: 1.2.6
+                  title: Verify that RBAC is enabled
+                  status: automated
+                  rules:
+                      - api_server_auth_mode_rbac
+                  levels:
+                      - level_1
+                - id: 1.2.7
+                  title: Ensure that the APIPriorityAndFairness feature gate is enabled
+                  status: inherently met
+                  rules: []
+                  levels:
+                      - level_1
+                - id: 1.2.8
+                  title: Ensure that the admission control plugin AlwaysAdmit is not set
+                  status: automated
+                  rules:
+                      - api_server_admission_control_plugin_alwaysadmit
+                  levels:
+                      - level_1
+                - id: 1.2.9
+                  title: Ensure that the admission control plugin AlwaysPullImages is not set
+                  status: automated
+                  rules:
+                      - api_server_admission_control_plugin_alwayspullimages
+                  levels:
+                      - level_1
+                - id: 1.2.10
+                  title: Ensure that the admission control plugin ServiceAccount is set
+                  status: automated
+                  rules:
+                      - api_server_admission_control_plugin_service_account
+                  levels:
+                      - level_1
+                - id: 1.2.11
+                  title: Ensure that the admission control plugin NamespaceLifecycle is set
+                  status: automated
+                  rules:
+                      - api_server_admission_control_plugin_namespacelifecycle
+                  levels:
+                      - level_1
+                - id: 1.2.12
+                  title: Ensure that the admission control plugin SecurityContextConstraint is set
+                  status: automated
+                  rules:
+                      - api_server_admission_control_plugin_scc
+                  levels:
+                      - level_1
+                - id: 1.2.13
+                  title: Ensure that the admission control plugin NodeRestriction is set
+                  status: automated
+                  rules:
+                      - api_server_admission_control_plugin_noderestriction
+                  levels:
+                      - level_1
+                - id: 1.2.14
+                  title: Ensure that the --insecure-bind-address argument is not set
+                  status: automated
+                  rules:
+                      - api_server_insecure_bind_address
+                  levels:
+                      - level_1
+                - id: 1.2.15
+                  title: Ensure that the --insecure-port argument is set to 0
+                  status: inherently met
+                  rules: []
+                  levels:
+                      - level_1
+                - id: 1.2.16
+                  title: Ensure that the --secure-port argument is not set to 0
+                  status: automated
+                  rules:
+                      - api_server_bind_address
+                  levels:
+                      - level_1
+                - id: 1.2.17
+                  title: Ensure that the healthz endpoint is protected by RBAC
+                  status: automated
+                  rules:
+                      - api_server_profiling_protected_by_rbac
+                  levels:
+                      - level_1
+                - id: 1.2.18
+                  title: Ensure that the --audit-log-path argument is set
+                  status: automated
+                  rules:
+                      - api_server_audit_log_path
+                      - openshift_api_server_audit_log_path
+                  levels:
+                      - level_1
+                - id: 1.2.19
+                  title: Ensure that the audit logs are forwarded off the cluster for retention
+                  status: automated
+                  rules:
+                      - audit_log_forwarding_enabled
+                      - audit_log_forwarding_webhook
+                  levels:
+                      - level_1
+                - id: 1.2.20
+                  title: Ensure that the maximumRetainedFiles argument is set to 10 or as appropriate
+                  status: automated
+                  rules:
+                      - api_server_audit_log_maxbackup
+                      - ocp_api_server_audit_log_maxbackup
+                  levels:
+                      - level_1
+                - id: 1.2.21
+                  title: Configure Kubernetes API Server Maximum Audit Log Size
+                  status: automated
+                  rules:
+                      - api_server_audit_log_maxsize
+                      - ocp_api_server_audit_log_maxsize
+                  levels:
+                      - level_1
+                - id: 1.2.22
+                  title: Ensure that the --request-timeout argument is set
+                  status: automated
+                  rules:
+                      - api_server_request_timeout
+                  levels:
+                      - level_1
+                - id: 1.2.23
+                  title: Ensure that the --service-account-lookup argument is set to true
+                  status: automated
+                  rules:
+                      - api_server_service_account_lookup
+                  levels:
+                      - level_1
+                - id: 1.2.24
+                  title: Ensure that the --service-account-key-file argument is set as appropriate
+                  status: automated
+                  rules:
+                      - api_server_service_account_public_key
+                  levels:
+                      - level_1
+                - id: 1.2.25
+                  title: Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriate
+                  status: automated
+                  rules:
+                      - api_server_etcd_cert
+                      - api_server_etcd_key
+                  levels:
+                      - level_1
+                - id: 1.2.26
+                  title: Ensure that the --tls-cert-file and --tls-private-key-file arguments are set
+                      as appropriate
+                  status: automated
+                  rules:
+                      - api_server_tls_cert
+                      - api_server_tls_private_key
+                  levels:
+                      - level_1
+                - id: 1.2.27
+                  title: Ensure that the --client-ca-file argument is set as appropriate
+                  status: automated
+                  rules:
+                      - api_server_client_ca
+                  levels:
+                      - level_1
+                - id: 1.2.28
+                  title: Ensure that the --etcd-cafile argument is set as appropriate
+                  status: automated
+                  rules:
+                      - api_server_etcd_ca
+                  levels:
+                      - level_1
+                - id: 1.2.29
+                  title: Ensure that encryption providers are appropriately configured
+                  status: automated
+                  rules:
+                      - api_server_encryption_provider_cipher
+                  levels:
+                      - level_1
+                - id: 1.2.30
+                  title: Ensure that the API Server only makes use of Strong Cryptographic Ciphers
+                  status: automated
+                  rules:
+                      - api_server_tls_security_profile_not_old
+                      - api_server_tls_security_profile_custom_min_tls_version
+                  levels:
+                      - level_1
+                - id: 1.2.31
+                  title: Ensure unsupported configuration overrides are not used
+                  status: pending
+                  rules:
+                      - api_server_no_unsupported_config_overrides
+                      - api_server_kube_no_unsupported_config_overrides
+                  levels:
+                      - level_1
+          - id: '1.3'
+            title: Controller Manager
+            status: pending
+            rules: []
+            controls:
+                - id: 1.3.1
+                  title: Ensure that controller manager healthz endpoints are protected by RBAC
+                  status: automated
+                  rules:
+                      - rbac_debug_role_protects_pprof
+                  levels:
+                      - level_1
+                - id: 1.3.2
+                  title: Ensure that the --use-service-account-credentials argument is set to true
+                  status: automated
+                  rules:
+                      - controller_use_service_account
+                  levels:
+                      - level_1
+                - id: 1.3.3
+                  title: Ensure that the --service-account-private-key-file argument is set as appropriate
+                  status: automated
+                  rules:
+                      - controller_service_account_private_key
+                  levels:
+                      - level_1
+                - id: 1.3.4
+                  title: Ensure that the --root-ca-file argument is set as appropriate
+                  status: automated
+                  rules:
+                      - controller_service_account_ca
+                  levels:
+                      - level_1
+          - id: '1.4'
+            title: Scheduler
+            status: automated
+            rules: []
+            controls:
+                - id: 1.4.1
+                  title: Ensure that the healthz endpoints for the scheduler are protected by RBAC
+                  status: automated
+                  rules:
+                      - scheduler_profiling_protected_by_rbac
+                  levels:
+                      - level_1
+                - id: 1.4.2
+                  title: Verify that the scheduler API service is protected by RBAC
+                  status: automated
+                  rules:
+                      - scheduler_service_protected_by_rbac
+                  levels:
+                      - level_1
diff --git a/controls/cis_ocp_190/section-2.yml b/controls/cis_ocp_190/section-2.yml
new file mode 100644
index 000000000000..d42cc9d46111
--- /dev/null
+++ b/controls/cis_ocp_190/section-2.yml
@@ -0,0 +1,58 @@
+---
+controls:
+    - id: '2'
+      title: etcd
+      status: pending
+      rules: []
+      controls:
+          - id: '2.1'
+            title: Ensure that the --cert-file and --key-file arguments are set as appropriate
+            status: automated
+            rules:
+                - etcd_cert_file
+                - etcd_key_file
+            levels:
+                - level_1
+          - id: '2.2'
+            title: Ensure that the --client-cert-auth argument is set to true
+            status: automated
+            rules:
+                - etcd_client_cert_auth
+            levels:
+                - level_1
+          - id: '2.3'
+            title: Ensure that the --auto-tls argument is not set to true
+            status: automated
+            rules:
+                - etcd_auto_tls
+            levels:
+                - level_1
+          - id: '2.4'
+            title: Ensure that the --peer-cert-file and --peer-key-file arguments are set as appropriate
+            status: automated
+            rules:
+                - etcd_peer_cert_file
+                - etcd_peer_key_file
+            levels:
+                - level_1
+          - id: '2.5'
+            title: Ensure that the --peer-client-cert-auth argument is set to true
+            status: automated
+            rules:
+                - etcd_peer_client_cert_auth
+            levels:
+                - level_1
+          - id: '2.6'
+            title: Ensure that the --peer-auto-tls argument is not set to true
+            status: automated
+            rules:
+                - etcd_peer_auto_tls
+            levels:
+                - level_1
+          - id: '2.7'
+            title: Ensure that a unique Certificate Authority is used for etcd
+            status: automated
+            rules:
+                - etcd_unique_ca
+            levels:
+                - level_2
diff --git a/controls/cis_ocp_190/section-3.yml b/controls/cis_ocp_190/section-3.yml
new file mode 100644
index 000000000000..3c5dbdc4c0e5
--- /dev/null
+++ b/controls/cis_ocp_190/section-3.yml
@@ -0,0 +1,39 @@
+---
+controls:
+    - id: '3'
+      title: Control Plane Configuration
+      status: pending
+      rules: []
+      controls:
+          - id: '3.1'
+            title: Authentication and Authorization
+            status: automated
+            rules: []
+            controls:
+                - id: 3.1.1
+                  title: Client certificate authentication should not be used for users
+                  status: automated
+                  rules:
+                      - idp_is_configured
+                      - kubeadmin_removed
+                  levels:
+                      - level_2
+          - id: '3.2'
+            title: Logging
+            status: automated
+            rules: []
+            controls:
+                - id: 3.2.1
+                  title: Ensure that a minimal audit policy is created
+                  status: automated
+                  rules:
+                      - audit_logging_enabled
+                  levels:
+                      - level_1
+                - id: 3.2.2
+                  title: Ensure that the audit policy covers key security concerns
+                  status: automated
+                  rules:
+                      - audit_profile_set
+                  levels:
+                      - level_2
diff --git a/controls/cis_ocp_190/section-4.yml b/controls/cis_ocp_190/section-4.yml
new file mode 100644
index 000000000000..4343034dbc67
--- /dev/null
+++ b/controls/cis_ocp_190/section-4.yml
@@ -0,0 +1,191 @@
+---
+controls:
+    - id: '4'
+      title: Worker Nodes
+      status: pending
+      rules: []
+      controls:
+          - id: '4.1'
+            title: Worker Node Configuration Files
+            status: pending
+            rules: []
+            controls:
+                - id: 4.1.1
+                  title: Ensure that the kubelet service file permissions are set to 644 or more restrictive
+                  status: automated
+                  rules:
+                      - file_permissions_worker_service
+                  levels:
+                      - level_1
+                - id: 4.1.2
+                  title: Ensure that the kubelet service file ownership is set to root:root
+                  status: automated
+                  rules:
+                      - file_owner_worker_service
+                      - file_groupowner_worker_service
+                  levels:
+                      - level_1
+                - id: 4.1.3
+                  title: If proxy kube proxy configuration file exists ensure permissions are set to
+                      644 or more restrictive
+                  status: automated
+                  rules:
+                      - file_permissions_proxy_kubeconfig
+                  levels:
+                      - level_1
+                - id: 4.1.4
+                  title: If proxy kubeconfig file exists ensure ownership is set to root:root
+                  status: automated
+                  rules:
+                      - file_owner_proxy_kubeconfig
+                      - file_groupowner_proxy_kubeconfig
+                  levels:
+                      - level_1
+                - id: 4.1.5
+                  title: Ensure that the --kubeconfig kubelet.conf file permissions are set to 644 or
+                      more restrictive
+                  status: automated
+                  rules:
+                      - file_permissions_kubelet_conf
+                  levels:
+                      - level_1
+                - id: 4.1.6
+                  title: Ensure that the --kubeconfig kubelet.conf file ownership is set to root:root
+                  status: automated
+                  rules:
+                      - file_groupowner_kubelet_conf
+                      - file_owner_kubelet_conf
+        #- file_groupowner_kubelet
+                      - file_owner_kubelet
+                  levels:
+                      - level_1
+                - id: 4.1.7
+                  title: Ensure that the certificate authorities file permissions are set to 644 or more
+                      restrictive
+                  status: automated
+                  rules:
+                      - file_permissions_worker_ca
+                  levels:
+                      - level_1
+                - id: 4.1.8
+                  title: Ensure that the client certificate authorities file ownership is set to root:root
+                  status: automated
+                  rules:
+                      - file_owner_worker_ca
+                      - file_groupowner_worker_ca
+                  levels:
+                      - level_1
+                - id: 4.1.9
+                  title: Ensure that the kubelet --config configuration file has permissions set to 600
+                      or more restrictive
+                  status: automated
+                  rules:
+                      - file_permissions_worker_kubeconfig
+                  levels:
+                      - level_1
+                - id: 4.1.10
+                  title: Ensure that the kubelet configuration file ownership is set to root:root
+                  status: automated
+                  rules:
+                      - file_owner_worker_kubeconfig
+                      - file_groupowner_worker_kubeconfig
+                  levels:
+                      - level_1
+          - id: '4.2'
+            title: Kubelet
+            status: pending
+            rules: []
+            controls:
+                - id: 4.2.1
+                  title: Activate Garbage collection in OpenShift Container Platform 4, as appropriate
+                  status: automated
+                  rules:
+                      - kubelet_eviction_thresholds_set_hard_memory_available
+                      - kubelet_eviction_thresholds_set_hard_nodefs_available
+                      - kubelet_eviction_thresholds_set_hard_nodefs_inodesfree
+                      - kubelet_eviction_thresholds_set_hard_imagefs_available
+                  levels:
+                      - level_1
+                - id: 4.2.2
+                  title: Ensure that the --anonymous-auth argument is set to false
+                  status: automated
+                  rules:
+                      - kubelet_anonymous_auth
+                  levels:
+                      - level_1
+                - id: 4.2.3
+                  title: Ensure that the --authorization-mode argument is not set to AlwaysAllow
+                  status: automated
+                  rules:
+                      - kubelet_authorization_mode
+                  levels:
+                      - level_1
+                - id: 4.2.4
+                  title: Ensure that the --client-ca-file argument is set as appropriate
+                  status: automated
+                  rules:
+                      - kubelet_configure_client_ca
+                  levels:
+                      - level_1
+                - id: 4.2.5
+                  title: Verify that the read only port is not used or is set to 0
+                  status: automated
+                  rules:
+                      - kubelet_disable_readonly_port
+                  levels:
+                      - level_1
+                - id: 4.2.6
+                  title: Ensure that the --streaming-connection-idle-timeout argument is not set to 0
+                  status: automated
+                  rules:
+                      - kubelet_enable_streaming_connections
+                  levels:
+                      - level_1
+                - id: 4.2.7
+                  title: Ensure that the --make-iptables-util-chains argument is set to true
+                  status: automated
+                  rules:
+                      - kubelet_enable_iptables_util_chains
+                  levels:
+                      - level_1
+                - id: 4.2.8
+                  title: Ensure that the kubeAPIQPS [--event-qps] argument is set to a level which
+                      ensures appropriate event capture
+                  status: automated
+                  rules:
+                      - kubelet_configure_event_creation
+                      - var_event_record_qps=50
+                  levels:
+                      - level_2
+                - id: 4.2.9
+                  title: Ensure that the --tls-cert-file and --tls-private-key-file arguments are set
+                      as appropriate
+                  status: automated
+                  rules:
+                      - kubelet_configure_tls_cert
+                      - kubelet_configure_tls_key
+                  levels:
+                      - level_1
+                - id: 4.2.10
+                  title: Ensure that the --rotate-certificates argument is not set to false
+                  status: automated
+                  rules:
+                      - kubelet_enable_client_cert_rotation
+                      - kubelet_enable_cert_rotation
+                  levels:
+                      - level_1
+                - id: 4.2.11
+                  title: Verify that the RotateKubeletServerCertificate argument is set to true
+                  status: automated
+                  rules:
+                      - kubelet_enable_server_cert_rotation
+                  levels:
+                      - level_1
+                - id: 4.2.12
+                  title: Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers
+                  status: automated
+                  rules:
+                      - kubelet_configure_tls_cipher_suites
+                      - ingress_controller_tls_cipher_suites
+                  levels:
+                      - level_1
diff --git a/controls/cis_ocp_190/section-5.yml b/controls/cis_ocp_190/section-5.yml
new file mode 100644
index 000000000000..2e8312954f91
--- /dev/null
+++ b/controls/cis_ocp_190/section-5.yml
@@ -0,0 +1,216 @@
+---
+controls:
+    - id: '5'
+      title: Policies
+      status: partial
+      rules: []
+      controls:
+          - id: '5.1'
+            title: RBAC and Service Accounts
+            status: manual
+            rules: []
+            controls:
+                - id: 5.1.1
+                  title: Ensure that the cluster-admin role is only used where required
+                  status: manual
+                  rules:
+                      - rbac_limit_cluster_admin
+                  levels:
+                      - level_1
+                - id: 5.1.2
+                  title: Minimize access to secrets
+                  status: manual
+                  rules:
+                      - rbac_limit_secrets_access
+                  levels:
+                      - level_1
+                - id: 5.1.3
+                  title: Minimize wildcard use in Roles and ClusterRoles
+                  status: manual
+                  rules:
+                      - rbac_wildcard_use
+                  levels:
+                      - level_1
+                - id: 5.1.4
+                  title: Minimize access to create pods
+                  status: manual
+                  rules:
+                      - rbac_pod_creation_access
+                  levels:
+                      - level_1
+                - id: 5.1.5
+                  title: Ensure that default service accounts are not actively used.
+                  status: manual
+                  rules:
+                      - accounts_unique_service_account
+                  levels:
+                      - level_1
+                - id: 5.1.6
+                  title: Ensure that Service Account Tokens are only mounted where necessary
+                  status: manual
+                  rules:
+                      - accounts_restrict_service_account_tokens
+                  levels:
+                      - level_1
+          - id: '5.2'
+            title: Security Context Constraints
+            status: partial
+            rules: []
+            controls:
+                - id: 5.2.1
+                  title: Minimize the admission of privileged containers
+                  status: manual
+                  rules:
+                      - scc_limit_privileged_containers
+                  levels:
+                      - level_1
+                - id: 5.2.2
+                  title: Minimize the admission of containers wishing to share the host process ID namespace
+                  status: manual
+                  rules:
+                      - scc_limit_process_id_namespace
+                  levels:
+                      - level_1
+                - id: 5.2.3
+                  title: Minimize the admission of containers wishing to share the host IPC namespace
+                  status: manual
+                  rules:
+                      - scc_limit_ipc_namespace
+                  levels:
+                      - level_1
+                - id: 5.2.4
+                  title: Minimize the admission of containers wishing to share the host network namespace
+                  status: manual
+                  rules:
+                      - scc_limit_network_namespace
+                  levels:
+                      - level_1
+                - id: 5.2.5
+                  title: Minimize the admission of containers with allowPrivilegeEscalation
+                  status: manual
+                  rules:
+                      - scc_limit_privilege_escalation
+                  levels:
+                      - level_1
+                - id: 5.2.6
+                  title: Minimize the admission of root containers
+                  status: manual
+                  rules:
+                      - scc_limit_root_containers
+                  levels:
+                      - level_2
+                - id: 5.2.7
+                  title: Minimize the admission of containers with the NET_RAW capability
+                  status: manual
+                  rules:
+                      - scc_limit_net_raw_capability
+                  levels:
+                      - level_1
+                - id: 5.2.8
+                  title: Minimize the admission of containers with added capabilities
+                  status: automated
+                  rules:
+                      - scc_limit_container_allowed_capabilities
+                  levels:
+                      - level_1
+                - id: 5.2.9
+                  title: Minimize the admission of containers with capabilities assigned
+                  status: manual
+                  rules:
+                      - scc_drop_container_capabilities
+                  levels:
+                      - level_2
+                - id: 5.2.10
+                  title: Minimize access to privileged Security Context Constraints
+                  status: manual
+                  rules:
+                      - rbac_least_privilege
+                  levels:
+                      - level_2
+          - id: '5.3'
+            title: Network Policies and CNI
+            status: partial
+            rules: []
+            controls:
+                - id: 5.3.1
+                  title: Ensure that the CNI in use supports Network Policies
+                  status: automated
+                  rules:
+                      - configure_network_policies
+                  levels:
+                      - level_1
+                - id: 5.3.2
+                  title: Ensure that all Namespaces have Network Policies defined
+                  status: partial
+                  rules:
+                      - configure_network_policies_namespaces
+                      - configure_network_policies_hypershift_hosted
+                  levels:
+                      - level_2
+          - id: '5.4'
+            title: Secrets Management
+            status: manual
+            rules: []
+            controls:
+                - id: 5.4.1
+                  title: Prefer using secrets as files over secrets as environment variables
+                  status: manual
+                  rules:
+                      - secrets_no_environment_variables
+                  levels:
+                      - level_1
+                - id: 5.4.2
+                  title: Consider external secret storage
+                  status: manual
+                  rules:
+                      - secrets_consider_external_storage
+                  levels:
+                      - level_2
+          - id: '5.5'
+            title: Extensible Admission Control
+            status: automated
+            rules: []
+            controls:
+                - id: 5.5.1
+                  title: Configure Image Provenance using image controller configuration parameters
+                  status: automated
+                  rules:
+                      - ocp_allowed_registries
+                      - ocp_allowed_registries_for_import
+                      - ocp_insecure_registries
+                      - ocp_insecure_allowed_registries_for_import
+                  levels:
+                      - level_2
+          - id: '5.7'
+            title: General Policies
+            status: manual
+            rules: []
+            controls:
+                - id: 5.7.1
+                  title: Create administrative boundaries between resources using namespaces
+                  status: manual
+                  rules:
+                      - general_namespaces_in_use
+                  levels:
+                      - level_1
+                - id: 5.7.2
+                  title: Ensure that the seccomp profile is set to docker/default in your pod definitions
+                  status: manual
+                  rules:
+                      - general_default_seccomp_profile
+                  levels:
+                      - level_2
+                - id: 5.7.3
+                  title: Apply Security Context to Your Pods and Containers
+                  status: manual
+                  rules:
+                      - general_apply_scc
+                  levels:
+                      - level_2
+                - id: 5.7.4
+                  title: The default namespace should not be used
+                  status: manual
+                  rules:
+                      - general_default_namespace_use
+                  levels:
+                      - level_2
diff --git a/controls/cis_sle12.yml b/controls/cis_sle12.yml
index d842d6e6c3c6..3e4d682ce3e6 100644
--- a/controls/cis_sle12.yml
+++ b/controls/cis_sle12.yml
@@ -457,6 +457,7 @@ controls:
       rules:
           - banner_etc_motd
           - motd_banner_text=cis_banners
+          - motd_banner_contents=cis_default
 
     - id: 1.8.1.2
       title: Ensure local login warning banner is configured properly (Automated)
@@ -467,6 +468,7 @@ controls:
       rules:
           - banner_etc_issue
           - login_banner_text=cis_banners
+          - login_banner_contents=cis_default
 
     - id: 1.8.1.3
       title: Ensure remote login warning banner is configured properly (Automated)
@@ -477,6 +479,7 @@ controls:
       rules:
           - banner_etc_issue_net
           - remote_login_banner_text=cis_banners
+          - remote_login_banner_contents=cis_default
 
     - id: 1.8.1.4
       title: Ensure permissions on /etc/motd are configured (Automated)
@@ -535,7 +538,8 @@ controls:
           - dconf_gnome_disable_user_list
           - dconf_gnome_banner_enabled
           - dconf_gnome_login_banner_text
-          - login_banner_text=cis_default
+          - dconf_login_banner_text=cis_default
+          - dconf_login_banner_contents=cis_default
 
     - id: 2.1.1
       title: Ensure xinetd is not installed (Automated)
diff --git a/controls/cis_sle15.yml b/controls/cis_sle15.yml
index 97c61f63374e..bf92b28d52f3 100644
--- a/controls/cis_sle15.yml
+++ b/controls/cis_sle15.yml
@@ -455,6 +455,7 @@ controls:
       rules:
           - banner_etc_motd
           - motd_banner_text=cis_banners
+          - motd_banner_contents=cis_default
 
     - id: 1.8.1.2
       title: Ensure local login warning banner is configured properly (Automated)
@@ -465,6 +466,7 @@ controls:
       rules:
           - banner_etc_issue
           - login_banner_text=cis_banners
+          - login_banner_contents=cis_default
 
     - id: 1.8.1.3
       title: Ensure remote login warning banner is configured properly (Automated)
@@ -475,6 +477,7 @@ controls:
       rules:
           - banner_etc_issue_net
           - remote_login_banner_text=cis_banners
+          - remote_login_banner_contents=cis_default
 
     - id: 1.8.1.4
       title: Ensure permissions on /etc/motd are configured (Automated)
@@ -532,7 +535,8 @@ controls:
           - enable_dconf_user_profile
           - dconf_gnome_banner_enabled
           - dconf_gnome_login_banner_text
-          - login_banner_text=cis_default
+          - dconf_login_banner_text=cis_default
+          - dconf_login_banner_contents=cis_default
 
     - id: 2.1.1
       title: Ensure xinetd is not installed (Automated)
diff --git a/controls/cis_ubuntu2204.yml b/controls/cis_ubuntu2204.yml
index 84f3287f32ee..997016fd1e97 100644
--- a/controls/cis_ubuntu2204.yml
+++ b/controls/cis_ubuntu2204.yml
@@ -528,7 +528,8 @@ controls:
           - l1_server
           - l1_workstation
       rules:
-          - login_banner_text=cis_default
+          - dconf_login_banner_text=cis_default
+          - dconf_login_banner_contents=cis_default
           - dconf_gnome_banner_enabled
           - dconf_gnome_login_banner_text
       status: automated
diff --git a/controls/cis_ubuntu2404.yml b/controls/cis_ubuntu2404.yml
index 58c756c81c9d..d4e1dfde39c3 100644
--- a/controls/cis_ubuntu2404.yml
+++ b/controls/cis_ubuntu2404.yml
@@ -561,7 +561,8 @@ controls:
           - l1_server
           - l1_workstation
       rules:
-          - login_banner_text=cis_default
+          - dconf_login_banner_text=cis_default
+          - dconf_login_banner_contents=cis_default
           - dconf_gnome_banner_enabled
           - dconf_gnome_login_banner_text
       status: automated
diff --git a/controls/general_sle15.yml b/controls/general_sle15.yml
index 73dca83f3e70..f637cbbd87d4 100644
--- a/controls/general_sle15.yml
+++ b/controls/general_sle15.yml
@@ -470,6 +470,7 @@ controls:
       rules:
           - banner_etc_motd
           - motd_banner_text=cis_banners
+          - motd_banner_contents=cis_default
 
     - id: SLES-15-151050030
       title: Modify the System Login Banner
@@ -479,6 +480,7 @@ controls:
       rules:
           - banner_etc_issue
           - login_banner_text=cis_banners
+          - login_banner_contents=cis_default
 
     - id: SLES-15-151050045
       title: Modify the System Login Banner for Remote Connections
@@ -488,6 +490,7 @@ controls:
       rules:
           - banner_etc_issue_net
           - remote_login_banner_text=cis_banners
+          - remote_login_banner_contents=cis_default
 
     - id: SLES-15-151050060
       title: Configure access to the Message of the Day Banner
@@ -535,7 +538,8 @@ controls:
       rules:
           - dconf_gnome_banner_enabled
           - dconf_gnome_login_banner_text
-          - login_banner_text=cis_default
+          - dconf_login_banner_text=cis_default
+          - dconf_login_banner_contents=cis_default
 
     - id: SLES-15-151200135
       title: Disable the GDM Login User List
diff --git a/controls/general_slmicro5.yml b/controls/general_slmicro5.yml
index 8a83a0b428fb..ac887def5ee4 100644
--- a/controls/general_slmicro5.yml
+++ b/controls/general_slmicro5.yml
@@ -269,6 +269,7 @@ controls:
       rules:
           - banner_etc_motd
           - motd_banner_text=cis_banners
+          - motd_banner_contents=cis_default
 
     - id: SLEM-5-SET-08010200
       title: Modify the System Login Banner
@@ -278,6 +279,7 @@ controls:
       rules:
           - banner_etc_issue
           - login_banner_text=cis_banners
+          - login_banner_contents=cis_default
 
     - id: SLEM-5-SET-08010300
       title: Modify the System Login Banner for Remote Connections
@@ -287,6 +289,7 @@ controls:
       rules:
           - banner_etc_issue_net
           - remote_login_banner_text=cis_banners
+          - remote_login_banner_contents=cis_default
 
     - id: SLEM-5-SET-08010400
       title: Verify Ownership and Permissions of/on Message of the Day Banner
@@ -1021,6 +1024,7 @@ controls:
       rules:
           - banner_etc_issue
           - login_banner_text=dod_banners
+          - login_banner_contents=dod_default
           - sshd_enable_warning_banner
       status: automated
 
diff --git a/controls/nist_rhcos4.yml b/controls/nist_rhcos4.yml
index 02690cb34dc1..6bee855d39fa 100644
--- a/controls/nist_rhcos4.yml
+++ b/controls/nist_rhcos4.yml
@@ -1228,6 +1228,7 @@ controls:
       rules:
           - banner_etc_issue
           - login_banner_text=dod_banners
+          - login_banner_contents=dod_default
       description: "The information system:\n a. Displays to users [Assignment: organization-defined\
           \ system use notification message or banner] before granting access to the system that provides\
           \ privacy and security notices consistent with applicable federal laws, Executive Orders, directives,\
diff --git a/controls/srg_gpos.yml b/controls/srg_gpos.yml
index 5be978311df7..c44f13af6f94 100644
--- a/controls/srg_gpos.yml
+++ b/controls/srg_gpos.yml
@@ -26,5 +26,6 @@ controls:
           - var_accounts_authorized_local_users_regex=rhel9
           - var_account_disable_post_pw_expiration=35
           - login_banner_text=dod_banners
+          - login_banner_contents=dod_default
           - var_authselect_profile=sssd
           - var_auditd_name_format=stig
diff --git a/controls/std_kylinserver10.yml b/controls/std_kylinserver10.yml
index 8e101a908189..785c64550d9e 100644
--- a/controls/std_kylinserver10.yml
+++ b/controls/std_kylinserver10.yml
@@ -119,6 +119,7 @@ controls:
       rules:
           - banner_etc_issue
           - login_banner_text=cis_banners
+          - login_banner_contents=cis_default
 
     - id: 1.14
       title: ensure-message-of-the-day-is-configured-properly
@@ -127,7 +128,8 @@ controls:
       status: automated
       rules:
           - banner_etc_motd
-          - login_banner_text=cis_banners
+          - motd_banner_text=cis_banners
+          - motd_banner_contents=cis_default
 
     - id: 1.15
       title: Ensure sshd PermitRootLogin is disabled (Automated)
diff --git a/controls/std_tencentos4.yml b/controls/std_tencentos4.yml
index 06aa7e4656de..b08775cbce91 100644
--- a/controls/std_tencentos4.yml
+++ b/controls/std_tencentos4.yml
@@ -114,6 +114,7 @@ controls:
       rules:
           - banner_etc_motd
           - motd_banner_text=cis_banners
+          - motd_banner_contents=cis_default
 
     - id: 1.4.2
       title: Ensure local login warning banner is configured properly
@@ -123,6 +124,7 @@ controls:
       rules:
           - banner_etc_issue
           - login_banner_text=cis_banners
+          - login_banner_contents=cis_default
 
     - id: 1.4.3
       title: Ensure remote login warning banner is configured properly
@@ -132,6 +134,7 @@ controls:
       rules:
           - banner_etc_issue_net
           - remote_login_banner_text=cis_banners
+          - remote_login_banner_contents=cis_default
 
     - id: 1.4.4
       title: Ensure permissions on /etc/motd are configured
diff --git a/controls/stig_ol9.yml b/controls/stig_ol9.yml
index bc1370b1b5a4..1e0f2d1511f8 100644
--- a/controls/stig_ol9.yml
+++ b/controls/stig_ol9.yml
@@ -53,6 +53,7 @@ controls:
       rules:
           - banner_etc_issue
           - login_banner_text=dod_default
+          - login_banner_contents=dod_default
       status: automated
 
     - id: OL09-00-000020
@@ -621,14 +622,6 @@ controls:
           - mount_option_home_noexec
       status: automated
 
-    - id: OL09-00-002010
-      levels:
-          - medium
-      title: OL 9 must be configured so that the Network File System (NFS) is configured to use RPCSEC_GSS.
-      rules:
-          - mount_option_krb_sec_remote_filesystems
-      status: automated
-
     - id: OL09-00-002011
       levels:
           - medium
@@ -1262,7 +1255,7 @@ controls:
           - medium
       title: OL 9 world-writable directories must be owned by root, sys, bin, or an application user.
       rules:
-          - dir_perms_world_writable_root_owned
+          - dir_perms_world_writable_system_owned
       status: automated
 
     - id: OL09-00-002510
@@ -1980,7 +1973,8 @@ controls:
           or remote access to the system via a graphical user logon.
       rules:
           - dconf_gnome_login_banner_text
-          - login_banner_text=dod_default
+          - dconf_login_banner_text=dod_default
+          - dconf_login_banner_contents=dod_default
 
     - id: OL09-00-002122
       levels:
@@ -2063,9 +2057,10 @@ controls:
     - id: OL09-00-002104
       levels:
           - medium
-      title: OL 9 must automatically lock graphical user sessions after 15 minutes of inactivity.
+      title: OL 9 must automatically lock graphical user sessions after 10 minutes of inactivity.
       rules:
           - dconf_gnome_screensaver_idle_delay
+          - inactivity_timeout_value=10_minutes
       status: automated
 
     - id: OL09-00-002124
@@ -2410,14 +2405,6 @@ controls:
           - sysctl_kernel_exec_shield
       status: automated
 
-    - id: OL09-00-002427
-      levels:
-          - medium
-      title: Local OL 9 initialization files must not execute world-writable programs.
-      rules:
-          - accounts_user_dot_no_world_writable_programs
-      status: automated
-
     - id: OL09-00-002411
       levels:
           - medium
@@ -3837,16 +3824,6 @@ controls:
           - fips_crypto_policy_symlinks
       status: automated
 
-    - id: OL09-00-002424
-      levels:
-          - medium
-      title: OL 9 must use mechanisms meeting the requirements of applicable federal laws, executive
-          orders, directives, policies, regulations, standards, and guidance for authentication to a
-          cryptographic module.
-      rules:
-          - configure_kerberos_crypto_policy
-      status: automated
-
     - id: OL09-00-000241
       levels:
           - medium
diff --git a/controls/stig_slmicro5.yml b/controls/stig_slmicro5.yml
index d39b265fff84..7a5790f3310b 100644
--- a/controls/stig_slmicro5.yml
+++ b/controls/stig_slmicro5.yml
@@ -3,7 +3,7 @@ policy: SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation G
 title: SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide
 id: stig_slmicro5
 source: https://www.cyber.mil/stigs/downloads/
-version: V1R2
+version: V1R3
 reference_type: stigid
 product: slmicro5
 
@@ -36,6 +36,7 @@ controls:
       rules:
           - banner_etc_issue
           - login_banner_text=dod_banners
+          - login_banner_contents=dod_default
       status: automated
 
     - id: SLEM-05-211025
@@ -855,14 +856,6 @@ controls:
           - account_unique_id
       status: automated
 
-    - id: SLEM-05-412010
-      levels:
-          - medium
-      title: SLEM 5 must display the date and time of the last successful account logon upon logon.
-      rules:
-          - display_login_attempts
-      status: automated
-
     - id: SLEM-05-412015
       levels:
           - medium
diff --git a/controls/stig_ubuntu2204.yml b/controls/stig_ubuntu2204.yml
index db8a53a9bcca..094121dd0981 100644
--- a/controls/stig_ubuntu2204.yml
+++ b/controls/stig_ubuntu2204.yml
@@ -2,7 +2,7 @@
 policy: Canonical Ubuntu 22.04 LTS Security Technical Implementation Guide (STIG)
 title: Canonical Ubuntu 22.04 LTS Security Technical Implementation Guide (STIG)
 id: stig_ubuntu2204
-version: V2R3
+version: V2R7
 source: https://www.cyber.mil/stigs/downloads/
 
 levels:
@@ -14,6 +14,14 @@ reference_type: stigid
 product: ubuntu2204
 
 controls:
+    - id: UBTU-22-211000
+      title: Ubuntu 22.04 LTS must be a vendor-supported release.
+      levels:
+          - high
+      rules:
+          - installed_OS_is_vendor_supported
+      status: automated
+
     - id: UBTU-22-211015
       title: Ubuntu 22.04 LTS must disable the x86 Ctrl-Alt-Delete key sequence.
       levels:
@@ -143,6 +151,15 @@ controls:
           - package_telnetd_removed
       status: automated
 
+    - id: UBTU-22-215040
+      title: Ubuntu 22.04 LTS must not have the "nfs-kernel-server" package installed.
+      levels:
+          - medium
+      rules:
+          - package_nfs-common_removed
+          - package_nfs-kernel-server_removed
+      status: automated
+
     - id: UBTU-22-231010
       title: Ubuntu 22.04 LTS must implement cryptographic mechanisms to prevent unauthorized disclosure
           and modification of all information that requires protection at rest.
@@ -474,6 +491,42 @@ controls:
           - sysctl_net_ipv4_tcp_syncookies
       status: automated
 
+    - id: UBTU-22-254010
+      title: Ubuntu 22.04 LTS must have the "SSSD" package installed.
+      levels:
+          - medium
+      rules:
+          - package_nss_sss_installed
+          - package_pam_sss_installed
+          - package_sssd_installed
+      status: automated
+
+    - id: UBTU-22-254015
+      title: Ubuntu 22.04 LTS must use the "SSSD" package for multifactor authentication services.
+      levels:
+          - medium
+      rules:
+          - service_sssd_enabled
+      status: automated
+
+    - id: UBTU-22-254020
+      title: Ubuntu 22.04 LTS must ensure SSSD performs certificate path validation, including revocation checking, against a trusted anchor for PKI-based authentication.
+      levels:
+          - medium
+      rules:
+          - sssd_enable_pam_services
+          - sssd_enable_smartcards
+          - sssd_certification_path_trust_anchor
+      status: automated
+
+    - id: UBTU-22-254030
+      title: Ubuntu 22.04 LTS must map the authenticated identity to the user or group account for PKI-based authentication.
+      levels:
+          - medium
+      rules:
+          - sssd_enable_user_cert
+      status: automated
+
     - id: UBTU-22-255010
       title: Ubuntu 22.04 LTS must have SSH installed.
       levels:
@@ -498,6 +551,7 @@ controls:
           - medium
       rules:
           - remote_login_banner_text=dod_banners
+          - remote_login_banner_contents=dod_default
           - sshd_enable_warning_banner_net
           - banner_etc_issue_net
       status: automated
@@ -600,7 +654,8 @@ controls:
       levels:
           - medium
       rules:
-          - login_banner_text=dod_banners
+          - dconf_login_banner_text=dod_banners
+          - dconf_login_banner_contents=dod_default
           - dconf_gnome_login_banner_text
       status: automated
 
@@ -790,7 +845,15 @@ controls:
       levels:
           - medium
       rules:
-          - sudo_require_authentication
+          - sudo_remove_no_authenticate
+      status: automated
+
+    - id: UBTU-22-432011
+      title: Ubuntu 22.04 LTS must require users to provide a password for privilege escalation.
+      levels:
+          - medium
+      rules:
+          - sudo_remove_nopasswd
       status: automated
 
     - id: UBTU-22-432015
@@ -886,7 +949,9 @@ controls:
       levels:
           - medium
       rules:
-          - set_password_hashing_algorithm_systemauth
+          - var_password_pam_unix_rounds=100000
+          - set_password_hashing_algorithm_auth_stig
+          - accounts_password_pam_unix_rounds_password_auth
       status: automated
 
     - id: UBTU-22-611060
@@ -1260,6 +1325,15 @@ controls:
           - audit_rules_privileged_commands_crontab
       status: automated
 
+    - id: UBTU-22-654041
+      title: Ubuntu 22.04 LTS must audit any script or executable called by cron as root or by any privileged user.
+      levels:
+          - medium
+      rules:
+          - audit_rules_etc_cron_d
+          - audit_rules_var_spool_cron
+      status: automated
+
     - id: UBTU-22-654045
       title: Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful attempts to use
           the fdisk command.
@@ -1600,6 +1674,14 @@ controls:
           - audit_rules_sudoers
       status: automated
 
+    - id: UBTU-22-654224
+      title: The operating system must restrict privilege elevation to authorized personnel.
+      levels:
+          - medium
+      rules:
+          - sudo_restrict_privilege_elevation_to_authorized
+      status: automated
+
     - id: UBTU-22-654225
       title: Ubuntu 22.04 LTS must generate audit records when successful/unsuccessful attempts to modify
           the /etc/sudoers.d directory occur.
diff --git a/controls/stig_ubuntu2404.yml b/controls/stig_ubuntu2404.yml
index cb85dc34866e..8165b529b844 100644
--- a/controls/stig_ubuntu2404.yml
+++ b/controls/stig_ubuntu2404.yml
@@ -363,6 +363,15 @@ controls:
           - account_disable_post_pw_expiration
       status: automated
 
+    - id: UBTU-24-200270
+      title: Ubuntu 24.04 LTS must audit any script or executable called by cron as root or by any privileged user.
+      levels:
+          - medium
+      rules:
+          - audit_rules_etc_cron_d
+          - audit_rules_var_spool_cron
+      status: automated
+
     - id: UBTU-24-200280
       title: Ubuntu 24.04 LTS must generate audit records for all account creations, modifications, disabling,
           and termination events that affect /etc/passwd.
@@ -441,6 +450,7 @@ controls:
           - medium
       rules:
           - remote_login_banner_text=dod_banners
+          - remote_login_banner_contents=dod_default
           - sshd_enable_warning_banner_net
           - banner_etc_issue_net
       status: automated
@@ -461,7 +471,8 @@ controls:
       levels:
           - medium
       rules:
-          - login_banner_text=dod_banners
+          - dconf_login_banner_text=dod_banners
+          - dconf_login_banner_contents=dod_default
           - dconf_gnome_login_banner_text
       status: automated
 
@@ -580,6 +591,22 @@ controls:
           - accounts_passwords_pam_faildelay_delay
       status: automated
 
+    - id: UBTU-24-300019
+      title: Ubuntu 24.04 LTS must restrict privilege elevation to authorized personnel.
+      levels:
+          - medium
+      rules:
+          - sudo_restrict_privilege_elevation_to_authorized
+      status: automated
+
+    - id: UBTU-24-300020
+      title: Ubuntu 24.04 LTS must require users to provide a password for privilege escalation.
+      levels:
+          - medium
+      rules:
+          - sudo_remove_nopasswd
+      status: automated
+
     - id: UBTU-24-300021
       title: Ubuntu 24.04 LTS must require users to reauthenticate for privilege escalation or when changing
           roles.
diff --git a/linux_os/guide/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_umount2/rule.yml b/linux_os/guide/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_umount2/rule.yml
index 8664f8c4bc7d..6d3821a97db7 100644
--- a/linux_os/guide/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_umount2/rule.yml
+++ b/linux_os/guide/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_umount2/rule.yml
@@ -32,6 +32,7 @@ identifiers:
     cce@rhel10: CCE-89822-1
     cce@sle12: CCE-83219-6
     cce@sle15: CCE-91250-1
+    cce@sle16: CCE-96470-0
     cce@slmicro5: CCE-93655-9
     cce@slmicro6: CCE-94636-8
 
diff --git a/linux_os/guide/auditing/auditd_configure_rules/audit_privileged_commands/audit_rules_privileged_commands/rule.yml b/linux_os/guide/auditing/auditd_configure_rules/audit_privileged_commands/audit_rules_privileged_commands/rule.yml
index 7baee897f2ee..efef98acc465 100644
--- a/linux_os/guide/auditing/auditd_configure_rules/audit_privileged_commands/audit_rules_privileged_commands/rule.yml
+++ b/linux_os/guide/auditing/auditd_configure_rules/audit_privileged_commands/audit_rules_privileged_commands/rule.yml
@@ -53,6 +53,7 @@ identifiers:
     cce@rhel10: CCE-88170-6
     cce@sle12: CCE-91611-4
     cce@sle15: CCE-91251-9
+    cce@sle16: CCE-96363-7
 
 references:
     cis-csc: 1,11,12,13,14,15,16,19,2,3,4,5,6,7,8,9
diff --git a/linux_os/guide/auditing/auditd_configure_rules/audit_privileged_commands/audit_rules_privileged_commands_insmod/rule.yml b/linux_os/guide/auditing/auditd_configure_rules/audit_privileged_commands/audit_rules_privileged_commands_insmod/rule.yml
index be642d92f573..6b2f502687d1 100644
--- a/linux_os/guide/auditing/auditd_configure_rules/audit_privileged_commands/audit_rules_privileged_commands_insmod/rule.yml
+++ b/linux_os/guide/auditing/auditd_configure_rules/audit_privileged_commands/audit_rules_privileged_commands_insmod/rule.yml
@@ -30,6 +30,7 @@ identifiers:
     cce@rhel10: CCE-90738-6
     cce@sle12: CCE-92258-3
     cce@sle15: CCE-85744-1
+    cce@sle16: CCE-96174-8
     cce@slmicro5: CCE-93612-0
     cce@slmicro6: CCE-94650-9
 
diff --git a/linux_os/guide/auditing/auditd_configure_rules/audit_privileged_commands/audit_rules_privileged_commands_kmod/rule.yml b/linux_os/guide/auditing/auditd_configure_rules/audit_privileged_commands/audit_rules_privileged_commands_kmod/rule.yml
index c4a37ca44434..4d321ba3a10a 100644
--- a/linux_os/guide/auditing/auditd_configure_rules/audit_privileged_commands/audit_rules_privileged_commands_kmod/rule.yml
+++ b/linux_os/guide/auditing/auditd_configure_rules/audit_privileged_commands/audit_rules_privileged_commands_kmod/rule.yml
@@ -22,6 +22,7 @@ identifiers:
     cce@rhel10: CCE-86727-5
     cce@sle12: CCE-83207-1
     cce@sle15: CCE-85591-6
+    cce@sle16: CCE-95909-8
     cce@slmicro5: CCE-93615-3
     cce@slmicro6: CCE-94616-0
 
diff --git a/linux_os/guide/auditing/auditd_configure_rules/audit_privileged_commands/audit_rules_privileged_commands_modprobe/rule.yml b/linux_os/guide/auditing/auditd_configure_rules/audit_privileged_commands/audit_rules_privileged_commands_modprobe/rule.yml
index 288f0d033b4b..4ccc58df4968 100644
--- a/linux_os/guide/auditing/auditd_configure_rules/audit_privileged_commands/audit_rules_privileged_commands_modprobe/rule.yml
+++ b/linux_os/guide/auditing/auditd_configure_rules/audit_privileged_commands/audit_rules_privileged_commands_modprobe/rule.yml
@@ -34,6 +34,7 @@ identifiers:
     cce@rhel10: CCE-89893-2
     cce@sle12: CCE-92257-5
     cce@sle15: CCE-85731-8
+    cce@sle16: CCE-96256-3
     cce@slmicro5: CCE-93614-6
     cce@slmicro6: CCE-94652-5
 
diff --git a/linux_os/guide/auditing/auditd_configure_rules/audit_privileged_commands/audit_rules_privileged_commands_rmmod/rule.yml b/linux_os/guide/auditing/auditd_configure_rules/audit_privileged_commands/audit_rules_privileged_commands_rmmod/rule.yml
index c2c798c0c6e7..40f76e0fcbea 100644
--- a/linux_os/guide/auditing/auditd_configure_rules/audit_privileged_commands/audit_rules_privileged_commands_rmmod/rule.yml
+++ b/linux_os/guide/auditing/auditd_configure_rules/audit_privileged_commands/audit_rules_privileged_commands_rmmod/rule.yml
@@ -30,6 +30,7 @@ identifiers:
     cce@rhel10: CCE-88804-0
     cce@sle12: CCE-92256-7
     cce@sle15: CCE-85732-6
+    cce@sle16: CCE-96358-7
     cce@slmicro5: CCE-93613-8
     cce@slmicro6: CCE-94651-7
 
diff --git a/linux_os/guide/auditing/auditd_configure_rules/audit_rules_mac_modification_var_lib_selinux/rule.yml b/linux_os/guide/auditing/auditd_configure_rules/audit_rules_mac_modification_var_lib_selinux/rule.yml
new file mode 100644
index 000000000000..096b2fa83e8b
--- /dev/null
+++ b/linux_os/guide/auditing/auditd_configure_rules/audit_rules_mac_modification_var_lib_selinux/rule.yml
@@ -0,0 +1,36 @@
+documentation_complete: true
+
+title: 'Record Events that Modify the System''s Mandatory Access Controls in /var/lib/selinux'
+
+description: |-
+    {{{ describe_audit_rules_watch("/var/lib/selinux/", "MAC-policy") }}}
+    Note that monitoring /var/lib/selinux/ will generate a significant burst of audit events
+    during both selinux-policy* package upgrade and policy rebuild.
+
+rationale: |-
+    The system's mandatory access policy (SELinux) should not be
+    arbitrarily changed by anything other than administrator action. All changes to
+    MAC policy should be audited.
+
+severity: medium
+
+identifiers:
+    cce@rhel8: CCE-86459-5
+    cce@rhel9: CCE-86461-1
+    cce@rhel10: CCE-86465-2
+
+ocil_clause: 'the system is not configured to audit attempts to change the MAC policy'
+
+ocil: |-
+    To determine if the system is configured to audit changes to its SELinux
+    configuration files, run the following command:
+    <pre>$ sudo auditctl -l | grep "dir=/var/lib/selinux"</pre>
+    If the system is configured to watch for changes to its SELinux
+    configuration, a line should be returned (including
+    <tt>perm=wa</tt> indicating permissions that are watched).
+
+template:
+    name: audit_rules_watch
+    vars:
+        path: "/var/lib/selinux/"
+        key: MAC-policy
diff --git a/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/ansible/shared.yml b/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/ansible/shared.yml
index 623eafd2c929..c36b2ad25617 100644
--- a/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/ansible/shared.yml
+++ b/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/ansible/shared.yml
@@ -4,22 +4,15 @@
 # complexity = low
 # disruption = low
 
-{{% if product not in ["ol8"] %}}
 {{% set egid_arg = " -F egid=0" %}}
 {{% set euid_arg = " -F euid=0" %}}
-{{% endif %}}
 
 {{% set rx_beg = "^[\s]*-a[\s]+always,exit[\s]+" %}}
 {{% set rx_b32 = "-F[\s]+arch=b32[\s]+" %}}
 {{% set rx_b64 = "-F[\s]+arch=b64[\s]+" %}}
 
-{{% if product in ["ol8"] %}}
-{{% set rx_uid = "-S[\s]+execve[\s]+-C[\s]+uid!=euid[\s]+" %}}
-{{% set rx_gid = "-S[\s]+execve[\s]+-C[\s]+gid!=egid[\s]+" %}}
-{{% else %}}
 {{% set rx_uid = "-S[\s]+execve[\s]+-C[\s]+uid!=euid[\s]+-F[\s]+euid=0[\s]+" %}}
 {{% set rx_gid = "-S[\s]+execve[\s]+-C[\s]+gid!=egid[\s]+-F[\s]+egid=0[\s]+" %}}
-{{% endif %}}
 
 {{% set rx_end = "(?:-k[\s]+|-F[\s]+key=)[\S]+[\s]*$" %}}
 
diff --git a/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/bash/shared.sh b/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/bash/shared.sh
index b452adbc65b1..a3f1129f160c 100644
--- a/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/bash/shared.sh
+++ b/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/bash/shared.sh
@@ -7,11 +7,7 @@
 for ARCH in "${RULE_ARCHS[@]}"
 do
 	ACTION_ARCH_FILTERS="-a always,exit -F arch=$ARCH"
-    {{% if product in ["ol8"] %}}
-	OTHER_FILTERS="-C uid!=euid"
-	{{% else %}}
 	OTHER_FILTERS="-C uid!=euid -F euid=0"
-	{{% endif %}}
 	AUID_FILTERS=""
 	SYSCALL="execve"
     {{% if product in ["ubuntu2404"] %}}
@@ -28,11 +24,7 @@ done
 for ARCH in "${RULE_ARCHS[@]}"
 do
 	ACTION_ARCH_FILTERS="-a always,exit -F arch=$ARCH"
-    {{% if product in ["ol8"] %}}
-	OTHER_FILTERS="-C gid!=egid"
-	{{% else %}}
 	OTHER_FILTERS="-C gid!=egid -F egid=0"
-	{{% endif %}}
 	AUID_FILTERS=""
 	SYSCALL="execve"
     {{% if product in ["ubuntu2404"] %}}
diff --git a/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/oval/shared.xml b/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/oval/shared.xml
index 8d56b6df6f8a..41b28f5823dd 100644
--- a/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/oval/shared.xml
+++ b/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/oval/shared.xml
@@ -1,13 +1,8 @@
 {{% set rx_beg = "^[\s]*-a[\s]+always,exit[\s]+" %}}
 {{% set rx_b32 = "-F[\s]+arch=b32[\s]+" %}}
 {{% set rx_b64 = "-F[\s]+arch=b64[\s]+" %}}
-{{% if product in ["ol8"] %}}
-{{% set rx_uid = "-S[\s]+execve[\s]+-C[\s]+uid!=euid[\s]+" %}}
-{{% set rx_gid = "-S[\s]+execve[\s]+-C[\s]+gid!=egid[\s]+" %}}
-{{% else %}}
 {{% set rx_uid = "-S[\s]+execve[\s]+-C[\s]+uid!=euid[\s]+-F[\s]+euid=0[\s]+" %}}
 {{% set rx_gid = "-S[\s]+execve[\s]+-C[\s]+gid!=egid[\s]+-F[\s]+egid=0[\s]+" %}}
-{{% endif %}}
 {{% set rx_end = "(?:-k[\s]+|-F[\s]+key=)[\S]+[\s]*$" %}}
 <def-group>
   <definition class="compliance" id="audit_rules_suid_privilege_function" version="1">
diff --git a/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/tests/correct_value.pass.sh b/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/tests/correct_value.pass.sh
index e766ae3325d1..b88b869bbf03 100644
--- a/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/tests/correct_value.pass.sh
+++ b/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/tests/correct_value.pass.sh
@@ -1,13 +1,8 @@
 #!/bin/bash
 # packages = audit
 
-{{% if product in ["ol8"] %}}
-OTHER_FILTERS_EUID=" -C uid!=euid"
-OTHER_FILTERS_EGID=" -C gid!=egid"
-{{% else %}}
 OTHER_FILTERS_EUID=" -C uid!=euid -F euid=0"
 OTHER_FILTERS_EGID=" -C gid!=egid -F egid=0"
-{{% endif %}}
 
 echo "-a always,exit -F arch=b32 -S execve${OTHER_FILTERS_EGID} -k setgid" > /etc/audit/rules.d/privileged.rules
 echo "-a always,exit -F arch=b64 -S execve${OTHER_FILTERS_EGID} -k setgid" >> /etc/audit/rules.d/privileged.rules
diff --git a/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/tests/miss_arch.fail.sh b/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/tests/miss_arch.fail.sh
index 9c2c5255a03e..98ee49c06892 100644
--- a/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/tests/miss_arch.fail.sh
+++ b/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/tests/miss_arch.fail.sh
@@ -1,13 +1,8 @@
 #!/bin/bash
 # packages = audit
 
-{{% if product in ["ol8"] %}}
-OTHER_FILTERS_EUID=" -C uid!=euid"
-OTHER_FILTERS_EGID=" -C gid!=egid"
-{{% else %}}
 OTHER_FILTERS_EUID=" -C uid!=euid -F euid=0"
 OTHER_FILTERS_EGID=" -C gid!=egid -F egid=0"
-{{% endif %}}
 
 echo "-a always,exit -F arch=b64 -S execve${OTHER_FILTERS_EGID} -k setgid" > /etc/audit/rules.d/privileged.rules
 echo "-a always,exit -F arch=b32 -S execve${OTHER_FILTERS_EUID} -k setuid" >> /etc/audit/rules.d/privileged.rules
diff --git a/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/tests/miss_c.fail.sh b/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/tests/miss_c.fail.sh
index 2cec8e81404c..b8d987c0bb93 100644
--- a/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/tests/miss_c.fail.sh
+++ b/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/tests/miss_c.fail.sh
@@ -1,11 +1,6 @@
 #!/bin/bash
 # packages = audit
 
-{{% if product not in ["ol8"] %}}
-OTHER_FILTERS_EUID=" -F euid=0"
-OTHER_FILTERS_EGID=" -F egid=0"
-{{% endif %}}
-
 echo "-a always,exit -F arch=b32 -S execve -C gid!=guid${OTHER_FILTERS_EGID} -k setgid" > /etc/audit/rules.d/privileged.rules
 echo "-a always,exit -F arch=b64 -S execve${OTHER_FILTERS_EGID} -k setgid" >> /etc/audit/rules.d/privileged.rules
 echo "-a always,exit -F arch=b32 -S execve${OTHER_FILTERS_EUID} -k setuid" >> /etc/audit/rules.d/privileged.rules
diff --git a/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/tests/other_key.pass.sh b/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/tests/other_key.pass.sh
index 09dfcb5076a6..1266ad33742d 100644
--- a/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/tests/other_key.pass.sh
+++ b/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/tests/other_key.pass.sh
@@ -3,13 +3,8 @@
 
 # This tests situation where key value is not std. And also situation where there is extra spaces in rules.
 
-{{% if product in ["ol8"] %}}
-OTHER_FILTERS_EUID=" -C     uid!=euid"
-OTHER_FILTERS_EGID=" -C     gid!=egid"
-{{% else %}}
 OTHER_FILTERS_EUID=" -C    uid!=euid    -F euid=0"
 OTHER_FILTERS_EGID=" -C    gid!=egid    -F egid=0"
-{{% endif %}}
 
 echo "  -a   always,exit   -F   arch=b32   -S   execve   ${OTHER_FILTERS_EGID}   -F   key=my_setgid-audit-rule  " > /etc/audit/rules.d/privileged.rules
 echo "  -a   always,exit   -F   arch=b64   -S   execve   ${OTHER_FILTERS_EGID}   -k   my_setgid-audit-rule  " >> /etc/audit/rules.d/privileged.rules
diff --git a/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/tests/use_f_key.pass.sh b/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/tests/use_f_key.pass.sh
index b0ce8f934bb9..4844f44f4e5e 100644
--- a/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/tests/use_f_key.pass.sh
+++ b/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/tests/use_f_key.pass.sh
@@ -1,14 +1,8 @@
 #!/bin/bash
 # packages = audit
 
-
-{{% if product in ["ol8"] %}}
-OTHER_FILTERS_EUID=" -C uid!=euid"
-OTHER_FILTERS_EGID=" -C gid!=egid"
-{{% else %}}
 OTHER_FILTERS_EUID=" -C uid!=euid -F euid=0"
 OTHER_FILTERS_EGID=" -C gid!=egid -F egid=0"
-{{% endif %}}
 
 echo "-a always,exit -F arch=b32 -S execve${OTHER_FILTERS_EGID} -F key=setgid" > /etc/audit/rules.d/privileged.rules
 echo "-a always,exit -F arch=b64 -S execve${OTHER_FILTERS_EGID} -F key=setgid" >> /etc/audit/rules.d/privileged.rules
diff --git a/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/tests/wrong_a.fail.sh b/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/tests/wrong_a.fail.sh
index be0f1b541f00..499dfdb22ee7 100644
--- a/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/tests/wrong_a.fail.sh
+++ b/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/tests/wrong_a.fail.sh
@@ -1,13 +1,8 @@
 #!/bin/bash
 # packages = audit
 
-{{% if product in ["ol8"] %}}
-OTHER_FILTERS_EUID=" -C uid!=euid"
-OTHER_FILTERS_EGID=" -C gid!=egid"
-{{% else %}}
 OTHER_FILTERS_EUID=" -C uid!=euid -F euid=0"
 OTHER_FILTERS_EGID=" -C gid!=egid -F egid=0"
-{{% endif %}}
 
 echo "-a never,exit -F arch=b32 -S execve${OTHER_FILTERS_EGID} -k setgid" > /etc/audit/rules.d/privileged.rules
 echo "-a never,exit -F arch=b64 -S execve${OTHER_FILTERS_EGID} -k setgid" >> /etc/audit/rules.d/privileged.rules
diff --git a/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/tests/wrong_c_egid.fail.sh b/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/tests/wrong_c_egid.fail.sh
index a7b757311f41..f9078e64672b 100644
--- a/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/tests/wrong_c_egid.fail.sh
+++ b/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/tests/wrong_c_egid.fail.sh
@@ -1,13 +1,8 @@
 #!/bin/bash
 # packages = audit
 
-{{% if product in ["ol8"] %}}
-OTHER_FILTERS_EUID=" -C uid!=egid"
-OTHER_FILTERS_EGID=" -C gid!=egid"
-{{% else %}}
 OTHER_FILTERS_EUID=" -C uid!=egid -F euid=0"
 OTHER_FILTERS_EGID=" -C gid!=egid -F egid=0"
-{{% endif %}}
 
 echo '-a always,exit -F arch=b32 -S execve${OTHER_FILTERS_EGID} -k setgid' > /etc/audit/rules.d/privileged.rules
 echo '-a always,exit -F arch=b64 -S execve${OTHER_FILTERS_EGID} -k setgid' >> /etc/audit/rules.d/privileged.rules
diff --git a/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/tests/wrong_c_euid.fail.sh b/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/tests/wrong_c_euid.fail.sh
index 91c8e3521c0d..3f61e25013ae 100644
--- a/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/tests/wrong_c_euid.fail.sh
+++ b/linux_os/guide/auditing/auditd_configure_rules/audit_rules_suid_privilege_function/tests/wrong_c_euid.fail.sh
@@ -1,13 +1,8 @@
 #!/bin/bash
 # packages = audit
 
-{{% if product in ["ol8"] %}}
-OTHER_FILTERS_EUID=" -C uid!=euid"
-OTHER_FILTERS_EGID=" -C gid!=euid"
-{{% else %}}
 OTHER_FILTERS_EUID=" -C uid!=euid -F euid=0"
 OTHER_FILTERS_EGID=" -C gid!=euid -F egid=0"
-{{% endif %}}
 
 echo '-a always,exit -F arch=b32 -S execve${OTHER_FILTERS_EGID} -k setgid' > /etc/audit/rules.d/privileged.rules
 echo '-a always,exit -F arch=b64 -S execve${OTHER_FILTERS_EGID} -k setgid' >> /etc/audit/rules.d/privileged.rules
diff --git a/linux_os/guide/services/dhcp/disabling_dhcp_server/package_kea_removed/rule.yml b/linux_os/guide/services/dhcp/disabling_dhcp_server/package_kea_removed/rule.yml
index 6acdf95eb38f..8311aa5ce764 100644
--- a/linux_os/guide/services/dhcp/disabling_dhcp_server/package_kea_removed/rule.yml
+++ b/linux_os/guide/services/dhcp/disabling_dhcp_server/package_kea_removed/rule.yml
@@ -16,6 +16,7 @@ severity: medium
 identifiers:
     cce@rhel8: CCE-87348-9
     cce@rhel10: CCE-86596-4
+    cce@sle16: CCE-96693-7
 
 {{{ complete_ocil_entry_package(package="kea") }}}
 
diff --git a/linux_os/guide/services/dns/service_dnsmasq_disabled/rule.yml b/linux_os/guide/services/dns/service_dnsmasq_disabled/rule.yml
index b030a645a893..51fe990a7a8f 100644
--- a/linux_os/guide/services/dns/service_dnsmasq_disabled/rule.yml
+++ b/linux_os/guide/services/dns/service_dnsmasq_disabled/rule.yml
@@ -13,6 +13,9 @@ rationale: |-
 severity: medium
 
 identifiers:
+    cce@rhel8: CCE-90720-4
+    cce@rhel9: CCE-90721-2
+    cce@rhel10: CCE-90722-0
     cce@sle15: CCE-92602-2
 
 platform: system_with_kernel
diff --git a/linux_os/guide/services/mail/postfix_client/postfix_client_configure_mail_alias/rule.yml b/linux_os/guide/services/mail/postfix_client/postfix_client_configure_mail_alias/rule.yml
index da2b9e7fd6f6..721e16e03d13 100644
--- a/linux_os/guide/services/mail/postfix_client/postfix_client_configure_mail_alias/rule.yml
+++ b/linux_os/guide/services/mail/postfix_client/postfix_client_configure_mail_alias/rule.yml
@@ -24,6 +24,7 @@ identifiers:
     cce@rhel10: CCE-87937-9
     cce@sle12: CCE-83031-5
     cce@sle15: CCE-85605-4
+    cce@sle16: CCE-95842-1
     cce@slmicro5: CCE-93678-1
     cce@slmicro6: CCE-94656-6
 
diff --git a/linux_os/guide/services/nfs_and_rpc/package_nfs-common_removed/rule.yml b/linux_os/guide/services/nfs_and_rpc/package_nfs-common_removed/rule.yml
new file mode 100644
index 000000000000..fd114321b115
--- /dev/null
+++ b/linux_os/guide/services/nfs_and_rpc/package_nfs-common_removed/rule.yml
@@ -0,0 +1,22 @@
+documentation_complete: true
+
+title: 'Uninstall nfs-common Package'
+
+description: |-
+    {{{ describe_package_remove(package="nfs-common") }}}
+
+rationale: |-
+    If the system does not export NFS shares or act as an NFS client, it is
+    recommended that these services be removed to reduce the remote attack
+    surface.
+
+severity: low
+
+{{{ complete_ocil_entry_package(package="nfs-common") }}}
+
+fixtext: '{{{ fixtext_package_removed("nfs-common") }}}'
+
+template:
+    name: package_removed
+    vars:
+        pkgname: nfs-common
diff --git a/linux_os/guide/services/ntp/chronyd_configure_pool_and_server/bash/shared.sh b/linux_os/guide/services/ntp/chronyd_configure_pool_and_server/bash/shared.sh
index b4a1687cde49..144cf95c553a 100644
--- a/linux_os/guide/services/ntp/chronyd_configure_pool_and_server/bash/shared.sh
+++ b/linux_os/guide/services/ntp/chronyd_configure_pool_and_server/bash/shared.sh
@@ -5,6 +5,8 @@
 
 config_file="{{{ chrony_conf_path }}}"
 
+sed -i -e '$a\' "$config_file"
+
 # Check and configigure servers in {{{ chrony_conf_path }}}
 IFS="," read -a SERVERS <<< $var_multiple_time_servers
 for srv in "${SERVERS[@]}"
diff --git a/linux_os/guide/services/ntp/chronyd_configure_pool_and_server/rule.yml b/linux_os/guide/services/ntp/chronyd_configure_pool_and_server/rule.yml
index 28c845c74a92..c58abf32c154 100644
--- a/linux_os/guide/services/ntp/chronyd_configure_pool_and_server/rule.yml
+++ b/linux_os/guide/services/ntp/chronyd_configure_pool_and_server/rule.yml
@@ -25,6 +25,7 @@ identifiers:
     cce@rhel10: CCE-89285-1
     cce@sle12: CCE-92394-6
     cce@sle15: CCE-92526-3
+    cce@sle16: CCE-96189-6
     cce@slmicro5: CCE-93908-2
 
 references:
diff --git a/linux_os/guide/services/ntp/file_owner_etc_chrony_keys/rule.yml b/linux_os/guide/services/ntp/file_owner_etc_chrony_keys/rule.yml
index 683af7223c1f..6fb1a9fea13f 100644
--- a/linux_os/guide/services/ntp/file_owner_etc_chrony_keys/rule.yml
+++ b/linux_os/guide/services/ntp/file_owner_etc_chrony_keys/rule.yml
@@ -16,6 +16,7 @@ identifiers:
     cce@rhel8: CCE-86379-5
     cce@rhel9: CCE-86380-3
     cce@rhel10: CCE-88848-7
+    cce@sle16: CCE-96618-4
 
 ocil_clause: '{{{ ocil_clause_file_owner(file="/etc/chrony.keys", owner="root") }}}'
 
diff --git a/linux_os/guide/services/ntp/file_permissions_etc_chrony_keys/rule.yml b/linux_os/guide/services/ntp/file_permissions_etc_chrony_keys/rule.yml
index 94d5ed71807b..01c82c5f51a1 100644
--- a/linux_os/guide/services/ntp/file_permissions_etc_chrony_keys/rule.yml
+++ b/linux_os/guide/services/ntp/file_permissions_etc_chrony_keys/rule.yml
@@ -16,6 +16,7 @@ identifiers:
     cce@rhel8: CCE-86383-7
     cce@rhel9: CCE-86384-5
     cce@rhel10: CCE-88155-7
+    cce@sle16: CCE-96085-6
 
 ocil_clause: '{{{ ocil_clause_file_permissions(file="/etc/chrony.keys", perms="0640") }}}'
 
diff --git a/linux_os/guide/services/ntp/service_chronyd_enabled/rule.yml b/linux_os/guide/services/ntp/service_chronyd_enabled/rule.yml
index 754b1bf3d189..af8540441c24 100644
--- a/linux_os/guide/services/ntp/service_chronyd_enabled/rule.yml
+++ b/linux_os/guide/services/ntp/service_chronyd_enabled/rule.yml
@@ -25,6 +25,7 @@ identifiers:
     cce@rhel9: CCE-84217-9
     cce@rhel10: CCE-90511-7
     cce@sle15: CCE-92601-4
+    cce@sle16: CCE-96684-6
 
 references:
     srg: SRG-OS-000355-GPOS-00143
diff --git a/linux_os/guide/services/obsolete/service_rsyncd_disabled/rule.yml b/linux_os/guide/services/obsolete/service_rsyncd_disabled/rule.yml
index 1db77bb04a7a..d4ed1fb801e0 100644
--- a/linux_os/guide/services/obsolete/service_rsyncd_disabled/rule.yml
+++ b/linux_os/guide/services/obsolete/service_rsyncd_disabled/rule.yml
@@ -41,6 +41,7 @@ template:
         packagename@ol7: rsync
         packagename@sle12: rsync
         packagename@sle15: rsync
+        packagename@sle16: rsync
         packagename@slmicro5: rsync
         packagename@openeuler2203: rsync
         servicename@ubuntu2404: rsync
diff --git a/linux_os/guide/services/obsolete/tftp/package_tftp-server_removed/rule.yml b/linux_os/guide/services/obsolete/tftp/package_tftp-server_removed/rule.yml
index bba598123a34..1d6fbf388c10 100644
--- a/linux_os/guide/services/obsolete/tftp/package_tftp-server_removed/rule.yml
+++ b/linux_os/guide/services/obsolete/tftp/package_tftp-server_removed/rule.yml
@@ -2,6 +2,8 @@ documentation_complete: true
 
 {{% if 'ubuntu' in product %}}
 {{% set package_name = "tftpd-hpa" %}}
+{{% elif 'sle' in product %}}
+{{% set package_name = "tftp" %}}
 {{% else %}}
 {{% set package_name = "tftp-server" %}}
 {{% endif %}}
diff --git a/linux_os/guide/services/ssh/directory_groupowner_sshd_config_d/rule.yml b/linux_os/guide/services/ssh/directory_groupowner_sshd_config_d/rule.yml
index 9dd2ecc766b5..7c990240df3e 100644
--- a/linux_os/guide/services/ssh/directory_groupowner_sshd_config_d/rule.yml
+++ b/linux_os/guide/services/ssh/directory_groupowner_sshd_config_d/rule.yml
@@ -3,7 +3,7 @@ documentation_complete: true
 title: 'Verify Group Who Owns SSH Server Configuration Files'
 
 description: |-
-    {{{ describe_directory_group_owner(directory="/etc/ssh/sshd_config.d", group="root") }}}
+    {{{ describe_directory_group_owner(directory=sshd_config_dir, group="root") }}}
 
 rationale: |-
     Service configuration files enable or disable features of their respective
@@ -28,19 +28,19 @@ references:
     nist-csf: PR.AC-4,PR.DS-5
     srg: SRG-OS-000480-GPOS-00227
 
-ocil_clause: '{{{ ocil_clause_directory_group_owner(directory="/etc/ssh/sshd_config.d", group="root") }}}'
+ocil_clause: '{{{ ocil_clause_directory_group_owner(directory=sshd_config_dir, group="root") }}}'
 
 ocil: |-
-    {{{ ocil_directory_group_owner(directory="/etc/ssh/sshd_config.d", group="root") }}}
+    {{{ ocil_directory_group_owner(directory=sshd_config_dir, group="root") }}}
 
-fixtext: '{{{ fixtext_directory_group_owner(file="/etc/ssh/sshd_config.d", group="root") }}}'
+fixtext: '{{{ fixtext_directory_group_owner(file=sshd_config_dir, group="root") }}}'
 
-srg_requirement: '{{{ srg_requirement_directory_group_owner(file="/etc/ssh/sshd_config.d", group="root") }}}'
+srg_requirement: '{{{ srg_requirement_directory_group_owner(file=sshd_config_dir, group="root") }}}'
 
 template:
     name: file_groupowner
     vars:
-        filepath: '/etc/ssh/sshd_config.d/'
+        filepath: '{{{ sshd_config_dir }}}/'
         gid_or_name: '0'
 
 platform: system_with_kernel
diff --git a/linux_os/guide/services/ssh/directory_owner_sshd_config_d/rule.yml b/linux_os/guide/services/ssh/directory_owner_sshd_config_d/rule.yml
index 73713872c946..0d4dcc611827 100644
--- a/linux_os/guide/services/ssh/directory_owner_sshd_config_d/rule.yml
+++ b/linux_os/guide/services/ssh/directory_owner_sshd_config_d/rule.yml
@@ -3,7 +3,7 @@ documentation_complete: true
 title: 'Verify Owner on SSH Server Configuration Files'
 
 description: |-
-    {{{ describe_directory_owner(directory="/etc/ssh/sshd_config.d", owner="root") }}}
+    {{{ describe_directory_owner(directory=sshd_config_dir, owner="root") }}}
 
 rationale: |-
     Service configuration files enable or disable features of their respective
@@ -28,19 +28,19 @@ references:
     nist-csf: PR.AC-4,PR.DS-5
     srg: SRG-OS-000480-GPOS-00227
 
-ocil_clause: '{{{ ocil_clause_directory_owner(directory="/etc/ssh/sshd_config.d", owner="root") }}}'
+ocil_clause: '{{{ ocil_clause_directory_owner(directory=sshd_config_dir, owner="root") }}}'
 
 ocil: |-
-    {{{ ocil_directory_owner(directory="/etc/ssh/sshd_config.d", owner="root") }}}
+    {{{ ocil_directory_owner(directory=sshd_config_dir, owner="root") }}}
 
-fixtext: '{{{ fixtext_directory_owner(file="/etc/ssh/sshd_config.d", owner="root") }}}'
+fixtext: '{{{ fixtext_directory_owner(file=sshd_config_dir, owner="root") }}}'
 
-srg_requirement: '{{{ srg_requirement_directory_owner(file="/etc/ssh/sshd_config.d", owner="root") }}}'
+srg_requirement: '{{{ srg_requirement_directory_owner(file=sshd_config_dir, owner="root") }}}'
 
 template:
     name: file_owner
     vars:
-        filepath: '/etc/ssh/sshd_config.d/'
+        filepath: '{{{ sshd_config_dir }}}/'
         uid_or_name: '0'
 
 platform: system_with_kernel
diff --git a/linux_os/guide/services/ssh/directory_permissions_sshd_config_d/rule.yml b/linux_os/guide/services/ssh/directory_permissions_sshd_config_d/rule.yml
index 6a50abb97e99..9496c6c0efc3 100644
--- a/linux_os/guide/services/ssh/directory_permissions_sshd_config_d/rule.yml
+++ b/linux_os/guide/services/ssh/directory_permissions_sshd_config_d/rule.yml
@@ -3,7 +3,7 @@ documentation_complete: true
 title: 'Verify Permissions on SSH Server Config File'
 
 description: |-
-    {{{ describe_directory_permissions(directory="/etc/ssh/sshd_config.d", perms="0700") }}}
+    {{{ describe_directory_permissions(directory=sshd_config_dir, perms="0700") }}}
 
 rationale: |-
     Service configuration files enable or disable features of their respective
@@ -28,19 +28,19 @@ references:
     nist-csf: PR.AC-4,PR.DS-5
     srg: SRG-OS-000480-GPOS-00227
 
-ocil_clause: '{{{ ocil_clause_directory_permissions(directory="/etc/ssh/sshd_config.d", perms="-rwx------") }}}'
+ocil_clause: '{{{ ocil_clause_directory_permissions(directory=sshd_config_dir, perms="-rwx------") }}}'
 
 ocil: |-
-    {{{ ocil_directory_permissions(directory="/etc/ssh/sshd_config.d", perms="-rwx------") }}}
+    {{{ ocil_directory_permissions(directory=sshd_config_dir, perms="-rwx------") }}}
 
-fixtext: '{{{ fixtext_directory_permissions(file="/etc/ssh/sshd_config.d", mode="0700") }}}'
+fixtext: '{{{ fixtext_directory_permissions(file=sshd_config_dir, mode="0700") }}}'
 
-srg_requirement: '{{{ srg_requirement_directory_permission(file="/etc/ssh/sshd_config.d", mode="0700") }}}'
+srg_requirement: '{{{ srg_requirement_directory_permission(file=sshd_config_dir, mode="0700") }}}'
 
 template:
     name: file_permissions
     vars:
-        filepath: /etc/ssh/sshd_config.d/
+        filepath: '{{{ sshd_config_dir }}}/'
         filemode: '0700'
 
 platform: system_with_kernel
diff --git a/linux_os/guide/services/ssh/file_groupowner_sshd_config/rule.yml b/linux_os/guide/services/ssh/file_groupowner_sshd_config/rule.yml
index f0ea9c5cf13d..8d6c5cef73e9 100644
--- a/linux_os/guide/services/ssh/file_groupowner_sshd_config/rule.yml
+++ b/linux_os/guide/services/ssh/file_groupowner_sshd_config/rule.yml
@@ -4,7 +4,7 @@ documentation_complete: true
 title: 'Verify Group Who Owns SSH Server config file'
 
 description: |-
-    {{{ describe_file_group_owner(file="/etc/ssh/sshd_config", group="root") }}}
+    {{{ describe_file_group_owner(file=sshd_main_config_file, group="root") }}}
 
 rationale: |-
     Service configuration files enable or disable features of their respective
@@ -20,6 +20,7 @@ identifiers:
     cce@rhel10: CCE-86992-5
     cce@sle12: CCE-92276-5
     cce@sle15: CCE-91392-1
+    cce@sle16: CCE-96595-4
     cce@slmicro5: CCE-93889-4
 
 references:
@@ -35,19 +36,19 @@ references:
     nist-csf: PR.AC-4,PR.DS-5
     srg: SRG-OS-000480-GPOS-00227
 
-ocil_clause: '{{{ ocil_clause_file_group_owner(file="/etc/ssh/sshd_config", group="root") }}}'
+ocil_clause: '{{{ ocil_clause_file_group_owner(file=sshd_main_config_file, group="root") }}}'
 
 ocil: |-
-    {{{ ocil_file_group_owner(file="/etc/ssh/sshd_config", group="root") }}}
+    {{{ ocil_file_group_owner(file=sshd_main_config_file, group="root") }}}
 
-fixtext: '{{{ fixtext_file_group_owner(file="/etc/ssh/sshd_config", group="root") }}}'
+fixtext: '{{{ fixtext_file_group_owner(file=sshd_main_config_file, group="root") }}}'
 
-srg_requirement: '{{{ srg_requirement_file_group_owner(file="/etc/ssh/sshd_config", group="root") }}}'
+srg_requirement: '{{{ srg_requirement_file_group_owner(file=sshd_main_config_file, group="root") }}}'
 
 template:
     name: file_groupowner
     vars:
-        filepath: /etc/ssh/sshd_config
+        filepath: '{{{ sshd_main_config_file }}}'
         gid_or_name: '0'
 
 platform: system_with_kernel
diff --git a/linux_os/guide/services/ssh/file_groupowner_sshd_drop_in_config/rule.yml b/linux_os/guide/services/ssh/file_groupowner_sshd_drop_in_config/rule.yml
index 5f1728ab2a8b..3fd050bca108 100644
--- a/linux_os/guide/services/ssh/file_groupowner_sshd_drop_in_config/rule.yml
+++ b/linux_os/guide/services/ssh/file_groupowner_sshd_drop_in_config/rule.yml
@@ -3,7 +3,7 @@ documentation_complete: true
 title: 'Verify Group Who Owns SSH Server Configuration Files'
 
 description: |-
-    {{{ describe_files_in_directory_group_owner(directory="/etc/ssh/sshd_config.d", group="root") }}}
+    {{{ describe_files_in_directory_group_owner(directory=sshd_config_dir, group="root") }}}
 
 rationale: |-
     Service configuration files enable or disable features of their respective
@@ -28,19 +28,19 @@ references:
     nist-csf: PR.AC-4,PR.DS-5
     srg: SRG-OS-000480-GPOS-00227
 
-ocil_clause: '{{{ ocil_clause_files_in_directory_group_owner(directory="/etc/ssh/sshd_config.d", group="root") }}}'
+ocil_clause: '{{{ ocil_clause_files_in_directory_group_owner(directory=sshd_config_dir, group="root") }}}'
 
 ocil: |-
-    {{{ ocil_files_in_directory_group_owner(directory="/etc/ssh/sshd_config.d", group="root") }}}
+    {{{ ocil_files_in_directory_group_owner(directory=sshd_config_dir, group="root") }}}
 
-fixtext: '{{{ fixtext_files_in_directory_group_owner(directory="/etc/ssh/sshd_config.d", group="root") }}}'
+fixtext: '{{{ fixtext_files_in_directory_group_owner(directory=sshd_config_dir, group="root") }}}'
 
-srg_requirement: '{{{ srg_requirement_files_in_directory_group_owner(directory="/etc/ssh/sshd_config.d", group="root") }}}'
+srg_requirement: '{{{ srg_requirement_files_in_directory_group_owner(directory=sshd_config_dir, group="root") }}}'
 
 template:
     name: file_groupowner
     vars:
-        filepath: '/etc/ssh/sshd_config.d/'
+        filepath: '{{{ sshd_config_dir }}}/'
         file_regex: '^.*$'
         gid_or_name: '0'
 
diff --git a/linux_os/guide/services/ssh/file_groupownership_sshd_private_key/rule.yml b/linux_os/guide/services/ssh/file_groupownership_sshd_private_key/rule.yml
index 755283fde798..fd5b56034bd8 100644
--- a/linux_os/guide/services/ssh/file_groupownership_sshd_private_key/rule.yml
+++ b/linux_os/guide/services/ssh/file_groupownership_sshd_private_key/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhel8: CCE-86126-0
     cce@rhel9: CCE-86127-8
     cce@rhel10: CCE-90288-2
+    cce@sle16: CCE-96366-0
 
 ocil_clause: '{{{ ocil_clause_file_group_owner(file="/etc/ssh/*_key", group="root") }}}'
 
diff --git a/linux_os/guide/services/ssh/file_groupownership_sshd_pub_key/rule.yml b/linux_os/guide/services/ssh/file_groupownership_sshd_pub_key/rule.yml
index d25a28e32dc2..3e235d9d6e8e 100644
--- a/linux_os/guide/services/ssh/file_groupownership_sshd_pub_key/rule.yml
+++ b/linux_os/guide/services/ssh/file_groupownership_sshd_pub_key/rule.yml
@@ -16,6 +16,7 @@ identifiers:
     cce@rhel8: CCE-86133-6
     cce@rhel9: CCE-86136-9
     cce@rhel10: CCE-90469-8
+    cce@sle16: CCE-96361-1
 
 ocil_clause: '{{{ ocil_clause_file_group_owner(file="/etc/ssh/*.pub", group="root") }}}'
 
diff --git a/linux_os/guide/services/ssh/file_owner_sshd_config/rule.yml b/linux_os/guide/services/ssh/file_owner_sshd_config/rule.yml
index 4fefa1a5a591..528ebf4553b9 100644
--- a/linux_os/guide/services/ssh/file_owner_sshd_config/rule.yml
+++ b/linux_os/guide/services/ssh/file_owner_sshd_config/rule.yml
@@ -4,7 +4,7 @@ documentation_complete: true
 title: 'Verify Owner on SSH Server config file'
 
 description: |-
-    {{{ describe_file_owner(file="/etc/ssh/sshd_config", owner="root") }}}
+    {{{ describe_file_owner(file=sshd_main_config_file, owner="root") }}}
 
 rationale: |-
     Service configuration files enable or disable features of their respective
@@ -20,6 +20,7 @@ identifiers:
     cce@rhel10: CCE-89829-6
     cce@sle12: CCE-92277-3
     cce@sle15: CCE-91393-9
+    cce@sle16: CCE-96194-6
     cce@slmicro5: CCE-93888-6
 
 references:
@@ -35,19 +36,19 @@ references:
     nist-csf: PR.AC-4,PR.DS-5
     srg: SRG-OS-000480-GPOS-00227
 
-ocil_clause: '{{{ ocil_clause_file_owner(file="/etc/ssh/sshd_config", owner="root") }}}'
+ocil_clause: '{{{ ocil_clause_file_owner(file=sshd_main_config_file, owner="root") }}}'
 
 ocil: |-
-    {{{ ocil_file_owner(file="/etc/ssh/sshd_config", owner="root") }}}
+    {{{ ocil_file_owner(file=sshd_main_config_file, owner="root") }}}
 
-fixtext: '{{{ fixtext_file_owner(file="/etc/ssh/sshd_config", owner="root") }}}'
+fixtext: '{{{ fixtext_file_owner(file=sshd_main_config_file, owner="root") }}}'
 
-srg_requirement: '{{{ srg_requirement_file_owner(file="/etc/ssh/sshd_config", owner="root") }}}'
+srg_requirement: '{{{ srg_requirement_file_owner(file=sshd_main_config_file, owner="root") }}}'
 
 template:
     name: file_owner
     vars:
-        filepath: /etc/ssh/sshd_config
+        filepath: '{{{ sshd_main_config_file }}}'
         uid_or_name: '0'
 
 platform: system_with_kernel
diff --git a/linux_os/guide/services/ssh/file_owner_sshd_drop_in_config/rule.yml b/linux_os/guide/services/ssh/file_owner_sshd_drop_in_config/rule.yml
index f0832ad73e6b..bb0cf97aa84a 100644
--- a/linux_os/guide/services/ssh/file_owner_sshd_drop_in_config/rule.yml
+++ b/linux_os/guide/services/ssh/file_owner_sshd_drop_in_config/rule.yml
@@ -3,7 +3,7 @@ documentation_complete: true
 title: 'Verify Owner on SSH Server Configuration Files'
 
 description: |-
-    {{{ describe_files_in_directory_owner(directory="/etc/ssh/sshd_config.d", owner="root") }}}
+    {{{ describe_files_in_directory_owner(directory=sshd_config_dir, owner="root") }}}
 
 rationale: |-
     Service configuration files enable or disable features of their respective
@@ -29,19 +29,19 @@ references:
     nist-csf: PR.AC-4,PR.DS-5
     srg: SRG-OS-000480-GPOS-00227
 
-ocil_clause: '{{{ ocil_clause_files_in_directory_owner(directory="/etc/ssh/sshd_config.d", owner="root") }}}'
+ocil_clause: '{{{ ocil_clause_files_in_directory_owner(directory=sshd_config_dir, owner="root") }}}'
 
 ocil: |-
-    {{{ ocil_files_in_directory_owner(directory="/etc/ssh/sshd_config.d", owner="root") }}}
+    {{{ ocil_files_in_directory_owner(directory=sshd_config_dir, owner="root") }}}
 
-fixtext: '{{{ fixtext_files_in_directory_owner(directory="/etc/ssh/sshd_config.d", owner="root") }}}'
+fixtext: '{{{ fixtext_files_in_directory_owner(directory=sshd_config_dir, owner="root") }}}'
 
-srg_requirement: '{{{ srg_requirement_files_in_directory_owner(directory="/etc/ssh/sshd_config.d", owner="root") }}}'
+srg_requirement: '{{{ srg_requirement_files_in_directory_owner(directory=sshd_config_dir, owner="root") }}}'
 
 template:
     name: file_owner
     vars:
-        filepath: '/etc/ssh/sshd_config.d/'
+        filepath: '{{{ sshd_config_dir }}}/'
         file_regex: '^.*$'
         uid_or_name: '0'
 
diff --git a/linux_os/guide/services/ssh/file_ownership_sshd_private_key/rule.yml b/linux_os/guide/services/ssh/file_ownership_sshd_private_key/rule.yml
index ccb71fb9ae85..8bae6479baf1 100644
--- a/linux_os/guide/services/ssh/file_ownership_sshd_private_key/rule.yml
+++ b/linux_os/guide/services/ssh/file_ownership_sshd_private_key/rule.yml
@@ -15,6 +15,7 @@ identifiers:
     cce@rhel8: CCE-86118-7
     cce@rhel9: CCE-86119-5
     cce@rhel10: CCE-90624-8
+    cce@sle16: CCE-95879-3
 
 ocil_clause: '{{{ ocil_clause_file_owner(file="/etc/ssh/*_key", owner="root") }}}'
 
diff --git a/linux_os/guide/services/ssh/file_ownership_sshd_pub_key/rule.yml b/linux_os/guide/services/ssh/file_ownership_sshd_pub_key/rule.yml
index 4239d6724a9b..0e77032acb79 100644
--- a/linux_os/guide/services/ssh/file_ownership_sshd_pub_key/rule.yml
+++ b/linux_os/guide/services/ssh/file_ownership_sshd_pub_key/rule.yml
@@ -16,6 +16,7 @@ identifiers:
     cce@rhel8: CCE-86129-4
     cce@rhel9: CCE-86130-2
     cce@rhel10: CCE-87297-8
+    cce@sle16: CCE-95980-9
 
 ocil_clause: '{{{ ocil_clause_file_owner(file="/etc/ssh/*.pub", owner="root") }}}'
 
diff --git a/linux_os/guide/services/ssh/file_permissions_sshd_config/rule.yml b/linux_os/guide/services/ssh/file_permissions_sshd_config/rule.yml
index f36678bf6753..d9d311f83a97 100644
--- a/linux_os/guide/services/ssh/file_permissions_sshd_config/rule.yml
+++ b/linux_os/guide/services/ssh/file_permissions_sshd_config/rule.yml
@@ -4,7 +4,7 @@ documentation_complete: true
 title: 'Verify Permissions on SSH Server config file'
 
 description: |-
-    {{{ describe_file_permissions(file="/etc/ssh/sshd_config", perms="0600") }}}
+    {{{ describe_file_permissions(file=sshd_main_config_file, perms="0600") }}}
 
 rationale: |-
     Service configuration files enable or disable features of their respective
@@ -36,20 +36,20 @@ references:
     nist-csf: PR.AC-4,PR.DS-5
     srg: SRG-OS-000480-GPOS-00227
 
-ocil_clause: '{{{ ocil_clause_file_permissions(file="/etc/ssh/sshd_config", perms="-rw-------") }}}'
+ocil_clause: '{{{ ocil_clause_file_permissions(file=sshd_main_config_file, perms="-rw-------") }}}'
 
 ocil: |-
-    {{{ ocil_file_permissions(file="/etc/ssh/sshd_config", perms="-rw-------") }}}
+    {{{ ocil_file_permissions(file=sshd_main_config_file, perms="-rw-------") }}}
 
-fixtext: '{{{ fixtext_file_permissions(file="/etc/ssh/sshd_config", mode="0600") }}}'
+fixtext: '{{{ fixtext_file_permissions(file=sshd_main_config_file, mode="0600") }}}'
 
-srg_requirement: '{{{ srg_requirement_file_permission(file="/etc/ssh/sshd_config", mode="0600") }}}'
+srg_requirement: '{{{ srg_requirement_file_permission(file=sshd_main_config_file, mode="0600") }}}'
 
 template:
     name: file_permissions
     vars:
         filepath:
-            - /etc/ssh/sshd_config
+            - '{{{ sshd_main_config_file }}}'
         filemode: '0600'
 
 platform: system_with_kernel
diff --git a/linux_os/guide/services/ssh/file_permissions_sshd_drop_in_config/rule.yml b/linux_os/guide/services/ssh/file_permissions_sshd_drop_in_config/rule.yml
index 26a1815bce4d..0cfaa9f10f6b 100644
--- a/linux_os/guide/services/ssh/file_permissions_sshd_drop_in_config/rule.yml
+++ b/linux_os/guide/services/ssh/file_permissions_sshd_drop_in_config/rule.yml
@@ -3,7 +3,7 @@ documentation_complete: true
 title: 'Verify Permissions on SSH Server Config File'
 
 description: |-
-    {{{ describe_files_in_directory_permissions(directory="/etc/ssh/sshd_config.d", perms="0600") }}}
+    {{{ describe_files_in_directory_permissions(directory=sshd_config_dir, perms="0600") }}}
 
 rationale: |-
     Service configuration files enable or disable features of their respective
@@ -28,19 +28,19 @@ references:
     nist-csf: PR.AC-4,PR.DS-5
     srg: SRG-OS-000480-GPOS-00227
 
-ocil_clause: '{{{ ocil_clause_files_in_directory_permissions(directory="/etc/ssh/sshd_config.d", perms="-rw-------") }}}'
+ocil_clause: '{{{ ocil_clause_files_in_directory_permissions(directory=sshd_config_dir, perms="-rw-------") }}}'
 
 ocil: |-
-    {{{ ocil_files_in_directory_permissions(directory="/etc/ssh/sshd_config.d", perms="-rw-------") }}}
+    {{{ ocil_files_in_directory_permissions(directory=sshd_config_dir, perms="-rw-------") }}}
 
-fixtext: '{{{ fixtext_files_in_directory_permissions(directory="/etc/ssh/sshd_config.d", mode="0600") }}}'
+fixtext: '{{{ fixtext_files_in_directory_permissions(directory=sshd_config_dir, mode="0600") }}}'
 
-srg_requirement: '{{{ srg_requirement_files_in_directory_permissions(directory="/etc/ssh/sshd_config.d", mode="0600") }}}'
+srg_requirement: '{{{ srg_requirement_files_in_directory_permissions(directory=sshd_config_dir, mode="0600") }}}'
 
 template:
     name: file_permissions
     vars:
-        filepath: '/etc/ssh/sshd_config.d/'
+        filepath: '{{{ sshd_config_dir }}}/'
         file_regex: '^.*$'
         filemode: '0600'
 
diff --git a/linux_os/guide/services/ssh/file_sshd_50_redhat_exists/rule.yml b/linux_os/guide/services/ssh/file_sshd_50_redhat_exists/rule.yml
index ffa34166c034..db813093f611 100644
--- a/linux_os/guide/services/ssh/file_sshd_50_redhat_exists/rule.yml
+++ b/linux_os/guide/services/ssh/file_sshd_50_redhat_exists/rule.yml
@@ -1,9 +1,10 @@
+{{% set sshd_redhat_drop_in_file = sshd_config_dir ~ "/50-redhat.conf" %}}
 documentation_complete: true
 
-title: 'The File /etc/ssh/sshd_config.d/50-redhat.conf Must Exist'
+title: 'The File {{{ sshd_redhat_drop_in_file }}} Must Exist'
 
 description: |-
-    The <tt>/etc/ssh/sshd_config.d/50-redhat.conf</tt> file must exist as it contains important
+    The <tt>{{{ sshd_redhat_drop_in_file }}}</tt> file must exist as it contains important
     settings to secure SSH.
 
 
@@ -29,7 +30,7 @@ warnings:
 template:
     name: 'file_existence'
     vars:
-        filepath: '/etc/ssh/sshd_config.d/50-redhat.conf'
+        filepath: '{{{ sshd_redhat_drop_in_file }}}'
         exists: true
     backends:
         ansible: off
diff --git a/linux_os/guide/services/ssh/ssh_client/ssh_client_rekey_limit/ansible/shared.yml b/linux_os/guide/services/ssh/ssh_client/ssh_client_rekey_limit/ansible/shared.yml
index 81968afeebea..7b5a91c274e7 100644
--- a/linux_os/guide/services/ssh/ssh_client/ssh_client_rekey_limit/ansible/shared.yml
+++ b/linux_os/guide/services/ssh/ssh_client/ssh_client_rekey_limit/ansible/shared.yml
@@ -4,12 +4,15 @@
 # complexity = low
 # disruption = low
 {{{ ansible_instantiate_variables("var_ssh_client_rekey_limit_size", "var_ssh_client_rekey_limit_time") }}}
+{{%- set sshc_main_config = ssh_client_main_config_file -%}}
+{{%- set sshc_config_dir = ssh_client_config_dir -%}}
+{{%- set sshc_rekey_config = ssh_client_config_dir ~ "/02-rekey-limit.conf" -%}}
 
-{{{ ansible_lineinfile(msg='Ensure RekeyLimit is not configured in /etc/ssh/ssh_config', path='/etc/ssh/ssh_config', regex='^\s*RekeyLimit.*$', insensitive=false, create='no', state='absent', rule_title=rule_title) }}}
+{{{ ansible_lineinfile(msg='Ensure RekeyLimit is not configured in ' ~ sshc_main_config, path=sshc_main_config, regex='^\s*RekeyLimit.*$', insensitive=false, create='no', state='absent', rule_title=rule_title) }}}
 
 - name: Collect all include config files for ssh client which configure RekeyLimit
   ansible.builtin.find:
-    paths: "/etc/ssh/ssh_config.d/"
+    paths: "{{{ sshc_config_dir }}}"
     contains: '^[\s]*RekeyLimit.*$'
     patterns: "*.config"
   register: ssh_config_include_files
@@ -21,4 +24,4 @@
     state: "absent"
   loop: "{{ ssh_config_include_files.files }}"
 
-{{{ ansible_lineinfile(msg='Ensure that rekey limit is set to {{ var_ssh_client_rekey_limit_size }} {{ var_ssh_client_rekey_limit_time }} in /etc/ssh/ssh_config.d/02-rekey-limit.conf', path='/etc/ssh/ssh_config.d/02-rekey-limit.conf', regex='^\s*RekeyLimit.*$', insensitive=false, new_line='RekeyLimit {{ var_ssh_client_rekey_limit_size }} {{ var_ssh_client_rekey_limit_time }}', create='yes', state='present', rule_title=rule_title) }}}
+{{{ ansible_lineinfile(msg='Ensure that rekey limit is set to {{ var_ssh_client_rekey_limit_size }} {{ var_ssh_client_rekey_limit_time }} in ' ~ sshc_rekey_config, path=sshc_rekey_config, regex='^\s*RekeyLimit.*$', insensitive=false, new_line='RekeyLimit {{ var_ssh_client_rekey_limit_size }} {{ var_ssh_client_rekey_limit_time }}', create='yes', state='present', rule_title=rule_title) }}}
diff --git a/linux_os/guide/services/ssh/ssh_client/ssh_client_rekey_limit/bash/shared.sh b/linux_os/guide/services/ssh/ssh_client/ssh_client_rekey_limit/bash/shared.sh
index 9662e8d55e4c..c50d21ab5242 100644
--- a/linux_os/guide/services/ssh/ssh_client/ssh_client_rekey_limit/bash/shared.sh
+++ b/linux_os/guide/services/ssh/ssh_client/ssh_client_rekey_limit/bash/shared.sh
@@ -1,9 +1,10 @@
 # platform = multi_platform_all
 
 {{{ bash_instantiate_variables("var_ssh_client_rekey_limit_size", "var_ssh_client_rekey_limit_time") }}}
+{{%- set sshc_rekey_config = ssh_client_config_dir ~ "/02-rekey-limit.conf" -%}}
 
-main_config="/etc/ssh/ssh_config"
-include_directory="/etc/ssh/ssh_config.d"
+main_config="{{{ ssh_client_main_config_file }}}"
+include_directory="{{{ ssh_client_config_dir }}}"
 
 if grep -q '^[\s]*RekeyLimit.*$' "$main_config"; then
   sed -i '/^[\s]*RekeyLimit.*/d' "$main_config"
@@ -15,4 +16,4 @@ for file in "$include_directory"/*.conf; do
   fi
 done
 
-{{{ set_config_file(path="/etc/ssh/ssh_config.d/02-rekey-limit.conf", parameter="RekeyLimit", value='$var_ssh_client_rekey_limit_size $var_ssh_client_rekey_limit_time', create=true, insert_before="", insert_after="", insensitive=false, separator=" ", separator_regex="\s\+", prefix_regex="^\s*", rule_id=rule_id) }}}
+{{{ set_config_file(path=sshc_rekey_config, parameter="RekeyLimit", value='$var_ssh_client_rekey_limit_size $var_ssh_client_rekey_limit_time', create=true, insert_before="", insert_after="", insensitive=false, separator=" ", separator_regex="\s\+", prefix_regex="^\s*", rule_id=rule_id) }}}
diff --git a/linux_os/guide/services/ssh/ssh_client/ssh_client_rekey_limit/oval/shared.xml b/linux_os/guide/services/ssh/ssh_client/ssh_client_rekey_limit/oval/shared.xml
index 83c8433fb153..01f49eb6842f 100644
--- a/linux_os/guide/services/ssh/ssh_client/ssh_client_rekey_limit/oval/shared.xml
+++ b/linux_os/guide/services/ssh/ssh_client/ssh_client_rekey_limit/oval/shared.xml
@@ -1,10 +1,13 @@
 
+{{%- set sshc_main_config = ssh_client_main_config_file -%}}
+{{%- set sshc_config_dir = ssh_client_config_dir -%}}
+
 <def-group>
   <definition class="compliance" id="{{{ rule_id }}}" version="1">
-    {{{ oval_metadata("Ensure 'RekeyLimit' is configured with the correct value in /etc/ssh/ssh_config and /etc/ssh/ssh_config.d/*.conf", rule_title=rule_title) }}}
+    {{{ oval_metadata("Ensure 'RekeyLimit' is configured with the correct value in " ~ sshc_main_config ~ " and " ~ sshc_config_dir ~ "/*.conf", rule_title=rule_title) }}}
     <criteria comment="RekeyLimit is correctly configured for ssh client" operator="AND">
-      <criterion comment="check that RekeyLimit is not configured in /etc/ssh/ssh_config" test_ref="test_ssh_client_rekey_limit_main_config" negate="true" />
-      <criterion comment="check correct RekeyLimit configuration in /etc/ssh/ssh_config.d/*.conf" test_ref="test_ssh_client_rekey_limit_include_configs" />
+      <criterion comment="check that RekeyLimit is not configured in {{{ sshc_main_config }}}" test_ref="test_ssh_client_rekey_limit_main_config" negate="true" />
+      <criterion comment="check correct RekeyLimit configuration in {{{ sshc_config_dir }}}/*.conf" test_ref="test_ssh_client_rekey_limit_include_configs" />
     </criteria>
   </definition>
 
@@ -22,22 +25,23 @@
   <external_variable comment="Time component of the rekey limit" datatype="string" id="var_ssh_client_rekey_limit_time" version="1" />
 
 
-  <ind:textfilecontent54_test check="all" check_existence="all_exist" comment="tests the value of RekeyLimit setting in /etc/ssh/ssh_config file" id="test_ssh_client_rekey_limit_main_config" version="1">
+  <ind:textfilecontent54_test check="all" check_existence="all_exist" comment="tests the value of RekeyLimit setting in {{{ sshc_main_config }}}" id="test_ssh_client_rekey_limit_main_config" version="1">
      <ind:object object_ref="obj_ssh_client_rekey_limit_main_config"/>
   </ind:textfilecontent54_test>
 
   <ind:textfilecontent54_object id="obj_ssh_client_rekey_limit_main_config" version="1">
-     <ind:filepath>/etc/ssh/ssh_config</ind:filepath>
+     <ind:filepath>{{{ sshc_main_config }}}</ind:filepath>
      <ind:pattern operation="pattern match">^[\s]*RekeyLimit.*$</ind:pattern>
      <ind:instance datatype="int" operation="greater than or equal">1</ind:instance>
   </ind:textfilecontent54_object>
 
-  <ind:textfilecontent54_test check="all" check_existence="all_exist" comment="tests the value of RekeyLimit setting in /etc/ssh/ssh_config.d/*.conf" id="test_ssh_client_rekey_limit_include_configs" version="1">
+  <ind:textfilecontent54_test check="all" check_existence="all_exist" comment="tests the value of RekeyLimit setting in {{{ sshc_config_dir }}}/*.conf" id="test_ssh_client_rekey_limit_include_configs" version="1">
      <ind:object object_ref="obj_ssh_client_rekey_limit_include_configs"/>
   </ind:textfilecontent54_test>
 
   <ind:textfilecontent54_object id="obj_ssh_client_rekey_limit_include_configs" version="1">
-     <ind:filepath operation="pattern match">^/etc/ssh/ssh_config\.d/.*\.conf$</ind:filepath>
+     <ind:path>{{{ sshc_config_dir }}}</ind:path>
+     <ind:filename operation="pattern match">.*\.conf$</ind:filename>
      <ind:pattern var_ref="ssh_client_line_regex" operation="pattern match"></ind:pattern>
      <ind:instance datatype="int" operation="greater than or equal">1</ind:instance>
   </ind:textfilecontent54_object>
diff --git a/linux_os/guide/services/ssh/ssh_client/ssh_client_rekey_limit/rule.yml b/linux_os/guide/services/ssh/ssh_client/ssh_client_rekey_limit/rule.yml
index d9b564e17a4d..018a48cca00c 100644
--- a/linux_os/guide/services/ssh/ssh_client/ssh_client_rekey_limit/rule.yml
+++ b/linux_os/guide/services/ssh/ssh_client/ssh_client_rekey_limit/rule.yml
@@ -1,5 +1,8 @@
 documentation_complete: true
 
+{{% set sshc_main_config = ssh_client_main_config_file %}}
+{{% set sshc_config_dir = ssh_client_config_dir %}}
+{{% set sshc_rekey_config = ssh_client_config_dir ~ "/02-rekey-limit.conf" %}}
 
 title: 'Configure session renegotiation for SSH client'
 
@@ -8,11 +11,11 @@ description: |-
     the session key is renegotiated, both in terms of
     amount of data that may be transmitted and the time
     elapsed. To decrease the default limits, put line
-    <tt>RekeyLimit {{{ xccdf_value("var_ssh_client_rekey_limit_size") }}} {{{ xccdf_value("var_ssh_client_rekey_limit_time") }}}</tt> to file <tt>/etc/ssh/ssh_config.d/02-rekey-limit.conf</tt>.
+    <tt>RekeyLimit {{{ xccdf_value("var_ssh_client_rekey_limit_size") }}} {{{ xccdf_value("var_ssh_client_rekey_limit_time") }}}</tt> to file <tt>{{{ sshc_rekey_config }}}</tt>.
     Make sure that there is no other <tt>RekeyLimit</tt> configuration preceding
     the <tt>include</tt> directive in the main config file
-    <tt>/etc/ssh/ssh_config</tt>. Check also other files in
-    <tt>/etc/ssh/ssh_config.d</tt> directory. Files are processed according to
+    <tt>{{{ sshc_main_config }}}</tt>. Check also other files in
+    <tt>{{{ sshc_config_dir }}}</tt> directory. Files are processed according to
     lexicographical order of file names. Make sure that there is no file
     processed before <tt>02-rekey-limit.conf</tt> containing definition of
     <tt>RekeyLimit</tt>.
@@ -37,12 +40,12 @@ ocil_clause: 'it is commented out or is not set'
 
 ocil: |-
     To check if RekeyLimit is set correctly, run the following command:
-    <pre>$ sudo grep RekeyLimit /etc/ssh/ssh_config.d/*.conf</pre>
+    <pre>$ sudo grep RekeyLimit {{{ sshc_config_dir }}}/*.conf</pre>
     If configured properly, output should be
-    <pre>/etc/ssh/ssh_config.d/02-rekey-limit.conf:
+    <pre>{{{ sshc_rekey_config }}}:
     RekeyLimit {{{ xccdf_value("var_ssh_client_rekey_limit_size") }}} {{{ xccdf_value("var_ssh_client_rekey_limit_time") }}}</pre>
     Check also the main configuration file with the following command:
-    <pre>$ sudo grep RekeyLimit /etc/ssh/ssh_config</pre>
+    <pre>$ sudo grep RekeyLimit {{{ sshc_main_config }}}</pre>
     The command should not return any output.
 
 fixtext: |-
@@ -53,4 +56,3 @@ fixtext: |-
     Restart the SSH daemon for the settings to take effect.
 
     $ sudo systemctl restart sshd.service
-
diff --git a/linux_os/guide/services/ssh/ssh_client/ssh_client_use_approved_ciphers_ordered_stig/bash/shared.sh b/linux_os/guide/services/ssh/ssh_client/ssh_client_use_approved_ciphers_ordered_stig/bash/shared.sh
index c90bd144ef7d..01445b652b99 100644
--- a/linux_os/guide/services/ssh/ssh_client/ssh_client_use_approved_ciphers_ordered_stig/bash/shared.sh
+++ b/linux_os/guide/services/ssh/ssh_client/ssh_client_use_approved_ciphers_ordered_stig/bash/shared.sh
@@ -1,14 +1,16 @@
 # platform = multi_platform_ubuntu
 
 ssh_approved_ciphers="aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes128-ctr"
+{{% set sshc_cipher_list_config = ssh_client_config_dir ~ "/00-cipher-list.conf" %}}
 
-main_config="/etc/ssh/ssh_config"
-include_directory="/etc/ssh/ssh_config.d"
+main_config="{{{ ssh_client_main_config_file }}}"
+include_directory="{{{ ssh_client_config_dir }}}"
+cipher_list_config="$include_directory/00-cipher-list.conf"
 
 sed -i '/^\s*[Cc]iphers.*/d' "$main_config" "$include_directory"/*.conf || true
 
-if ! grep -qE '^[Hh]ost\s+\*$' /etc/ssh/ssh_config.d/00-cipher-list.conf; then
-  echo 'Host *' >> /etc/ssh/ssh_config.d/00-cipher-list.conf
+if ! grep -qE '^[Hh]ost\s+\*$' "$cipher_list_config"; then
+  echo 'Host *' >> "$cipher_list_config"
 fi
 
-{{{ set_config_file(path="/etc/ssh/ssh_config.d/00-cipher-list.conf", parameter="Ciphers", value='$ssh_approved_ciphers', create=true, insert_before="", insert_after="^Host\s+\*$", insensitive=false, separator=" ", separator_regex="\s\+", prefix_regex="^\s*", rule_id=rule_id) }}}
+{{{ set_config_file(path=sshc_cipher_list_config, parameter="Ciphers", value='$ssh_approved_ciphers', create=true, insert_before="", insert_after="^Host\s+\*$", insensitive=false, separator=" ", separator_regex="\s\+", prefix_regex="^\s*", rule_id=rule_id) }}}
diff --git a/linux_os/guide/services/ssh/ssh_client/ssh_client_use_approved_ciphers_ordered_stig/oval/shared.xml b/linux_os/guide/services/ssh/ssh_client/ssh_client_use_approved_ciphers_ordered_stig/oval/shared.xml
index 3d6471f483cd..6a17966e11de 100644
--- a/linux_os/guide/services/ssh/ssh_client/ssh_client_use_approved_ciphers_ordered_stig/oval/shared.xml
+++ b/linux_os/guide/services/ssh/ssh_client/ssh_client_use_approved_ciphers_ordered_stig/oval/shared.xml
@@ -1,40 +1,42 @@
 {{%- if product == 'ubuntu2404' %}}
 {{%- set ssh_approved_ciphers="aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes128-ctr" %}}
 {{%- endif %}}
+{{%- set sshc_main_config = ssh_client_main_config_file -%}}
+{{%- set sshc_config_dir = ssh_client_config_dir -%}}
 <def-group>
   <definition class="compliance" id="{{{ rule_id }}}" version="1">
     {{{ oval_metadata("Limit the ciphers to those which are FIPS-approved.", rule_title=rule_title) }}}
     <criteria comment="the configuration is correct if it exists" operator="AND">
-      <criterion comment="Check the ciphers in /etc/ssh/ssh_config if any"
+      <criterion comment="Check the ciphers in {{{ sshc_main_config }}} if any"
         test_ref="test_{{{ rule_id }}}" />
-      <criterion comment="Check the ciphers in /etc/ssh/ssh_config.d if any"
+      <criterion comment="Check the ciphers in {{{ sshc_config_dir }}} if any"
         test_ref="test_{{{ rule_id }}}_config_dir" />
       <criterion comment="the configuration exists" test_ref="test_ciphers_present_{{{ rule_id }}}" />
     </criteria>
   </definition>
 
   <ind:textfilecontent54_test check="all" check_existence="any_exist"
-    comment="tests the value of ciphers setting in the /etc/ssh/ssh_config file"
+    comment="tests the value of ciphers setting in {{{ sshc_main_config }}}"
     id="test_{{{ rule_id }}}" version="1">
     <ind:object object_ref="obj_{{{ rule_id }}}" />
     <ind:state state_ref="state_{{{ rule_id }}}" />
   </ind:textfilecontent54_test>
 
   <ind:textfilecontent54_object id="obj_{{{ rule_id }}}" version="1">
-    <ind:filepath>/etc/ssh/ssh_config</ind:filepath>
+    <ind:filepath>{{{ sshc_main_config }}}</ind:filepath>
     <ind:pattern operation="pattern match">^[ \t]*(?i)ciphers(?-i)[ \t]+(.+?)[ \t]*(?:$|#)</ind:pattern>
     <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
   </ind:textfilecontent54_object>
 
   <ind:textfilecontent54_test check="all" check_existence="any_exist"
-    comment="tests the value of ciphers setting in the /etc/ssh/ssh_config.d file"
+    comment="tests the value of ciphers setting in {{{ sshc_config_dir }}}"
     id="test_{{{ rule_id }}}_config_dir" version="1">
     <ind:object object_ref="obj_{{{ rule_id }}}_config_dir" />
     <ind:state state_ref="state_{{{ rule_id }}}" />
   </ind:textfilecontent54_test>
 
   <ind:textfilecontent54_object id="obj_{{{ rule_id }}}_config_dir" version="1">
-    <ind:path>/etc/ssh/ssh_config.d</ind:path>
+    <ind:path>{{{ sshc_config_dir }}}</ind:path>
     <ind:filename operation="pattern match">.*\.conf$</ind:filename>
     <ind:pattern operation="pattern match">^[ \t]*(?i)ciphers(?-i)[ \t]+(.+?)[ \t]*(?:$|#)</ind:pattern>
     <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
diff --git a/linux_os/guide/services/ssh/ssh_client/ssh_client_use_approved_ciphers_ordered_stig/rule.yml b/linux_os/guide/services/ssh/ssh_client/ssh_client_use_approved_ciphers_ordered_stig/rule.yml
index b390b8e81328..bc8f65cd23a0 100644
--- a/linux_os/guide/services/ssh/ssh_client/ssh_client_use_approved_ciphers_ordered_stig/rule.yml
+++ b/linux_os/guide/services/ssh/ssh_client/ssh_client_use_approved_ciphers_ordered_stig/rule.yml
@@ -1,13 +1,14 @@
 {{%- if product == 'ubuntu2404' %}}
 {{%- set ssh_approved_ciphers = "aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes128-ctr" %}}
 {{%- endif %}}
+{{%- set sshc_main_config = ssh_client_main_config_file -%}}
 documentation_complete: true
 
 title: 'Use Only FIPS 140-3 Validated Ciphers in SSH Client Configuration'
 
 description: |-
     Limit the ciphers to those algorithms which are FIPS-approved.
-    The following line in <tt>/etc/ssh/ssh_config</tt>
+    The following line in <tt>{{{ sshc_main_config }}}</tt>
     demonstrates use of FIPS-approved ciphers:
     {{%- if 'ubuntu' in product %}}
     <pre>Ciphers {{{ ssh_approved_ciphers }}}</pre>
diff --git a/linux_os/guide/services/ssh/ssh_client/ssh_use_approved_macs_ordered_stig/bash/shared.sh b/linux_os/guide/services/ssh/ssh_client/ssh_use_approved_macs_ordered_stig/bash/shared.sh
index 8c4fa3715f4b..c5bef9fd205b 100644
--- a/linux_os/guide/services/ssh/ssh_client/ssh_use_approved_macs_ordered_stig/bash/shared.sh
+++ b/linux_os/guide/services/ssh/ssh_client/ssh_use_approved_macs_ordered_stig/bash/shared.sh
@@ -1,14 +1,16 @@
 # platform = multi_platform_ubuntu
 
 {{{ bash_instantiate_variables("ssh_approved_macs") }}}
+{{%- set sshc_mac_list_config = ssh_client_config_dir ~ "/00-mac-list.conf" -%}}
 
-main_config="/etc/ssh/ssh_config"
-include_directory="/etc/ssh/ssh_config.d"
+main_config="{{{ ssh_client_main_config_file }}}"
+include_directory="{{{ ssh_client_config_dir }}}"
+mac_list_config="$include_directory/00-mac-list.conf"
 
 sed -i '/^\s*MACs.*/d' "$main_config" "$include_directory"/*.conf || true
 
-if ! grep -qE '^[Hh]ost\s+\*$' /etc/ssh/ssh_config.d/00-mac-list.conf; then
-  echo 'Host *' >> /etc/ssh/ssh_config.d/00-mac-list.conf
+if ! grep -qE '^[Hh]ost\s+\*$' "$mac_list_config"; then
+  echo 'Host *' >> "$mac_list_config"
 fi
 
-{{{ set_config_file(path="/etc/ssh/ssh_config.d/00-mac-list.conf", parameter="MACs", value='$ssh_approved_macs', create=true, insert_before="", insert_after="^Host\s+\*$", insensitive=false, separator=" ", separator_regex="\s\+", prefix_regex="^\s*", rule_id=rule_id) }}}
+{{{ set_config_file(path=sshc_mac_list_config, parameter="MACs", value='$ssh_approved_macs', create=true, insert_before="", insert_after="^Host\s+\*$", insensitive=false, separator=" ", separator_regex="\s\+", prefix_regex="^\s*", rule_id=rule_id) }}}
diff --git a/linux_os/guide/services/ssh/ssh_client/ssh_use_approved_macs_ordered_stig/oval/shared.xml b/linux_os/guide/services/ssh/ssh_client/ssh_use_approved_macs_ordered_stig/oval/shared.xml
index be209a2537b6..a7dbbe5edee9 100644
--- a/linux_os/guide/services/ssh/ssh_client/ssh_use_approved_macs_ordered_stig/oval/shared.xml
+++ b/linux_os/guide/services/ssh/ssh_client/ssh_use_approved_macs_ordered_stig/oval/shared.xml
@@ -1,11 +1,14 @@
+{{%- set sshc_main_config = ssh_client_main_config_file -%}}
+{{%- set sshc_config_dir = ssh_client_config_dir -%}}
+
 <def-group>
   <definition class="compliance" id="{{{ rule_id }}}" version="1">
     {{{ oval_metadata("Limit the Message Authentication Codes (MACs) to those which are FIPS-approved.", rule_title=rule_title) }}}
     <criteria comment="ssh is configured correctly" operator="AND">
       <criteria comment="the configuration is correct if it exists" operator="AND">
-        <criterion comment="Check the MACs in /etc/ssh/ssh_config if any"
+        <criterion comment="Check the MACs in {{{ sshc_main_config }}} if any"
           test_ref="test_{{{ rule_id }}}" />
-        <criterion comment="Check the MACs in /etc/ssh/ssh_config.d if any"
+        <criterion comment="Check the MACs in {{{ sshc_config_dir }}} if any"
           test_ref="test_{{{ rule_id }}}_config_dir" />
       </criteria>
       <criterion comment="the configuration exists" test_ref="test_MACs_present_{{{ rule_id }}}" />
@@ -13,27 +16,27 @@
   </definition>
 
   <ind:textfilecontent54_test check="all" check_existence="any_exist"
-    comment="tests the value of MACs setting in the /etc/ssh/ssh_config file"
+    comment="tests the value of MACs setting in {{{ sshc_main_config }}}"
     id="test_{{{ rule_id }}}" version="1">
     <ind:object object_ref="obj_{{{ rule_id }}}" />
     <ind:state state_ref="state_{{{ rule_id }}}" />
   </ind:textfilecontent54_test>
 
   <ind:textfilecontent54_object id="obj_{{{ rule_id }}}" version="1">
-    <ind:filepath>/etc/ssh/ssh_config</ind:filepath>
+    <ind:filepath>{{{ sshc_main_config }}}</ind:filepath>
     <ind:pattern operation="pattern match">^[ \t]*(?i)MACs(?-i)[ \t]+(.+?)[ \t]*(?:$|#)</ind:pattern>
     <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
   </ind:textfilecontent54_object>
 
   <ind:textfilecontent54_test check="all" check_existence="any_exist"
-    comment="tests the value of MACs setting in the /etc/ssh/ssh_config.d file"
+    comment="tests the value of MACs setting in {{{ sshc_config_dir }}}"
     id="test_{{{ rule_id }}}_config_dir" version="1">
     <ind:object object_ref="obj_{{{ rule_id }}}_config_dir" />
     <ind:state state_ref="state_{{{ rule_id }}}" />
   </ind:textfilecontent54_test>
 
   <ind:textfilecontent54_object id="obj_{{{ rule_id }}}_config_dir" version="1">
-    <ind:path>/etc/ssh/ssh_config.d</ind:path>
+    <ind:path>{{{ sshc_config_dir }}}</ind:path>
     <ind:filename operation="pattern match">.*\.conf$</ind:filename>
     <ind:pattern operation="pattern match">^[ \t]*(?i)MACs(?-i)[ \t]+(.+?)[ \t]*(?:$|#)</ind:pattern>
     <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
diff --git a/linux_os/guide/services/ssh/ssh_client/ssh_use_approved_macs_ordered_stig/rule.yml b/linux_os/guide/services/ssh/ssh_client/ssh_use_approved_macs_ordered_stig/rule.yml
index 45de2c107a32..a3b143a1e57f 100644
--- a/linux_os/guide/services/ssh/ssh_client/ssh_use_approved_macs_ordered_stig/rule.yml
+++ b/linux_os/guide/services/ssh/ssh_client/ssh_use_approved_macs_ordered_stig/rule.yml
@@ -1,10 +1,12 @@
 documentation_complete: true
+{{% set sshc_main_config = ssh_client_main_config_file %}}
+{{%- set sshc_config_dir = ssh_client_config_dir -%}}
 
 title: 'Use Only FIPS 140-3 Validated MACs'
 
 description: |-
     Limit the MACs to those hash algorithms which are FIPS-approved.
-    The following line in <tt>/etc/ssh/ssh_config</tt>
+    The following line in <tt>{{{ sshc_main_config }}}</tt>
     demonstrates use of FIPS-approved MACs:
 
     <pre>MACs {{{ ssh_approved_macs }}}</pre>
@@ -22,11 +24,10 @@ ocil_clause: 'MACs option is commented out or not using FIPS-approved hash algor
 ocil: |-
     Only FIPS-approved MACs should be used. To verify that only FIPS-approved
     MACs are in use, run the following command:
-    <pre>$ sudo grep -ir macs /etc/ssh/ssh_config*</pre>
+    <pre>$ sudo grep -ir macs {{{ sshc_main_config }}} {{{ sshc_config_dir }}}</pre>
     The output should contain only following MACs:
     <pre>MACs {{{ xccdf_value("ssh_approved_macs") }}}</pre>
 
 warnings:
     - general: |-
         The system needs to be rebooted for these changes to take effect.
-
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_include_crypto_policy/oval/shared.xml b/linux_os/guide/services/ssh/ssh_server/sshd_include_crypto_policy/oval/shared.xml
index 0370a61865c4..4f652f5c1c22 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_include_crypto_policy/oval/shared.xml
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_include_crypto_policy/oval/shared.xml
@@ -1,3 +1,9 @@
+{{%- set sshd_main_config = sshd_main_config_file -%}}
+{{%- set sshd_drop_in_dir = sshd_config_dir -%}}
+{{%- set sshd_drop_in_include_regex = (sshd_drop_in_dir | replace(".", "\\.")) ~ "/\\*\\.conf" -%}}
+{{%- set sshd_main_config_regex = sshd_main_config | replace(".", "\\.") -%}}
+{{%- set sshd_drop_in_dir_regex = sshd_drop_in_dir | replace(".", "\\.") -%}}
+{{%- set sshd_config_locations_regex = "^(" ~ sshd_main_config_regex ~ "|" ~ sshd_drop_in_dir_regex ~ "/.*\\.conf)$" -%}}
 <def-group>
     <definition class="compliance" id="{{{ rule_id }}}" version="1">
         {{{ oval_metadata("Ensure SSHD to include the system crypto policy", rule_title=rule_title) }}}
@@ -13,8 +19,8 @@
     </ind:textfilecontent54_test>
 
     <ind:textfilecontent54_object id="obj_{{{ rule_id }}}_include_sshd_drop_in" version="1">
-        <ind:filepath operation="pattern match">/etc/ssh/sshd_config</ind:filepath>
-        <ind:pattern operation="pattern match">^[ \t]*(?i)Include(?-i)[ \t]+/etc/ssh/sshd_config\.d/\*.conf$</ind:pattern>
+        <ind:filepath>{{{ sshd_main_config }}}</ind:filepath>
+        <ind:pattern operation="pattern match">^[ \t]*(?i)Include(?-i)[ \t]+{{{ sshd_drop_in_include_regex }}}$</ind:pattern>
         <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
     </ind:textfilecontent54_object>
 
@@ -25,7 +31,7 @@
     </ind:textfilecontent54_test>
 
     <ind:textfilecontent54_object id="obj_{{{ rule_id }}}_include_sshd_include_system_crypto" version="1">
-        <ind:filepath operation="pattern match">/etc/ssh/(sshd_config|sshd_config\.d/.*\.conf)</ind:filepath>
+        <ind:filepath operation="pattern match">{{{ sshd_config_locations_regex }}}</ind:filepath>
         <ind:pattern operation="pattern match">^[ \t]*(?i)Include(?-i)[ \t]+/etc/crypto-policies/back-ends/opensshserver\.config$</ind:pattern>
         <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
     </ind:textfilecontent54_object>
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/oval/shared.xml b/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/oval/shared.xml
index aff4c3172b75..64801d0bb571 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/oval/shared.xml
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/oval/shared.xml
@@ -1,3 +1,8 @@
+{{%- set sshd_main_config = sshd_main_config_file -%}}
+{{%- set sshd_drop_in_dir = sshd_config_dir -%}}
+{{%- set sshd_main_config_regex = sshd_main_config | replace(".", "\\.") -%}}
+{{%- set sshd_drop_in_dir_regex = sshd_drop_in_dir | replace(".", "\\.") -%}}
+{{%- set sshd_any_config_regex = "^(" ~ sshd_main_config_regex ~ "|" ~ sshd_drop_in_dir_regex ~ "/.*\\.conf)$" -%}}
 <def-group>
   <definition class="compliance" id="{{{ rule_id }}}" version="1">
     {{{ oval_metadata("One of the following parameters of the sshd configuration file is set:  AllowUsers, DenyUsers, AllowGroups, DenyGroups.", rule_title=rule_title) }}}
@@ -27,22 +32,22 @@
   </ind:textfilecontent54_test>
 
   <ind:textfilecontent54_object id="obj_allow_user" version="1">
-    <ind:filepath operation="pattern match">^\/etc\/ssh\/sshd_config.*$</ind:filepath>
+    <ind:filepath operation="pattern match">{{{ sshd_any_config_regex }}}</ind:filepath>
     <ind:pattern operation="pattern match" datatype="string">(?i)^[ ]*AllowUsers[ ]+((?:[^ \n]+[ ]*)+)$</ind:pattern>
     <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
   </ind:textfilecontent54_object>
   <ind:textfilecontent54_object id="obj_allow_group" version="1">
-    <ind:filepath operation="pattern match">^/etc/ssh/sshd_config.*$</ind:filepath>
+    <ind:filepath operation="pattern match">{{{ sshd_any_config_regex }}}</ind:filepath>
     <ind:pattern operation="pattern match" datatype="string">(?i)^[ ]*AllowGroups[ ]+((?:[^ \n]+[ ]*)+)$</ind:pattern>
     <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
   </ind:textfilecontent54_object>
   <ind:textfilecontent54_object id="obj_deny_user" version="1">
-    <ind:filepath operation="pattern match">^/etc/ssh/sshd_config.*$</ind:filepath>
+    <ind:filepath operation="pattern match">{{{ sshd_any_config_regex }}}</ind:filepath>
     <ind:pattern operation="pattern match" datatype="string">(?i)^[ ]*DenyUsers[ ]+((?:[^ \n]+[ ]*)+)$</ind:pattern>
     <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
   </ind:textfilecontent54_object>
   <ind:textfilecontent54_object id="obj_deny_group" version="1">
-    <ind:filepath operation="pattern match">^/etc/ssh/sshd_config.*$</ind:filepath>
+    <ind:filepath operation="pattern match">{{{ sshd_any_config_regex }}}</ind:filepath>
     <ind:pattern operation="pattern match" datatype="string">(?i)^[ ]*DenyGroups[ ]+((?:[^ \n]+[ ]*)+)$</ind:pattern>
     <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
   </ind:textfilecontent54_object>
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/oval/sle16.xml b/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/oval/sle16.xml
new file mode 100644
index 000000000000..8dce53384a11
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/oval/sle16.xml
@@ -0,0 +1,100 @@
+{{% macro test_sshd_lineinfile(filepath, param, id) %}}
+{{%- set object_id = filepath | replace("/", "_") | replace("-", "_") | replace(".", "_") -%}}
+  <ind:textfilecontent54_test id="{{{ id }}}" version="1" check="all"
+    check_existence="only_one_exists" comment="Check if there is an {{{ param }}} entry in {{{ filepath }}}">
+    <ind:object object_ref="object_{{{ param }}}{{{ object_id }}}" />
+  </ind:textfilecontent54_test>
+  <ind:textfilecontent54_object id="object_{{{ param }}}{{{ object_id }}}" version="1">
+    <ind:filepath operation="pattern match">^{{{ filepath }}}</ind:filepath>
+    <ind:pattern operation="pattern match" datatype="string">(?i)^[ ]*{{{ param }}}[ ]+((?:[^ \n]+[ ]*)+)$</ind:pattern>
+    <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
+  </ind:textfilecontent54_object>
+{{% endmacro %}}
+
+{{% macro test_sshd_lineindir(filepath, param, id) %}}
+{{%- set object_id = filepath | replace("/", "_") | replace("-", "_") | replace(".", "_") -%}}
+  <ind:textfilecontent54_test id="{{{ id }}}" version="1" check="all"
+    check_existence="only_one_exists" comment="Check if there is an {{{ param }}} entry in {{{ filepath }}}">
+    <ind:object object_ref="object_{{{ param }}}{{{ object_id }}}" />
+  </ind:textfilecontent54_test>
+  <ind:textfilecontent54_object id="object_{{{ param }}}{{{ object_id }}}" version="1">
+    <ind:path>{{{ filepath }}}</ind:path>
+    <ind:filename operation="pattern match">.*\.conf$</ind:filename>
+    <ind:pattern operation="pattern match" datatype="string">(?i)^[ ]*{{{ param }}}[ ]+((?:[^ \n]+[ ]*)+)$</ind:pattern>
+    <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
+  </ind:textfilecontent54_object>
+{{% endmacro %}}
+
+<def-group>
+  <definition class="compliance" id="{{{ rule_id }}}" version="1">
+    {{{ oval_metadata("One of the following parameters of the sshd configuration file is set: AllowUsers, DenyUsers, AllowGroups, DenyGroups.", rule_title=rule_title) }}}
+    <criteria operator="OR" comment="sshd limits the users who can log in">
+      <criteria comment="AllowUsers, DenyUsers, AllowGroups, DenyGroups when using /etc/ssh/sshd_config" operator="AND">
+        <criterion comment="SSH configuration /etc/ssh/sshd_config exists" test_ref="test_etc_ssh_sshd_config_exist"/>
+        <criteria operator="OR">
+            <criterion test_ref="test_allow_user_is_configured_etc_ssh_sshdconfig" />
+            <criterion test_ref="test_allow_groups_is_configured_etc_ssh_sshdconfig" />
+            <criterion test_ref="test_deny_users_is_configured_etc_ssh_sshdconfig" />
+            <criterion test_ref="test_deny_groups_is_configured_etc_ssh_sshdconfig" />
+            <criterion test_ref="test_allow_user_is_configured_etc_ssh_sshdconfig_dir" />
+            <criterion test_ref="test_allow_groups_is_configured_etc_ssh_sshdconfig_dir" />
+            <criterion test_ref="test_deny_users_is_configured_etc_ssh_sshdconfig_dir" />
+            <criterion test_ref="test_deny_groups_is_configured_etc_ssh_sshdconfig_dir" />
+            <criterion test_ref="test_allow_user_is_configured_usr_etc_ssh_sshdconfig_dir" />
+            <criterion test_ref="test_allow_groups_is_configured_usr_etc_ssh_sshdconfig_dir" />
+            <criterion test_ref="test_deny_users_is_configured_usr_etc_ssh_sshdconfig_dir" />
+            <criterion test_ref="test_deny_groups_is_configured_usr_etc_ssh_sshdconfig_dir" />
+        </criteria>
+      </criteria>
+      <criteria comment="AllowUsers, DenyUsers, AllowGroups, DenyGroups when using /usr/etc/ssh/sshd_config" operator="AND">
+        <criterion comment="SSH configuration /etc/ssh/sshd_config does not exists" test_ref="test_etc_ssh_sshd_config_exist" negate="true"/>
+        <criteria operator="OR">
+            <criterion test_ref="test_allow_user_is_configured_usr_etc_ssh_sshdconfig" />
+            <criterion test_ref="test_allow_groups_is_configured_usr_etc_ssh_sshdconfig" />
+            <criterion test_ref="test_deny_users_is_configured_usr_etc_ssh_sshdconfig" />
+            <criterion test_ref="test_deny_groups_is_configured_usr_etc_ssh_sshdconfig" />
+            <criterion test_ref="test_allow_user_is_configured_etc_ssh_sshdconfig_dir" />
+            <criterion test_ref="test_allow_groups_is_configured_etc_ssh_sshdconfig_dir" />
+            <criterion test_ref="test_deny_users_is_configured_etc_ssh_sshdconfig_dir" />
+            <criterion test_ref="test_deny_groups_is_configured_etc_ssh_sshdconfig_dir" />
+            <criterion test_ref="test_allow_user_is_configured_usr_etc_ssh_sshdconfig_dir" />
+            <criterion test_ref="test_allow_groups_is_configured_usr_etc_ssh_sshdconfig_dir" />
+            <criterion test_ref="test_deny_users_is_configured_usr_etc_ssh_sshdconfig_dir" />
+            <criterion test_ref="test_deny_groups_is_configured_usr_etc_ssh_sshdconfig_dir" />
+        </criteria>
+      </criteria>
+    </criteria>
+  </definition>
+
+  <unix:file_test check="all" check_existence="all_exist"
+      comment="SSH configuration /etc/ssh/sshd_config exists"
+      id="test_etc_ssh_sshd_config_exist"
+      state_operator="AND" version="1">
+    <unix:object object_ref="obj_etc_ssh_sshd_config_exist"/>
+  </unix:file_test>
+  <unix:file_object
+      comment="SSH configuration /etc/ssh/sshd_config exists"
+      id="obj_etc_ssh_sshd_config_exist" version="1">
+    <unix:filepath operation="pattern match">^/etc/ssh/sshd_config</unix:filepath>
+  </unix:file_object>
+
+  {{{ test_sshd_lineinfile("/etc/ssh/sshd_config", "AllowUsers", "test_allow_user_is_configured_etc_ssh_sshdconfig") }}}
+  {{{ test_sshd_lineinfile("/etc/ssh/sshd_config", "AllowGroups", "test_allow_groups_is_configured_etc_ssh_sshdconfig") }}}
+  {{{ test_sshd_lineinfile("/etc/ssh/sshd_config", "DenyUsers", "test_deny_users_is_configured_etc_ssh_sshdconfig") }}}
+  {{{ test_sshd_lineinfile("/etc/ssh/sshd_config", "DenyGroups", "test_deny_groups_is_configured_etc_ssh_sshdconfig") }}}
+
+  {{{ test_sshd_lineinfile("/usr/etc/ssh/sshd_config", "AllowUsers", "test_allow_user_is_configured_usr_etc_ssh_sshdconfig") }}}
+  {{{ test_sshd_lineinfile("/usr/etc/ssh/sshd_config", "AllowGroups", "test_allow_groups_is_configured_usr_etc_ssh_sshdconfig") }}}
+  {{{ test_sshd_lineinfile("/usr/etc/ssh/sshd_config", "DenyUsers", "test_deny_users_is_configured_usr_etc_ssh_sshdconfig") }}}
+  {{{ test_sshd_lineinfile("/usr/etc/ssh/sshd_config", "DenyGroups", "test_deny_groups_is_configured_usr_etc_ssh_sshdconfig") }}}
+
+  {{{ test_sshd_lineindir("/etc/ssh/sshd_config.d", "AllowUsers", "test_allow_user_is_configured_etc_ssh_sshdconfig_dir") }}}
+  {{{ test_sshd_lineindir("/etc/ssh/sshd_config.d", "AllowGroups", "test_allow_groups_is_configured_etc_ssh_sshdconfig_dir") }}}
+  {{{ test_sshd_lineindir("/etc/ssh/sshd_config.d", "DenyUsers", "test_deny_users_is_configured_etc_ssh_sshdconfig_dir") }}}
+  {{{ test_sshd_lineindir("/etc/ssh/sshd_config.d", "DenyGroups", "test_deny_groups_is_configured_etc_ssh_sshdconfig_dir") }}}
+
+  {{{ test_sshd_lineindir("/usr/etc/ssh/sshd_config.d", "AllowUsers", "test_allow_user_is_configured_usr_etc_ssh_sshdconfig_dir") }}}
+  {{{ test_sshd_lineindir("/usr/etc/ssh/sshd_config.d", "AllowGroups", "test_allow_groups_is_configured_usr_etc_ssh_sshdconfig_dir") }}}
+  {{{ test_sshd_lineindir("/usr/etc/ssh/sshd_config.d", "DenyUsers", "test_deny_users_is_configured_usr_etc_ssh_sshdconfig_dir") }}}
+  {{{ test_sshd_lineindir("/usr/etc/ssh/sshd_config.d", "DenyGroups", "test_deny_groups_is_configured_usr_etc_ssh_sshdconfig_dir") }}}
+</def-group>
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/allow_groups.pass.sh b/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/allow_groups.pass.sh
index 4a5255dc3c9f..0794a24e80a7 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/allow_groups.pass.sh
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/allow_groups.pass.sh
@@ -1,4 +1,4 @@
 #!/bin/bash
 
-find /etc/ssh/sshd_config* -type f -print0 | xargs -0 sed -i '/^(Allow|Deny)(Users|Groups).*/d'
+source common.sh
 echo "AllowGroups testgroup1 testgroup2 testgroup3" >> /etc/ssh/sshd_config
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/allow_groups_etc_ssh_sshd_config_dir.pass.sh b/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/allow_groups_etc_ssh_sshd_config_dir.pass.sh
new file mode 100644
index 000000000000..2f5b763698b1
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/allow_groups_etc_ssh_sshd_config_dir.pass.sh
@@ -0,0 +1,4 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+source common.sh
+echo "AllowGroups group" >> /etc/ssh/sshd_config.d/01-complianceascode-reinforce-os-defaults.conf
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/allow_users.pass.sh b/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/allow_users.pass.sh
index 9bde6d56cd92..520d0a048faa 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/allow_users.pass.sh
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/allow_users.pass.sh
@@ -1,4 +1,4 @@
 #!/bin/bash
 
-find /etc/ssh/sshd_config* -type f -print0 | xargs -0 sed -i '/^(Allow|Deny)(Users|Groups).*/d'
+source common.sh
 echo "AllowUsers testuser1 testuser2 testuser3" >> /etc/ssh/sshd_config
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/allow_users_groups.pass.sh b/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/allow_users_groups.pass.sh
index 0b35e7039585..6d6bd04f37b6 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/allow_users_groups.pass.sh
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/allow_users_groups.pass.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
 
-find /etc/ssh/sshd_config* -type f -print0 | xargs -0 sed -i '/^(Allow|Deny)(Users|Groups).*/d'
+source common.sh
 echo "AllowUsers testuser1 testuser2 testuser3" >> /etc/ssh/sshd_config
 echo "AllowGroups testgroup1 testgroup2 testgroup3" >> /etc/ssh/sshd_config
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/allow_users_usr_etc_ssh_sshd_config.pass.sh b/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/allow_users_usr_etc_ssh_sshd_config.pass.sh
new file mode 100644
index 000000000000..04b090c1a148
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/allow_users_usr_etc_ssh_sshd_config.pass.sh
@@ -0,0 +1,5 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+source common.sh
+
+echo "AllowUsers testuser1 testuser2 testuser3" >> /usr/etc/ssh/sshd_config
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/common.sh b/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/common.sh
new file mode 100644
index 000000000000..3c936c2321ce
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/common.sh
@@ -0,0 +1,15 @@
+#!/bin/bash
+
+declare -a SSHD_PATHS=("/etc/ssh/sshd_config")
+{{% if product == 'sle16' %}}
+SSHD_PATHS+=("/usr/etc/ssh/sshd_config" /usr/etc/ssh/sshd_config.d/* /etc/ssh/sshd_config.d/*)
+{{% endif %}}
+# clean up configurations
+sed -i '/^(Allow|Deny)(Users|Groups).*/d' "${SSHD_PATHS[@]}"
+
+# restore to defaults for sle16
+{{% if product == 'sle16' %}}
+if [ -e "/etc/ssh/sshd_config" ] ; then
+    rm /etc/ssh/sshd_config
+fi
+{{% endif %}}
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/deny_group_in_usr_etc_missing.fail.sh b/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/deny_group_in_usr_etc_missing.fail.sh
new file mode 100644
index 000000000000..6d23da947c9d
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/deny_group_in_usr_etc_missing.fail.sh
@@ -0,0 +1,7 @@
+#!/bin/bash
+# remediation = none
+# platform = SUSE Linux Enterprise 16
+source common.sh
+
+touch /etc/ssh/sshd_config
+echo "DenyGroups testgroup" >> /usr/etc/ssh/sshd_config
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/deny_groups.pass.sh b/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/deny_groups.pass.sh
index a324d89e397d..16f6e9d3d58f 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/deny_groups.pass.sh
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/deny_groups.pass.sh
@@ -1,4 +1,4 @@
 #!/bin/bash
 
-find /etc/ssh/sshd_config* -type f -print0 | xargs -0 sed -i '/^(Allow|Deny)(Users|Groups).*/d'
+source common.sh
 echo "DenyGroups testgroup1 testgroup2 testgroup3" >> /etc/ssh/sshd_config
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/deny_users.pass.sh b/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/deny_users.pass.sh
index 35c7f65d7514..adb157baddd2 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/deny_users.pass.sh
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/deny_users.pass.sh
@@ -1,4 +1,4 @@
 #!/bin/bash
 
-find /etc/ssh/sshd_config* -type f -print0 | xargs -0 sed -i '/^(Allow|Deny)(Users|Groups).*/d'
+source common.sh
 echo "DenyUsers testuser1 testuser2 testuser3" >> /etc/ssh/sshd_config
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/deny_users_groups.pass.sh b/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/deny_users_groups.pass.sh
index fc55098614a0..ebe08fb81dea 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/deny_users_groups.pass.sh
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/deny_users_groups.pass.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
 
-find /etc/ssh/sshd_config* -type f -print0 | xargs -0 sed -i '/^(Allow|Deny)(Users|Groups).*/d'
+source common.sh
 echo "DenyUsers testuser1 testuser2 testuser3" >> /etc/ssh/sshd_config
 echo "DenyGroups testgroup1 testgroup2 testgroup3" >> /etc/ssh/sshd_config
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/deny_users_usr_etc_ssh_sshd_config_dir.pass.sh b/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/deny_users_usr_etc_ssh_sshd_config_dir.pass.sh
new file mode 100644
index 000000000000..bee5f9991a7c
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/deny_users_usr_etc_ssh_sshd_config_dir.pass.sh
@@ -0,0 +1,5 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+source common.sh
+
+echo "DenyUsers user" >> /usr/etc/ssh/sshd_config.d/01-complianceascode-reinforce-os-defaults.conf
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/empty_groups.fail.sh b/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/empty_groups.fail.sh
index 2f735305d2c5..1f6c11f7a4d1 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/empty_groups.fail.sh
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/empty_groups.fail.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 # remediation = none
 
-find /etc/ssh/sshd_config* -type f -print0 | xargs -0 sed -i '/^(Allow|Deny)(Users|Groups).*/d'
+source common.sh
 echo "AllowGroups " >> /etc/ssh/sshd_config
 echo "DenyGroups " >> /etc/ssh/sshd_config
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/empty_users.fail.sh b/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/empty_users.fail.sh
index 4affe4b4d598..55ea7d01cde3 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/empty_users.fail.sh
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/empty_users.fail.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 # remediation = none
 
-find /etc/ssh/sshd_config* -type f -print0 | xargs -0 sed -i '/^(Allow|Deny)(Users|Groups).*/d'
+source common.sh
 echo "AllowUsers " >> /etc/ssh/sshd_config
 echo "DenyUsers " >> /etc/ssh/sshd_config
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/no_entry.fail.sh b/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/no_entry.fail.sh
index bc8a67e7fbad..8ab213a16a18 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/no_entry.fail.sh
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_limit_user_access/tests/no_entry.fail.sh
@@ -1,4 +1,4 @@
 #!/bin/bash
 # remediation = none
 
-find /etc/ssh/sshd_config* -type f -print0 | xargs -0 sed -i '/^(Allow|Deny)(Users|Groups).*/d'
+source common.sh
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_rekey_limit/oval/shared.xml b/linux_os/guide/services/ssh/ssh_server/sshd_rekey_limit/oval/shared.xml
index 918c6c789006..f8056fa2f5fc 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_rekey_limit/oval/shared.xml
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_rekey_limit/oval/shared.xml
@@ -1,9 +1,9 @@
 {{%- set parameter = "RekeyLimit" %}}
-{{%- set sshd_config_path = "/etc/ssh/sshd_config" %}}
-{{%- set sshd_config_dir = "/etc/ssh/sshd_config.d" -%}}
-{{%- set description = "Ensure " ~ parameter ~ " is configured with the appropriate value in " ~ sshd_config_path %}}
+{{%- set sshd_main_config = sshd_main_config_file %}}
+{{%- set sshd_drop_in_dir = sshd_config_dir -%}}
+{{%- set description = "Ensure " ~ parameter ~ " is configured with the appropriate value in " ~ sshd_main_config %}}
 {{%- if sshd_distributed_config == "true" %}}
-{{%- set description = description  ~ " or in " ~ sshd_config_dir -%}}
+{{%- set description = description  ~ " or in " ~ sshd_drop_in_dir -%}}
 {{%- endif %}}
 
 <def-group>
@@ -14,15 +14,15 @@
     {{{- application_required_or_requirement_unset() }}}
       <criteria comment="sshd is configured correctly" operator="OR">
         {{%- if sshd_distributed_config == "true" %}}
-        {{{- oval_line_in_directory_criterion(sshd_config_dir, parameter, rule_id=rule_id) | indent(8) }}}
+        {{{- oval_line_in_directory_criterion(sshd_drop_in_dir, parameter, rule_id=rule_id) | indent(8) }}}
         <!-- Configuration in directory has precedence -->
         <criteria comment="sshd is configured correctly in main file">
-          {{{- oval_line_in_file_criterion(sshd_config_path, parameter, rule_id=rule_id) }}}
+          {{{- oval_line_in_file_criterion(sshd_main_config, parameter, rule_id=rule_id) }}}
           <criterion test_ref="test_sshd_rekey_limit_config_dir_absent"
             comment="{{{ parameter }}} is not defined in the directory" />
         </criteria>
         {{%- else %}}
-        {{{- oval_line_in_file_criterion(sshd_config_path, parameter, rule_id=rule_id) }}}
+        {{{- oval_line_in_file_criterion(sshd_main_config, parameter, rule_id=rule_id) }}}
         {{%- endif %}}
       </criteria>
     </criteria><!-- macro application_required_or_requirement_unset() leaves an open criteria element-->
@@ -35,7 +35,7 @@
   </ind:textfilecontent54_test>
 
   <ind:textfilecontent54_object id="obj_sshd_rekey_limit" version="1">
-     <ind:filepath>{{{ sshd_config_path }}}</ind:filepath>
+     <ind:filepath>{{{ sshd_main_config }}}</ind:filepath>
      <ind:pattern operation="pattern match">^[\s]*{{{ parameter }}}[\s]+(.*)$</ind:pattern>
      <ind:instance datatype="int" operation="greater than or equal">1</ind:instance>
   </ind:textfilecontent54_object>
@@ -54,7 +54,7 @@
 
 
   <ind:textfilecontent54_object id="obj_sshd_rekey_limit_config_dir" version="1">
-     <ind:path>{{{ sshd_config_dir}}}</ind:path>
+     <ind:path>{{{ sshd_drop_in_dir }}}</ind:path>
      <ind:filename operation="pattern match">.*\.conf$</ind:filename>
      <ind:pattern operation="pattern match">^[\s]*{{{ parameter }}}[\s]+(.*)$</ind:pattern>
      <ind:instance datatype="int" operation="greater than or equal">1</ind:instance>
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_rekey_limit/rule.yml b/linux_os/guide/services/ssh/ssh_server/sshd_rekey_limit/rule.yml
index d9d64b684db5..70d69a882e6c 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_rekey_limit/rule.yml
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_rekey_limit/rule.yml
@@ -1,3 +1,5 @@
+{{% set sshd_main_config = sshd_main_config_file %}}
+{{% set sshd_drop_in_glob = sshd_config_dir ~ "/*" %}}
 documentation_complete: true
 
 title: 'Force frequent session key renegotiation'
@@ -34,24 +36,17 @@ ocil: |-
     To check if RekeyLimit is set correctly, run the
     following command:
     {{% if sshd_distributed_config == "true" %}}
-    <pre>$ sudo grep RekeyLimit /etc/ssh/sshd_config /etc/ssh/sshd_config.d/*</pre>
+    <pre>$ sudo grep RekeyLimit {{{ sshd_main_config }}} {{{ sshd_drop_in_glob }}}</pre>
     {{% else %}}
-    <pre>$ sudo grep RekeyLimit /etc/ssh/sshd_config</pre>
+    <pre>$ sudo grep RekeyLimit {{{ sshd_main_config }}}</pre>
     {{% endif %}}
     If configured properly, output should be
     <pre>RekeyLimit {{{ xccdf_value("var_rekey_limit_size") }}} {{{ xccdf_value("var_rekey_limit_time") }}}</pre>
 
 fixtext: |-
-    {{% if sshd_distributed_config == "true" %}}
-    Configure {{{ full_name }}} to force a frequent session key renegotiation for SSH connections to the server by adding or modifying the following line in the "/etc/ssh/sshd_config.d/00-complianceascode-hardening.conf" file:
-    {{% else %}}
-    Configure {{{ full_name }}} to force a frequent session key renegotiation for SSH connections to the server by adding or modifying the following line in the "/etc/ssh/sshd_config" file:
-    {{% endif %}}
-
-    RekeyLimit {{{ xccdf_value("var_rekey_limit_size") }}} {{{ xccdf_value("var_rekey_limit_time") }}}
-
-    Restart the SSH daemon for the settings to take effect.
-
-    $ sudo systemctl restart sshd.service
+    {{{ fixtext_sshd_lineinfile(
+        parameter="RekeyLimit",
+        value=xccdf_value("var_rekey_limit_size") ~ " " ~ xccdf_value("var_rekey_limit_time"),
+        config_is_distributed=(sshd_distributed_config == "true")) }}}
 
 srg_requirement: '{{{ full_name }}} must force a frequent session key renegotiation for SSH connections to the server.'
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_idle_timeout/oval/shared.xml b/linux_os/guide/services/ssh/ssh_server/sshd_set_idle_timeout/oval/shared.xml
index c4f7f309a530..d5a4b06fe916 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_set_idle_timeout/oval/shared.xml
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_idle_timeout/oval/shared.xml
@@ -1,3 +1,6 @@
+{{%- set sshd_main_config = sshd_main_config_file -%}}
+{{%- set sshd_drop_in_dir = sshd_config_dir -%}}
+{{%- set sshd_base_dir = sshd_config_base_dir -%}}
 <def-group>
   <definition class="compliance" id="sshd_set_idle_timeout" version="1">
     {{{ oval_metadata("The SSH idle timeout interval should be set to an
@@ -53,7 +56,7 @@
   </ind:textfilecontent54_test>
 
   <ind:textfilecontent54_object id="object_sshd_idle_timeout" version="2">
-    <ind:filepath>/etc/ssh/sshd_config</ind:filepath>
+    <ind:filepath>{{{ sshd_main_config }}}</ind:filepath>
     <ind:pattern operation="pattern match">^[\s]*(?i)ClientAliveInterval[\s]+(\d+)[\s]*(?:#.*)?$</ind:pattern>
     <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
   </ind:textfilecontent54_object>
@@ -67,7 +70,7 @@
   </ind:textfilecontent54_test>
 
   <ind:textfilecontent54_object id="object_sshd_idle_timeout_config_dir" version="2">
-    <ind:path>/etc/ssh/sshd_config.d</ind:path>
+    <ind:path>{{{ sshd_drop_in_dir }}}</ind:path>
     <ind:filename operation="pattern match">.*\.conf$</ind:filename>
     <ind:pattern operation="pattern match">^[\s]*(?i)ClientAliveInterval[\s]+(\d+)[\s]*(?:#.*)?$</ind:pattern>
     <ind:instance datatype="int">1</ind:instance>
@@ -76,7 +79,7 @@
 
   {{%- if product in ["ol8", "ol9"] %}}
   <ind:textfilecontent54_object id="obj_sshd_include_value_sshd_idle_timeout" version="1">
-    <ind:filepath>/etc/ssh/sshd_config</ind:filepath>
+    <ind:filepath>{{{ sshd_main_config }}}</ind:filepath>
     <ind:pattern operation="pattern match">(?i)^\s*Include\s+(.*)$</ind:pattern>
     <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
   </ind:textfilecontent54_object>
@@ -84,7 +87,7 @@
   <local_variable id="var_sshd_config_included_files_sshd_idle_timeout" datatype="string" version="1"
   comment="Include value converted to regex">
     <concat>
-      <literal_component>^(/etc/ssh/(?!/))?</literal_component>
+      <literal_component>^({{{ sshd_base_dir }}}/(?!/))?</literal_component>
       <substring substring_start="2" substring_length="-1">
         <unique>
           <glob_to_regex>
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_idle_timeout/oval/sle16.xml b/linux_os/guide/services/ssh/ssh_server/sshd_set_idle_timeout/oval/sle16.xml
new file mode 100644
index 000000000000..9c2ae2f9a78a
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_idle_timeout/oval/sle16.xml
@@ -0,0 +1,153 @@
+<def-group>
+  <definition class="compliance" id="sshd_set_idle_timeout" version="1">
+    {{{ oval_metadata("The SSH idle timeout interval should be set to an appropriate value.", rule_title=rule_title) }}}
+    <criteria comment="SSH is configured correctly or is not installed" operator="OR">
+      <criteria comment="sshd is not installed" operator="AND">
+        <extend_definition comment="sshd is not required or requirement is unset" definition_ref="sshd_not_required_or_unset"/>
+        <extend_definition comment="rpm package openssh-server removed" definition_ref="package_openssh-server_removed"/>
+      </criteria>
+      <criteria comment="sshd is installed and configured using /etc/ssh/sshd_config" operator="AND">
+        <extend_definition comment="sshd is required or requirement is unset" definition_ref="sshd_required_or_unset"/>
+        <extend_definition comment="rpm package openssh-server installed" definition_ref="package_openssh-server_installed"/>
+        <criteria comment="ClientAliveInterval is configured correctly in /etc/ssh/sshd_config" operator="AND">
+          <criterion comment="SSH configuration /etc/ssh/sshd_config exists" test_ref="test_etc_ssh_sshd_config_exist"/>
+          <criterion comment="Check ClientAliveInterval in /usr/etc/ssh/sshd_config" test_ref="test_sshd_idle_timeout_etc" />
+          <criterion comment="Check ClientAliveInterval in /etc/ssh/sshd_config.d/" test_ref="test_sshd_idle_timeout_config_dir"/>
+          <criterion comment="Check ClientAliveInterval in /usr/etc/ssh/sshd_config.d/" test_ref="test_sshd_idle_timeout_usr_config_dir"/>
+          <criterion comment="the configuration exists" test_ref="test_clientaliveinterval_present_etc" />
+        </criteria>
+      </criteria>
+      <criteria comment="sshd is installed and configured using /usr/etc/ssh/sshd_config" operator="AND">
+        <extend_definition comment="sshd is required or requirement is unset" definition_ref="sshd_required_or_unset" />
+        <extend_definition comment="rpm package openssh-server installed" definition_ref="package_openssh-server_installed" />
+        <criteria comment="ClientAliveInterval is configured correctly in /usr/etc/ssh/sshd_config" operator="AND">
+          <criterion comment="SSH configuration /etc/ssh/sshd_config does not exists" test_ref="test_etc_ssh_sshd_config_exist" negate="true"/>
+          <criterion comment="Check ClientAliveInterval in /usr/etc/ssh/sshd_config" test_ref="test_sshd_idle_timeout_usr" />
+          <criterion comment="Check ClientAliveInterval in /etc/ssh/sshd_config.d/" test_ref="test_sshd_idle_timeout_config_dir"/>
+          <criterion comment="Check ClientAliveInterval in /usr/etc/ssh/sshd_config.d/" test_ref="test_sshd_idle_timeout_usr_config_dir"/>
+          <criterion comment="the configuration exists" test_ref="test_clientaliveinterval_present_usr" />
+        </criteria>
+      </criteria>
+    </criteria>
+  </definition>
+
+  <unix:file_test check="all" check_existence="all_exist"
+      comment="SSH configuration /etc/ssh/sshd_config exists"
+      id="test_etc_ssh_sshd_config_exist"
+      state_operator="AND" version="1">
+    <unix:object object_ref="obj_etc_ssh_sshd_config_exist"/>
+  </unix:file_test>
+  <unix:file_object
+      comment="SSH configuration /etc/ssh/sshd_config exists"
+      id="obj_etc_ssh_sshd_config_exist" version="1">
+    <unix:filepath operation="pattern match">^/etc/ssh/sshd_config</unix:filepath>
+  </unix:file_object>
+
+  <ind:textfilecontent54_test check="all" check_existence="any_exist"
+    comment="timeout is configured in /etc/ssh/sshd_config"
+    id="test_sshd_idle_timeout_etc" version="1">
+    <ind:object object_ref="object_sshd_idle_timeout_etc" />
+    <ind:state state_ref="state_timeout_value_upper_bound" />
+    <ind:state state_ref="state_timeout_value_lower_bound" />
+  </ind:textfilecontent54_test>
+
+  <ind:textfilecontent54_object id="object_sshd_idle_timeout_etc" version="2">
+    <ind:filepath>/etc/ssh/sshd_config</ind:filepath>
+    <ind:pattern operation="pattern match">^[\s]*(?i)ClientAliveInterval[\s]+(\d+)[\s]*(?:#.*)?$</ind:pattern>
+    <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
+  </ind:textfilecontent54_object>
+
+  <ind:textfilecontent54_test check="all" check_existence="any_exist"
+    comment="timeout is configured in /usr/etc/ssh/sshd_config"
+    id="test_sshd_idle_timeout_usr" version="1">
+    <ind:object object_ref="object_sshd_idle_timeout_usr" />
+    <ind:state state_ref="state_timeout_value_upper_bound" />
+    <ind:state state_ref="state_timeout_value_lower_bound" />
+  </ind:textfilecontent54_test>
+
+  <ind:textfilecontent54_object id="object_sshd_idle_timeout_usr" version="2">
+    <ind:filepath>/usr/etc/ssh/sshd_config</ind:filepath>
+    <ind:pattern operation="pattern match">^[\s]*(?i)ClientAliveInterval[\s]+(\d+)[\s]*(?:#.*)?$</ind:pattern>
+    <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
+  </ind:textfilecontent54_object>
+
+  <ind:textfilecontent54_test check="all" check_existence="any_exist"
+    comment="timeout is configured in config directory /etc/ssh/sshd_config.d"
+    id="test_sshd_idle_timeout_config_dir" version="1">
+    <ind:object object_ref="object_sshd_idle_timeout_config_dir" />
+    <ind:state state_ref="state_timeout_value_upper_bound" />
+    <ind:state state_ref="state_timeout_value_lower_bound" />
+  </ind:textfilecontent54_test>
+
+  <ind:textfilecontent54_object id="object_sshd_idle_timeout_config_dir" version="2">
+    <ind:path>/etc/ssh/sshd_config.d</ind:path>
+    <ind:filename operation="pattern match">.*\.conf$</ind:filename>
+    <ind:pattern operation="pattern match">^[\s]*(?i)ClientAliveInterval[\s]+(\d+)[\s]*(?:#.*)?$</ind:pattern>
+    <ind:instance datatype="int">1</ind:instance>
+  </ind:textfilecontent54_object>
+
+  <ind:textfilecontent54_test check="all" check_existence="any_exist"
+    comment="timeout is configured in config directory /usr/etc/ssh/sshd_config.d"
+    id="test_sshd_idle_timeout_usr_config_dir" version="1">
+    <ind:object object_ref="object_sshd_idle_timeout_usr_config_dir" />
+    <ind:state state_ref="state_timeout_value_upper_bound" />
+    <ind:state state_ref="state_timeout_value_lower_bound" />
+  </ind:textfilecontent54_test>
+
+  <ind:textfilecontent54_object id="object_sshd_idle_timeout_usr_config_dir" version="2">
+    <ind:path>/usr/etc/ssh/sshd_config.d</ind:path>
+    <ind:filename operation="pattern match">.*\.conf$</ind:filename>
+    <ind:pattern operation="pattern match">^[\s]*(?i)ClientAliveInterval[\s]+(\d+)[\s]*(?:#.*)?$</ind:pattern>
+    <ind:instance datatype="int">1</ind:instance>
+  </ind:textfilecontent54_object>
+
+  <ind:textfilecontent54_state comment="upper bound of ClientAliveInterval in seconds"
+  id="state_timeout_value_upper_bound" version="1">
+    <ind:subexpression datatype="int" operation="less than or equal" var_check="all"
+    var_ref="sshd_idle_timeout_value" />
+  </ind:textfilecontent54_state>
+
+  <ind:textfilecontent54_state comment="lower bound of ClientAliveInterval in seconds"
+  id="state_timeout_value_lower_bound" version="1">
+    <ind:subexpression datatype="int" operation="greater than">0</ind:subexpression>
+  </ind:textfilecontent54_state>
+
+  <ind:textfilecontent54_test id="test_clientaliveinterval_present_etc" version="1"
+    check="all" check_existence="at_least_one_exists"
+    comment="Verify that the value of ClientAliveInterval is present">
+    <ind:object object_ref="obj_collection_obj_sshd_set_idle_timeout" />
+  </ind:textfilecontent54_test>
+
+  <ind:textfilecontent54_object comment="All confs collection" id="obj_collection_obj_sshd_set_idle_timeout" version="1">
+    <set set_operator="UNION">
+      <set set_operator="UNION">
+        <object_reference>object_sshd_idle_timeout_etc</object_reference>
+      </set>
+      <set set_operator="UNION">
+        <object_reference>object_sshd_idle_timeout_config_dir</object_reference>
+        <object_reference>object_sshd_idle_timeout_usr_config_dir</object_reference>
+      </set>
+    </set>
+  </ind:textfilecontent54_object>
+
+  <ind:textfilecontent54_test id="test_clientaliveinterval_present_usr" version="1"
+    check="all" check_existence="at_least_one_exists"
+    comment="Verify that the value of ClientAliveInterval is present">
+    <ind:object object_ref="obj_collection_obj_sshd_set_idle_timeout_usr" />
+  </ind:textfilecontent54_test>
+
+  <ind:textfilecontent54_object comment="All confs collection" id="obj_collection_obj_sshd_set_idle_timeout_usr" version="1">
+    <set set_operator="UNION">
+      <set set_operator="UNION">
+        <object_reference>object_sshd_idle_timeout_usr</object_reference>
+      </set>
+      <set set_operator="UNION">
+        <object_reference>object_sshd_idle_timeout_config_dir</object_reference>
+        <object_reference>object_sshd_idle_timeout_usr_config_dir</object_reference>
+      </set>
+    </set>
+  </ind:textfilecontent54_object>
+
+  <external_variable comment="timeout value" datatype="int" id="sshd_idle_timeout_value" version="1" />
+
+</def-group>
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/oval/shared.xml b/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/oval/shared.xml
index f1c5911ebcc0..53d51f2abb17 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/oval/shared.xml
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/oval/shared.xml
@@ -1,3 +1,5 @@
+{{%- set sshd_main_config = sshd_main_config_file -%}}
+{{%- set sshd_drop_in_dir = sshd_config_dir -%}}
 <def-group>
   <definition class="compliance" id="{{{rule_id}}}" version="1">
     {{{ oval_metadata("The SSH number seconds for login grace time should be set to an
@@ -44,7 +46,7 @@
   </ind:textfilecontent54_test>
 
   <ind:textfilecontent54_object id="object_sshd_login_grace_time" version="2">
-    <ind:filepath>/etc/ssh/sshd_config</ind:filepath>
+    <ind:filepath>{{{ sshd_main_config }}}</ind:filepath>
     <ind:pattern operation="pattern match">^[\s]*(?i)LoginGraceTime[\s]+(\d+)[\s]*(?:#.*)?$</ind:pattern>
     <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
   </ind:textfilecontent54_object>
@@ -59,7 +61,7 @@
   </ind:textfilecontent54_test>
 
   <ind:textfilecontent54_object id="obj_sshd_set_login_grace_time_config_dir" version="1">
-    <ind:path>/etc/ssh/sshd_config.d</ind:path>
+    <ind:path>{{{ sshd_drop_in_dir }}}</ind:path>
     <ind:filename operation="pattern match">.*\.conf$</ind:filename>
     <ind:pattern operation="pattern match">^[ \t]*(?i)LoginGraceTime(?-i)[ \t]+(.+?)[ \t]*(?:$|#)</ind:pattern>
     <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/oval/sle16.xml b/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/oval/sle16.xml
new file mode 100644
index 000000000000..23137efd78b8
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/oval/sle16.xml
@@ -0,0 +1,153 @@
+<def-group>
+  <definition class="compliance" id="{{{rule_id}}}" version="1">
+    {{{ oval_metadata("The SSH number seconds for login grace time should be set to an appropriate value.", rule_title=rule_title) }}}
+    <criteria comment="SSH is configured correctly or is not installed" operator="OR">
+      <criteria comment="sshd is not installed" operator="AND">
+        <extend_definition comment="sshd is not required or requirement is unset" definition_ref="sshd_not_required_or_unset"/>
+        <extend_definition comment="rpm package openssh-server removed" definition_ref="package_openssh-server_removed"/>
+      </criteria>
+      <criteria comment="sshd is installed and configured using /etc/ssh/sshd_config" operator="AND">
+        <extend_definition comment="sshd is required or requirement is unset" definition_ref="sshd_required_or_unset"/>
+        <extend_definition comment="rpm package openssh-server installed" definition_ref="package_openssh-server_installed"/>
+        <criteria comment="LoginGraceTime is configured correctly in /etc/ssh/sshd_config" operator="AND">
+          <criterion comment="SSH configuration /etc/ssh/sshd_config exists" test_ref="test_etc_ssh_sshd_config_exist"/>
+          <criterion comment="Check LoginGraceTime in /usr/etc/ssh/sshd_config" test_ref="test_sshd_login_grace_time_etc" />
+          <criterion comment="Check LoginGraceTime in /etc/ssh/sshd_config.d/" test_ref="test_sshd_login_grace_time_config_dir"/>
+          <criterion comment="Check LoginGraceTime in /usr/etc/ssh/sshd_config.d/" test_ref="test_sshd_login_grace_time_usr_config_dir"/>
+          <criterion comment="the configuration exists" test_ref="test_login_grace_time_present_etc" />
+        </criteria>
+      </criteria>
+      <criteria comment="sshd is installed and configured using /usr/etc/ssh/sshd_config" operator="AND">
+        <extend_definition comment="sshd is required or requirement is unset" definition_ref="sshd_required_or_unset" />
+        <extend_definition comment="rpm package openssh-server installed" definition_ref="package_openssh-server_installed" />
+        <criteria comment="LoginGraceTime is configured correctly in /usr/etc/ssh/sshd_config" operator="AND">
+          <criterion comment="SSH configuration /etc/ssh/sshd_config does not exists" test_ref="test_etc_ssh_sshd_config_exist" negate="true"/>
+          <criterion comment="Check LoginGraceTime in /usr/etc/ssh/sshd_config" test_ref="test_sshd_login_grace_time_usr" />
+          <criterion comment="Check LoginGraceTime in /etc/ssh/sshd_config.d/" test_ref="test_sshd_login_grace_time_config_dir"/>
+          <criterion comment="Check LoginGraceTime in /usr/etc/ssh/sshd_config.d/" test_ref="test_sshd_login_grace_time_usr_config_dir"/>
+          <criterion comment="the configuration exists" test_ref="test_login_grace_time_present_usr" />
+        </criteria>
+      </criteria>
+    </criteria>
+  </definition>
+
+  <unix:file_test check="all" check_existence="all_exist"
+      comment="SSH configuration /etc/ssh/sshd_config exists"
+      id="test_etc_ssh_sshd_config_exist"
+      state_operator="AND" version="1">
+    <unix:object object_ref="obj_etc_ssh_sshd_config_exist"/>
+  </unix:file_test>
+  <unix:file_object
+      comment="SSH configuration /etc/ssh/sshd_config exists"
+      id="obj_etc_ssh_sshd_config_exist" version="1">
+    <unix:filepath operation="pattern match">^/etc/ssh/sshd_config</unix:filepath>
+  </unix:file_object>
+
+  <ind:textfilecontent54_test check="all" check_existence="any_exist"
+    comment="LoginGraceTime is configured in /etc/ssh/sshd_config"
+    id="test_sshd_login_grace_time_etc" version="1">
+    <ind:object object_ref="object_sshd_login_grace_time_etc" />
+    <ind:state state_ref="state_login_grace_time_value_upper_bound" />
+    <ind:state state_ref="state_login_grace_time_value_lower_bound" />
+  </ind:textfilecontent54_test>
+
+  <ind:textfilecontent54_object id="object_sshd_login_grace_time_etc" version="2">
+    <ind:filepath>/etc/ssh/sshd_config</ind:filepath>
+    <ind:pattern operation="pattern match">^[\s]*(?i)LoginGraceTime[\s]+(\d+)[\s]*(?:#.*)?$</ind:pattern>
+    <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
+  </ind:textfilecontent54_object>
+
+  <ind:textfilecontent54_test check="all" check_existence="any_exist"
+    comment="LoginGraceTime is configured in /usr/etc/ssh/sshd_config"
+    id="test_sshd_login_grace_time_usr" version="1">
+    <ind:object object_ref="object_sshd_login_grace_time_usr" />
+    <ind:state state_ref="state_login_grace_time_value_upper_bound" />
+    <ind:state state_ref="state_login_grace_time_value_lower_bound" />
+  </ind:textfilecontent54_test>
+
+  <ind:textfilecontent54_object id="object_sshd_login_grace_time_usr" version="2">
+    <ind:filepath>/usr/etc/ssh/sshd_config</ind:filepath>
+    <ind:pattern operation="pattern match">^[\s]*(?i)LoginGraceTime[\s]+(\d+)[\s]*(?:#.*)?$</ind:pattern>
+    <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
+  </ind:textfilecontent54_object>
+
+  <ind:textfilecontent54_test check="all" check_existence="any_exist"
+    comment="LoginGraceTime is configured in drop-in directory /etc/ssh/sshd_config.d"
+    id="test_sshd_login_grace_time_config_dir" version="1">
+    <ind:object object_ref="object_sshd_login_grace_time_config_dir" />
+    <ind:state state_ref="state_login_grace_time_value_upper_bound" />
+    <ind:state state_ref="state_login_grace_time_value_lower_bound" />
+  </ind:textfilecontent54_test>
+
+  <ind:textfilecontent54_object id="object_sshd_login_grace_time_config_dir" version="2">
+    <ind:path>/etc/ssh/sshd_config.d</ind:path>
+    <ind:filename operation="pattern match">.*\.conf$</ind:filename>
+    <ind:pattern operation="pattern match">^[\s]*(?i)LoginGraceTime[\s]+(\d+)[\s]*(?:#.*)?$</ind:pattern>
+    <ind:instance datatype="int">1</ind:instance>
+  </ind:textfilecontent54_object>
+
+  <ind:textfilecontent54_test check="all" check_existence="any_exist"
+    comment="LoginGraceTime is configured in included directory /usr/etc/ssh/sshd_config.d"
+    id="test_sshd_login_grace_time_usr_config_dir" version="1">
+    <ind:object object_ref="object_sshd_login_grace_time_usr_config_dir" />
+    <ind:state state_ref="state_login_grace_time_value_upper_bound" />
+    <ind:state state_ref="state_login_grace_time_value_lower_bound" />
+  </ind:textfilecontent54_test>
+
+  <ind:textfilecontent54_object id="object_sshd_login_grace_time_usr_config_dir" version="2">
+    <ind:path>/usr/etc/ssh/sshd_config.d</ind:path>
+    <ind:filename operation="pattern match">.*\.conf$</ind:filename>
+    <ind:pattern operation="pattern match">^[\s]*(?i)LoginGraceTime[\s]+(\d+)[\s]*(?:#.*)?$</ind:pattern>
+    <ind:instance datatype="int">1</ind:instance>
+  </ind:textfilecontent54_object>
+
+  <ind:textfilecontent54_state comment="upper bound of LoginGraceTime in seconds"
+  id="state_login_grace_time_value_upper_bound" version="1">
+    <ind:subexpression datatype="int" operation="less than or equal" var_check="all"
+    var_ref="var_sshd_set_login_grace_time" />
+  </ind:textfilecontent54_state>
+
+  <ind:textfilecontent54_state comment="lower bound of LoginGraceTime in seconds"
+  id="state_login_grace_time_value_lower_bound" version="1">
+    <ind:subexpression datatype="int" operation="greater than">0</ind:subexpression>
+  </ind:textfilecontent54_state>
+
+  <ind:textfilecontent54_test id="test_login_grace_time_present_etc" version="1"
+    check="all" check_existence="at_least_one_exists"
+    comment="Verify that the value of LoginGraceTime is present">
+    <ind:object object_ref="obj_collection_obj_sshd_set_login_grace_time" />
+  </ind:textfilecontent54_test>
+
+  <ind:textfilecontent54_object comment="All confs collection" id="obj_collection_obj_sshd_set_login_grace_time" version="1">
+    <set set_operator="UNION">
+      <set set_operator="UNION">
+        <object_reference>object_sshd_login_grace_time_etc</object_reference>
+      </set>
+      <set set_operator="UNION">
+        <object_reference>object_sshd_login_grace_time_config_dir</object_reference>
+        <object_reference>object_sshd_login_grace_time_usr_config_dir</object_reference>
+      </set>
+    </set>
+  </ind:textfilecontent54_object>
+
+  <ind:textfilecontent54_test id="test_login_grace_time_present_usr" version="1"
+    check="all" check_existence="at_least_one_exists"
+    comment="Verify that the value of LoginGraceTime is present">
+    <ind:object object_ref="obj_collection_obj_sshd_set_login_grace_time_usr" />
+  </ind:textfilecontent54_test>
+
+  <ind:textfilecontent54_object comment="All confs collection" id="obj_collection_obj_sshd_set_login_grace_time_usr" version="1">
+    <set set_operator="UNION">
+      <set set_operator="UNION">
+        <object_reference>object_sshd_login_grace_time_usr</object_reference>
+      </set>
+      <set set_operator="UNION">
+        <object_reference>object_sshd_login_grace_time_config_dir</object_reference>
+        <object_reference>object_sshd_login_grace_time_usr_config_dir</object_reference>
+      </set>
+    </set>
+  </ind:textfilecontent54_object>
+
+  <external_variable comment="logingracetime value" datatype="int" id="var_sshd_set_login_grace_time" version="1" />
+
+</def-group>
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/correct_value_etc_sshd_config_drop_in.pass.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/correct_value_etc_sshd_config_drop_in.pass.sh
new file mode 100644
index 000000000000..a0f68b4a5ccb
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/correct_value_etc_sshd_config_drop_in.pass.sh
@@ -0,0 +1,5 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+source include.sh
+
+echo "LoginGraceTime 60" >> /etc/ssh/sshd_config.d/01-complianceascode.conf
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/correct_value_in_usr_etc_sshd_config_present.fail.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/correct_value_in_usr_etc_sshd_config_present.fail.sh
new file mode 100644
index 000000000000..b80e3832b591
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/correct_value_in_usr_etc_sshd_config_present.fail.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+source include.sh
+
+touch /etc/ssh/sshd_config
+echo "LoginGraceTime 1" >> /usr/etc/ssh/sshd_config
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/correct_value_usr_etc_sshd_config.pass.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/correct_value_usr_etc_sshd_config.pass.sh
new file mode 100644
index 000000000000..3ed15582de0b
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/correct_value_usr_etc_sshd_config.pass.sh
@@ -0,0 +1,5 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+source include.sh
+
+echo "LoginGraceTime 1" >> /usr/etc/ssh/sshd_config
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/correct_value_usr_etc_sshd_config_drop_in.pass.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/correct_value_usr_etc_sshd_config_drop_in.pass.sh
new file mode 100644
index 000000000000..1e72b109d85e
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/correct_value_usr_etc_sshd_config_drop_in.pass.sh
@@ -0,0 +1,5 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+source include.sh
+
+echo "LoginGraceTime 60" >> /usr/etc/ssh/sshd_config.d/01-complianceascode.conf
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/include.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/include.sh
new file mode 100644
index 000000000000..aee5eb2d0bec
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/include.sh
@@ -0,0 +1,15 @@
+#!/bin/bash
+
+declare -a SSHD_PATHS=("/etc/ssh/sshd_config")
+{{% if product == 'sle16' %}}
+SSHD_PATHS+=("/usr/etc/ssh/sshd_config" /usr/etc/ssh/sshd_config.d/* /etc/ssh/sshd_config.d/*)
+{{% endif %}}
+# clean up configurations
+sed -i '/^LoginGraceTime.*/d' "${SSHD_PATHS[@]}"
+
+# restore to defaults for sle16
+{{% if product == 'sle16' %}}
+if [ -e "/etc/ssh/sshd_config" ] ; then
+    rm /etc/ssh/sshd_config
+fi
+{{% endif %}}
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/lower_bound.pass.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/lower_bound.pass.sh
index f5236501ca01..809d3c1f4659 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/lower_bound.pass.sh
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/lower_bound.pass.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-# profiles = xccdf_org.ssgproject.content_profile_cis
+# profiles = xccdf_org.ssgproject.content_profile_cis,xccdf_org.ssgproject.content_profile_pci-dss-4
 # platform = multi_platform_all
 
 SSHD_CONFIG="/etc/ssh/sshd_config"
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/no_limit.fail.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/no_limit.fail.sh
index 63a0aee97f7d..738969589112 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/no_limit.fail.sh
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/no_limit.fail.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-# profiles = xccdf_org.ssgproject.content_profile_cis
+# profiles = xccdf_org.ssgproject.content_profile_cis,xccdf_org.ssgproject.content_profile_pci-dss-4
 # platform = multi_platform_all
 
 SSHD_CONFIG="/etc/ssh/sshd_config"
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/too_high.fail.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/too_high.fail.sh
index 6d109091b8b9..959f7d699345 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/too_high.fail.sh
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/too_high.fail.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-# profiles = xccdf_org.ssgproject.content_profile_cis
+# profiles = xccdf_org.ssgproject.content_profile_cis,xccdf_org.ssgproject.content_profile_pci-dss-4
 # platform = multi_platform_all
 
 SSHD_CONFIG="/etc/ssh/sshd_config"
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/too_high_etc_sshd_config_drop_in.fail.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/too_high_etc_sshd_config_drop_in.fail.sh
new file mode 100644
index 000000000000..35ea7b48f5f4
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/too_high_etc_sshd_config_drop_in.fail.sh
@@ -0,0 +1,5 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+source include.sh
+
+echo "LoginGraceTime 61" >> /etc/ssh/sshd_config.d/01-complianceascode.conf
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/too_high_usr_etc_sshd_config.fail.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/too_high_usr_etc_sshd_config.fail.sh
new file mode 100644
index 000000000000..7010af0181bd
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/too_high_usr_etc_sshd_config.fail.sh
@@ -0,0 +1,5 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+source include.sh
+
+echo "LoginGraceTime 61" >> /usr/etc/ssh/sshd_config
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/too_high_usr_etc_sshd_config_drop_in.fail.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/too_high_usr_etc_sshd_config_drop_in.fail.sh
new file mode 100644
index 000000000000..1cdd63bb777a
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_login_grace_time/tests/too_high_usr_etc_sshd_config_drop_in.fail.sh
@@ -0,0 +1,5 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+source include.sh
+
+echo "LoginGraceTime 61" >> /usr/etc/ssh/sshd_config.d/01-complianceascode.conf
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_max_auth_tries/oval/shared.xml b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_auth_tries/oval/shared.xml
index 117054f7f9eb..ce045e925251 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_set_max_auth_tries/oval/shared.xml
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_auth_tries/oval/shared.xml
@@ -1,3 +1,5 @@
+{{%- set sshd_main_config = sshd_main_config_file -%}}
+{{%- set sshd_drop_in_dir = sshd_config_dir -%}}
 <def-group>
   <definition class="compliance" id="{{{rule_id}}}" version="1">
     {{{ oval_metadata("The SSH MaxAuthTries should be set to an
@@ -44,7 +46,7 @@
   </ind:textfilecontent54_test>
 
   <ind:textfilecontent54_object id="object_sshd_max_auth_tries" version="2">
-    <ind:filepath>/etc/ssh/sshd_config</ind:filepath>
+    <ind:filepath>{{{ sshd_main_config }}}</ind:filepath>
     <ind:pattern operation="pattern match">^[\s]*(?i)MaxAuthTries[\s]+(\d+)[\s]*(?:#.*)?$</ind:pattern>
     <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
   </ind:textfilecontent54_object>
@@ -59,7 +61,7 @@
   </ind:textfilecontent54_test>
 
   <ind:textfilecontent54_object id="obj_sshd_set_max_auth_tries_config_dir" version="1">
-    <ind:path>/etc/ssh/sshd_config.d</ind:path>
+    <ind:path>{{{ sshd_drop_in_dir }}}</ind:path>
     <ind:filename operation="pattern match">.*\.conf$</ind:filename>
     <ind:pattern operation="pattern match">^[ \t]*(?i)MaxAuthTries(?-i)[ \t]+(.+?)[ \t]*(?:$|#)</ind:pattern>
     <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_max_auth_tries/oval/sle16.xml b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_auth_tries/oval/sle16.xml
new file mode 100644
index 000000000000..a9452bfb71aa
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_auth_tries/oval/sle16.xml
@@ -0,0 +1,153 @@
+<def-group>
+  <definition class="compliance" id="{{{rule_id}}}" version="1">
+    {{{ oval_metadata("The SSH MaxAuthTries should be set to an appropriate value.", rule_title=rule_title) }}}
+    <criteria comment="SSH is configured correctly or is not installed" operator="OR">
+      <criteria comment="sshd is not installed" operator="AND">
+        <extend_definition comment="sshd is not required or requirement is unset" definition_ref="sshd_not_required_or_unset"/>
+        <extend_definition comment="rpm package openssh-server removed" definition_ref="package_openssh-server_removed"/>
+      </criteria>
+      <criteria comment="sshd is installed and configured using /etc/ssh/sshd_config" operator="AND">
+        <extend_definition comment="sshd is required or requirement is unset" definition_ref="sshd_required_or_unset"/>
+        <extend_definition comment="rpm package openssh-server installed" definition_ref="package_openssh-server_installed"/>
+        <criteria comment="MaxAuthTries is configured correctly in /etc/ssh/sshd_config" operator="AND">
+          <criterion comment="SSH configuration /etc/ssh/sshd_config exists" test_ref="test_etc_ssh_sshd_config_exist"/>
+          <criterion comment="Check MaxAuthTries in /usr/etc/ssh/sshd_config" test_ref="test_sshd_max_auth_tries_etc" />
+          <criterion comment="Check MaxAuthTries in /etc/ssh/sshd_config.d/" test_ref="test_sshd_max_auth_tries_config_dir"/>
+          <criterion comment="Check MaxAuthTries in /usr/etc/ssh/sshd_config.d/" test_ref="test_sshd_max_auth_tries_usr_config_dir"/>
+          <criterion comment="the configuration exists" test_ref="test_max_auth_tries_present_etc" />
+        </criteria>
+      </criteria>
+      <criteria comment="sshd is installed and configured using /usr/etc/ssh/sshd_config" operator="AND">
+        <extend_definition comment="sshd is required or requirement is unset" definition_ref="sshd_required_or_unset" />
+        <extend_definition comment="rpm package openssh-server installed" definition_ref="package_openssh-server_installed" />
+        <criteria comment="MaxAuthTries is configured correctly in /usr/etc/ssh/sshd_config" operator="AND">
+          <criterion comment="SSH configuration /etc/ssh/sshd_config does not exists" test_ref="test_etc_ssh_sshd_config_exist" negate="true"/>
+          <criterion comment="Check MaxAuthTries in /usr/etc/ssh/sshd_config" test_ref="test_sshd_max_auth_tries_usr" />
+          <criterion comment="Check MaxAuthTries in /etc/ssh/sshd_config.d/" test_ref="test_sshd_max_auth_tries_config_dir"/>
+          <criterion comment="Check MaxAuthTries in /usr/etc/ssh/sshd_config.d/" test_ref="test_sshd_max_auth_tries_usr_config_dir"/>
+          <criterion comment="the configuration exists" test_ref="test_max_auth_tries_present_usr" />
+        </criteria>
+      </criteria>
+    </criteria>
+  </definition>
+
+  <unix:file_test check="all" check_existence="all_exist"
+      comment="SSH configuration /etc/ssh/sshd_config exists"
+      id="test_etc_ssh_sshd_config_exist"
+      state_operator="AND" version="1">
+    <unix:object object_ref="obj_etc_ssh_sshd_config_exist"/>
+  </unix:file_test>
+  <unix:file_object
+      comment="SSH configuration /etc/ssh/sshd_config exists"
+      id="obj_etc_ssh_sshd_config_exist" version="1">
+    <unix:filepath operation="pattern match">^/etc/ssh/sshd_config</unix:filepath>
+  </unix:file_object>
+
+  <ind:textfilecontent54_test check="all" check_existence="any_exist"
+    comment="MaxAuthTries is configured in /etc/ssh/sshd_config"
+    id="test_sshd_max_auth_tries_etc" version="1">
+    <ind:object object_ref="object_sshd_max_auth_tries_etc" />
+    <ind:state state_ref="state_max_auth_tries_value_upper_bound" />
+    <ind:state state_ref="state_max_auth_tries_value_lower_bound" />
+  </ind:textfilecontent54_test>
+
+  <ind:textfilecontent54_object id="object_sshd_max_auth_tries_etc" version="2">
+    <ind:filepath>/etc/ssh/sshd_config</ind:filepath>
+    <ind:pattern operation="pattern match">^[\s]*(?i)MaxAuthTries[\s]+(\d+)[\s]*(?:#.*)?$</ind:pattern>
+    <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
+  </ind:textfilecontent54_object>
+
+  <ind:textfilecontent54_test check="all" check_existence="any_exist"
+    comment="MaxAuthTries is configured in /usr/etc/ssh/sshd_config"
+    id="test_sshd_max_auth_tries_usr" version="1">
+    <ind:object object_ref="object_sshd_max_auth_tries_usr" />
+    <ind:state state_ref="state_max_auth_tries_value_upper_bound" />
+    <ind:state state_ref="state_max_auth_tries_value_lower_bound" />
+  </ind:textfilecontent54_test>
+
+  <ind:textfilecontent54_object id="object_sshd_max_auth_tries_usr" version="2">
+    <ind:filepath>/usr/etc/ssh/sshd_config</ind:filepath>
+    <ind:pattern operation="pattern match">^[\s]*(?i)MaxAuthTries[\s]+(\d+)[\s]*(?:#.*)?$</ind:pattern>
+    <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
+  </ind:textfilecontent54_object>
+
+  <ind:textfilecontent54_test check="all" check_existence="any_exist"
+    comment="MaxAuthTries is configured in drop-in directory /etc/ssh/sshd_config.d"
+    id="test_sshd_max_auth_tries_config_dir" version="1">
+    <ind:object object_ref="object_sshd_max_auth_tries_config_dir" />
+    <ind:state state_ref="state_max_auth_tries_value_upper_bound" />
+    <ind:state state_ref="state_max_auth_tries_value_lower_bound" />
+  </ind:textfilecontent54_test>
+
+  <ind:textfilecontent54_object id="object_sshd_max_auth_tries_config_dir" version="2">
+    <ind:path>/etc/ssh/sshd_config.d</ind:path>
+    <ind:filename operation="pattern match">.*\.conf$</ind:filename>
+    <ind:pattern operation="pattern match">^[\s]*(?i)MaxAuthTries[\s]+(\d+)[\s]*(?:#.*)?$</ind:pattern>
+    <ind:instance datatype="int">1</ind:instance>
+  </ind:textfilecontent54_object>
+
+  <ind:textfilecontent54_test check="all" check_existence="any_exist"
+    comment="MaxAuthTries is configured in included directory /usr/etc/ssh/sshd_config.d"
+    id="test_sshd_max_auth_tries_usr_config_dir" version="1">
+    <ind:object object_ref="object_sshd_max_auth_tries_usr_config_dir" />
+    <ind:state state_ref="state_max_auth_tries_value_upper_bound" />
+    <ind:state state_ref="state_max_auth_tries_value_lower_bound" />
+  </ind:textfilecontent54_test>
+
+  <ind:textfilecontent54_object id="object_sshd_max_auth_tries_usr_config_dir" version="2">
+    <ind:path>/usr/etc/ssh/sshd_config.d</ind:path>
+    <ind:filename operation="pattern match">.*\.conf$</ind:filename>
+    <ind:pattern operation="pattern match">^[\s]*(?i)MaxAuthTries[\s]+(\d+)[\s]*(?:#.*)?$</ind:pattern>
+    <ind:instance datatype="int">1</ind:instance>
+  </ind:textfilecontent54_object>
+
+  <ind:textfilecontent54_state comment="upper bound of MaxAuthTries in number of sessions"
+  id="state_max_auth_tries_value_upper_bound" version="1">
+    <ind:subexpression datatype="int" operation="less than or equal" var_check="all"
+    var_ref="sshd_max_auth_tries_value" />
+  </ind:textfilecontent54_state>
+
+  <ind:textfilecontent54_state comment="lower bound of MaxAuthTries in number of sessions"
+  id="state_max_auth_tries_value_lower_bound" version="1">
+    <ind:subexpression datatype="int" operation="greater than">0</ind:subexpression>
+  </ind:textfilecontent54_state>
+
+  <ind:textfilecontent54_test id="test_max_auth_tries_present_etc" version="1"
+    check="all" check_existence="at_least_one_exists"
+    comment="Verify that the value of MaxAuthTries is present">
+    <ind:object object_ref="obj_collection_obj_sshd_set_max_auth_tries" />
+  </ind:textfilecontent54_test>
+
+  <ind:textfilecontent54_object comment="All confs collection" id="obj_collection_obj_sshd_set_max_auth_tries" version="1">
+    <set set_operator="UNION">
+      <set set_operator="UNION">
+        <object_reference>object_sshd_max_auth_tries_etc</object_reference>
+      </set>
+      <set set_operator="UNION">
+        <object_reference>object_sshd_max_auth_tries_config_dir</object_reference>
+        <object_reference>object_sshd_max_auth_tries_usr_config_dir</object_reference>
+      </set>
+    </set>
+  </ind:textfilecontent54_object>
+
+  <ind:textfilecontent54_test id="test_max_auth_tries_present_usr" version="1"
+    check="all" check_existence="at_least_one_exists"
+    comment="Verify that the value of MaxAuthTries is present">
+    <ind:object object_ref="obj_collection_obj_sshd_set_max_auth_tries_usr" />
+  </ind:textfilecontent54_test>
+
+  <ind:textfilecontent54_object comment="All confs collection" id="obj_collection_obj_sshd_set_max_auth_tries_usr" version="1">
+    <set set_operator="UNION">
+      <set set_operator="UNION">
+        <object_reference>object_sshd_max_auth_tries_usr</object_reference>
+      </set>
+      <set set_operator="UNION">
+        <object_reference>object_sshd_max_auth_tries_config_dir</object_reference>
+        <object_reference>object_sshd_max_auth_tries_usr_config_dir</object_reference>
+      </set>
+    </set>
+  </ind:textfilecontent54_object>
+
+  <external_variable comment="MaxAuthTries value" datatype="int" id="sshd_max_auth_tries_value" version="1" />
+
+</def-group>
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_max_auth_tries/tests/correct_value_etc_sshd_config_drop_in.pass.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_auth_tries/tests/correct_value_etc_sshd_config_drop_in.pass.sh
new file mode 100644
index 000000000000..4262a6713622
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_auth_tries/tests/correct_value_etc_sshd_config_drop_in.pass.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+# variables = sshd_max_auth_tries_value=4
+source include.sh
+
+echo "MaxAuthTries 4" >> /etc/ssh/sshd_config.d/01-complianceascode.conf
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_max_auth_tries/tests/correct_value_in_usr_etc_sshd_config_present.fail.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_auth_tries/tests/correct_value_in_usr_etc_sshd_config_present.fail.sh
new file mode 100644
index 000000000000..7b327ed220ce
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_auth_tries/tests/correct_value_in_usr_etc_sshd_config_present.fail.sh
@@ -0,0 +1,7 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+# variables = sshd_max_auth_tries_value=4
+source include.sh
+
+touch /etc/ssh/sshd_config
+echo "MaxAuthTries 4" >> /usr/etc/ssh/sshd_config
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_max_auth_tries/tests/correct_value_usr_etc_sshd_config.pass.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_auth_tries/tests/correct_value_usr_etc_sshd_config.pass.sh
new file mode 100644
index 000000000000..d902aa806c16
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_auth_tries/tests/correct_value_usr_etc_sshd_config.pass.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+# variables = sshd_max_auth_tries_value=4
+source include.sh
+
+echo "MaxAuthTries 4" >> /usr/etc/ssh/sshd_config
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_max_auth_tries/tests/correct_value_usr_etc_sshd_config_drop_in.pass.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_auth_tries/tests/correct_value_usr_etc_sshd_config_drop_in.pass.sh
new file mode 100644
index 000000000000..0c0ad79ef4fe
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_auth_tries/tests/correct_value_usr_etc_sshd_config_drop_in.pass.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+# variables = sshd_max_auth_tries_value=4
+source include.sh
+
+echo "MaxAuthTries 4" >> /usr/etc/ssh/sshd_config.d/01-complianceascode.conf
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_max_auth_tries/tests/include.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_auth_tries/tests/include.sh
new file mode 100644
index 000000000000..9790bbcd68d0
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_auth_tries/tests/include.sh
@@ -0,0 +1,15 @@
+#!/bin/bash
+
+declare -a SSHD_PATHS=("/etc/ssh/sshd_config")
+{{% if product == 'sle16' %}}
+SSHD_PATHS+=("/usr/etc/ssh/sshd_config" /usr/etc/ssh/sshd_config.d/* /etc/ssh/sshd_config.d/*)
+{{% endif %}}
+# clean up configurations
+sed -i '/^MaxAuthTries.*/d' "${SSHD_PATHS[@]}"
+
+# restore to defaults for sle16
+{{% if product == 'sle16' %}}
+if [ -e "/etc/ssh/sshd_config" ] ; then
+    rm /etc/ssh/sshd_config
+fi
+{{% endif %}}
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_max_auth_tries/tests/wrong_value_etc_sshd_config_drop_in.fail.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_auth_tries/tests/wrong_value_etc_sshd_config_drop_in.fail.sh
new file mode 100644
index 000000000000..41136d9eb40b
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_auth_tries/tests/wrong_value_etc_sshd_config_drop_in.fail.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+# variables = sshd_max_auth_tries_value=4
+source include.sh
+
+echo "MaxAuthTries 20" >> /etc/ssh/sshd_config.d/01-complianceascode.conf
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_max_auth_tries/tests/wrong_value_usr_etc_sshd_config.fail.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_auth_tries/tests/wrong_value_usr_etc_sshd_config.fail.sh
new file mode 100644
index 000000000000..218e4deb2407
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_auth_tries/tests/wrong_value_usr_etc_sshd_config.fail.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+# variables = sshd_max_auth_tries_value=4
+source include.sh
+
+echo "MaxAuthTries 5" >> /usr/etc/ssh/sshd_config
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_max_auth_tries/tests/wrong_value_usr_etc_sshd_config_drop_in.fail.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_auth_tries/tests/wrong_value_usr_etc_sshd_config_drop_in.fail.sh
new file mode 100644
index 000000000000..753e15c14404
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_auth_tries/tests/wrong_value_usr_etc_sshd_config_drop_in.fail.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+# variables = sshd_max_auth_tries_value=4
+source include.sh
+
+echo "MaxAuthTries 0" >> /usr/etc/ssh/sshd_config.d/01-complianceascode.conf
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_max_sessions/oval/shared.xml b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_sessions/oval/shared.xml
index 0eff641eb037..207e84401ee0 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_set_max_sessions/oval/shared.xml
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_sessions/oval/shared.xml
@@ -1,3 +1,5 @@
+{{%- set sshd_main_config = sshd_main_config_file -%}}
+{{%- set sshd_drop_in_dir = sshd_config_dir -%}}
 <def-group>
   <definition class="compliance" id="{{{rule_id}}}" version="1">
     {{{ oval_metadata("The SSH number of max sessions should be set to an
@@ -44,7 +46,7 @@
   </ind:textfilecontent54_test>
 
   <ind:textfilecontent54_object id="object_sshd_max_sessions" version="2">
-    <ind:filepath>/etc/ssh/sshd_config</ind:filepath>
+    <ind:filepath>{{{ sshd_main_config }}}</ind:filepath>
     <ind:pattern operation="pattern match">^[\s]*(?i)MaxSessions[\s]+(\d+)[\s]*(?:#.*)?$</ind:pattern>
     <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
   </ind:textfilecontent54_object>
@@ -59,7 +61,7 @@
   </ind:textfilecontent54_test>
 
   <ind:textfilecontent54_object id="obj_sshd_set_max_sessions_config_dir" version="1">
-    <ind:path>/etc/ssh/sshd_config.d</ind:path>
+    <ind:path>{{{ sshd_drop_in_dir }}}</ind:path>
     <ind:filename operation="pattern match">.*\.conf$</ind:filename>
     <ind:pattern operation="pattern match">^[ \t]*(?i)MaxSessions(?-i)[ \t]+(.+?)[ \t]*(?:$|#)</ind:pattern>
     <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_max_sessions/oval/sle16.xml b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_sessions/oval/sle16.xml
new file mode 100644
index 000000000000..3acd7b75327d
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_sessions/oval/sle16.xml
@@ -0,0 +1,153 @@
+<def-group>
+  <definition class="compliance" id="{{{rule_id}}}" version="1">
+    {{{ oval_metadata("The SSH MaxSessions should be set to an appropriate value.", rule_title=rule_title) }}}
+    <criteria comment="SSH is configured correctly or is not installed" operator="OR">
+      <criteria comment="sshd is not installed" operator="AND">
+        <extend_definition comment="sshd is not required or requirement is unset" definition_ref="sshd_not_required_or_unset"/>
+        <extend_definition comment="rpm package openssh-server removed" definition_ref="package_openssh-server_removed"/>
+      </criteria>
+      <criteria comment="sshd is installed and configured using /etc/ssh/sshd_config" operator="AND">
+        <extend_definition comment="sshd is required or requirement is unset" definition_ref="sshd_required_or_unset"/>
+        <extend_definition comment="rpm package openssh-server installed" definition_ref="package_openssh-server_installed"/>
+        <criteria comment="MaxSessions is configured correctly in /etc/ssh/sshd_config" operator="AND">
+          <criterion comment="SSH configuration /etc/ssh/sshd_config exists" test_ref="test_etc_ssh_sshd_config_exist"/>
+          <criterion comment="Check MaxSessions in /usr/etc/ssh/sshd_config" test_ref="test_sshd_max_session_etc" />
+          <criterion comment="Check MaxSessions in /etc/ssh/sshd_config.d/" test_ref="test_sshd_max_session_config_dir"/>
+          <criterion comment="Check MaxSessions in /usr/etc/ssh/sshd_config.d/" test_ref="test_sshd_max_session_usr_config_dir"/>
+          <criterion comment="the configuration exists" test_ref="test_max_session_present_etc" />
+        </criteria>
+      </criteria>
+      <criteria comment="sshd is installed and configured using /usr/etc/ssh/sshd_config" operator="AND">
+        <extend_definition comment="sshd is required or requirement is unset" definition_ref="sshd_required_or_unset" />
+        <extend_definition comment="rpm package openssh-server installed" definition_ref="package_openssh-server_installed" />
+        <criteria comment="MaxSessions is configured correctly in /usr/etc/ssh/sshd_config" operator="AND">
+          <criterion comment="SSH configuration /etc/ssh/sshd_config does not exists" test_ref="test_etc_ssh_sshd_config_exist" negate="true"/>
+          <criterion comment="Check MaxSessions in /usr/etc/ssh/sshd_config" test_ref="test_sshd_max_session_usr" />
+          <criterion comment="Check MaxSessions in /etc/ssh/sshd_config.d/" test_ref="test_sshd_max_session_config_dir"/>
+          <criterion comment="Check MaxSessions in /usr/etc/ssh/sshd_config.d/" test_ref="test_sshd_max_session_usr_config_dir"/>
+          <criterion comment="the configuration exists" test_ref="test_max_session_present_usr" />
+        </criteria>
+      </criteria>
+    </criteria>
+  </definition>
+
+  <unix:file_test check="all" check_existence="all_exist"
+      comment="SSH configuration /etc/ssh/sshd_config exists"
+      id="test_etc_ssh_sshd_config_exist"
+      state_operator="AND" version="1">
+    <unix:object object_ref="obj_etc_ssh_sshd_config_exist"/>
+  </unix:file_test>
+  <unix:file_object
+      comment="SSH configuration /etc/ssh/sshd_config exists"
+      id="obj_etc_ssh_sshd_config_exist" version="1">
+    <unix:filepath operation="pattern match">^/etc/ssh/sshd_config</unix:filepath>
+  </unix:file_object>
+
+  <ind:textfilecontent54_test check="all" check_existence="any_exist"
+    comment="MaxSessions is configured in /etc/ssh/sshd_config"
+    id="test_sshd_max_session_etc" version="1">
+    <ind:object object_ref="object_sshd_max_session_etc" />
+    <ind:state state_ref="state_max_session_value_upper_bound" />
+    <ind:state state_ref="state_max_session_value_lower_bound" />
+  </ind:textfilecontent54_test>
+
+  <ind:textfilecontent54_object id="object_sshd_max_session_etc" version="2">
+    <ind:filepath>/etc/ssh/sshd_config</ind:filepath>
+    <ind:pattern operation="pattern match">^[\s]*(?i)MaxSessions[\s]+(\d+)[\s]*(?:#.*)?$</ind:pattern>
+    <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
+  </ind:textfilecontent54_object>
+
+  <ind:textfilecontent54_test check="all" check_existence="any_exist"
+    comment="MaxSessions is configured in /usr/etc/ssh/sshd_config"
+    id="test_sshd_max_session_usr" version="1">
+    <ind:object object_ref="object_sshd_max_session_usr" />
+    <ind:state state_ref="state_max_session_value_upper_bound" />
+    <ind:state state_ref="state_max_session_value_lower_bound" />
+  </ind:textfilecontent54_test>
+
+  <ind:textfilecontent54_object id="object_sshd_max_session_usr" version="2">
+    <ind:filepath>/usr/etc/ssh/sshd_config</ind:filepath>
+    <ind:pattern operation="pattern match">^[\s]*(?i)MaxSessions[\s]+(\d+)[\s]*(?:#.*)?$</ind:pattern>
+    <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
+  </ind:textfilecontent54_object>
+
+  <ind:textfilecontent54_test check="all" check_existence="any_exist"
+    comment="MaxSessions is configured in drop-in directory /etc/ssh/sshd_config.d"
+    id="test_sshd_max_session_config_dir" version="1">
+    <ind:object object_ref="object_sshd_max_session_config_dir" />
+    <ind:state state_ref="state_max_session_value_upper_bound" />
+    <ind:state state_ref="state_max_session_value_lower_bound" />
+  </ind:textfilecontent54_test>
+
+  <ind:textfilecontent54_object id="object_sshd_max_session_config_dir" version="2">
+    <ind:path>/etc/ssh/sshd_config.d</ind:path>
+    <ind:filename operation="pattern match">.*\.conf$</ind:filename>
+    <ind:pattern operation="pattern match">^[\s]*(?i)MaxSessions[\s]+(\d+)[\s]*(?:#.*)?$</ind:pattern>
+    <ind:instance datatype="int">1</ind:instance>
+  </ind:textfilecontent54_object>
+
+  <ind:textfilecontent54_test check="all" check_existence="any_exist"
+    comment="MaxSessions is configured in included directory /usr/etc/ssh/sshd_config.d"
+    id="test_sshd_max_session_usr_config_dir" version="1">
+    <ind:object object_ref="object_sshd_max_session_usr_config_dir" />
+    <ind:state state_ref="state_max_session_value_upper_bound" />
+    <ind:state state_ref="state_max_session_value_lower_bound" />
+  </ind:textfilecontent54_test>
+
+  <ind:textfilecontent54_object id="object_sshd_max_session_usr_config_dir" version="2">
+    <ind:path>/usr/etc/ssh/sshd_config.d</ind:path>
+    <ind:filename operation="pattern match">.*\.conf$</ind:filename>
+    <ind:pattern operation="pattern match">^[\s]*(?i)MaxSessions[\s]+(\d+)[\s]*(?:#.*)?$</ind:pattern>
+    <ind:instance datatype="int">1</ind:instance>
+  </ind:textfilecontent54_object>
+
+  <ind:textfilecontent54_state comment="upper bound of MaxSessions in number of sessions"
+  id="state_max_session_value_upper_bound" version="1">
+    <ind:subexpression datatype="int" operation="less than or equal" var_check="all"
+    var_ref="var_sshd_max_sessions" />
+  </ind:textfilecontent54_state>
+
+  <ind:textfilecontent54_state comment="lower bound of MaxSessions in number of sessions"
+  id="state_max_session_value_lower_bound" version="1">
+    <ind:subexpression datatype="int" operation="greater than">0</ind:subexpression>
+  </ind:textfilecontent54_state>
+
+  <ind:textfilecontent54_test id="test_max_session_present_etc" version="1"
+    check="all" check_existence="at_least_one_exists"
+    comment="Verify that the value of MaxSessions is present">
+    <ind:object object_ref="obj_collection_obj_sshd_set_max_session" />
+  </ind:textfilecontent54_test>
+
+  <ind:textfilecontent54_object comment="All confs collection" id="obj_collection_obj_sshd_set_max_session" version="1">
+    <set set_operator="UNION">
+      <set set_operator="UNION">
+        <object_reference>object_sshd_max_session_etc</object_reference>
+      </set>
+      <set set_operator="UNION">
+        <object_reference>object_sshd_max_session_config_dir</object_reference>
+        <object_reference>object_sshd_max_session_usr_config_dir</object_reference>
+      </set>
+    </set>
+  </ind:textfilecontent54_object>
+
+  <ind:textfilecontent54_test id="test_max_session_present_usr" version="1"
+    check="all" check_existence="at_least_one_exists"
+    comment="Verify that the value of MaxSessions is present">
+    <ind:object object_ref="obj_collection_obj_sshd_set_max_session_usr" />
+  </ind:textfilecontent54_test>
+
+  <ind:textfilecontent54_object comment="All confs collection" id="obj_collection_obj_sshd_set_max_session_usr" version="1">
+    <set set_operator="UNION">
+      <set set_operator="UNION">
+        <object_reference>object_sshd_max_session_usr</object_reference>
+      </set>
+      <set set_operator="UNION">
+        <object_reference>object_sshd_max_session_config_dir</object_reference>
+        <object_reference>object_sshd_max_session_usr_config_dir</object_reference>
+      </set>
+    </set>
+  </ind:textfilecontent54_object>
+
+  <external_variable comment="MaxSessions value" datatype="int" id="var_sshd_max_sessions" version="1" />
+
+</def-group>
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_max_sessions/tests/correct_value_etc_sshd_config_drop_in.pass.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_sessions/tests/correct_value_etc_sshd_config_drop_in.pass.sh
new file mode 100644
index 000000000000..7fdb6123803b
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_sessions/tests/correct_value_etc_sshd_config_drop_in.pass.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+# variables = var_sshd_max_sessions=4
+source include.sh
+
+echo "MaxSessions 4" >> /etc/ssh/sshd_config.d/01-complianceascode.conf
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_max_sessions/tests/correct_value_in_usr_etc_sshd_config_present.fail.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_sessions/tests/correct_value_in_usr_etc_sshd_config_present.fail.sh
new file mode 100644
index 000000000000..7f19908dcaea
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_sessions/tests/correct_value_in_usr_etc_sshd_config_present.fail.sh
@@ -0,0 +1,7 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+# variables = var_sshd_max_sessions=4
+source include.sh
+
+touch /etc/ssh/sshd_config
+echo "MaxSessions 4" >> /usr/etc/ssh/sshd_config
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_max_sessions/tests/correct_value_usr_etc_sshd_config.pass.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_sessions/tests/correct_value_usr_etc_sshd_config.pass.sh
new file mode 100644
index 000000000000..180bd49bed98
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_sessions/tests/correct_value_usr_etc_sshd_config.pass.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+# variables = var_sshd_max_sessions=4
+source include.sh
+
+echo "MaxSessions 4" >> /usr/etc/ssh/sshd_config
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_max_sessions/tests/correct_value_usr_etc_sshd_config_drop_in.pass.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_sessions/tests/correct_value_usr_etc_sshd_config_drop_in.pass.sh
new file mode 100644
index 000000000000..622d36446727
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_sessions/tests/correct_value_usr_etc_sshd_config_drop_in.pass.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+# variables = var_sshd_max_sessions=4
+source include.sh
+
+echo "MaxSessions 4" >> /usr/etc/ssh/sshd_config.d/01-complianceascode.conf
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_max_sessions/tests/include.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_sessions/tests/include.sh
new file mode 100644
index 000000000000..4c8d058295d8
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_sessions/tests/include.sh
@@ -0,0 +1,15 @@
+#!/bin/bash
+
+declare -a SSHD_PATHS=("/etc/ssh/sshd_config")
+{{% if product == 'sle16' %}}
+SSHD_PATHS+=("/usr/etc/ssh/sshd_config" /usr/etc/ssh/sshd_config.d/* /etc/ssh/sshd_config.d/*)
+{{% endif %}}
+# clean up configurations
+sed -i '/^MaxSessions.*/d' "${SSHD_PATHS[@]}"
+
+# restore to defaults for sle16
+{{% if product == 'sle16' %}}
+if [ -e "/etc/ssh/sshd_config" ] ; then
+    rm /etc/ssh/sshd_config
+fi
+{{% endif %}}
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_max_sessions/tests/wrong_value_etc_sshd_config_drop_in.fail.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_sessions/tests/wrong_value_etc_sshd_config_drop_in.fail.sh
new file mode 100644
index 000000000000..606d55099420
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_sessions/tests/wrong_value_etc_sshd_config_drop_in.fail.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+# variables = var_sshd_max_sessions=4
+source include.sh
+
+echo "MaxSessions 20" >> /etc/ssh/sshd_config.d/01-complianceascode.conf
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_max_sessions/tests/wrong_value_usr_etc_sshd_config.fail.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_sessions/tests/wrong_value_usr_etc_sshd_config.fail.sh
new file mode 100644
index 000000000000..fe6f5a820988
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_sessions/tests/wrong_value_usr_etc_sshd_config.fail.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+# variables = var_sshd_max_sessions=4
+source include.sh
+
+echo "MaxSessions 5" >> /usr/etc/ssh/sshd_config
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_max_sessions/tests/wrong_value_usr_etc_sshd_config_drop_in.fail.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_sessions/tests/wrong_value_usr_etc_sshd_config_drop_in.fail.sh
new file mode 100644
index 000000000000..0c07b9608d42
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_max_sessions/tests/wrong_value_usr_etc_sshd_config_drop_in.fail.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+# variables = var_sshd_max_sessions=4
+source include.sh
+
+echo "MaxSessions 10" >> /usr/etc/ssh/sshd_config.d/01-complianceascode.conf
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_maxstartups/oval/sle16.xml b/linux_os/guide/services/ssh/ssh_server/sshd_set_maxstartups/oval/sle16.xml
new file mode 100644
index 000000000000..5ca10680c2a8
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_maxstartups/oval/sle16.xml
@@ -0,0 +1,151 @@
+<def-group>
+  <definition class="compliance" id="{{{ rule_id }}}" version="2">
+    {{{ oval_metadata("Ensure 'MaxStartups' is properly configured in SSH configuration files.", rule_title=rule_title) }}}
+    <criteria operator="OR" comment="sshd MaxStartups parameter is properly configured if sshd is installed">
+      <criteria operator="AND" comment="sshd is not installed">
+        <extend_definition definition_ref="sshd_not_required_or_unset"
+          comment="sshd is not required or requirement is unset"/>
+        <extend_definition definition_ref="package_openssh-server_removed"
+          comment="rpm package openssh-server is removed"/>
+      </criteria>
+      <criteria operator="OR">
+        <criteria comment="MaxStartups is configured correctly in /etc/ssh/sshd_config" operator="AND">
+          <criterion comment="SSH configuration /etc/ssh/sshd_config exists" test_ref="test_etc_ssh_sshd_config_exist"/>
+          <criterion test_ref="tst_maxstartups_start_parameter" comment="SSH MaxStartups start parameter is less than or equal to 10"/>
+          <criterion test_ref="tst_maxstartups_rate_parameter" comment="SSH MaxStartups rate parameter is greater than or equal to 30"/>
+          <criterion test_ref="tst_maxstartups_full_parameter" comment="SSH MaxStartups full parameter is less than or equal to 100"/>
+        </criteria>
+        <criteria comment="MaxStartups is configured correctly in /usr/etc/ssh/sshd_config" operator="AND">
+          <criterion comment="SSH configuration /etc/ssh/sshd_config does not exists" test_ref="test_etc_ssh_sshd_config_exist" negate="true"/>
+          <criterion test_ref="tst_maxstartups_start_parameter_usr" comment="SSH MaxStartups start parameter is less than or equal to 10"/>
+          <criterion test_ref="tst_maxstartups_rate_parameter_usr" comment="SSH MaxStartups rate parameter is greater than or equal to 30"/>
+          <criterion test_ref="tst_maxstartups_full_parameter_usr" comment="SSH MaxStartups full parameter is less than or equal to 100"/>
+        </criteria>
+      </criteria>
+    </criteria>
+  </definition>
+
+  <unix:file_test check="all" check_existence="all_exist"
+      comment="SSH configuration /etc/ssh/sshd_config exists"
+      id="test_etc_ssh_sshd_config_exist"
+      state_operator="AND" version="1">
+    <unix:object object_ref="obj_etc_ssh_sshd_config_exist"/>
+  </unix:file_test>
+  <unix:file_object
+      comment="SSH configuration /etc/ssh/sshd_config exists"
+      id="obj_etc_ssh_sshd_config_exist" version="1">
+    <unix:filepath operation="pattern match">^/etc/ssh/sshd_config</unix:filepath>
+  </unix:file_object>
+
+  <ind:textfilecontent54_test id="tst_maxstartups_start_parameter" version="2"
+    check="all" check_existence="at_least_one_exists"
+    comment="SSH MaxStartups start parameter is less than or equal to the expected value">
+    <ind:object object_ref="obj_sshd_config_maxstartups_first_parameter"/>
+    <ind:state state_ref="ste_sshd_config_start_parameter_valid"/>
+  </ind:textfilecontent54_test>
+  <ind:textfilecontent54_test id="tst_maxstartups_rate_parameter" version="2"
+    check="all" check_existence="at_least_one_exists"
+    comment="SSH MaxStartups rate parameter is greater than or equal to the expected value">
+    <ind:object object_ref="obj_sshd_config_maxstartups_second_parameter"/>
+    <ind:state state_ref="ste_sshd_config_rate_parameter_valid"/>
+  </ind:textfilecontent54_test>
+  <ind:textfilecontent54_test id="tst_maxstartups_full_parameter" version="2"
+    check="all" check_existence="at_least_one_exists"
+    comment="SSH MaxStartups full parameter is less than or equal to the expected value">
+    <ind:object object_ref="obj_sshd_config_maxstartups_third_parameter"/>
+    <ind:state state_ref="ste_sshd_config_full_parameter_valid"/>
+  </ind:textfilecontent54_test>
+
+  <ind:textfilecontent54_object id="obj_sshd_config_maxstartups_first_parameter" version="2">
+    <ind:path operation="pattern match">^(/etc/ssh|/etc/ssh/sshd_config.d|/usr/etc/ssh/sshd_config.d)</ind:path>
+    <ind:filename operation="pattern match">(sshd_config|.*\.conf)$</ind:filename>
+    <ind:pattern operation="pattern match" datatype="string">(?i)^\s*MaxStartups\s+(\d+):\d+:\d+\s*$</ind:pattern>
+    <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
+  </ind:textfilecontent54_object>
+  <ind:textfilecontent54_object id="obj_sshd_config_maxstartups_second_parameter" version="2">
+    <ind:path operation="pattern match">^(/etc/ssh|/etc/ssh/sshd_config.d|/usr/etc/ssh/sshd_config.d)</ind:path>
+    <ind:filename operation="pattern match">(sshd_config|.*\.conf)$</ind:filename>
+    <ind:pattern operation="pattern match" datatype="string">(?i)^\s*MaxStartups\s+\d+:(\d+):\d+\s*$</ind:pattern>
+    <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
+  </ind:textfilecontent54_object>
+  <ind:textfilecontent54_object id="obj_sshd_config_maxstartups_third_parameter" version="2">
+    <ind:path operation="pattern match">^(/etc/ssh|/etc/ssh/sshd_config.d|/usr/etc/ssh/sshd_config.d)</ind:path>
+    <ind:filename operation="pattern match">(sshd_config|.*\.conf)$</ind:filename>
+    <ind:pattern operation="pattern match" datatype="string">(?i)^\s*MaxStartups\s+\d+:\d+:(\d+)\s*$</ind:pattern>
+    <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
+  </ind:textfilecontent54_object>
+
+  <ind:textfilecontent54_test id="tst_maxstartups_start_parameter_usr" version="2"
+    check="all" check_existence="at_least_one_exists"
+    comment="SSH MaxStartups start parameter is less than or equal to the expected value">
+    <ind:object object_ref="obj_sshd_config_maxstartups_first_parameter_usr"/>
+    <ind:state state_ref="ste_sshd_config_start_parameter_valid"/>
+  </ind:textfilecontent54_test>
+  <ind:textfilecontent54_test id="tst_maxstartups_rate_parameter_usr" version="2"
+    check="all" check_existence="at_least_one_exists"
+    comment="SSH MaxStartups rate parameter is greater than or equal to the expected value">
+    <ind:object object_ref="obj_sshd_config_maxstartups_second_parameter_usr"/>
+    <ind:state state_ref="ste_sshd_config_rate_parameter_valid"/>
+  </ind:textfilecontent54_test>
+  <ind:textfilecontent54_test id="tst_maxstartups_full_parameter_usr" version="2"
+    check="all" check_existence="at_least_one_exists"
+    comment="SSH MaxStartups full parameter is less than or equal to the expected value">
+    <ind:object object_ref="obj_sshd_config_maxstartups_third_parameter_usr"/>
+    <ind:state state_ref="ste_sshd_config_full_parameter_valid"/>
+  </ind:textfilecontent54_test>
+
+  <ind:textfilecontent54_object id="obj_sshd_config_maxstartups_first_parameter_usr" version="2">
+    <ind:path operation="pattern match">^(/usr/etc/ssh|/etc/ssh/sshd_config.d|/usr/etc/ssh/sshd_config.d)</ind:path>
+    <ind:filename operation="pattern match">(sshd_config|.*\.conf)$</ind:filename>
+    <ind:pattern operation="pattern match" datatype="string">(?i)^\s*MaxStartups\s+(\d+):\d+:\d+\s*$</ind:pattern>
+    <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
+  </ind:textfilecontent54_object>
+  <ind:textfilecontent54_object id="obj_sshd_config_maxstartups_second_parameter_usr" version="2">
+    <ind:path operation="pattern match">^(/usr/etc/ssh|/etc/ssh/sshd_config.d|/usr/etc/ssh/sshd_config.d)</ind:path>
+    <ind:filename operation="pattern match">(sshd_config|.*\.conf)$</ind:filename>
+    <ind:pattern operation="pattern match" datatype="string">(?i)^\s*MaxStartups\s+\d+:(\d+):\d+\s*$</ind:pattern>
+    <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
+  </ind:textfilecontent54_object>
+  <ind:textfilecontent54_object id="obj_sshd_config_maxstartups_third_parameter_usr" version="2">
+    <ind:path operation="pattern match">^(/usr/etc/ssh|/etc/ssh/sshd_config.d|/usr/etc/ssh/sshd_config.d)</ind:path>
+    <ind:filename operation="pattern match">(sshd_config|.*\.conf)$</ind:filename>
+    <ind:pattern operation="pattern match" datatype="string">(?i)^\s*MaxStartups\s+\d+:\d+:(\d+)\s*$</ind:pattern>
+    <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
+  </ind:textfilecontent54_object>
+
+  <external_variable id="var_sshd_set_maxstartups" version="1"
+    datatype="string" comment="Expected value for MaxStartups parameter"/>
+
+  <local_variable id="var_sshd_set_maxstartups_first" version="1" datatype="int"
+    comment="First number from MaxStartup parameter value.">
+    <regex_capture pattern="(\d+):\d+:\d+">
+      <variable_component var_ref="var_sshd_set_maxstartups"/>
+    </regex_capture>
+  </local_variable>
+  <local_variable id="var_sshd_set_maxstartups_second" version="1" datatype="int"
+    comment="Second number from MaxStartup parameter value.">
+    <regex_capture pattern="\d+:(\d+):\d+">
+      <variable_component var_ref="var_sshd_set_maxstartups"/>
+    </regex_capture>
+  </local_variable>
+  <local_variable id="var_sshd_set_maxstartups_third" version="1" datatype="int"
+    comment="Third number from MaxStartup parameter value.">
+    <regex_capture pattern="\d+:\d+:(\d+)">
+      <variable_component var_ref="var_sshd_set_maxstartups" />
+    </regex_capture>
+  </local_variable>
+
+  <ind:textfilecontent54_state id="ste_sshd_config_start_parameter_valid" version="2">
+    <ind:subexpression datatype="int" operation="less than or equal"
+      var_ref="var_sshd_set_maxstartups_first"/>
+  </ind:textfilecontent54_state>
+  <ind:textfilecontent54_state id="ste_sshd_config_rate_parameter_valid" version="2">
+    <ind:subexpression datatype="int" operation="greater than or equal"
+      var_ref="var_sshd_set_maxstartups_second"/>
+  </ind:textfilecontent54_state>
+  <ind:textfilecontent54_state id="ste_sshd_config_full_parameter_valid" version="2">
+    <ind:subexpression datatype="int" operation="less than or equal"
+      var_ref="var_sshd_set_maxstartups_third"/>
+  </ind:textfilecontent54_state>
+
+</def-group>
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_maxstartups/tests/correct_value_etc_sshd_config_drop_in.pass.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_maxstartups/tests/correct_value_etc_sshd_config_drop_in.pass.sh
new file mode 100644
index 000000000000..fc6371be73be
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_maxstartups/tests/correct_value_etc_sshd_config_drop_in.pass.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+# variables = var_sshd_set_maxstartups=10:30:60
+source include.sh
+
+echo "MaxStartups 10:30:60" >> /etc/ssh/sshd_config.d/01-complianceascode.conf
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_maxstartups/tests/correct_value_in_usr_etc_sshd_config_present.fail.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_maxstartups/tests/correct_value_in_usr_etc_sshd_config_present.fail.sh
new file mode 100644
index 000000000000..6905e07c838e
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_maxstartups/tests/correct_value_in_usr_etc_sshd_config_present.fail.sh
@@ -0,0 +1,7 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+# variables = var_sshd_set_maxstartups=10:30:60
+source include.sh
+
+touch /etc/ssh/sshd_config
+echo "MaxStartups 10:30:60" >> /usr/etc/ssh/sshd_config
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_maxstartups/tests/correct_value_usr_etc_sshd_config.pass.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_maxstartups/tests/correct_value_usr_etc_sshd_config.pass.sh
new file mode 100644
index 000000000000..0a93fe6e32ec
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_maxstartups/tests/correct_value_usr_etc_sshd_config.pass.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+# variables = var_sshd_set_maxstartups=10:30:60
+source include.sh
+
+echo "MaxStartups 10:30:60" >> /usr/etc/ssh/sshd_config
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_maxstartups/tests/correct_value_usr_etc_sshd_config_drop_in.pass.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_maxstartups/tests/correct_value_usr_etc_sshd_config_drop_in.pass.sh
new file mode 100644
index 000000000000..d2835b507b40
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_maxstartups/tests/correct_value_usr_etc_sshd_config_drop_in.pass.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+# variables = var_sshd_set_maxstartups=10:30:60
+source include.sh
+
+echo "MaxStartups 10:30:60" >> /usr/etc/ssh/sshd_config.d/01-complianceascode.conf
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_maxstartups/tests/include.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_maxstartups/tests/include.sh
new file mode 100644
index 000000000000..1f5b69d60b54
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_maxstartups/tests/include.sh
@@ -0,0 +1,15 @@
+#!/bin/bash
+
+declare -a SSHD_PATHS=("/etc/ssh/sshd_config")
+{{% if product == 'sle16' %}}
+SSHD_PATHS+=("/usr/etc/ssh/sshd_config" /usr/etc/ssh/sshd_config.d/* /etc/ssh/sshd_config.d/*)
+{{% endif %}}
+# clean up configurations
+sed -i '/^MaxStartups.*/d' "${SSHD_PATHS[@]}"
+
+# restore to defaults for sle16
+{{% if product == 'sle16' %}}
+if [ -e "/etc/ssh/sshd_config" ] ; then
+    rm /etc/ssh/sshd_config
+fi
+{{% endif %}}
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_maxstartups/tests/wrong_value_etc_sshd_config_drop_in.fail.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_maxstartups/tests/wrong_value_etc_sshd_config_drop_in.fail.sh
new file mode 100644
index 000000000000..39d6dae3afc2
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_maxstartups/tests/wrong_value_etc_sshd_config_drop_in.fail.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+# variables = var_sshd_set_maxstartups=10:30:60
+source include.sh
+
+echo "MaxStartups 10:30:61" >> /etc/ssh/sshd_config.d/01-complianceascode.conf
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_maxstartups/tests/wrong_value_usr_etc_sshd_config.fail.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_maxstartups/tests/wrong_value_usr_etc_sshd_config.fail.sh
new file mode 100644
index 000000000000..9bfce7c33062
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_maxstartups/tests/wrong_value_usr_etc_sshd_config.fail.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+# variables = var_sshd_set_maxstartups=10:30:60
+source include.sh
+
+echo "MaxStartups 10:29:60" >> /usr/etc/ssh/sshd_config
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_maxstartups/tests/wrong_value_usr_etc_sshd_config_drop_in.fail.sh b/linux_os/guide/services/ssh/ssh_server/sshd_set_maxstartups/tests/wrong_value_usr_etc_sshd_config_drop_in.fail.sh
new file mode 100644
index 000000000000..a0781811a3a3
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_maxstartups/tests/wrong_value_usr_etc_sshd_config_drop_in.fail.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+# variables = var_sshd_set_maxstartups=10:30:60
+source include.sh
+
+echo "MaxStartups 11:30:60">> /usr/etc/ssh/sshd_config.d/01-complianceascode.conf
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_ciphers/bash/shared.sh b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_ciphers/bash/shared.sh
index 5163c19d87f8..0c9d1b452478 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_ciphers/bash/shared.sh
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_ciphers/bash/shared.sh
@@ -2,4 +2,8 @@
 
 {{{ bash_instantiate_variables("sshd_approved_ciphers") }}}
 
-{{{ bash_replace_or_append('/etc/ssh/sshd_config', '^Ciphers', "$sshd_approved_ciphers", '%s %s', cce_identifiers=cce_identifiers) }}}
+{{{ bash_sshd_remediation(
+    parameter="Ciphers",
+    value="$sshd_approved_ciphers",
+    config_is_distributed=sshd_distributed_config,
+    rule_id=rule_id) }}}
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_ciphers/oval/shared.xml b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_ciphers/oval/shared.xml
index ec798161c368..52ca8097c258 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_ciphers/oval/shared.xml
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_ciphers/oval/shared.xml
@@ -1,3 +1,4 @@
+{{%- set sshd_main_config = sshd_main_config_file -%}}
 <def-group>
   <definition class="compliance" id="sshd_use_approved_ciphers" version="1">
     {{{ oval_metadata("Limit the ciphers to those which are FIPS-approved.", rule_title=rule_title) }}}
@@ -36,7 +37,7 @@
   </ind:variable_state>
 
   <ind:textfilecontent54_object id="obj_sshd_config_ciphers" version="1">
-    <ind:filepath>/etc/ssh/sshd_config</ind:filepath>
+    <ind:filepath>{{{ sshd_main_config }}}</ind:filepath>
     <ind:pattern operation="pattern match">^[\s]*(?i)Ciphers(?-i)[\s]+([\w,-@]+)+[\s]*(?:#.*)?$</ind:pattern>
     <ind:instance datatype="int">1</ind:instance>
   </ind:textfilecontent54_object>
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_ciphers_ordered_stig/ansible/shared.yml b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_ciphers_ordered_stig/ansible/shared.yml
index f6dc16cfe0cf..c642d4c55fb4 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_ciphers_ordered_stig/ansible/shared.yml
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_ciphers_ordered_stig/ansible/shared.yml
@@ -8,11 +8,5 @@
 {{{ ansible_instantiate_variables('sshd_approved_ciphers') }}}
 {{{ ansible_sshd_set(parameter="Ciphers", value="{{ sshd_approved_ciphers }}", config_is_distributed=sshd_distributed_config, rule_title=rule_title) }}}
 {{%- else %}}
-- name: "Configure sshd to use approved ciphers"
-  ansible.builtin.lineinfile:
-    path: /etc/ssh/sshd_config
-    line: 'Ciphers aes256-ctr,aes192-ctr,aes128-ctr'
-    state: present
-    regexp: '^[\s]*[Cc]iphers[\s]+(aes256-ctr(?=[\w,-@]+|$),?)?(aes192-ctr(?=[\w,-@]+|$),?)?(aes128-ctr(?=[\w,-@]+|$),?)?[\s]*(?:#.*)?$'
-    create: True
+{{{ ansible_sshd_set(parameter="Ciphers", value="aes256-ctr,aes192-ctr,aes128-ctr", config_is_distributed=sshd_distributed_config, rule_title=rule_title) }}}
 {{%- endif %}}
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_ciphers_ordered_stig/bash/shared.sh b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_ciphers_ordered_stig/bash/shared.sh
index 680c9db7adac..cedc3c42510b 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_ciphers_ordered_stig/bash/shared.sh
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_ciphers_ordered_stig/bash/shared.sh
@@ -1,7 +1,7 @@
 # platform = Oracle Linux 7,multi_platform_sle,multi_platform_slmicro
 
-if grep -q -P '^\s*[Cc]iphers\s+' /etc/ssh/sshd_config; then
-  sed -i 's/^\s*[Cc]iphers.*/Ciphers aes256-ctr,aes192-ctr,aes128-ctr/' /etc/ssh/sshd_config
-else
-  echo "Ciphers aes256-ctr,aes192-ctr,aes128-ctr" >> /etc/ssh/sshd_config
-fi
+{{{ bash_sshd_remediation(
+    parameter="Ciphers",
+    value="aes256-ctr,aes192-ctr,aes128-ctr",
+    config_is_distributed=sshd_distributed_config,
+    rule_id=rule_id) }}}
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_ciphers_ordered_stig/oval/shared.xml b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_ciphers_ordered_stig/oval/shared.xml
index b32003ca96ae..452e2c8e1d0f 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_ciphers_ordered_stig/oval/shared.xml
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_ciphers_ordered_stig/oval/shared.xml
@@ -1,3 +1,4 @@
+{{%- set sshd_main_config = sshd_main_config_file -%}}
 <def-group>
   <definition class="compliance" id="sshd_use_approved_ciphers_ordered_stig" version="1">
     {{{ oval_metadata("Limit the ciphers to those which are FIPS-approved.", rule_title=rule_title) }}}
@@ -27,7 +28,7 @@
   </ind:textfilecontent54_test>
 
   <ind:textfilecontent54_object id="obj_sshd_use_approved_ciphers_ordered_stig" version="1">
-    <ind:filepath>/etc/ssh/sshd_config</ind:filepath>
+    <ind:filepath>{{{ sshd_main_config }}}</ind:filepath>
     <ind:pattern operation="pattern match">^[\s]*(?i)Ciphers(?-i)[\s]+(?=[\w]+)(aes256-ctr(?=[\w,]+|$),?)?(aes192-ctr(?=[\w,]+|$),?)?(aes128-ctr)?[\s]*(?:#.*)?$</ind:pattern>
     <ind:instance datatype="int">1</ind:instance>
   </ind:textfilecontent54_object>
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_ciphers_ordered_stig/oval/ubuntu.xml b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_ciphers_ordered_stig/oval/ubuntu.xml
index 384c5f6589fa..9301044fa185 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_ciphers_ordered_stig/oval/ubuntu.xml
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_ciphers_ordered_stig/oval/ubuntu.xml
@@ -5,6 +5,8 @@
 {{%- else %}}
 {{%- set sshd_approved_ciphers = "aes256-ctr,aes192-ctr,aes128-ctr" %}}
 {{%- endif %}}
+{{%- set sshd_main_config = sshd_main_config_file -%}}
+{{%- set sshd_drop_in_dir = sshd_config_dir -%}}
 <def-group>
   <definition class="compliance" id="{{{ rule_id }}}" version="1">
     {{{ oval_metadata("Limit the ciphers to those which are FIPS-approved.", rule_title=rule_title) }}}
@@ -43,7 +45,7 @@
   </ind:textfilecontent54_test>
 
   <ind:textfilecontent54_object id="obj_{{{ rule_id }}}" version="1">
-    <ind:filepath>/etc/ssh/sshd_config</ind:filepath>
+    <ind:filepath>{{{ sshd_main_config }}}</ind:filepath>
     <ind:pattern operation="pattern match">^[ \t]*(?i)ciphers(?-i)[ \t]+(.+?)[ \t]*(?:$|#)</ind:pattern>
     <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
   </ind:textfilecontent54_object>
@@ -56,7 +58,7 @@
   </ind:textfilecontent54_test>
 
   <ind:textfilecontent54_object id="obj_{{{ rule_id }}}_config_dir" version="1">
-    <ind:path>/etc/ssh/sshd_config.d</ind:path>
+    <ind:path>{{{ sshd_drop_in_dir }}}</ind:path>
     <ind:filename operation="pattern match">.*\.conf$</ind:filename>
     <ind:pattern operation="pattern match">^[ \t]*(?i)ciphers(?-i)[ \t]+(.+?)[ \t]*(?:$|#)</ind:pattern>
     <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_ciphers_ordered_stig/rule.yml b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_ciphers_ordered_stig/rule.yml
index c04eaa8df1f4..b4be9801bb8c 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_ciphers_ordered_stig/rule.yml
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_ciphers_ordered_stig/rule.yml
@@ -1,5 +1,5 @@
 {{%- if product == 'ubuntu2204' %}}
-{{%- set sshd_approved_ciphers = "aes256-ctr,aes256-gcm@openssh.com,aes192-ctr,aes128-ctr,aes128-gcm@openssh.com" %}}
+{{%- set sshd_approved_ciphers = "aes256-ctr,aes256-gcm@openssh.com,aes128-ctr,aes128-gcm@openssh.com" %}}
 {{%- else %}}
 {{%- set sshd_approved_ciphers = "aes256-ctr,aes192-ctr,aes128-ctr" %}}
 {{%- endif %}}
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_kex_ordered_stig/ansible/shared.yml b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_kex_ordered_stig/ansible/shared.yml
index 24f56f81dea1..2ad614753576 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_kex_ordered_stig/ansible/shared.yml
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_kex_ordered_stig/ansible/shared.yml
@@ -4,13 +4,7 @@
 # complexity = low
 # disruption = low
 
-{{% set prefix_conf="^\s*KexAlgorithms\s*" %}}
 {{% set kex_algos=["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521",
              "diffie-hellman-group-exchange-sha256"]  %}}
-- name: "Configure sshd to use FIPS 140-2 approved key exchange algorithms"
-  ansible.builtin.lineinfile:
-    path: /etc/ssh/sshd_config
-    line: 'KexAlgorithms {{{ kex_algos|join(",") }}}'
-    state: present
-    regexp: '{{{ prefix_conf }}}'
-    create: True
+{{% set approved_kex_algos = kex_algos|join(",") %}}
+{{{ ansible_sshd_set(parameter="KexAlgorithms", value=approved_kex_algos, config_is_distributed=sshd_distributed_config, rule_title=rule_title) }}}
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_kex_ordered_stig/bash/shared.sh b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_kex_ordered_stig/bash/shared.sh
index 155d76cd8a52..eda467ef544e 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_kex_ordered_stig/bash/shared.sh
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_kex_ordered_stig/bash/shared.sh
@@ -9,10 +9,5 @@ KEX_ALGOS="ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellm
 {{%- if 'ubuntu' in product %}}
 {{{ bash_sshd_remediation(parameter="KexAlgorithms", value="$KEX_ALGOS", config_is_distributed=sshd_distributed_config, rule_id=rule_id) }}}
 {{%- else %}}
-
-if grep -q -P '^\s*KexAlgorithms\s+' /etc/ssh/sshd_config; then
-  sed -i "s/^\s*KexAlgorithms.*/KexAlgorithms ${KEX_ALGOS}/" /etc/ssh/sshd_config
-else
-  echo "KexAlgorithms ${KEX_ALGOS}" >> /etc/ssh/sshd_config
-fi
+{{{ bash_sshd_remediation(parameter="KexAlgorithms", value="$KEX_ALGOS", config_is_distributed=sshd_distributed_config, rule_id=rule_id) }}}
 {{%- endif %}}
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_kex_ordered_stig/oval/shared.xml b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_kex_ordered_stig/oval/shared.xml
index 59e39247137d..57adf654f1ca 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_kex_ordered_stig/oval/shared.xml
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_kex_ordered_stig/oval/shared.xml
@@ -7,7 +7,7 @@
              "diffie-hellman-group18-sha512"] %}}
 {{% set sufix_conf="(\s.*)?'" %}}
 {{% elif product in ['ol7', 'sle12', 'sle15', 'slmicro5', 'slmicro6'] %}}
-{{% set path='/etc/ssh/sshd_config' %}}
+{{% set path=sshd_main_config_file %}}
 {{% set prefix_conf="^\s*KexAlgorithms\s*" %}}
 {{% set kex_algos=["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521",
              "diffie-hellman-group-exchange-sha256"]  %}}
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_kex_ordered_stig/oval/ubuntu.xml b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_kex_ordered_stig/oval/ubuntu.xml
index ea32cfadeb56..52fbf0d0bbb3 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_kex_ordered_stig/oval/ubuntu.xml
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_kex_ordered_stig/oval/ubuntu.xml
@@ -3,6 +3,8 @@
 {{%- else %}}
 {{%- set sshd_approved_kexalgorithms = "ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256" %}}
 {{%- endif %}}
+{{%- set sshd_main_config = sshd_main_config_file -%}}
+{{%- set sshd_drop_in_dir = sshd_config_dir -%}}
 <def-group>
   <definition class="compliance" id="{{{ rule_id }}}" version="1">
     {{{ oval_metadata("Limit the KexAlgorithms to those which are FIPS-approved.", rule_title=rule_title) }}}
@@ -41,7 +43,7 @@
   </ind:textfilecontent54_test>
 
   <ind:textfilecontent54_object id="obj_{{{ rule_id }}}" version="1">
-    <ind:filepath>/etc/ssh/sshd_config</ind:filepath>
+    <ind:filepath>{{{ sshd_main_config }}}</ind:filepath>
     <ind:pattern operation="pattern match">^[ \t]*(?i)KexAlgorithms(?-i)[ \t]+(.+?)[ \t]*(?:$|#)</ind:pattern>
     <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
   </ind:textfilecontent54_object>
@@ -54,7 +56,7 @@
   </ind:textfilecontent54_test>
 
   <ind:textfilecontent54_object id="obj_{{{ rule_id }}}_config_dir" version="1">
-    <ind:path>/etc/ssh/sshd_config.d</ind:path>
+    <ind:path>{{{ sshd_drop_in_dir }}}</ind:path>
     <ind:filename operation="pattern match">.*\.conf$</ind:filename>
     <ind:pattern operation="pattern match">^[ \t]*(?i)KexAlgorithms(?-i)[ \t]+(.+?)[ \t]*(?:$|#)</ind:pattern>
     <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_kex_ordered_stig/rule.yml b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_kex_ordered_stig/rule.yml
index 90e59a76e962..54265ea53bc9 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_kex_ordered_stig/rule.yml
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_kex_ordered_stig/rule.yml
@@ -5,11 +5,11 @@
              ",diffie-hellman-group14-sha256,diffie-hellman-group16-sha512" ~
              ",diffie-hellman-group18-sha512'" %}}
 {{% elif product in ['ol7'] %}}
-{{% set path='/etc/ssh/sshd_config' %}}
+{{% set path=sshd_main_config_file %}}
 {{% set conf="KexAlgorithms ecdh-sha1-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521" ~
              ",diffie-hellman-group-exchange-sha256"  %}}
 {{% elif product in ['sle12', 'sle15', 'slmicro5', 'slmicro6', 'ubuntu2204', 'ubuntu2404'] %}}
-{{% set path='/etc/ssh/sshd_config' %}}
+{{% set path=sshd_main_config_file %}}
 {{% set conf="KexAlgorithms ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521" ~
              ",diffie-hellman-group-exchange-sha256"  %}}
 {{% endif %}}
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_macs/bash/shared.sh b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_macs/bash/shared.sh
index 34025970a52f..6eee376dbf96 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_macs/bash/shared.sh
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_macs/bash/shared.sh
@@ -2,4 +2,8 @@
 
 {{{ bash_instantiate_variables("sshd_approved_macs") }}}
 
-{{{ bash_replace_or_append('/etc/ssh/sshd_config', '^MACs', "$sshd_approved_macs", '%s %s', cce_identifiers=cce_identifiers) }}}
+{{{ bash_sshd_remediation(
+    parameter="MACs",
+    value="$sshd_approved_macs",
+    config_is_distributed=sshd_distributed_config,
+    rule_id=rule_id) }}}
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_macs/oval/shared.xml b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_macs/oval/shared.xml
index c87db511d054..ce8530423105 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_macs/oval/shared.xml
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_macs/oval/shared.xml
@@ -1,3 +1,4 @@
+{{%- set sshd_main_config = sshd_main_config_file -%}}
 <def-group>
   <definition class="compliance" id="sshd_use_approved_macs" version="1">
     {{{ oval_metadata("Limit the Message Authentication Codes (MACs) to those which are FIPS-approved.", rule_title=rule_title) }}}
@@ -46,7 +47,7 @@
   </ind:variable_state>
 
   <ind:textfilecontent54_object id="obj_sshd_config_macs" version="1">
-    <ind:filepath>/etc/ssh/sshd_config</ind:filepath>
+    <ind:filepath>{{{ sshd_main_config }}}</ind:filepath>
     <ind:pattern operation="pattern match">^[\s]*(?i)MACs(?-i)[\s]+([\w,-@]+)+[\s]*(?:#.*)?$</ind:pattern>
     <ind:instance datatype="int">1</ind:instance>
   </ind:textfilecontent54_object>
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_macs_ordered_stig/ansible/shared.yml b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_macs_ordered_stig/ansible/shared.yml
index 0acefd7516c1..c3e236f2fcf6 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_macs_ordered_stig/ansible/shared.yml
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_macs_ordered_stig/ansible/shared.yml
@@ -8,11 +8,5 @@
 {{{ ansible_instantiate_variables('sshd_approved_macs') }}}
 {{{ ansible_sshd_set(parameter="Macs", value="{{ sshd_approved_macs }}", config_is_distributed=sshd_distributed_config, rule_title=rule_title) }}}
 {{%- else %}}
-- name: "Configure sshd to use approved MACs"
-  ansible.builtin.lineinfile:
-    path: /etc/ssh/sshd_config
-    line: 'MACs hmac-sha2-512,hmac-sha2-256'
-    state: present
-    regexp: '^[\s]*MACs[\s]+(hmac-sha2-512(?=[\w,-@]+|$),?)?(hmac-sha2-256(?=[\w,-@]+|$),?)?[\s]*(?:#.*)?$'
-    create: True
+{{{ ansible_sshd_set(parameter="MACs", value="hmac-sha2-512,hmac-sha2-256", config_is_distributed=sshd_distributed_config, rule_title=rule_title) }}}
 {{%- endif %}}
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_macs_ordered_stig/bash/shared.sh b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_macs_ordered_stig/bash/shared.sh
index 0e0205a98818..83cb8cb6e1c9 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_macs_ordered_stig/bash/shared.sh
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_macs_ordered_stig/bash/shared.sh
@@ -1,7 +1,7 @@
 # platform = Oracle Linux 7,multi_platform_sle,multi_platform_slmicro
 
-if grep -q -P '^\s*MACs\s+' /etc/ssh/sshd_config; then
-  sed -i 's/^\s*MACs.*/MACs hmac-sha2-512,hmac-sha2-256/' /etc/ssh/sshd_config
-else
-  echo "MACs hmac-sha2-512,hmac-sha2-256" >> /etc/ssh/sshd_config
-fi
+{{{ bash_sshd_remediation(
+    parameter="MACs",
+    value="hmac-sha2-512,hmac-sha2-256",
+    config_is_distributed=sshd_distributed_config,
+    rule_id=rule_id) }}}
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_macs_ordered_stig/oval/shared.xml b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_macs_ordered_stig/oval/shared.xml
index 1b4781ef43d1..158d94d30e2b 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_macs_ordered_stig/oval/shared.xml
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_macs_ordered_stig/oval/shared.xml
@@ -1,3 +1,4 @@
+{{%- set sshd_main_config = sshd_main_config_file -%}}
 <def-group>
   <definition class="compliance" id="sshd_use_approved_macs_ordered_stig" version="1">
     {{{ oval_metadata("Limit the Message Authentication Codes (MACs) to those which are FIPS-approved.", rule_title=rule_title) }}}
@@ -27,7 +28,7 @@
   </ind:textfilecontent54_test>
 
   <ind:textfilecontent54_object id="obj_sshd_use_approved_macs_ordered_stig" version="1">
-    <ind:filepath>/etc/ssh/sshd_config</ind:filepath>
+    <ind:filepath>{{{ sshd_main_config }}}</ind:filepath>
     <ind:pattern operation="pattern match">^[\s]*(?i)MACs(?-i)[\s]+(?=[\w]+)(hmac-sha2-512(?=[\w,]+|$),?)?(hmac-sha2-256)?[\s]*(?:#.*)?$</ind:pattern>
     <ind:instance datatype="int">1</ind:instance>
   </ind:textfilecontent54_object>
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_macs_ordered_stig/oval/ubuntu.xml b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_macs_ordered_stig/oval/ubuntu.xml
index cdef6cc539a6..25c618e5ae26 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_macs_ordered_stig/oval/ubuntu.xml
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_macs_ordered_stig/oval/ubuntu.xml
@@ -5,6 +5,8 @@
 {{%- else %}}
 {{%- set sshd_approved_macs = "hmac-sha2-512,hmac-sha2-256" %}}
 {{%- endif %}}
+{{%- set sshd_main_config = sshd_main_config_file -%}}
+{{%- set sshd_drop_in_dir = sshd_config_dir -%}}
 <def-group>
   <definition class="compliance" id="{{{ rule_id }}}" version="1">
     {{{ oval_metadata("Limit the Message Authentication Codes (MACs) to those which are FIPS-approved.", rule_title=rule_title) }}}
@@ -43,7 +45,7 @@
   </ind:textfilecontent54_test>
 
   <ind:textfilecontent54_object id="obj_{{{ rule_id }}}" version="1">
-    <ind:filepath>/etc/ssh/sshd_config</ind:filepath>
+    <ind:filepath>{{{ sshd_main_config }}}</ind:filepath>
     <ind:pattern operation="pattern match">^[ \t]*(?i)MACs(?-i)[ \t]+(.+?)[ \t]*(?:$|#)</ind:pattern>
     <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
   </ind:textfilecontent54_object>
@@ -56,7 +58,7 @@
   </ind:textfilecontent54_test>
 
   <ind:textfilecontent54_object id="obj_{{{ rule_id }}}_config_dir" version="1">
-    <ind:path>/etc/ssh/sshd_config.d</ind:path>
+    <ind:path>{{{ sshd_drop_in_dir }}}</ind:path>
     <ind:filename operation="pattern match">.*\.conf$</ind:filename>
     <ind:pattern operation="pattern match">^[ \t]*(?i)MACs(?-i)[ \t]+(.+?)[ \t]*(?:$|#)</ind:pattern>
     <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_directory_configuration/bash/shared.sh b/linux_os/guide/services/ssh/ssh_server/sshd_use_directory_configuration/bash/shared.sh
index 9317b23992dc..91548a10db65 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_use_directory_configuration/bash/shared.sh
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_use_directory_configuration/bash/shared.sh
@@ -1,18 +1,21 @@
 # platform = multi_platform_all
 
-{{% set target_file = "/etc/ssh/sshd_config.d/sshd_config_original.conf" -%}}
-{{% set base_config = "/etc/ssh/sshd_config" -%}}
+{{% set base_config = sshd_main_config_file -%}}
+{{% set config_dir = sshd_config_dir -%}}
+{{% set target_file = config_dir ~ "/sshd_config_original.conf" -%}}
+{{% set include_directive = "Include " ~ config_dir ~ "/*.conf" -%}}
+{{% set include_regex = "^\\s*Include\\s+" ~ (config_dir | replace(".", "\\.")) ~ "/\\*\\.conf" -%}}
 if test -f {{{ target_file}}}; then
 	{{{ die("Remediation probably already happened, '" ~ target_file ~ "' already exists, not doing anything.", action="false") }}}
-elif grep -Eq '^\s*Include\s+/etc/ssh/sshd_config\.d/\*\.conf' {{{ base_config }}} && ! grep -Eq '^\s*Match\s' {{{ base_config }}}; then
+elif grep -Eq '{{{ include_regex }}}' {{{ base_config }}} && ! grep -Eq '^\s*Match\s' {{{ base_config }}}; then
 	{{{ die("Remediation probably already happened, '" ~ base_config ~ "' already contains the include directive.", action="false") }}}
 else
-	mkdir -p /etc/ssh/sshd_config.d
+	mkdir -p {{{ config_dir }}}
 	mv {{{ base_config }}} {{{ target_file }}}
 cat > {{{ base_config }}} << EOF
 # To modify the system-wide sshd configuration, create a  *.conf  file under
-#  /etc/ssh/sshd_config.d/  which will be automatically included below
+#  {{{ config_dir }}}/  which will be automatically included below
 
-Include /etc/ssh/sshd_config.d/*.conf
+{{{ include_directive }}}
 EOF
 fi
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_directory_configuration/oval/shared.xml b/linux_os/guide/services/ssh/ssh_server/sshd_use_directory_configuration/oval/shared.xml
index a0bf190007d0..055f63c20fd2 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_use_directory_configuration/oval/shared.xml
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_use_directory_configuration/oval/shared.xml
@@ -1,4 +1,4 @@
-{{%- set config_path = "/etc/ssh/sshd_config" %}}
+{{%- set config_path = sshd_main_config_file %}}
 
 <def-group>
   <definition class="compliance" id="{{{ rule_id }}}" version="1">
@@ -26,4 +26,3 @@
   {{{ oval_line_in_file_test(config_path, "match", missing_parameter_pass=true, rule_id=rule_id) | indent (2) }}}
   {{{ oval_line_in_file_object(config_path, parameter="match", missing_parameter_pass=true, prefix_regex="^[ \\t]*(?i)", separator_regex="(?-i)\s+\S+", rule_id=rule_id) | indent (2) }}}
 </def-group>
-
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/ansible/shared.yml b/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/ansible/shared.yml
index fc2a78f3d79c..82b732e0e66b 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/ansible/shared.yml
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/ansible/shared.yml
@@ -6,4 +6,22 @@
 
 {{{ ansible_instantiate_variables("sshd_strong_kex") }}}
 
-{{{ ansible_sshd_set(parameter="KexAlgorithms", value="{{ sshd_strong_kex }}", config_is_distributed=sshd_distributed_config, rule_title=rule_title) }}}
+{{%- if product == 'sle16' -%}}
+    {{{
+        ansible_sshd_set_usr(
+                parameter="KexAlgorithms",
+                value="{{ sshd_strong_kex }}",
+                copy_defaults='true',
+                rule_title=rule_title
+            )
+    }}}
+{{%- else -%}}
+    {{{
+        ansible_sshd_set(
+          parameter="KexAlgorithms",
+          value="{{ sshd_strong_kex }}",
+          config_is_distributed=sshd_distributed_config,
+          rule_title=rule_title
+        )
+    }}}
+{{%- endif -%}}
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/bash/shared.sh b/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/bash/shared.sh
index e5a56dbfc6ec..de205aedd670 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/bash/shared.sh
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/bash/shared.sh
@@ -5,5 +5,22 @@
 # disruption = low
 {{{ bash_instantiate_variables("sshd_strong_kex") }}}
 
-{{{ bash_sshd_remediation(parameter="KexAlgorithms", value="$sshd_strong_kex", config_is_distributed=sshd_distributed_config, rule_id=rule_id) }}}
-
+{{%- if product == 'sle16' -%}}
+    {{{
+        bash_sshd_remediation_usr(
+            parameter="KexAlgorithms",
+            value="$sshd_strong_kex",
+            copy_defaults=true,
+            rule_id=rule_id
+        )
+    }}}
+{{%- else -%}}
+    {{{
+        bash_sshd_remediation(
+            parameter="KexAlgorithms",
+            value="$sshd_strong_kex",
+            config_is_distributed=sshd_distributed_config,
+            rule_id=rule_id
+        )
+    }}}
+{{%- endif -%}}
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/oval/shared.xml b/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/oval/shared.xml
index 9e097ca403a8..b47bab42117f 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/oval/shared.xml
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/oval/shared.xml
@@ -1,3 +1,5 @@
+{{%- set sshd_main_config = sshd_main_config_file -%}}
+{{%- set sshd_drop_in_dir = sshd_config_dir -%}}
 <def-group>
   <definition class="compliance" id="sshd_use_strong_kex" version="1">
     {{{ oval_metadata("Limit the Key Exchange Algorithms to those which are FIPS-approved.", rule_title=rule_title) }}}
@@ -52,7 +54,7 @@
   </ind:variable_state>
 
   <ind:textfilecontent54_object id="obj_sshd_config_kex" version="1">
-    <ind:filepath>/etc/ssh/sshd_config</ind:filepath>
+    <ind:filepath>{{{ sshd_main_config }}}</ind:filepath>
     <ind:pattern operation="pattern match">^[\s]*(?i)KexAlgorithms(?-i)[\s]+([\w,-@]+)+[\s]*(?:#.*)?$</ind:pattern>
     <ind:instance datatype="int" operation="greater than or equal">1</ind:instance>
   </ind:textfilecontent54_object>
@@ -80,7 +82,7 @@
   </ind:variable_state>
 
   <ind:textfilecontent54_object id="obj_sshd_config_kex_config_dir" version="1">
-    <ind:path>/etc/ssh/sshd_config.d</ind:path>
+    <ind:path>{{{ sshd_drop_in_dir }}}</ind:path>
     <ind:filename operation="pattern match">.*\.conf$</ind:filename>
     <ind:pattern operation="pattern match">^[\s]*(?i)KexAlgorithms(?-i)[\s]+([\w,-@]+)+[\s]*(?:#.*)?$</ind:pattern>
     <ind:instance datatype="int" operation="greater than or equal">1</ind:instance>
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/oval/sle16.xml b/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/oval/sle16.xml
new file mode 100644
index 000000000000..d6c8fb2432cf
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/oval/sle16.xml
@@ -0,0 +1,171 @@
+<def-group>
+  <definition class="compliance" id="sshd_use_strong_kex" version="1">
+    {{{ oval_metadata("Limit the Key Exchange Algorithms to those which are FIPS-approved.", rule_title=rule_title) }}}
+    <criteria comment="SSH is configured correctly or is not installed"
+        operator="OR">
+      <criteria comment="sshd is not installed" operator="AND">
+        <extend_definition comment="sshd is not required or requirement is unset"
+            definition_ref="sshd_not_required_or_unset" />
+        <extend_definition comment="package openssh-server removed"
+            definition_ref="package_openssh-server_removed" />
+      </criteria>
+      <criteria comment="SSH is using /etc/ssh/sshd_config" operator="OR">
+        <criteria comment="sshd is installed and configured" operator="AND">
+          <extend_definition comment="sshd is required or requirement is unset"
+              definition_ref="sshd_required_or_unset" />
+          <extend_definition comment="package openssh-server installed"
+              definition_ref="package_openssh-server_installed" />
+          <criterion comment="SSH configuration /etc/ssh/sshd_config exists"
+              test_ref="test_etc_ssh_sshd_config_exist"/>
+          <criterion comment="Check KexAlgorithms in /etc/ssh/sshd_config"
+              test_ref="test_sshd_use_strong_kex" />
+          <criterion comment="Check KexAlgorithms in /etc/ssh/sshd_config.d/ and /usr/etc/ssh/sshd_config.d/"
+              test_ref="test_sshd_use_strong_kex_config_dir" />
+          <criterion comment="the configuration exists"
+              test_ref="test_sshd_kexalgorithms_exists" />
+        </criteria>
+        <criteria comment="sshd is installed and configured" operator="AND">
+          <extend_definition comment="sshd is required or requirement is unset"
+              definition_ref="sshd_required_or_unset" />
+          <extend_definition comment="package openssh-server installed"
+              definition_ref="package_openssh-server_installed" />
+          <criterion comment="SSH configuration /etc/ssh/sshd_config does not exists"
+              test_ref="test_etc_ssh_sshd_config_exist" negate="true"/>
+          <criterion comment="Check KexAlgorithms in /usr/etc/ssh/sshd_config"
+              test_ref="test_sshd_use_strong_kex_usr" />
+          <criterion comment="Check KexAlgorithms in /etc/ssh/sshd_config.d/ and /usr/etc/ssh/sshd_config.d/"
+              test_ref="test_sshd_use_strong_kex_config_dir" />
+          <criterion comment="the configuration exists"
+              test_ref="test_sshd_kexalgorithms_exists_usr" />
+        </criteria>
+      </criteria>
+    </criteria>
+  </definition>
+
+  <unix:file_test check="all" check_existence="all_exist"
+      comment="SSH configuration /etc/ssh/sshd_config exists"
+      id="test_etc_ssh_sshd_config_exist"
+      state_operator="AND" version="1">
+    <unix:object object_ref="obj_etc_ssh_sshd_config_exist"/>
+  </unix:file_test>
+  <unix:file_object
+      comment="SSH configuration /etc/ssh/sshd_config exists"
+      id="obj_etc_ssh_sshd_config_exist" version="1">
+    <unix:filepath operation="pattern match">^/etc/ssh/sshd_config</unix:filepath>
+  </unix:file_object>
+
+  <ind:variable_test check="all" check_existence="any_exist"
+  comment="tests the value of KexAlgorithms setting in the /etc/ssh/sshd_config file"
+  id="test_sshd_use_strong_kex" version="1">
+    <ind:object object_ref="obj_sshd_use_strong_kex" />
+    <ind:state state_ref="ste_sshd_use_strong_kex" />
+  </ind:variable_test>
+
+  <ind:variable_object id="obj_sshd_use_strong_kex" version="1">
+    <ind:var_ref>var_sshd_config_kex</ind:var_ref>
+  </ind:variable_object>
+
+  <ind:variable_state comment="approved strong kex" id="ste_sshd_use_strong_kex" version="1">
+    <ind:value operation="equals" datatype="string" var_ref="var_sshd_strong_kex" var_check="at least one" />
+  </ind:variable_state>
+
+  <local_variable id="var_sshd_config_kex" datatype="string" version="1" comment="KEXs values split on comma">
+    <split delimiter=",">
+      <object_component item_field="subexpression" object_ref="obj_sshd_config_kex" />
+    </split>
+  </local_variable>
+
+  <ind:textfilecontent54_object id="obj_sshd_config_kex" version="1">
+    <ind:filepath>/etc/ssh/sshd_config</ind:filepath>
+    <ind:pattern operation="pattern match">^[\s]*(?i)KexAlgorithms(?-i)[\s]+([\w,-@]+)+[\s]*(?:#.*)?$</ind:pattern>
+    <ind:instance datatype="int" operation="greater than or equal">1</ind:instance>
+  </ind:textfilecontent54_object>
+
+
+  <ind:variable_test check="all" check_existence="any_exist"
+      comment="tests the value of KexAlgorithms setting in the /usr/etc/ssh/sshd_config file"
+      id="test_sshd_use_strong_kex_usr" version="1">
+    <ind:object object_ref="obj_sshd_use_strong_kex_usr" />
+    <ind:state state_ref="ste_sshd_use_strong_kex_usr" />
+  </ind:variable_test>
+
+  <ind:variable_object id="obj_sshd_use_strong_kex_usr" version="1">
+    <ind:var_ref>var_sshd_config_kex_usr</ind:var_ref>
+  </ind:variable_object>
+
+  <ind:variable_state comment="approved strong kex" id="ste_sshd_use_strong_kex_usr" version="1">
+    <ind:value operation="equals" datatype="string" var_ref="var_sshd_strong_kex" var_check="at least one" />
+  </ind:variable_state>
+
+  <local_variable id="var_sshd_config_kex_usr" datatype="string" version="1" comment="KEXs values split on comma">
+    <split delimiter=",">
+      <object_component item_field="subexpression" object_ref="obj_sshd_config_kex_usr" />
+    </split>
+  </local_variable>
+
+  <ind:textfilecontent54_object id="obj_sshd_config_kex_usr" version="1">
+    <ind:filepath>/usr/etc/ssh/sshd_config</ind:filepath>
+    <ind:pattern operation="pattern match">^[\s]*(?i)KexAlgorithms(?-i)[\s]+([\w,-@]+)+[\s]*(?:#.*)?$</ind:pattern>
+    <ind:instance datatype="int" operation="greater than or equal">1</ind:instance>
+  </ind:textfilecontent54_object>
+
+  <ind:variable_test check="all" check_existence="any_exist"
+  comment="tests the value of KexAlgorithms setting in the /etc/ssh/sshd_config.d dir"
+  id="test_sshd_use_strong_kex_config_dir" version="1">
+    <ind:object object_ref="obj_sshd_use_strong_kex_config_dir" />
+    <ind:state state_ref="ste_sshd_use_strong_kex_config_dir" />
+  </ind:variable_test>
+
+  <ind:variable_object id="obj_sshd_use_strong_kex_config_dir" version="1">
+    <ind:var_ref>var_sshd_config_kex_config_dir</ind:var_ref>
+  </ind:variable_object>
+
+  <ind:variable_state comment="approved strong kex" id="ste_sshd_use_strong_kex_config_dir" version="1">
+    <ind:value operation="equals" datatype="string" var_ref="var_sshd_strong_kex" var_check="at least one" />
+  </ind:variable_state>
+
+  <ind:textfilecontent54_object id="obj_sshd_config_kex_config_dir" version="1">
+    <ind:path operation="pattern match">^(/etc/ssh/sshd_config.d|/usr/etc/ssh/sshd_config.d)</ind:path>
+    <ind:filename operation="pattern match">.*\.conf$</ind:filename>
+    <ind:pattern operation="pattern match">^[\s]*(?i)KexAlgorithms(?-i)[\s]+([\w,-@]+)+[\s]*(?:#.*)?$</ind:pattern>
+    <ind:instance datatype="int" operation="greater than or equal">1</ind:instance>
+  </ind:textfilecontent54_object>
+
+  <local_variable id="var_sshd_config_kex_config_dir" datatype="string" version="1" comment="KEXs values split on comma">
+    <split delimiter=",">
+      <object_component item_field="subexpression" object_ref="obj_sshd_config_kex_config_dir" />
+    </split>
+  </local_variable>
+
+  <ind:textfilecontent54_test id="test_sshd_kexalgorithms_exists" version="1" check="all" check_existence="at_least_one_exists"
+    comment="Verify that the value of KexAlgorithms is present">
+    <ind:object object_ref="obj_sshd_kex_all_configs" />
+  </ind:textfilecontent54_test>
+
+  <ind:textfilecontent54_object comment="All confs collection" id="obj_sshd_kex_all_configs" version="1">
+    <set>
+      <object_reference>obj_sshd_config_kex</object_reference>
+      <object_reference>obj_sshd_config_kex_config_dir</object_reference>
+    </set>
+  </ind:textfilecontent54_object>
+
+  <ind:textfilecontent54_test id="test_sshd_kexalgorithms_exists_usr" version="1" check="all" check_existence="at_least_one_exists"
+    comment="Verify that the value of KexAlgorithms is present">
+    <ind:object object_ref="obj_sshd_kex_all_configs_usr" />
+  </ind:textfilecontent54_test>
+
+  <ind:textfilecontent54_object comment="All confs collection" id="obj_sshd_kex_all_configs_usr" version="1">
+    <set>
+      <object_reference>obj_sshd_config_kex_usr</object_reference>
+      <object_reference>obj_sshd_config_kex_config_dir</object_reference>
+    </set>
+  </ind:textfilecontent54_object>
+
+  <local_variable id="var_sshd_strong_kex" datatype="string" version="1" comment="approved strong KEX values split on comma">
+    <split delimiter=",">
+      <variable_component var_ref="sshd_strong_kex" />
+    </split>
+  </local_variable>
+  <external_variable comment="SSH Approved KEX by FIPS" datatype="string" id="sshd_strong_kex" version="1" />
+
+</def-group>
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/tests/correct_value_etc_sshd_config_drop_in.pass.sh b/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/tests/correct_value_etc_sshd_config_drop_in.pass.sh
new file mode 100644
index 000000000000..7a794f42a4b1
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/tests/correct_value_etc_sshd_config_drop_in.pass.sh
@@ -0,0 +1,7 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+# variables = sshd_strong_kex=curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256
+
+source include.sh
+
+echo "KexAlgorithms curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256" >> /etc/ssh/sshd_config.d/01-complianceascode.conf
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/tests/correct_value_in_usr_etc_sshd_config_present.fail.sh b/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/tests/correct_value_in_usr_etc_sshd_config_present.fail.sh
new file mode 100644
index 000000000000..9c44448054f2
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/tests/correct_value_in_usr_etc_sshd_config_present.fail.sh
@@ -0,0 +1,7 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+# variables = sshd_strong_kex=curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256
+source include.sh
+
+touch /etc/ssh/sshd_config
+echo "KexAlgorithms curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256" >> /usr/etc/ssh/sshd_config
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/tests/correct_value_usr_etc_sshd_config.pass.sh b/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/tests/correct_value_usr_etc_sshd_config.pass.sh
new file mode 100644
index 000000000000..0577aad9bd14
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/tests/correct_value_usr_etc_sshd_config.pass.sh
@@ -0,0 +1,7 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+# variables = sshd_strong_kex=curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256
+
+source include.sh
+
+echo "KexAlgorithms curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256" >> /usr/etc/ssh/sshd_config
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/tests/correct_value_usr_etc_sshd_config_drop_in.pass.sh b/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/tests/correct_value_usr_etc_sshd_config_drop_in.pass.sh
new file mode 100644
index 000000000000..ab24bed01ba1
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/tests/correct_value_usr_etc_sshd_config_drop_in.pass.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+# variables = sshd_strong_kex=curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256
+source include.sh
+
+echo "KexAlgorithms curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256" >> /usr/etc/ssh/sshd_config.d/01-complianceascode.conf
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/tests/include.sh b/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/tests/include.sh
new file mode 100644
index 000000000000..179b7b36e808
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/tests/include.sh
@@ -0,0 +1,15 @@
+#!/bin/bash
+
+declare -a SSHD_PATHS=("/etc/ssh/sshd_config")
+{{% if product == 'sle16' %}}
+SSHD_PATHS+=("/usr/etc/ssh/sshd_config" /usr/etc/ssh/sshd_config.d/* /etc/ssh/sshd_config.d/*)
+{{% endif %}}
+# clean up configurations
+sed -i '/^KexAlgorithms.*/d' "${SSHD_PATHS[@]}"
+
+# restore to defaults for sle16
+{{% if product == 'sle16' %}}
+if [ -e "/etc/ssh/sshd_config" ] ; then
+    rm /etc/ssh/sshd_config
+fi
+{{% endif %}}
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/tests/wrong_value_etc_sshd_config_drop_in.fail.sh b/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/tests/wrong_value_etc_sshd_config_drop_in.fail.sh
new file mode 100644
index 000000000000..a1a7b95bafff
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/tests/wrong_value_etc_sshd_config_drop_in.fail.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+# variables = sshd_strong_kex=curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256
+source include.sh
+
+echo "KexAlgorithms diffie-hellman-group-exchange-sha1" >> /etc/ssh/sshd_config.d/01-complianceascode.conf
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/tests/wrong_value_usr_etc_sshd_config.fail.sh b/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/tests/wrong_value_usr_etc_sshd_config.fail.sh
new file mode 100644
index 000000000000..df52b52f680d
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/tests/wrong_value_usr_etc_sshd_config.fail.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+# variables = sshd_strong_kex=curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256
+source include.sh
+
+echo "KexAlgorithms diffie-hellman-group-exchange-sha1" >> /usr/etc/ssh/sshd_config
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/tests/wrong_value_usr_etc_sshd_config_drop_in.fail.sh b/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/tests/wrong_value_usr_etc_sshd_config_drop_in.fail.sh
new file mode 100644
index 000000000000..2a71c2a3bd53
--- /dev/null
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/tests/wrong_value_usr_etc_sshd_config_drop_in.fail.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+# variables = sshd_strong_kex=curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256
+source include.sh
+
+echo "KexAlgorithms diffie-hellman-group-exchange-sha1" >> /usr/etc/ssh/sshd_config.d/01-complianceascode.conf
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_macs/oval/shared.xml b/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_macs/oval/shared.xml
index cefbd207730f..c50826514438 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_macs/oval/shared.xml
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_macs/oval/shared.xml
@@ -1,4 +1,5 @@
-{{%- set sshd_config_dir = "/etc/ssh/sshd_config.d" -%}}
+{{%- set sshd_main_config = sshd_main_config_file -%}}
+{{%- set sshd_drop_in_dir = sshd_config_dir -%}}
 {{%- set case_insensitivity_kwargs = dict(prefix_regex="^[ \\t]*(?i)", separator_regex = "(?-i)[ \\t]+") -%}}
 <def-group>
   <definition class="compliance" id="sshd_use_strong_macs" version="1">
@@ -56,7 +57,7 @@
   </ind:variable_state>
 
   <ind:textfilecontent54_object id="obj_sshd_config_strong_macs" version="1">
-    <ind:filepath>/etc/ssh/sshd_config</ind:filepath>
+    <ind:filepath>{{{ sshd_main_config }}}</ind:filepath>
     <ind:pattern operation="pattern match">^[\s]*(?i)MACs(?-i)[\s]+([\w,-@]+)+[\s]*(?:#.*)?$</ind:pattern>
     <ind:instance datatype="int" operation="greater than or equal">1</ind:instance>
   </ind:textfilecontent54_object>
@@ -78,7 +79,7 @@
   </ind:variable_state>
 
   <ind:textfilecontent54_object id="obj_sshd_config_macs_config_dir" version="1">
-    <ind:path>/etc/ssh/sshd_config.d</ind:path>
+    <ind:path>{{{ sshd_drop_in_dir }}}</ind:path>
     <ind:filename operation="pattern match">.*\.conf$</ind:filename>
     <ind:pattern operation="pattern match">^[\s]*(?i)MACs(?-i)[\s]+([\w,-@]+)+[\s]*(?:#.*)?$</ind:pattern>
     <ind:instance datatype="int" operation="greater than or equal">1</ind:instance>
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_rng/rule.yml b/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_rng/rule.yml
index b8240ae667a3..0b43a2b32b1a 100644
--- a/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_rng/rule.yml
+++ b/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_rng/rule.yml
@@ -1,4 +1,5 @@
 documentation_complete: true
+{{% set sshd_sysconfig = sshd_sysconfig_file %}}
 
 # TODO: The plan is not to need this for RHEL>=8.4
 # TODO: Compliant setting is SSH_USE_STRONG_RNG set to 32 or more
@@ -6,7 +7,7 @@ documentation_complete: true
 title: 'SSH server uses strong entropy to seed'
 
 description: |-
-    To set up SSH server to use entropy from a high-quality source, edit the <tt>/etc/sysconfig/sshd</tt> file.
+    To set up SSH server to use entropy from a high-quality source, edit the <tt>{{{ sshd_sysconfig }}}</tt> file.
     The <tt>SSH_USE_STRONG_RNG</tt> configuration value determines how many bytes of entropy to use, so
     make sure that the file contains line
     <pre>SSH_USE_STRONG_RNG=32</pre>
@@ -31,17 +32,17 @@ references:
 
 ocil: |-
     To determine whether the SSH service is configured to use strong entropy seed,
-    run <pre>$ sudo grep SSH_USE_STRONG_RNG /etc/sysconfig/sshd</pre>
+    run <pre>$ sudo grep SSH_USE_STRONG_RNG {{{ sshd_sysconfig }}}</pre>
     If a line indicating that SSH_USE_STRONG_RNG is set to 32 is returned,
     then the option is set correctly.
 
 ocil_clause: |-
-    the SSH_USE_STRONG_RNG is not set to 32 in /etc/sysconfig/sshd
+    the SSH_USE_STRONG_RNG is not set to 32 in {{{ sshd_sysconfig }}}
 
 fixtext: |-
     Configure the {{{ full_name }}} SSH server to use strong entropy.
 
-    Add or modify the following line in the "/etc/sysconfig/sshd" file.
+    Add or modify the following line in the "{{{ sshd_sysconfig }}}" file.
 
     SSH_USE_STRONG_RNG=32
 
@@ -55,7 +56,7 @@ warnings:
 template:
     name: shell_lineinfile
     vars:
-        path: '/etc/sysconfig/sshd'
+        path: '{{{ sshd_sysconfig }}}'
         parameter: 'SSH_USE_STRONG_RNG'
         value: '32'
         datatype: int
diff --git a/linux_os/guide/services/ssh/sshd_approved_ciphers.var b/linux_os/guide/services/ssh/sshd_approved_ciphers.var
index a684560c93d4..7f0dc16e9ebc 100644
--- a/linux_os/guide/services/ssh/sshd_approved_ciphers.var
+++ b/linux_os/guide/services/ssh/sshd_approved_ciphers.var
@@ -22,3 +22,4 @@ options:
     cis_ubuntu: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
     stig_ubuntu2204: aes256-ctr,aes256-gcm@openssh.com,aes192-ctr,aes128-ctr,aes128-gcm@openssh.com
     stig_ol9: aes256-gcm@openssh.com,aes256-ctr,aes128-gcm@openssh.com,aes128-ctr
+    stig_ol8: aes256-gcm@openssh.com,aes256-ctr,aes128-gcm@openssh.com,aes128-ctr
diff --git a/linux_os/guide/services/ssh/sshd_strong_macs.var b/linux_os/guide/services/ssh/sshd_strong_macs.var
index 03f8dee10d54..a0a75f544ff8 100644
--- a/linux_os/guide/services/ssh/sshd_strong_macs.var
+++ b/linux_os/guide/services/ssh/sshd_strong_macs.var
@@ -15,7 +15,7 @@ options:
     cis_rhel8: -hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-sha1-96,umac-64@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,umac-64-etm@openssh.com
     cis_rhel9: -hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-sha1-96,umac-64@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,umac-64-etm@openssh.com
     cis_rhel10: -hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-sha1-96,umac-64@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,umac-64-etm@openssh.com
-    cis_sle12: hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,hmac-ripemd160
+    cis_sle12: hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256
     cis_sle15: hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256
     cis_tencentos4: hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-256-etm@openssh.com
     cis_ubuntu2204: hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-256
diff --git a/linux_os/guide/services/sssd/package_sssd_installed/rule.yml b/linux_os/guide/services/sssd/package_sssd_installed/rule.yml
index bcb5357c339f..d59ffbd19035 100644
--- a/linux_os/guide/services/sssd/package_sssd_installed/rule.yml
+++ b/linux_os/guide/services/sssd/package_sssd_installed/rule.yml
@@ -15,6 +15,7 @@ identifiers:
     cce@rhel8: CCE-82444-1
     cce@rhel9: CCE-86083-3
     cce@rhel10: CCE-88372-8
+    cce@sle16: CCE-96157-3
 
 references:
     cis-csc: 1,12,15,16,5
diff --git a/linux_os/guide/services/sssd/service_sssd_enabled/rule.yml b/linux_os/guide/services/sssd/service_sssd_enabled/rule.yml
index e5f043748371..aca8c868e2bd 100644
--- a/linux_os/guide/services/sssd/service_sssd_enabled/rule.yml
+++ b/linux_os/guide/services/sssd/service_sssd_enabled/rule.yml
@@ -15,6 +15,7 @@ identifiers:
     cce@rhel8: CCE-82440-9
     cce@rhel9: CCE-86088-2
     cce@rhel10: CCE-87447-9
+    cce@sle16: CCE-95787-8
 
 platform: system_with_kernel and package[sssd]
 
@@ -38,6 +39,7 @@ template:
     vars:
         servicename: sssd
         packagename: sssd-common
+        packagename@sle16: sssd
 
 warnings:
     - general:
diff --git a/linux_os/guide/services/sssd/sssd-ldap/sssd_ldap_configure_tls_reqcert/ansible/shared.yml b/linux_os/guide/services/sssd/sssd-ldap/sssd_ldap_configure_tls_reqcert/ansible/shared.yml
index f8f3cd3e5fff..c7e0de641d6e 100644
--- a/linux_os/guide/services/sssd/sssd-ldap/sssd_ldap_configure_tls_reqcert/ansible/shared.yml
+++ b/linux_os/guide/services/sssd/sssd-ldap/sssd_ldap_configure_tls_reqcert/ansible/shared.yml
@@ -1,4 +1,4 @@
-# platform = multi_platform_rhel,multi_platform_fedora,multi_platform_ol,multi_platform_almalinux
+# platform = multi_platform_rhel,multi_platform_fedora,multi_platform_ol,multi_platform_almalinux,multi_platform_sle
 # reboot = false
 # strategy = unknown
 # complexity = low
diff --git a/linux_os/guide/services/sssd/sssd-ldap/sssd_ldap_configure_tls_reqcert/bash/shared.sh b/linux_os/guide/services/sssd/sssd-ldap/sssd_ldap_configure_tls_reqcert/bash/shared.sh
index d228b8cdb0e4..a55a8e9786c9 100644
--- a/linux_os/guide/services/sssd/sssd-ldap/sssd_ldap_configure_tls_reqcert/bash/shared.sh
+++ b/linux_os/guide/services/sssd/sssd-ldap/sssd_ldap_configure_tls_reqcert/bash/shared.sh
@@ -1,3 +1,3 @@
-# platform = multi_platform_rhel,multi_platform_fedora,multi_platform_ol,multi_platform_almalinux
+# platform = multi_platform_rhel,multi_platform_fedora,multi_platform_ol,multi_platform_almalinux,multi_platform_sle
 
 {{{ bash_sssd_ldap_config(parameter="ldap_tls_reqcert", value="demand", rule_id=rule_id) }}}
diff --git a/linux_os/guide/services/sssd/sssd-ldap/sssd_ldap_configure_tls_reqcert/rule.yml b/linux_os/guide/services/sssd/sssd-ldap/sssd_ldap_configure_tls_reqcert/rule.yml
index f994c2d74b86..aaec9121386b 100644
--- a/linux_os/guide/services/sssd/sssd-ldap/sssd_ldap_configure_tls_reqcert/rule.yml
+++ b/linux_os/guide/services/sssd/sssd-ldap/sssd_ldap_configure_tls_reqcert/rule.yml
@@ -19,6 +19,7 @@ identifiers:
     cce@rhel8: CCE-84062-9
     cce@rhel9: CCE-86081-7
     cce@rhel10: CCE-87985-8
+    cce@sle16: CCE-96327-2
 
 references:
     nist: SC-12(3),CM-6(a)
diff --git a/linux_os/guide/services/sssd/sssd-ldap/sssd_ldap_start_tls/ansible/shared.yml b/linux_os/guide/services/sssd/sssd-ldap/sssd_ldap_start_tls/ansible/shared.yml
index 0a1efcabc2aa..1230b6463461 100644
--- a/linux_os/guide/services/sssd/sssd-ldap/sssd_ldap_start_tls/ansible/shared.yml
+++ b/linux_os/guide/services/sssd/sssd-ldap/sssd_ldap_start_tls/ansible/shared.yml
@@ -1,4 +1,4 @@
-# platform = multi_platform_rhel,multi_platform_fedora,multi_platform_ol,multi_platform_almalinux
+# platform = multi_platform_rhel,multi_platform_fedora,multi_platform_ol,multi_platform_almalinux,multi_platform_sle
 # reboot = false
 # strategy = unknown
 # complexity = low
diff --git a/linux_os/guide/services/sssd/sssd-ldap/sssd_ldap_start_tls/bash/shared.sh b/linux_os/guide/services/sssd/sssd-ldap/sssd_ldap_start_tls/bash/shared.sh
index 66f05ab54493..4ca2e31d7bc0 100644
--- a/linux_os/guide/services/sssd/sssd-ldap/sssd_ldap_start_tls/bash/shared.sh
+++ b/linux_os/guide/services/sssd/sssd-ldap/sssd_ldap_start_tls/bash/shared.sh
@@ -1,4 +1,4 @@
-# platform = multi_platform_rhel,multi_platform_fedora,multi_platform_ol,multi_platform_almalinux
+# platform = multi_platform_rhel,multi_platform_fedora,multi_platform_ol,multi_platform_almalinux,multi_platform_sle
 
 {{{ bash_sssd_ldap_config(parameter="ldap_id_use_start_tls", value="true", rule_id=rule_id) }}}
 
diff --git a/linux_os/guide/services/sssd/sssd-ldap/sssd_ldap_start_tls/rule.yml b/linux_os/guide/services/sssd/sssd-ldap/sssd_ldap_start_tls/rule.yml
index 07df8396e911..5e939e548004 100644
--- a/linux_os/guide/services/sssd/sssd-ldap/sssd_ldap_start_tls/rule.yml
+++ b/linux_os/guide/services/sssd/sssd-ldap/sssd_ldap_start_tls/rule.yml
@@ -26,6 +26,7 @@ identifiers:
     cce@rhel8: CCE-82437-5
     cce@rhel9: CCE-86082-5
     cce@rhel10: CCE-87817-3
+    cce@sle16: CCE-96464-3
 
 references:
     cis-csc: 11,12,14,15,3,8,9
diff --git a/linux_os/guide/services/sssd/sssd_enable_pam_services/rule.yml b/linux_os/guide/services/sssd/sssd_enable_pam_services/rule.yml
index adc81468a3ab..2f481f735f4f 100644
--- a/linux_os/guide/services/sssd/sssd_enable_pam_services/rule.yml
+++ b/linux_os/guide/services/sssd/sssd_enable_pam_services/rule.yml
@@ -24,6 +24,7 @@ identifiers:
     cce@rhel8: CCE-82446-6
     cce@rhel9: CCE-86087-4
     cce@rhel10: CCE-90093-6
+    cce@sle16: CCE-96039-3
 
 references:
     cis-csc: 1,12,15,16,5
diff --git a/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue/ansible/shared.yml b/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue/ansible/shared.yml
index 7b15061e7aa4..c1f5e665bf57 100644
--- a/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue/ansible/shared.yml
+++ b/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue/ansible/shared.yml
@@ -1,15 +1,15 @@
-# platform = multi_platform_rhel,multi_platform_fedora,multi_platform_ol,multi_platform_sle,multi_platform_slmicro,multi_platform_almalinux
+# platform = multi_platform_all
 # reboot = false
 # strategy = unknown
 # complexity = low
 # disruption = medium
-{{{ ansible_instantiate_variables("login_banner_text") }}}
+{{{ ansible_instantiate_variables("login_banner_contents") }}}
 
 {{%- if product not in ['sle15', 'slmicro5', 'slmicro6'] -%}}
 - name: "{{{ rule_title }}} - Ensure Correct Banner"
   ansible.builtin.copy:
     dest: /etc/issue
-    content: '{{{ ansible_deregexify_banner_etc_issue("login_banner_text") }}}'
+    content: "{{ login_banner_contents | replace('\\n', '\n') }}\n"
 {{%- else -%}}
 - name: {{{ rule_title }}} Ensure issue-generator is Installed
   ansible.builtin.package:
@@ -19,7 +19,7 @@
 - name: "{{{ rule_title }}} - Ensure Correct Banner"
   ansible.builtin.copy:
     dest: /etc/issue.d/99-oscap-setting
-    content: '{{{ ansible_deregexify_banner_etc_issue("login_banner_text") }}}'
+    content: "{{ login_banner_contents | replace('\\n', '\n') }}\n"
 
 - name: "{{{ rule_title }}} - Restart issue-generator Service on Issue Configuration Change"
   ansible.builtin.systemd:
diff --git a/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue/bash/shared.sh b/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue/bash/shared.sh
index 177d34e2a3b7..6d0e75f418fa 100644
--- a/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue/bash/shared.sh
+++ b/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue/bash/shared.sh
@@ -1,31 +1,11 @@
-# platform = multi_platform_rhel,multi_platform_fedora,multi_platform_ol,multi_platform_rhv,multi_platform_sle,multi_platform_slmicro,multi_platform_ubuntu,multi_platform_almalinux
+# platform = multi_platform_all
 
-read -r -d '' login_banner_text <<'EOF' || true
-(bash-populate login_banner_text)
-EOF
-
-# Multiple regexes transform the banner regex into a usable banner
-# 0 - Remove anchors around the banner text
-{{{ bash_deregexify_banner_anchors("login_banner_text") }}}
-# 1 - Keep only the first banners if there are multiple
-#    (dod_banners contains the long and short banner)
-{{{ bash_deregexify_multiple_banners("login_banner_text") }}}
-# 2 - Add spaces ' '. (Transforms regex for "space or newline" into a " ")
-{{{ bash_deregexify_banner_space("login_banner_text") }}}
-# 3 - Adds newlines. (Transforms "(?:\[\\n\]+|(?:\\n)+)" into "\n")
-{{{ bash_deregexify_banner_newline("login_banner_text", "\\n") }}}
-# 4 - Remove any leftover backslash. (From any parenthesis in the banner, for example).
-{{{ bash_deregexify_banner_backslash("login_banner_text") }}}
-formatted=$(echo "$login_banner_text" | fold -sw 80)
+login_banner_contents=$(echo "(bash-populate login_banner_contents)" | sed 's/\\n/\n/g')
 
 {{%- if product not in ['sle15', 'slmicro5', 'slmicro6'] %}}
-cat <<EOF >/etc/issue
-$formatted
-EOF
+echo "$login_banner_contents" > /etc/issue
 {{%- else %}}
 {{{ bash_package_install("issue-generator") }}}
-cat <<EOF >/etc/issue.d/99-oscap-setting
-$formatted
-EOF
+echo "$login_banner_contents" > /etc/issue.d/99-oscap-setting
 {{{ bash_service_command("restart", "issue-generator") }}}
 {{%- endif -%}}
diff --git a/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue/tests/banner_etc_issue_cis_recommended.pass.sh b/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue/tests/banner_etc_issue_cis_recommended.pass.sh
index bc0f5a7a0872..ce541f31864c 100644
--- a/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue/tests/banner_etc_issue_cis_recommended.pass.sh
+++ b/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue/tests/banner_etc_issue_cis_recommended.pass.sh
@@ -2,4 +2,4 @@
 # profiles = xccdf_org.ssgproject.content_profile_cis, xccdf_org.ssgproject.content_profile_cis_server_l1, xccdf_org.ssgproject.content_profile_cis_workstation_l1, xccdf_org.ssgproject.content_profile_cis_workstation_l2
 
 # cis_default banner
-echo "Authorized uses only. All activity may be monitored and reported." > /etc/issue
+echo "Authorized users only. All activity may be monitored and reported." > /etc/issue
diff --git a/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue/tests/banner_etc_issue_disa_dod_short.fail.sh b/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue/tests/banner_etc_issue_disa_dod_short.fail.sh
index 2b775d15e0eb..0623faba0be8 100644
--- a/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue/tests/banner_etc_issue_disa_dod_short.fail.sh
+++ b/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue/tests/banner_etc_issue_disa_dod_short.fail.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-# variables = login_banner_text=^I've[\s\n]+read[\s\n]+\&amp;[\s\n]+consent[\s\n]+to[\s\n]+terms[\s\n]+in[\s\n]+IS[\s\n]+user[\s\n]+agreem't\.$
+# variables = login_banner_text=^I've[\s\n]+read[\s\n]+\&amp;[\s\n]+consent[\s\n]+to[\s\n]+terms[\s\n]+in[\s\n]+IS[\s\n]+user[\s\n]+agreem't\.$,login_banner_contents=I've read &amp; consent to terms in IS user agreem't.
 
 # dod_short banner
 echo "Hello, how are you" > /etc/issue
diff --git a/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue/tests/banner_etc_issue_disa_dod_short.pass.sh b/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue/tests/banner_etc_issue_disa_dod_short.pass.sh
index 3b8a52eed5d8..b3ea66d844d9 100644
--- a/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue/tests/banner_etc_issue_disa_dod_short.pass.sh
+++ b/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue/tests/banner_etc_issue_disa_dod_short.pass.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-# variables = login_banner_text=^I've[\s\n]+read[\s\n]+\&amp;[\s\n]+consent[\s\n]+to[\s\n]+terms[\s\n]+in[\s\n]+IS[\s\n]+user[\s\n]+agreem't\.$
+# variables = login_banner_text=^I've[\s\n]+read[\s\n]+\&amp;[\s\n]+consent[\s\n]+to[\s\n]+terms[\s\n]+in[\s\n]+IS[\s\n]+user[\s\n]+agreem't\.$,login_banner_contents=I've read &amp; consent to terms in IS user agreem't.
 
 # dod_short banner
 echo "I've read & consent to terms in IS user agreem't." > /etc/issue
diff --git a/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue/tests/custom_banner.fail.sh b/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue/tests/custom_banner.fail.sh
new file mode 100644
index 000000000000..59d30c04fdd1
--- /dev/null
+++ b/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue/tests/custom_banner.fail.sh
@@ -0,0 +1,8 @@
+#!/bin/bash
+{{% set ts_custom_banner = "This system is made available by ABCD Inc. exclusively for\nauthorized business use. Use may be monitored for technical or\nregulatory purposes. Do not use this system if you do not consent to\nsuch monitoring.\n\nCe système est mis à disposition par la Société ABCD exclusivement\npour un usage professionnel autorisé. L'utilisation peut faire l'objet\nd'une surveillance pour des raisons techniques ou réglementaires.\nN'utilisez pas ce système si vous n'acceptez pas cette surveillance." %}}
+{{% set ts_custom_banner_regex="^This[\s\n]+system[\s\n]+is[\s\n]+made[\s\n]+available[\s\n]+by[\s\n]+ABCD[\s\n]+Inc\.[\s\n]+exclusively[\s\n]+for(?:[\n]+|(?:\\n)+)authorized[\s\n]+business[\s\n]+use\.[\s\n]+Use[\s\n]+may[\s\n]+be[\s\n]+monitored[\s\n]+for[\s\n]+technical[\s\n]+or(?:[\n]+|(?:\\n)+)regulatory[\s\n]+purposes\.[\s\n]+Do[\s\n]+not[\s\n]+use[\s\n]+this[\s\n]+system[\s\n]+if[\s\n]+you[\s\n]+do[\s\n]+not[\s\n]+consent[\s\n]+to(?:[\n]+|(?:\\n)+)such[\s\n]+monitoring\.(?:[\n]+|(?:\\n)+)(?:[\n]+|(?:\\n)+)Ce[\s\n]+système[\s\n]+est[\s\n]+mis[\s\n]+à[\s\n]+disposition[\s\n]+par[\s\n]+la[\s\n]+Société[\s\n]+ABCD[\s\n]+exclusivement(?:[\n]+|(?:\\n)+)pour[\s\n]+un[\s\n]+usage[\s\n]+professionnel[\s\n]+autorisé\.[\s\n]+L'utilisation[\s\n]+peut[\s\n]+faire[\s\n]+l'objet(?:[\n]+|(?:\\n)+)d'une[\s\n]+surveillance[\s\n]+pour[\s\n]+des[\s\n]+raisons[\s\n]+techniques[\s\n]+ou[\s\n]+réglementaires\.(?:[\n]+|(?:\\n)+)N'utilisez[\s\n]+pas[\s\n]+ce[\s\n]+système[\s\n]+si[\s\n]+vous[\s\n]+n'acceptez[\s\n]+pas[\s\n]+cette[\s\n]+surveillance\.$" %}}
+# variables = login_banner_contents={{{ ts_custom_banner | replace("\n", "\\n") }}},login_banner_text={{{ ts_custom_banner_regex | replace("\n", "\\n") }}}
+
+cat > /etc/issue <<'EOF'
+This is a test banner.
+EOF
diff --git a/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue/tests/custom_banner.pass.sh b/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue/tests/custom_banner.pass.sh
new file mode 100644
index 000000000000..4b9bd219e47e
--- /dev/null
+++ b/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue/tests/custom_banner.pass.sh
@@ -0,0 +1,8 @@
+#!/bin/bash
+{{% set ts_custom_banner = "This system is made available by ABCD Inc. exclusively for\nauthorized business use. Use may be monitored for technical or\nregulatory purposes. Do not use this system if you do not consent to\nsuch monitoring.\n\nCe système est mis à disposition par la Société ABCD exclusivement\npour un usage professionnel autorisé. L'utilisation peut faire l'objet\nd'une surveillance pour des raisons techniques ou réglementaires.\nN'utilisez pas ce système si vous n'acceptez pas cette surveillance." %}}
+{{% set ts_custom_banner_regex="^This[\s\n]+system[\s\n]+is[\s\n]+made[\s\n]+available[\s\n]+by[\s\n]+ABCD[\s\n]+Inc\.[\s\n]+exclusively[\s\n]+for(?:[\n]+|(?:\\n)+)authorized[\s\n]+business[\s\n]+use\.[\s\n]+Use[\s\n]+may[\s\n]+be[\s\n]+monitored[\s\n]+for[\s\n]+technical[\s\n]+or(?:[\n]+|(?:\\n)+)regulatory[\s\n]+purposes\.[\s\n]+Do[\s\n]+not[\s\n]+use[\s\n]+this[\s\n]+system[\s\n]+if[\s\n]+you[\s\n]+do[\s\n]+not[\s\n]+consent[\s\n]+to(?:[\n]+|(?:\\n)+)such[\s\n]+monitoring\.(?:[\n]+|(?:\\n)+)(?:[\n]+|(?:\\n)+)Ce[\s\n]+système[\s\n]+est[\s\n]+mis[\s\n]+à[\s\n]+disposition[\s\n]+par[\s\n]+la[\s\n]+Société[\s\n]+ABCD[\s\n]+exclusivement(?:[\n]+|(?:\\n)+)pour[\s\n]+un[\s\n]+usage[\s\n]+professionnel[\s\n]+autorisé\.[\s\n]+L'utilisation[\s\n]+peut[\s\n]+faire[\s\n]+l'objet(?:[\n]+|(?:\\n)+)d'une[\s\n]+surveillance[\s\n]+pour[\s\n]+des[\s\n]+raisons[\s\n]+techniques[\s\n]+ou[\s\n]+réglementaires\.(?:[\n]+|(?:\\n)+)N'utilisez[\s\n]+pas[\s\n]+ce[\s\n]+système[\s\n]+si[\s\n]+vous[\s\n]+n'acceptez[\s\n]+pas[\s\n]+cette[\s\n]+surveillance\.$" %}}
+# variables = login_banner_contents={{{ ts_custom_banner | replace("\n", "\\n") }}},login_banner_text={{{ ts_custom_banner_regex | replace("\n", "\\n") }}}
+
+cat > /etc/issue <<'EOF'
+{{{ ts_custom_banner }}}
+EOF
diff --git a/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue_net/ansible/shared.yml b/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue_net/ansible/shared.yml
index 828a9a9a0c2d..4a880dccde17 100644
--- a/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue_net/ansible/shared.yml
+++ b/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue_net/ansible/shared.yml
@@ -3,9 +3,9 @@
 # strategy = unknown
 # complexity = low
 # disruption = medium
-{{{ ansible_instantiate_variables("remote_login_banner_text") }}}
+{{{ ansible_instantiate_variables("remote_login_banner_contents") }}}
 
 - name: "{{{ rule_title }}} - ensure correct banner"
   ansible.builtin.copy:
     dest: /etc/issue.net
-    content: '{{{ ansible_deregexify_banner_etc_issue("remote_login_banner_text") }}}'
+    content: "{{ remote_login_banner_contents | replace('\\n', '\n') }}\n"
diff --git a/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue_net/bash/shared.sh b/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue_net/bash/shared.sh
index 52eda0b4a9b6..bef6be11259b 100644
--- a/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue_net/bash/shared.sh
+++ b/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue_net/bash/shared.sh
@@ -1,21 +1,4 @@
 # platform = multi_platform_all
 
-{{{ bash_instantiate_variables("remote_login_banner_text") }}}
-
-# Multiple regexes transform the banner regex into a usable banner
-# 0 - Remove anchors around the banner text
-{{{ bash_deregexify_banner_anchors("remote_login_banner_text") }}}
-# 1 - Keep only the first banners if there are multiple
-#    (dod_banners contains the long and short banner)
-{{{ bash_deregexify_multiple_banners("remote_login_banner_text") }}}
-# 2 - Add spaces ' '. (Transforms regex for "space or newline" into a " ")
-{{{ bash_deregexify_banner_space("remote_login_banner_text") }}}
-# 3 - Adds newlines. (Transforms "(?:\[\\n\]+|(?:\\n)+)" into "\n")
-{{{ bash_deregexify_banner_newline("remote_login_banner_text", "\\n") }}}
-# 4 - Remove any leftover backslash. (From any parenthesis in the banner, for example).
-{{{ bash_deregexify_banner_backslash("remote_login_banner_text") }}}
-formatted=$(echo "$remote_login_banner_text" | fold -sw 80)
-
-cat <<EOF >/etc/issue.net
-$formatted
-EOF
+remote_login_banner_contents=$(echo "(bash-populate remote_login_banner_contents)" | sed 's/\\n/\n/g')
+echo "$remote_login_banner_contents" > /etc/issue.net
diff --git a/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue_net/tests/banner_etc_issue_net_cis_recommended.pass.sh b/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue_net/tests/banner_etc_issue_net_cis_recommended.pass.sh
index a4d328e76565..5d58cbc2588e 100644
--- a/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue_net/tests/banner_etc_issue_net_cis_recommended.pass.sh
+++ b/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue_net/tests/banner_etc_issue_net_cis_recommended.pass.sh
@@ -2,4 +2,4 @@
 # profiles = xccdf_org.ssgproject.content_profile_cis
 
 # cis_default banner
-echo "Authorized uses only. All activity may be monitored and reported." > /etc/issue.net
+echo "Authorized users only. All activity may be monitored and reported." > /etc/issue.net
diff --git a/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue_net/tests/banner_etc_issue_net_mingetty.fail.sh b/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue_net/tests/banner_etc_issue_net_mingetty.fail.sh
new file mode 100644
index 000000000000..4730f4332b42
--- /dev/null
+++ b/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue_net/tests/banner_etc_issue_net_mingetty.fail.sh
@@ -0,0 +1,4 @@
+#!/bin/bash
+# variables = remote_login_banner_text=^Authorized[\s\n]+users[\s\n]+only\.[\s\n]+All[\s\n]+activity[\s\n]+may[\s\n]+be[\s\n]+monitored[\s\n]+and[\s\n]+reported\.$,remote_login_banner_contents=Authorized users only. All activity may be monitored and reported.
+
+echo "System name \s version \s " > /etc/issue.net
diff --git a/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue_net/tests/banner_etc_issue_net_osid.fail.sh b/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue_net/tests/banner_etc_issue_net_osid.fail.sh
new file mode 100644
index 000000000000..c579e36e5942
--- /dev/null
+++ b/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue_net/tests/banner_etc_issue_net_osid.fail.sh
@@ -0,0 +1,4 @@
+#!/bin/bash
+# variables = remote_login_banner_text=^Authorized[\s\n]+users[\s\n]+only\.[\s\n]+All[\s\n]+activity[\s\n]+may[\s\n]+be[\s\n]+monitored[\s\n]+and[\s\n]+reported\.$,remote_login_banner_contents=Authorized users only. All activity may be monitored and reported.
+
+echo "This system is rhel." > /etc/issue.net
diff --git a/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue_net/tests/banner_etc_issue_net_recommended.pass.sh b/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue_net/tests/banner_etc_issue_net_recommended.pass.sh
new file mode 100644
index 000000000000..a78e272e8d67
--- /dev/null
+++ b/linux_os/guide/system/accounts/accounts-banners/banner_etc_issue_net/tests/banner_etc_issue_net_recommended.pass.sh
@@ -0,0 +1,5 @@
+#!/bin/bash
+# variables = remote_login_banner_text=^Authorized[\s\n]+users[\s\n]+only\.[\s\n]+All[\s\n]+activity[\s\n]+may[\s\n]+be[\s\n]+monitored[\s\n]+and[\s\n]+reported\.$,remote_login_banner_contents=Authorized users only. All activity may be monitored and reported.
+
+# cis_default banner
+echo "Authorized users only. All activity may be monitored and reported." > /etc/issue.net
diff --git a/linux_os/guide/system/accounts/accounts-banners/banner_etc_motd/ansible/shared.yml b/linux_os/guide/system/accounts/accounts-banners/banner_etc_motd/ansible/shared.yml
index 252618dedd57..8a3cc3128262 100644
--- a/linux_os/guide/system/accounts/accounts-banners/banner_etc_motd/ansible/shared.yml
+++ b/linux_os/guide/system/accounts/accounts-banners/banner_etc_motd/ansible/shared.yml
@@ -3,9 +3,9 @@
 # strategy = unknown
 # complexity = low
 # disruption = medium
-{{{ ansible_instantiate_variables("motd_banner_text") }}}
+{{{ ansible_instantiate_variables("motd_banner_contents") }}}
 
 - name: "{{{ rule_title }}} - ensure correct banner"
   ansible.builtin.copy:
     dest: /etc/motd
-    content: '{{{ ansible_deregexify_banner_etc_issue("motd_banner_text") }}}'
+    content: "{{ motd_banner_contents | replace('\\n', '\n') }}\n"
diff --git a/linux_os/guide/system/accounts/accounts-banners/banner_etc_motd/bash/shared.sh b/linux_os/guide/system/accounts/accounts-banners/banner_etc_motd/bash/shared.sh
index f8f5e59a2420..1f8d36fe3ce6 100644
--- a/linux_os/guide/system/accounts/accounts-banners/banner_etc_motd/bash/shared.sh
+++ b/linux_os/guide/system/accounts/accounts-banners/banner_etc_motd/bash/shared.sh
@@ -1,21 +1,4 @@
-# platform = multi_platform_fedora,multi_platform_ol,multi_platform_rhel,multi_platform_rhv,multi_platform_sle,multi_platform_slmicro,multi_platform_ubuntu,multi_platform_almalinux
+# platform = multi_platform_all
 
-{{{ bash_instantiate_variables("motd_banner_text") }}}
-
-# Multiple regexes transform the banner regex into a usable banner
-# 0 - Remove anchors around the banner text
-{{{ bash_deregexify_banner_anchors("motd_banner_text") }}}
-# 1 - Keep only the first banners if there are multiple
-#    (dod_banners contains the long and short banner)
-{{{ bash_deregexify_multiple_banners("motd_banner_text") }}}
-# 2 - Add spaces ' '. (Transforms regex for "space or newline" into a " ")
-{{{ bash_deregexify_banner_space("motd_banner_text") }}}
-# 3 - Adds newlines. (Transforms "(?:\[\\n\]+|(?:\\n)+)" into "\n")
-{{{ bash_deregexify_banner_newline("motd_banner_text", "\\n") }}}
-# 4 - Remove any leftover backslash. (From any parenthesis in the banner, for example).
-{{{ bash_deregexify_banner_backslash("motd_banner_text") }}}
-formatted=$(echo "$motd_banner_text" | fold -sw 80)
-
-cat <<EOF >/etc/motd
-$formatted
-EOF
+motd_banner_contents=$(echo "(bash-populate motd_banner_contents)" | sed 's/\\n/\n/g')
+echo "$motd_banner_contents" > /etc/motd
diff --git a/linux_os/guide/system/accounts/accounts-banners/banner_etc_motd/oval/shared.xml b/linux_os/guide/system/accounts/accounts-banners/banner_etc_motd/oval/shared.xml
index be13d1d65419..dbfadc63d9ec 100644
--- a/linux_os/guide/system/accounts/accounts-banners/banner_etc_motd/oval/shared.xml
+++ b/linux_os/guide/system/accounts/accounts-banners/banner_etc_motd/oval/shared.xml
@@ -15,7 +15,7 @@
       <unix:filepath>/etc/motd</unix:filepath>
   </unix:file_object>
 
-  <ind:textfilecontent54_test check="all" check_existence="all_exist" comment="correct banner in /etc/motd" id="test_banner_etc_motd" version="1">
+  <ind:textfilecontent54_test check="at least one" check_existence="at_least_one_exists" comment="correct banner in /etc/motd" id="test_banner_etc_motd" version="1">
     <ind:object object_ref="object_banner_etc_motd" />
     <ind:state state_ref="state_banner_etc_motd" />
   </ind:textfilecontent54_test>
diff --git a/linux_os/guide/system/accounts/accounts-banners/banner_etc_motd/tests/banner_etc_motd_cis_recommended.pass.sh b/linux_os/guide/system/accounts/accounts-banners/banner_etc_motd/tests/banner_etc_motd_cis_recommended.pass.sh
index 1cacc28d7328..049470d872e4 100644
--- a/linux_os/guide/system/accounts/accounts-banners/banner_etc_motd/tests/banner_etc_motd_cis_recommended.pass.sh
+++ b/linux_os/guide/system/accounts/accounts-banners/banner_etc_motd/tests/banner_etc_motd_cis_recommended.pass.sh
@@ -2,4 +2,4 @@
 # profiles = xccdf_org.ssgproject.content_profile_cis, xccdf_org.ssgproject.content_profile_cis_server_l1, xccdf_org.ssgproject.content_profile_cis_workstation_l1, xccdf_org.ssgproject.content_profile_cis_workstation_l2
 
 # cis_default banner
-echo "Authorized uses only. All activity may be monitored and reported." > /etc/motd
+echo "Authorized users only. All activity may be monitored and reported." > /etc/motd
diff --git a/linux_os/guide/system/accounts/accounts-banners/banner_etc_motd/tests/banner_etc_motd_default.pass.sh b/linux_os/guide/system/accounts/accounts-banners/banner_etc_motd/tests/banner_etc_motd_default.pass.sh
index 8aeedeb1b322..4b7e6447efc9 100644
--- a/linux_os/guide/system/accounts/accounts-banners/banner_etc_motd/tests/banner_etc_motd_default.pass.sh
+++ b/linux_os/guide/system/accounts/accounts-banners/banner_etc_motd/tests/banner_etc_motd_default.pass.sh
@@ -1,4 +1,4 @@
 #!/bin/bash
 
-# default banner from motd_banner_text.var
-echo "Authorized uses only. All activity may be monitored and reported." > /etc/motd
+# default banner from motd_banner_contents.var
+echo "Authorized users only. All activity may be monitored and reported." > /etc/motd
diff --git a/linux_os/guide/system/accounts/accounts-banners/dconf_login_banner_contents.var b/linux_os/guide/system/accounts/accounts-banners/dconf_login_banner_contents.var
new file mode 100644
index 000000000000..bd366b4da215
--- /dev/null
+++ b/linux_os/guide/system/accounts/accounts-banners/dconf_login_banner_contents.var
@@ -0,0 +1,25 @@
+documentation_complete: true
+
+title: 'Login Banner Verbiage'
+
+description: >-
+    Enter an appropriate login banner text for your organization.
+    This variable is used only in remediations.
+    In OVAL checks a regular expression specified in the login_banner_text variable is used instead.
+    Using a regular expression is needed because some profiles (eg. STIG) allow multiple different banners.
+
+type: string
+
+operator: equals
+
+interactive: true
+
+options:
+    default: 'Authorized users only. All activity may be monitored and reported.'
+# CIS doesn't enforce any specific content for login banners, but doesn't allow technical information.
+# There is a generic content in case a remediation is necessary.
+    cis_default: 'Authorized uses only. All activity may be monitored and reported.'
+    dod_default: 'You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only. By using this IS (which includes any device attached to this IS), you consent to the following conditions:\n-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.\n-At any time, the USG may inspect and seize data stored on this IS.\n-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.\n-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.'
+    dod_short: 'I''ve read & consent to terms in IS user agreem''t.'
+    dss_odaa_default: 'Use of this or any other DoD interest computer system constitutes consent to monitoring at all times. This is a DoD interest computer system. All DoD interest computer systems and related equipment are intended for the communication, transmission, processing, and storage of official U.S. Government or other authorized information only. All DoD interest computer systems are subject to monitoring at all times to ensure proper functioning of equipment and systems including security devices and systems, to prevent unauthorized use and violations of statutes and security regulations, to deter criminal activity, and for other similar purposes. Any user of a DoD interest computer system should be aware that any information placed in the system is subject to monitoring and is not subject to any expectation of privacy. If monitoring of this or any other DoD interest computer system reveals possible evidence of violation of criminal statutes, this evidence and any other related information, including identification information about the user, may be provided to law enforcement officials. If monitoring of this or any other DoD interest computer systems reveals violations of security regulations or unauthorized use, employees who violate security regulations or make unauthorized use of DoD interest computer systems are subject to appropriate disciplinary action. Use of this or any other DoD interest computer system constitutes consent to monitoring at all times.'
+    usgcb_default: '-- WARNING -- This system is for the use of authorized users only. Individuals using this computer system without authority or in excess of their authority are subject to having all their activities on this system monitored and recorded by system personnel. Anyone using this system expressly consents to such monitoring and is advised that if such monitoring reveals possible evidence of criminal activity system personal may provide the evidence of such monitoring to law enforcement officials.'
diff --git a/linux_os/guide/system/accounts/accounts-banners/dconf_login_banner_text.var b/linux_os/guide/system/accounts/accounts-banners/dconf_login_banner_text.var
new file mode 100644
index 000000000000..0f838c065d56
--- /dev/null
+++ b/linux_os/guide/system/accounts/accounts-banners/dconf_login_banner_text.var
@@ -0,0 +1,33 @@
+documentation_complete: true
+
+title: Dconf GDM Login Banner Verbiage Regular Expression
+
+description: >-
+    Enter an appropriate login banner regular expression for your organization.
+    Using a regular expression is needed because some profiles (eg. STIG) allow multiple different banners.
+    This regular expression is used only in OVAL checks.
+    In remediations the login_banner_contents variable is used instead.
+    For information about how to generate banner regular expression for your tailoring files,
+    see: https://complianceascode.readthedocs.io/en/latest/manual/developer/05_tools_and_utilities.html#generating-login-banner-regular-expressions
+
+type: string
+
+operator: equals
+
+interactive: true
+
+options:
+# CIS doesn't enforce any specific content for login banners, but doesn't allow technical information.
+# There is a generic content in case a remediation is necessary.
+# How to generate banner regex: https://complianceascode.readthedocs.io/en/latest/manual/developer/05_tools_and_utilities.html#generating-login-banner-regular-expressions
+# CIS recommends to use "Authorized uses only" for Dconf GDM requirements which is
+# different text that in other login banners where CIS recommends "Authorized users only".
+    cis_banners: ^(Authorized[\s\n]+uses[\s\n]+only\.[\s\n]+All[\s\n]+activity[\s\n]+may[\s\n]+be[\s\n]+monitored[\s\n]+and[\s\n]+reported\.|^(?!.*(\\|fedora|rhel|sle|ubuntu)).*)$
+    cis_default: ^Authorized[\s\n]+uses[\s\n]+only\.[\s\n]+All[\s\n]+activity[\s\n]+may[\s\n]+be[\s\n]+monitored[\s\n]+and[\s\n]+reported\.$
+# First banner in 'dod_banners' must be the banner for desktop, laptop, and other devices which accommodate banners of 1300 characters
+    dod_banners: ^(You[\s\n]+are[\s\n]+accessing[\s\n]+a[\s\n]+U\.S\.[\s\n]+Government[\s\n]+\(USG\)[\s\n]+Information[\s\n]+System[\s\n]+\(IS\)[\s\n]+that[\s\n]+is[\s\n]+provided[\s\n]+for[\s\n]+USG\-authorized[\s\n]+use[\s\n]+only\.[\s\n]+By[\s\n]+using[\s\n]+this[\s\n]+IS[\s\n]+\(which[\s\n]+includes[\s\n]+any[\s\n]+device[\s\n]+attached[\s\n]+to[\s\n]+this[\s\n]+IS\),[\s\n]+you[\s\n]+consent[\s\n]+to[\s\n]+the[\s\n]+following[\s\n]+conditions\:(?:[\n]+|(?:\\n)+)\-The[\s\n]+USG[\s\n]+routinely[\s\n]+intercepts[\s\n]+and[\s\n]+monitors[\s\n]+communications[\s\n]+on[\s\n]+this[\s\n]+IS[\s\n]+for[\s\n]+purposes[\s\n]+including,[\s\n]+but[\s\n]+not[\s\n]+limited[\s\n]+to,[\s\n]+penetration[\s\n]+testing,[\s\n]+COMSEC[\s\n]+monitoring,[\s\n]+network[\s\n]+operations[\s\n]+and[\s\n]+defense,[\s\n]+personnel[\s\n]+misconduct[\s\n]+\(PM\),[\s\n]+law[\s\n]+enforcement[\s\n]+\(LE\),[\s\n]+and[\s\n]+counterintelligence[\s\n]+\(CI\)[\s\n]+investigations\.(?:[\n]+|(?:\\n)+)\-At[\s\n]+any[\s\n]+time,[\s\n]+the[\s\n]+USG[\s\n]+may[\s\n]+inspect[\s\n]+and[\s\n]+seize[\s\n]+data[\s\n]+stored[\s\n]+on[\s\n]+this[\s\n]+IS\.(?:[\n]+|(?:\\n)+)\-Communications[\s\n]+using,[\s\n]+or[\s\n]+data[\s\n]+stored[\s\n]+on,[\s\n]+this[\s\n]+IS[\s\n]+are[\s\n]+not[\s\n]+private,[\s\n]+are[\s\n]+subject[\s\n]+to[\s\n]+routine[\s\n]+monitoring,[\s\n]+interception,[\s\n]+and[\s\n]+search,[\s\n]+and[\s\n]+may[\s\n]+be[\s\n]+disclosed[\s\n]+or[\s\n]+used[\s\n]+for[\s\n]+any[\s\n]+USG\-authorized[\s\n]+purpose\.(?:[\n]+|(?:\\n)+)\-This[\s\n]+IS[\s\n]+includes[\s\n]+security[\s\n]+measures[\s\n]+\(e\.g\.,[\s\n]+authentication[\s\n]+and[\s\n]+access[\s\n]+controls\)[\s\n]+to[\s\n]+protect[\s\n]+USG[\s\n]+interests\-\-not[\s\n]+for[\s\n]+your[\s\n]+personal[\s\n]+benefit[\s\n]+or[\s\n]+privacy\.(?:[\n]+|(?:\\n)+)\-Notwithstanding[\s\n]+the[\s\n]+above,[\s\n]+using[\s\n]+this[\s\n]+IS[\s\n]+does[\s\n]+not[\s\n]+constitute[\s\n]+consent[\s\n]+to[\s\n]+PM,[\s\n]+LE[\s\n]+or[\s\n]+CI[\s\n]+investigative[\s\n]+searching[\s\n]+or[\s\n]+monitoring[\s\n]+of[\s\n]+the[\s\n]+content[\s\n]+of[\s\n]+privileged[\s\n]+communications,[\s\n]+or[\s\n]+work[\s\n]+product,[\s\n]+related[\s\n]+to[\s\n]+personal[\s\n]+representation[\s\n]+or[\s\n]+services[\s\n]+by[\s\n]+attorneys,[\s\n]+psychotherapists,[\s\n]+or[\s\n]+clergy,[\s\n]+and[\s\n]+their[\s\n]+assistants\.[\s\n]+Such[\s\n]+communications[\s\n]+and[\s\n]+work[\s\n]+product[\s\n]+are[\s\n]+private[\s\n]+and[\s\n]+confidential\.[\s\n]+See[\s\n]+User[\s\n]+Agreement[\s\n]+for[\s\n]+details\.|I've[\s\n]+read[\s\n]+\&[\s\n]+consent[\s\n]+to[\s\n]+terms[\s\n]+in[\s\n]+IS[\s\n]+user[\s\n]+agreem't\.)$
+    dod_default: ^You[\s\n]+are[\s\n]+accessing[\s\n]+a[\s\n]+U\.S\.[\s\n]+Government[\s\n]+\(USG\)[\s\n]+Information[\s\n]+System[\s\n]+\(IS\)[\s\n]+that[\s\n]+is[\s\n]+provided[\s\n]+for[\s\n]+USG\-authorized[\s\n]+use[\s\n]+only\.[\s\n]+By[\s\n]+using[\s\n]+this[\s\n]+IS[\s\n]+\(which[\s\n]+includes[\s\n]+any[\s\n]+device[\s\n]+attached[\s\n]+to[\s\n]+this[\s\n]+IS\),[\s\n]+you[\s\n]+consent[\s\n]+to[\s\n]+the[\s\n]+following[\s\n]+conditions\:(?:[\n]+|(?:\\n)+)\-The[\s\n]+USG[\s\n]+routinely[\s\n]+intercepts[\s\n]+and[\s\n]+monitors[\s\n]+communications[\s\n]+on[\s\n]+this[\s\n]+IS[\s\n]+for[\s\n]+purposes[\s\n]+including,[\s\n]+but[\s\n]+not[\s\n]+limited[\s\n]+to,[\s\n]+penetration[\s\n]+testing,[\s\n]+COMSEC[\s\n]+monitoring,[\s\n]+network[\s\n]+operations[\s\n]+and[\s\n]+defense,[\s\n]+personnel[\s\n]+misconduct[\s\n]+\(PM\),[\s\n]+law[\s\n]+enforcement[\s\n]+\(LE\),[\s\n]+and[\s\n]+counterintelligence[\s\n]+\(CI\)[\s\n]+investigations\.(?:[\n]+|(?:\\n)+)\-At[\s\n]+any[\s\n]+time,[\s\n]+the[\s\n]+USG[\s\n]+may[\s\n]+inspect[\s\n]+and[\s\n]+seize[\s\n]+data[\s\n]+stored[\s\n]+on[\s\n]+this[\s\n]+IS\.(?:[\n]+|(?:\\n)+)\-Communications[\s\n]+using,[\s\n]+or[\s\n]+data[\s\n]+stored[\s\n]+on,[\s\n]+this[\s\n]+IS[\s\n]+are[\s\n]+not[\s\n]+private,[\s\n]+are[\s\n]+subject[\s\n]+to[\s\n]+routine[\s\n]+monitoring,[\s\n]+interception,[\s\n]+and[\s\n]+search,[\s\n]+and[\s\n]+may[\s\n]+be[\s\n]+disclosed[\s\n]+or[\s\n]+used[\s\n]+for[\s\n]+any[\s\n]+USG\-authorized[\s\n]+purpose\.(?:[\n]+|(?:\\n)+)\-This[\s\n]+IS[\s\n]+includes[\s\n]+security[\s\n]+measures[\s\n]+\(e\.g\.,[\s\n]+authentication[\s\n]+and[\s\n]+access[\s\n]+controls\)[\s\n]+to[\s\n]+protect[\s\n]+USG[\s\n]+interests\-\-not[\s\n]+for[\s\n]+your[\s\n]+personal[\s\n]+benefit[\s\n]+or[\s\n]+privacy\.(?:[\n]+|(?:\\n)+)\-Notwithstanding[\s\n]+the[\s\n]+above,[\s\n]+using[\s\n]+this[\s\n]+IS[\s\n]+does[\s\n]+not[\s\n]+constitute[\s\n]+consent[\s\n]+to[\s\n]+PM,[\s\n]+LE[\s\n]+or[\s\n]+CI[\s\n]+investigative[\s\n]+searching[\s\n]+or[\s\n]+monitoring[\s\n]+of[\s\n]+the[\s\n]+content[\s\n]+of[\s\n]+privileged[\s\n]+communications,[\s\n]+or[\s\n]+work[\s\n]+product,[\s\n]+related[\s\n]+to[\s\n]+personal[\s\n]+representation[\s\n]+or[\s\n]+services[\s\n]+by[\s\n]+attorneys,[\s\n]+psychotherapists,[\s\n]+or[\s\n]+clergy,[\s\n]+and[\s\n]+their[\s\n]+assistants\.[\s\n]+Such[\s\n]+communications[\s\n]+and[\s\n]+work[\s\n]+product[\s\n]+are[\s\n]+private[\s\n]+and[\s\n]+confidential\.[\s\n]+See[\s\n]+User[\s\n]+Agreement[\s\n]+for[\s\n]+details\.$
+    dod_short: ^I've[\s\n]+read[\s\n]+\&[\s\n]+consent[\s\n]+to[\s\n]+terms[\s\n]+in[\s\n]+IS[\s\n]+user[\s\n]+agreem't\.$
+    dss_odaa_default: ^Use[\s\n]+of[\s\n]+this[\s\n]+or[\s\n]+any[\s\n]+other[\s\n]+DoD[\s\n]+interest[\s\n]+computer[\s\n]+system[\s\n]+constitutes[\s\n]+consent[\s\n]+to[\s\n]+monitoring[\s\n]+at[\s\n]+all[\s\n]+times\.[\s\n]+This[\s\n]+is[\s\n]+a[\s\n]+DoD[\s\n]+interest[\s\n]+computer[\s\n]+system\.[\s\n]+All[\s\n]+DoD[\s\n]+interest[\s\n]+computer[\s\n]+systems[\s\n]+and[\s\n]+related[\s\n]+equipment[\s\n]+are[\s\n]+intended[\s\n]+for[\s\n]+the[\s\n]+communication,[\s\n]+transmission,[\s\n]+processing,[\s\n]+and[\s\n]+storage[\s\n]+of[\s\n]+official[\s\n]+U\.S\.[\s\n]+Government[\s\n]+or[\s\n]+other[\s\n]+authorized[\s\n]+information[\s\n]+only\.[\s\n]+All[\s\n]+DoD[\s\n]+interest[\s\n]+computer[\s\n]+systems[\s\n]+are[\s\n]+subject[\s\n]+to[\s\n]+monitoring[\s\n]+at[\s\n]+all[\s\n]+times[\s\n]+to[\s\n]+ensure[\s\n]+proper[\s\n]+functioning[\s\n]+of[\s\n]+equipment[\s\n]+and[\s\n]+systems[\s\n]+including[\s\n]+security[\s\n]+devices[\s\n]+and[\s\n]+systems,[\s\n]+to[\s\n]+prevent[\s\n]+unauthorized[\s\n]+use[\s\n]+and[\s\n]+violations[\s\n]+of[\s\n]+statutes[\s\n]+and[\s\n]+security[\s\n]+regulations,[\s\n]+to[\s\n]+deter[\s\n]+criminal[\s\n]+activity,[\s\n]+and[\s\n]+for[\s\n]+other[\s\n]+similar[\s\n]+purposes\.[\s\n]+Any[\s\n]+user[\s\n]+of[\s\n]+a[\s\n]+DoD[\s\n]+interest[\s\n]+computer[\s\n]+system[\s\n]+should[\s\n]+be[\s\n]+aware[\s\n]+that[\s\n]+any[\s\n]+information[\s\n]+placed[\s\n]+in[\s\n]+the[\s\n]+system[\s\n]+is[\s\n]+subject[\s\n]+to[\s\n]+monitoring[\s\n]+and[\s\n]+is[\s\n]+not[\s\n]+subject[\s\n]+to[\s\n]+any[\s\n]+expectation[\s\n]+of[\s\n]+privacy\.[\s\n]+If[\s\n]+monitoring[\s\n]+of[\s\n]+this[\s\n]+or[\s\n]+any[\s\n]+other[\s\n]+DoD[\s\n]+interest[\s\n]+computer[\s\n]+system[\s\n]+reveals[\s\n]+possible[\s\n]+evidence[\s\n]+of[\s\n]+violation[\s\n]+of[\s\n]+criminal[\s\n]+statutes,[\s\n]+this[\s\n]+evidence[\s\n]+and[\s\n]+any[\s\n]+other[\s\n]+related[\s\n]+information,[\s\n]+including[\s\n]+identification[\s\n]+information[\s\n]+about[\s\n]+the[\s\n]+user,[\s\n]+may[\s\n]+be[\s\n]+provided[\s\n]+to[\s\n]+law[\s\n]+enforcement[\s\n]+officials\.[\s\n]+If[\s\n]+monitoring[\s\n]+of[\s\n]+this[\s\n]+or[\s\n]+any[\s\n]+other[\s\n]+DoD[\s\n]+interest[\s\n]+computer[\s\n]+systems[\s\n]+reveals[\s\n]+violations[\s\n]+of[\s\n]+security[\s\n]+regulations[\s\n]+or[\s\n]+unauthorized[\s\n]+use,[\s\n]+employees[\s\n]+who[\s\n]+violate[\s\n]+security[\s\n]+regulations[\s\n]+or[\s\n]+make[\s\n]+unauthorized[\s\n]+use[\s\n]+of[\s\n]+DoD[\s\n]+interest[\s\n]+computer[\s\n]+systems[\s\n]+are[\s\n]+subject[\s\n]+to[\s\n]+appropriate[\s\n]+disciplinary[\s\n]+action\.[\s\n]+Use[\s\n]+of[\s\n]+this[\s\n]+or[\s\n]+any[\s\n]+other[\s\n]+DoD[\s\n]+interest[\s\n]+computer[\s\n]+system[\s\n]+constitutes[\s\n]+consent[\s\n]+to[\s\n]+monitoring[\s\n]+at[\s\n]+all[\s\n]+times\.$
+    usgcb_default: ^\-\-[\s\n]+WARNING[\s\n]+\-\-[\s\n]+This[\s\n]+system[\s\n]+is[\s\n]+for[\s\n]+the[\s\n]+use[\s\n]+of[\s\n]+authorized[\s\n]+users[\s\n]+only\.[\s\n]+Individuals[\s\n]+using[\s\n]+this[\s\n]+computer[\s\n]+system[\s\n]+without[\s\n]+authority[\s\n]+or[\s\n]+in[\s\n]+excess[\s\n]+of[\s\n]+their[\s\n]+authority[\s\n]+are[\s\n]+subject[\s\n]+to[\s\n]+having[\s\n]+all[\s\n]+their[\s\n]+activities[\s\n]+on[\s\n]+this[\s\n]+system[\s\n]+monitored[\s\n]+and[\s\n]+recorded[\s\n]+by[\s\n]+system[\s\n]+personnel\.[\s\n]+Anyone[\s\n]+using[\s\n]+this[\s\n]+system[\s\n]+expressly[\s\n]+consents[\s\n]+to[\s\n]+such[\s\n]+monitoring[\s\n]+and[\s\n]+is[\s\n]+advised[\s\n]+that[\s\n]+if[\s\n]+such[\s\n]+monitoring[\s\n]+reveals[\s\n]+possible[\s\n]+evidence[\s\n]+of[\s\n]+criminal[\s\n]+activity[\s\n]+system[\s\n]+personal[\s\n]+may[\s\n]+provide[\s\n]+the[\s\n]+evidence[\s\n]+of[\s\n]+such[\s\n]+monitoring[\s\n]+to[\s\n]+law[\s\n]+enforcement[\s\n]+officials\.$
+    default: ^Authorized[\s\n]+users[\s\n]+only\.[\s\n]+All[\s\n]+activity[\s\n]+may[\s\n]+be[\s\n]+monitored[\s\n]+and[\s\n]+reported\.$
diff --git a/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/ansible/shared.yml b/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/ansible/shared.yml
index 33d95980ded9..38bd849f78c4 100644
--- a/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/ansible/shared.yml
+++ b/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/ansible/shared.yml
@@ -3,7 +3,7 @@
 # strategy = unknown
 # complexity = low
 # disruption = medium
-{{{ ansible_instantiate_variables("login_banner_text") }}}
+{{{ ansible_instantiate_variables("dconf_login_banner_contents") }}}
 
 - name: "{{{ rule_title }}}"
   ansible.builtin.file:
@@ -32,7 +32,7 @@
     dest: /etc/dconf/db/{{{ dconf_gdm_dir }}}/00-security-settings
     section: org/gnome/login-screen
     option: banner-message-text
-    value: '{{{ ansible_deregexify_banner_dconf_gnome("login_banner_text") }}}'
+    value: '''{{ dconf_login_banner_contents }}'''
     create: yes
     no_extra_spaces: yes
   register: result_ini
diff --git a/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/bash/shared.sh b/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/bash/shared.sh
index 930d5fe18189..c686cbe1dbf3 100644
--- a/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/bash/shared.sh
+++ b/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/bash/shared.sh
@@ -1,22 +1,5 @@
 # platform = multi_platform_all
 
-login_banner_text='(bash-populate login_banner_text)'
-
-# Multiple regexes transform the banner regex into a usable banner
-# 0 - Remove anchors around the banner text
-{{{ bash_deregexify_banner_anchors("login_banner_text") }}}
-# 1 - Keep only the first banners if there are multiple
-#    (dod_banners contains the long and short banner)
-{{{ bash_deregexify_multiple_banners("login_banner_text") }}}
-# 2 - Add spaces ' '. (Transforms regex for "space or newline" into a " ")
-{{{ bash_deregexify_banner_space("login_banner_text") }}}
-# 3 - Adds newline "tokens". (Transforms "(?:\[\\n\]+|(?:\\n)+)" into "(n)*")
-{{{ bash_deregexify_banner_newline("login_banner_text", "(n)*") }}}
-# 4 - Remove any leftover backslash. (From any parenthesis in the banner, for example).
-{{{ bash_deregexify_banner_backslash("login_banner_text") }}}
-# 5 - Removes the newline "token." (Transforms them into newline escape sequences "\n").
-#    ( Needs to be done after 4, otherwise the escapce sequence will become just "n".
-{{{ bash_deregexify_banner_newline_token("login_banner_text")}}}
-
-{{{ bash_dconf_settings("org/gnome/login-screen", "banner-message-text", "'${login_banner_text}'", dconf_gdm_dir, "00-security-settings", rule_id=rule_id) }}}
+dconf_login_banner_contents=$(echo "(bash-populate dconf_login_banner_contents)" )
+{{{ bash_dconf_settings("org/gnome/login-screen", "banner-message-text", "'${dconf_login_banner_contents}'", dconf_gdm_dir, "00-security-settings", rule_id=rule_id) }}}
 {{{ bash_dconf_lock("org/gnome/login-screen", "banner-message-text", dconf_gdm_dir, "00-security-settings-lock") }}}
diff --git a/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/bash/ubuntu.sh b/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/bash/ubuntu.sh
index 57e577df79b9..4d38311e4e43 100644
--- a/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/bash/ubuntu.sh
+++ b/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/bash/ubuntu.sh
@@ -1,28 +1,11 @@
 # platform = multi_platform_ubuntu
 
-{{{ bash_instantiate_variables("login_banner_text") }}}
-
-# Multiple regexes transform the banner regex into a usable banner
-# 0 - Remove anchors around the banner text
-{{{ bash_deregexify_banner_anchors("login_banner_text") }}}
-# 1 - Keep only the first banners if there are multiple
-#    (dod_banners contains the long and short banner)
-{{{ bash_deregexify_multiple_banners("login_banner_text") }}}
-# 2 - Add spaces ' '. (Transforms regex for "space or newline" into a " ")
-{{{ bash_deregexify_banner_space("login_banner_text") }}}
-# 3 - Adds newline "tokens". (Transforms "(?:\[\\n\]+|(?:\\n)+)" into "(n)*")
-{{{ bash_deregexify_banner_newline("login_banner_text", "(n)*") }}}
-# 4 - Remove any leftover backslash. (From any parenthesis in the banner, for example).
-{{{ bash_deregexify_banner_backslash("login_banner_text") }}}
-# 5 - Removes the newline "token." (Transforms them into newline escape sequences "\n").
-#    ( Needs to be done after 4, otherwise the escapce sequence will become just "n".
-{{{ bash_deregexify_banner_newline_token("login_banner_text")}}}
-
 {{{ bash_enable_dconf_user_profile(profile="user", database="local") }}}
 {{{ bash_enable_dconf_user_profile(profile="gdm", database="gdm") }}}
 
+dconf_login_banner_contents=$(echo "(bash-populate dconf_login_banner_contents)" )
 # Will do both approach, since we plan to migrate to checks over dconf db. That way, future updates of the tool
 # will pass the check even if we decide to check only for the dconf db path.
-{{{ set_config_file("/etc/gdm3/greeter.dconf-defaults", "banner-message-text", value="'${login_banner_text}'", create='no', insert_after="\[org/gnome/login-screen\]", insert_before="", separator="=", separator_regex="", prefix_regex="^\s*", rule_id=rule_id) }}}
-{{{ bash_dconf_settings("org/gnome/login-screen", "banner-message-text", "'${login_banner_text}'", dconf_gdm_dir, "00-security-settings", rule_id=rule_id) }}}
+{{{ set_config_file("/etc/gdm3/greeter.dconf-defaults", "banner-message-text", value="'${dconf_login_banner_contents}'", create='no', insert_after="\[org/gnome/login-screen\]", insert_before="", separator="=", separator_regex="", prefix_regex="^\s*", rule_id=rule_id) }}}
+{{{ bash_dconf_settings("org/gnome/login-screen", "banner-message-text", "'${dconf_login_banner_contents}'", dconf_gdm_dir, "00-security-settings", rule_id=rule_id) }}}
 # No need to use dconf update, since bash_dconf_settings does that already
diff --git a/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/oval/shared.xml b/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/oval/shared.xml
index 0a6b6a9c829f..4b957be47881 100644
--- a/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/oval/shared.xml
+++ b/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/oval/shared.xml
@@ -39,9 +39,9 @@
   </ind:textfilecontent54_object>
 
   <ind:textfilecontent54_state id="state_gdm_login_banner_text_setting" version="1">
-    <ind:subexpression datatype="string" operation="pattern match" var_ref="login_banner_text" />
+    <ind:subexpression datatype="string" operation="pattern match" var_ref="dconf_login_banner_text" />
   </ind:textfilecontent54_state>
 
-  <external_variable comment="warning banner text variable" datatype="string" id="login_banner_text" version="1" />
+  <external_variable comment="warning banner text variable" datatype="string" id="dconf_login_banner_text" version="1" />
 
 </def-group>
diff --git a/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/oval/ubuntu.xml b/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/oval/ubuntu.xml
index 3baac57772f3..208572acae53 100644
--- a/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/oval/ubuntu.xml
+++ b/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/oval/ubuntu.xml
@@ -37,9 +37,9 @@
 
 
   <ind:textfilecontent54_state id="state_gdm_login_banner_text_setting" version="1">
-    <ind:subexpression datatype="string" operation="pattern match" var_ref="login_banner_text" />
+    <ind:subexpression datatype="string" operation="pattern match" var_ref="dconf_login_banner_text" />
   </ind:textfilecontent54_state>
 
-  <external_variable comment="warning banner text variable" datatype="string" id="login_banner_text" version="1" />
+  <external_variable comment="warning banner text variable" datatype="string" id="dconf_login_banner_text" version="1" />
 
 </def-group>
diff --git a/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/correct_value_stig.pass.sh b/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/correct_value_stig.pass.sh
index 6ff96441acd3..c2caa11732c3 100644
--- a/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/correct_value_stig.pass.sh
+++ b/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/correct_value_stig.pass.sh
@@ -7,11 +7,39 @@ source $SHARED/dconf_test_functions.sh
 
 install_dconf_and_gdm_if_needed
 
-login_banner_text="(^You[\s\n]+are[\s\n]+accessing[\s\n]+a[\s\n]+U.S.[\s\n]+Government[\s\n]+\(USG\)[\s\n]+Information[\s\n]+System[\s\n]+\(IS\)[\s\n]+that[\s\n]+is[\s\n]+provided[\s\n]+for[\s\n]+USG-authorized[\s\n]+use[\s\n]+only.[\s\n]*By[\s\n]+using[\s\n]+this[\s\n]+IS[\s\n]+\(which[\s\n]+includes[\s\n]+any[\s\n]+device[\s\n]+attached[\s\n]+to[\s\n]+this[\s\n]+IS\),[\s\n]+you[\s\n]+consent[\s\n]+to[\s\n]+the[\s\n]+following[\s\n]+conditions\:(\\n)*(\n)*-The[\s\n]+USG[\s\n]+routinely[\s\n]+intercepts[\s\n]+and[\s\n]+monitors[\s\n]+communications[\s\n]+on[\s\n]+this[\s\n]+IS[\s\n]+for[\s\n]+purposes[\s\n]+including,[\s\n]+but[\s\n]+not[\s\n]+limited[\s\n]+to,[\s\n]+penetration[\s\n]+testing,[\s\n]+COMSEC[\s\n]+monitoring,[\s\n]+network[\s\n]+operations[\s\n]+and[\s\n]+defense,[\s\n]+personnel[\s\n]+misconduct[\s\n]+\(PM\),[\s\n]+law[\s\n]+enforcement[\s\n]+\(LE\),[\s\n]+and[\s\n]+counterintelligence[\s\n]+\(CI\)[\s\n]+investigations.(\\n)*(\n)*-At[\s\n]+any[\s\n]+time,[\s\n]+the[\s\n]+USG[\s\n]+may[\s\n]+inspect[\s\n]+and[\s\n]+seize[\s\n]+data[\s\n]+stored[\s\n]+on[\s\n]+this[\s\n]+IS.(\\n)*(\n)*-Communications[\s\n]+using,[\s\n]+or[\s\n]+data[\s\n]+stored[\s\n]+on,[\s\n]+this[\s\n]+IS[\s\n]+are[\s\n]+not[\s\n]+private,[\s\n]+are[\s\n]+subject[\s\n]+to[\s\n]+routine[\s\n]+monitoring,[\s\n]+interception,[\s\n]+and[\s\n]+search,[\s\n]+and[\s\n]+may[\s\n]+be[\s\n]+disclosed[\s\n]+or[\s\n]+used[\s\n]+for[\s\n]+any[\s\n]+USG-authorized[\s\n]+purpose.(\\n)*(\n)*-This[\s\n]+IS[\s\n]+includes[\s\n]+security[\s\n]+measures[\s\n]+\(e.g.,[\s\n]+authentication[\s\n]+and[\s\n]+access[\s\n]+controls\)[\s\n]+to[\s\n]+protect[\s\n]+USG[\s\n]+interests--not[\s\n]+for[\s\n]+your[\s\n]+personal[\s\n]+benefit[\s\n]+or[\s\n]+privacy.(\\n)*(\n)*-Notwithstanding[\s\n]+the[\s\n]+above,[\s\n]+using[\s\n]+this[\s\n]+IS[\s\n]+does[\s\n]+not[\s\n]+constitute[\s\n]+consent[\s\n]+to[\s\n]+PM,[\s\n]+LE[\s\n]+or[\s\n]+CI[\s\n]+investigative[\s\n]+searching[\s\n]+or[\s\n]+monitoring[\s\n]+of[\s\n]+the[\s\n]+content[\s\n]+of[\s\n]+privileged[\s\n]+communications,[\s\n]+or[\s\n]+work[\s\n]+product,[\s\n]+related[\s\n]+to[\s\n]+personal[\s\n]+representation[\s\n]+or[\s\n]+services[\s\n]+by[\s\n]+attorneys,[\s\n]+psychotherapists,[\s\n]+or[\s\n]+clergy,[\s\n]+and[\s\n]+their[\s\n]+assistants.[\s\n]+Such[\s\n]+communications[\s\n]+and[\s\n]+work[\s\n]+product[\s\n]+are[\s\n]+private[\s\n]+and[\s\n]+confidential.[\s\n]+See[\s\n]+User[\s\n]+Agreement[\s\n]+for[\s\n]+details.$|^I\'ve[\s\n]+read[\s\n]+\&[\s\n]+consent[\s\n]+to[\s\n]+terms[\s\n]+in[\s\n]+IS[\s\n]+user[\s\n]+agreem\'t$)"
-expanded=$(echo "$login_banner_text" | sed 's/(\\\\\x27)\*/\\\x27/g;s/(\\\x27)\*//g;s/(\\\\\x27)/tamere/g;s/(\^\(.*\)\$|.*$/\1/g;s/\[\\s\\n\][+*]/ /g;s/\\//g;s/(n)\*/\\n/g;s/\x27/\\\x27/g;')
+login_banner_contents=$(cat <<'EOF'
+You are accessing a U.S. Government (USG) Information System (IS) that is
+provided for USG-authorized use only. By using this IS (which includes any
+device attached to this IS), you consent to the following conditions:
+
+-The USG routinely intercepts and monitors communications on this IS for
+purposes including, but not limited to, penetration testing, COMSEC monitoring,
+network operations and defense, personnel misconduct (PM), law enforcement
+(LE), and counterintelligence (CI) investigations.
+
+-At any time, the USG may inspect and seize data stored on this IS.
+
+-Communications using, or data stored on, this IS are not private, are subject
+to routine monitoring, interception, and search, and may be disclosed or used
+for any USG-authorized purpose.
+
+-This IS includes security measures (e.g., authentication and access controls)
+to protect USG interests--not for your personal benefit or privacy.
+
+-Notwithstanding the above, using this IS does not constitute consent to PM, LE
+or CI investigative searching or monitoring of the content of privileged
+communications, or work product, related to personal representation or services
+by attorneys, psychotherapists, or clergy, and their assistants. Such
+communications and work product are private and confidential. See User
+Agreement for details.
+EOF
+)
+
+# replace two subsequent newlines with a \n\n and single newlines with a space
+login_banner_text_escaped=$(printf '%s' "$login_banner_contents" | sed ':a;N;$!ba;s/\n\n/\\n\\n/g;s/\n/ /g')
 
 clean_dconf_settings
-add_dconf_setting "org/gnome/login-screen" "banner-message-text" "'${expanded}'" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+add_dconf_setting "org/gnome/login-screen" "banner-message-text" "'${login_banner_text_escaped}'" "{{{ dconf_gdm_dir }}}" "00-security-settings"
 add_dconf_lock "org/gnome/login-screen" "banner-message-text" "{{{ dconf_gdm_dir }}}" "00-security-settings-lock"
 
 dconf update
diff --git a/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/correct_value_stig_wrong_db.fail.sh b/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/correct_value_stig_wrong_db.fail.sh
index 9969fcc6f0d2..c8077d767d35 100644
--- a/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/correct_value_stig_wrong_db.fail.sh
+++ b/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/correct_value_stig_wrong_db.fail.sh
@@ -7,11 +7,39 @@ source $SHARED/dconf_test_functions.sh
 
 install_dconf_and_gdm_if_needed
 
-login_banner_text="(^You[\s\n]+are[\s\n]+accessing[\s\n]+a[\s\n]+U.S.[\s\n]+Government[\s\n]+\(USG\)[\s\n]+Information[\s\n]+System[\s\n]+\(IS\)[\s\n]+that[\s\n]+is[\s\n]+provided[\s\n]+for[\s\n]+USG-authorized[\s\n]+use[\s\n]+only.[\s\n]*By[\s\n]+using[\s\n]+this[\s\n]+IS[\s\n]+\(which[\s\n]+includes[\s\n]+any[\s\n]+device[\s\n]+attached[\s\n]+to[\s\n]+this[\s\n]+IS\),[\s\n]+you[\s\n]+consent[\s\n]+to[\s\n]+the[\s\n]+following[\s\n]+conditions\:(\\n)*(\n)*-The[\s\n]+USG[\s\n]+routinely[\s\n]+intercepts[\s\n]+and[\s\n]+monitors[\s\n]+communications[\s\n]+on[\s\n]+this[\s\n]+IS[\s\n]+for[\s\n]+purposes[\s\n]+including,[\s\n]+but[\s\n]+not[\s\n]+limited[\s\n]+to,[\s\n]+penetration[\s\n]+testing,[\s\n]+COMSEC[\s\n]+monitoring,[\s\n]+network[\s\n]+operations[\s\n]+and[\s\n]+defense,[\s\n]+personnel[\s\n]+misconduct[\s\n]+\(PM\),[\s\n]+law[\s\n]+enforcement[\s\n]+\(LE\),[\s\n]+and[\s\n]+counterintelligence[\s\n]+\(CI\)[\s\n]+investigations.(\\n)*(\n)*-At[\s\n]+any[\s\n]+time,[\s\n]+the[\s\n]+USG[\s\n]+may[\s\n]+inspect[\s\n]+and[\s\n]+seize[\s\n]+data[\s\n]+stored[\s\n]+on[\s\n]+this[\s\n]+IS.(\\n)*(\n)*-Communications[\s\n]+using,[\s\n]+or[\s\n]+data[\s\n]+stored[\s\n]+on,[\s\n]+this[\s\n]+IS[\s\n]+are[\s\n]+not[\s\n]+private,[\s\n]+are[\s\n]+subject[\s\n]+to[\s\n]+routine[\s\n]+monitoring,[\s\n]+interception,[\s\n]+and[\s\n]+search,[\s\n]+and[\s\n]+may[\s\n]+be[\s\n]+disclosed[\s\n]+or[\s\n]+used[\s\n]+for[\s\n]+any[\s\n]+USG-authorized[\s\n]+purpose.(\\n)*(\n)*-This[\s\n]+IS[\s\n]+includes[\s\n]+security[\s\n]+measures[\s\n]+\(e.g.,[\s\n]+authentication[\s\n]+and[\s\n]+access[\s\n]+controls\)[\s\n]+to[\s\n]+protect[\s\n]+USG[\s\n]+interests--not[\s\n]+for[\s\n]+your[\s\n]+personal[\s\n]+benefit[\s\n]+or[\s\n]+privacy.(\\n)*(\n)*-Notwithstanding[\s\n]+the[\s\n]+above,[\s\n]+using[\s\n]+this[\s\n]+IS[\s\n]+does[\s\n]+not[\s\n]+constitute[\s\n]+consent[\s\n]+to[\s\n]+PM,[\s\n]+LE[\s\n]+or[\s\n]+CI[\s\n]+investigative[\s\n]+searching[\s\n]+or[\s\n]+monitoring[\s\n]+of[\s\n]+the[\s\n]+content[\s\n]+of[\s\n]+privileged[\s\n]+communications,[\s\n]+or[\s\n]+work[\s\n]+product,[\s\n]+related[\s\n]+to[\s\n]+personal[\s\n]+representation[\s\n]+or[\s\n]+services[\s\n]+by[\s\n]+attorneys,[\s\n]+psychotherapists,[\s\n]+or[\s\n]+clergy,[\s\n]+and[\s\n]+their[\s\n]+assistants.[\s\n]+Such[\s\n]+communications[\s\n]+and[\s\n]+work[\s\n]+product[\s\n]+are[\s\n]+private[\s\n]+and[\s\n]+confidential.[\s\n]+See[\s\n]+User[\s\n]+Agreement[\s\n]+for[\s\n]+details.$|^I\'ve[\s\n]+read[\s\n]+\&[\s\n]+consent[\s\n]+to[\s\n]+terms[\s\n]+in[\s\n]+IS[\s\n]+user[\s\n]+agreem\'t$)"
-expanded=$(echo "$login_banner_text" | sed 's/(\\\\\x27)\*/\\\x27/g;s/(\\\x27)\*//g;s/(\\\\\x27)/tamere/g;s/(\^\(.*\)\$|.*$/\1/g;s/\[\\s\\n\][+*]/ /g;s/\\//g;s/(n)\*/\\n/g;s/\x27/\\\x27/g;')
+login_banner_contents=$(cat <<'EOF'
+You are accessing a U.S. Government (USG) Information System (IS) that is
+provided for USG-authorized use only. By using this IS (which includes any
+device attached to this IS), you consent to the following conditions:
+
+-The USG routinely intercepts and monitors communications on this IS for
+purposes including, but not limited to, penetration testing, COMSEC monitoring,
+network operations and defense, personnel misconduct (PM), law enforcement
+(LE), and counterintelligence (CI) investigations.
+
+-At any time, the USG may inspect and seize data stored on this IS.
+
+-Communications using, or data stored on, this IS are not private, are subject
+to routine monitoring, interception, and search, and may be disclosed or used
+for any USG-authorized purpose.
+
+-This IS includes security measures (e.g., authentication and access controls)
+to protect USG interests--not for your personal benefit or privacy.
+
+-Notwithstanding the above, using this IS does not constitute consent to PM, LE
+or CI investigative searching or monitoring of the content of privileged
+communications, or work product, related to personal representation or services
+by attorneys, psychotherapists, or clergy, and their assistants. Such
+communications and work product are private and confidential. See User
+Agreement for details.
+EOF
+)
+
+# replace two subsequent newlines with a \n\n and single newlines with a space
+login_banner_text_escaped=$(printf '%s' "$login_banner_contents" | sed ':a;N;$!ba;s/\n\n/\\n\\n/g;s/\n/ /g')
 
 clean_dconf_settings
-add_dconf_setting "org/gnome/login-screen" "banner-message-text" "'${expanded}'" "dummy.d" "00-security-settings"
+add_dconf_setting "org/gnome/login-screen" "banner-message-text" "'${login_banner_text_escaped}'" "dummy.d" "00-security-settings"
 add_dconf_lock "org/gnome/login-screen" "banner-message-text" "dummy.d" "00-security-settings-lock"
 
 dconf update
diff --git a/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/missing_value_stig.fail.sh b/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/missing_value_stig.fail.sh
index c316d7c8f74b..56eb33cd1061 100644
--- a/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/missing_value_stig.fail.sh
+++ b/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/missing_value_stig.fail.sh
@@ -7,8 +7,8 @@ source $SHARED/dconf_test_functions.sh
 
 install_dconf_and_gdm_if_needed
 
-# login_banner_text="(^You[\s\n]+are[\s\n]+accessing[\s\n]+a[\s\n]+U.S.[\s\n]+Government[\s\n]+\(USG\)[\s\n]+Information[\s\n]+System[\s\n]+\(IS\)[\s\n]+that[\s\n]+is[\s\n]+provided[\s\n]+for[\s\n]+USG-authorized[\s\n]+use[\s\n]+only.[\s\n]*By[\s\n]+using[\s\n]+this[\s\n]+IS[\s\n]+\(which[\s\n]+includes[\s\n]+any[\s\n]+device[\s\n]+attached[\s\n]+to[\s\n]+this[\s\n]+IS\),[\s\n]+you[\s\n]+consent[\s\n]+to[\s\n]+the[\s\n]+following[\s\n]+conditions\:(\\n)*(\n)*-[\s\n]*The[\s\n]+USG[\s\n]+routinely[\s\n]+intercepts[\s\n]+and[\s\n]+monitors[\s\n]+communications[\s\n]+on[\s\n]+this[\s\n]+IS[\s\n]+for[\s\n]+purposes[\s\n]+including,[\s\n]+but[\s\n]+not[\s\n]+limited[\s\n]+to,[\s\n]+penetration[\s\n]+testing,[\s\n]+COMSEC[\s\n]+monitoring,[\s\n]+network[\s\n]+operations[\s\n]+and[\s\n]+defense,[\s\n]+personnel[\s\n]+misconduct[\s\n]+\(PM\),[\s\n]+law[\s\n]+enforcement[\s\n]+\(LE\),[\s\n]+and[\s\n]+counterintelligence[\s\n]+\(CI\)[\s\n]+investigations.(\\n)*(\n)*-[\s\n]*At[\s\n]+any[\s\n]+time,[\s\n]+the[\s\n]+USG[\s\n]+may[\s\n]+inspect[\s\n]+and[\s\n]+seize[\s\n]+data[\s\n]+stored[\s\n]+on[\s\n]+this[\s\n]+IS.(\\n)*(\n)*-[\s\n]*Communications[\s\n]+using,[\s\n]+or[\s\n]+data[\s\n]+stored[\s\n]+on,[\s\n]+this[\s\n]+IS[\s\n]+are[\s\n]+not[\s\n]+private,[\s\n]+are[\s\n]+subject[\s\n]+to[\s\n]+routine[\s\n]+monitoring,[\s\n]+interception,[\s\n]+and[\s\n]+search,[\s\n]+and[\s\n]+may[\s\n]+be[\s\n]+disclosed[\s\n]+or[\s\n]+used[\s\n]+for[\s\n]+any[\s\n]+USG-authorized[\s\n]+purpose.(\\n)*(\n)*-[\s\n]*This[\s\n]+IS[\s\n]+includes[\s\n]+security[\s\n]+measures[\s\n]+\(e.g.,[\s\n]+authentication[\s\n]+and[\s\n]+access[\s\n]+controls\)[\s\n]+to[\s\n]+protect[\s\n]+USG[\s\n]+interests--not[\s\n]+for[\s\n]+your[\s\n]+personal[\s\n]+benefit[\s\n]+or[\s\n]+privacy.(\\n)*(\n)*-[\s\n]*Notwithstanding[\s\n]+the[\s\n]+above,[\s\n]+using[\s\n]+this[\s\n]+IS[\s\n]+does[\s\n]+not[\s\n]+constitute[\s\n]+consent[\s\n]+to[\s\n]+PM,[\s\n]+LE[\s\n]+or[\s\n]+CI[\s\n]+investigative[\s\n]+searching[\s\n]+or[\s\n]+monitoring[\s\n]+of[\s\n]+the[\s\n]+content[\s\n]+of[\s\n]+privileged[\s\n]+communications,[\s\n]+or[\s\n]+work[\s\n]+product,[\s\n]+related[\s\n]+to[\s\n]+personal[\s\n]+representation[\s\n]+or[\s\n]+services[\s\n]+by[\s\n]+attorneys,[\s\n]+psychotherapists,[\s\n]+or[\s\n]+clergy,[\s\n]+and[\s\n]+their[\s\n]+assistants.[\s\n]+Such[\s\n]+communications[\s\n]+and[\s\n]+work[\s\n]+product[\s\n]+are[\s\n]+private[\s\n]+and[\s\n]+confidential.[\s\n]+See[\s\n]+User[\s\n]+Agreement[\s\n]+for[\s\n]+details.$|^I\'ve[\s\n]+read[\s\n]+\&[\s\n]+consent[\s\n]+to[\s\n]+terms[\s\n]+in[\s\n]+IS[\s\n]+user[\s\n]+agreem\'t$)"
-# expanded=$(echo "$login_banner_text" | sed 's/(\\\\\x27)\*/\\\x27/g;s/(\\\x27)\*//g;s/(\\\\\x27)/tamere/g;s/(\^\(.*\)\$|.*$/\1/g;s/\[\\s\\n\][+*]/ /g;s/\\//g;s/(n)\*/\\n/g;s/\x27/\\\x27/g;')
+# login_banner_contents="(^You[\s\n]+are[\s\n]+accessing[\s\n]+a[\s\n]+U.S.[\s\n]+Government[\s\n]+\(USG\)[\s\n]+Information[\s\n]+System[\s\n]+\(IS\)[\s\n]+that[\s\n]+is[\s\n]+provided[\s\n]+for[\s\n]+USG-authorized[\s\n]+use[\s\n]+only.[\s\n]*By[\s\n]+using[\s\n]+this[\s\n]+IS[\s\n]+\(which[\s\n]+includes[\s\n]+any[\s\n]+device[\s\n]+attached[\s\n]+to[\s\n]+this[\s\n]+IS\),[\s\n]+you[\s\n]+consent[\s\n]+to[\s\n]+the[\s\n]+following[\s\n]+conditions\:(\\n)*(\n)*-[\s\n]*The[\s\n]+USG[\s\n]+routinely[\s\n]+intercepts[\s\n]+and[\s\n]+monitors[\s\n]+communications[\s\n]+on[\s\n]+this[\s\n]+IS[\s\n]+for[\s\n]+purposes[\s\n]+including,[\s\n]+but[\s\n]+not[\s\n]+limited[\s\n]+to,[\s\n]+penetration[\s\n]+testing,[\s\n]+COMSEC[\s\n]+monitoring,[\s\n]+network[\s\n]+operations[\s\n]+and[\s\n]+defense,[\s\n]+personnel[\s\n]+misconduct[\s\n]+\(PM\),[\s\n]+law[\s\n]+enforcement[\s\n]+\(LE\),[\s\n]+and[\s\n]+counterintelligence[\s\n]+\(CI\)[\s\n]+investigations.(\\n)*(\n)*-[\s\n]*At[\s\n]+any[\s\n]+time,[\s\n]+the[\s\n]+USG[\s\n]+may[\s\n]+inspect[\s\n]+and[\s\n]+seize[\s\n]+data[\s\n]+stored[\s\n]+on[\s\n]+this[\s\n]+IS.(\\n)*(\n)*-[\s\n]*Communications[\s\n]+using,[\s\n]+or[\s\n]+data[\s\n]+stored[\s\n]+on,[\s\n]+this[\s\n]+IS[\s\n]+are[\s\n]+not[\s\n]+private,[\s\n]+are[\s\n]+subject[\s\n]+to[\s\n]+routine[\s\n]+monitoring,[\s\n]+interception,[\s\n]+and[\s\n]+search,[\s\n]+and[\s\n]+may[\s\n]+be[\s\n]+disclosed[\s\n]+or[\s\n]+used[\s\n]+for[\s\n]+any[\s\n]+USG-authorized[\s\n]+purpose.(\\n)*(\n)*-[\s\n]*This[\s\n]+IS[\s\n]+includes[\s\n]+security[\s\n]+measures[\s\n]+\(e.g.,[\s\n]+authentication[\s\n]+and[\s\n]+access[\s\n]+controls\)[\s\n]+to[\s\n]+protect[\s\n]+USG[\s\n]+interests--not[\s\n]+for[\s\n]+your[\s\n]+personal[\s\n]+benefit[\s\n]+or[\s\n]+privacy.(\\n)*(\n)*-[\s\n]*Notwithstanding[\s\n]+the[\s\n]+above,[\s\n]+using[\s\n]+this[\s\n]+IS[\s\n]+does[\s\n]+not[\s\n]+constitute[\s\n]+consent[\s\n]+to[\s\n]+PM,[\s\n]+LE[\s\n]+or[\s\n]+CI[\s\n]+investigative[\s\n]+searching[\s\n]+or[\s\n]+monitoring[\s\n]+of[\s\n]+the[\s\n]+content[\s\n]+of[\s\n]+privileged[\s\n]+communications,[\s\n]+or[\s\n]+work[\s\n]+product,[\s\n]+related[\s\n]+to[\s\n]+personal[\s\n]+representation[\s\n]+or[\s\n]+services[\s\n]+by[\s\n]+attorneys,[\s\n]+psychotherapists,[\s\n]+or[\s\n]+clergy,[\s\n]+and[\s\n]+their[\s\n]+assistants.[\s\n]+Such[\s\n]+communications[\s\n]+and[\s\n]+work[\s\n]+product[\s\n]+are[\s\n]+private[\s\n]+and[\s\n]+confidential.[\s\n]+See[\s\n]+User[\s\n]+Agreement[\s\n]+for[\s\n]+details.$|^I\'ve[\s\n]+read[\s\n]+\&[\s\n]+consent[\s\n]+to[\s\n]+terms[\s\n]+in[\s\n]+IS[\s\n]+user[\s\n]+agreem\'t$)"
+# expanded=$(echo "$login_banner_contents" | sed 's/(\\\\\x27)\*/\\\x27/g;s/(\\\x27)\*//g;s/(\\\\\x27)/tamere/g;s/(\^\(.*\)\$|.*$/\1/g;s/\[\\s\\n\][+*]/ /g;s/\\//g;s/(n)\*/\\n/g;s/\x27/\\\x27/g;')
 
 clean_dconf_settings
 add_dconf_setting "org/gnome/login-screen" "banner-message-enabled" "true" "{{{ dconf_gdm_dir }}}" "00-security-settings"
diff --git a/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/ubuntu_correct_value.pass.sh b/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/ubuntu_correct_value.pass.sh
index 9b0d6ebb73f3..8d3f075bdb73 100644
--- a/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/ubuntu_correct_value.pass.sh
+++ b/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/ubuntu_correct_value.pass.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 # platform = multi_platform_ubuntu
 # packages = gdm3
-# variables = login_banner_text=Authorized users only. All activity may be monitored and reported.
+# variables = dconf_login_banner_text=Authorized users only. All activity may be monitored and reported.
 
 source $SHARED/dconf_test_functions.sh
 clean_dconf_settings
diff --git a/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/ubuntu_correct_value_defaults.pass.sh b/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/ubuntu_correct_value_defaults.pass.sh
index 2ffb8ec5fb19..380397ebba55 100644
--- a/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/ubuntu_correct_value_defaults.pass.sh
+++ b/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/ubuntu_correct_value_defaults.pass.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 # platform = multi_platform_ubuntu
 # packages = gdm3
-# variables = login_banner_text=Authorized users only. All activity may be monitored and reported.
+# variables = dconf_login_banner_text=Authorized users only. All activity may be monitored and reported.
 
 source $SHARED/dconf_test_functions.sh
 clean_dconf_settings
diff --git a/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/ubuntu_wrong_value.fail.sh b/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/ubuntu_wrong_value.fail.sh
index cf9bb8d31b34..e013ae2dd447 100644
--- a/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/ubuntu_wrong_value.fail.sh
+++ b/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/ubuntu_wrong_value.fail.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 # platform = multi_platform_ubuntu
 # packages = gdm3
-# variables = login_banner_text=default
+# variables = dconf_login_banner_text=default
 
 source $SHARED/dconf_test_functions.sh
 clean_dconf_settings
diff --git a/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/ubuntu_wrong_value_defaults.fail.sh b/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/ubuntu_wrong_value_defaults.fail.sh
index 07e8cacfd78a..51ac9ff10ab7 100644
--- a/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/ubuntu_wrong_value_defaults.fail.sh
+++ b/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/ubuntu_wrong_value_defaults.fail.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 # platform = multi_platform_ubuntu
 # packages = gdm3
-# variables = login_banner_text=default
+# variables = dconf_login_banner_text=default
 
 source $SHARED/dconf_test_functions.sh
 clean_dconf_settings
diff --git a/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/wrapped_banner.fail.sh b/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/wrapped_banner.fail.sh
index 38b8ee45b0a8..28b573bc3a9a 100644
--- a/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/wrapped_banner.fail.sh
+++ b/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/wrapped_banner.fail.sh
@@ -7,8 +7,8 @@ source $SHARED/dconf_test_functions.sh
 
 install_dconf_and_gdm_if_needed
 
-login_banner_text="Some text before --[\s\n]+WARNING[\s\n]+--[\s\n]*This[\s\n]+system[\s\n]+is[\s\n]+for[\s\n]+the[\s\n]+use[\s\n]+of[\s\n]+authorized[\s\n]+users[\s\n]+only.[\s\n]+Individuals[\s\n]*using[\s\n]+this[\s\n]+computer[\s\n]+system[\s\n]+without[\s\n]+authority[\s\n]+or[\s\n]+in[\s\n]+excess[\s\n]+of[\s\n]+their[\s\n]*authority[\s\n]+are[\s\n]+subject[\s\n]+to[\s\n]+having[\s\n]+all[\s\n]+their[\s\n]+activities[\s\n]+on[\s\n]+this[\s\n]+system[\s\n]*monitored[\s\n]+and[\s\n]+recorded[\s\n]+by[\s\n]+system[\s\n]+personnel.[\s\n]+Anyone[\s\n]+using[\s\n]+this[\s\n]*system[\s\n]+expressly[\s\n]+consents[\s\n]+to[\s\n]+such[\s\n]+monitoring[\s\n]+and[\s\n]+is[\s\n]+advised[\s\n]+that[\s\n]*if[\s\n]+such[\s\n]+monitoring[\s\n]+reveals[\s\n]+possible[\s\n]+evidence[\s\n]+of[\s\n]+criminal[\s\n]+activity[\s\n]*system[\s\n]+personal[\s\n]+may[\s\n]+provide[\s\n]+the[\s\n]+evidence[\s\n]+of[\s\n]+such[\s\n]+monitoring[\s\n]+to[\s\n]+law[\s\n]*enforcement[\s\n]+officials. And some after."
-expanded=$(echo "$login_banner_text" | sed 's/(\\\\\x27)\*/\\\x27/g;s/(\\\x27)\*//g;s/(\\\\\x27)/tamere/g;s/(\^\(.*\)\$|.*$/\1/g;s/\[\\s\\n\][+*]/ /g;s/\\//g;s/(n)\*/\\n/g;s/\x27/\\\x27/g;')
+dconf_login_banner_contents="Some text before --[\s\n]+WARNING[\s\n]+--[\s\n]*This[\s\n]+system[\s\n]+is[\s\n]+for[\s\n]+the[\s\n]+use[\s\n]+of[\s\n]+authorized[\s\n]+users[\s\n]+only.[\s\n]+Individuals[\s\n]*using[\s\n]+this[\s\n]+computer[\s\n]+system[\s\n]+without[\s\n]+authority[\s\n]+or[\s\n]+in[\s\n]+excess[\s\n]+of[\s\n]+their[\s\n]*authority[\s\n]+are[\s\n]+subject[\s\n]+to[\s\n]+having[\s\n]+all[\s\n]+their[\s\n]+activities[\s\n]+on[\s\n]+this[\s\n]+system[\s\n]*monitored[\s\n]+and[\s\n]+recorded[\s\n]+by[\s\n]+system[\s\n]+personnel.[\s\n]+Anyone[\s\n]+using[\s\n]+this[\s\n]*system[\s\n]+expressly[\s\n]+consents[\s\n]+to[\s\n]+such[\s\n]+monitoring[\s\n]+and[\s\n]+is[\s\n]+advised[\s\n]+that[\s\n]*if[\s\n]+such[\s\n]+monitoring[\s\n]+reveals[\s\n]+possible[\s\n]+evidence[\s\n]+of[\s\n]+criminal[\s\n]+activity[\s\n]*system[\s\n]+personal[\s\n]+may[\s\n]+provide[\s\n]+the[\s\n]+evidence[\s\n]+of[\s\n]+such[\s\n]+monitoring[\s\n]+to[\s\n]+law[\s\n]*enforcement[\s\n]+officials. And some after."
+expanded=$(echo "$dconf_login_banner_contents" | sed 's/(\\\\\x27)\*/\\\x27/g;s/(\\\x27)\*//g;s/(\\\\\x27)/tamere/g;s/(\^\(.*\)\$|.*$/\1/g;s/\[\\s\\n\][+*]/ /g;s/\\//g;s/(n)\*/\\n/g;s/\x27/\\\x27/g;')
 
 clean_dconf_settings
 add_dconf_setting "org/gnome/login-screen" "banner-message-text" "'${expanded}'" "{{{ dconf_gdm_dir }}}" "00-security-settings"
diff --git a/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/wrong_value.fail.sh b/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/wrong_value.fail.sh
index 6a3b00b8cafa..577d3a876327 100644
--- a/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/wrong_value.fail.sh
+++ b/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/wrong_value.fail.sh
@@ -7,8 +7,8 @@ source $SHARED/dconf_test_functions.sh
 
 install_dconf_and_gdm_if_needed
 
-login_banner_text="Wrong Banner Text"
-expanded=$(echo "$login_banner_text" | sed 's/(\\\\\x27)\*/\\\x27/g;s/(\\\x27)\*//g;s/(\\\\\x27)/tamere/g;s/(\^\(.*\)\$|.*$/\1/g;s/\[\\s\\n\][+*]/ /g;s/\\//g;s/(n)\*/\\n/g;s/\x27/\\\x27/g;')
+login_banner_contents="Wrong Banner Text"
+expanded=$(echo "$login_banner_contents" | sed 's/(\\\\\x27)\*/\\\x27/g;s/(\\\x27)\*//g;s/(\\\\\x27)/tamere/g;s/(\^\(.*\)\$|.*$/\1/g;s/\[\\s\\n\][+*]/ /g;s/\\//g;s/(n)\*/\\n/g;s/\x27/\\\x27/g;')
 
 clean_dconf_settings
 add_dconf_setting "org/gnome/login-screen" "banner-message-text" "'${expanded}'" "{{{ dconf_gdm_dir }}}" "00-security-settings"
diff --git a/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/wrong_value_stig.fail.sh b/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/wrong_value_stig.fail.sh
index 7c7d4c073e3d..1c04437538a8 100644
--- a/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/wrong_value_stig.fail.sh
+++ b/linux_os/guide/system/accounts/accounts-banners/gui_login_banner/dconf_gnome_login_banner_text/tests/wrong_value_stig.fail.sh
@@ -3,8 +3,8 @@
 # profiles = xccdf_org.ssgproject.content_profile_stig
 # packages = dconf,gdm
 
-login_banner_text="Wrong Banner Text"
-expanded=$(echo "$login_banner_text" | sed 's/(\\\\\x27)\*/\\\x27/g;s/(\\\x27)\*//g;s/(\\\\\x27)/tamere/g;s/(\^\(.*\)\$|.*$/\1/g;s/\[\\s\\n\][+*]/ /g;s/\\//g;s/(n)\*/\\n/g;s/\x27/\\\x27/g;')
+login_banner_contents="Wrong Banner Text"
+expanded=$(echo "$login_banner_contents" | sed 's/(\\\\\x27)\*/\\\x27/g;s/(\\\x27)\*//g;s/(\\\\\x27)/tamere/g;s/(\^\(.*\)\$|.*$/\1/g;s/\[\\s\\n\][+*]/ /g;s/\\//g;s/(n)\*/\\n/g;s/\x27/\\\x27/g;')
 
 {{% if 'ubuntu' not in product %}}
 source $SHARED/dconf_test_functions.sh
diff --git a/linux_os/guide/system/accounts/accounts-banners/login_banner_contents.var b/linux_os/guide/system/accounts/accounts-banners/login_banner_contents.var
new file mode 100644
index 000000000000..d39a75fd02fd
--- /dev/null
+++ b/linux_os/guide/system/accounts/accounts-banners/login_banner_contents.var
@@ -0,0 +1,25 @@
+documentation_complete: true
+
+title: 'Login Banner Verbiage'
+
+description: >-
+    Enter an appropriate login banner text for your organization.
+    This variable is used only in remediations.
+    In OVAL checks a regular expression specified in the login_banner_text variable is used instead.
+    Using a regular expression is needed because some profiles (eg. STIG) allow multiple different banners.
+
+type: string
+
+operator: equals
+
+interactive: true
+
+options:
+    default: 'Authorized users only. All activity may be monitored and reported.'
+# CIS doesn't enforce any specific content for login banners, but doesn't allow technical information.
+# There is a generic content in case a remediation is necessary.
+    cis_default: 'Authorized users only. All activity may be monitored and reported.'
+    dod_default: 'You are accessing a U.S. Government (USG) Information System (IS) that is\nprovided for USG-authorized use only. By using this IS (which includes any\ndevice attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for\npurposes including, but not limited to, penetration testing, COMSEC monitoring,\nnetwork operations and defense, personnel misconduct (PM), law enforcement\n(LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject\nto routine monitoring, interception, and search, and may be disclosed or used\nfor any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls)\nto protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE\nor CI investigative searching or monitoring of the content of privileged\ncommunications, or work product, related to personal representation or services\nby attorneys, psychotherapists, or clergy, and their assistants. Such\ncommunications and work product are private and confidential. See User\nAgreement for details.'
+    dod_short: 'I''ve read & consent to terms in IS user agreem''t.'
+    dss_odaa_default: 'Use of this or any other DoD interest computer system constitutes consent to\nmonitoring at all times. This is a DoD interest computer system. All DoD\ninterest computer systems and related equipment are intended for the\ncommunication, transmission, processing, and storage of official U.S.\nGovernment or other authorized information only. All DoD interest computer\nsystems are subject to monitoring at all times to ensure proper functioning of\nequipment and systems including security devices and systems, to prevent\nunauthorized use and violations of statutes and security regulations, to deter\ncriminal activity, and for other similar purposes. Any user of a DoD interest\ncomputer system should be aware that any information placed in the system is\nsubject to monitoring and is not subject to any expectation of privacy. If\nmonitoring of this or any other DoD interest computer system reveals possible\nevidence of violation of criminal statutes, this evidence and any other related\ninformation, including identification information about the user, may be\nprovided to law enforcement officials. If monitoring of this or any other DoD\ninterest computer systems reveals violations of security regulations or\nunauthorized use, employees who violate security regulations or make\nunauthorized use of DoD interest computer systems are subject to appropriate\ndisciplinary action. Use of this or any other DoD interest computer system\nconstitutes consent to monitoring at all times.'
+    usgcb_default: '-- WARNING -- This system is for the use of authorized users only. Individuals\nusing this computer system without authority or in excess of their authority\nare subject to having all their activities on this system monitored and\nrecorded by system personnel. Anyone using this system expressly consents to\nsuch monitoring and is advised that if such monitoring reveals possible\nevidence of criminal activity system personal may provide the evidence of such\nmonitoring to law enforcement officials.'
diff --git a/linux_os/guide/system/accounts/accounts-banners/login_banner_text.var b/linux_os/guide/system/accounts/accounts-banners/login_banner_text.var
index a8a9e9337576..6a44de843411 100644
--- a/linux_os/guide/system/accounts/accounts-banners/login_banner_text.var
+++ b/linux_os/guide/system/accounts/accounts-banners/login_banner_text.var
@@ -1,21 +1,25 @@
 documentation_complete: true
 
-title: 'Login Banner Verbiage'
+title: Login Banner Verbiage Regular Expression
 
-description: |-
-    Enter an appropriate login banner for your organization. Please note that new lines must
-    be expressed by the '\n' character and special characters like parentheses and quotation marks must be escaped with '\\'.
+description: >-
+    Enter an appropriate login banner regular expression for your organization.
+    Using a regular expression is needed because some profiles (eg. STIG) allow multiple different banners.
+    This regular expression is used only in OVAL checks.
+    In remediations the login_banner_contents variable is used instead.
+    For information about how to generate banner regular expression for your tailoring files,
+    see: https://complianceascode.readthedocs.io/en/latest/manual/developer/05_tools_and_utilities.html#generating-login-banner-regular-expressions
 
 type: string
 
 operator: equals
 
-interactive: false
+interactive: true
 
 options:
 # CIS doesn't enforce any specific content for login banners, but doesn't allow technical information.
 # There is a generic content in case a remediation is necessary.
-# How to generate banner, check https://complianceascode.readthedocs.io/en/latest/manual/developer/05_tools_and_utilities.html#generating-login-banner-regular-expressions
+# How to generate banner regex: https://complianceascode.readthedocs.io/en/latest/manual/developer/05_tools_and_utilities.html#generating-login-banner-regular-expressions
     cis_banners: ^(Authorized[\s\n]+users[\s\n]+only\.[\s\n]+All[\s\n]+activity[\s\n]+may[\s\n]+be[\s\n]+monitored[\s\n]+and[\s\n]+reported\.|^(?!.*(\\|fedora|rhel|sle|ubuntu)).*)$
     cis_default: ^Authorized[\s\n]+users[\s\n]+only\.[\s\n]+All[\s\n]+activity[\s\n]+may[\s\n]+be[\s\n]+monitored[\s\n]+and[\s\n]+reported\.$
 # First banner in 'dod_banners' must be the banner for desktop, laptop, and other devices which accommodate banners of 1300 characters
diff --git a/linux_os/guide/system/accounts/accounts-banners/motd_banner_contents.var b/linux_os/guide/system/accounts/accounts-banners/motd_banner_contents.var
new file mode 100644
index 000000000000..07fab0040f52
--- /dev/null
+++ b/linux_os/guide/system/accounts/accounts-banners/motd_banner_contents.var
@@ -0,0 +1,25 @@
+documentation_complete: true
+
+title: 'MotD Banner Verbiage'
+
+description: >-
+    Enter an appropriate login banner text for your organization.
+    This variable is used only in remediations.
+    In OVAL checks a regular expression specified in the login_banner_text variable is used instead.
+    Using a regular expression is needed because some profiles (eg. STIG) allow multiple different banners.
+
+type: string
+
+operator: equals
+
+interactive: true
+
+options:
+    default: 'Authorized users only. All activity may be monitored and reported.'
+# CIS doesn't enforce any specific content for login banners, but doesn't allow technical information.
+# There is a generic content in case a remediation is necessary.
+    cis_default: 'Authorized users only. All activity may be monitored and reported.'
+    dod_default: 'You are accessing a U.S. Government (USG) Information System (IS) that is\nprovided for USG-authorized use only. By using this IS (which includes any\ndevice attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for\npurposes including, but not limited to, penetration testing, COMSEC monitoring,\nnetwork operations and defense, personnel misconduct (PM), law enforcement\n(LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject\nto routine monitoring, interception, and search, and may be disclosed or used\nfor any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls)\nto protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE\nor CI investigative searching or monitoring of the content of privileged\ncommunications, or work product, related to personal representation or services\nby attorneys, psychotherapists, or clergy, and their assistants. Such\ncommunications and work product are private and confidential. See User\nAgreement for details.'
+    dod_short: 'I''ve read & consent to terms in IS user agreem''t.'
+    dss_odaa_default: 'Use of this or any other DoD interest computer system constitutes consent to\nmonitoring at all times. This is a DoD interest computer system. All DoD\ninterest computer systems and related equipment are intended for the\ncommunication, transmission, processing, and storage of official U.S.\nGovernment or other authorized information only. All DoD interest computer\nsystems are subject to monitoring at all times to ensure proper functioning of\nequipment and systems including security devices and systems, to prevent\nunauthorized use and violations of statutes and security regulations, to deter\ncriminal activity, and for other similar purposes. Any user of a DoD interest\ncomputer system should be aware that any information placed in the system is\nsubject to monitoring and is not subject to any expectation of privacy. If\nmonitoring of this or any other DoD interest computer system reveals possible\nevidence of violation of criminal statutes, this evidence and any other related\ninformation, including identification information about the user, may be\nprovided to law enforcement officials. If monitoring of this or any other DoD\ninterest computer systems reveals violations of security regulations or\nunauthorized use, employees who violate security regulations or make\nunauthorized use of DoD interest computer systems are subject to appropriate\ndisciplinary action. Use of this or any other DoD interest computer system\nconstitutes consent to monitoring at all times.'
+    usgcb_default: '-- WARNING -- This system is for the use of authorized users only. Individuals\nusing this computer system without authority or in excess of their authority\nare subject to having all their activities on this system monitored and\nrecorded by system personnel. Anyone using this system expressly consents to\nsuch monitoring and is advised that if such monitoring reveals possible\nevidence of criminal activity system personal may provide the evidence of such\nmonitoring to law enforcement officials.'
diff --git a/linux_os/guide/system/accounts/accounts-banners/motd_banner_text.var b/linux_os/guide/system/accounts/accounts-banners/motd_banner_text.var
index 6c7fff79ebc7..8b6fdbfc7b2d 100644
--- a/linux_os/guide/system/accounts/accounts-banners/motd_banner_text.var
+++ b/linux_os/guide/system/accounts/accounts-banners/motd_banner_text.var
@@ -1,27 +1,31 @@
 documentation_complete: true
 
-title: 'MotD Banner Verbiage'
+title: Motd Banner Verbiage Regular Expression
 
-description: |-
-    Enter an appropriate login banner for your organization. Please note that new lines must
-    be expressed by the '\n' character and special characters like parentheses and quotation marks must be escaped with '\\'.
+description: >-
+    Enter an appropriate login banner regular expression for your organization.
+    Using a regular expression is needed because some profiles (eg. STIG) allow multiple different banners.
+    This regular expression is used only in OVAL checks.
+    In remediations the motd_banner_contents variable is used instead.
+    For information about how to generate banner regular expression for your tailoring files,
+    see: https://complianceascode.readthedocs.io/en/latest/manual/developer/05_tools_and_utilities.html#generating-login-banner-regular-expressions
 
 type: string
 
 operator: equals
 
-interactive: false
+interactive: true
 
 options:
 # CIS doesn't enforce any specific content for login banners, but doesn't allow technical information.
 # There is a generic content in case a remediation is necessary.
 # How to generate banner, check https://complianceascode.readthedocs.io/en/latest/manual/developer/05_tools_and_utilities.html#generating-login-banner-regular-expressions
-    cis_banners: ^(Authorized[\s\n]+uses[\s\n]+only\.[\s\n]+All[\s\n]+activity[\s\n]+may[\s\n]+be[\s\n]+monitored[\s\n]+and[\s\n]+reported\.|^(?!.*(\\|fedora|rhel|sle|ubuntu)).*)$
-    cis_default: ^Authorized[\s\n]+uses[\s\n]+only\.[\s\n]+All[\s\n]+activity[\s\n]+may[\s\n]+be[\s\n]+monitored[\s\n]+and[\s\n]+reported\.$
+    cis_banners: ^(Authorized[\s\n]+users[\s\n]+only\.[\s\n]+All[\s\n]+activity[\s\n]+may[\s\n]+be[\s\n]+monitored[\s\n]+and[\s\n]+reported\.|^(?!.*(\\|fedora|rhel|sle|ubuntu)).*)$
+    cis_default: ^Authorized[\s\n]+users[\s\n]+only\.[\s\n]+All[\s\n]+activity[\s\n]+may[\s\n]+be[\s\n]+monitored[\s\n]+and[\s\n]+reported\.$
 # First banner in 'dod_banners' must be the banner for desktop, laptop, and other devices which accommodate banners of 1300 characters
     dod_banners: ^(You[\s\n]+are[\s\n]+accessing[\s\n]+a[\s\n]+U\.S\.[\s\n]+Government[\s\n]+\(USG\)[\s\n]+Information[\s\n]+System[\s\n]+\(IS\)[\s\n]+that[\s\n]+is[\s\n]+provided[\s\n]+for[\s\n]+USG\-authorized[\s\n]+use[\s\n]+only\.[\s\n]+By[\s\n]+using[\s\n]+this[\s\n]+IS[\s\n]+\(which[\s\n]+includes[\s\n]+any[\s\n]+device[\s\n]+attached[\s\n]+to[\s\n]+this[\s\n]+IS\),[\s\n]+you[\s\n]+consent[\s\n]+to[\s\n]+the[\s\n]+following[\s\n]+conditions\:(?:[\n]+|(?:\\n)+)\-The[\s\n]+USG[\s\n]+routinely[\s\n]+intercepts[\s\n]+and[\s\n]+monitors[\s\n]+communications[\s\n]+on[\s\n]+this[\s\n]+IS[\s\n]+for[\s\n]+purposes[\s\n]+including,[\s\n]+but[\s\n]+not[\s\n]+limited[\s\n]+to,[\s\n]+penetration[\s\n]+testing,[\s\n]+COMSEC[\s\n]+monitoring,[\s\n]+network[\s\n]+operations[\s\n]+and[\s\n]+defense,[\s\n]+personnel[\s\n]+misconduct[\s\n]+\(PM\),[\s\n]+law[\s\n]+enforcement[\s\n]+\(LE\),[\s\n]+and[\s\n]+counterintelligence[\s\n]+\(CI\)[\s\n]+investigations\.(?:[\n]+|(?:\\n)+)\-At[\s\n]+any[\s\n]+time,[\s\n]+the[\s\n]+USG[\s\n]+may[\s\n]+inspect[\s\n]+and[\s\n]+seize[\s\n]+data[\s\n]+stored[\s\n]+on[\s\n]+this[\s\n]+IS\.(?:[\n]+|(?:\\n)+)\-Communications[\s\n]+using,[\s\n]+or[\s\n]+data[\s\n]+stored[\s\n]+on,[\s\n]+this[\s\n]+IS[\s\n]+are[\s\n]+not[\s\n]+private,[\s\n]+are[\s\n]+subject[\s\n]+to[\s\n]+routine[\s\n]+monitoring,[\s\n]+interception,[\s\n]+and[\s\n]+search,[\s\n]+and[\s\n]+may[\s\n]+be[\s\n]+disclosed[\s\n]+or[\s\n]+used[\s\n]+for[\s\n]+any[\s\n]+USG\-authorized[\s\n]+purpose\.(?:[\n]+|(?:\\n)+)\-This[\s\n]+IS[\s\n]+includes[\s\n]+security[\s\n]+measures[\s\n]+\(e\.g\.,[\s\n]+authentication[\s\n]+and[\s\n]+access[\s\n]+controls\)[\s\n]+to[\s\n]+protect[\s\n]+USG[\s\n]+interests\-\-not[\s\n]+for[\s\n]+your[\s\n]+personal[\s\n]+benefit[\s\n]+or[\s\n]+privacy\.(?:[\n]+|(?:\\n)+)\-Notwithstanding[\s\n]+the[\s\n]+above,[\s\n]+using[\s\n]+this[\s\n]+IS[\s\n]+does[\s\n]+not[\s\n]+constitute[\s\n]+consent[\s\n]+to[\s\n]+PM,[\s\n]+LE[\s\n]+or[\s\n]+CI[\s\n]+investigative[\s\n]+searching[\s\n]+or[\s\n]+monitoring[\s\n]+of[\s\n]+the[\s\n]+content[\s\n]+of[\s\n]+privileged[\s\n]+communications,[\s\n]+or[\s\n]+work[\s\n]+product,[\s\n]+related[\s\n]+to[\s\n]+personal[\s\n]+representation[\s\n]+or[\s\n]+services[\s\n]+by[\s\n]+attorneys,[\s\n]+psychotherapists,[\s\n]+or[\s\n]+clergy,[\s\n]+and[\s\n]+their[\s\n]+assistants\.[\s\n]+Such[\s\n]+communications[\s\n]+and[\s\n]+work[\s\n]+product[\s\n]+are[\s\n]+private[\s\n]+and[\s\n]+confidential\.[\s\n]+See[\s\n]+User[\s\n]+Agreement[\s\n]+for[\s\n]+details\.|I've[\s\n]+read[\s\n]+\&[\s\n]+consent[\s\n]+to[\s\n]+terms[\s\n]+in[\s\n]+IS[\s\n]+user[\s\n]+agreem't\.)$
     dod_default: ^You[\s\n]+are[\s\n]+accessing[\s\n]+a[\s\n]+U\.S\.[\s\n]+Government[\s\n]+\(USG\)[\s\n]+Information[\s\n]+System[\s\n]+\(IS\)[\s\n]+that[\s\n]+is[\s\n]+provided[\s\n]+for[\s\n]+USG\-authorized[\s\n]+use[\s\n]+only\.[\s\n]+By[\s\n]+using[\s\n]+this[\s\n]+IS[\s\n]+\(which[\s\n]+includes[\s\n]+any[\s\n]+device[\s\n]+attached[\s\n]+to[\s\n]+this[\s\n]+IS\),[\s\n]+you[\s\n]+consent[\s\n]+to[\s\n]+the[\s\n]+following[\s\n]+conditions\:(?:[\n]+|(?:\\n)+)\-The[\s\n]+USG[\s\n]+routinely[\s\n]+intercepts[\s\n]+and[\s\n]+monitors[\s\n]+communications[\s\n]+on[\s\n]+this[\s\n]+IS[\s\n]+for[\s\n]+purposes[\s\n]+including,[\s\n]+but[\s\n]+not[\s\n]+limited[\s\n]+to,[\s\n]+penetration[\s\n]+testing,[\s\n]+COMSEC[\s\n]+monitoring,[\s\n]+network[\s\n]+operations[\s\n]+and[\s\n]+defense,[\s\n]+personnel[\s\n]+misconduct[\s\n]+\(PM\),[\s\n]+law[\s\n]+enforcement[\s\n]+\(LE\),[\s\n]+and[\s\n]+counterintelligence[\s\n]+\(CI\)[\s\n]+investigations\.(?:[\n]+|(?:\\n)+)\-At[\s\n]+any[\s\n]+time,[\s\n]+the[\s\n]+USG[\s\n]+may[\s\n]+inspect[\s\n]+and[\s\n]+seize[\s\n]+data[\s\n]+stored[\s\n]+on[\s\n]+this[\s\n]+IS\.(?:[\n]+|(?:\\n)+)\-Communications[\s\n]+using,[\s\n]+or[\s\n]+data[\s\n]+stored[\s\n]+on,[\s\n]+this[\s\n]+IS[\s\n]+are[\s\n]+not[\s\n]+private,[\s\n]+are[\s\n]+subject[\s\n]+to[\s\n]+routine[\s\n]+monitoring,[\s\n]+interception,[\s\n]+and[\s\n]+search,[\s\n]+and[\s\n]+may[\s\n]+be[\s\n]+disclosed[\s\n]+or[\s\n]+used[\s\n]+for[\s\n]+any[\s\n]+USG\-authorized[\s\n]+purpose\.(?:[\n]+|(?:\\n)+)\-This[\s\n]+IS[\s\n]+includes[\s\n]+security[\s\n]+measures[\s\n]+\(e\.g\.,[\s\n]+authentication[\s\n]+and[\s\n]+access[\s\n]+controls\)[\s\n]+to[\s\n]+protect[\s\n]+USG[\s\n]+interests\-\-not[\s\n]+for[\s\n]+your[\s\n]+personal[\s\n]+benefit[\s\n]+or[\s\n]+privacy\.(?:[\n]+|(?:\\n)+)\-Notwithstanding[\s\n]+the[\s\n]+above,[\s\n]+using[\s\n]+this[\s\n]+IS[\s\n]+does[\s\n]+not[\s\n]+constitute[\s\n]+consent[\s\n]+to[\s\n]+PM,[\s\n]+LE[\s\n]+or[\s\n]+CI[\s\n]+investigative[\s\n]+searching[\s\n]+or[\s\n]+monitoring[\s\n]+of[\s\n]+the[\s\n]+content[\s\n]+of[\s\n]+privileged[\s\n]+communications,[\s\n]+or[\s\n]+work[\s\n]+product,[\s\n]+related[\s\n]+to[\s\n]+personal[\s\n]+representation[\s\n]+or[\s\n]+services[\s\n]+by[\s\n]+attorneys,[\s\n]+psychotherapists,[\s\n]+or[\s\n]+clergy,[\s\n]+and[\s\n]+their[\s\n]+assistants\.[\s\n]+Such[\s\n]+communications[\s\n]+and[\s\n]+work[\s\n]+product[\s\n]+are[\s\n]+private[\s\n]+and[\s\n]+confidential\.[\s\n]+See[\s\n]+User[\s\n]+Agreement[\s\n]+for[\s\n]+details\.$
     dod_short: ^I've[\s\n]+read[\s\n]+\&[\s\n]+consent[\s\n]+to[\s\n]+terms[\s\n]+in[\s\n]+IS[\s\n]+user[\s\n]+agreem't\.$
     dss_odaa_default: ^Use[\s\n]+of[\s\n]+this[\s\n]+or[\s\n]+any[\s\n]+other[\s\n]+DoD[\s\n]+interest[\s\n]+computer[\s\n]+system[\s\n]+constitutes[\s\n]+consent[\s\n]+to[\s\n]+monitoring[\s\n]+at[\s\n]+all[\s\n]+times\.[\s\n]+This[\s\n]+is[\s\n]+a[\s\n]+DoD[\s\n]+interest[\s\n]+computer[\s\n]+system\.[\s\n]+All[\s\n]+DoD[\s\n]+interest[\s\n]+computer[\s\n]+systems[\s\n]+and[\s\n]+related[\s\n]+equipment[\s\n]+are[\s\n]+intended[\s\n]+for[\s\n]+the[\s\n]+communication,[\s\n]+transmission,[\s\n]+processing,[\s\n]+and[\s\n]+storage[\s\n]+of[\s\n]+official[\s\n]+U\.S\.[\s\n]+Government[\s\n]+or[\s\n]+other[\s\n]+authorized[\s\n]+information[\s\n]+only\.[\s\n]+All[\s\n]+DoD[\s\n]+interest[\s\n]+computer[\s\n]+systems[\s\n]+are[\s\n]+subject[\s\n]+to[\s\n]+monitoring[\s\n]+at[\s\n]+all[\s\n]+times[\s\n]+to[\s\n]+ensure[\s\n]+proper[\s\n]+functioning[\s\n]+of[\s\n]+equipment[\s\n]+and[\s\n]+systems[\s\n]+including[\s\n]+security[\s\n]+devices[\s\n]+and[\s\n]+systems,[\s\n]+to[\s\n]+prevent[\s\n]+unauthorized[\s\n]+use[\s\n]+and[\s\n]+violations[\s\n]+of[\s\n]+statutes[\s\n]+and[\s\n]+security[\s\n]+regulations,[\s\n]+to[\s\n]+deter[\s\n]+criminal[\s\n]+activity,[\s\n]+and[\s\n]+for[\s\n]+other[\s\n]+similar[\s\n]+purposes\.[\s\n]+Any[\s\n]+user[\s\n]+of[\s\n]+a[\s\n]+DoD[\s\n]+interest[\s\n]+computer[\s\n]+system[\s\n]+should[\s\n]+be[\s\n]+aware[\s\n]+that[\s\n]+any[\s\n]+information[\s\n]+placed[\s\n]+in[\s\n]+the[\s\n]+system[\s\n]+is[\s\n]+subject[\s\n]+to[\s\n]+monitoring[\s\n]+and[\s\n]+is[\s\n]+not[\s\n]+subject[\s\n]+to[\s\n]+any[\s\n]+expectation[\s\n]+of[\s\n]+privacy\.[\s\n]+If[\s\n]+monitoring[\s\n]+of[\s\n]+this[\s\n]+or[\s\n]+any[\s\n]+other[\s\n]+DoD[\s\n]+interest[\s\n]+computer[\s\n]+system[\s\n]+reveals[\s\n]+possible[\s\n]+evidence[\s\n]+of[\s\n]+violation[\s\n]+of[\s\n]+criminal[\s\n]+statutes,[\s\n]+this[\s\n]+evidence[\s\n]+and[\s\n]+any[\s\n]+other[\s\n]+related[\s\n]+information,[\s\n]+including[\s\n]+identification[\s\n]+information[\s\n]+about[\s\n]+the[\s\n]+user,[\s\n]+may[\s\n]+be[\s\n]+provided[\s\n]+to[\s\n]+law[\s\n]+enforcement[\s\n]+officials\.[\s\n]+If[\s\n]+monitoring[\s\n]+of[\s\n]+this[\s\n]+or[\s\n]+any[\s\n]+other[\s\n]+DoD[\s\n]+interest[\s\n]+computer[\s\n]+systems[\s\n]+reveals[\s\n]+violations[\s\n]+of[\s\n]+security[\s\n]+regulations[\s\n]+or[\s\n]+unauthorized[\s\n]+use,[\s\n]+employees[\s\n]+who[\s\n]+violate[\s\n]+security[\s\n]+regulations[\s\n]+or[\s\n]+make[\s\n]+unauthorized[\s\n]+use[\s\n]+of[\s\n]+DoD[\s\n]+interest[\s\n]+computer[\s\n]+systems[\s\n]+are[\s\n]+subject[\s\n]+to[\s\n]+appropriate[\s\n]+disciplinary[\s\n]+action\.[\s\n]+Use[\s\n]+of[\s\n]+this[\s\n]+or[\s\n]+any[\s\n]+other[\s\n]+DoD[\s\n]+interest[\s\n]+computer[\s\n]+system[\s\n]+constitutes[\s\n]+consent[\s\n]+to[\s\n]+monitoring[\s\n]+at[\s\n]+all[\s\n]+times\.$
     usgcb_default: ^\-\-[\s\n]+WARNING[\s\n]+\-\-[\s\n]+This[\s\n]+system[\s\n]+is[\s\n]+for[\s\n]+the[\s\n]+use[\s\n]+of[\s\n]+authorized[\s\n]+users[\s\n]+only\.[\s\n]+Individuals[\s\n]+using[\s\n]+this[\s\n]+computer[\s\n]+system[\s\n]+without[\s\n]+authority[\s\n]+or[\s\n]+in[\s\n]+excess[\s\n]+of[\s\n]+their[\s\n]+authority[\s\n]+are[\s\n]+subject[\s\n]+to[\s\n]+having[\s\n]+all[\s\n]+their[\s\n]+activities[\s\n]+on[\s\n]+this[\s\n]+system[\s\n]+monitored[\s\n]+and[\s\n]+recorded[\s\n]+by[\s\n]+system[\s\n]+personnel\.[\s\n]+Anyone[\s\n]+using[\s\n]+this[\s\n]+system[\s\n]+expressly[\s\n]+consents[\s\n]+to[\s\n]+such[\s\n]+monitoring[\s\n]+and[\s\n]+is[\s\n]+advised[\s\n]+that[\s\n]+if[\s\n]+such[\s\n]+monitoring[\s\n]+reveals[\s\n]+possible[\s\n]+evidence[\s\n]+of[\s\n]+criminal[\s\n]+activity[\s\n]+system[\s\n]+personal[\s\n]+may[\s\n]+provide[\s\n]+the[\s\n]+evidence[\s\n]+of[\s\n]+such[\s\n]+monitoring[\s\n]+to[\s\n]+law[\s\n]+enforcement[\s\n]+officials\.$
-    default: ^Authorized[\s\n]+uses[\s\n]+only\.[\s\n]+All[\s\n]+activity[\s\n]+may[\s\n]+be[\s\n]+monitored[\s\n]+and[\s\n]+reported\.$
+    default: ^Authorized[\s\n]+users[\s\n]+only\.[\s\n]+All[\s\n]+activity[\s\n]+may[\s\n]+be[\s\n]+monitored[\s\n]+and[\s\n]+reported\.$
diff --git a/linux_os/guide/system/accounts/accounts-banners/remote_login_banner_contents.var b/linux_os/guide/system/accounts/accounts-banners/remote_login_banner_contents.var
new file mode 100644
index 000000000000..d2b77661b666
--- /dev/null
+++ b/linux_os/guide/system/accounts/accounts-banners/remote_login_banner_contents.var
@@ -0,0 +1,25 @@
+documentation_complete: true
+
+title: 'Remote Login Banner Verbiage'
+
+description: >-
+    Enter an appropriate login banner text for your organization.
+    This variable is used only in remediations.
+    In OVAL checks a regular expression specified in the remote_login_banner_text variable is used instead.
+    Using a regular expression is needed because some profiles (eg. STIG) allow multiple different banners.
+
+type: string
+
+operator: equals
+
+interactive: true
+
+options:
+    default: 'Authorized users only. All activity may be monitored and reported.'
+# CIS doesn't enforce any specific content for login banners, but doesn't allow technical information.
+# There is a generic content in case a remediation is necessary.
+    cis_default: 'Authorized users only. All activity may be monitored and reported.'
+    dod_default: 'You are accessing a U.S. Government (USG) Information System (IS) that is\nprovided for USG-authorized use only. By using this IS (which includes any\ndevice attached to this IS), you consent to the following conditions:\n\n-The USG routinely intercepts and monitors communications on this IS for\npurposes including, but not limited to, penetration testing, COMSEC monitoring,\nnetwork operations and defense, personnel misconduct (PM), law enforcement\n(LE), and counterintelligence (CI) investigations.\n\n-At any time, the USG may inspect and seize data stored on this IS.\n\n-Communications using, or data stored on, this IS are not private, are subject\nto routine monitoring, interception, and search, and may be disclosed or used\nfor any USG-authorized purpose.\n\n-This IS includes security measures (e.g., authentication and access controls)\nto protect USG interests--not for your personal benefit or privacy.\n\n-Notwithstanding the above, using this IS does not constitute consent to PM, LE\nor CI investigative searching or monitoring of the content of privileged\ncommunications, or work product, related to personal representation or services\nby attorneys, psychotherapists, or clergy, and their assistants. Such\ncommunications and work product are private and confidential. See User\nAgreement for details.'
+    dod_short: 'I''ve read & consent to terms in IS user agreem''t.'
+    dss_odaa_default: 'Use of this or any other DoD interest computer system constitutes consent to\nmonitoring at all times. This is a DoD interest computer system. All DoD\ninterest computer systems and related equipment are intended for the\ncommunication, transmission, processing, and storage of official U.S.\nGovernment or other authorized information only. All DoD interest computer\nsystems are subject to monitoring at all times to ensure proper functioning of\nequipment and systems including security devices and systems, to prevent\nunauthorized use and violations of statutes and security regulations, to deter\ncriminal activity, and for other similar purposes. Any user of a DoD interest\ncomputer system should be aware that any information placed in the system is\nsubject to monitoring and is not subject to any expectation of privacy. If\nmonitoring of this or any other DoD interest computer system reveals possible\nevidence of violation of criminal statutes, this evidence and any other related\ninformation, including identification information about the user, may be\nprovided to law enforcement officials. If monitoring of this or any other DoD\ninterest computer systems reveals violations of security regulations or\nunauthorized use, employees who violate security regulations or make\nunauthorized use of DoD interest computer systems are subject to appropriate\ndisciplinary action. Use of this or any other DoD interest computer system\nconstitutes consent to monitoring at all times.'
+    usgcb_default: '-- WARNING -- This system is for the use of authorized users only. Individuals\nusing this computer system without authority or in excess of their authority\nare subject to having all their activities on this system monitored and\nrecorded by system personnel. Anyone using this system expressly consents to\nsuch monitoring and is advised that if such monitoring reveals possible\nevidence of criminal activity system personal may provide the evidence of such\nmonitoring to law enforcement officials.'
diff --git a/linux_os/guide/system/accounts/accounts-banners/remote_login_banner_text.var b/linux_os/guide/system/accounts/accounts-banners/remote_login_banner_text.var
index 5f64f4f4af63..a4e24de44962 100644
--- a/linux_os/guide/system/accounts/accounts-banners/remote_login_banner_text.var
+++ b/linux_os/guide/system/accounts/accounts-banners/remote_login_banner_text.var
@@ -1,28 +1,31 @@
 documentation_complete: true
 
-title: 'Remote Login Banner Verbiage'
+title: Remote Login Banner Verbiage Regular Expression
 
-description: |-
-    Enter an appropriate login banner for your organization. Please note that new lines must
-    be expressed by the '\n' character and special characters like parentheses and quotation marks must be escaped with '\\'.
+description: >-
+    Enter an appropriate login banner regular expression for your organization.
+    Using a regular expression is needed because some profiles (eg. STIG) allow multiple different banners.
+    This regular expression is used only in OVAL checks.
+    In remediations the remote_login_banner_contents variable is used instead.
+    For information about how to generate banner regular expression for your tailoring files,
+    see: https://complianceascode.readthedocs.io/en/latest/manual/developer/05_tools_and_utilities.html#generating-login-banner-regular-expressions
 
 type: string
 
 operator: equals
 
-interactive: false
-
+interactive: true
 
 options:
 # CIS doesn't enforce any specific content for login banners, but doesn't allow technical information.
 # There is a generic content in case a remediation is necessary.
 # How to generate banner, check https://complianceascode.readthedocs.io/en/latest/manual/developer/05_tools_and_utilities.html#generating-login-banner-regular-expressions
-    cis_banners: ^(Authorized[\s\n]+uses[\s\n]+only\.[\s\n]+All[\s\n]+activity[\s\n]+may[\s\n]+be[\s\n]+monitored[\s\n]+and[\s\n]+reported\.|^(?!.*(\\|fedora|rhel|sle|ubuntu)).*)$
-    cis_default: ^Authorized[\s\n]+uses[\s\n]+only\.[\s\n]+All[\s\n]+activity[\s\n]+may[\s\n]+be[\s\n]+monitored[\s\n]+and[\s\n]+reported\.$
+    cis_banners: ^(Authorized[\s\n]+users[\s\n]+only\.[\s\n]+All[\s\n]+activity[\s\n]+may[\s\n]+be[\s\n]+monitored[\s\n]+and[\s\n]+reported\.|^(?!.*(\\|fedora|rhel|sle|ubuntu)).*)$
+    cis_default: ^Authorized[\s\n]+users[\s\n]+only\.[\s\n]+All[\s\n]+activity[\s\n]+may[\s\n]+be[\s\n]+monitored[\s\n]+and[\s\n]+reported\.$
 # First banner in 'dod_banners' must be the banner for desktop, laptop, and other devices which accommodate banners of 1300 characters
     dod_banners: ^(You[\s\n]+are[\s\n]+accessing[\s\n]+a[\s\n]+U\.S\.[\s\n]+Government[\s\n]+\(USG\)[\s\n]+Information[\s\n]+System[\s\n]+\(IS\)[\s\n]+that[\s\n]+is[\s\n]+provided[\s\n]+for[\s\n]+USG\-authorized[\s\n]+use[\s\n]+only\.[\s\n]+By[\s\n]+using[\s\n]+this[\s\n]+IS[\s\n]+\(which[\s\n]+includes[\s\n]+any[\s\n]+device[\s\n]+attached[\s\n]+to[\s\n]+this[\s\n]+IS\),[\s\n]+you[\s\n]+consent[\s\n]+to[\s\n]+the[\s\n]+following[\s\n]+conditions\:(?:[\n]+|(?:\\n)+)\-The[\s\n]+USG[\s\n]+routinely[\s\n]+intercepts[\s\n]+and[\s\n]+monitors[\s\n]+communications[\s\n]+on[\s\n]+this[\s\n]+IS[\s\n]+for[\s\n]+purposes[\s\n]+including,[\s\n]+but[\s\n]+not[\s\n]+limited[\s\n]+to,[\s\n]+penetration[\s\n]+testing,[\s\n]+COMSEC[\s\n]+monitoring,[\s\n]+network[\s\n]+operations[\s\n]+and[\s\n]+defense,[\s\n]+personnel[\s\n]+misconduct[\s\n]+\(PM\),[\s\n]+law[\s\n]+enforcement[\s\n]+\(LE\),[\s\n]+and[\s\n]+counterintelligence[\s\n]+\(CI\)[\s\n]+investigations\.(?:[\n]+|(?:\\n)+)\-At[\s\n]+any[\s\n]+time,[\s\n]+the[\s\n]+USG[\s\n]+may[\s\n]+inspect[\s\n]+and[\s\n]+seize[\s\n]+data[\s\n]+stored[\s\n]+on[\s\n]+this[\s\n]+IS\.(?:[\n]+|(?:\\n)+)\-Communications[\s\n]+using,[\s\n]+or[\s\n]+data[\s\n]+stored[\s\n]+on,[\s\n]+this[\s\n]+IS[\s\n]+are[\s\n]+not[\s\n]+private,[\s\n]+are[\s\n]+subject[\s\n]+to[\s\n]+routine[\s\n]+monitoring,[\s\n]+interception,[\s\n]+and[\s\n]+search,[\s\n]+and[\s\n]+may[\s\n]+be[\s\n]+disclosed[\s\n]+or[\s\n]+used[\s\n]+for[\s\n]+any[\s\n]+USG\-authorized[\s\n]+purpose\.(?:[\n]+|(?:\\n)+)\-This[\s\n]+IS[\s\n]+includes[\s\n]+security[\s\n]+measures[\s\n]+\(e\.g\.,[\s\n]+authentication[\s\n]+and[\s\n]+access[\s\n]+controls\)[\s\n]+to[\s\n]+protect[\s\n]+USG[\s\n]+interests\-\-not[\s\n]+for[\s\n]+your[\s\n]+personal[\s\n]+benefit[\s\n]+or[\s\n]+privacy\.(?:[\n]+|(?:\\n)+)\-Notwithstanding[\s\n]+the[\s\n]+above,[\s\n]+using[\s\n]+this[\s\n]+IS[\s\n]+does[\s\n]+not[\s\n]+constitute[\s\n]+consent[\s\n]+to[\s\n]+PM,[\s\n]+LE[\s\n]+or[\s\n]+CI[\s\n]+investigative[\s\n]+searching[\s\n]+or[\s\n]+monitoring[\s\n]+of[\s\n]+the[\s\n]+content[\s\n]+of[\s\n]+privileged[\s\n]+communications,[\s\n]+or[\s\n]+work[\s\n]+product,[\s\n]+related[\s\n]+to[\s\n]+personal[\s\n]+representation[\s\n]+or[\s\n]+services[\s\n]+by[\s\n]+attorneys,[\s\n]+psychotherapists,[\s\n]+or[\s\n]+clergy,[\s\n]+and[\s\n]+their[\s\n]+assistants\.[\s\n]+Such[\s\n]+communications[\s\n]+and[\s\n]+work[\s\n]+product[\s\n]+are[\s\n]+private[\s\n]+and[\s\n]+confidential\.[\s\n]+See[\s\n]+User[\s\n]+Agreement[\s\n]+for[\s\n]+details\.|I've[\s\n]+read[\s\n]+\&[\s\n]+consent[\s\n]+to[\s\n]+terms[\s\n]+in[\s\n]+IS[\s\n]+user[\s\n]+agreem't\.)$
     dod_default: ^You[\s\n]+are[\s\n]+accessing[\s\n]+a[\s\n]+U\.S\.[\s\n]+Government[\s\n]+\(USG\)[\s\n]+Information[\s\n]+System[\s\n]+\(IS\)[\s\n]+that[\s\n]+is[\s\n]+provided[\s\n]+for[\s\n]+USG\-authorized[\s\n]+use[\s\n]+only\.[\s\n]+By[\s\n]+using[\s\n]+this[\s\n]+IS[\s\n]+\(which[\s\n]+includes[\s\n]+any[\s\n]+device[\s\n]+attached[\s\n]+to[\s\n]+this[\s\n]+IS\),[\s\n]+you[\s\n]+consent[\s\n]+to[\s\n]+the[\s\n]+following[\s\n]+conditions\:(?:[\n]+|(?:\\n)+)\-The[\s\n]+USG[\s\n]+routinely[\s\n]+intercepts[\s\n]+and[\s\n]+monitors[\s\n]+communications[\s\n]+on[\s\n]+this[\s\n]+IS[\s\n]+for[\s\n]+purposes[\s\n]+including,[\s\n]+but[\s\n]+not[\s\n]+limited[\s\n]+to,[\s\n]+penetration[\s\n]+testing,[\s\n]+COMSEC[\s\n]+monitoring,[\s\n]+network[\s\n]+operations[\s\n]+and[\s\n]+defense,[\s\n]+personnel[\s\n]+misconduct[\s\n]+\(PM\),[\s\n]+law[\s\n]+enforcement[\s\n]+\(LE\),[\s\n]+and[\s\n]+counterintelligence[\s\n]+\(CI\)[\s\n]+investigations\.(?:[\n]+|(?:\\n)+)\-At[\s\n]+any[\s\n]+time,[\s\n]+the[\s\n]+USG[\s\n]+may[\s\n]+inspect[\s\n]+and[\s\n]+seize[\s\n]+data[\s\n]+stored[\s\n]+on[\s\n]+this[\s\n]+IS\.(?:[\n]+|(?:\\n)+)\-Communications[\s\n]+using,[\s\n]+or[\s\n]+data[\s\n]+stored[\s\n]+on,[\s\n]+this[\s\n]+IS[\s\n]+are[\s\n]+not[\s\n]+private,[\s\n]+are[\s\n]+subject[\s\n]+to[\s\n]+routine[\s\n]+monitoring,[\s\n]+interception,[\s\n]+and[\s\n]+search,[\s\n]+and[\s\n]+may[\s\n]+be[\s\n]+disclosed[\s\n]+or[\s\n]+used[\s\n]+for[\s\n]+any[\s\n]+USG\-authorized[\s\n]+purpose\.(?:[\n]+|(?:\\n)+)\-This[\s\n]+IS[\s\n]+includes[\s\n]+security[\s\n]+measures[\s\n]+\(e\.g\.,[\s\n]+authentication[\s\n]+and[\s\n]+access[\s\n]+controls\)[\s\n]+to[\s\n]+protect[\s\n]+USG[\s\n]+interests\-\-not[\s\n]+for[\s\n]+your[\s\n]+personal[\s\n]+benefit[\s\n]+or[\s\n]+privacy\.(?:[\n]+|(?:\\n)+)\-Notwithstanding[\s\n]+the[\s\n]+above,[\s\n]+using[\s\n]+this[\s\n]+IS[\s\n]+does[\s\n]+not[\s\n]+constitute[\s\n]+consent[\s\n]+to[\s\n]+PM,[\s\n]+LE[\s\n]+or[\s\n]+CI[\s\n]+investigative[\s\n]+searching[\s\n]+or[\s\n]+monitoring[\s\n]+of[\s\n]+the[\s\n]+content[\s\n]+of[\s\n]+privileged[\s\n]+communications,[\s\n]+or[\s\n]+work[\s\n]+product,[\s\n]+related[\s\n]+to[\s\n]+personal[\s\n]+representation[\s\n]+or[\s\n]+services[\s\n]+by[\s\n]+attorneys,[\s\n]+psychotherapists,[\s\n]+or[\s\n]+clergy,[\s\n]+and[\s\n]+their[\s\n]+assistants\.[\s\n]+Such[\s\n]+communications[\s\n]+and[\s\n]+work[\s\n]+product[\s\n]+are[\s\n]+private[\s\n]+and[\s\n]+confidential\.[\s\n]+See[\s\n]+User[\s\n]+Agreement[\s\n]+for[\s\n]+details\.$
     dod_short: ^I've[\s\n]+read[\s\n]+\&[\s\n]+consent[\s\n]+to[\s\n]+terms[\s\n]+in[\s\n]+IS[\s\n]+user[\s\n]+agreem't\.$
     dss_odaa_default: ^Use[\s\n]+of[\s\n]+this[\s\n]+or[\s\n]+any[\s\n]+other[\s\n]+DoD[\s\n]+interest[\s\n]+computer[\s\n]+system[\s\n]+constitutes[\s\n]+consent[\s\n]+to[\s\n]+monitoring[\s\n]+at[\s\n]+all[\s\n]+times\.[\s\n]+This[\s\n]+is[\s\n]+a[\s\n]+DoD[\s\n]+interest[\s\n]+computer[\s\n]+system\.[\s\n]+All[\s\n]+DoD[\s\n]+interest[\s\n]+computer[\s\n]+systems[\s\n]+and[\s\n]+related[\s\n]+equipment[\s\n]+are[\s\n]+intended[\s\n]+for[\s\n]+the[\s\n]+communication,[\s\n]+transmission,[\s\n]+processing,[\s\n]+and[\s\n]+storage[\s\n]+of[\s\n]+official[\s\n]+U\.S\.[\s\n]+Government[\s\n]+or[\s\n]+other[\s\n]+authorized[\s\n]+information[\s\n]+only\.[\s\n]+All[\s\n]+DoD[\s\n]+interest[\s\n]+computer[\s\n]+systems[\s\n]+are[\s\n]+subject[\s\n]+to[\s\n]+monitoring[\s\n]+at[\s\n]+all[\s\n]+times[\s\n]+to[\s\n]+ensure[\s\n]+proper[\s\n]+functioning[\s\n]+of[\s\n]+equipment[\s\n]+and[\s\n]+systems[\s\n]+including[\s\n]+security[\s\n]+devices[\s\n]+and[\s\n]+systems,[\s\n]+to[\s\n]+prevent[\s\n]+unauthorized[\s\n]+use[\s\n]+and[\s\n]+violations[\s\n]+of[\s\n]+statutes[\s\n]+and[\s\n]+security[\s\n]+regulations,[\s\n]+to[\s\n]+deter[\s\n]+criminal[\s\n]+activity,[\s\n]+and[\s\n]+for[\s\n]+other[\s\n]+similar[\s\n]+purposes\.[\s\n]+Any[\s\n]+user[\s\n]+of[\s\n]+a[\s\n]+DoD[\s\n]+interest[\s\n]+computer[\s\n]+system[\s\n]+should[\s\n]+be[\s\n]+aware[\s\n]+that[\s\n]+any[\s\n]+information[\s\n]+placed[\s\n]+in[\s\n]+the[\s\n]+system[\s\n]+is[\s\n]+subject[\s\n]+to[\s\n]+monitoring[\s\n]+and[\s\n]+is[\s\n]+not[\s\n]+subject[\s\n]+to[\s\n]+any[\s\n]+expectation[\s\n]+of[\s\n]+privacy\.[\s\n]+If[\s\n]+monitoring[\s\n]+of[\s\n]+this[\s\n]+or[\s\n]+any[\s\n]+other[\s\n]+DoD[\s\n]+interest[\s\n]+computer[\s\n]+system[\s\n]+reveals[\s\n]+possible[\s\n]+evidence[\s\n]+of[\s\n]+violation[\s\n]+of[\s\n]+criminal[\s\n]+statutes,[\s\n]+this[\s\n]+evidence[\s\n]+and[\s\n]+any[\s\n]+other[\s\n]+related[\s\n]+information,[\s\n]+including[\s\n]+identification[\s\n]+information[\s\n]+about[\s\n]+the[\s\n]+user,[\s\n]+may[\s\n]+be[\s\n]+provided[\s\n]+to[\s\n]+law[\s\n]+enforcement[\s\n]+officials\.[\s\n]+If[\s\n]+monitoring[\s\n]+of[\s\n]+this[\s\n]+or[\s\n]+any[\s\n]+other[\s\n]+DoD[\s\n]+interest[\s\n]+computer[\s\n]+systems[\s\n]+reveals[\s\n]+violations[\s\n]+of[\s\n]+security[\s\n]+regulations[\s\n]+or[\s\n]+unauthorized[\s\n]+use,[\s\n]+employees[\s\n]+who[\s\n]+violate[\s\n]+security[\s\n]+regulations[\s\n]+or[\s\n]+make[\s\n]+unauthorized[\s\n]+use[\s\n]+of[\s\n]+DoD[\s\n]+interest[\s\n]+computer[\s\n]+systems[\s\n]+are[\s\n]+subject[\s\n]+to[\s\n]+appropriate[\s\n]+disciplinary[\s\n]+action\.[\s\n]+Use[\s\n]+of[\s\n]+this[\s\n]+or[\s\n]+any[\s\n]+other[\s\n]+DoD[\s\n]+interest[\s\n]+computer[\s\n]+system[\s\n]+constitutes[\s\n]+consent[\s\n]+to[\s\n]+monitoring[\s\n]+at[\s\n]+all[\s\n]+times\.$
     usgcb_default: ^\-\-[\s\n]+WARNING[\s\n]+\-\-[\s\n]+This[\s\n]+system[\s\n]+is[\s\n]+for[\s\n]+the[\s\n]+use[\s\n]+of[\s\n]+authorized[\s\n]+users[\s\n]+only\.[\s\n]+Individuals[\s\n]+using[\s\n]+this[\s\n]+computer[\s\n]+system[\s\n]+without[\s\n]+authority[\s\n]+or[\s\n]+in[\s\n]+excess[\s\n]+of[\s\n]+their[\s\n]+authority[\s\n]+are[\s\n]+subject[\s\n]+to[\s\n]+having[\s\n]+all[\s\n]+their[\s\n]+activities[\s\n]+on[\s\n]+this[\s\n]+system[\s\n]+monitored[\s\n]+and[\s\n]+recorded[\s\n]+by[\s\n]+system[\s\n]+personnel\.[\s\n]+Anyone[\s\n]+using[\s\n]+this[\s\n]+system[\s\n]+expressly[\s\n]+consents[\s\n]+to[\s\n]+such[\s\n]+monitoring[\s\n]+and[\s\n]+is[\s\n]+advised[\s\n]+that[\s\n]+if[\s\n]+such[\s\n]+monitoring[\s\n]+reveals[\s\n]+possible[\s\n]+evidence[\s\n]+of[\s\n]+criminal[\s\n]+activity[\s\n]+system[\s\n]+personal[\s\n]+may[\s\n]+provide[\s\n]+the[\s\n]+evidence[\s\n]+of[\s\n]+such[\s\n]+monitoring[\s\n]+to[\s\n]+law[\s\n]+enforcement[\s\n]+officials\.$
-    default: ^Authorized[\s\n]+uses[\s\n]+only\.[\s\n]+All[\s\n]+activity[\s\n]+may[\s\n]+be[\s\n]+monitored[\s\n]+and[\s\n]+reported\.$
+    default: ^Authorized[\s\n]+users[\s\n]+only\.[\s\n]+All[\s\n]+activity[\s\n]+may[\s\n]+be[\s\n]+monitored[\s\n]+and[\s\n]+reported\.$
diff --git a/linux_os/guide/system/accounts/accounts-pam/enable_pam_namespace/rule.yml b/linux_os/guide/system/accounts/accounts-pam/enable_pam_namespace/rule.yml
index 2c6f3d6d375c..da5b0d596ce0 100644
--- a/linux_os/guide/system/accounts/accounts-pam/enable_pam_namespace/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-pam/enable_pam_namespace/rule.yml
@@ -22,7 +22,7 @@ identifiers:
   cce@rhel10: CCE-90739-4
   cce@sle12: CCE-91505-8
   cce@sle15: CCE-91196-6
-
+  cce@sle16: CCE-96060-9
 
 ocil_clause: |-
     pam_namespace.so is not required or is commented out
diff --git a/linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_password_pam_pwhistory_remember/rule.yml b/linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_password_pam_pwhistory_remember/rule.yml
index 6ddeca87203b..c2b84d63960f 100644
--- a/linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_password_pam_pwhistory_remember/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_password_pam_pwhistory_remember/rule.yml
@@ -21,6 +21,7 @@ severity: medium
 identifiers:
     cce@sle12: CCE-83173-5
     cce@sle15: CCE-91398-8
+    cce@sle16: CCE-95993-2
     cce@slmicro5: CCE-94082-5
     cce@slmicro6: CCE-94641-8
 
diff --git a/linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_deny/rule.yml b/linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_deny/rule.yml
index 7212a67f9415..6f472912698a 100644
--- a/linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_deny/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_deny/rule.yml
@@ -30,6 +30,7 @@ identifiers:
     cce@rhel9: CCE-83587-6
     cce@rhel10: CCE-87388-5
     cce@sle15: CCE-85842-3
+    cce@sle16: CCE-96664-8
 
 references:
     cis-csc: 1,12,15,16
diff --git a/linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_deny_root/rule.yml b/linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_deny_root/rule.yml
index d836a170849b..fd7925a755f1 100644
--- a/linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_deny_root/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_deny_root/rule.yml
@@ -25,6 +25,7 @@ identifiers:
     cce@rhel10: CCE-87975-9
     cce@sle12: CCE-91468-9
     cce@sle15: CCE-91171-9
+    cce@sle16: CCE-96663-0
 
 references:
     cis-csc: 1,12,15,16
diff --git a/linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_interval/rule.yml b/linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_interval/rule.yml
index e012ebd6b3f3..8bad63e27c08 100644
--- a/linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_interval/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_interval/rule.yml
@@ -29,6 +29,7 @@ identifiers:
     cce@rhel9: CCE-83583-5
     cce@rhel10: CCE-86672-3
     cce@sle15: CCE-91169-3
+    cce@sle16: CCE-96665-5
 
 references:
     cis-csc: 1,12,15,16
diff --git a/linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_unlock_time/rule.yml b/linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_unlock_time/rule.yml
index bf6799d6f0f4..faa85597accf 100644
--- a/linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_unlock_time/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_unlock_time/rule.yml
@@ -31,6 +31,7 @@ identifiers:
     cce@rhel9: CCE-83588-4
     cce@rhel10: CCE-89250-5
     cce@sle15: CCE-85841-5
+    cce@sle16: CCE-96666-3
 
 references:
     cis-csc: 1,12,15,16
diff --git a/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pamcracklib/cracklib_accounts_password_pam_ocredit/rule.yml b/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pamcracklib/cracklib_accounts_password_pam_ocredit/rule.yml
index b8086a960a02..06794ce968d2 100644
--- a/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pamcracklib/cracklib_accounts_password_pam_ocredit/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pamcracklib/cracklib_accounts_password_pam_ocredit/rule.yml
@@ -21,6 +21,7 @@ severity: medium
 identifiers:
     cce@sle12: CCE-83169-3
     cce@sle15: CCE-85574-2
+    cce@sle16: CCE-96246-4
     cce@slmicro5: CCE-93767-2
     cce@slmicro6: CCE-94701-0
 
diff --git a/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pamcracklib/cracklib_accounts_password_pam_ucredit/rule.yml b/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pamcracklib/cracklib_accounts_password_pam_ucredit/rule.yml
index 780f603045c1..f480c5d0113f 100644
--- a/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pamcracklib/cracklib_accounts_password_pam_ucredit/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pamcracklib/cracklib_accounts_password_pam_ucredit/rule.yml
@@ -21,6 +21,7 @@ severity: medium
 identifiers:
     cce@sle12: CCE-83166-9
     cce@sle15: CCE-85675-7
+    cce@sle16: CCE-96294-4
     cce@slmicro5: CCE-93762-3
     cce@slmicro6: CCE-94637-6
 
diff --git a/linux_os/guide/system/accounts/accounts-pam/set_password_hashing_algorithm/set_password_hashing_min_rounds_logindefs/rule.yml b/linux_os/guide/system/accounts/accounts-pam/set_password_hashing_algorithm/set_password_hashing_min_rounds_logindefs/rule.yml
index f1bae24320ee..6c728f535085 100644
--- a/linux_os/guide/system/accounts/accounts-pam/set_password_hashing_algorithm/set_password_hashing_min_rounds_logindefs/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-pam/set_password_hashing_algorithm/set_password_hashing_min_rounds_logindefs/rule.yml
@@ -29,6 +29,7 @@ identifiers:
     cce@rhel10: CCE-90508-3
     cce@sle12: CCE-83171-9
     cce@sle15: CCE-85567-6
+    cce@sle16: CCE-95736-5
     cce@slmicro5: CCE-93682-3
     cce@slmicro6: CCE-94660-8
 
diff --git a/linux_os/guide/system/accounts/accounts-physical/logind_session_timeout/ansible/shared.yml b/linux_os/guide/system/accounts/accounts-physical/logind_session_timeout/ansible/shared.yml
index 13dbf9ec612f..bb1894435ae8 100644
--- a/linux_os/guide/system/accounts/accounts-physical/logind_session_timeout/ansible/shared.yml
+++ b/linux_os/guide/system/accounts/accounts-physical/logind_session_timeout/ansible/shared.yml
@@ -6,7 +6,22 @@
 
 {{{ ansible_instantiate_variables("var_logind_session_timeout") }}}
 
-{{% if product in ["sle15", "sle16"] %}}
+- name: Remove StopIdleSessionSec from main config
+  ansible.builtin.lineinfile:
+    path: /etc/systemd/logind.conf
+    regexp: '^\s*StopIdleSessionSec\s*='
+    state: absent
+
+{{% if product in ["ol9", "ol10", "rhel9", "rhel10", "sle15", "sle16"] %}}
+
+- name: Remove StopIdleSessionSec from drop-in files
+  ansible.builtin.lineinfile:
+    path: "{{ item }}"
+    regexp: '^\s*StopIdleSessionSec\s*='
+    state: absent
+  with_fileglob:
+    - /etc/systemd/logind.conf.d/*.conf
+
 # create drop-in in the /etc/systemd/logind.conf.d/ directory
 {{% set logind_conf_file = "/etc/systemd/logind.conf.d/oscap-idle-sessions.conf" %}}
 {{% else %}}
diff --git a/linux_os/guide/system/accounts/accounts-physical/logind_session_timeout/bash/shared.sh b/linux_os/guide/system/accounts/accounts-physical/logind_session_timeout/bash/shared.sh
index 72a2ca90de7e..ea7d0c1caea4 100644
--- a/linux_os/guide/system/accounts/accounts-physical/logind_session_timeout/bash/shared.sh
+++ b/linux_os/guide/system/accounts/accounts-physical/logind_session_timeout/bash/shared.sh
@@ -2,9 +2,15 @@
 
 {{{ bash_instantiate_variables("var_logind_session_timeout") }}}
 
-{{% if product in ["sle15", "sle16"] %}}
+# Remove StopIdleSessionSec from main config
+{{{ lineinfile_absent("/etc/systemd/logind.conf", "^\s*StopIdleSessionSec\s*=", insensitive=true, rule_id=rule_id) }}}
+
+{{% if product in ["ol9", "ol10", "rhel9", "rhel10", "sle15", "sle16"] %}}
 # create drop-in in the /etc/systemd/logind.conf.d/ directory
 {{% set logind_conf_file = "/etc/systemd/logind.conf.d/oscap-idle-sessions.conf" %}}
+mkdir -p "/etc/systemd/logind.conf.d/"
+# remove StopIdleSessionSec from drop-in files
+{{{ lineinfile_absent_in_directory("/etc/systemd/logind.conf.d", "^\s*StopIdleSessionSec\s*=", insensitive=true, filename_glob="*.conf") | indent(4) }}}
 {{% else %}}
 {{% set logind_conf_file = "/etc/systemd/logind.conf" %}}
 {{% endif %}}
diff --git a/linux_os/guide/system/accounts/accounts-physical/logind_session_timeout/oval/shared.xml b/linux_os/guide/system/accounts/accounts-physical/logind_session_timeout/oval/shared.xml
index e4466d9b0c9b..3ea13bc7f07f 100644
--- a/linux_os/guide/system/accounts/accounts-physical/logind_session_timeout/oval/shared.xml
+++ b/linux_os/guide/system/accounts/accounts-physical/logind_session_timeout/oval/shared.xml
@@ -1,4 +1,4 @@
-{{% if product in ["sle15", "sle16"] %}}
+{{% if product in ["ol9", "ol10", "rhel9", "rhel10", "sle15", "sle16"] %}}
 {{% set logind_conf_file = "/etc/systemd/logind.conf.d/" %}}
 {{% else %}}
 {{% set logind_conf_file = "/etc/systemd/logind.conf" %}}
@@ -6,7 +6,7 @@
 
 <def-group>
   <definition class="compliance" id="logind_session_timeout" version="1">
-    {{% if product in ["sle15", "sle16"] %}}
+    {{% if product in ["ol9", "ol10", "rhel9", "rhel10", "sle15", "sle16"] %}}
     {{{ oval_metadata("Ensure 'StopIdleSessionSec' is configured with desired value in section 'Login' in {{{ logind_conf_file }}}", rule_title=rule_title) }}}
     <criteria comment="logind is configured correctly and configuration file exists" operator="AND">
       <criterion comment="Check the StopIdleSessionSec in {{{ logind_conf_file }}}" test_ref="test_logind_session_timeout_drop_in"/>
diff --git a/linux_os/guide/system/accounts/accounts-physical/logind_session_timeout/tests/common.sh b/linux_os/guide/system/accounts/accounts-physical/logind_session_timeout/tests/common.sh
index 441b663d9240..ce6a75106687 100644
--- a/linux_os/guide/system/accounts/accounts-physical/logind_session_timeout/tests/common.sh
+++ b/linux_os/guide/system/accounts/accounts-physical/logind_session_timeout/tests/common.sh
@@ -3,7 +3,7 @@
 # this file prepares unified test environment used by other scenarios
 # These should be tuned per product to match defaults
 
-{{% if product in ["sle15", "sle16"] %}}
+{{% if product in ["ol9", "ol10", "rhel9", "rhel10", "sle15", "sle16"] %}}
 LOGIND_CONF_FILE="/etc/systemd/logind.conf.d/oscap-idle-sessions.conf"
 mkdir -p /etc/systemd/logind.conf.d/
 {{% else %}}
diff --git a/linux_os/guide/system/accounts/accounts-physical/logind_session_timeout/tests/dir_missing.fail.sh b/linux_os/guide/system/accounts/accounts-physical/logind_session_timeout/tests/dir_missing.fail.sh
new file mode 100644
index 000000000000..8f1db2d9320b
--- /dev/null
+++ b/linux_os/guide/system/accounts/accounts-physical/logind_session_timeout/tests/dir_missing.fail.sh
@@ -0,0 +1,5 @@
+#!/bin/bash
+
+{{% if product in ["rhel9", "rhel10", "sle15", "sle16"] %}}
+rm -rf "/etc/systemd/logind.conf.d/"
+{{% endif %}}
diff --git a/linux_os/guide/system/accounts/accounts-physical/require_emergency_target_auth/ansible/shared.yml b/linux_os/guide/system/accounts/accounts-physical/require_emergency_target_auth/ansible/shared.yml
index 0faa359e3937..a8bf7416aa2e 100644
--- a/linux_os/guide/system/accounts/accounts-physical/require_emergency_target_auth/ansible/shared.yml
+++ b/linux_os/guide/system/accounts/accounts-physical/require_emergency_target_auth/ansible/shared.yml
@@ -11,6 +11,7 @@
       dest: /etc/systemd/system/emergency.service.d/10-oscap.conf
       block: |
         [Service]
+        ExecStart=
         ExecStart=-/usr/lib/systemd/systemd-sulogin-shell emergency
 {{% else %}}
 - name: Require emergency mode password
diff --git a/linux_os/guide/system/accounts/accounts-physical/require_emergency_target_auth/bash/shared.sh b/linux_os/guide/system/accounts/accounts-physical/require_emergency_target_auth/bash/shared.sh
index a9995656d996..43dda82dea2f 100644
--- a/linux_os/guide/system/accounts/accounts-physical/require_emergency_target_auth/bash/shared.sh
+++ b/linux_os/guide/system/accounts/accounts-physical/require_emergency_target_auth/bash/shared.sh
@@ -16,6 +16,7 @@ sulogin='/bin/sh -c "/sbin/sulogin; /usr/bin/systemctl --fail --no-block default
 {{% if 'sle' in product or 'rhel' in product or product == 'fedora' or product == 'slmicro5' or 'ol' in families  %}}
 mkdir -p "${service_dropin_cfg_dir}"
 echo "[Service]" >> "${service_dropin_file}"
+echo "ExecStart=" >> "${service_dropin_file}"
 echo "ExecStart=-$sulogin" >> "${service_dropin_file}"
 {{% else %}}
 if grep "^ExecStart=.*" "$service_file" ; then
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/password_expiration/accounts_password_minlen_login_defs/rule.yml b/linux_os/guide/system/accounts/accounts-restrictions/password_expiration/accounts_password_minlen_login_defs/rule.yml
index 03693d6cf2e2..0845bd49d442 100644
--- a/linux_os/guide/system/accounts/accounts-restrictions/password_expiration/accounts_password_minlen_login_defs/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-restrictions/password_expiration/accounts_password_minlen_login_defs/rule.yml
@@ -29,6 +29,7 @@ identifiers:
     cce@rhel10: CCE-87452-9
     cce@sle12: CCE-83257-6
     cce@sle15: CCE-91168-5
+    cce@sle16: CCE-95762-1
 
 references:
     cis-csc: 1,12,15,16,5
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/password_expiration/accounts_password_set_max_life_root/ansible/shared.yml b/linux_os/guide/system/accounts/accounts-restrictions/password_expiration/accounts_password_set_max_life_root/ansible/shared.yml
index ebcb5ac0430d..66e566378c67 100644
--- a/linux_os/guide/system/accounts/accounts-restrictions/password_expiration/accounts_password_set_max_life_root/ansible/shared.yml
+++ b/linux_os/guide/system/accounts/accounts-restrictions/password_expiration/accounts_password_set_max_life_root/ansible/shared.yml
@@ -1,4 +1,4 @@
-# platform = multi_platform_rhel
+# platform = multi_platform_rhel,multi_platform_sle
 # reboot = false
 # strategy = restrict
 # complexity = low
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/password_expiration/accounts_password_set_max_life_root/bash/shared.sh b/linux_os/guide/system/accounts/accounts-restrictions/password_expiration/accounts_password_set_max_life_root/bash/shared.sh
index 7bdb759f686f..b0f38d581bc0 100644
--- a/linux_os/guide/system/accounts/accounts-restrictions/password_expiration/accounts_password_set_max_life_root/bash/shared.sh
+++ b/linux_os/guide/system/accounts/accounts-restrictions/password_expiration/accounts_password_set_max_life_root/bash/shared.sh
@@ -1,4 +1,4 @@
-# platform = multi_platform_rhel,multi_platform_debian
+# platform = multi_platform_debian,multi_platform_rhel,multi_platform_sle
 # reboot = false
 # strategy = restrict
 # complexity = low
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/password_expiration/accounts_password_set_max_life_root/rule.yml b/linux_os/guide/system/accounts/accounts-restrictions/password_expiration/accounts_password_set_max_life_root/rule.yml
index 97714adfda04..2cfd1a5396f5 100644
--- a/linux_os/guide/system/accounts/accounts-restrictions/password_expiration/accounts_password_set_max_life_root/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-restrictions/password_expiration/accounts_password_set_max_life_root/rule.yml
@@ -19,6 +19,7 @@ identifiers:
     cce@rhel8: CCE-87667-2
     cce@rhel9: CCE-87668-0
     cce@rhel10: CCE-88296-9
+    cce@sle16: CCE-96252-2
 
 ocil_clause: 'any results are returned that are not associated with a system account'
 
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/password_storage/accounts_password_pam_unix_rounds_password_auth/ansible/shared.yml b/linux_os/guide/system/accounts/accounts-restrictions/password_storage/accounts_password_pam_unix_rounds_password_auth/ansible/shared.yml
index daf063350cb8..bf8aeb3f469c 100644
--- a/linux_os/guide/system/accounts/accounts-restrictions/password_storage/accounts_password_pam_unix_rounds_password_auth/ansible/shared.yml
+++ b/linux_os/guide/system/accounts/accounts-restrictions/password_storage/accounts_password_pam_unix_rounds_password_auth/ansible/shared.yml
@@ -6,7 +6,7 @@
 
 {{{ ansible_instantiate_variables("var_password_pam_unix_rounds") }}}
 
-{{% if product in ["sle12", "sle15"] %}}
+{{% if product in ["sle12", "sle15", "sle16"] %}}
 {{{ ansible_ensure_pam_module_configuration('/etc/pam.d/common-password', 'password', 'sufficient', 'pam_unix.so', 'rounds', '{{ var_password_pam_unix_rounds }}', '', rule_id=rule_id, rule_title=rule_title) }}}
 {{% else %}}
 {{{ ansible_ensure_pam_module_configuration('/etc/pam.d/password-auth', 'password', 'sufficient', 'pam_unix.so', 'rounds', '{{ var_password_pam_unix_rounds }}', '', rule_id=rule_id, rule_title=rule_title) }}}
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/password_storage/accounts_password_pam_unix_rounds_password_auth/bash/shared.sh b/linux_os/guide/system/accounts/accounts-restrictions/password_storage/accounts_password_pam_unix_rounds_password_auth/bash/shared.sh
index 9346f874318b..3bca691a411c 100644
--- a/linux_os/guide/system/accounts/accounts-restrictions/password_storage/accounts_password_pam_unix_rounds_password_auth/bash/shared.sh
+++ b/linux_os/guide/system/accounts/accounts-restrictions/password_storage/accounts_password_pam_unix_rounds_password_auth/bash/shared.sh
@@ -2,11 +2,11 @@
 
 {{{ bash_instantiate_variables("var_password_pam_unix_rounds") }}}
 
-{{% if product in ["sle12", "sle15"] %}}
+{{% if product in ["sle12", "sle15", "sle16"] %}}
 {{{ bash_ensure_pam_module_configuration('/etc/pam.d/common-password', 'password', 'sufficient', 'pam_unix.so', 'rounds', "$var_password_pam_unix_rounds", '') }}}
 {{% elif product in ["debian12", "debian13"] %}}
 {{{ bash_ensure_pam_module_configuration('/etc/pam.d/common-password', 'password', '\[success=1 default=ignore\]', 'pam_unix.so', 'rounds', "$var_password_pam_unix_rounds", '') }}}
-{{% elif product in ["ubuntu2404"] %}}
+{{% elif product in ["ubuntu2204", "ubuntu2404"] %}}
 config_file="/usr/share/pam-configs/cac_unix"
 {{{ bash_pam_unix_enable() }}}
 sed -i -E '/^Password:/,/^[^[:space:]]/ {
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/password_storage/accounts_password_pam_unix_rounds_password_auth/oval/shared.xml b/linux_os/guide/system/accounts/accounts-restrictions/password_storage/accounts_password_pam_unix_rounds_password_auth/oval/shared.xml
index 7e3067f20224..1ebd7c437550 100644
--- a/linux_os/guide/system/accounts/accounts-restrictions/password_storage/accounts_password_pam_unix_rounds_password_auth/oval/shared.xml
+++ b/linux_os/guide/system/accounts/accounts-restrictions/password_storage/accounts_password_pam_unix_rounds_password_auth/oval/shared.xml
@@ -1,4 +1,4 @@
-{{% if product in ["sle12", "sle15", "debian12", "debian13", 'ubuntu2404'] %}}
+{{% if product in ["debian12", "debian13", "sle12", "sle15", "sle16", "ubuntu2204", "ubuntu2404"] %}}
 {{% set pam_passwd_file_path = "/etc/pam.d/common-password" %}}
 {{% else %}}
 {{% set pam_passwd_file_path = "/etc/pam.d/password-auth" %}}
@@ -19,7 +19,7 @@
 
   <ind:textfilecontent54_object id="object_password_auth_pam_unix_rounds" version="1">
     <ind:filepath operation="pattern match">^{{{ pam_passwd_file_path }}}$</ind:filepath>
-    {{% if product in ["debian12", "debian13", 'ubuntu2404'] %}}
+    {{% if product in ["debian12", "debian13", 'ubuntu2204', 'ubuntu2404'] %}}
     <ind:pattern operation="pattern match">^\s*password\s+.*\s+pam_unix\.so[^#]*rounds=([0-9]*).*$</ind:pattern>
     {{% else %}}
     <ind:pattern operation="pattern match">^\s*password\s+(?:(?:sufficient)|(?:required))\s+pam_unix\.so[^#]*rounds=([0-9]*).*$</ind:pattern>
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/password_storage/accounts_password_pam_unix_rounds_password_auth/rule.yml b/linux_os/guide/system/accounts/accounts-restrictions/password_storage/accounts_password_pam_unix_rounds_password_auth/rule.yml
index 06e867bc9d1e..f00a09c6d160 100644
--- a/linux_os/guide/system/accounts/accounts-restrictions/password_storage/accounts_password_pam_unix_rounds_password_auth/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-restrictions/password_storage/accounts_password_pam_unix_rounds_password_auth/rule.yml
@@ -3,7 +3,7 @@ documentation_complete: true
 
 title: 'Set number of Password Hashing Rounds - password-auth'
 
-{{% if product in ["sle12", "sle15", "debian12", "debian13", 'ubuntu2404'] %}}
+{{% if product in ["debian12", "debian13", "sle12", "sle15", "sle16", "ubuntu2204", "ubuntu2404"] %}}
 {{% set pam_passwd_file_path = "/etc/pam.d/common-password" %}}
 {{% else %}}
 {{% set pam_passwd_file_path = "/etc/pam.d/password-auth" %}}
@@ -15,11 +15,11 @@ description: |-
     <br /><br />
     In file <tt>{{{ pam_passwd_file_path }}}</tt> append <tt>rounds={{{ xccdf_value("var_password_pam_unix_rounds") }}}</tt>
     to the <tt>pam_unix.so</tt> entry, as shown below:
-    {{% if product in ["debian12", "debian13", 'ubuntu2404'] %}}
+    {{% if product in ["debian12", "debian13", 'ubuntu2204', 'ubuntu2404'] %}}
     <pre>password [success=1 default=ignore] pam_unix.so <i>...existing_options...</i> rounds={{{ xccdf_value("var_password_pam_unix_rounds") }}}</pre>
     {{% else %}}
     <pre>password sufficient pam_unix.so <i>...existing_options...</i> rounds={{{ xccdf_value("var_password_pam_unix_rounds") }}}</pre>
-    
+
     The system's default number of rounds is 5000.
     {{% endif %}}
 
@@ -49,7 +49,7 @@ ocil: |-
     To verify the number of rounds for the password hashing algorithm is configured, run the following command:
     <pre>$ sudo grep rounds {{{ pam_passwd_file_path }}}</pre>
     The output should show the following match:
-    {{% if product in ["debian12", "debian13", 'ubuntu2404'] %}}
+    {{% if product in ["debian12", "debian13", 'ubuntu2204', 'ubuntu2404'] %}}
     <pre>password [success=1 default=ignore] pam_unix.so sha512 rounds={{{ xccdf_value("var_password_pam_unix_rounds") }}}</pre>
     {{% else %}}
     <pre>password sufficient pam_unix.so sha512 rounds={{{ xccdf_value("var_password_pam_unix_rounds") }}}</pre>
@@ -62,10 +62,10 @@ fixtext: |-
 
     Add or modify the following line in "{{{ pam_passwd_file_path }}}" and set "rounds" to {{{ xccdf_value("var_password_pam_unix_rounds") }}}.
     For example:
-    {{% if product in ["debian12", "debian13", 'ubuntu2404'] %}}
+    {{% if product in ["debian12", "debian13", 'ubuntu2204', 'ubuntu2404'] %}}
     password [success=1 default=ignore] pam_unix.so sha512 rounds=5000
     {{% else %}}
     password sufficient pam_unix.so sha512 rounds=5000
     {{% endif %}}
-    
+
 srg_requirement: '{{{ full_name }}} shadow password suite must be configured to use a sufficient number of hashing rounds in {{{ pam_passwd_file_path }}}.'
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords/ansible/shared.yml b/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords/ansible/shared.yml
index 35dffe1f94d3..78a18739de13 100644
--- a/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords/ansible/shared.yml
+++ b/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords/ansible/shared.yml
@@ -4,7 +4,7 @@
 # complexity = low
 # disruption = medium
 {{% if 'ubuntu' in product %}}
-{{%- set pam_config_paths = "['/etc/pam.d/common-password']" %}}
+{{%- set pam_config_paths = "['/etc/pam.d/common-auth', '/etc/pam.d/common-password']" %}}
 {{% else %}}
 {{%- set pam_config_paths = "['/etc/pam.d/system-auth', '/etc/pam.d/password-auth']" -%}}
 {{% endif %}}
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords/bash/shared.sh b/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords/bash/shared.sh
index e235cdbdd4ab..90a9c6de3992 100644
--- a/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords/bash/shared.sh
+++ b/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords/bash/shared.sh
@@ -25,6 +25,18 @@ sed -i -E '/^Password-Initial:/,/^[^[:space:]]/ {
     }
 }' "$config_file"
 
+sed -i -E '/^Auth:/,/^[^[:space:]]/ {
+    /pam_unix\.so/ {
+        s/\s*nullok//g
+    }
+}' "$config_file"
+
+sed -i -E '/^Auth-Initial:/,/^[^[:space:]]/ {
+    /pam_unix\.so/ {
+        s/\s*nullok//g
+    }
+}' "$config_file"
+
 DEBIAN_FRONTEND=noninteractive pam-auth-update
 {{% else %}}
 if [ -f /usr/bin/authselect ]; then
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords/oval/shared.xml b/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords/oval/shared.xml
index ddbde376b499..ac2fc52abd05 100644
--- a/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords/oval/shared.xml
+++ b/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords/oval/shared.xml
@@ -15,7 +15,7 @@
 {{% if 'sle' in product or 'slmicro' in product %}}
     <ind:filepath operation="pattern match">^/etc/pam.d/.*$</ind:filepath>
 {{% elif 'ubuntu' in product %}}
-    <ind:filepath operation="pattern match">^/etc/pam.d/common-password</ind:filepath>
+    <ind:filepath operation="pattern match">^/etc/pam.d/common-(auth|password)$</ind:filepath>
 {{% else %}}
     <ind:filepath operation="pattern match">^/etc/pam.d/(system|password)-auth$</ind:filepath>
 {{% endif %}}
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords/rule.yml b/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords/rule.yml
index 746e729b1057..b88e482f57ca 100644
--- a/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords/rule.yml
@@ -10,7 +10,7 @@ description: |-
     {{% if 'sle' in product or 'slmicro' in product%}}
     password authentication configurations in <tt>/etc/pam.d/</tt>
     {{% elif 'ubuntu' in product %}}
-    <tt>/etc/pam.d/common-password</tt>
+    <tt>/etc/pam.d/common-auth</tt> and <tt>/etc/pam.d/common-password</tt>
     {{% else %}}
     <tt>/etc/pam.d/system-auth</tt> and
     <tt>/etc/pam.d/password-auth</tt>
@@ -63,7 +63,7 @@ ocil: |-
     {{% if 'sle' in product or 'slmicro' in product %}}
     <pre>$ grep pam_unix.so /etc/pam.d/* | grep nullok</pre>
     {{% elif 'ubuntu' in product %}}
-    <pre>grep nullok /etc/pam.d/common-password</pre>
+    <pre>grep nullok /etc/pam.d/common-auth /etc/pam.d/common-password</pre>
     {{% else %}}
     <pre>$ grep nullok /etc/pam.d/system-auth /etc/pam.d/password-auth</pre>
     {{% endif %}}
@@ -72,10 +72,10 @@ ocil: |-
     prevent logins with empty passwords.
 
 fixtext: |-
-    Configure {{{ full_name }}} in the {{% if 'ubuntu' in product %}}common-password file {{% else %}}system-auth and password-auth files {{% endif %}} to not allow null
+    Configure {{{ full_name }}} in the {{% if 'ubuntu' in product %}}common-auth and common-password files {{% else %}}system-auth and password-auth files {{% endif %}} to not allow null
     passwords.
     {{% if 'ubuntu' in product %}}
-    Remove any instances of the "nullok" option in "/etc/pam.d/common-password"
+    Remove any instances of the "nullok" option in "/etc/pam.d/common-auth" and "/etc/pam.d/common-password"
     {{% else %}}
     Remove any instances of the "nullok" option in the "/etc/pam.d/system-auth" and
     "/etc/pam.d/password-auth" files
@@ -85,7 +85,7 @@ fixtext: |-
     Note: Manual changes to the listed file may be overwritten by the "authselect" program.
 
 srg_requirement: |-
-    '{{{ full_name }}} must not allow blank or null passwords in the {{% if 'ubuntu' in product %}} common-password file.{{% else %}} system-auth file nor
+    '{{{ full_name }}} must not allow blank or null passwords in the {{% if 'ubuntu' in product %}} common-auth and common-password files.{{% else %}} system-auth file nor
     password-auth. {{% endif %}}'
 
 warnings:
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords/tests/no_nullok.pass.sh b/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords/tests/no_nullok.pass.sh
index 6f56a2e0ddae..d1bfb5fc8de3 100644
--- a/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords/tests/no_nullok.pass.sh
+++ b/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords/tests/no_nullok.pass.sh
@@ -12,9 +12,9 @@ Priority: 257
 Conflicts: unix
 Auth-Type: Primary
 Auth:
-	[success=end default=ignore]	pam_unix.so nullok try_first_pass
+	[success=end default=ignore]	pam_unix.so try_first_pass
 Auth-Initial:
-	[success=end default=ignore]	pam_unix.so nullok
+	[success=end default=ignore]	pam_unix.so
 Account-Type: Primary
 Account:
 	[success=end new_authtok_reqd=done default=ignore]	pam_unix.so
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords/tests/nullok_commented.pass.sh b/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords/tests/nullok_commented.pass.sh
index 1c20026e7dd0..9c2ed1c87f26 100644
--- a/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords/tests/nullok_commented.pass.sh
+++ b/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords/tests/nullok_commented.pass.sh
@@ -12,9 +12,9 @@ Priority: 257
 Conflicts: unix
 Auth-Type: Primary
 Auth:
-	[success=end default=ignore]	pam_unix.so nullok try_first_pass
+	[success=end default=ignore]	pam_unix.so try_first_pass # nullok
 Auth-Initial:
-	[success=end default=ignore]	pam_unix.so nullok
+	[success=end default=ignore]	pam_unix.so # nullok
 Account-Type: Primary
 Account:
 	[success=end new_authtok_reqd=done default=ignore]	pam_unix.so
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords/tests/nullok_present_auth.fail.sh b/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords/tests/nullok_present_auth.fail.sh
new file mode 100644
index 000000000000..4468cb808777
--- /dev/null
+++ b/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords/tests/nullok_present_auth.fail.sh
@@ -0,0 +1,35 @@
+#!/bin/bash
+# platform = multi_platform_ubuntu
+# packages = pam
+
+config_file=/usr/share/pam-configs/tmp_unix
+
+cat << EOF > "$config_file"
+Name: Unix authentication
+Default: yes
+Priority: 257
+Conflicts: unix
+Auth-Type: Primary
+Auth:
+	[success=end default=ignore]	pam_unix.so nullok try_first_pass
+Auth-Initial:
+	[success=end default=ignore]	pam_unix.so nullok
+Account-Type: Primary
+Account:
+	[success=end new_authtok_reqd=done default=ignore]	pam_unix.so
+Account-Initial:
+	[success=end new_authtok_reqd=done default=ignore]	pam_unix.so
+Session-Type: Additional
+Session:
+	required	pam_unix.so
+Session-Initial:
+	required	pam_unix.so
+Password-Type: Primary
+Password:
+	[success=end default=ignore]	pam_unix.so obscure use_authtok try_first_pass yescrypt
+Password-Initial:
+	[success=end default=ignore]	pam_unix.so obscure use_authtok try_first_pass yescrypt
+EOF
+
+DEBIAN_FRONTEND=noninteractive pam-auth-update
+rm "$config_file"
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords/tests/nullok_present_password.fail.sh b/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords/tests/nullok_present_password.fail.sh
new file mode 100644
index 000000000000..29e3cf57fcb9
--- /dev/null
+++ b/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords/tests/nullok_present_password.fail.sh
@@ -0,0 +1,35 @@
+#!/bin/bash
+# platform = multi_platform_ubuntu
+# packages = pam
+
+config_file=/usr/share/pam-configs/tmp_unix
+
+cat << EOF > "$config_file"
+Name: Unix authentication
+Default: yes
+Priority: 257
+Conflicts: unix
+Auth-Type: Primary
+Auth:
+	[success=end default=ignore]	pam_unix.so try_first_pass
+Auth-Initial:
+	[success=end default=ignore]	pam_unix.so
+Account-Type: Primary
+Account:
+	[success=end new_authtok_reqd=done default=ignore]	pam_unix.so
+Account-Initial:
+	[success=end new_authtok_reqd=done default=ignore]	pam_unix.so
+Session-Type: Additional
+Session:
+	required	pam_unix.so
+Session-Initial:
+	required	pam_unix.so
+Password-Type: Primary
+Password:
+	[success=end default=ignore]	pam_unix.so obscure use_authtok try_first_pass yescrypt nullok
+Password-Initial:
+	[success=end default=ignore]	pam_unix.so obscure use_authtok try_first_pass yescrypt nullok
+EOF
+
+DEBIAN_FRONTEND=noninteractive pam-auth-update
+rm "$config_file"
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords_etc_shadow/bash/shared.sh b/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords_etc_shadow/bash/shared.sh
index dd8ad70a8c69..d844d60048b9 100644
--- a/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords_etc_shadow/bash/shared.sh
+++ b/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords_etc_shadow/bash/shared.sh
@@ -1,6 +1,6 @@
 # platform = multi_platform_all
 
-readarray -t users_with_empty_pass < <(sudo awk -F: '!$2 {print $1}' /etc/shadow)
+readarray -t users_with_empty_pass < <(awk -F: '!$2 {print $1}' /etc/shadow)
 
 for user_with_empty_pass in "${users_with_empty_pass[@]}"
 do
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/root_logins/accounts_no_uid_except_zero/ansible/shared.yml b/linux_os/guide/system/accounts/accounts-restrictions/root_logins/accounts_no_uid_except_zero/ansible/shared.yml
index 1fc2e85742bb..ce2102fc53d0 100644
--- a/linux_os/guide/system/accounts/accounts-restrictions/root_logins/accounts_no_uid_except_zero/ansible/shared.yml
+++ b/linux_os/guide/system/accounts/accounts-restrictions/root_logins/accounts_no_uid_except_zero/ansible/shared.yml
@@ -11,5 +11,5 @@
 
 - name: Lock the password of the user accounts other than root with uid 0
   ansible.builtin.command: passwd -l {{ item.key }}
-  loop: "{{ getent_passwd | dict2items | rejectattr('key', 'search', 'root') | list }}"
+  loop: "{{ getent_passwd | dict2items | rejectattr('key', 'equalto', 'root') | list }}"
   when: item.value.1  == '0'
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/root_logins/accounts_no_uid_except_zero/oval/shared.xml b/linux_os/guide/system/accounts/accounts-restrictions/root_logins/accounts_no_uid_except_zero/oval/shared.xml
index c1276fa340e1..2fa2d3e58eb4 100644
--- a/linux_os/guide/system/accounts/accounts-restrictions/root_logins/accounts_no_uid_except_zero/oval/shared.xml
+++ b/linux_os/guide/system/accounts/accounts-restrictions/root_logins/accounts_no_uid_except_zero/oval/shared.xml
@@ -1,16 +1,35 @@
 <def-group>
   <definition class="compliance" id="accounts_no_uid_except_zero" version="1">
-    {{{ oval_metadata("Only the root account should be assigned a user id of 0.", rule_title=rule_title) }}}
+    {{{ oval_metadata("Only the root account should be assigned a user id of 0, or the account must be locked.", rule_title=rule_title) }}}
     <criteria>
       <criterion comment="tests that there are no accounts with UID 0 except root in the /etc/passwd file" test_ref="test_accounts_no_uid_except_root" />
     </criteria>
   </definition>
-  <ind:textfilecontent54_test check="all" check_existence="none_exist" comment="test that there are no accounts with UID 0 except root in the /etc/passwd file" id="test_accounts_no_uid_except_root" version="1">
+
+  <ind:textfilecontent54_test check="all" check_existence="any_exist"
+     comment="test that there are no accounts with UID 0 except root in the /etc/passwd file"
+     id="test_accounts_no_uid_except_root" version="1">
     <ind:object object_ref="object_accounts_no_uid_except_root" />
+    <ind:state state_ref="state_is_locked_in_shadow" />
   </ind:textfilecontent54_test>
+
   <ind:textfilecontent54_object id="object_accounts_no_uid_except_root" version="1">
     <ind:filepath>/etc/passwd</ind:filepath>
-    <ind:pattern operation="pattern match">^(?!root:)[^:]*:[^:]*:0</ind:pattern>
-    <ind:instance datatype="int">1</ind:instance>
+    <ind:pattern operation="pattern match">^(?!root:)([^:]+):[^:]+:0:.*$</ind:pattern>
+    <ind:instance datatype="int" operation="greater than or equal">1</ind:instance>
   </ind:textfilecontent54_object>
+
+  <ind:textfilecontent54_object id="object_shadow_locked_users" version="1">
+    <ind:filepath>/etc/shadow</ind:filepath>
+    <ind:pattern operation="pattern match">^([^:]+):[!*][^:]*:.*$</ind:pattern>
+    <ind:instance datatype="int" operation="greater than or equal">1</ind:instance>
+  </ind:textfilecontent54_object>
+
+  <local_variable id="var_locked_users" datatype="string" version="1" comment="Variable containing all locked users">
+    <object_component item_field="subexpression" object_ref="object_shadow_locked_users" />
+  </local_variable>
+
+  <ind:textfilecontent54_state id="state_is_locked_in_shadow" version="1">
+    <ind:subexpression datatype="string" operation="equals" var_check="at least one" var_ref="var_locked_users" />
+  </ind:textfilecontent54_state>
 </def-group>
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/root_logins/accounts_no_uid_except_zero/rule.yml b/linux_os/guide/system/accounts/accounts-restrictions/root_logins/accounts_no_uid_except_zero/rule.yml
index 091ca1a70df8..5293b2a6695f 100644
--- a/linux_os/guide/system/accounts/accounts-restrictions/root_logins/accounts_no_uid_except_zero/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-restrictions/root_logins/accounts_no_uid_except_zero/rule.yml
@@ -4,8 +4,8 @@ title: 'Verify Only Root Has UID 0'
 
 description: |-
     If any account other than root has a UID of 0, this misconfiguration should
-    be investigated and the accounts other than root should be removed or have
-    their UID changed.
+    be investigated and the accounts other than root should be removed, locked
+    or have their UID changed.
     <br />
     If the account is associated with system commands or applications the UID
     should be changed to one greater than "0" but less than "{{{ uid_min }}}."
@@ -60,12 +60,14 @@ ocil: |-
     following command:
     <pre>$ awk -F: '$3 == 0 {print $1}' /etc/passwd</pre>
     <pre>root</pre>
+    Also make sure that if non-root account with UID "0" exist, it is locked:
+    <pre>$ grep -E '^[^:]+:[!*][^:]*:.*$' /etc/shadow</pre>
 
 fixtext: |-
     Change the UID of any account on the system, other than root, that has a UID of "0".
     If the account is associated with system commands or applications, the UID
     should be changed to one greater than "0" but less than "{{{ uid_min }}}". Otherwise,
-    assign a UID of greater than "{{{ uid_min }}}" that has not already been assigned.
+    assign a UID of greater than "{{{ uid_min }}}" that has not already been assigned or locked.
 
 srg_requirement: 'The root account must be the only account having unrestricted access to the {{{ full_name }}} system.'
 
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/root_logins/accounts_no_uid_except_zero/tests/locked_user_uid_0.pass.sh b/linux_os/guide/system/accounts/accounts-restrictions/root_logins/accounts_no_uid_except_zero/tests/locked_user_uid_0.pass.sh
new file mode 100644
index 000000000000..e49712ca010d
--- /dev/null
+++ b/linux_os/guide/system/accounts/accounts-restrictions/root_logins/accounts_no_uid_except_zero/tests/locked_user_uid_0.pass.sh
@@ -0,0 +1,7 @@
+#!/bin/bash
+# platform = multi_platform_all
+
+useradd --non-unique --uid 0 rootlocked
+# configure password, otherwise user is locked
+echo "rootlocked:password" | chpasswd
+passwd -l rootlocked
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/root_logins/accounts_no_uid_except_zero/tests/other_user_uid_0.fail.sh b/linux_os/guide/system/accounts/accounts-restrictions/root_logins/accounts_no_uid_except_zero/tests/other_user_uid_0.fail.sh
index aec75bd0ed52..1c3ada03bc0b 100644
--- a/linux_os/guide/system/accounts/accounts-restrictions/root_logins/accounts_no_uid_except_zero/tests/other_user_uid_0.fail.sh
+++ b/linux_os/guide/system/accounts/accounts-restrictions/root_logins/accounts_no_uid_except_zero/tests/other_user_uid_0.fail.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
+# platform = multi_platform_all
 #
-# Remediation doesn't fix the rule, only locks passwords
-# of non-root accounts with uid 0.
-# remediation = none
 
 useradd --non-unique --uid 0 root2
+# configure password, otherwise user is locked
+echo "root2:password" | chpasswd
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/root_logins/use_pam_wheel_for_su/ansible/shared.yml b/linux_os/guide/system/accounts/accounts-restrictions/root_logins/use_pam_wheel_for_su/ansible/shared.yml
deleted file mode 100644
index b6f60d4bc946..000000000000
--- a/linux_os/guide/system/accounts/accounts-restrictions/root_logins/use_pam_wheel_for_su/ansible/shared.yml
+++ /dev/null
@@ -1,11 +0,0 @@
-# platform = multi_platform_rhel,multi_platform_fedora,multi_platform_ol,multi_platform_rhv,multi_platform_sle,multi_platform_almalinux
-# reboot = false
-# strategy = restrict
-# complexity = low
-# disruption = low
-
-- name: "Restrict usage of su command only to members of wheel group"
-  ansible.builtin.replace:
-    path: "/etc/pam.d/su"
-    regexp: '^[\s]*#[\s]*auth[\s]+required[\s]+pam_wheel\.so[\s]+use_uid$'
-    replace: "auth             required        pam_wheel.so use_uid"
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/root_logins/use_pam_wheel_for_su/bash/shared.sh b/linux_os/guide/system/accounts/accounts-restrictions/root_logins/use_pam_wheel_for_su/bash/shared.sh
deleted file mode 100644
index 5bd381d1210f..000000000000
--- a/linux_os/guide/system/accounts/accounts-restrictions/root_logins/use_pam_wheel_for_su/bash/shared.sh
+++ /dev/null
@@ -1,4 +0,0 @@
-# platform = multi_platform_rhel,multi_platform_fedora,multi_platform_ol,multi_platform_rhv,multi_platform_sle,multi_platform_almalinux
-
-# uncomment the option if commented
-sed '/^[[:space:]]*#[[:space:]]*auth[[:space:]]\+required[[:space:]]\+pam_wheel\.so[[:space:]]\+use_uid$/s/^[[:space:]]*#//' -i /etc/pam.d/su
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/root_logins/use_pam_wheel_for_su/oval/shared.xml b/linux_os/guide/system/accounts/accounts-restrictions/root_logins/use_pam_wheel_for_su/oval/shared.xml
deleted file mode 100644
index d7932de398fd..000000000000
--- a/linux_os/guide/system/accounts/accounts-restrictions/root_logins/use_pam_wheel_for_su/oval/shared.xml
+++ /dev/null
@@ -1,21 +0,0 @@
-<def-group>
-  <definition class="compliance" id="{{{ rule_id }}}" version="1">
-    {{{ oval_metadata("Only members of the wheel group should be able to authenticate through the su command.", rule_title=rule_title) }}}
-    <criteria operator="AND">
-      <criterion test_ref="test_use_pam_wheel_for_su" />
-    </criteria>
-  </definition>
-
-  <ind:textfilecontent54_test id="test_use_pam_wheel_for_su" version="1"
-    check="all" check_existence="at_least_one_exists"
-    comment="check existence of use_uid option for pam_wheel.so in /etc/pam.d/su">
-    <ind:object object_ref="object_use_pam_wheel_for_su" />
-  </ind:textfilecontent54_test>
-
-  <ind:textfilecontent54_object id="object_use_pam_wheel_for_su" version="1"
-    comment="collect pam_wheel.so line in /etc/pam.d/su if use_uid option is present in the line">
-    <ind:filepath>/etc/pam.d/su</ind:filepath>
-    <ind:pattern operation="pattern match">^[\s]*auth[\s]+required[\s]+pam_wheel\.so[\s]+\buse_uid\b</ind:pattern>
-    <ind:instance datatype="int">1</ind:instance>
-  </ind:textfilecontent54_object>
-</def-group>
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/root_logins/use_pam_wheel_for_su/rule.yml b/linux_os/guide/system/accounts/accounts-restrictions/root_logins/use_pam_wheel_for_su/rule.yml
index 6c0ca626469e..ad32af129980 100644
--- a/linux_os/guide/system/accounts/accounts-restrictions/root_logins/use_pam_wheel_for_su/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-restrictions/root_logins/use_pam_wheel_for_su/rule.yml
@@ -61,3 +61,14 @@ vuldiscussion: |-
     When operating systems provide the capability to escalate a functional capability, it is critical the user re-authenticate.
 
 platform: package[pam]
+
+template:
+  name: pam_options
+  vars:
+    path: /etc/pam.d/su
+    type: auth
+    control_flag: required
+    module: pam_wheel.so
+    arguments:
+      - argument: use_uid
+        new_argument: use_uid
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/root_logins/use_pam_wheel_group_for_su/ansible/shared.yml b/linux_os/guide/system/accounts/accounts-restrictions/root_logins/use_pam_wheel_group_for_su/ansible/shared.yml
deleted file mode 100644
index 6d79f4e9d2de..000000000000
--- a/linux_os/guide/system/accounts/accounts-restrictions/root_logins/use_pam_wheel_group_for_su/ansible/shared.yml
+++ /dev/null
@@ -1,14 +0,0 @@
-# platform = multi_platform_fedora,multi_platform_rhel,multi_platform_sle,multi_platform_slmicro,multi_platform_ubuntu
-# reboot = false
-# strategy = restrict
-# complexity = low
-# disruption = low
-
-{{{ ansible_instantiate_variables("var_pam_wheel_group_for_su") }}}
-
-- name: {{{ rule_title }}} - Add the group to the /etc/pam.d/su file
-  ansible.builtin.lineinfile:
-    path: "/etc/pam.d/su"
-    state: present
-    regexp: '^[\s]*#[\s]*auth[\s]+required[\s]+pam_wheel\.so[\s]+use_uid group=$'
-    line: "auth             required        pam_wheel.so use_uid group={{ var_pam_wheel_group_for_su }}"
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/root_logins/use_pam_wheel_group_for_su/bash/shared.sh b/linux_os/guide/system/accounts/accounts-restrictions/root_logins/use_pam_wheel_group_for_su/bash/shared.sh
deleted file mode 100644
index 35df572f9f8d..000000000000
--- a/linux_os/guide/system/accounts/accounts-restrictions/root_logins/use_pam_wheel_group_for_su/bash/shared.sh
+++ /dev/null
@@ -1,15 +0,0 @@
-# platform = multi_platform_fedora,multi_platform_rhel,multi_platform_sle,multi_platform_slmicro,multi_platform_ubuntu,multi_platform_debian
-{{{ bash_instantiate_variables("var_pam_wheel_group_for_su") }}}
-
-PAM_CONF=/etc/pam.d/su
-
-pamstr=$(grep -P '^auth\s+required\s+pam_wheel\.so\s+(?=[^#]*\buse_uid\b)(?=[^#]*\bgroup=)' ${PAM_CONF})
-if [ -z "$pamstr" ]; then
-    sed -Ei '/^auth\b.*\brequired\b.*\bpam_wheel\.so/d' ${PAM_CONF} # remove any remaining uncommented pam_wheel.so line
-    sed -Ei "/^auth\s+sufficient\s+pam_rootok\.so.*$/a auth             required        pam_wheel.so use_uid group=${var_pam_wheel_group_for_su}" ${PAM_CONF}
-else
-    group_val=$(echo -n "$pamstr" | grep -Eo '\bgroup=[_a-z][-0-9_a-z]*' | cut -d '=' -f 2)
-    if [ -z "${group_val}" ] || [ ${group_val} != ${var_pam_wheel_group_for_su} ]; then
-        sed -Ei "s/(^auth\s+required\s+pam_wheel.so\s+[^#]*group=)[_a-z][-0-9_a-z]*/\1${var_pam_wheel_group_for_su}/" ${PAM_CONF}
-    fi
-fi
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/root_logins/use_pam_wheel_group_for_su/oval/shared.xml b/linux_os/guide/system/accounts/accounts-restrictions/root_logins/use_pam_wheel_group_for_su/oval/shared.xml
deleted file mode 100644
index b841da12e366..000000000000
--- a/linux_os/guide/system/accounts/accounts-restrictions/root_logins/use_pam_wheel_group_for_su/oval/shared.xml
+++ /dev/null
@@ -1,31 +0,0 @@
-<def-group>
-  <definition class="compliance" id="{{{ rule_id }}}" version="1">
-    {{{ oval_metadata("Only members of the group set in variable 'var_pam_wheel_group_for_su' should be able to authenticate through the su command.", rule_title=rule_title) }}}
-    <criteria operator="AND">
-      <criterion test_ref="test_use_pam_wheel_group_for_su" />
-    </criteria>
-  </definition>
-
-  <ind:textfilecontent54_test check="all" check_existence="at_least_one_exists"
-      comment="check /etc/pam.d/su for correct setting"
-      id="test_use_pam_wheel_group_for_su" version="1">
-    <ind:object object_ref="object_use_pam_wheel_group_for_su" />
-    <ind:state state_ref="state_use_pam_wheel_group_for_su" />
-  </ind:textfilecontent54_test>
-
-  <ind:textfilecontent54_object comment="check /etc/pam.d/su for correct setting"
-      id="object_use_pam_wheel_group_for_su" version="1">
-    <ind:filepath>/etc/pam.d/su</ind:filepath>
-    <ind:pattern operation="pattern match">^\s*auth\s+required\s+pam_wheel\.so\s+(?=[^#]*\buse_uid\b)[^#]*\bgroup=([_a-z][-0-9_a-z]*)</ind:pattern>
-    <ind:instance datatype="int">1</ind:instance>
-  </ind:textfilecontent54_object>
-
-  <ind:textfilecontent54_state comment="group name must be valid"
-      id="state_use_pam_wheel_group_for_su" version="1">
-    <ind:subexpression operation="equals" datatype="string"
-          var_ref="var_pam_wheel_group_for_su" />
-  </ind:textfilecontent54_state>
-
-  <external_variable comment="Name of the allowed su group"
-      datatype="string" id="var_pam_wheel_group_for_su" version="1" />
-</def-group>
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/root_logins/use_pam_wheel_group_for_su/rule.yml b/linux_os/guide/system/accounts/accounts-restrictions/root_logins/use_pam_wheel_group_for_su/rule.yml
index 3d00846e44a7..d1cf0a7ad598 100644
--- a/linux_os/guide/system/accounts/accounts-restrictions/root_logins/use_pam_wheel_group_for_su/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-restrictions/root_logins/use_pam_wheel_group_for_su/rule.yml
@@ -37,9 +37,24 @@ ocil: |-
     Run the following command to check if the line is present:
     <pre>grep pam_wheel /etc/pam.d/su</pre>
     The output should contain the following line:
-    <pre>auth required pam_wheel.so use_uid group={{{ xccdf_value("var_pam_wheel_group_for_su") }}}</pre>
+    <pre>auth required pam_wheel.so use_uid group={{{ xccdf_value("var_pam_wheel_group_for_su.var") }}}</pre>
 
 warnings:
     - general: |-
         Note that <tt>ensure_pam_wheel_group_empty</tt> rule complements this requirement by
         ensuring the referenced group exists and has no members.
+
+template:
+  name: pam_options
+  vars:
+    path: /etc/pam.d/su
+    type: auth
+    control_flag: required
+    module: pam_wheel.so
+    arguments:
+      - variable: group
+        variable_name: var_pam_wheel_group_for_su
+        operation: equals
+        datatype: string
+      - argument: use_uid
+        new_argument: use_uid
diff --git a/linux_os/guide/system/accounts/accounts-session/accounts_polyinstantiated_tmp/rule.yml b/linux_os/guide/system/accounts/accounts-session/accounts_polyinstantiated_tmp/rule.yml
index 24cfaa9eddcb..7a93cacce005 100644
--- a/linux_os/guide/system/accounts/accounts-session/accounts_polyinstantiated_tmp/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-session/accounts_polyinstantiated_tmp/rule.yml
@@ -22,6 +22,7 @@ identifiers:
   cce@rhel10: CCE-88705-9
   cce@sle12: CCE-91506-6
   cce@sle15: CCE-91197-4
+  cce@sle16: CCE-95788-6
 
 ocil_clause: is not configured
 
diff --git a/linux_os/guide/system/accounts/accounts-session/accounts_polyinstantiated_var_tmp/rule.yml b/linux_os/guide/system/accounts/accounts-session/accounts_polyinstantiated_var_tmp/rule.yml
index c58ada6743ce..276e58a84c72 100644
--- a/linux_os/guide/system/accounts/accounts-session/accounts_polyinstantiated_var_tmp/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-session/accounts_polyinstantiated_var_tmp/rule.yml
@@ -22,6 +22,7 @@ identifiers:
   cce@rhel10: CCE-88424-7
   cce@sle12: CCE-91507-4
   cce@sle15: CCE-91198-2
+  cce@sle16: CCE-96428-8
 
 ocil_clause: is not configured
 
diff --git a/linux_os/guide/system/accounts/accounts-session/accounts_user_dot_group_ownership/rule.yml b/linux_os/guide/system/accounts/accounts-session/accounts_user_dot_group_ownership/rule.yml
index ef74d0ecb3c2..3605f82340c7 100644
--- a/linux_os/guide/system/accounts/accounts-session/accounts_user_dot_group_ownership/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-session/accounts_user_dot_group_ownership/rule.yml
@@ -25,6 +25,7 @@ identifiers:
     cce@rhel10: CCE-89225-7
     cce@sle12: CCE-92295-5
     cce@sle15: CCE-91408-5
+    cce@sle16: CCE-96569-9
 
 references:
     cis@sle12: 6.2.8
diff --git a/linux_os/guide/system/accounts/accounts-session/accounts_user_dot_user_ownership/rule.yml b/linux_os/guide/system/accounts/accounts-session/accounts_user_dot_user_ownership/rule.yml
index 203e1e8eabc8..2713d8bc60bc 100644
--- a/linux_os/guide/system/accounts/accounts-session/accounts_user_dot_user_ownership/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-session/accounts_user_dot_user_ownership/rule.yml
@@ -24,6 +24,7 @@ identifiers:
     cce@rhel10: CCE-86981-8
     cce@sle12: CCE-92296-3
     cce@sle15: CCE-91409-3
+    cce@sle16: CCE-96227-4
 
 references:
     cis@sle12: 6.2.8
diff --git a/linux_os/guide/system/accounts/accounts-session/accounts_user_interactive_home_directory_on_separate_partition/oval/shared.xml b/linux_os/guide/system/accounts/accounts-session/accounts_user_interactive_home_directory_on_separate_partition/oval/shared.xml
new file mode 100644
index 000000000000..02efcd031d5f
--- /dev/null
+++ b/linux_os/guide/system/accounts/accounts-session/accounts_user_interactive_home_directory_on_separate_partition/oval/shared.xml
@@ -0,0 +1,71 @@
+<def-group>
+  <definition class="compliance"
+              id="{{{ rule_id }}}" version="1">
+    {{{ oval_metadata("All interactive user home directories must reside on a separate partition from root.", rule_title=rule_title) }}}
+    <criteria operator="OR">
+      <criterion test_ref="test_{{{ rule_id }}}"
+                 comment="All interactive user home directories are on a separate partition"/>
+      <criterion test_ref="test_{{{ rule_id }}}_no_interactive_users"
+                 comment="No interactive users exist on the system"/>
+    </criteria>
+  </definition>
+
+  <!-- ============================================================ -->
+  <!-- Part 1: Collect all non-root mount points from the system     -->
+  <!-- ============================================================ -->
+  <linux:partition_object id="object_{{{ rule_id }}}_non_root_partitions" version="1">
+    <linux:mount_point operation="not equal">/</linux:mount_point>
+  </linux:partition_object>
+
+  <!-- Build regex patterns from mount points: ^<mount_point>(/|$)
+       The (/|$) suffix prevents substring false matches, e.g.
+       mount point /home should not match home directory /home2/user -->
+  <local_variable id="var_{{{ rule_id }}}_mount_regex" datatype="string" version="1"
+                  comment="Regex patterns to match home dirs on non-root partitions">
+    <concat>
+      <literal_component>^</literal_component>
+      <object_component item_field="mount_point"
+                        object_ref="object_{{{ rule_id }}}_non_root_partitions"/>
+      <literal_component>(/|$)</literal_component>
+    </concat>
+  </local_variable>
+
+  <!-- ============================================================ -->
+  <!-- Part 2: Extract home directories of interactive users         -->
+  <!-- Interactive users: UID >= 1000, shell not nologin,             -->
+  <!-- username not nobody/nfsnobody                                 -->
+  <!-- ============================================================ -->
+  <ind:textfilecontent54_object id="object_{{{ rule_id }}}_interactive_users" version="1">
+    <ind:filepath>/etc/passwd</ind:filepath>
+    <ind:pattern operation="pattern match"
+      >^(?:(?!nobody|nfsnobody)[^:]*):(?:[^:]*:)[1-9]\d{3,}:(?:[^:]*:){2}([^:]+):(?!(?:/usr)?/sbin/nologin$)[^:]*$</ind:pattern>
+    <ind:instance datatype="int" operation="greater than or equal">1</ind:instance>
+  </ind:textfilecontent54_object>
+
+  <!-- ============================================================ -->
+  <!-- Part 3: Test that ALL interactive users' home directories     -->
+  <!-- match at least one non-root mount point regex                 -->
+  <!-- ============================================================ -->
+  <ind:textfilecontent54_test id="test_{{{ rule_id }}}"
+                              check="all" check_existence="at_least_one_exists"
+                              version="1"
+                              comment="All interactive user home dirs are on separate partitions">
+    <ind:object object_ref="object_{{{ rule_id }}}_interactive_users"/>
+    <ind:state state_ref="state_{{{ rule_id }}}_on_separate_partition"/>
+  </ind:textfilecontent54_test>
+
+  <ind:textfilecontent54_state id="state_{{{ rule_id }}}_on_separate_partition" version="1">
+    <ind:subexpression operation="pattern match" var_check="at least one"
+                       var_ref="var_{{{ rule_id }}}_mount_regex"/>
+  </ind:textfilecontent54_state>
+
+  <!-- ============================================================ -->
+  <!-- Part 4: Handle edge case - no interactive users on system     -->
+  <!-- ============================================================ -->
+  <ind:textfilecontent54_test id="test_{{{ rule_id }}}_no_interactive_users"
+                              check="all" check_existence="none_exist"
+                              version="1"
+                              comment="No interactive users exist on the system">
+    <ind:object object_ref="object_{{{ rule_id }}}_interactive_users"/>
+  </ind:textfilecontent54_test>
+</def-group>
diff --git a/linux_os/guide/system/accounts/accounts-session/accounts_user_interactive_home_directory_on_separate_partition/rule.yml b/linux_os/guide/system/accounts/accounts-session/accounts_user_interactive_home_directory_on_separate_partition/rule.yml
new file mode 100644
index 000000000000..d50d5b5e1112
--- /dev/null
+++ b/linux_os/guide/system/accounts/accounts-session/accounts_user_interactive_home_directory_on_separate_partition/rule.yml
@@ -0,0 +1,48 @@
+documentation_complete: true
+
+title: 'All Interactive User Home Directories Must Reside On a Separate Partition'
+
+description: |-
+    All interactive user home directories must be located on a file system
+    partition separate from the root (<tt>/</tt>) partition. If any interactive
+    user's home directory resides directly on the root file system, a failure
+    of that file system or a user filling it up could impact system operation.
+
+rationale: |-
+    Ensuring that interactive user home directories are on a separate
+    partition from the root file system prevents users from filling the root
+    partition, which could result in system instability or denial of service.
+    It also allows administrators to apply more restrictive mount options
+    such as <tt>noexec</tt>, <tt>nosuid</tt>, and <tt>nodev</tt> to the
+    partition containing user home directories.
+
+severity: medium
+
+identifiers:
+    cce@rhel8: CCE-90711-3
+
+references:
+    srg: SRG-OS-000480-GPOS-00227
+
+ocil_clause: 'any interactive user home directory is on the root partition'
+
+ocil: |-
+    Verify that all interactive user home directories are on a separate
+    file system partition with the following commands:
+
+    List interactive users and their home directories:
+    <pre>$ awk -F: '($3&gt;={{{ uid_min }}})&amp;&amp;($7 !~ /nologin/){print $1, $6}' /etc/passwd</pre>
+
+    For each home directory listed, verify it is on a separate partition:
+    <pre>$ df &lt;home_directory&gt; | tail -1 | awk '{print $6}'</pre>
+
+    If the command returns <tt>/</tt> for any interactive user home directory,
+    this is a finding.
+
+fixtext: |-
+    Migrate interactive user home directories that reside on the root
+    file system to a separate partition.
+
+srg_requirement: 'All {{{ full_name }}} interactive user home directories must reside on a file system separate from the root partition.'
+
+platform: machine
diff --git a/linux_os/guide/system/accounts/accounts-session/accounts_user_interactive_home_directory_on_separate_partition/tests/home_on_root_partition.fail.sh b/linux_os/guide/system/accounts/accounts-session/accounts_user_interactive_home_directory_on_separate_partition/tests/home_on_root_partition.fail.sh
new file mode 100644
index 000000000000..4191ed7d46f4
--- /dev/null
+++ b/linux_os/guide/system/accounts/accounts-session/accounts_user_interactive_home_directory_on_separate_partition/tests/home_on_root_partition.fail.sh
@@ -0,0 +1,8 @@
+#!/bin/bash
+# platform = multi_platform_all
+# remediation = none
+
+{{{ bash_remove_interactive_users_from_passwd_by_uid() }}}
+
+mkdir -p /root_home
+useradd -m -d /root_home/testUser1 testUser1
diff --git a/linux_os/guide/system/accounts/accounts-session/accounts_user_interactive_home_directory_on_separate_partition/tests/home_on_separate_partition.pass.sh b/linux_os/guide/system/accounts/accounts-session/accounts_user_interactive_home_directory_on_separate_partition/tests/home_on_separate_partition.pass.sh
new file mode 100644
index 000000000000..6b6858caa70b
--- /dev/null
+++ b/linux_os/guide/system/accounts/accounts-session/accounts_user_interactive_home_directory_on_separate_partition/tests/home_on_separate_partition.pass.sh
@@ -0,0 +1,19 @@
+#!/bin/bash
+# platform = multi_platform_all
+
+. $SHARED/partition.sh
+
+{{{ bash_remove_interactive_users_from_passwd_by_uid() }}}
+
+umount /srv || true
+
+clean_up_partition /srv
+
+create_partition
+
+make_fstab_correct_partition_line /srv
+
+mount_partition /srv
+
+mkdir -p /srv/home
+useradd -m -d /srv/home/testUser1 testUser1
diff --git a/linux_os/guide/system/accounts/accounts-session/accounts_user_interactive_home_directory_on_separate_partition/tests/mixed_users_one_on_root.fail.sh b/linux_os/guide/system/accounts/accounts-session/accounts_user_interactive_home_directory_on_separate_partition/tests/mixed_users_one_on_root.fail.sh
new file mode 100644
index 000000000000..94b1ed0b4054
--- /dev/null
+++ b/linux_os/guide/system/accounts/accounts-session/accounts_user_interactive_home_directory_on_separate_partition/tests/mixed_users_one_on_root.fail.sh
@@ -0,0 +1,23 @@
+#!/bin/bash
+# platform = multi_platform_all
+# remediation = none
+
+. $SHARED/partition.sh
+
+{{{ bash_remove_interactive_users_from_passwd_by_uid() }}}
+
+umount /srv || true
+
+clean_up_partition /srv
+
+create_partition
+
+make_fstab_correct_partition_line /srv
+
+mount_partition /srv
+
+mkdir -p /srv/home
+useradd -m -d /srv/home/testUser1 testUser1
+
+mkdir -p /root_home
+useradd -m -d /root_home/testUser2 testUser2
diff --git a/linux_os/guide/system/accounts/accounts-session/accounts_user_interactive_home_directory_on_separate_partition/tests/no_interactive_users.pass.sh b/linux_os/guide/system/accounts/accounts-session/accounts_user_interactive_home_directory_on_separate_partition/tests/no_interactive_users.pass.sh
new file mode 100644
index 000000000000..5f33e91bcd1c
--- /dev/null
+++ b/linux_os/guide/system/accounts/accounts-session/accounts_user_interactive_home_directory_on_separate_partition/tests/no_interactive_users.pass.sh
@@ -0,0 +1,4 @@
+#!/bin/bash
+# platform = multi_platform_all
+
+{{{ bash_remove_interactive_users_from_passwd_by_uid() }}}
diff --git a/linux_os/guide/system/accounts/accounts-session/accounts_users_home_files_groupownership/rule.yml b/linux_os/guide/system/accounts/accounts-session/accounts_users_home_files_groupownership/rule.yml
index 4ddd6fdbecc9..d6a764c59f60 100644
--- a/linux_os/guide/system/accounts/accounts-session/accounts_users_home_files_groupownership/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-session/accounts_users_home_files_groupownership/rule.yml
@@ -24,6 +24,7 @@ identifiers:
     cce@rhel10: CCE-87195-4
     cce@sle12: CCE-92292-2
     cce@sle15: CCE-91405-1
+    cce@sle16: CCE-96340-5
 
 references:
     cis@sle12: 6.2.7
diff --git a/linux_os/guide/system/accounts/accounts-session/accounts_users_home_files_ownership/rule.yml b/linux_os/guide/system/accounts/accounts-session/accounts_users_home_files_ownership/rule.yml
index 69e726080d45..9c3738271c36 100644
--- a/linux_os/guide/system/accounts/accounts-session/accounts_users_home_files_ownership/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-session/accounts_users_home_files_ownership/rule.yml
@@ -26,6 +26,7 @@ identifiers:
     cce@rhel10: CCE-88043-5
     cce@sle12: CCE-92293-0
     cce@sle15: CCE-91406-9
+    cce@sle16: CCE-96099-7
 
 references:
     cis@sle12: 6.2.7
diff --git a/linux_os/guide/system/accounts/accounts-session/accounts_users_home_files_permissions/rule.yml b/linux_os/guide/system/accounts/accounts-session/accounts_users_home_files_permissions/rule.yml
index 630e46097f9e..df1cf7b7967a 100644
--- a/linux_os/guide/system/accounts/accounts-session/accounts_users_home_files_permissions/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-session/accounts_users_home_files_permissions/rule.yml
@@ -21,6 +21,7 @@ identifiers:
     cce@rhel10: CCE-87460-2
     cce@sle12: CCE-92290-6
     cce@sle15: CCE-91403-6
+    cce@sle16: CCE-96668-9
     cce@slmicro5: CCE-94028-8
 
 references:
diff --git a/linux_os/guide/system/accounts/accounts-session/file_permission_user_init_files/rule.yml b/linux_os/guide/system/accounts/accounts-session/file_permission_user_init_files/rule.yml
index d945e84c2b55..46ddf596ed6e 100644
--- a/linux_os/guide/system/accounts/accounts-session/file_permission_user_init_files/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-session/file_permission_user_init_files/rule.yml
@@ -21,6 +21,7 @@ identifiers:
     cce@rhel10: CCE-87771-2
     cce@sle12: CCE-83097-6
     cce@sle15: CCE-85630-2
+    cce@sle16: CCE-96448-6
     cce@slmicro5: CCE-93749-0
     cce@slmicro6: CCE-95059-2 
 
diff --git a/linux_os/guide/system/accounts/accounts-session/user_umask/accounts_umask_etc_bashrc/rule.yml b/linux_os/guide/system/accounts/accounts-session/user_umask/accounts_umask_etc_bashrc/rule.yml
index 8d3ae79e0aae..d62e681a65e2 100644
--- a/linux_os/guide/system/accounts/accounts-session/user_umask/accounts_umask_etc_bashrc/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-session/user_umask/accounts_umask_etc_bashrc/rule.yml
@@ -29,6 +29,7 @@ identifiers:
     cce@rhel10: CCE-88580-6
     cce@sle12: CCE-91530-6
     cce@sle15: CCE-91215-4
+    cce@sle16: CCE-95724-1
     cce@slmicro5: CCE-94023-9
 
 references:
diff --git a/linux_os/guide/system/accounts/accounts-session/user_umask/accounts_umask_etc_login_defs/rule.yml b/linux_os/guide/system/accounts/accounts-session/user_umask/accounts_umask_etc_login_defs/rule.yml
index 7e9fd1b6dcf4..2169d4fa5f9c 100644
--- a/linux_os/guide/system/accounts/accounts-session/user_umask/accounts_umask_etc_login_defs/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-session/user_umask/accounts_umask_etc_login_defs/rule.yml
@@ -20,6 +20,7 @@ identifiers:
     cce@rhel10: CCE-89314-9
     cce@sle12: CCE-83052-1
     cce@sle15: CCE-85659-1
+    cce@sle16: CCE-96038-5
     cce@slmicro5: CCE-93753-2
     cce@slmicro6: CCE-95089-9
 
diff --git a/linux_os/guide/system/accounts/accounts-session/user_umask/accounts_umask_etc_profile/rule.yml b/linux_os/guide/system/accounts/accounts-session/user_umask/accounts_umask_etc_profile/rule.yml
index 09900441660f..93adfed8d28c 100644
--- a/linux_os/guide/system/accounts/accounts-session/user_umask/accounts_umask_etc_profile/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-session/user_umask/accounts_umask_etc_profile/rule.yml
@@ -25,6 +25,7 @@ identifiers:
     cce@rhel10: CCE-87651-6
     cce@sle12: CCE-91531-4
     cce@sle15: CCE-91216-2
+    cce@sle16: CCE-96140-9
     cce@slmicro5: CCE-94024-7
 
 references:
diff --git a/linux_os/guide/system/bootloader-grub2/grub2_enable_iommu_force/rule.yml b/linux_os/guide/system/bootloader-grub2/grub2_enable_iommu_force/rule.yml
index 41ee2618721c..e4796100e88f 100644
--- a/linux_os/guide/system/bootloader-grub2/grub2_enable_iommu_force/rule.yml
+++ b/linux_os/guide/system/bootloader-grub2/grub2_enable_iommu_force/rule.yml
@@ -19,7 +19,7 @@ identifiers:
     cce@rhel10: CCE-87932-0
     cce@sle12: CCE-91532-2
     cce@sle15: CCE-91217-0
-
+    cce@sle16: CCE-96649-9
 
 ocil_clause: 'I/OMMU is not activated'
 
diff --git a/linux_os/guide/system/bootloader-grub2/grub2_l1tf_argument/rule.yml b/linux_os/guide/system/bootloader-grub2/grub2_l1tf_argument/rule.yml
index 8776d5bf3287..e457bb00cce3 100644
--- a/linux_os/guide/system/bootloader-grub2/grub2_l1tf_argument/rule.yml
+++ b/linux_os/guide/system/bootloader-grub2/grub2_l1tf_argument/rule.yml
@@ -30,6 +30,7 @@ identifiers:
     cce@rhel8: CCE-88123-5
     cce@rhel9: CCE-89123-4
     cce@rhel10: CCE-86521-2
+    cce@sle16: CCE-96540-0
 
 ocil_clause: 'l1tf mitigations are not configured appropriately'
 
diff --git a/linux_os/guide/system/bootloader-grub2/grub2_mce_argument/rule.yml b/linux_os/guide/system/bootloader-grub2/grub2_mce_argument/rule.yml
index b9d0db90b0f8..35cca812501a 100644
--- a/linux_os/guide/system/bootloader-grub2/grub2_mce_argument/rule.yml
+++ b/linux_os/guide/system/bootloader-grub2/grub2_mce_argument/rule.yml
@@ -23,6 +23,7 @@ identifiers:
     cce@rhel8: CCE-87098-0
     cce@rhel9: CCE-88098-9
     cce@rhel10: CCE-87067-5
+    cce@sle16: CCE-95847-0
 
 ocil_clause: 'MCE tolerance is not set to zero'
 
diff --git a/linux_os/guide/system/bootloader-grub2/grub2_nosmap_argument_absent/rule.yml b/linux_os/guide/system/bootloader-grub2/grub2_nosmap_argument_absent/rule.yml
index 5ef143096710..659ce0038ea1 100644
--- a/linux_os/guide/system/bootloader-grub2/grub2_nosmap_argument_absent/rule.yml
+++ b/linux_os/guide/system/bootloader-grub2/grub2_nosmap_argument_absent/rule.yml
@@ -22,6 +22,7 @@ identifiers:
     cce@rhel8: CCE-87345-5
     cce@rhel9: CCE-88345-4
     cce@rhel10: CCE-89372-7
+    cce@sle16: CCE-95742-3
 
 ocil_clause: 'the kernel is configured to disable SMAP'
 
diff --git a/linux_os/guide/system/bootloader-grub2/grub2_rng_core_default_quality_argument/rule.yml b/linux_os/guide/system/bootloader-grub2/grub2_rng_core_default_quality_argument/rule.yml
index ed4f2ce3dfc1..1448e85596f0 100644
--- a/linux_os/guide/system/bootloader-grub2/grub2_rng_core_default_quality_argument/rule.yml
+++ b/linux_os/guide/system/bootloader-grub2/grub2_rng_core_default_quality_argument/rule.yml
@@ -31,6 +31,7 @@ identifiers:
     cce@rhel8: CCE-89567-2
     cce@rhel9: CCE-90567-9
     cce@rhel10: CCE-90519-0
+    cce@sle16: CCE-95794-4
 
 ocil_clause: 'trust on hardware random number generator is not configured appropriately'
 
diff --git a/linux_os/guide/system/bootloader-grub2/grub2_slab_nomerge_argument/rule.yml b/linux_os/guide/system/bootloader-grub2/grub2_slab_nomerge_argument/rule.yml
index bc977ab55fac..4fff9eee7baf 100644
--- a/linux_os/guide/system/bootloader-grub2/grub2_slab_nomerge_argument/rule.yml
+++ b/linux_os/guide/system/bootloader-grub2/grub2_slab_nomerge_argument/rule.yml
@@ -29,6 +29,7 @@ identifiers:
     cce@rhel8: CCE-86777-0
     cce@rhel9: CCE-87770-4
     cce@rhel10: CCE-89884-1
+    cce@sle16: CCE-95733-2
 
 ocil_clause: 'merging of slabs with similar size is enabled'
 
diff --git a/linux_os/guide/system/bootloader-grub2/grub2_spec_store_bypass_disable_argument/rule.yml b/linux_os/guide/system/bootloader-grub2/grub2_spec_store_bypass_disable_argument/rule.yml
index 67870630e885..608da7e8a0a7 100644
--- a/linux_os/guide/system/bootloader-grub2/grub2_spec_store_bypass_disable_argument/rule.yml
+++ b/linux_os/guide/system/bootloader-grub2/grub2_spec_store_bypass_disable_argument/rule.yml
@@ -33,6 +33,7 @@ identifiers:
     cce@rhel8: CCE-89234-9
     cce@rhel9: CCE-90234-6
     cce@rhel10: CCE-89300-8
+    cce@sle16: CCE-95929-6
 
 ocil_clause: 'SSB is not configured appropriately'
 
diff --git a/linux_os/guide/system/bootloader-grub2/non-uefi/grub2_password/rule.yml b/linux_os/guide/system/bootloader-grub2/non-uefi/grub2_password/rule.yml
index c605b0770177..c1f8cd5e485f 100644
--- a/linux_os/guide/system/bootloader-grub2/non-uefi/grub2_password/rule.yml
+++ b/linux_os/guide/system/bootloader-grub2/non-uefi/grub2_password/rule.yml
@@ -9,14 +9,14 @@ description: |-
     <br /><br />
     Since plaintext passwords are a security risk, generate a hash for the password
     by running the following command:
-    {{% if product in ["sle12", "sle15", "slmicro5", "slmicro6"] or 'ubuntu' in product %}}
+    {{% if 'sle' in product or 'slmicro' in product or 'ubuntu' in product %}}
     <pre># grub2-mkpasswd-pbkdf2</pre>
     {{% else %}}
     <pre># grub2-setpassword</pre>
     {{% endif %}}
     When prompted, enter the password that was selected.
     <br /><br />
-    {{% if product in ["sle12", "sle15", "slmicro5", "slmicro6"] or 'ubuntu' in product %}}
+    {{% if 'sle' in product or 'slmicro' in product or 'ubuntu' in product %}}
     Using the hash from the output, modify the <tt>/etc/grub.d/40_custom</tt>
     file with the following content:
     <pre>set superusers="boot"
diff --git a/linux_os/guide/system/bootloader-grub2/uefi/file_groupowner_efi_grub2_cfg/rule.yml b/linux_os/guide/system/bootloader-grub2/uefi/file_groupowner_efi_grub2_cfg/rule.yml
index f85ec95dda05..e2d216c22c60 100644
--- a/linux_os/guide/system/bootloader-grub2/uefi/file_groupowner_efi_grub2_cfg/rule.yml
+++ b/linux_os/guide/system/bootloader-grub2/uefi/file_groupowner_efi_grub2_cfg/rule.yml
@@ -19,6 +19,7 @@ identifiers:
     cce@rhel8: CCE-85915-7
     cce@rhel9: CCE-86696-2
     cce@rhel10: CCE-88090-6
+    cce@sle16: CCE-96462-7
 
 references:
     cis-csc: 12,13,14,15,16,18,3,5
diff --git a/linux_os/guide/system/bootloader-grub2/uefi/file_groupowner_efi_user_cfg/rule.yml b/linux_os/guide/system/bootloader-grub2/uefi/file_groupowner_efi_user_cfg/rule.yml
index b8886be9fb7b..d58624623dbb 100644
--- a/linux_os/guide/system/bootloader-grub2/uefi/file_groupowner_efi_user_cfg/rule.yml
+++ b/linux_os/guide/system/bootloader-grub2/uefi/file_groupowner_efi_user_cfg/rule.yml
@@ -19,6 +19,7 @@ identifiers:
     cce@rhel8: CCE-86012-2
     cce@rhel9: CCE-86013-0
     cce@rhel10: CCE-87222-6
+    cce@sle16: CCE-96609-3
 
 references:
     cis-csc: 12,13,14,15,16,18,3,5
diff --git a/linux_os/guide/system/bootloader-grub2/uefi/file_owner_efi_grub2_cfg/rule.yml b/linux_os/guide/system/bootloader-grub2/uefi/file_owner_efi_grub2_cfg/rule.yml
index 3ee7b3854c55..d2432647b3d0 100644
--- a/linux_os/guide/system/bootloader-grub2/uefi/file_owner_efi_grub2_cfg/rule.yml
+++ b/linux_os/guide/system/bootloader-grub2/uefi/file_owner_efi_grub2_cfg/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhel8: CCE-85913-2
     cce@rhel9: CCE-86695-4
     cce@rhel10: CCE-89243-0
+    cce@sle16: CCE-96057-5
 
 references:
     cis-csc: 12,13,14,15,16,18,3,5
diff --git a/linux_os/guide/system/bootloader-grub2/uefi/file_owner_efi_user_cfg/rule.yml b/linux_os/guide/system/bootloader-grub2/uefi/file_owner_efi_user_cfg/rule.yml
index 89f771cab2b7..9587955025d3 100644
--- a/linux_os/guide/system/bootloader-grub2/uefi/file_owner_efi_user_cfg/rule.yml
+++ b/linux_os/guide/system/bootloader-grub2/uefi/file_owner_efi_user_cfg/rule.yml
@@ -19,6 +19,7 @@ identifiers:
     cce@rhel8: CCE-86021-3
     cce@rhel9: CCE-86022-1
     cce@rhel10: CCE-89217-4
+    cce@sle16: CCE-96438-7
 
 references:
     cis-csc: 12,13,14,15,16,18,3,5
diff --git a/linux_os/guide/system/bootloader-grub2/uefi/file_permissions_efi_grub2_cfg/rule.yml b/linux_os/guide/system/bootloader-grub2/uefi/file_permissions_efi_grub2_cfg/rule.yml
index a4a7abb81ba4..bc9267378c97 100644
--- a/linux_os/guide/system/bootloader-grub2/uefi/file_permissions_efi_grub2_cfg/rule.yml
+++ b/linux_os/guide/system/bootloader-grub2/uefi/file_permissions_efi_grub2_cfg/rule.yml
@@ -18,6 +18,7 @@ identifiers:
     cce@rhel8: CCE-85912-4
     cce@rhel9: CCE-85925-6
     cce@rhel10: CCE-88815-6
+    cce@sle16: CCE-96129-2
 
 references:
     cis-csc: 12,13,14,15,16,18,3,5
diff --git a/linux_os/guide/system/bootloader-grub2/uefi/file_permissions_efi_user_cfg/rule.yml b/linux_os/guide/system/bootloader-grub2/uefi/file_permissions_efi_user_cfg/rule.yml
index 29b2d1b53306..274b9f55651f 100644
--- a/linux_os/guide/system/bootloader-grub2/uefi/file_permissions_efi_user_cfg/rule.yml
+++ b/linux_os/guide/system/bootloader-grub2/uefi/file_permissions_efi_user_cfg/rule.yml
@@ -18,6 +18,7 @@ identifiers:
     cce@rhel8: CCE-86028-8
     cce@rhel9: CCE-86029-6
     cce@rhel10: CCE-90297-3
+    cce@sle16: CCE-96025-2
 
 references:
     cis-csc: 12,13,14,15,16,18,3,5
diff --git a/linux_os/guide/system/bootloader-grub2/uefi/grub2_uefi_admin_username/oval/shared.xml b/linux_os/guide/system/bootloader-grub2/uefi/grub2_uefi_admin_username/oval/shared.xml
index 07f99ff5bba8..170d6e34ab17 100644
--- a/linux_os/guide/system/bootloader-grub2/uefi/grub2_uefi_admin_username/oval/shared.xml
+++ b/linux_os/guide/system/bootloader-grub2/uefi/grub2_uefi_admin_username/oval/shared.xml
@@ -7,6 +7,15 @@
       <criterion comment="Superuser is defined in {{{ grub2_uefi_boot_path }}}/grub.cfg and it
             isn't root, admin, administrator nor equal to any system username"
             test_ref="test_bootloader_uefi_superuser_differ_from_other_users"/>
+{{% if product in ["rhel8"] %}}
+<!-- In RHEL 8 cloud images (eg. AWS) the /boot/efi/EFI/redhat/grub.cfg contains a stub pointing to /boot/grub2/grub.cfg -->
+      <criteria operator="AND" comment="check if {{{ grub2_uefi_boot_path }}}/grub.cfg is a stub pointing to {{{ grub2_boot_path }}}/grub.cfg">
+        <criterion comment="check if {{{ grub2_uefi_boot_path }}}/grub.cfg contains a configfile directive" test_ref="test_grub2_uefi_admin_username_stub" />
+        <criterion comment="Superuser is defined in {{{ grub2_boot_path }}}/grub.cfg and it
+              isn't root, admin, administrator nor equal to any system username"
+              test_ref="test_bootloader_uefi_boot_superuser_differ_from_other_users"/>
+      </criteria>
+{{% endif %}}
     </criteria>
   </definition>
 
@@ -33,10 +42,36 @@
     <ind:state state_ref="state_bootloader_uefi_superuser_differ_from_other_users" />
   </ind:textfilecontent54_test>
 
+{{% set superusers_regex = '^[\\s]*set[\\s]+superusers="(?i)\\b(?!(?:root|admin|administrator)\\b)(\\w+)".*\\n[\\s]*export[\\s]+superusers[\\s]*$' %}}
+
   <ind:textfilecontent54_object id="object_bootloader_uefi_unique_superuser" version="1">
     <ind:filepath>{{{ grub2_uefi_boot_path }}}/grub.cfg</ind:filepath>
-    <ind:pattern operation="pattern match"
-          >^[\s]*set[\s]+superusers="(?i)\b(?!(?:root|admin|administrator)\b)(\w+)".*\n[\s]*export[\s]+superusers[\s]*$</ind:pattern>
+    <ind:pattern operation="pattern match">{{{ superusers_regex }}}</ind:pattern>
+    <ind:instance datatype="int">1</ind:instance>
+  </ind:textfilecontent54_object>
+{{% if product in ["rhel8"] %}}
+  <ind:textfilecontent54_test check="all" check_existence="all_exist" comment="check if {{{ grub2_uefi_boot_path }}}/grub.cfg contains a configfile directive" id="test_grub2_uefi_admin_username_stub" version="1">
+    <ind:object object_ref="object_grub2_uefi_admin_username_stub" />
+  </ind:textfilecontent54_test>
+  <ind:textfilecontent54_object id="object_grub2_uefi_admin_username_stub" version="1">
+    <ind:filepath>{{{ grub2_uefi_boot_path }}}/grub.cfg</ind:filepath>
+    <ind:pattern operation="pattern match">^[\s]*configfile\b.*$</ind:pattern>
+    <ind:instance datatype="int">1</ind:instance>
+  </ind:textfilecontent54_object>
+
+  <ind:textfilecontent54_test check="all" check_existence="all_exist" comment="superuser
+          is defined in {{{ grub2_boot_path }}}/grub.cfg. Superuser is not
+          equal to other system account nor root, admin, administrator"
+          id="test_bootloader_uefi_boot_superuser_differ_from_other_users" version="1">
+    <ind:object object_ref="object_bootloader_uefi_boot_unique_superuser" />
+    <ind:state state_ref="state_bootloader_uefi_superuser_differ_from_other_users" />
+  </ind:textfilecontent54_test>
+
+  <ind:textfilecontent54_object id="object_bootloader_uefi_boot_unique_superuser" version="1">
+    <ind:filepath>{{{ grub2_boot_path }}}/grub.cfg</ind:filepath>
+    <ind:pattern operation="pattern match">{{{ superusers_regex }}}</ind:pattern>
     <ind:instance datatype="int">1</ind:instance>
   </ind:textfilecontent54_object>
+{{% endif %}}
+
 </def-group>
diff --git a/linux_os/guide/system/bootloader-grub2/uefi/grub2_uefi_admin_username/tests/stub.fail.sh b/linux_os/guide/system/bootloader-grub2/uefi/grub2_uefi_admin_username/tests/stub.fail.sh
new file mode 100644
index 000000000000..4c077fa1bb1f
--- /dev/null
+++ b/linux_os/guide/system/bootloader-grub2/uefi/grub2_uefi_admin_username/tests/stub.fail.sh
@@ -0,0 +1,13 @@
+#!/bin/bash
+# platform = Red Hat Enterprise Linux 8
+
+. $SHARED/grub2.sh
+
+cat <<'EOF' >/boot/efi/EFI/redhat/grub.cfg
+search --no-floppy --set prefix --file /boot/grub2/grub.cfg
+set prefix=($prefix)/boot/grub2
+configfile $prefix/grub.cfg
+EOF
+
+GRUB_CFG_ROOT="/boot/grub2"
+set_superusers "root"
diff --git a/linux_os/guide/system/bootloader-grub2/uefi/grub2_uefi_admin_username/tests/stub.pass.sh b/linux_os/guide/system/bootloader-grub2/uefi/grub2_uefi_admin_username/tests/stub.pass.sh
new file mode 100644
index 000000000000..45a6bb0c61f2
--- /dev/null
+++ b/linux_os/guide/system/bootloader-grub2/uefi/grub2_uefi_admin_username/tests/stub.pass.sh
@@ -0,0 +1,13 @@
+#!/bin/bash
+# platform = Red Hat Enterprise Linux 8
+
+. $SHARED/grub2.sh
+
+cat <<'EOF' >/boot/efi/EFI/redhat/grub.cfg
+search --no-floppy --set prefix --file /boot/grub2/grub.cfg
+set prefix=($prefix)/boot/grub2
+configfile $prefix/grub.cfg
+EOF
+
+GRUB_CFG_ROOT="/boot/grub2"
+set_superusers "koskic"
diff --git a/linux_os/guide/system/bootloader-grub2/uefi/grub2_uefi_password/oval/shared.xml b/linux_os/guide/system/bootloader-grub2/uefi/grub2_uefi_password/oval/shared.xml
index 6323828071e6..c780cf69e5e1 100644
--- a/linux_os/guide/system/bootloader-grub2/uefi/grub2_uefi_password/oval/shared.xml
+++ b/linux_os/guide/system/bootloader-grub2/uefi/grub2_uefi_password/oval/shared.xml
@@ -4,9 +4,16 @@
 
     <criteria operator="OR">
       <criterion comment="make sure a password is defined in {{{ grub2_uefi_boot_path }}}/user.cfg" test_ref="test_grub2_uefi_password_usercfg" />
+{{% if product in ["rhel8"] %}}
+<!-- In RHEL 8 cloud images (eg. AWS) the /boot/efi/EFI/redhat/grub.cfg contains a stub pointing to /boot/grub2/grub.cfg -->
+      <criteria operator="AND" comment="check if {{{ grub2_uefi_boot_path }}}/grub.cfg is a stub pointing to {{{ grub2_boot_path }}}/grub.cfg">
+        <criterion comment="check if {{{ grub2_uefi_boot_path }}}/grub.cfg contains a configfile directive" test_ref="test_grub2_uefi_password_stub" />
+        <criterion comment="make sure a password is defined in {{{ grub2_boot_path }}}/user.cfg" test_ref="test_grub2_uefi_password_boot_usercfg" />
+      </criteria>
+{{% endif %}}
     </criteria>
   </definition>
-  
+
   <ind:textfilecontent54_test check="all" check_existence="all_exist" comment="make sure a password is defined in {{{ grub2_uefi_boot_path }}}/user.cfg" id="test_grub2_uefi_password_usercfg" version="1">
     <ind:object object_ref="object_grub2_uefi_password_usercfg" />
   </ind:textfilecontent54_test>
@@ -16,4 +23,24 @@
     <ind:instance datatype="int">1</ind:instance>
   </ind:textfilecontent54_object>
 
+{{% if product in ["rhel8"] %}}
+  <ind:textfilecontent54_test check="all" check_existence="all_exist" comment="check if {{{ grub2_uefi_boot_path }}}/grub.cfg contains a configfile directive" id="test_grub2_uefi_password_stub" version="1">
+    <ind:object object_ref="object_grub2_uefi_password_stub" />
+  </ind:textfilecontent54_test>
+  <ind:textfilecontent54_object id="object_grub2_uefi_password_stub" version="1">
+    <ind:filepath>{{{ grub2_uefi_boot_path }}}/grub.cfg</ind:filepath>
+    <ind:pattern operation="pattern match">^[\s]*configfile\b.*$</ind:pattern>
+    <ind:instance datatype="int">1</ind:instance>
+  </ind:textfilecontent54_object>
+
+  <ind:textfilecontent54_test check="all" check_existence="all_exist" comment="make sure a password is defined in {{{ grub2_boot_path }}}/user.cfg" id="test_grub2_uefi_password_boot_usercfg" version="1">
+    <ind:object object_ref="object_grub2_uefi_password_boot_usercfg" />
+  </ind:textfilecontent54_test>
+  <ind:textfilecontent54_object id="object_grub2_uefi_password_boot_usercfg" version="1">
+    <ind:filepath>{{{ grub2_boot_path }}}/user.cfg</ind:filepath>
+    <ind:pattern operation="pattern match">^[\s]*GRUB2_PASSWORD=grub\.pbkdf2\.sha512.*$</ind:pattern>
+    <ind:instance datatype="int">1</ind:instance>
+  </ind:textfilecontent54_object>
+{{% endif %}}
+
 </def-group>
diff --git a/linux_os/guide/system/bootloader-grub2/uefi/grub2_uefi_password/tests/invalid_username.fail.sh b/linux_os/guide/system/bootloader-grub2/uefi/grub2_uefi_password/tests/invalid_username.fail.sh
deleted file mode 100644
index c477fd7a9acd..000000000000
--- a/linux_os/guide/system/bootloader-grub2/uefi/grub2_uefi_password/tests/invalid_username.fail.sh
+++ /dev/null
@@ -1,12 +0,0 @@
-#!/bin/bash
-
-# remediation = none
-
-. $SHARED/grub2.sh
-
-set_grub_uefi_root
-
-make_grub_password
-sed -i '/set superusers/d' /boot/grub/grub.cfg
-sed -i '/export superusers/d' /boot/grub/grub.cfg
-set_superusers "use r"
diff --git a/linux_os/guide/system/bootloader-grub2/uefi/grub2_uefi_password/tests/stub.fail.sh b/linux_os/guide/system/bootloader-grub2/uefi/grub2_uefi_password/tests/stub.fail.sh
new file mode 100644
index 000000000000..0673a07f6c1a
--- /dev/null
+++ b/linux_os/guide/system/bootloader-grub2/uefi/grub2_uefi_password/tests/stub.fail.sh
@@ -0,0 +1,12 @@
+#!/bin/bash
+# platform = Red Hat Enterprise Linux 8
+
+. $SHARED/grub2.sh
+
+cp "/boot/efi/EFI/redhat/user.cfg" "/boot/grub2/user.cfg"
+cat <<'EOF' >/boot/efi/EFI/redhat/grub.cfg
+search --no-floppy --set prefix --file /boot/grub2/grub.cfg
+set prefix=($prefix)/boot/grub2
+configfile $prefix/grub.cfg
+EOF
+rm -rf "/boot/grub2/user.cfg"
diff --git a/linux_os/guide/system/bootloader-grub2/uefi/grub2_uefi_password/tests/stub.pass.sh b/linux_os/guide/system/bootloader-grub2/uefi/grub2_uefi_password/tests/stub.pass.sh
new file mode 100644
index 000000000000..13dd27d8aca1
--- /dev/null
+++ b/linux_os/guide/system/bootloader-grub2/uefi/grub2_uefi_password/tests/stub.pass.sh
@@ -0,0 +1,13 @@
+#!/bin/bash
+# platform = Red Hat Enterprise Linux 8
+
+. $SHARED/grub2.sh
+
+cat <<'EOF' >/boot/efi/EFI/redhat/grub.cfg
+search --no-floppy --set prefix --file /boot/grub2/grub.cfg
+set prefix=($prefix)/boot/grub2
+configfile $prefix/grub.cfg
+EOF
+
+GRUB_CFG_ROOT="/boot/grub2"
+make_grub_password
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_acpi_custom_method/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_acpi_custom_method/rule.yml
index 475566370679..e8783af728ce 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_acpi_custom_method/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_acpi_custom_method/rule.yml
@@ -22,6 +22,7 @@ identifiers:
     cce@rhel8: CCE-86778-8
     cce@rhel9: CCE-86779-6
     cce@rhel10: CCE-89223-2
+    cce@sle16: CCE-95814-0
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_binfmt_misc/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_binfmt_misc/rule.yml
index 212d9ef32b80..4788e37e4876 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_binfmt_misc/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_binfmt_misc/rule.yml
@@ -22,6 +22,7 @@ identifiers:
     cce@rhel8: CCE-87766-2
     cce@rhel9: CCE-87767-0
     cce@rhel10: CCE-87210-1
+    cce@sle16: CCE-96265-4
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_bug/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_bug/rule.yml
index a92d750936c0..6c11fa7bba27 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_bug/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_bug/rule.yml
@@ -21,6 +21,7 @@ identifiers:
     cce@rhel8: CCE-86095-7
     cce@rhel9: CCE-86096-5
     cce@rhel10: CCE-89980-7
+    cce@sle16: CCE-96106-0
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_compat_brk/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_compat_brk/rule.yml
index 22af2d7de31d..5d112e988cae 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_compat_brk/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_compat_brk/rule.yml
@@ -23,6 +23,7 @@ identifiers:
     cce@rhel8: CCE-88962-6
     cce@rhel9: CCE-88963-4
     cce@rhel10: CCE-90053-0
+    cce@sle16: CCE-95981-7
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_compat_vdso/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_compat_vdso/rule.yml
index ff138943aedf..259cfa6521a6 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_compat_vdso/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_compat_vdso/rule.yml
@@ -22,6 +22,7 @@ identifiers:
     cce@rhel8: CCE-87256-4
     cce@rhel9: CCE-87257-2
     cce@rhel10: CCE-88353-8
+    cce@sle16: CCE-96692-9
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_debug_credentials/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_debug_credentials/rule.yml
index 9751b1e43b51..7e21594b0534 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_debug_credentials/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_debug_credentials/rule.yml
@@ -24,6 +24,7 @@ identifiers:
     cce@rhel8: CCE-86656-6
     cce@rhel9: CCE-86657-4
     cce@rhel10: CCE-88628-3
+    cce@sle16: CCE-96017-9
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_debug_fs/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_debug_fs/rule.yml
index c325f6265d8f..7170b89ea250 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_debug_fs/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_debug_fs/rule.yml
@@ -20,6 +20,7 @@ identifiers:
     cce@rhel8: CCE-88033-6
     cce@rhel9: CCE-89033-5
     cce@rhel10: CCE-90684-2
+    cce@sle16: CCE-96629-1
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_debug_list/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_debug_list/rule.yml
index 8b43c839bf66..3566c6a9d7af 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_debug_list/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_debug_list/rule.yml
@@ -21,6 +21,7 @@ identifiers:
     cce@rhel8: CCE-86986-7
     cce@rhel9: CCE-86987-5
     cce@rhel10: CCE-86739-0
+    cce@sle16: CCE-96574-9
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_debug_notifiers/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_debug_notifiers/rule.yml
index 17c0e1980733..ee4a6269a263 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_debug_notifiers/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_debug_notifiers/rule.yml
@@ -21,6 +21,7 @@ identifiers:
     cce@rhel8: CCE-86814-1
     cce@rhel9: CCE-86815-8
     cce@rhel10: CCE-89355-2
+    cce@sle16: CCE-96344-7
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_debug_sg/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_debug_sg/rule.yml
index 8d27a5881e70..466899913901 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_debug_sg/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_debug_sg/rule.yml
@@ -20,6 +20,7 @@ identifiers:
     cce@rhel8: CCE-87148-3
     cce@rhel9: CCE-87149-1
     cce@rhel10: CCE-89292-7
+    cce@sle16: CCE-96359-5
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_default_mmap_min_addr/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_default_mmap_min_addr/rule.yml
index e9f2443a603b..fad386a0619d 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_default_mmap_min_addr/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_default_mmap_min_addr/rule.yml
@@ -26,6 +26,7 @@ identifiers:
     cce@rhel8: CCE-88160-7
     cce@rhel9: CCE-88161-5
     cce@rhel10: CCE-90330-2
+    cce@sle16: CCE-96450-2
 
 platform: x86_64_arch or aarch64_arch
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_devkmem/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_devkmem/rule.yml
index 16100ff20e37..57f5fd0804cd 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_devkmem/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_devkmem/rule.yml
@@ -20,6 +20,7 @@ identifiers:
     cce@rhel8: CCE-86947-9
     cce@rhel9: CCE-86948-7
     cce@rhel10: CCE-87428-9
+    cce@sle16: CCE-96408-0
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_hibernation/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_hibernation/rule.yml
index 9e05dd5b022c..ae1341bee709 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_hibernation/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_hibernation/rule.yml
@@ -21,6 +21,7 @@ identifiers:
     cce@rhel8: CCE-87608-6
     cce@rhel9: CCE-87609-4
     cce@rhel10: CCE-87786-0
+    cce@sle16: CCE-95950-2
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_ia32_emulation/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_ia32_emulation/rule.yml
index 60d176410d84..42d615759ab3 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_ia32_emulation/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_ia32_emulation/rule.yml
@@ -21,6 +21,7 @@ identifiers:
     cce@rhel8: CCE-88746-3
     cce@rhel9: CCE-88747-1
     cce@rhel10: CCE-87905-6
+    cce@sle16: CCE-96396-7
 
 platform: x86_64_arch
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_kexec/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_kexec/rule.yml
index c7ba5d36f3cb..25c384c9b817 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_kexec/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_kexec/rule.yml
@@ -21,6 +21,7 @@ identifiers:
     cce@rhel8: CCE-87488-3
     cce@rhel9: CCE-87489-1
     cce@rhel10: CCE-89414-7
+    cce@sle16: CCE-95737-3
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_legacy_ptys/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_legacy_ptys/rule.yml
index 0662aab9b4d3..0c143f0929db 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_legacy_ptys/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_legacy_ptys/rule.yml
@@ -20,6 +20,7 @@ identifiers:
     cce@rhel8: CCE-87925-4
     cce@rhel9: CCE-87926-2
     cce@rhel10: CCE-89570-6
+    cce@sle16: CCE-95831-4
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_module_sig/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_module_sig/rule.yml
index 4f1bea71d00a..a23af42481e2 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_module_sig/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_module_sig/rule.yml
@@ -21,6 +21,7 @@ identifiers:
     cce@rhel8: CCE-89378-4
     cce@rhel9: CCE-89379-2
     cce@rhel10: CCE-86836-4
+    cce@sle16: CCE-96615-0
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_module_sig_all/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_module_sig_all/rule.yml
index 37e9f12e17db..dfe5a018fb5d 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_module_sig_all/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_module_sig_all/rule.yml
@@ -20,6 +20,7 @@ identifiers:
     cce@rhel8: CCE-89615-9
     cce@rhel9: CCE-89616-7
     cce@rhel10: CCE-86520-4
+    cce@sle16: CCE-95955-1
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_module_sig_force/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_module_sig_force/rule.yml
index 208327b194e7..f430259f7ef7 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_module_sig_force/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_module_sig_force/rule.yml
@@ -19,6 +19,7 @@ identifiers:
     cce@rhel8: CCE-89459-2
     cce@rhel9: CCE-89460-0
     cce@rhel10: CCE-89203-4
+    cce@sle16: CCE-95719-1
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_module_sig_hash/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_module_sig_hash/rule.yml
index f05c876e20ce..3786b5bd0ac4 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_module_sig_hash/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_module_sig_hash/rule.yml
@@ -20,6 +20,7 @@ identifiers:
     cce@rhel8: CCE-89843-7
     cce@rhel9: CCE-89844-5
     cce@rhel10: CCE-87400-8
+    cce@sle16: CCE-96452-8
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_module_sig_key/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_module_sig_key/rule.yml
index cf1c3d8e6f0e..edd1c1b88e8e 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_module_sig_key/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_module_sig_key/rule.yml
@@ -26,6 +26,7 @@ identifiers:
     cce@rhel8: CCE-90000-1
     cce@rhel9: CCE-89999-7
     cce@rhel10: CCE-90444-1
+    cce@sle16: CCE-96015-3
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_module_sig_sha512/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_module_sig_sha512/rule.yml
index 723b7653d364..3fc61093df5d 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_module_sig_sha512/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_module_sig_sha512/rule.yml
@@ -19,6 +19,7 @@ identifiers:
     cce@rhel8: CCE-89692-8
     cce@rhel9: CCE-89691-0
     cce@rhel10: CCE-87565-8
+    cce@sle16: CCE-96566-5
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_page_poisoning_no_sanity/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_page_poisoning_no_sanity/rule.yml
index 89e9f627a722..8b4577861b6f 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_page_poisoning_no_sanity/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_page_poisoning_no_sanity/rule.yml
@@ -21,6 +21,7 @@ identifiers:
     cce@rhel8: CCE-88574-9
     cce@rhel9: CCE-88575-6
     cce@rhel10: CCE-87844-7
+    cce@sle16: CCE-96130-0
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_page_poisoning_zero/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_page_poisoning_zero/rule.yml
index adf28b0b2722..4e7465236c53 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_page_poisoning_zero/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_page_poisoning_zero/rule.yml
@@ -22,6 +22,7 @@ identifiers:
     cce@rhel8: CCE-88808-1
     cce@rhel9: CCE-88809-9
     cce@rhel10: CCE-90278-3
+    cce@sle16: CCE-96575-6
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_page_table_isolation/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_page_table_isolation/rule.yml
index 08624fe8a169..8d18465fdc86 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_page_table_isolation/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_page_table_isolation/rule.yml
@@ -22,6 +22,7 @@ identifiers:
     cce@rhel8: CCE-88591-3
     cce@rhel9: CCE-88592-1
     cce@rhel10: CCE-88464-3
+    cce@sle16: CCE-96529-3
 
 platform: x86_64_arch
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_panic_on_oops/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_panic_on_oops/rule.yml
index f712157a12ec..a99c8997a2e4 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_panic_on_oops/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_panic_on_oops/rule.yml
@@ -21,6 +21,7 @@ identifiers:
     cce@rhel8: CCE-86176-5
     cce@rhel9: CCE-86177-3
     cce@rhel10: CCE-89985-6
+    cce@sle16: CCE-95726-6
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_panic_timeout/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_panic_timeout/rule.yml
index 32d45b4ca2fa..c7b5e2809366 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_panic_timeout/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_panic_timeout/rule.yml
@@ -22,6 +22,7 @@ identifiers:
     cce@rhel8: CCE-86349-8
     cce@rhel9: CCE-86350-6
     cce@rhel10: CCE-86964-4
+    cce@sle16: CCE-96235-7
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_proc_kcore/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_proc_kcore/rule.yml
index a43931553372..602e57da57fd 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_proc_kcore/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_proc_kcore/rule.yml
@@ -20,6 +20,7 @@ identifiers:
     cce@rhel8: CCE-87105-3
     cce@rhel9: CCE-87106-1
     cce@rhel10: CCE-88511-1
+    cce@sle16: CCE-96083-1
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_randomize_base/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_randomize_base/rule.yml
index 5c1576aa8a46..66f6764d5bf3 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_randomize_base/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_randomize_base/rule.yml
@@ -22,6 +22,7 @@ identifiers:
     cce@rhel8: CCE-88318-1
     cce@rhel9: CCE-88319-9
     cce@rhel10: CCE-87989-0
+    cce@sle16: CCE-96510-3
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_randomize_memory/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_randomize_memory/rule.yml
index 827c666e449e..9990da02bb70 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_randomize_memory/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_randomize_memory/rule.yml
@@ -22,6 +22,7 @@ identifiers:
     cce@rhel8: CCE-88440-3
     cce@rhel9: CCE-88441-1
     cce@rhel10: CCE-88383-5
+    cce@sle16: CCE-95989-0
 
 platform: x86_64_arch
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_retpoline/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_retpoline/rule.yml
index 261cd8a6ce80..059fe0c80fbc 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_retpoline/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_retpoline/rule.yml
@@ -22,6 +22,7 @@ identifiers:
     cce@rhel8: CCE-87494-1
     cce@rhel9: CCE-87495-8
     cce@rhel10: CCE-89562-3
+    cce@sle16: CCE-96519-4
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_seccomp/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_seccomp/rule.yml
index 201464ba05f5..b9d32b907bc0 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_seccomp/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_seccomp/rule.yml
@@ -24,6 +24,7 @@ identifiers:
     cce@rhel9: CCE-86451-2
     cce@rhel10: CCE-87403-2
     cce@sle15: CCE-92567-7
+    cce@sle16: CCE-95777-9
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_seccomp_filter/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_seccomp_filter/rule.yml
index fe3a38d84372..4c8a428075ee 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_seccomp_filter/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_seccomp_filter/rule.yml
@@ -22,6 +22,7 @@ identifiers:
     cce@rhel9: CCE-86491-8
     cce@rhel10: CCE-89407-1
     cce@sle15: CCE-92568-5
+    cce@sle16: CCE-96560-8
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_security/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_security/rule.yml
index f60cbb144a9e..98d382eeffe0 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_security/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_security/rule.yml
@@ -20,6 +20,7 @@ identifiers:
     cce@rhel9: CCE-86573-3
     cce@rhel10: CCE-87679-7
     cce@sle15: CCE-92570-1
+    cce@sle16: CCE-96259-7
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_security_dmesg_restrict/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_security_dmesg_restrict/rule.yml
index 707e3b575b47..4ac0bed31b1c 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_security_dmesg_restrict/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_security_dmesg_restrict/rule.yml
@@ -19,6 +19,7 @@ identifiers:
     cce@rhel8: CCE-87339-8
     cce@rhel9: CCE-87340-6
     cce@rhel10: CCE-89137-4
+    cce@sle16: CCE-96445-2
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_security_writable_hooks/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_security_writable_hooks/rule.yml
index 781acca096a1..ad631811de4a 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_security_writable_hooks/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_security_writable_hooks/rule.yml
@@ -21,6 +21,7 @@ identifiers:
     cce@rhel9: CCE-86885-1
     cce@rhel10: CCE-89825-4
     cce@sle15: CCE-92571-9
+    cce@sle16: CCE-95918-9
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_security_yama/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_security_yama/rule.yml
index 8f0d39a03642..607e85f3da64 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_security_yama/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_security_yama/rule.yml
@@ -23,6 +23,7 @@ identifiers:
     cce@rhel9: CCE-86717-6
     cce@rhel10: CCE-87793-6
     cce@sle15: CCE-92572-7
+    cce@sle16: CCE-96626-7
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_slub_debug/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_slub_debug/rule.yml
index 7a15122c2f8c..e881ea27183f 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_slub_debug/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_slub_debug/rule.yml
@@ -21,6 +21,7 @@ identifiers:
     cce@rhel8: CCE-88275-3
     cce@rhel9: CCE-88276-1
     cce@rhel10: CCE-87071-7
+    cce@sle16: CCE-95987-4
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_syn_cookies/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_syn_cookies/rule.yml
index 6388d834e296..905f36091301 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_syn_cookies/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_syn_cookies/rule.yml
@@ -24,6 +24,7 @@ identifiers:
     cce@rhel8: CCE-87330-7
     cce@rhel9: CCE-87331-5
     cce@rhel10: CCE-89322-2
+    cce@sle16: CCE-95924-7
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_unmap_kernel_at_el0/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_unmap_kernel_at_el0/rule.yml
index 742d5d6a5315..3bde406e4f86 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_unmap_kernel_at_el0/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_unmap_kernel_at_el0/rule.yml
@@ -25,6 +25,7 @@ identifiers:
     cce@rhel8: CCE-89179-6
     cce@rhel9: CCE-89180-4
     cce@rhel10: CCE-90608-1
+    cce@sle16: CCE-95872-8
 
 platform: aarch64_arch
 
diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_x86_vsyscall_emulation/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_x86_vsyscall_emulation/rule.yml
index b4519fe5d52e..afb1739706db 100644
--- a/linux_os/guide/system/kernel_build_config/kernel_config_x86_vsyscall_emulation/rule.yml
+++ b/linux_os/guide/system/kernel_build_config/kernel_config_x86_vsyscall_emulation/rule.yml
@@ -22,6 +22,7 @@ identifiers:
     cce@rhel8: CCE-87883-5
     cce@rhel9: CCE-87884-3
     cce@rhel10: CCE-88133-4
+    cce@sle16: CCE-96298-5
 
 ocil_clause: 'the kernel was not built with the required value'
 
diff --git a/linux_os/guide/system/logging/log_rotation/ensure_logrotate_activated/ansible/shared.yml b/linux_os/guide/system/logging/log_rotation/ensure_logrotate_activated/ansible/shared.yml
index f9f947d0bc79..e18fad5ddd4f 100644
--- a/linux_os/guide/system/logging/log_rotation/ensure_logrotate_activated/ansible/shared.yml
+++ b/linux_os/guide/system/logging/log_rotation/ensure_logrotate_activated/ansible/shared.yml
@@ -4,19 +4,25 @@
 # complexity = low
 # disruption = low
 
-- name: Configure daily log rotation in /etc/logrotate.conf
+{{% if product == 'sle16' %}}
+{{% set LOGROTATE_CONF_FILE="/usr/etc/logrotate.conf" %}}
+{{% else %}}
+{{% set LOGROTATE_CONF_FILE="/etc/logrotate.conf" %}}
+{{% endif %}}
+
+- name: "Configure daily log rotation in {{{ LOGROTATE_CONF_FILE }}}"
   ansible.builtin.lineinfile:
     create: yes
-    dest: "/etc/logrotate.conf"
+    dest: {{{ LOGROTATE_CONF_FILE }}}
     regexp: '^\s*(weekly|monthly|yearly)$'
     line: "daily"
     state: present
     insertbefore: BOF
 
-- name: Make sure daily log rotation setting is not overridden in /etc/logrotate.conf
+- name: "Make sure daily log rotation setting is not overridden in {{{ LOGROTATE_CONF_FILE }}}"
   ansible.builtin.lineinfile:
     create: no
-    dest: "/etc/logrotate.conf"
+    dest: {{{ LOGROTATE_CONF_FILE }}}
     regexp: '^[\s]*(weekly|monthly|yearly)$'
     state: absent
 
@@ -39,7 +45,7 @@
     - name: Add logrotate call
       ansible.builtin.lineinfile:
         path: "/etc/cron.daily/logrotate"
-        line: '/usr/sbin/logrotate /etc/logrotate.conf'
-        regexp: '^[\s]*/usr/sbin/logrotate[\s\S]*/etc/logrotate.conf$'
+        line: '/usr/sbin/logrotate {{{ LOGROTATE_CONF_FILE }}}'
+        regexp: '^[\s]*/usr/sbin/logrotate[\s\S]*{{{ LOGROTATE_CONF_FILE }}}$'
         create: yes
 {{% endif %}}
diff --git a/linux_os/guide/system/logging/log_rotation/ensure_logrotate_activated/bash/shared.sh b/linux_os/guide/system/logging/log_rotation/ensure_logrotate_activated/bash/shared.sh
index c55cd9de94a6..82446d128faa 100644
--- a/linux_os/guide/system/logging/log_rotation/ensure_logrotate_activated/bash/shared.sh
+++ b/linux_os/guide/system/logging/log_rotation/ensure_logrotate_activated/bash/shared.sh
@@ -1,6 +1,10 @@
 # platform = multi_platform_all
 
-LOGROTATE_CONF_FILE="/etc/logrotate.conf"
+{{% if product == 'sle16' %}}
+LOGROTATE_CONF_FILE='/usr/etc/logrotate.conf'
+{{% else %}}
+LOGROTATE_CONF_FILE='/etc/logrotate.conf'
+{{% endif %}}
 {{% if 'sle' in product or product == 'slmicro5' %}}
 SYSTEMCTL_EXEC='/usr/bin/systemctl'
 {{% else %}}
diff --git a/linux_os/guide/system/logging/log_rotation/ensure_logrotate_activated/oval/shared.xml b/linux_os/guide/system/logging/log_rotation/ensure_logrotate_activated/oval/shared.xml
index 907b69cc31e3..762e706a563d 100644
--- a/linux_os/guide/system/logging/log_rotation/ensure_logrotate_activated/oval/shared.xml
+++ b/linux_os/guide/system/logging/log_rotation/ensure_logrotate_activated/oval/shared.xml
@@ -11,7 +11,7 @@
       test_ref="test_logrotate_conf_no_other_keyword" />
       <criteria comment="Check if either logrotate timer or cron job is enabled" operator="OR">
         <criterion comment="Check if /etc/cron.daily/logrotate file exists (and calls logrotate)" test_ref="test_cron_daily_logrotate_existence" />
-{{% if product in ["ol9", "rhcos4", "rhel9", "rhel10", "sle12", "sle15", "slmicro5"] %}}
+{{% if 'sle' in product or product in ["ol9", "rhcos4", "rhel9", "rhel10", "slmicro5"] %}}
         <criterion comment="Check if logrotate timer is enabled" test_ref="test_logrotate_enabled_systemd_target" />
 {{% endif %}}
       </criteria>
@@ -25,7 +25,11 @@
   </ind:textfilecontent54_test>
 
   <ind:textfilecontent54_object id="object_logrotate_conf_daily_setting" version="2">
+{{% if product == 'sle16' %}}
+    <ind:filepath>/usr/etc/logrotate.conf</ind:filepath>
+{{% else %}}
     <ind:filepath>/etc/logrotate.conf</ind:filepath>
+{{% endif %}}
     <ind:pattern operation="pattern match">^\s*daily[\s#]*$</ind:pattern>
     <ind:instance datatype="int">1</ind:instance>
   </ind:textfilecontent54_object>
@@ -37,7 +41,11 @@
   </ind:textfilecontent54_test>
 
   <ind:textfilecontent54_object id="object_logrotate_conf_no_other_keyword" version="2">
+{{% if product == 'sle16' %}}
+    <ind:filepath>/usr/etc/logrotate.conf</ind:filepath>
+{{% else %}}
     <ind:filepath>/etc/logrotate.conf</ind:filepath>
+{{% endif %}}
     <ind:pattern operation="pattern match">^\s*(weekly|monthly|yearly)[\s#]*$</ind:pattern>
     <ind:instance datatype="int">1</ind:instance>
   </ind:textfilecontent54_object>
@@ -54,7 +62,7 @@
     <ind:instance datatype="int">1</ind:instance>
   </ind:textfilecontent54_object>
 
-  {{% if product in ["ol9", "rhcos4", "rhel9", "rhel10", "sle12", "sle15", "slmicro5"] %}}
+  {{% if 'sle' in product or product in ["ol9", "rhcos4", "rhel9", "rhel10", "slmicro5"] %}}
   <unix:file_test check="all" check_existence="all_exist"
    comment="look for logrotate.timer in multi-user.target.wants and timers.target.wants"
    id="test_logrotate_enabled_systemd_target" version="1">
diff --git a/linux_os/guide/system/logging/log_rotation/ensure_logrotate_activated/rule.yml b/linux_os/guide/system/logging/log_rotation/ensure_logrotate_activated/rule.yml
index 1e1b45b98055..3fbda225bc36 100644
--- a/linux_os/guide/system/logging/log_rotation/ensure_logrotate_activated/rule.yml
+++ b/linux_os/guide/system/logging/log_rotation/ensure_logrotate_activated/rule.yml
@@ -26,6 +26,7 @@ identifiers:
     cce@rhel10: CCE-88779-4
     cce@sle12: CCE-91511-6
     cce@sle15: CCE-85850-6
+    cce@sle16: CCE-96682-0
     cce@slmicro5: CCE-94014-8
 
 references:
diff --git a/linux_os/guide/system/logging/log_rotation/ensure_logrotate_activated/tests/logrotate_conf_weekly.fail.sh b/linux_os/guide/system/logging/log_rotation/ensure_logrotate_activated/tests/logrotate_conf_weekly.fail.sh
index de41c7b2844b..7e3bf2ae36ac 100644
--- a/linux_os/guide/system/logging/log_rotation/ensure_logrotate_activated/tests/logrotate_conf_weekly.fail.sh
+++ b/linux_os/guide/system/logging/log_rotation/ensure_logrotate_activated/tests/logrotate_conf_weekly.fail.sh
@@ -1,3 +1,8 @@
 #!/bin/bash
 
-sed -i "s/daily/weekly/" /etc/logrotate.conf
+{{% if product == 'sle16' %}}
+LOGROTATE_CONF_FILE="/usr/etc/logrotate.conf"
+{{% else %}}
+LOGROTATE_CONF_FILE="/etc/logrotate.conf"
+{{% endif %}}
+sed -i "s/daily/weekly/" "${LOGROTATE_CONF_FILE}"
diff --git a/linux_os/guide/system/logging/log_rotation/ensure_logrotate_activated/tests/logrotate_no_cron_daily_no_timer.fail.sh b/linux_os/guide/system/logging/log_rotation/ensure_logrotate_activated/tests/logrotate_no_cron_daily_no_timer.fail.sh
index 86b1ca86090d..9ae01cc789bd 100644
--- a/linux_os/guide/system/logging/log_rotation/ensure_logrotate_activated/tests/logrotate_no_cron_daily_no_timer.fail.sh
+++ b/linux_os/guide/system/logging/log_rotation/ensure_logrotate_activated/tests/logrotate_no_cron_daily_no_timer.fail.sh
@@ -2,11 +2,17 @@
 
 # packages = logrotate,crontabs
 
+{{% if product == 'sle16' %}}
+LOGROTATE_CONF_FILE="/usr/etc/logrotate.conf"
+{{% else %}}
+LOGROTATE_CONF_FILE="/etc/logrotate.conf"
+{{% endif %}}
+
 # disable the timer
 systemctl disable logrotate.timer || true
 
 # fix logrotate config
-sed -i "s/weekly/daily/" /etc/logrotate.conf
+sed -i "s/weekly/daily/" "${LOGROTATE_CONF_FILE}"
 
 # remove default for cron.daily
 rm -f /etc/cron.daily/logrotate
diff --git a/linux_os/guide/system/logging/package_rsyslog-gnutls_installed/rule.yml b/linux_os/guide/system/logging/package_rsyslog-gnutls_installed/rule.yml
index da05bbd7db9b..47a7de4f9934 100644
--- a/linux_os/guide/system/logging/package_rsyslog-gnutls_installed/rule.yml
+++ b/linux_os/guide/system/logging/package_rsyslog-gnutls_installed/rule.yml
@@ -23,6 +23,7 @@ identifiers:
     cce@rhel10: CCE-89106-9
     cce@sle12: CCE-91512-4
     cce@sle15: CCE-91199-0
+    cce@sle16: CCE-95816-5
 
 references:
     srg: SRG-OS-000480-GPOS-00227,SRG-OS-000120-GPOS-00061
@@ -42,6 +43,7 @@ template:
         pkgname: rsyslog-gnutls
         pkgname@sle12: rsyslog-module-gtls
         pkgname@sle15: rsyslog-module-gtls
+        pkgname@sle16: rsyslog-module-gtls
 
 fixtext: |-
     {{% if 'sle' not in product %}}
diff --git a/linux_os/guide/system/logging/rsyslog_sending_messages/rsyslog_remote_tls/rule.yml b/linux_os/guide/system/logging/rsyslog_sending_messages/rsyslog_remote_tls/rule.yml
index 7e245593bc8b..198927dcd228 100644
--- a/linux_os/guide/system/logging/rsyslog_sending_messages/rsyslog_remote_tls/rule.yml
+++ b/linux_os/guide/system/logging/rsyslog_sending_messages/rsyslog_remote_tls/rule.yml
@@ -25,6 +25,7 @@ identifiers:
     cce@rhel10: CCE-86592-3
     cce@sle12: CCE-91513-2
     cce@sle15: CCE-91200-6
+    cce@sle16: CCE-96405-6
 
 references:
     nist: AU-9(3),CM-6(a)
diff --git a/linux_os/guide/system/logging/rsyslog_sending_messages/rsyslog_remote_tls_cacert/rule.yml b/linux_os/guide/system/logging/rsyslog_sending_messages/rsyslog_remote_tls_cacert/rule.yml
index c9a7555c5e27..ff8c4ee91c3c 100644
--- a/linux_os/guide/system/logging/rsyslog_sending_messages/rsyslog_remote_tls_cacert/rule.yml
+++ b/linux_os/guide/system/logging/rsyslog_sending_messages/rsyslog_remote_tls_cacert/rule.yml
@@ -23,6 +23,7 @@ identifiers:
     cce@rhel10: CCE-88456-9
     cce@sle12: CCE-91514-0
     cce@sle15: CCE-91201-4
+    cce@sle16: CCE-96407-2
 
 references:
     srg: SRG-OS-000480-GPOS-00227
diff --git a/linux_os/guide/system/network/network-ipsec/directory_groupowner_etc_ipsecd/rule.yml b/linux_os/guide/system/network/network-ipsec/directory_groupowner_etc_ipsecd/rule.yml
index 00c3bccff8e8..817074dc64f4 100644
--- a/linux_os/guide/system/network/network-ipsec/directory_groupowner_etc_ipsecd/rule.yml
+++ b/linux_os/guide/system/network/network-ipsec/directory_groupowner_etc_ipsecd/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhel9: CCE-86439-7
     cce@rhel10: CCE-88800-8
     cce@sle15: CCE-92499-3
+    cce@sle16: CCE-96533-5
 
 ocil_clause: '{{{ ocil_clause_file_group_owner(file="/etc/ipsec.d", group="root") }}}'
 
diff --git a/linux_os/guide/system/network/network-ipsec/directory_owner_etc_ipsecd/rule.yml b/linux_os/guide/system/network/network-ipsec/directory_owner_etc_ipsecd/rule.yml
index ee3fd8aacb67..bbee4ba1f94c 100644
--- a/linux_os/guide/system/network/network-ipsec/directory_owner_etc_ipsecd/rule.yml
+++ b/linux_os/guide/system/network/network-ipsec/directory_owner_etc_ipsecd/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhel9: CCE-86303-5
     cce@rhel10: CCE-87636-7
     cce@sle15: CCE-92508-1
+    cce@sle16: CCE-96161-5
 
 ocil_clause: '{{{ ocil_clause_file_owner(file="/etc/ipsec.d", owner="root") }}}'
 
diff --git a/linux_os/guide/system/network/network-ipsec/directory_permissions_etc_ipsecd/rule.yml b/linux_os/guide/system/network/network-ipsec/directory_permissions_etc_ipsecd/rule.yml
index 3ac5d4a863ad..9caeafde3ecb 100644
--- a/linux_os/guide/system/network/network-ipsec/directory_permissions_etc_ipsecd/rule.yml
+++ b/linux_os/guide/system/network/network-ipsec/directory_permissions_etc_ipsecd/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhel9: CCE-86306-8
     cce@rhel10: CCE-88730-7
     cce@sle15: CCE-92517-2
+    cce@sle16: CCE-96356-1
 
 ocil_clause: '{{{ ocil_clause_file_permissions(file="/etc/ipsec.d", perms="0700") }}}'
 
diff --git a/linux_os/guide/system/network/network-ipsec/file_groupowner_etc_ipsec_conf/rule.yml b/linux_os/guide/system/network/network-ipsec/file_groupowner_etc_ipsec_conf/rule.yml
index 6ded8f5d59e0..88e0642ac261 100644
--- a/linux_os/guide/system/network/network-ipsec/file_groupowner_etc_ipsec_conf/rule.yml
+++ b/linux_os/guide/system/network/network-ipsec/file_groupowner_etc_ipsec_conf/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhel9: CCE-86387-8
     cce@rhel10: CCE-86941-2
     cce@sle15: CCE-92535-4
+    cce@sle16: CCE-96555-8
 
 ocil_clause: '{{{ ocil_clause_file_group_owner(file="/etc/ipsec.conf", group="root") }}}'
 
diff --git a/linux_os/guide/system/network/network-ipsec/file_groupowner_etc_ipsec_secrets/rule.yml b/linux_os/guide/system/network/network-ipsec/file_groupowner_etc_ipsec_secrets/rule.yml
index 3335f4d11050..121c920acf70 100644
--- a/linux_os/guide/system/network/network-ipsec/file_groupowner_etc_ipsec_secrets/rule.yml
+++ b/linux_os/guide/system/network/network-ipsec/file_groupowner_etc_ipsec_secrets/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhel9: CCE-86398-5
     cce@rhel10: CCE-89956-7
     cce@sle15: CCE-92537-0
+    cce@sle16: CCE-96394-2
 
 ocil_clause: '{{{ ocil_clause_file_group_owner(file="/etc/ipsec.secrets", group="root") }}}'
 
diff --git a/linux_os/guide/system/network/network-ipsec/file_owner_etc_ipsec_conf/rule.yml b/linux_os/guide/system/network/network-ipsec/file_owner_etc_ipsec_conf/rule.yml
index d34d45083769..2c3cca80ac6b 100644
--- a/linux_os/guide/system/network/network-ipsec/file_owner_etc_ipsec_conf/rule.yml
+++ b/linux_os/guide/system/network/network-ipsec/file_owner_etc_ipsec_conf/rule.yml
@@ -16,6 +16,7 @@ identifiers:
     cce@rhel8: CCE-86389-4
     cce@rhel9: CCE-86391-0
     cce@rhel10: CCE-87602-9
+    cce@sle16: CCE-96255-5
 
 ocil_clause: '{{{ ocil_clause_file_owner(file="/etc/ipsec.conf", owner="root") }}}'
 
diff --git a/linux_os/guide/system/network/network-ipsec/file_owner_etc_ipsec_secrets/rule.yml b/linux_os/guide/system/network/network-ipsec/file_owner_etc_ipsec_secrets/rule.yml
index e852dc2af01e..f16a7747691f 100644
--- a/linux_os/guide/system/network/network-ipsec/file_owner_etc_ipsec_secrets/rule.yml
+++ b/linux_os/guide/system/network/network-ipsec/file_owner_etc_ipsec_secrets/rule.yml
@@ -16,6 +16,7 @@ identifiers:
     cce@rhel8: CCE-86400-9
     cce@rhel9: CCE-86401-7
     cce@rhel10: CCE-89330-5
+    cce@sle16: CCE-96064-1
 
 ocil_clause: '{{{ ocil_clause_file_owner(file="/etc/ipsec.secrets", owner="root") }}}'
 
diff --git a/linux_os/guide/system/network/network-ipsec/file_permissions_etc_ipsec_conf/rule.yml b/linux_os/guide/system/network/network-ipsec/file_permissions_etc_ipsec_conf/rule.yml
index ad04bc9de2ac..a9112623365e 100644
--- a/linux_os/guide/system/network/network-ipsec/file_permissions_etc_ipsec_conf/rule.yml
+++ b/linux_os/guide/system/network/network-ipsec/file_permissions_etc_ipsec_conf/rule.yml
@@ -16,6 +16,7 @@ identifiers:
     cce@rhel8: CCE-86393-6
     cce@rhel9: CCE-86395-1
     cce@rhel10: CCE-86443-9
+    cce@sle16: CCE-95807-4
 
 ocil_clause: '{{{ ocil_clause_file_permissions(file="/etc/ipsec.conf", perms="0644") }}}'
 
diff --git a/linux_os/guide/system/network/network-ipsec/file_permissions_etc_ipsec_secrets/rule.yml b/linux_os/guide/system/network/network-ipsec/file_permissions_etc_ipsec_secrets/rule.yml
index 41e2d7994ad3..cae7c2174d21 100644
--- a/linux_os/guide/system/network/network-ipsec/file_permissions_etc_ipsec_secrets/rule.yml
+++ b/linux_os/guide/system/network/network-ipsec/file_permissions_etc_ipsec_secrets/rule.yml
@@ -16,6 +16,7 @@ identifiers:
     cce@rhel8: CCE-86410-8
     cce@rhel9: CCE-86411-6
     cce@rhel10: CCE-89450-1
+    cce@sle16: CCE-96190-4
 
 ocil_clause: '{{{ ocil_clause_file_permissions(file="/etc/ipsec.secrets", perms="0644") }}}'
 
diff --git a/linux_os/guide/system/network/network-iptables/directory_groupowner_etc_iptables/rule.yml b/linux_os/guide/system/network/network-iptables/directory_groupowner_etc_iptables/rule.yml
index 850de8d57516..fd61baff835a 100644
--- a/linux_os/guide/system/network/network-iptables/directory_groupowner_etc_iptables/rule.yml
+++ b/linux_os/guide/system/network/network-iptables/directory_groupowner_etc_iptables/rule.yml
@@ -16,6 +16,7 @@ identifiers:
     cce@rhel8: CCE-86426-4
     cce@rhel9: CCE-86427-2
     cce@rhel10: CCE-86460-3
+    cce@sle16: CCE-95799-3
 
 ocil_clause: '{{{ ocil_clause_file_group_owner(file="/etc/iptables", group="root") }}}'
 
diff --git a/linux_os/guide/system/network/network-iptables/directory_owner_etc_iptables/rule.yml b/linux_os/guide/system/network/network-iptables/directory_owner_etc_iptables/rule.yml
index 73bee5710314..61e65cf453d5 100644
--- a/linux_os/guide/system/network/network-iptables/directory_owner_etc_iptables/rule.yml
+++ b/linux_os/guide/system/network/network-iptables/directory_owner_etc_iptables/rule.yml
@@ -16,6 +16,7 @@ identifiers:
     cce@rhel8: CCE-86429-8
     cce@rhel9: CCE-86430-6
     cce@rhel10: CCE-89981-5
+    cce@sle16: CCE-96146-6
 
 ocil_clause: '{{{ ocil_clause_file_owner(file="/etc/iptables", owner="root") }}}'
 
diff --git a/linux_os/guide/system/network/network-iptables/directory_permissions_etc_iptables/rule.yml b/linux_os/guide/system/network/network-iptables/directory_permissions_etc_iptables/rule.yml
index fe8bfe7c1de6..9ca60ed074a1 100644
--- a/linux_os/guide/system/network/network-iptables/directory_permissions_etc_iptables/rule.yml
+++ b/linux_os/guide/system/network/network-iptables/directory_permissions_etc_iptables/rule.yml
@@ -16,6 +16,7 @@ identifiers:
     cce@rhel8: CCE-86435-5
     cce@rhel9: CCE-86436-3
     cce@rhel10: CCE-86577-4
+    cce@sle16: CCE-96612-7
 
 ocil_clause: '{{{ ocil_clause_file_permissions(file="/etc/iptables", perms="0700") }}}'
 
diff --git a/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_accept_ra_defrtr/rule.yml b/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_accept_ra_defrtr/rule.yml
index 3b7fa656ccf9..d6c3e91138fa 100644
--- a/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_accept_ra_defrtr/rule.yml
+++ b/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_accept_ra_defrtr/rule.yml
@@ -15,6 +15,7 @@ identifiers:
     cce@rhel10: CCE-90653-7
     cce@sle12: CCE-91517-3
     cce@sle15: CCE-91202-2
+    cce@sle16: CCE-96633-3
 
 {{{ complete_ocil_entry_sysctl_option_value(sysctl="net.ipv6.conf.all.accept_ra_defrtr", value="0") }}}
 
diff --git a/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_accept_ra_pinfo/rule.yml b/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_accept_ra_pinfo/rule.yml
index b1e75aa592d6..449358c21675 100644
--- a/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_accept_ra_pinfo/rule.yml
+++ b/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_accept_ra_pinfo/rule.yml
@@ -15,6 +15,7 @@ identifiers:
     cce@rhel10: CCE-88717-4
     cce@sle12: CCE-91518-1
     cce@sle15: CCE-91203-0
+    cce@sle16: CCE-95919-7
 
 {{{ complete_ocil_entry_sysctl_option_value(sysctl="net.ipv6.conf.all.accept_ra_pinfo", value="0") }}}
 
diff --git a/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_accept_ra_rtr_pref/rule.yml b/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_accept_ra_rtr_pref/rule.yml
index 82d235cf30bf..7ba89e5d8ff1 100644
--- a/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_accept_ra_rtr_pref/rule.yml
+++ b/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_accept_ra_rtr_pref/rule.yml
@@ -15,6 +15,7 @@ identifiers:
     cce@rhel10: CCE-90302-1
     cce@sle12: CCE-91519-9
     cce@sle15: CCE-91204-8
+    cce@sle16: CCE-96383-5
 
 {{{ complete_ocil_entry_sysctl_option_value(sysctl="net.ipv6.conf.all.accept_ra_rtr_pref", value="0") }}}
 
diff --git a/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_accept_redirects/rule.yml b/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_accept_redirects/rule.yml
index 551d15a411a9..027e308f53db 100644
--- a/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_accept_redirects/rule.yml
+++ b/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_accept_redirects/rule.yml
@@ -16,6 +16,7 @@ identifiers:
     cce@rhel10: CCE-90083-7
     cce@sle12: CCE-83246-9
     cce@sle15: CCE-85708-6
+    cce@sle16: CCE-96632-5
     cce@slmicro5: CCE-93635-1
     cce@slmicro6: CCE-95079-0 
 
diff --git a/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_accept_source_route/rule.yml b/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_accept_source_route/rule.yml
index d5356b7436e0..a96d1af2a24b 100644
--- a/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_accept_source_route/rule.yml
+++ b/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_accept_source_route/rule.yml
@@ -24,6 +24,7 @@ identifiers:
     cce@rhel10: CCE-90450-8
     cce@sle12: CCE-83078-6
     cce@sle15: CCE-85649-2
+    cce@sle16: CCE-96132-6
     cce@slmicro5: CCE-93630-2
     cce@slmicro6: CCE-95074-1 
 
diff --git a/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_autoconf/rule.yml b/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_autoconf/rule.yml
index 9488675532ca..2b6704e6c378 100644
--- a/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_autoconf/rule.yml
+++ b/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_autoconf/rule.yml
@@ -15,6 +15,7 @@ identifiers:
     cce@rhel10: CCE-88386-8
     cce@sle12: CCE-91520-7
     cce@sle15: CCE-91205-5
+    cce@sle16: CCE-96669-7
 
 {{{ complete_ocil_entry_sysctl_option_value(sysctl="net.ipv6.conf.all.autoconf", value="0") }}}
 
diff --git a/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_max_addresses/rule.yml b/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_max_addresses/rule.yml
index 66431fe69b3e..413d120c2f30 100644
--- a/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_max_addresses/rule.yml
+++ b/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_max_addresses/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhel10: CCE-88552-5
     cce@sle12: CCE-91521-5
     cce@sle15: CCE-91206-3
+    cce@sle16: CCE-96622-6
 
 {{{ complete_ocil_entry_sysctl_option_value(sysctl="net.ipv6.conf.all.max_addresses", value="1") }}}
 
diff --git a/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_router_solicitations/rule.yml b/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_router_solicitations/rule.yml
index c58038f96902..b9e6f37fbc6c 100644
--- a/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_router_solicitations/rule.yml
+++ b/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_router_solicitations/rule.yml
@@ -15,6 +15,7 @@ identifiers:
     cce@rhel10: CCE-89461-8
     cce@sle12: CCE-91522-3
     cce@sle15: CCE-91207-1
+    cce@sle16: CCE-96065-8
 
 {{{ complete_ocil_entry_sysctl_option_value(sysctl="net.ipv6.conf.all.router_solicitations", value="0") }}}
 
diff --git a/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_accept_ra_defrtr/rule.yml b/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_accept_ra_defrtr/rule.yml
index 72703a4ddd80..eed209869204 100644
--- a/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_accept_ra_defrtr/rule.yml
+++ b/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_accept_ra_defrtr/rule.yml
@@ -15,6 +15,7 @@ identifiers:
     cce@rhel10: CCE-88613-5
     cce@sle12: CCE-91523-1
     cce@sle15: CCE-91208-9
+    cce@sle16: CCE-96411-4
 
 {{{ complete_ocil_entry_sysctl_option_value(sysctl="net.ipv6.conf.default.accept_ra_defrtr", value="0") }}}
 
diff --git a/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_accept_ra_pinfo/rule.yml b/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_accept_ra_pinfo/rule.yml
index b44a8ec176c9..f426bfda0309 100644
--- a/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_accept_ra_pinfo/rule.yml
+++ b/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_accept_ra_pinfo/rule.yml
@@ -15,6 +15,7 @@ identifiers:
     cce@rhel10: CCE-88012-0
     cce@sle12: CCE-91524-9
     cce@sle15: CCE-91209-7
+    cce@sle16: CCE-96557-4
 
 {{{ complete_ocil_entry_sysctl_option_value(sysctl="net.ipv6.conf.default.accept_ra_pinfo", value="0") }}}
 
diff --git a/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_accept_ra_rtr_pref/rule.yml b/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_accept_ra_rtr_pref/rule.yml
index 24855b34558d..8be051de79ce 100644
--- a/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_accept_ra_rtr_pref/rule.yml
+++ b/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_accept_ra_rtr_pref/rule.yml
@@ -15,6 +15,7 @@ identifiers:
     cce@rhel10: CCE-90749-3
     cce@sle12: CCE-91525-6
     cce@sle15: CCE-91210-5
+    cce@sle16: CCE-96589-7
 
 {{{ complete_ocil_entry_sysctl_option_value(sysctl="net.ipv6.conf.default.accept_ra_rtr_pref", value="0") }}}
 
diff --git a/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_accept_redirects/rule.yml b/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_accept_redirects/rule.yml
index 7db2187f43ec..8f8f0be40d5b 100644
--- a/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_accept_redirects/rule.yml
+++ b/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_accept_redirects/rule.yml
@@ -16,6 +16,7 @@ identifiers:
     cce@rhel10: CCE-89486-5
     cce@sle12: CCE-83223-8
     cce@sle15: CCE-85722-7
+    cce@sle16: CCE-96192-0
     cce@slmicro5: CCE-93636-9
     cce@slmicro6: CCE-95080-8 
 
diff --git a/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_autoconf/rule.yml b/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_autoconf/rule.yml
index 3c5b873a4c98..26697c15d21c 100644
--- a/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_autoconf/rule.yml
+++ b/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_autoconf/rule.yml
@@ -15,6 +15,7 @@ identifiers:
     cce@rhel10: CCE-86607-9
     cce@sle12: CCE-91526-4
     cce@sle15: CCE-91211-3
+    cce@sle16: CCE-96177-1
 
 {{{ complete_ocil_entry_sysctl_option_value(sysctl="net.ipv6.conf.default.autoconf", value="0") }}}
 
diff --git a/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_max_addresses/rule.yml b/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_max_addresses/rule.yml
index 1ca02e21ab20..60f370531c26 100644
--- a/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_max_addresses/rule.yml
+++ b/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_max_addresses/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhel10: CCE-89273-7
     cce@sle12: CCE-91527-2
     cce@sle15: CCE-91212-1
+    cce@sle16: CCE-95727-4
 
 {{{ complete_ocil_entry_sysctl_option_value(sysctl="net.ipv6.conf.default.max_addresses", value="1") }}}
 
diff --git a/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_router_solicitations/rule.yml b/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_router_solicitations/rule.yml
index a6fd5ec63f57..5ecba12f7eb4 100644
--- a/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_router_solicitations/rule.yml
+++ b/linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_router_solicitations/rule.yml
@@ -15,6 +15,7 @@ identifiers:
     cce@rhel10: CCE-89658-9
     cce@sle12: CCE-91528-0
     cce@sle15: CCE-91213-9
+    cce@sle16: CCE-96390-0
 
 {{{ complete_ocil_entry_sysctl_option_value(sysctl="net.ipv6.conf.default.router_solicitations", value="0") }}}
 
diff --git a/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_accept_local/rule.yml b/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_accept_local/rule.yml
index 5091848972c4..cde2ea069c6a 100644
--- a/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_accept_local/rule.yml
+++ b/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_accept_local/rule.yml
@@ -16,6 +16,7 @@ identifiers:
     cce@rhel8: CCE-88789-3
     cce@rhel9: CCE-89789-2
     cce@rhel10: CCE-86895-0
+    cce@sle16: CCE-96055-9
 
 {{{ complete_ocil_entry_sysctl_option_value(sysctl="net.ipv4.conf.all.accept_local", value="0") }}}
 
diff --git a/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_accept_redirects/rule.yml b/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_accept_redirects/rule.yml
index fb26eb41907a..654a99a37f0d 100644
--- a/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_accept_redirects/rule.yml
+++ b/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_accept_redirects/rule.yml
@@ -23,6 +23,7 @@ identifiers:
     cce@rhel10: CCE-90409-4
     cce@sle12: CCE-83090-1
     cce@sle15: CCE-85651-8
+    cce@sle16: CCE-96527-7
     cce@slmicro5: CCE-93633-6
     cce@slmicro6: CCE-95077-4 
 
diff --git a/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_accept_source_route/rule.yml b/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_accept_source_route/rule.yml
index 5fd871ab0fea..9bd302a891fb 100644
--- a/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_accept_source_route/rule.yml
+++ b/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_accept_source_route/rule.yml
@@ -24,6 +24,7 @@ identifiers:
     cce@rhel10: CCE-90165-2
     cce@sle12: CCE-83064-6
     cce@sle15: CCE-85648-4
+    cce@sle16: CCE-96355-3
     cce@slmicro5: CCE-93629-4
     cce@slmicro6: CCE-95073-3 
 
diff --git a/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_arp_filter/rule.yml b/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_arp_filter/rule.yml
index fc747f705c48..ac9db557bdcd 100644
--- a/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_arp_filter/rule.yml
+++ b/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_arp_filter/rule.yml
@@ -20,6 +20,7 @@ identifiers:
     cce@rhel9: CCE-89555-7
     cce@rhel10: CCE-89431-1
     cce@sle15: CCE-92609-7
+    cce@sle16: CCE-96549-1
 
 {{{ complete_ocil_entry_sysctl_option_value(sysctl="net.ipv4.conf.all.arp_filter", value=xccdf_value("sysctl_net_ipv4_conf_all_arp_filter_value")) }}}
 
diff --git a/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_arp_ignore/rule.yml b/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_arp_ignore/rule.yml
index 916872b8ffe0..9302d69a4d77 100644
--- a/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_arp_ignore/rule.yml
+++ b/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_arp_ignore/rule.yml
@@ -18,6 +18,7 @@ identifiers:
     cce@rhel9: CCE-89889-0
     cce@rhel10: CCE-87433-9
     cce@sle15: CCE-92610-5
+    cce@sle16: CCE-96367-8
 
 {{{ complete_ocil_entry_sysctl_option_value(sysctl="net.ipv4.conf.all.arp_ignore", value=xccdf_value("sysctl_net_ipv4_conf_all_arp_ignore")) }}}
 
diff --git a/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_drop_gratuitous_arp/rule.yml b/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_drop_gratuitous_arp/rule.yml
index c3a61454b8e4..b3c83e6a668a 100644
--- a/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_drop_gratuitous_arp/rule.yml
+++ b/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_drop_gratuitous_arp/rule.yml
@@ -18,6 +18,7 @@ identifiers:
     cce@rhel8: CCE-88001-3
     cce@rhel9: CCE-89001-2
     cce@rhel10: CCE-89975-7
+    cce@sle16: CCE-96672-1
 
 {{{ complete_ocil_entry_sysctl_option_value(sysctl="net.ipv4.conf.all.drop_gratuitous_arp", value="1") }}}
 
diff --git a/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_route_localnet/rule.yml b/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_route_localnet/rule.yml
index cd544692838a..3c2723ad9125 100644
--- a/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_route_localnet/rule.yml
+++ b/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_route_localnet/rule.yml
@@ -16,6 +16,7 @@ identifiers:
     cce@rhel9: CCE-89023-6
     cce@rhel10: CCE-87566-6
     cce@sle15: CCE-92611-3
+    cce@sle16: CCE-96513-7
 
 {{{ complete_ocil_entry_sysctl_option_value(sysctl="net.ipv4.conf.all.route_localnet", value="0") }}}
 
diff --git a/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_shared_media/rule.yml b/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_shared_media/rule.yml
index 311db0b56990..8a1d5353ccef 100644
--- a/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_shared_media/rule.yml
+++ b/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_shared_media/rule.yml
@@ -14,6 +14,7 @@ identifiers:
     cce@rhel8: CCE-88333-0
     cce@rhel9: CCE-89333-9
     cce@rhel10: CCE-87897-5
+    cce@sle16: CCE-95865-2
 
 {{{ complete_ocil_entry_sysctl_option_value(sysctl="net.ipv4.conf.all.shared_media", value="0") }}}
 
diff --git a/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_default_accept_source_route/rule.yml b/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_default_accept_source_route/rule.yml
index 81acc33e797e..8658fc9a8c75 100644
--- a/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_default_accept_source_route/rule.yml
+++ b/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_default_accept_source_route/rule.yml
@@ -24,6 +24,7 @@ identifiers:
     cce@rhel10: CCE-88071-6
     cce@sle12: CCE-83079-4
     cce@sle15: CCE-85650-0
+    cce@sle16: CCE-96076-5
     cce@slmicro5: CCE-93631-0
     cce@slmicro6: CCE-95075-8 
 
diff --git a/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_default_rp_filter/rule.yml b/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_default_rp_filter/rule.yml
index b57fd00eea2f..332b397304fe 100644
--- a/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_default_rp_filter/rule.yml
+++ b/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_default_rp_filter/rule.yml
@@ -21,6 +21,7 @@ identifiers:
     cce@rhel10: CCE-87424-8
     cce@sle12: CCE-91534-8
     cce@sle15: CCE-91219-6
+    cce@sle16: CCE-96229-0
     cce@slmicro5: CCE-93989-2
 
 references:
diff --git a/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_default_secure_redirects/rule.yml b/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_default_secure_redirects/rule.yml
index e93e06ac07ab..d0fcab062731 100644
--- a/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_default_secure_redirects/rule.yml
+++ b/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_default_secure_redirects/rule.yml
@@ -19,6 +19,7 @@ identifiers:
     cce@rhel10: CCE-87878-5
     cce@sle12: CCE-91536-3
     cce@sle15: CCE-91221-2
+    cce@sle16: CCE-96196-1
     cce@slmicro5: CCE-93988-4
 
 references:
diff --git a/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_default_shared_media/rule.yml b/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_default_shared_media/rule.yml
index 03b578066423..6b58733b25c2 100644
--- a/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_default_shared_media/rule.yml
+++ b/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_default_shared_media/rule.yml
@@ -14,6 +14,7 @@ identifiers:
     cce@rhel8: CCE-88444-5
     cce@rhel9: CCE-89444-4
     cce@rhel10: CCE-89010-3
+    cce@sle16: CCE-96642-4
 
 {{{ complete_ocil_entry_sysctl_option_value(sysctl="net.ipv4.conf.default.shared_media", value="0") }}}
 
diff --git a/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_ip_local_port_range/rule.yml b/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_ip_local_port_range/rule.yml
index 942c1351b285..8edb7ace3694 100644
--- a/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_ip_local_port_range/rule.yml
+++ b/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_ip_local_port_range/rule.yml
@@ -18,6 +18,7 @@ identifiers:
     cce@rhel10: CCE-90347-6
     cce@sle12: CCE-91540-5
     cce@sle15: CCE-91225-3
+    cce@sle16: CCE-96447-8
 
 {{{ complete_ocil_entry_sysctl_option_value(sysctl="net.ipv4.ip_local_port_range", value="32768 65535") }}}
 
diff --git a/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_tcp_rfc1337/rule.yml b/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_tcp_rfc1337/rule.yml
index d6721442dc54..1fe1d752c719 100644
--- a/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_tcp_rfc1337/rule.yml
+++ b/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_tcp_rfc1337/rule.yml
@@ -18,6 +18,7 @@ identifiers:
     cce@rhel10: CCE-86164-1
     cce@sle12: CCE-91538-9
     cce@sle15: CCE-91223-8
+    cce@sle16: CCE-96069-0
 
 {{{ complete_ocil_entry_sysctl_option_value(sysctl="net.ipv4.tcp_rfc1337", value="1") }}}
 
diff --git a/linux_os/guide/system/network/network-nftables/directory_groupowner_etc_nftables/rule.yml b/linux_os/guide/system/network/network-nftables/directory_groupowner_etc_nftables/rule.yml
index 4838427b8bcb..4b0b04bb39b9 100644
--- a/linux_os/guide/system/network/network-nftables/directory_groupowner_etc_nftables/rule.yml
+++ b/linux_os/guide/system/network/network-nftables/directory_groupowner_etc_nftables/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhel9: CCE-86309-2
     cce@rhel10: CCE-87879-3
     cce@sle15: CCE-92500-8
+    cce@sle16: CCE-96397-5
 
 ocil_clause: '{{{ ocil_clause_file_group_owner(file="/etc/nftables", group="root") }}}'
 
diff --git a/linux_os/guide/system/network/network-nftables/directory_owner_etc_nftables/rule.yml b/linux_os/guide/system/network/network-nftables/directory_owner_etc_nftables/rule.yml
index 14eb51f4a138..d1e8d31f6366 100644
--- a/linux_os/guide/system/network/network-nftables/directory_owner_etc_nftables/rule.yml
+++ b/linux_os/guide/system/network/network-nftables/directory_owner_etc_nftables/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhel9: CCE-86313-4
     cce@rhel10: CCE-88672-1
     cce@sle15: CCE-92509-9
+    cce@sle16: CCE-96211-8
 
 ocil_clause: '{{{ ocil_clause_file_owner(file="/etc/nftables", owner="root") }}}'
 
diff --git a/linux_os/guide/system/network/network-nftables/directory_permissions_etc_nftables/rule.yml b/linux_os/guide/system/network/network-nftables/directory_permissions_etc_nftables/rule.yml
index a9d01ad9c783..4acab56b2bd9 100644
--- a/linux_os/guide/system/network/network-nftables/directory_permissions_etc_nftables/rule.yml
+++ b/linux_os/guide/system/network/network-nftables/directory_permissions_etc_nftables/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhel9: CCE-86320-9
     cce@rhel10: CCE-88802-4
     cce@sle15: CCE-92521-4
+    cce@sle16: CCE-96496-5
 
 ocil_clause: '{{{ ocil_clause_file_permissions(file="/etc/nftables", perms="0700") }}}'
 
diff --git a/linux_os/guide/system/network/network-wireless/wireless_software/wireless_disable_in_bios/rule.yml b/linux_os/guide/system/network/network-wireless/wireless_software/wireless_disable_in_bios/rule.yml
index 8514f1be0618..bf988c70fd08 100644
--- a/linux_os/guide/system/network/network-wireless/wireless_software/wireless_disable_in_bios/rule.yml
+++ b/linux_os/guide/system/network/network-wireless/wireless_software/wireless_disable_in_bios/rule.yml
@@ -16,6 +16,16 @@ rationale: |-
 
 severity: unknown
 
+ocil_clause: 'wireless devices (WiFi or Bluetooth) are enabled in BIOS'
+
+ocil: |-
+    Verify that built-in wireless devices (WiFi and Bluetooth) are disabled in the system
+    boot firmware (BIOS/UEFI). The process to configure this setting varies by hardware
+    manufacturer and model. Some systems may not have wireless devices or may not provide
+    BIOS-level controls for wireless devices.
+    Consult your hardware manual or vendor documentation for specific instructions on how to
+    access the firmware setup during boot and disable wireless device support.
+
 identifiers:
     cce@rhcos4: CCE-82659-4
     cce@rhel9: CCE-89909-6
diff --git a/linux_os/guide/system/permissions/files/dir_perms_world_writable_root_owned/rule.yml b/linux_os/guide/system/permissions/files/dir_perms_world_writable_root_owned/rule.yml
index dbaec786e5ec..7e8dfdccc7b4 100644
--- a/linux_os/guide/system/permissions/files/dir_perms_world_writable_root_owned/rule.yml
+++ b/linux_os/guide/system/permissions/files/dir_perms_world_writable_root_owned/rule.yml
@@ -21,6 +21,7 @@ identifiers:
     cce@rhel10: CCE-89514-4
     cce@sle12: CCE-91597-5
     cce@sle15: CCE-91239-4
+    cce@sle16: CCE-95897-5
 
 references:
     srg: SRG-OS-000480-GPOS-00227,SRG-OS-000138-GPOS-00069
diff --git a/linux_os/guide/system/permissions/files/dir_perms_world_writable_system_owned/rule.yml b/linux_os/guide/system/permissions/files/dir_perms_world_writable_system_owned/rule.yml
index 3a3bc5278b49..b5fe9798720c 100644
--- a/linux_os/guide/system/permissions/files/dir_perms_world_writable_system_owned/rule.yml
+++ b/linux_os/guide/system/permissions/files/dir_perms_world_writable_system_owned/rule.yml
@@ -28,6 +28,9 @@ references:
     stigid@ol7: OL07-00-021031
     stigid@ol8: OL08-00-010700
 
+identifiers:
+    cce@rhel9: CCE-86469-4
+
 ocil_clause: 'there is output'
 
 ocil: |-
diff --git a/linux_os/guide/system/permissions/files/dir_system_commands_group_root_owned/rule.yml b/linux_os/guide/system/permissions/files/dir_system_commands_group_root_owned/rule.yml
index 1285c94d87a1..4a300fcd8a49 100644
--- a/linux_os/guide/system/permissions/files/dir_system_commands_group_root_owned/rule.yml
+++ b/linux_os/guide/system/permissions/files/dir_system_commands_group_root_owned/rule.yml
@@ -40,6 +40,7 @@ identifiers:
     cce@rhel10: CCE-89520-1
     cce@sle12: CCE-83244-4
     cce@sle15: CCE-85743-3
+    cce@sle16: CCE-95915-5
     cce@slmicro5: CCE-93702-9
     cce@slmicro6: CCE-94700-2
 
diff --git a/linux_os/guide/system/permissions/files/dir_system_commands_root_owned/rule.yml b/linux_os/guide/system/permissions/files/dir_system_commands_root_owned/rule.yml
index d3b464811bd9..12dc621b7fde 100644
--- a/linux_os/guide/system/permissions/files/dir_system_commands_root_owned/rule.yml
+++ b/linux_os/guide/system/permissions/files/dir_system_commands_root_owned/rule.yml
@@ -38,6 +38,7 @@ identifiers:
     cce@rhel10: CCE-88203-5
     cce@sle12: CCE-83242-8
     cce@sle15: CCE-85741-7
+    cce@sle16: CCE-96321-5
     cce@slmicro5: CCE-93700-3
     cce@slmicro6: CCE-94698-8
 
diff --git a/linux_os/guide/system/permissions/files/file_groupowner_etc_crypttab/rule.yml b/linux_os/guide/system/permissions/files/file_groupowner_etc_crypttab/rule.yml
index f9a6756eca37..bf123935cac6 100644
--- a/linux_os/guide/system/permissions/files/file_groupowner_etc_crypttab/rule.yml
+++ b/linux_os/guide/system/permissions/files/file_groupowner_etc_crypttab/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhel8: CCE-86362-1
     cce@rhel9: CCE-86363-9
     cce@rhel10: CCE-88558-2
+    cce@sle16: CCE-95756-3
 
 ocil_clause: '{{{ ocil_clause_file_group_owner(file="/etc/crypttab", group="root") }}}'
 
diff --git a/linux_os/guide/system/permissions/files/file_groupowner_etc_sysconfig_sshd/rule.yml b/linux_os/guide/system/permissions/files/file_groupowner_etc_sysconfig_sshd/rule.yml
index 6a57207cc9b5..09a5d5beac04 100644
--- a/linux_os/guide/system/permissions/files/file_groupowner_etc_sysconfig_sshd/rule.yml
+++ b/linux_os/guide/system/permissions/files/file_groupowner_etc_sysconfig_sshd/rule.yml
@@ -2,7 +2,7 @@ documentation_complete: true
 
 title: 'Verify Group Who Owns /etc/sysconfig/sshd File'
 
-description: '{{{ describe_file_group_owner(file="/etc/sysconfig/sshd", group="root") }}}'
+description: '{{{ describe_file_group_owner(file=sshd_sysconfig_file, group="root") }}}'
 
 rationale: |-
     The <tt>/etc/sysconfig/sshd</tt> file contains configuration options for the SSH daemon.
@@ -14,19 +14,19 @@ severity: medium
 identifiers:
     cce@rhel8: CCE-89268-7
 
-ocil_clause: '{{{ ocil_clause_file_group_owner(file="/etc/sysconfig/sshd", group="root") }}}'
+ocil_clause: '{{{ ocil_clause_file_group_owner(file=sshd_sysconfig_file, group="root") }}}'
 
 ocil: |-
-    {{{ ocil_file_group_owner(file="/etc/sysconfig/sshd", group="root") }}}
+    {{{ ocil_file_group_owner(file=sshd_sysconfig_file, group="root") }}}
 
-fixtext: '{{{ fixtext_file_group_owner(file="/etc/sysconfig/sshd", group="root") }}}'
+fixtext: '{{{ fixtext_file_group_owner(file=sshd_sysconfig_file, group="root") }}}'
 
-srg_requirement: '{{{ srg_requirement_file_group_owner(file="/etc/sysconfig/sshd", group="root") }}}'
+srg_requirement: '{{{ srg_requirement_file_group_owner(file=sshd_sysconfig_file, group="root") }}}'
 
 template:
     name: file_groupowner
     vars:
-        filepath: /etc/sysconfig/sshd
+        filepath: '{{{ sshd_sysconfig_file }}}'
         gid_or_name: '0'
 
 platform: system_with_kernel
diff --git a/linux_os/guide/system/permissions/files/file_groupowner_systemmap/rule.yml b/linux_os/guide/system/permissions/files/file_groupowner_systemmap/rule.yml
index b15ee9a13dd1..c168d31a5c39 100644
--- a/linux_os/guide/system/permissions/files/file_groupowner_systemmap/rule.yml
+++ b/linux_os/guide/system/permissions/files/file_groupowner_systemmap/rule.yml
@@ -20,6 +20,7 @@ identifiers:
     cce@rhel8: CCE-86583-2
     cce@rhel9: CCE-86584-0
     cce@rhel10: CCE-90164-5
+    cce@sle16: CCE-95738-1
 
 ocil_clause: '{{{ ocil_clause_file_group_owner(file="/boot/System.map*", group="root") }}}'
 
diff --git a/linux_os/guide/system/permissions/files/file_owner_etc_crypttab/rule.yml b/linux_os/guide/system/permissions/files/file_owner_etc_crypttab/rule.yml
index 7e4dc62c9a3c..750234e46588 100644
--- a/linux_os/guide/system/permissions/files/file_owner_etc_crypttab/rule.yml
+++ b/linux_os/guide/system/permissions/files/file_owner_etc_crypttab/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhel8: CCE-86365-4
     cce@rhel9: CCE-86366-2
     cce@rhel10: CCE-89519-3
+    cce@sle16: CCE-96640-8
 
 ocil_clause: '{{{ ocil_clause_file_owner(file="/etc/crypttab", owner="root") }}}'
 
diff --git a/linux_os/guide/system/permissions/files/file_owner_etc_sysconfig_sshd/rule.yml b/linux_os/guide/system/permissions/files/file_owner_etc_sysconfig_sshd/rule.yml
index 64785d24ce67..758f6cc3dc7e 100644
--- a/linux_os/guide/system/permissions/files/file_owner_etc_sysconfig_sshd/rule.yml
+++ b/linux_os/guide/system/permissions/files/file_owner_etc_sysconfig_sshd/rule.yml
@@ -2,7 +2,7 @@ documentation_complete: true
 
 title: 'Verify User Who Owns /etc/sysconfig/sshd File'
 
-description: '{{{ describe_file_owner(file="/etc/sysconfig/sshd", owner="root") }}}'
+description: '{{{ describe_file_owner(file=sshd_sysconfig_file, owner="root") }}}'
 
 rationale: |-
     The <tt>/etc/sysconfig/sshd</tt> file contains configuration options for the SSH daemon.
@@ -14,19 +14,19 @@ severity: medium
 identifiers:
     cce@rhel8: CCE-89269-5
 
-ocil_clause: '{{{ ocil_clause_file_owner(file="/etc/sysconfig/sshd", owner="root") }}}'
+ocil_clause: '{{{ ocil_clause_file_owner(file=sshd_sysconfig_file, owner="root") }}}'
 
 ocil: |-
-    {{{ ocil_file_owner(file="/etc/sysconfig/sshd", owner="root") }}}
+    {{{ ocil_file_owner(file=sshd_sysconfig_file, owner="root") }}}
 
-fixtext: '{{{ fixtext_file_owner(file="/etc/sysconfig/sshd", owner="root") }}}'
+fixtext: '{{{ fixtext_file_owner(file=sshd_sysconfig_file, owner="root") }}}'
 
-srg_requirement: '{{{ srg_requirement_file_owner(file="/etc/sysconfig/sshd", owner="root") }}}'
+srg_requirement: '{{{ srg_requirement_file_owner(file=sshd_sysconfig_file, owner="root") }}}'
 
 template:
     name: file_owner
     vars:
-        filepath: /etc/sysconfig/sshd
+        filepath: '{{{ sshd_sysconfig_file }}}'
         uid_or_name: '0'
 
 platform: system_with_kernel
diff --git a/linux_os/guide/system/permissions/files/file_owner_systemmap/rule.yml b/linux_os/guide/system/permissions/files/file_owner_systemmap/rule.yml
index d10ec7e1ebd4..6a5a019b1605 100644
--- a/linux_os/guide/system/permissions/files/file_owner_systemmap/rule.yml
+++ b/linux_os/guide/system/permissions/files/file_owner_systemmap/rule.yml
@@ -20,6 +20,7 @@ identifiers:
     cce@rhel8: CCE-86586-5
     cce@rhel9: CCE-86587-3
     cce@rhel10: CCE-89808-0
+    cce@sle16: CCE-96671-3
 
 ocil_clause: '{{{ ocil_clause_file_owner(file="/boot/System.map*", owner="root") }}}'
 
diff --git a/linux_os/guide/system/permissions/files/file_permissions_etc_crypttab/rule.yml b/linux_os/guide/system/permissions/files/file_permissions_etc_crypttab/rule.yml
index f3a6e8920bca..d9af9dca12e1 100644
--- a/linux_os/guide/system/permissions/files/file_permissions_etc_crypttab/rule.yml
+++ b/linux_os/guide/system/permissions/files/file_permissions_etc_crypttab/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhel8: CCE-86369-6
     cce@rhel9: CCE-86370-4
     cce@rhel10: CCE-88726-5
+    cce@sle16: CCE-95862-9
 
 ocil_clause: '{{{ ocil_clause_file_permissions(file="/etc/crypttab", perms="0600") }}}'
 
diff --git a/linux_os/guide/system/permissions/files/file_permissions_etc_sysconfig_sshd/rule.yml b/linux_os/guide/system/permissions/files/file_permissions_etc_sysconfig_sshd/rule.yml
index 156efad15e09..fab349e834b8 100644
--- a/linux_os/guide/system/permissions/files/file_permissions_etc_sysconfig_sshd/rule.yml
+++ b/linux_os/guide/system/permissions/files/file_permissions_etc_sysconfig_sshd/rule.yml
@@ -3,7 +3,7 @@ documentation_complete: true
 title: 'Verify Permissions on /etc/sysconfig/sshd File'
 
 description: |-
-    {{{ describe_file_permissions(file="/etc/sysconfig/sshd", perms="0640") }}}
+    {{{ describe_file_permissions(file=sshd_sysconfig_file, perms="0640") }}}
 
 rationale: |-
     The <tt>/etc/sysconfig/sshd</tt> file contains configuration options for the SSH daemon.
@@ -15,19 +15,19 @@ severity: medium
 identifiers:
     cce@rhel8: CCE-89270-3
 
-ocil_clause: '{{{ ocil_clause_file_permissions(file="/etc/sysconfig/sshd", perms="-rw-r-----") }}}'
+ocil_clause: '{{{ ocil_clause_file_permissions(file=sshd_sysconfig_file, perms="-rw-r-----") }}}'
 
 ocil: |-
-    {{{ ocil_file_permissions(file="/etc/sysconfig/sshd", perms="-rw-r-----") }}}
+    {{{ ocil_file_permissions(file=sshd_sysconfig_file, perms="-rw-r-----") }}}
 
-fixtext: '{{{ fixtext_file_permissions(file="/etc/sysconfig/sshd", mode="0640") }}}'
+fixtext: '{{{ fixtext_file_permissions(file=sshd_sysconfig_file, mode="0640") }}}'
 
-srg_requirement: '{{{ srg_requirement_file_permission(file="/etc/sysconfig/sshd", mode="0640") }}}'
+srg_requirement: '{{{ srg_requirement_file_permission(file=sshd_sysconfig_file, mode="0640") }}}'
 
 template:
     name: file_permissions
     vars:
-        filepath: /etc/sysconfig/sshd
+        filepath: '{{{ sshd_sysconfig_file }}}'
         filemode: '0640'
         allow_stricter_permissions: "true"
 
diff --git a/linux_os/guide/system/permissions/files/file_permissions_systemmap/rule.yml b/linux_os/guide/system/permissions/files/file_permissions_systemmap/rule.yml
index 9190b28c74e7..e64a82b43400 100644
--- a/linux_os/guide/system/permissions/files/file_permissions_systemmap/rule.yml
+++ b/linux_os/guide/system/permissions/files/file_permissions_systemmap/rule.yml
@@ -20,6 +20,7 @@ identifiers:
     cce@rhel8: CCE-82892-1
     cce@rhel9: CCE-86581-6
     cce@rhel10: CCE-86786-1
+    cce@sle16: CCE-96220-9
 
 ocil_clause: '{{{ ocil_clause_file_permissions(file="/boot/System.map*", perms="-rw-------") }}}'
 
diff --git a/linux_os/guide/system/permissions/files/file_permissions_unauthorized_sgid/rule.yml b/linux_os/guide/system/permissions/files/file_permissions_unauthorized_sgid/rule.yml
index ae63ad59d9e2..fb19523d62d2 100644
--- a/linux_os/guide/system/permissions/files/file_permissions_unauthorized_sgid/rule.yml
+++ b/linux_os/guide/system/permissions/files/file_permissions_unauthorized_sgid/rule.yml
@@ -26,6 +26,7 @@ identifiers:
     cce@rhel10: CCE-90184-3
     cce@sle12: CCE-91472-1
     cce@sle15: CCE-91175-0
+    cce@sle16: CCE-95910-6
 
 references:
     cis-csc: 12,13,14,15,16,18,3,5
diff --git a/linux_os/guide/system/permissions/files/file_permissions_unauthorized_suid/rule.yml b/linux_os/guide/system/permissions/files/file_permissions_unauthorized_suid/rule.yml
index 9ccab80ce39b..341e375c781e 100644
--- a/linux_os/guide/system/permissions/files/file_permissions_unauthorized_suid/rule.yml
+++ b/linux_os/guide/system/permissions/files/file_permissions_unauthorized_suid/rule.yml
@@ -26,6 +26,7 @@ identifiers:
     cce@rhel10: CCE-86999-0
     cce@sle12: CCE-91473-9
     cce@sle15: CCE-91174-3
+    cce@sle16: CCE-96423-9
 
 references:
     cis-csc: 12,13,14,15,16,18,3,5
diff --git a/linux_os/guide/system/permissions/files/permissions_important_account_files/file_groupowner_etc_gshadow/rule.yml b/linux_os/guide/system/permissions/files/permissions_important_account_files/file_groupowner_etc_gshadow/rule.yml
index 46e60ad632b0..5fd648c30c3d 100644
--- a/linux_os/guide/system/permissions/files/permissions_important_account_files/file_groupowner_etc_gshadow/rule.yml
+++ b/linux_os/guide/system/permissions/files/permissions_important_account_files/file_groupowner_etc_gshadow/rule.yml
@@ -22,6 +22,7 @@ identifiers:
     cce@rhel10: CCE-90043-1
     cce@sle12: CCE-92225-2
     cce@sle15: CCE-91348-3
+    cce@sle16: CCE-95841-3
     cce@slmicro5: CCE-93967-8
 
 references:
diff --git a/linux_os/guide/system/permissions/files/permissions_important_account_files/file_groupowner_etc_shells/rule.yml b/linux_os/guide/system/permissions/files/permissions_important_account_files/file_groupowner_etc_shells/rule.yml
index f518cb5cd15d..114ab8dd6b32 100644
--- a/linux_os/guide/system/permissions/files/permissions_important_account_files/file_groupowner_etc_shells/rule.yml
+++ b/linux_os/guide/system/permissions/files/permissions_important_account_files/file_groupowner_etc_shells/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhel9: CCE-90434-2
     cce@rhel10: CCE-90020-9
     cce@sle15: CCE-92541-2
+    cce@sle16: CCE-96404-9
 
 references:
     nist: AC-3,MP-2
diff --git a/linux_os/guide/system/permissions/files/permissions_important_account_files/file_owner_etc_gshadow/rule.yml b/linux_os/guide/system/permissions/files/permissions_important_account_files/file_owner_etc_gshadow/rule.yml
index f49d8842b722..c3d73782a0a8 100644
--- a/linux_os/guide/system/permissions/files/permissions_important_account_files/file_owner_etc_gshadow/rule.yml
+++ b/linux_os/guide/system/permissions/files/permissions_important_account_files/file_owner_etc_gshadow/rule.yml
@@ -16,6 +16,7 @@ identifiers:
     cce@rhel10: CCE-87701-9
     cce@sle12: CCE-91557-9
     cce@sle15: CCE-91230-3
+    cce@sle16: CCE-96275-3
     cce@slmicro5: CCE-93959-5
 
 references:
diff --git a/linux_os/guide/system/permissions/files/permissions_important_account_files/file_owner_etc_shells/rule.yml b/linux_os/guide/system/permissions/files/permissions_important_account_files/file_owner_etc_shells/rule.yml
index 0d0c52baae12..89abfb9b8709 100644
--- a/linux_os/guide/system/permissions/files/permissions_important_account_files/file_owner_etc_shells/rule.yml
+++ b/linux_os/guide/system/permissions/files/permissions_important_account_files/file_owner_etc_shells/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhel9: CCE-90435-9
     cce@rhel10: CCE-89594-6
     cce@sle15: CCE-92547-9
+    cce@sle16: CCE-96138-3
 
 references:
     nist: AC-3,MP-2
diff --git a/linux_os/guide/system/permissions/files/permissions_important_account_files/file_permissions_backup_etc_shadow/rule.yml b/linux_os/guide/system/permissions/files/permissions_important_account_files/file_permissions_backup_etc_shadow/rule.yml
index c2080fde3fcd..b3e300599f20 100644
--- a/linux_os/guide/system/permissions/files/permissions_important_account_files/file_permissions_backup_etc_shadow/rule.yml
+++ b/linux_os/guide/system/permissions/files/permissions_important_account_files/file_permissions_backup_etc_shadow/rule.yml
@@ -57,3 +57,4 @@ template:
         filemode@ubuntu2404: '0640'
         filemode@sle12: '0640'
         filemode@sle15: '0640'
+        filemode@sle16: '0640'
diff --git a/linux_os/guide/system/permissions/files/permissions_important_account_files/file_permissions_etc_gshadow/rule.yml b/linux_os/guide/system/permissions/files/permissions_important_account_files/file_permissions_etc_gshadow/rule.yml
index 49b4c7967b2c..83f8fd8acf6f 100644
--- a/linux_os/guide/system/permissions/files/permissions_important_account_files/file_permissions_etc_gshadow/rule.yml
+++ b/linux_os/guide/system/permissions/files/permissions_important_account_files/file_permissions_etc_gshadow/rule.yml
@@ -25,6 +25,7 @@ identifiers:
     cce@rhel10: CCE-86975-0
     cce@sle12: CCE-91558-7
     cce@sle15: CCE-91231-1
+    cce@sle16: CCE-96193-8
     cce@slmicro5: CCE-93951-2
 
 references:
diff --git a/linux_os/guide/system/permissions/files/permissions_important_account_files/file_permissions_etc_shadow/rule.yml b/linux_os/guide/system/permissions/files/permissions_important_account_files/file_permissions_etc_shadow/rule.yml
index e52241f482f1..1e0ec24f75d1 100644
--- a/linux_os/guide/system/permissions/files/permissions_important_account_files/file_permissions_etc_shadow/rule.yml
+++ b/linux_os/guide/system/permissions/files/permissions_important_account_files/file_permissions_etc_shadow/rule.yml
@@ -69,5 +69,6 @@ template:
         filemode@debian13: '0640'
         filemode@sle12: '0640'
         filemode@sle15: '0640'
+        filemode@sle16: '0640'
         filemode@ubuntu2204: '0640'
         filemode@ubuntu2404: '0640'
diff --git a/linux_os/guide/system/permissions/files/permissions_important_account_files/file_permissions_etc_shells/rule.yml b/linux_os/guide/system/permissions/files/permissions_important_account_files/file_permissions_etc_shells/rule.yml
index 83701e95cc30..de73d8f1a6ca 100644
--- a/linux_os/guide/system/permissions/files/permissions_important_account_files/file_permissions_etc_shells/rule.yml
+++ b/linux_os/guide/system/permissions/files/permissions_important_account_files/file_permissions_etc_shells/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhel9: CCE-90432-6
     cce@rhel10: CCE-89912-0
     cce@sle15: CCE-92562-8
+    cce@sle16: CCE-96599-6
 
 references:
     nist: AC-3,MP-2
diff --git a/linux_os/guide/system/permissions/files/permissions_local_var_log/rule.yml b/linux_os/guide/system/permissions/files/permissions_local_var_log/rule.yml
index af819ea482cb..1be0bd45ad28 100644
--- a/linux_os/guide/system/permissions/files/permissions_local_var_log/rule.yml
+++ b/linux_os/guide/system/permissions/files/permissions_local_var_log/rule.yml
@@ -63,6 +63,7 @@ template:
         filepath: /var/log/
         recursive@sle12: 'true'
         recursive@sle15: 'true'
+        recursive@sle16: 'true'
         recursive@slmicro5: 'true'
         recursive@slmicro6: 'true'
         recursive@ubuntu2204: 'true'
diff --git a/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/bash/shared.sh b/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/bash/shared.sh
index 6579223bec38..db9e7825fbab 100644
--- a/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/bash/shared.sh
+++ b/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/bash/shared.sh
@@ -7,6 +7,18 @@
 # see https://workbench.cisecurity.org/benchmarks/18959/tickets/23964
 # regarding sssd and gdm exclusions
 
+declare -A valid_shells
+while read -r line; do
+    [[ "$line" == /* ]] && valid_shells["$line"]=1
+done < /etc/shells
+
+declare -A users_with_valid_shells
+while IFS=: read -r user _ _ _ _ _ shell; do
+    if [[ ${valid_shells["$shell"]} == 1 ]]; then
+        users_with_valid_shells["$user"]=1
+    fi
+done < /etc/passwd
+
 find -P /var/log/ -type f -regextype posix-extended \
     ! -group root ! -group adm  \
     ! -name 'gdm' ! -name 'gdm3' \
@@ -26,4 +38,11 @@ find -P /var/log/ -type f -regextype posix-extended \
     ! -regex '.*/localmessages(.*)' \
     ! -regex '.*/secure(.*)' \
     ! -regex '.*/waagent.log(.*)' \
-    -regex '.*' -exec chgrp --no-dereference root {} \;
+    -print0 | while IFS= read -r -d '' log_file
+    do
+        # Set to root if owned by a user with a valid shell
+        user=$(stat -c "%U" "$log_file")
+        if [[ "${users_with_valid_shells["$user"]}" == "1" ]]; then
+            chgrp --no-dereference root "$log_file"
+        fi
+    done
diff --git a/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/oval/shared.xml b/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/oval/shared.xml
index bb1b411ae7fe..02f7f4ce5fdb 100644
--- a/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/oval/shared.xml
+++ b/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/oval/shared.xml
@@ -21,8 +21,8 @@
     <unix:object object_ref="object_group_ownership_var_log" />
     <unix:state state_ref="state_group_ownership_adm_var_log_auth_log"/>
     <unix:state state_ref="state_group_ownership_root_var_log_auth_log"/>
-    {{%- if product == "ubuntu2204" %}}
-    <unix:state state_ref="{{{ rule_id }}}_group_only_has_sys_uids"/>
+    {{%- if 'ubuntu' in product %}}
+    <unix:state state_ref="{{{ rule_id }}}_state_owner_is_system_user"/>
     {{%- endif %}}
   </unix:file_test>
   <unix:file_object comment="/var/log/*" id="object_group_ownership_var_log" version="1">
@@ -96,47 +96,43 @@
   <unix:file_state id="{{{ rule_id }}}_exclude_files_waagent" version="1">
     <unix:filename operation="pattern match">^waagent\.log.*$</unix:filename>
   </unix:file_state>
-  {{%- if product == "ubuntu2204" %}}
-  <unix:file_state id="{{{ rule_id }}}_group_only_has_sys_uids" version="1">
-    <unix:group_id datatype="int" var_ref="empty_group_ids" var_check="at least one"/>
+  {{%- if 'ubuntu' in product %}}
+  <unix:file_state id="{{{ rule_id }}}_state_owner_is_system_user" version="1">
+    <unix:group_id datatype="int" operation="equals" var_ref="{{{ rule_id }}}_var_system_gids" var_check="at least one" />
   </unix:file_state>
 
-  <local_variable id="empty_group_ids" comment="Group IDs with no members" datatype="int" version="1">
-    <object_component item_field="subexpression" object_ref="empty_members_in_etc_group"/>
-  </local_variable>
-
-  <ind:textfilecontent54_object comment="Groups with no members" id="empty_members_in_etc_group" version="1">
-    <ind:filepath>/etc/group</ind:filepath>
-     <ind:pattern operation="pattern match" var_ref="variable_{{{ rule_id }}}_group_regex" var_check="at least one"/>
+  <!-- Fetch all shells designated as valid login shells from /etc/shells -->
+  <ind:textfilecontent54_object id="{{{ rule_id }}}_object_valid_shells" version="1" comment="valid shells">
+    <ind:filepath>/etc/shells</ind:filepath>
+    <ind:pattern operation="pattern match">^(/.*)$</ind:pattern>
     <ind:instance datatype="int" operation="greater than or equal">1</ind:instance>
   </ind:textfilecontent54_object>
 
-  <local_variable id="variable_{{{ rule_id }}}_group_regex" datatype="string" version="1" comment="gid rows retrieved from /etc/passwd">
-    <concat>
-      <literal_component>^[^:]+:[^:]*:(</literal_component>
-      <object_component item_field="subexpression" object_ref="obj_{{{ rule_id }}}_gids_with_only_sys_uids" />
-      <literal_component>):$</literal_component>
-    </concat>
+  <local_variable id="{{{ rule_id }}}_var_valid_shells" comment="list of valid shells" datatype="string" version="1">
+    <object_component item_field="subexpression" object_ref="{{{ rule_id }}}_object_valid_shells" />
   </local_variable>
-
-  <ind:textfilecontent54_object id="obj_{{{ rule_id }}}_gids_with_only_sys_uids" version="1">
+  
+  <ind:textfilecontent54_object id="{{{ rule_id }}}_object_system_users" version="1" comment="users who have an invalid shell">
     <ind:filepath>/etc/passwd</ind:filepath>
-    <ind:pattern operation="pattern match" var_ref="variable_{{{ rule_id }}}_regex" var_check="at least one"/>
+    <ind:pattern operation="pattern match">^[^:]+:[^:]+:[0-9]+:([0-9]+):.*$</ind:pattern>
     <ind:instance datatype="int" operation="greater than or equal">1</ind:instance>
+    <filter action="exclude">{{{ rule_id }}}_state_shell_is_valid</filter>
   </ind:textfilecontent54_object>
 
-  <local_variable id="variable_{{{ rule_id }}}_regex" datatype="string" version="1" comment="uid rows retrieved from /etc/passwd">
+  <ind:textfilecontent54_state id="{{{ rule_id }}}_state_shell_is_valid" version="1">
+    <ind:text operation="pattern match" var_ref="{{{ rule_id }}}_var_valid_shells_regex" var_check="at least one"></ind:text>
+  </ind:textfilecontent54_state>
+  
+  <local_variable id="{{{ rule_id }}}_var_valid_shells_regex" datatype="string" version="1" comment="regex of valid shells">
     <concat>
-      <literal_component>^[^:]*:[^:]*:</literal_component>
-        <object_component item_field="subexpression" object_ref="obj_{{{ rule_id }}}_sys_uid" />
-      <literal_component>:(\d+):.*$</literal_component>
+      <literal_component>^.*:(</literal_component>
+        <object_component item_field="subexpression" object_ref="{{{ rule_id }}}_object_valid_shells" />
+      <literal_component>)$</literal_component>
     </concat>
   </local_variable>
 
-  <ind:textfilecontent54_object id="obj_{{{ rule_id }}}_sys_uid" version="1">
-    <ind:filepath>/etc/passwd</ind:filepath>
-    <ind:pattern operation="pattern match">^[^:]+:[^:]*:(\d\d?\d?):.*$</ind:pattern>
-    <ind:instance datatype="int" operation="greater than or equal">1</ind:instance>
-  </ind:textfilecontent54_object>
+  <local_variable id="{{{ rule_id }}}_var_system_gids" comment="GIDs of users with invalid shells" datatype="int" version="1">
+    <object_component item_field="subexpression" object_ref="{{{ rule_id }}}_object_system_users" />
+  </local_variable>
   {{%- endif %}}
 </def-group>
diff --git a/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/tests/excluded_files.pass.sh b/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/tests/excluded_files.pass.sh
index 1960379c3e08..7dd2a108ed05 100644
--- a/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/tests/excluded_files.pass.sh
+++ b/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/tests/excluded_files.pass.sh
@@ -1,6 +1,5 @@
 #!/bin/bash
 # platform = multi_platform_ubuntu
-# packages = rsyslog
 
 chgrp root -R /var/log/*
 
diff --git a/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/tests/owned_by_adm.pass.sh b/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/tests/owned_by_adm.pass.sh
index 4afa612eb706..be307cb3eced 100644
--- a/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/tests/owned_by_adm.pass.sh
+++ b/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/tests/owned_by_adm.pass.sh
@@ -1,6 +1,5 @@
 #!/bin/bash
 # platform = multi_platform_ubuntu
-# packages = rsyslog
 
 chgrp root -R /var/log/*
 
diff --git a/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/tests/owned_by_nobody.fail.sh b/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/tests/owned_by_nobody.fail.sh
deleted file mode 100644
index 207dd03b6cd1..000000000000
--- a/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/tests/owned_by_nobody.fail.sh
+++ /dev/null
@@ -1,13 +0,0 @@
-#!/bin/bash
-# platform = multi_platform_ubuntu
-# packages = rsyslog
-
-chgrp root -R /var/log/*
-
-touch /var/log/test.log
-chgrp nogroup /var/log/test.log
-{{%- if product == 'ubuntu2204' %}}
-#make sure nogroup has members
-usermod -aG nogroup nobody
-chown nobody /var/log/test.log
-{{%- endif %}}
diff --git a/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/tests/owned_by_non_sys_acc_grp.fail.sh b/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/tests/owned_by_non_sys_acc_grp.fail.sh
deleted file mode 100644
index 53bcf848e1a5..000000000000
--- a/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/tests/owned_by_non_sys_acc_grp.fail.sh
+++ /dev/null
@@ -1,12 +0,0 @@
-#!/bin/bash
-# platform = multi_platform_ubuntu
-# packages = rsyslog
-
-chown root -R /var/log/*
-
-groupadd testgroup
-useradd testUser
-usermod -g testgroup testUser
-
-touch /var/log/test.log
-chgrp testgroup /var/log/test.log
diff --git a/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/tests/owned_by_root.pass.sh b/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/tests/owned_by_root.pass.sh
index a9b0b730fe07..a04a0c38499b 100644
--- a/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/tests/owned_by_root.pass.sh
+++ b/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/tests/owned_by_root.pass.sh
@@ -1,6 +1,5 @@
 #!/bin/bash
 # platform = multi_platform_ubuntu
-# packages = rsyslog
 
 chgrp root -R /var/log/*
 
diff --git a/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/tests/owned_by_sys_acc_grp.pass.sh b/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/tests/owned_by_sys_acc_grp.pass.sh
deleted file mode 100644
index 49afdf1ad47b..000000000000
--- a/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/tests/owned_by_sys_acc_grp.pass.sh
+++ /dev/null
@@ -1,12 +0,0 @@
-#!/bin/bash
-# platform = Ubuntu 22.04
-# packages = rsyslog
-
-chown root -R /var/log/*
-
-groupadd testgroup
-useradd -r testUser
-usermod -g testgroup testUser
-
-touch /var/log/test.log
-chgrp testgroup /var/log/test.log
diff --git a/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/tests/owned_by_user_with_shell.fail.sh b/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/tests/owned_by_user_with_shell.fail.sh
new file mode 100644
index 000000000000..3308000d466e
--- /dev/null
+++ b/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/tests/owned_by_user_with_shell.fail.sh
@@ -0,0 +1,9 @@
+#!/bin/bash
+# platform = multi_platform_ubuntu
+
+useradd -m -s /bin/bash test_user_with_shell
+
+chown root:root -R /var/log/*
+
+touch /var/log/test_log_file
+chgrp test_user_with_shell /var/log/test_log_file
diff --git a/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/tests/owned_by_user_without_shell.pass.sh b/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/tests/owned_by_user_without_shell.pass.sh
new file mode 100644
index 000000000000..d985321e5124
--- /dev/null
+++ b/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_groupownerships_var_log/tests/owned_by_user_without_shell.pass.sh
@@ -0,0 +1,9 @@
+#!/bin/bash
+# platform = multi_platform_ubuntu
+
+useradd -m -s /usr/sbin/nologin test_user_no_shell
+
+chown root:root -R /var/log/*
+
+touch /var/log/test_log_file
+chgrp test_user_no_shell /var/log/test_log_file
diff --git a/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_ownerships_var_log/bash/shared.sh b/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_ownerships_var_log/bash/shared.sh
index ee4cce9fd671..eafb1e165112 100644
--- a/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_ownerships_var_log/bash/shared.sh
+++ b/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_ownerships_var_log/bash/shared.sh
@@ -7,6 +7,18 @@
 # see https://workbench.cisecurity.org/benchmarks/18959/tickets/23964
 # regarding sssd and gdm exclusions
 
+declare -A valid_shells
+while read -r line; do
+    [[ "$line" == /* ]] && valid_shells["$line"]=1
+done < /etc/shells
+
+declare -A users_with_valid_shells
+while IFS=: read -r user _ _ _ _ _ shell; do
+    if [[ ${valid_shells["$shell"]} == 1 ]]; then
+        users_with_valid_shells["$user"]=1
+    fi
+done < /etc/passwd
+
 find -P /var/log/ -type f -regextype posix-extended \
     ! -user root ! -user syslog  \
     ! -name 'gdm' ! -name 'gdm3' \
@@ -26,4 +38,11 @@ find -P /var/log/ -type f -regextype posix-extended \
     ! -regex '.*/localmessages(.*)' \
     ! -regex '.*/secure(.*)' \
     ! -regex '.*/waagent.log(.*)' \
-    -regex '.*' -exec chown --no-dereference root {} \;
+    -print0 | while IFS= read -r -d '' log_file
+    do
+        # Set to root if owned by a user with a valid shell
+        user=$(stat -c "%U" "$log_file")
+        if [[ "${users_with_valid_shells["$user"]}" == "1" ]]; then
+            chown --no-dereference root "$log_file"
+        fi
+    done
diff --git a/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_ownerships_var_log/oval/shared.xml b/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_ownerships_var_log/oval/shared.xml
index 95095bbb8837..b97743b02346 100644
--- a/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_ownerships_var_log/oval/shared.xml
+++ b/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_ownerships_var_log/oval/shared.xml
@@ -20,8 +20,8 @@
     <unix:object object_ref="object_file_ownership_var_log" />
     <unix:state state_ref="state_file_ownership_syslog_var_log_auth_log"/>
     <unix:state state_ref="state_file_ownership_root_var_log_auth_log"/>
-    {{%- if product == "ubuntu2204" %}}
-    <unix:state state_ref="{{{ rule_id }}}_system_files_with_empty_group"/>
+    {{%- if 'ubuntu' in product %}}
+    <unix:state state_ref="state_file_ownership_owner_is_system_user"/>
     {{%- endif %}}
   </unix:file_test>
   <unix:file_object comment="/var/log/*" id="object_file_ownership_var_log" version="1">
@@ -108,9 +108,43 @@
     <unix:filepath operation="pattern match">^/var/log/exim4/.*$</unix:filepath>
   </unix:file_state>
   {{% endif %}}
-  {{%- if product == "ubuntu2204" %}}
-  <unix:file_state id="{{{ rule_id }}}_system_files_with_empty_group" version="3">
-    <unix:user_id datatype="int" operation="less than">{{{ uid_min }}}</unix:user_id>
+ 
+  <unix:file_state id="state_file_ownership_owner_is_system_user" version="1">
+    <unix:user_id datatype="int" operation="equals" var_ref="{{{ rule_id }}}_var_system_uids" var_check="at least one" />
   </unix:file_state>
-  {{%- endif %}}
+
+  <!-- Fetch all shells designated as valid login shells from /etc/shells -->
+  <ind:textfilecontent54_object id="{{{ rule_id }}}_object_valid_shells" version="1" comment="valid shells">
+    <ind:filepath>/etc/shells</ind:filepath>
+    <ind:pattern operation="pattern match">^(/.*)$</ind:pattern>
+    <ind:instance datatype="int" operation="greater than or equal">1</ind:instance>
+  </ind:textfilecontent54_object>
+
+  <local_variable id="{{{ rule_id }}}_var_valid_shells" comment="list of valid shells" datatype="string" version="1">
+    <object_component item_field="subexpression" object_ref="{{{ rule_id }}}_object_valid_shells" />
+  </local_variable>
+
+  <!-- Find users who have a shell that is NOT in the list of valid shells (System Users) -->
+  <ind:textfilecontent54_object id="{{{ rule_id }}}_object_system_users" version="1" comment="users who have an invalid shell">
+    <ind:filepath>/etc/passwd</ind:filepath>
+    <ind:pattern operation="pattern match">^[^:]+:[^:]+:([0-9]+):.*$</ind:pattern>
+    <ind:instance datatype="int" operation="greater than or equal">1</ind:instance>
+    <filter action="exclude">{{{ rule_id }}}_state_shell_is_valid</filter>
+  </ind:textfilecontent54_object>
+
+  <ind:textfilecontent54_state id="{{{ rule_id }}}_state_shell_is_valid" version="1">
+    <ind:text operation="pattern match" var_ref="{{{ rule_id }}}_var_valid_shells_regex" var_check="at least one"></ind:text>
+  </ind:textfilecontent54_state>
+  
+  <local_variable id="{{{ rule_id }}}_var_valid_shells_regex" datatype="string" version="1" comment="regex of valid shells">
+    <concat>
+      <literal_component>^.*:(</literal_component>
+        <object_component item_field="subexpression" object_ref="{{{ rule_id }}}_object_valid_shells" />
+      <literal_component>)$</literal_component>
+    </concat>
+  </local_variable>
+
+  <local_variable id="{{{ rule_id }}}_var_system_uids" comment="UIDs of users with invalid shells" datatype="int" version="1">
+    <object_component item_field="subexpression" object_ref="{{{ rule_id }}}_object_system_users" />
+  </local_variable>
 </def-group>
diff --git a/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_ownerships_var_log/tests/owned_by_nobody.fail.sh b/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_ownerships_var_log/tests/owned_by_nobody.fail.sh
deleted file mode 100644
index 1bd7955a7dc2..000000000000
--- a/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_ownerships_var_log/tests/owned_by_nobody.fail.sh
+++ /dev/null
@@ -1,8 +0,0 @@
-#!/bin/bash
-# platform = multi_platform_ubuntu
-# packages = rsyslog
-
-chown root -R /var/log/*
-
-touch /var/log/test.log
-chown nobody /var/log/test.log
diff --git a/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_ownerships_var_log/tests/owned_by_root.pass.sh b/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_ownerships_var_log/tests/owned_by_root.pass.sh
index 3405d1f42030..c9ea476a15aa 100644
--- a/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_ownerships_var_log/tests/owned_by_root.pass.sh
+++ b/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_ownerships_var_log/tests/owned_by_root.pass.sh
@@ -1,6 +1,5 @@
 #!/bin/bash
 # platform = multi_platform_ubuntu
-# packages = rsyslog
 
 chown root -R /var/log/*
 
diff --git a/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_ownerships_var_log/tests/owned_by_sysacc.pass.sh b/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_ownerships_var_log/tests/owned_by_sysacc.pass.sh
deleted file mode 100644
index 70bb73134866..000000000000
--- a/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_ownerships_var_log/tests/owned_by_sysacc.pass.sh
+++ /dev/null
@@ -1,10 +0,0 @@
-#!/bin/bash
-# platform = Ubuntu 22.04
-# packages = rsyslog
-
-chown root -R /var/log/*
-
-useradd -r testUser
-
-touch /var/log/test.log
-chown testUser /var/log/test.log
diff --git a/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_ownerships_var_log/tests/owned_by_syslog.pass.sh b/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_ownerships_var_log/tests/owned_by_syslog.pass.sh
index 697ac57b5507..b13a50eff8b1 100644
--- a/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_ownerships_var_log/tests/owned_by_syslog.pass.sh
+++ b/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_ownerships_var_log/tests/owned_by_syslog.pass.sh
@@ -1,6 +1,7 @@
 #!/bin/bash
 # platform = multi_platform_ubuntu
-# packages = rsyslog
+
+useradd -r syslog || true
 
 chown root -R /var/log/*
 
diff --git a/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_ownerships_var_log/tests/owned_by_user_with_shell.fail.sh b/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_ownerships_var_log/tests/owned_by_user_with_shell.fail.sh
new file mode 100644
index 000000000000..6215bee12392
--- /dev/null
+++ b/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_ownerships_var_log/tests/owned_by_user_with_shell.fail.sh
@@ -0,0 +1,9 @@
+#!/bin/bash
+# platform = multi_platform_ubuntu
+
+useradd -m -s /bin/bash test_user_with_shell
+
+chown root:root -R /var/log/*
+
+touch /var/log/test_log_file
+chown test_user_with_shell /var/log/test_log_file
diff --git a/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_ownerships_var_log/tests/owned_by_user_without_shell.pass.sh b/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_ownerships_var_log/tests/owned_by_user_without_shell.pass.sh
new file mode 100644
index 000000000000..b1e5fae1718f
--- /dev/null
+++ b/linux_os/guide/system/permissions/files/permissions_var_log_dir/file_ownerships_var_log/tests/owned_by_user_without_shell.pass.sh
@@ -0,0 +1,9 @@
+#!/bin/bash
+# platform = multi_platform_ubuntu
+
+useradd -m -s /usr/sbin/nologin test_user_no_shell
+
+chown root:root -R /var/log/*
+
+touch /var/log/test_log_file
+chown test_user_no_shell /var/log/test_log_file
diff --git a/linux_os/guide/system/permissions/files/permissions_within_important_dirs/directory_groupowner_etc_sysctld/rule.yml b/linux_os/guide/system/permissions/files/permissions_within_important_dirs/directory_groupowner_etc_sysctld/rule.yml
index fe9ad0c2cb13..4b7a99b4add2 100644
--- a/linux_os/guide/system/permissions/files/permissions_within_important_dirs/directory_groupowner_etc_sysctld/rule.yml
+++ b/linux_os/guide/system/permissions/files/permissions_within_important_dirs/directory_groupowner_etc_sysctld/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhel9: CCE-86325-8
     cce@rhel10: CCE-90122-3
     cce@sle15: CCE-92506-5
+    cce@sle16: CCE-96187-0
 
 ocil_clause: '{{{ ocil_clause_file_group_owner(file="/etc/sysctl.d", group="root") }}}'
 
diff --git a/linux_os/guide/system/permissions/files/permissions_within_important_dirs/directory_owner_etc_sysctld/rule.yml b/linux_os/guide/system/permissions/files/permissions_within_important_dirs/directory_owner_etc_sysctld/rule.yml
index 4fcf06a18c77..5bd29766509c 100644
--- a/linux_os/guide/system/permissions/files/permissions_within_important_dirs/directory_owner_etc_sysctld/rule.yml
+++ b/linux_os/guide/system/permissions/files/permissions_within_important_dirs/directory_owner_etc_sysctld/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhel9: CCE-86330-8
     cce@rhel10: CCE-87242-4
     cce@sle15: CCE-92513-1
+    cce@sle16: CCE-96370-2
 
 ocil_clause: '{{{ ocil_clause_file_owner(file="/etc/sysctl.d", owner="root") }}}'
 
diff --git a/linux_os/guide/system/permissions/files/permissions_within_important_dirs/directory_permissions_etc_sysctld/rule.yml b/linux_os/guide/system/permissions/files/permissions_within_important_dirs/directory_permissions_etc_sysctld/rule.yml
index 7f93f2ef4dc1..e00b35cee6b9 100644
--- a/linux_os/guide/system/permissions/files/permissions_within_important_dirs/directory_permissions_etc_sysctld/rule.yml
+++ b/linux_os/guide/system/permissions/files/permissions_within_important_dirs/directory_permissions_etc_sysctld/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhel9: CCE-86337-3
     cce@rhel10: CCE-89782-7
     cce@sle15: CCE-92527-1
+    cce@sle16: CCE-95827-2
 
 ocil_clause: '{{{ ocil_clause_file_permissions(file="/etc/sysctl.d", perms="0755") }}}'
 
diff --git a/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_groupownership_system_commands_dirs/ansible/shared.yml b/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_groupownership_system_commands_dirs/ansible/shared.yml
index 429962905c3e..78c03e7011b6 100644
--- a/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_groupownership_system_commands_dirs/ansible/shared.yml
+++ b/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_groupownership_system_commands_dirs/ansible/shared.yml
@@ -11,7 +11,11 @@
     follow: no
     recurse: no
   register: system_command_files_found
+  {{% if 'ol9' in product %}}
+  with_items: ['/bin', '/sbin', '/usr/bin', '/usr/sbin', '/usr/libexec','/usr/local/bin', '/usr/local/sbin']
+  {{% else %}}
   with_items: ['/bin', '/sbin', '/usr/bin', '/usr/sbin', '/usr/local/bin', '/usr/local/sbin']
+  {{% endif %}}
   changed_when: false
 
 - name: "{{{ rule_title }}} - Set group ownership to root for system command files"
diff --git a/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_groupownership_system_commands_dirs/bash/shared.sh b/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_groupownership_system_commands_dirs/bash/shared.sh
index 00a12fdfa865..bc803976ee28 100644
--- a/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_groupownership_system_commands_dirs/bash/shared.sh
+++ b/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_groupownership_system_commands_dirs/bash/shared.sh
@@ -1,3 +1,6 @@
 # platform = multi_platform_fedora,multi_platform_ol,multi_platform_rhel,multi_platform_sle,multi_platform_slmicro,multi_platform_almalinux
-
+{{% if 'ol9' in product %}}
+find -P /bin /sbin /usr/bin /usr/sbin /usr/libexec /usr/local/bin /usr/local/sbin \! -group root -type f -exec chgrp root '{}' \; || true
+{{% else %}}
 find -P /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin \! -group root -type f -exec chgrp root '{}' \; || true
+{{% endif %}}
diff --git a/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_groupownership_system_commands_dirs/oval/shared.xml b/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_groupownership_system_commands_dirs/oval/shared.xml
index 16936790ef09..08d91bab154d 100644
--- a/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_groupownership_system_commands_dirs/oval/shared.xml
+++ b/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_groupownership_system_commands_dirs/oval/shared.xml
@@ -17,7 +17,11 @@
   <unix:file_object comment="system commands files" id="object_groupownership_system_commands_dirs" version="1">
     <!-- Check that system commands within directories /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin 
          belong to group with gid 0 (root) or gid < {{{ gid_min }}} (system account)-->
+    {{% if 'ol9' in product %}}
+    <unix:path operation="pattern match">^\/s?bin|^\/usr\/s?bin|^\/usr\/libexec|^\/usr\/local\/s?bin</unix:path>
+    {{% else %}}
     <unix:path operation="pattern match">^\/s?bin|^\/usr\/s?bin|^\/usr\/local\/s?bin</unix:path>
+    {{% endif %}}
     <unix:filename operation="pattern match">^.*$</unix:filename>
    <filter action="include">state_groupowner_system_commands_dirs_not_root_or_system_account</filter>
    <filter action="exclude">state_groupowner_system_commands_dirs_symlink</filter>
diff --git a/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_groupownership_system_commands_dirs/rule.yml b/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_groupownership_system_commands_dirs/rule.yml
index 37ae549a7174..950ff7cc9d11 100644
--- a/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_groupownership_system_commands_dirs/rule.yml
+++ b/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_groupownership_system_commands_dirs/rule.yml
@@ -9,6 +9,9 @@ description: |-
     /sbin
     /usr/bin
     /usr/sbin
+    {{%- if 'ol9' in product %}}
+    /usr/libexec
+    {{%- endif %}}
     /usr/local/bin
     /usr/local/sbin
     </pre>
@@ -39,6 +42,7 @@ identifiers:
     cce@rhel10: CCE-89800-7
     cce@sle12: CCE-83243-6
     cce@sle15: CCE-85742-5
+    cce@sle16: CCE-96446-0
     cce@slmicro5: CCE-93701-1
     cce@slmicro6: CCE-94699-6
 
@@ -54,7 +58,11 @@ ocil_clause: 'any system commands are returned and is not group-owned by a requi
 ocil: |-
     Verify the system commands contained in the following directories are group-owned by "root", or a required system account, with the following command:
 
+    {{%- if 'ol9' in product %}}
+    $ sudo find -L /bin /sbin /usr/bin /usr/sbin /usr/libexec /usr/local/bin /usr/local/sbin ! -group root -exec ls -l {} \;
+    {{%- else %}}
     $ sudo find -L /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin ! -group root -exec ls -l {} \;
+    {{%- endif %}}
 
 fixtext: |-
     Configure the system commands to be protected from unauthorized access.
diff --git a/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_groupownership_system_commands_dirs/tests/correct_groupowner.pass.sh b/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_groupownership_system_commands_dirs/tests/correct_groupowner.pass.sh
index 48bd0d2c8f5c..9fe7a63d4783 100644
--- a/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_groupownership_system_commands_dirs/tests/correct_groupowner.pass.sh
+++ b/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_groupownership_system_commands_dirs/tests/correct_groupowner.pass.sh
@@ -1,3 +1,7 @@
 #!/bin/bash
 
+{{% if 'ol9' in product %}}
+find -P /bin /sbin /usr/bin /usr/sbin /usr/libexec /usr/local/bin /usr/local/sbin \! -group root -type f -exec chgrp --no-dereference root '{}' \; || true
+{{% else %}}
 find -P /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin \! -group root -type f -exec chgrp --no-dereference root '{}' \; || true
+{{% endif %}}
diff --git a/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_groupownership_system_commands_dirs/tests/incorrect_groupownership.fail.sh b/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_groupownership_system_commands_dirs/tests/incorrect_groupownership.fail.sh
index f65c98a225ab..8013aaed79fa 100644
--- a/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_groupownership_system_commands_dirs/tests/incorrect_groupownership.fail.sh
+++ b/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_groupownership_system_commands_dirs/tests/incorrect_groupownership.fail.sh
@@ -2,13 +2,21 @@
 
 groupadd group_test
 
+{{% if 'ol9' in product %}}
+find -P /bin/ /sbin/ /usr/bin/ /usr/sbin/ /usr/libexec/ /usr/local/bin/ /usr/local/sbin/ -type f -exec chgrp --no-dereference root {} \; || true
+{{% else %}}
 find -P /bin/ /sbin/ /usr/bin/ /usr/sbin/ /usr/local/bin/ /usr/local/sbin/ -type f -exec chgrp --no-dereference root {} \; || true
+{{% endif %}}
 
 {{% if 'ubuntu' in product %}}
 for TESTFILE in /bin/test_me /sbin/test_me /usr/bin/test_me /usr/sbin/test_me /usr/local/bin/test_me /usr/local/sbin/test_me
 {{% else %}}
+{{% if 'ol9' in product %}}
+for TESTFILE in /bin/test_me /sbin/test_me /usr/bin/test_me /usr/libexec/test_me /usr/sbin/test_me /usr/local/bin/test_me
+{{% else %}}
 for TESTFILE in /bin/test_me /sbin/test_me /usr/bin/test_me /usr/sbin/test_me /usr/local/bin/test_me
 {{% endif %}}
+{{% endif %}}
 do
   if [[ ! -f $TESTFILE ]]
   then
diff --git a/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_groupownership_system_commands_dirs/tests/symlink.pass.sh b/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_groupownership_system_commands_dirs/tests/symlink.pass.sh
index 6c9035268936..e27ef5963fc9 100644
--- a/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_groupownership_system_commands_dirs/tests/symlink.pass.sh
+++ b/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_groupownership_system_commands_dirs/tests/symlink.pass.sh
@@ -2,7 +2,11 @@
 
 groupadd group_test
 
+{{% if 'ol9' in product %}}
+find -P /bin/ /sbin/ /usr/bin/ /usr/sbin/ /usr/libexec /usr/local/bin/ /usr/local/sbin/ \! -group root -type f -exec chgrp --no-dereference root {} \; || true
+{{% else %}}
 find -P /bin/ /sbin/ /usr/bin/ /usr/sbin/ /usr/local/bin/ /usr/local/sbin/ \! -group root -type f -exec chgrp --no-dereference root {} \; || true
+{{% endif %}}
 
 ln -s $(mktemp -p /tmp) /usr/bin/test.log.symlink
 chgrp -h group_test /usr/bin/test.log.symlink
diff --git a/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_ownership_binary_dirs/rule.yml b/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_ownership_binary_dirs/rule.yml
index 1b91da3b6535..fade0c0a085e 100644
--- a/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_ownership_binary_dirs/rule.yml
+++ b/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_ownership_binary_dirs/rule.yml
@@ -30,6 +30,7 @@ identifiers:
     cce@rhel10: CCE-89620-9
     cce@sle12: CCE-83241-0
     cce@sle15: CCE-85730-0
+    cce@sle16: CCE-96514-5
     cce@slmicro5: CCE-93699-7
     cce@slmicro6: CCE-94697-0
 
diff --git a/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_permissions_binary_dirs/rule.yml b/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_permissions_binary_dirs/rule.yml
index 4ddad0a17e22..5cd917fc6c08 100644
--- a/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_permissions_binary_dirs/rule.yml
+++ b/linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_permissions_binary_dirs/rule.yml
@@ -30,6 +30,7 @@ identifiers:
     cce@rhel10: CCE-86978-4
     cce@sle12: CCE-83240-2
     cce@sle15: CCE-85729-2
+    cce@sle16: CCE-95994-0
     cce@slmicro5: CCE-93698-9
     cce@slmicro6: CCE-94696-2
 
diff --git a/linux_os/guide/system/permissions/files/sysctl_fs_protected_fifos/rule.yml b/linux_os/guide/system/permissions/files/sysctl_fs_protected_fifos/rule.yml
index d21952c3300d..f6325c7cfb07 100644
--- a/linux_os/guide/system/permissions/files/sysctl_fs_protected_fifos/rule.yml
+++ b/linux_os/guide/system/permissions/files/sysctl_fs_protected_fifos/rule.yml
@@ -15,6 +15,7 @@ severity: medium
 identifiers:
     cce@rhel9: CCE-85884-5
     cce@rhel10: CCE-87125-1
+    cce@sle16: CCE-96680-4
 
 references:
     nist: CM-6(a),AC-6(1)
diff --git a/linux_os/guide/system/permissions/files/sysctl_fs_protected_hardlinks/rule.yml b/linux_os/guide/system/permissions/files/sysctl_fs_protected_hardlinks/rule.yml
index e80a9af6cd9a..ce10b4d619a7 100644
--- a/linux_os/guide/system/permissions/files/sysctl_fs_protected_hardlinks/rule.yml
+++ b/linux_os/guide/system/permissions/files/sysctl_fs_protected_hardlinks/rule.yml
@@ -19,6 +19,7 @@ identifiers:
     cce@rhel10: CCE-86689-7
     cce@sle12: CCE-91559-5
     cce@sle15: CCE-91252-7
+    cce@sle16: CCE-95822-3
 
 references:
     nerc-cip: CIP-003-8 R5.1.1,CIP-003-8 R5.3,CIP-004-6 R2.3,CIP-007-3 R2.1,CIP-007-3 R2.2,CIP-007-3 R2.3,CIP-007-3 R5.1,CIP-007-3 R5.1.1,CIP-007-3 R5.1.2
diff --git a/linux_os/guide/system/permissions/files/sysctl_fs_protected_regular/rule.yml b/linux_os/guide/system/permissions/files/sysctl_fs_protected_regular/rule.yml
index bcf733e4ad0a..9a6b3ba2e0f4 100644
--- a/linux_os/guide/system/permissions/files/sysctl_fs_protected_regular/rule.yml
+++ b/linux_os/guide/system/permissions/files/sysctl_fs_protected_regular/rule.yml
@@ -16,6 +16,7 @@ severity: medium
 identifiers:
     cce@rhel9: CCE-85885-2
     cce@rhel10: CCE-90354-2
+    cce@sle16: CCE-96679-6
 
 references:
     nist: CM-6(a),AC-6(1)
diff --git a/linux_os/guide/system/permissions/files/sysctl_fs_protected_symlinks/rule.yml b/linux_os/guide/system/permissions/files/sysctl_fs_protected_symlinks/rule.yml
index 9f068896501b..1a88d1d8b782 100644
--- a/linux_os/guide/system/permissions/files/sysctl_fs_protected_symlinks/rule.yml
+++ b/linux_os/guide/system/permissions/files/sysctl_fs_protected_symlinks/rule.yml
@@ -21,6 +21,7 @@ identifiers:
     cce@rhel10: CCE-88796-8
     cce@sle12: CCE-91560-3
     cce@sle15: CCE-91253-5
+    cce@sle16: CCE-96456-9
 
 references:
     nerc-cip: CIP-003-8 R5.1.1,CIP-003-8 R5.3,CIP-004-6 R2.3,CIP-007-3 R2.1,CIP-007-3 R2.2,CIP-007-3 R2.3,CIP-007-3 R5.1,CIP-007-3 R5.1.1,CIP-007-3 R5.1.2
diff --git a/linux_os/guide/system/permissions/mounting/bios_disable_usb_boot/rule.yml b/linux_os/guide/system/permissions/mounting/bios_disable_usb_boot/rule.yml
index 3af92cfa15c0..38b47b6de468 100644
--- a/linux_os/guide/system/permissions/mounting/bios_disable_usb_boot/rule.yml
+++ b/linux_os/guide/system/permissions/mounting/bios_disable_usb_boot/rule.yml
@@ -14,6 +14,14 @@ rationale: |-
 
 severity: unknown
 
+ocil_clause: 'the system allows booting from USB devices'
+
+ocil: |-
+    Verify that booting from USB devices is disabled in the system boot firmware (BIOS/UEFI).
+    The process to configure this setting varies by hardware manufacturer and model.
+    Consult your hardware manual or vendor documentation for specific instructions on how to
+    access the firmware setup during boot and disable USB boot capabilities.
+
 identifiers:
     cce@rhcos4: CCE-82662-8
     cce@rhel9: CCE-87913-0
diff --git a/linux_os/guide/system/permissions/partitions/mount_option_boot_noexec/rule.yml b/linux_os/guide/system/permissions/partitions/mount_option_boot_noexec/rule.yml
index cbd941664727..773ff170a481 100644
--- a/linux_os/guide/system/permissions/partitions/mount_option_boot_noexec/rule.yml
+++ b/linux_os/guide/system/permissions/partitions/mount_option_boot_noexec/rule.yml
@@ -23,7 +23,7 @@ identifiers:
     cce@rhel10: CCE-90334-4
     cce@sle12: CCE-91541-3
     cce@sle15: CCE-91234-5
-
+    cce@sle16: CCE-96582-2
 
 template:
     name: mount_option
diff --git a/linux_os/guide/system/permissions/partitions/mount_option_boot_nosuid/rule.yml b/linux_os/guide/system/permissions/partitions/mount_option_boot_nosuid/rule.yml
index b90a2baf6565..6ef99131bf3d 100644
--- a/linux_os/guide/system/permissions/partitions/mount_option_boot_nosuid/rule.yml
+++ b/linux_os/guide/system/permissions/partitions/mount_option_boot_nosuid/rule.yml
@@ -23,6 +23,7 @@ identifiers:
     cce@rhel10: CCE-88881-8
     cce@sle12: CCE-91542-1
     cce@sle15: CCE-91235-2
+    cce@sle16: CCE-96648-1
 
 references:
     nerc-cip: CIP-003-8 R5.1.1,CIP-003-8 R5.3,CIP-004-6 R2.3,CIP-007-3 R2.1,CIP-007-3 R2.2,CIP-007-3 R2.3,CIP-007-3 R5.1,CIP-007-3 R5.1.1,CIP-007-3 R5.1.2
diff --git a/linux_os/guide/system/permissions/partitions/mount_option_home_noexec/rule.yml b/linux_os/guide/system/permissions/partitions/mount_option_home_noexec/rule.yml
index 097283478533..912d86cc0b97 100644
--- a/linux_os/guide/system/permissions/partitions/mount_option_home_noexec/rule.yml
+++ b/linux_os/guide/system/permissions/partitions/mount_option_home_noexec/rule.yml
@@ -21,6 +21,7 @@ identifiers:
     cce@rhel10: CCE-87810-8
     cce@sle12: CCE-91543-9
     cce@sle15: CCE-91236-0
+    cce@sle16: CCE-96288-6
 
 references:
     nist: CM-6(b)
diff --git a/linux_os/guide/system/permissions/partitions/mount_option_home_nosuid/rule.yml b/linux_os/guide/system/permissions/partitions/mount_option_home_nosuid/rule.yml
index 673295341d39..ccb05ba12ef7 100644
--- a/linux_os/guide/system/permissions/partitions/mount_option_home_nosuid/rule.yml
+++ b/linux_os/guide/system/permissions/partitions/mount_option_home_nosuid/rule.yml
@@ -21,6 +21,7 @@ identifiers:
     cce@rhel10: CCE-88987-3
     cce@sle12: CCE-83100-8
     cce@sle15: CCE-85633-6
+    cce@sle16: CCE-95966-8
     cce@slmicro5: CCE-93791-2
     cce@slmicro6: CCE-95062-6
 
diff --git a/linux_os/guide/system/permissions/partitions/mount_option_nodev_nonroot_local_partitions/ansible/shared.yml b/linux_os/guide/system/permissions/partitions/mount_option_nodev_nonroot_local_partitions/ansible/shared.yml
index c72785a6d38b..cfdc35156eb4 100644
--- a/linux_os/guide/system/permissions/partitions/mount_option_nodev_nonroot_local_partitions/ansible/shared.yml
+++ b/linux_os/guide/system/permissions/partitions/mount_option_nodev_nonroot_local_partitions/ansible/shared.yml
@@ -31,6 +31,7 @@
       - lustre
       - davfs
       - fuse.sshfs
+      - vfat
 
 - name: "{{{ rule_title }}}: Ensure non-root local partitions are mounted with nodev option"
   ansible.posix.mount:
@@ -41,13 +42,17 @@
     fstype: "{{ item.fstype }}"
   when:
     - "item.mount is match('/\\w')"
+    - "item.mount is not match('/(boot|efi)')"
     - "item.options is not search('nodev')"
     - "item.fstype not in excluded_fstypes"
+    # Attempting to change polyinstantiated mounts for /tmp and /var/tmp, if present, will fail
+    - "(not accounts_polyinstantiated_var_tmp | default(false)) or item.mount != '/var/tmp/tmp-inst'"
+    - "(not accounts_polyinstantiated_tmp | default(false)) or item.mount != '/tmp/tmp-inst'"
   with_items:
     - "{{ ansible_facts.mounts }}"
 
 - name: "{{{ rule_title }}}: Ensure non-root local partitions are present with nodev option in /etc/fstab"
   ansible.builtin.replace:
     path: /etc/fstab
-    regexp: '^\s*(?!#)(/dev/\S+|UUID=\S+)\s+(/\w\S*)\s+(\S+)\s+(?!.*\bnodev\b)(\S+)(.*)$'
+    regexp: '^\s*(?!#)(/dev/\S+|UUID=\S+)\s+(/(?!boot|efi)\w\S*)\s+(?!vfat\s)(\S+)\s+(?!.*\bnodev\b)(\S+)(.*)$'
     replace: '\1 \2 \3 \4,nodev \5'
diff --git a/linux_os/guide/system/permissions/partitions/mount_option_nodev_nonroot_local_partitions/bash/shared.sh b/linux_os/guide/system/permissions/partitions/mount_option_nodev_nonroot_local_partitions/bash/shared.sh
index 361518e7a35f..bbd4d580c072 100644
--- a/linux_os/guide/system/permissions/partitions/mount_option_nodev_nonroot_local_partitions/bash/shared.sh
+++ b/linux_os/guide/system/permissions/partitions/mount_option_nodev_nonroot_local_partitions/bash/shared.sh
@@ -30,6 +30,7 @@ excluded_fstypes=(
     lustre
     davfs
     fuse.sshfs
+    vfat
 )
 
 for partition_record in "${partitions_records[@]}"; do
@@ -38,6 +39,11 @@ for partition_record in "${partitions_records[@]}"; do
     device="$(echo "${partition_record}" | cut -d " " -f2)"
     device_type="$(echo "${partition_record}" | cut -d " " -f3)"
 
+    # Skip /boot and /efi partitions
+    if [[ "$mount_point" =~ ^/(boot|efi) ]]; then
+        continue
+    fi
+
     # Skip polyinstantiated directories
     if printf '%s\0' "${polyinstantiated_dirs[@]}" | grep -qxzF "$mount_point"; then
         continue
@@ -59,5 +65,5 @@ for partition_record in "${partitions_records[@]}"; do
     {{{ bash_ensure_partition_is_mounted("$mount_point")     | indent(4) }}}
 done
 
-# Remediate unmounted /etc/fstab entries
-sed -i -E '/nodev/! s;^\s*(/dev/\S+|UUID=\S+)\s+(/\w\S*)\s+(\S+)\s+(\S+)(.*)$;\1 \2 \3 \4,nodev \5;' /etc/fstab
+# Remediate unmounted /etc/fstab entries, excluding /boot, /efi, and vfat partitions
+sed -i -E '/nodev/! { /^\s*(\/dev\/\S+|UUID=\S+)\s+\/(boot|efi)/! { /^\s*(\/dev\/\S+|UUID=\S+)\s+\/\w\S*\s+vfat\s/! s;^\s*(/dev/\S+|UUID=\S+)\s+(/\w\S*)\s+(\S+)\s+(\S+)(.*)$;\1 \2 \3 \4,nodev \5; } }' /etc/fstab
diff --git a/linux_os/guide/system/permissions/partitions/mount_option_nodev_nonroot_local_partitions/oval/shared.xml b/linux_os/guide/system/permissions/partitions/mount_option_nodev_nonroot_local_partitions/oval/shared.xml
index 89361099bf93..10964a0511fd 100644
--- a/linux_os/guide/system/permissions/partitions/mount_option_nodev_nonroot_local_partitions/oval/shared.xml
+++ b/linux_os/guide/system/permissions/partitions/mount_option_nodev_nonroot_local_partitions/oval/shared.xml
@@ -33,7 +33,7 @@
   <linux:partition_state id="state_local_nodev" version="1">
     <!-- this check defines a local partition as one which has a device node in /dev -->
     <linux:device operation="pattern match">^/dev/.*$</linux:device>
-    <linux:fs_type operation="pattern match">^(?!afs$|autofs$|ceph$|cifs$|smb3$|smbfs$|sshfs$|ncpfs$|ncp$|nfs$|nfs4$|gfs$|gfs2$|glusterfs$|gpfs$|pvfs2$|ocfs2$|lustre$|davfs$|fuse\.sshfs$).+</linux:fs_type>
+    <linux:fs_type operation="pattern match">^(?!afs$|autofs$|ceph$|cifs$|smb3$|smbfs$|sshfs$|ncpfs$|ncp$|nfs$|nfs4$|gfs$|gfs2$|glusterfs$|gpfs$|pvfs2$|ocfs2$|lustre$|davfs$|fuse\.sshfs$|vfat$).+</linux:fs_type>
     <linux:mount_options datatype="string" entity_check="all"
     operation="not equal">nodev</linux:mount_options>
   </linux:partition_state>
@@ -46,7 +46,7 @@
   </ind:textfilecontent54_test>
   <ind:textfilecontent54_object version="1" id="object_non_root_partitions_in_fstab">
     <ind:filepath>/etc/fstab</ind:filepath>
-    <ind:pattern operation="pattern match">^\s*(?!#)(?:/dev/\S+|UUID=\S+)\s+/\w\S*\s+\S+\s+(\S+)</ind:pattern>
+    <ind:pattern operation="pattern match">^\s*(?!#)(?:/dev/\S+|UUID=\S+)\s+/(?!boot|efi)\w\S*\s+(?!vfat\s)\S+\s+(\S+)</ind:pattern>
     <ind:instance datatype="int" operation="greater than or equal">1</ind:instance>
   </ind:textfilecontent54_object>
   <ind:textfilecontent54_state version="1"
diff --git a/linux_os/guide/system/permissions/partitions/mount_option_nodev_nonroot_local_partitions/rule.yml b/linux_os/guide/system/permissions/partitions/mount_option_nodev_nonroot_local_partitions/rule.yml
index 936da9856dfb..0b982c79c1c1 100644
--- a/linux_os/guide/system/permissions/partitions/mount_option_nodev_nonroot_local_partitions/rule.yml
+++ b/linux_os/guide/system/permissions/partitions/mount_option_nodev_nonroot_local_partitions/rule.yml
@@ -24,6 +24,7 @@ ocil: |
 
 ocil_clause: "some mounts appear among output lines"
 
+
 severity: medium
 
 identifiers:
@@ -32,6 +33,7 @@ identifiers:
     cce@rhel10: CCE-88981-6
     cce@sle12: CCE-91544-7
     cce@sle15: CCE-91237-8
+    cce@sle16: CCE-96023-7
 
 references:
     cis-csc: 11,14,3,9
@@ -50,3 +52,16 @@ fixtext: |-
     Configure the "/etc/fstab" to use the "nodev" option on all non-root local partitions.
 
 srg_requirement: '{{{ full_name }}} must prevent special devices on non-root local partitions.'
+
+warnings:
+    - general: |-
+        This rule checks only local partitions, identified as those backed by
+        a device node in <tt>/dev</tt>. Network file systems such as NFS, CIFS,
+        GlusterFS and others are excluded because they do not expose local
+        device nodes. The <tt>/boot</tt> and <tt>/efi</tt> partitions are
+        excluded because they are special partitions usually handled by a
+        systemd mount unit, and enforcing <tt>nodev</tt> on them during
+        operating system installation causes issues. Partitions with the
+        <tt>vfat</tt> file system type are excluded because vfat does not
+        support Unix device special files, so <tt>nodev</tt> enforcement on
+        them is not meaningful.
diff --git a/linux_os/guide/system/permissions/partitions/mount_option_nodev_nonroot_local_partitions/tests/vfat_without_nodev.pass.sh b/linux_os/guide/system/permissions/partitions/mount_option_nodev_nonroot_local_partitions/tests/vfat_without_nodev.pass.sh
new file mode 100644
index 000000000000..7eb91ff88110
--- /dev/null
+++ b/linux_os/guide/system/permissions/partitions/mount_option_nodev_nonroot_local_partitions/tests/vfat_without_nodev.pass.sh
@@ -0,0 +1,19 @@
+#!/bin/bash
+
+. $SHARED/partition.sh
+
+# Add nodev option to all records in fstab to ensure that test will
+# run on environment where everything is set correctly for rule check.
+cp /etc/fstab /etc/fstab.backup
+sed -i -e 's/\bnodev\b/,/g' -e 's/,,//g' -e 's/\s,\s/defaults/g' /etc/fstab.backup
+awk '{$4 = $4",nodev"; print}' /etc/fstab.backup > /etc/fstab
+# Remount all partitions. (--all option can't be used because it doesn't
+# mount e.g. /boot partition
+declare -a partitions=( $(awk '{print $2}' /etc/fstab | grep "^/\w") )
+for partition in ${partitions[@]}; do
+    mount -o remount "$partition"
+done
+
+# A vfat partition without nodev should be ignored by the rule.
+PARTITION="/dev/new_partition1"; create_partition
+make_fstab_given_partition_line "/tmp/partition1" vfat defaults
diff --git a/linux_os/guide/system/permissions/partitions/mount_option_opt_nosuid/rule.yml b/linux_os/guide/system/permissions/partitions/mount_option_opt_nosuid/rule.yml
index d5493739a92f..4e9086e97dc2 100644
--- a/linux_os/guide/system/permissions/partitions/mount_option_opt_nosuid/rule.yml
+++ b/linux_os/guide/system/permissions/partitions/mount_option_opt_nosuid/rule.yml
@@ -24,6 +24,7 @@ identifiers:
     cce@rhel10: CCE-86868-7
     cce@sle12: CCE-91584-3
     cce@sle15: CCE-91270-9
+    cce@sle16: CCE-95940-3
 
 platform: mount[opt]
 
diff --git a/linux_os/guide/system/permissions/partitions/mount_option_srv_nosuid/rule.yml b/linux_os/guide/system/permissions/partitions/mount_option_srv_nosuid/rule.yml
index f5f66509d8af..b196cc82a4a5 100644
--- a/linux_os/guide/system/permissions/partitions/mount_option_srv_nosuid/rule.yml
+++ b/linux_os/guide/system/permissions/partitions/mount_option_srv_nosuid/rule.yml
@@ -24,6 +24,7 @@ identifiers:
     cce@rhel10: CCE-90162-9
     cce@sle12: CCE-91585-0
     cce@sle15: CCE-91271-7
+    cce@sle16: CCE-95863-7
 
 platform: mount[srv]
 
diff --git a/linux_os/guide/system/permissions/partitions/mount_option_tmp_noexec/ansible/sle16.yml b/linux_os/guide/system/permissions/partitions/mount_option_tmp_noexec/ansible/sle16.yml
new file mode 100644
index 000000000000..8dfea23acad8
--- /dev/null
+++ b/linux_os/guide/system/permissions/partitions/mount_option_tmp_noexec/ansible/sle16.yml
@@ -0,0 +1,28 @@
+# platform = SUSE Linux Enterprise 16
+# reboot = true
+# strategy = configure
+# complexity = low
+# disruption = low
+
+- name: '{{{ rule_title }}} - Check if noexec options is configured in /usr/lib/systemd/system/tmp.mount'
+  ansible.builtin.lineinfile:
+    path: /usr/lib/systemd/system/tmp.mount
+    regexp: ^[\s]*Options=[\s]*.*noexec.*$
+    state: absent
+  check_mode: true
+  register: noexec_match
+
+# if no match, collect current options and add noexec
+- name: '{{{ rule_title }}} - Collect previously configured options'
+  ansible.builtin.shell:
+    cmd: sed -n 's/^[\s]*Options=[\s]*\(.*\)$/\1/p' /usr/lib/systemd/system/tmp.mount
+  register: current_options
+  when:
+    - noexec_match is defined and noexec_match.found == 0
+
+
+- name: '{{{ rule_title }}} - Add noexec option to previously configured options'
+  ansible.builtin.shell:
+    cmd: sed -i "s/^Options=.*/Options={{ current_options.stdout }},noexec/g" /usr/lib/systemd/system/tmp.mount
+  when:
+    - noexec_match.found == 0 and current_options is defined
diff --git a/linux_os/guide/system/permissions/partitions/mount_option_tmp_noexec/bash/sle16.sh b/linux_os/guide/system/permissions/partitions/mount_option_tmp_noexec/bash/sle16.sh
new file mode 100644
index 000000000000..9f694b9bb9d3
--- /dev/null
+++ b/linux_os/guide/system/permissions/partitions/mount_option_tmp_noexec/bash/sle16.sh
@@ -0,0 +1,23 @@
+# platform = SUSE Linux Enterprise 16
+# reboot = true
+# strategy = configure
+# complexity = low
+# disruption = low
+
+tmp_mount_file="/usr/lib/systemd/system/tmp.mount"
+
+# if already set, skip
+if grep -qE '^[\s]*Options=[\s]*.*noexec.*$' ${tmp_mount_file}; then
+    echo "noexec option already present, skipping remediation"
+    exit 0
+fi
+
+# no options set, add it
+if ! grep -qE '^[\s]*Options=[\s]*.*$' ${tmp_mount_file}; then
+    echo "Options=noexec" >> ${tmp_mount_file}
+else
+  # collect currently set options
+  current_options=$(sed -n 's/^[\s]*Options=[\s]*\(.*\)$/\1/p' ${tmp_mount_file})
+  # add noexec to current options and replace
+  sed -i "s/^Options=.*/Options=${current_options},noexec/g" ${tmp_mount_file}
+fi
diff --git a/linux_os/guide/system/permissions/partitions/mount_option_tmp_noexec/oval/sle16.xml b/linux_os/guide/system/permissions/partitions/mount_option_tmp_noexec/oval/sle16.xml
new file mode 100644
index 000000000000..81bec910ddfd
--- /dev/null
+++ b/linux_os/guide/system/permissions/partitions/mount_option_tmp_noexec/oval/sle16.xml
@@ -0,0 +1,18 @@
+<def-group>
+  <definition class="compliance" id="mount_option_tmp_noexec" version="1">
+    {{{ oval_metadata("ensure tmp.mount services has noexec option configured.") }}}
+    <criteria>
+        <criterion comment="check noexec is set in Options in /usr/lib/systemd/system/tmp.mount" test_ref="test_tmp_mount_noexec_option" />
+    </criteria>
+  </definition>
+
+  <ind:textfilecontent54_test check="all" check_existence="all_exist" comment="check noexec is set in Options in /usr/lib/systemd/system/tmp.mount" id="test_tmp_mount_noexec_option" version="1">
+    <ind:object object_ref="object_tmp_mount_noexec_option" />
+  </ind:textfilecontent54_test>
+  <ind:textfilecontent54_object id="object_tmp_mount_noexec_option" comment="Options has  noexec set in /usr/lib/systemd/system/tmp.mount" version="1">
+    <ind:filepath>/usr/lib/systemd/system/tmp.mount</ind:filepath>
+    <ind:pattern operation="pattern match">^[\s]*Options=.*noexec.*$</ind:pattern>
+    <ind:instance datatype="int" operation="equals">1</ind:instance>
+  </ind:textfilecontent54_object>
+
+</def-group>
diff --git a/linux_os/guide/system/permissions/partitions/mount_option_tmp_noexec/rule.yml b/linux_os/guide/system/permissions/partitions/mount_option_tmp_noexec/rule.yml
index 735018892a8c..75fb0ec5f6c6 100644
--- a/linux_os/guide/system/permissions/partitions/mount_option_tmp_noexec/rule.yml
+++ b/linux_os/guide/system/permissions/partitions/mount_option_tmp_noexec/rule.yml
@@ -23,6 +23,7 @@ identifiers:
     cce@rhel10: CCE-87095-6
     cce@sle12: CCE-91586-8
     cce@sle15: CCE-91272-5
+    cce@sle16: CCE-96696-0
     cce@slmicro5: CCE-94079-1
 
 references:
@@ -39,7 +40,7 @@ references:
     srg: SRG-OS-000368-GPOS-00154
     stigid@ol8: OL08-00-040125
 
-{{% if product == 'slmicro5' %}}
+{{% if product in ['slmicro5', 'sle16'] %}}
 platform: system_with_kernel
 {{% else %}}
 platform: mount[tmp]
diff --git a/linux_os/guide/system/permissions/partitions/mount_option_tmp_nosuid/rule.yml b/linux_os/guide/system/permissions/partitions/mount_option_tmp_nosuid/rule.yml
index 1485f4d8ee99..cf0e126f67e2 100644
--- a/linux_os/guide/system/permissions/partitions/mount_option_tmp_nosuid/rule.yml
+++ b/linux_os/guide/system/permissions/partitions/mount_option_tmp_nosuid/rule.yml
@@ -23,6 +23,7 @@ identifiers:
     cce@rhel10: CCE-87318-2
     cce@sle12: CCE-91587-6
     cce@sle15: CCE-91273-3
+    cce@sle16: CCE-96573-1
 
 references:
     cis-csc: 11,13,14,3,8,9
diff --git a/linux_os/guide/system/permissions/partitions/mount_option_var_log_noexec/rule.yml b/linux_os/guide/system/permissions/partitions/mount_option_var_log_noexec/rule.yml
index 819040553a9d..e2cbb432ed89 100644
--- a/linux_os/guide/system/permissions/partitions/mount_option_var_log_noexec/rule.yml
+++ b/linux_os/guide/system/permissions/partitions/mount_option_var_log_noexec/rule.yml
@@ -23,6 +23,7 @@ identifiers:
     cce@rhel10: CCE-89129-1
     cce@sle12: CCE-91588-4
     cce@sle15: CCE-91274-1
+    cce@sle16: CCE-96444-5
 
 references:
     nerc-cip: CIP-003-8 R5.1.1,CIP-003-8 R5.3,CIP-004-6 R2.3,CIP-007-3 R2.1,CIP-007-3 R2.2,CIP-007-3 R2.3,CIP-007-3 R5.1,CIP-007-3 R5.1.1,CIP-007-3 R5.1.2
diff --git a/linux_os/guide/system/permissions/partitions/mount_option_var_log_nosuid/rule.yml b/linux_os/guide/system/permissions/partitions/mount_option_var_log_nosuid/rule.yml
index 936812700f4d..5ec43738c51b 100644
--- a/linux_os/guide/system/permissions/partitions/mount_option_var_log_nosuid/rule.yml
+++ b/linux_os/guide/system/permissions/partitions/mount_option_var_log_nosuid/rule.yml
@@ -24,6 +24,7 @@ identifiers:
     cce@rhel10: CCE-90639-6
     cce@sle12: CCE-91589-2
     cce@sle15: CCE-91275-8
+    cce@sle16: CCE-95774-6
 
 references:
     nerc-cip: CIP-003-8 R5.1.1,CIP-003-8 R5.3,CIP-004-6 R2.3,CIP-007-3 R2.1,CIP-007-3 R2.2,CIP-007-3 R2.3,CIP-007-3 R5.1,CIP-007-3 R5.1.1,CIP-007-3 R5.1.2
diff --git a/linux_os/guide/system/permissions/partitions/mount_option_var_noexec/rule.yml b/linux_os/guide/system/permissions/partitions/mount_option_var_noexec/rule.yml
index 1900132c63d8..87808eae8c22 100644
--- a/linux_os/guide/system/permissions/partitions/mount_option_var_noexec/rule.yml
+++ b/linux_os/guide/system/permissions/partitions/mount_option_var_noexec/rule.yml
@@ -22,6 +22,7 @@ identifiers:
     cce@rhel10: CCE-90153-8
     cce@sle12: CCE-91590-0
     cce@sle15: CCE-91276-6
+    cce@sle16: CCE-96551-7
 
 platform: mount[var]
 
diff --git a/linux_os/guide/system/permissions/partitions/mount_option_var_nosuid/rule.yml b/linux_os/guide/system/permissions/partitions/mount_option_var_nosuid/rule.yml
index 4ecbb408721f..d1a14d993188 100644
--- a/linux_os/guide/system/permissions/partitions/mount_option_var_nosuid/rule.yml
+++ b/linux_os/guide/system/permissions/partitions/mount_option_var_nosuid/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhel10: CCE-89496-4
     cce@sle12: CCE-91591-8
     cce@sle15: CCE-91277-4
+    cce@sle16: CCE-95884-3
 
 {{{ complete_ocil_entry_mount_option("/var", "nosuid") }}}
 
diff --git a/linux_os/guide/system/permissions/partitions/mount_option_var_tmp_noexec/rule.yml b/linux_os/guide/system/permissions/partitions/mount_option_var_tmp_noexec/rule.yml
index 5a49a43030a5..cce28561b5c0 100644
--- a/linux_os/guide/system/permissions/partitions/mount_option_var_tmp_noexec/rule.yml
+++ b/linux_os/guide/system/permissions/partitions/mount_option_var_tmp_noexec/rule.yml
@@ -24,6 +24,7 @@ identifiers:
     cce@rhel10: CCE-87347-1
     cce@sle12: CCE-91592-6
     cce@sle15: CCE-91278-2
+    cce@sle16: CCE-95723-3
 
 references:
     cis@sle12: 1.1.12
diff --git a/linux_os/guide/system/permissions/partitions/mount_option_var_tmp_nosuid/rule.yml b/linux_os/guide/system/permissions/partitions/mount_option_var_tmp_nosuid/rule.yml
index dbe30c165901..3b0d2f507d03 100644
--- a/linux_os/guide/system/permissions/partitions/mount_option_var_tmp_nosuid/rule.yml
+++ b/linux_os/guide/system/permissions/partitions/mount_option_var_tmp_nosuid/rule.yml
@@ -24,6 +24,7 @@ identifiers:
     cce@rhel10: CCE-87892-6
     cce@sle12: CCE-91593-4
     cce@sle15: CCE-91279-0
+    cce@sle16: CCE-96199-5
 
 references:
     cis@sle12: 1.1.14
diff --git a/linux_os/guide/system/permissions/restrictions/coredumps/coredump_disable_backtraces/rule.yml b/linux_os/guide/system/permissions/restrictions/coredumps/coredump_disable_backtraces/rule.yml
index 99fbd8321d5d..5db74d51bd52 100644
--- a/linux_os/guide/system/permissions/restrictions/coredumps/coredump_disable_backtraces/rule.yml
+++ b/linux_os/guide/system/permissions/restrictions/coredumps/coredump_disable_backtraces/rule.yml
@@ -66,7 +66,7 @@ warnings:
 
 platform: package[systemd]
 
-{{% if product in ["rhel8", "rhel9"] %}}
+{{% if product in ["ol8", "ol9", "rhel8", "rhel9"] %}}
 conflicts:
     - sysctl_kernel_core_pattern
 {{% endif %}}
diff --git a/linux_os/guide/system/permissions/restrictions/coredumps/coredump_disable_storage/rule.yml b/linux_os/guide/system/permissions/restrictions/coredumps/coredump_disable_storage/rule.yml
index bd826b199009..793680264655 100644
--- a/linux_os/guide/system/permissions/restrictions/coredumps/coredump_disable_storage/rule.yml
+++ b/linux_os/guide/system/permissions/restrictions/coredumps/coredump_disable_storage/rule.yml
@@ -63,7 +63,7 @@ warnings:
 
 platform: package[systemd]
 
-{{% if product in ["rhel8", "rhel9"] %}}
+{{% if product in ["ol8", "ol9", "rhel8", "rhel9"] %}}
 conflicts:
     - sysctl_kernel_core_pattern
 {{% endif %}}
diff --git a/linux_os/guide/system/permissions/restrictions/coredumps/disable_users_coredumps/rule.yml b/linux_os/guide/system/permissions/restrictions/coredumps/disable_users_coredumps/rule.yml
index 9f457c1f838b..c7f0e9bc4e9f 100644
--- a/linux_os/guide/system/permissions/restrictions/coredumps/disable_users_coredumps/rule.yml
+++ b/linux_os/guide/system/permissions/restrictions/coredumps/disable_users_coredumps/rule.yml
@@ -56,7 +56,7 @@ srg_requirement: '{{{ full_name }}} must disable core dumps for all users.'
 
 platform: package[pam]
 
-{{% if product in ["rhel8", "rhel9"] %}}
+{{% if product in ["ol8", "ol9", "rhel8", "rhel9"] %}}
 conflicts:
     - sysctl_kernel_core_pattern
 {{% endif %}}
diff --git a/linux_os/guide/system/permissions/restrictions/coredumps/service_systemd-coredump_disabled/rule.yml b/linux_os/guide/system/permissions/restrictions/coredumps/service_systemd-coredump_disabled/rule.yml
index 58b2fe312066..296ea17c8df0 100644
--- a/linux_os/guide/system/permissions/restrictions/coredumps/service_systemd-coredump_disabled/rule.yml
+++ b/linux_os/guide/system/permissions/restrictions/coredumps/service_systemd-coredump_disabled/rule.yml
@@ -45,7 +45,7 @@ fixtext: '{{{ fixtext_service_disabled("systemd-coredump") }}}'
 
 srg_requirement: '{{{ srg_requirement_service_disabled("systemd-coredump") }}}'
 
-{{% if product in ["rhel8", "rhel9"] %}}
+{{% if product in ["ol8", "ol9", "rhel8", "rhel9"] %}}
 conflicts:
     - sysctl_kernel_core_pattern
 {{% endif %}}
diff --git a/linux_os/guide/system/permissions/restrictions/enable_execshield_settings/sysctl_kernel_kptr_restrict/rule.yml b/linux_os/guide/system/permissions/restrictions/enable_execshield_settings/sysctl_kernel_kptr_restrict/rule.yml
index c6116f14cf9a..dcd1619f190b 100644
--- a/linux_os/guide/system/permissions/restrictions/enable_execshield_settings/sysctl_kernel_kptr_restrict/rule.yml
+++ b/linux_os/guide/system/permissions/restrictions/enable_execshield_settings/sysctl_kernel_kptr_restrict/rule.yml
@@ -20,6 +20,7 @@ identifiers:
     cce@rhel10: CCE-88686-1
     cce@sle12: CCE-83125-5
     cce@sle15: CCE-83299-8
+    cce@sle16: CCE-96503-8
     cce@slmicro5: CCE-93627-8
     cce@slmicro6: CCE-94727-5
 
diff --git a/linux_os/guide/system/permissions/restrictions/sysctl_kernel_core_pattern_empty_string/ansible/shared.yml b/linux_os/guide/system/permissions/restrictions/sysctl_kernel_core_pattern_empty_string/ansible/shared.yml
index 8d95be5ac6b1..174866b22b55 100644
--- a/linux_os/guide/system/permissions/restrictions/sysctl_kernel_core_pattern_empty_string/ansible/shared.yml
+++ b/linux_os/guide/system/permissions/restrictions/sysctl_kernel_core_pattern_empty_string/ansible/shared.yml
@@ -4,9 +4,16 @@
 # complexity = low
 # disruption = medium
 
+- name: "{{{ rule_title }}} - Set fact for sysctl paths"
+  ansible.builtin.set_fact:
+    sysctl_paths:
+      - "/etc/sysctl.d/"
+      - "/run/sysctl.d/"
+      - "/usr/local/lib/sysctl.d/"
+
 - name: "{{{ rule_title }}} - Find all files that contain kernel.core_pattern"
   ansible.builtin.shell:
-    cmd: find -L /etc/sysctl.conf /etc/sysctl.d/ /run/sysctl.d/ -type f -name '*.conf' | xargs grep -HP '^\s*kernel.core_pattern\s*=\s*.*$'
+    cmd: find -L {{ sysctl_paths | join(" ") }} -type f -name '*.conf' | xargs grep -HP '^\s*kernel.core_pattern\s*=\s*.*$'
   register: find_all_values
   check_mode: false
   changed_when: false
@@ -14,7 +21,7 @@
 
 - name: "{{{ rule_title }}} - Find all files that set kernel.core_pattern to correct value"
   ansible.builtin.shell:
-    cmd: find -L /etc/sysctl.conf /etc/sysctl.d/ /run/sysctl.d/ -type f -name '*.conf' | xargs grep -HP '^\s*kernel.core_pattern\s*=\s*$'
+    cmd: find -L {{ sysctl_paths | join(" ") }} -type f -name '*.conf' | xargs grep -HP '^\s*kernel.core_pattern\s*=\s*$'
   register: find_correct_value
   check_mode: false
   changed_when: false
@@ -23,15 +30,23 @@
 - name: "{{{ rule_title }}} - Comment out any occurrences of kernel.core_pattern from config files"
   ansible.builtin.replace:
     path: '{{ item | split(":") | first }}'
-    regexp: ^[\s]*kernel.core_pattern
+    regexp: '^[\s]*kernel.core_pattern'
     replace: '#kernel.core_pattern'
   loop: '{{ find_all_values.stdout_lines }}'
   when: find_correct_value.stdout_lines | length == 0 or find_all_values.stdout_lines | length > find_correct_value.stdout_lines | length
 
+- name: "{{{ rule_title }}} - Comment out any occurrences of kernel.core_pattern from /etc/sysctl.conf"
+  ansible.builtin.replace:
+    path: "{{ item }}"
+    regexp: '^[\s]*kernel.core_pattern'
+    replace: '#kernel.core_pattern'
+  with_fileglob:
+    - "/etc/sysctl.conf"
+
 - name: "{{{ rule_title }}} - Ensure sysctl kernel.core_pattern is set to empty"
   ansible.posix.sysctl:
-    name: kernel.core_pattern
-    value: ' ' # ansible sysctl module doesn't allow empty string, a space string is allowed and has the same semantics as sysctl will ignore spaces
-    sysctl_file: "/etc/sysctl.conf"
+    name: "kernel.core_pattern"
+    value: ' '  # ansible sysctl module doesn't allow empty string, a space string is allowed and has the same semantics as sysctl will ignore spaces
+    sysctl_file: "/etc/sysctl.d/kernel_core_pattern.conf"
     state: present
-    reload: true
+    reload: yes
diff --git a/linux_os/guide/system/permissions/restrictions/sysctl_kernel_core_pattern_empty_string/bash/shared.sh b/linux_os/guide/system/permissions/restrictions/sysctl_kernel_core_pattern_empty_string/bash/shared.sh
index 2b2f1cd70b66..301e434e8c03 100644
--- a/linux_os/guide/system/permissions/restrictions/sysctl_kernel_core_pattern_empty_string/bash/shared.sh
+++ b/linux_os/guide/system/permissions/restrictions/sysctl_kernel_core_pattern_empty_string/bash/shared.sh
@@ -5,49 +5,39 @@
 # disruption = medium
 
 # Comment out any occurrences of kernel.core_pattern from /etc/sysctl.d/*.conf files
-for f in /etc/sysctl.d/*.conf /run/sysctl.d/*.conf; do
+for f in /etc/sysctl.d/*.conf /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf; do
+
+  # skip systemd-sysctl symlink (/etc/sysctl.d/99-sysctl.conf -> /etc/sysctl.conf)
+  if [[ "$(readlink -f "$f")" == "/etc/sysctl.conf" ]]; then continue; fi
 
   matching_list=$(grep -P '^(?!#).*[\s]*kernel.core_pattern.*$' $f | uniq )
   if ! test -z "$matching_list"; then
     while IFS= read -r entry; do
       escaped_entry=$(sed -e 's|/|\\/|g' <<< "$entry")
       # comment out "kernel.core_pattern" matches to preserve user data
-      sed -i "s/^${escaped_entry}$/# &/g" $f
+      sed -i --follow-symlinks "s/^${escaped_entry}$/# &/g" $f
     done <<< "$matching_list"
   fi
 done
 
+#
+# Set sysctl config file which to save the desired value
+#
+
+SYSCONFIG_FILE='/etc/sysctl.d/kernel_core_pattern.conf'
+
 #
 # Set runtime for kernel.core_pattern
 #
-/sbin/sysctl -q -n -w kernel.core_pattern=""
+if {{{ bash_not_bootc_build() }}} ; then
+    /sbin/sysctl -q -n -w kernel.core_pattern=""
+fi
 
 #
 # If kernel.core_pattern present in /etc/sysctl.conf, change value to empty
 #	else, add "kernel.core_pattern =" to /etc/sysctl.conf
 #
-# Test if the config_file is a symbolic link. If so, use --follow-symlinks with sed.
-# Otherwise, regular sed command will do.
-sed_command=('sed' '-i')
-if test -L "/etc/sysctl.conf"; then
-    sed_command+=('--follow-symlinks')
-fi
-
-# Strip any search characters in the key arg so that the key can be replaced without
-# adding any search characters to the config file.
-stripped_key=$(sed 's/[\^=\$,;+]*//g' <<< "^kernel.core_pattern")
 
-# shellcheck disable=SC2059
-printf -v formatted_output "%s=" "$stripped_key"
+sed -i --follow-symlinks "/^kernel.core_pattern/d" /etc/sysctl.conf
 
-# If the key exists, change it. Otherwise, add it to the config_file.
-# We search for the key string followed by a word boundary (matched by \>),
-# so if we search for 'setting', 'setting2' won't match.
-if LC_ALL=C grep -q -m 1 -i -e "^kernel.core_pattern\\>" "/etc/sysctl.conf"; then
-    escaped_formatted_output=$(sed -e 's|/|\\/|g' <<< "$formatted_output")
-    "${sed_command[@]}" "s/^kernel.core_pattern\\>.*/$escaped_formatted_output/gi" "/etc/sysctl.conf"
-else
-    # \n is precaution for case where file ends without trailing newline
-
-    printf '%s\n' "$formatted_output" >> "/etc/sysctl.conf"
-fi
+{{{ bash_replace_or_append('${SYSCONFIG_FILE}', '^kernel.core_pattern', '', cce_identifiers=cce_identifiers) }}}
diff --git a/linux_os/guide/system/permissions/restrictions/sysctl_kernel_core_pattern_empty_string/oval/shared.xml b/linux_os/guide/system/permissions/restrictions/sysctl_kernel_core_pattern_empty_string/oval/shared.xml
index 3fba84e44eac..8005c5990f02 100644
--- a/linux_os/guide/system/permissions/restrictions/sysctl_kernel_core_pattern_empty_string/oval/shared.xml
+++ b/linux_os/guide/system/permissions/restrictions/sysctl_kernel_core_pattern_empty_string/oval/shared.xml
@@ -37,155 +37,68 @@
   </unix:sysctl_state>
 
 </def-group>
+
 <def-group>
   <definition class="compliance" id="sysctl_kernel_core_pattern_empty_string_static" version="3">
     {{{ oval_metadata("The kernel 'kernel.core_pattern' parameter should be set to an empty string in the system configuration.", rule_title=rule_title) }}}
-    <criteria operator="AND">
-      <criteria operator="OR">
-        <criterion comment="kernel static parameter kernel.core_pattern set to an empty string in /etc/sysctl.conf"
-                   test_ref="test_sysctl_kernel_core_pattern_empty_string_static"/>
-        <!-- see sysctl.d(5) -->
-        <criterion comment="kernel static parameter kernel.core_pattern set to an empty string in /etc/sysctl.d/*.conf"
-                   test_ref="test_sysctl_kernel_core_pattern_empty_string_static_etc_sysctld"/>
-        <criterion comment="kernel static parameter kernel.core_pattern set to an empty string in /run/sysctl.d/*.conf"
-                   test_ref="test_sysctl_kernel_core_pattern_empty_string_static_run_sysctld"/>
+    <criteria operator="OR">
+      <criterion comment="kernel static parameter kernel.core_pattern set to an empty string in sysctl files not managed by packages"
+                 test_ref="test_sysctl_kernel_core_pattern_empty_string_static_user"/>
+      <criteria operator="AND">
+        <criterion comment="kernel static parameter kernel.core_pattern missing in sysctl files not managed by packages"
+                   test_ref="test_sysctl_kernel_core_pattern_empty_string_static_user_missing"/>
+        <criterion comment="kernel static parameter kernel.core_pattern set to an empty string in sysctl files managed by packages"
+                   test_ref="test_sysctl_kernel_core_pattern_empty_string_static_pkg_correct"/>
       </criteria>
-      <criterion comment="Check that kernel_core_pattern is defined in only one file" test_ref="test_sysctl_kernel_core_pattern_empty_string_defined_in_one_file" />
     </criteria>
   </definition>
 
-  <ind:textfilecontent54_test id="test_sysctl_kernel_core_pattern_empty_string_static" version="1"
+  <!-- Test: user files have correct value -->
+  <ind:textfilecontent54_test id="test_sysctl_kernel_core_pattern_empty_string_static_user" version="1"
                               check="all" check_existence="all_exist"
                               comment="kernel.core_pattern static configuration" state_operator="OR">
-    <ind:object object_ref="object_static_sysctl_sysctl_kernel_core_pattern_empty_string"/>
+    <ind:object object_ref="object_static_user_sysctl_kernel_core_pattern_empty_string"/>
     <ind:state state_ref="state_static_sysctld_sysctl_kernel_core_pattern_empty_string"/>
   </ind:textfilecontent54_test>
 
-  <ind:textfilecontent54_test id="test_sysctl_kernel_core_pattern_empty_string_static_etc_sysctld" version="1" check="all"
-                          comment="kernel.core_pattern static configuration in /etc/sysctl.d/*.conf" state_operator="OR">
-    <ind:object object_ref="object_static_etc_sysctld_sysctl_kernel_core_pattern_empty_string"/>
-    <ind:state state_ref="state_static_sysctld_sysctl_kernel_core_pattern_empty_string"/>
-
+  <!-- Test: user files are missing (none_exist) -->
+  <ind:textfilecontent54_test id="test_sysctl_kernel_core_pattern_empty_string_static_user_missing" version="1"
+                              check="all" check_existence="none_exist"
+                              comment="kernel.core_pattern static configuration" state_operator="AND">
+    <ind:object object_ref="object_static_user_sysctl_kernel_core_pattern_empty_string"/>
   </ind:textfilecontent54_test>
 
-  <ind:textfilecontent54_test id="test_sysctl_kernel_core_pattern_empty_string_static_run_sysctld" version="1" check="all"
-                          comment="kernel.core_pattern static configuration in /run/sysctl.d/*.conf" state_operator="OR">
-    <ind:object object_ref="object_static_run_sysctld_sysctl_kernel_core_pattern_empty_string"/>
+  <!-- Test: package-managed files have correct value -->
+  <ind:textfilecontent54_test id="test_sysctl_kernel_core_pattern_empty_string_static_pkg_correct" version="2"
+                              check="all" check_existence="all_exist"
+                              comment="kernel.core_pattern static configuration in /usr/lib/sysctl.d/*.conf" state_operator="OR">
+    <ind:object object_ref="object_static_usr_lib_sysctld_sysctl_kernel_core_pattern_empty_string"/>
     <ind:state state_ref="state_static_sysctld_sysctl_kernel_core_pattern_empty_string"/>
-
   </ind:textfilecontent54_test>
-{{% if target_oval_version >= [5, 11] %}}
-  <ind:variable_test check="all" check_existence="all_exist" comment="Check that only one file contains kernel_core_pattern"
-  id="test_sysctl_kernel_core_pattern_empty_string_defined_in_one_file" version="1">
-    <ind:object object_ref="object_sysctl_kernel_core_pattern_empty_string_defined_in_one_file" />
-    <ind:state state_ref="state_sysctl_kernel_core_pattern_empty_string_defined_in_one_file" />
-  </ind:variable_test>
-
-  <ind:variable_object id="object_sysctl_kernel_core_pattern_empty_string_defined_in_one_file" version="1">
-    <ind:var_ref>local_var_sysctl_kernel_core_pattern_empty_string_counter</ind:var_ref>
-  </ind:variable_object>
-
-  <ind:variable_state id="state_sysctl_kernel_core_pattern_empty_string_defined_in_one_file" version="1">
-    <ind:value operation="equals" datatype="int">1</ind:value>
-  </ind:variable_state>
-
-  <local_variable comment="Count unique sysctls" datatype="int" id="local_var_sysctl_kernel_core_pattern_empty_string_counter" version="1">
-    <count>
-      <unique>
-        <object_component object_ref="object_sysctl_kernel_core_pattern_empty_string_static_set_sysctls" item_field="filepath" />
-      </unique>
-    </count>
-  </local_variable>
-
-  <ind:textfilecontent54_object id="object_sysctl_kernel_core_pattern_empty_string_static_set_sysctls" version="1">
-    <set>
-      <object_reference>object_sysctl_kernel_core_pattern_empty_string_static_set_sysctls_unfiltered</object_reference>
-      <filter action="exclude">state_sysctl_kernel_core_pattern_empty_string_filepath_is_symlink</filter>
-    </set>
-  </ind:textfilecontent54_object>
 
-  <ind:textfilecontent54_state id="state_sysctl_kernel_core_pattern_empty_string_filepath_is_symlink" version="1">
-    <ind:filepath operation="equals" var_check="at least one" var_ref="local_var_sysctl_kernel_core_pattern_empty_string_safe_symlinks" datatype="string" />
-  </ind:textfilecontent54_state>
-
-  <!-- <no symlink handling> -->
-  <!-- We craft a variable with blank string to combine with the symlink paths found.
-       This ultimately avoids referencing a variable with "no values",
-       we reference a variable with a blank string -->
-  <local_variable comment="Unique list of symlink conf files" datatype="string" id="local_var_sysctl_kernel_core_pattern_empty_string_safe_symlinks" version="1">
-    <unique>
-      <object_component object_ref="var_object_symlink_sysctl_kernel_core_pattern_empty_string" item_field="value" />
-    </unique>
-  </local_variable>
-
-  <ind:variable_object id="var_object_symlink_sysctl_kernel_core_pattern_empty_string" comment="combine the blank string with symlink paths found" version="1">
-    <set>
-      <object_reference>var_obj_symlink_sysctl_kernel_core_pattern_empty_string</object_reference>
-      <object_reference>var_obj_blank_sysctl_kernel_core_pattern_empty_string</object_reference>
-    </set>
-  </ind:variable_object>
-
-  <ind:variable_object id="var_obj_blank_sysctl_kernel_core_pattern_empty_string" comment="variable object of the blank string" version="1">
-    <ind:var_ref>local_var_blank_path_sysctl_kernel_core_pattern_empty_string</ind:var_ref>
-  </ind:variable_object>
-
-  <local_variable comment="Blank string" datatype="string" id="local_var_blank_path_sysctl_kernel_core_pattern_empty_string" version="1">
-    <literal_component datatype="string"></literal_component>
-  </local_variable>
-
-  <ind:variable_object id="var_obj_symlink_sysctl_kernel_core_pattern_empty_string" comment="variable object of the symlinks found" version="1">
-    <ind:var_ref>local_var_symlinks_sysctl_kernel_core_pattern_empty_string</ind:var_ref>
-  </ind:variable_object>
-  <!-- </no symlink handling> -->
-
-  <local_variable comment="Unique list of symlink conf files" datatype="string" id="local_var_symlinks_sysctl_kernel_core_pattern_empty_string" version="1">
-    <unique>
-      <object_component object_ref="object_sysctl_kernel_core_pattern_empty_string_symlinks" item_field="filepath" />
-    </unique>
-  </local_variable>
-
-  <!-- "pattern match" doesn't seem to work with symlink_object, not sure if a bug or not.
-       Workaround by querying for all conf files found -->
-  <unix:symlink_object comment="Symlinks referencing files in default dirs" id="object_sysctl_kernel_core_pattern_empty_string_symlinks" version="1">
-    <unix:filepath operation="equals" var_ref="local_var_conf_files_sysctl_kernel_core_pattern_empty_string" />
-    <filter action="exclude">state_symlink_points_outside_usual_dirs_sysctl_kernel_core_pattern_empty_string</filter>
-  </unix:symlink_object>
-
-  <!-- The state matches symlinks that don't point to the default dirs, i.e. paths that are not:
-       ^/etc/sysctl.conf$
-       ^/etc/sysctl.d/.*$
-       ^/run/sysctl.d/.*$
-       ^/usr/lib/sysctl.d/.*$ -->
-  <unix:symlink_state comment="State that matches symlinks referencing files not in the default dirs" id="state_symlink_points_outside_usual_dirs_sysctl_kernel_core_pattern_empty_string" version="1">
-    <unix:canonical_path operation="pattern match">^(?!(\/etc\/sysctl\.conf$|(\/etc|\/run|\/usr\/lib)\/sysctl\.d\/)).*$</unix:canonical_path>
-  </unix:symlink_state>
-{{% endif %}}
-  <local_variable comment="List of conf files" datatype="string" id="local_var_conf_files_sysctl_kernel_core_pattern_empty_string" version="1">
-    <object_component object_ref="object_sysctl_kernel_core_pattern_empty_string_static_set_sysctls_unfiltered" item_field="filepath" />
-  </local_variable>
-
-  <!-- Avoid directly referencing a possibly empty collection, one empty collection will cause the
-       variable to have no value even when there are valid objects. -->
-  <ind:textfilecontent54_object id="object_sysctl_kernel_core_pattern_empty_string_static_set_sysctls_unfiltered" version="1">
+  <!-- User files: union of etc + run + usr/local/lib -->
+  <ind:textfilecontent54_object id="object_static_user_sysctl_kernel_core_pattern_empty_string" version="1">
     <set>
-      <object_reference>object_static_etc_sysctls_sysctl_kernel_core_pattern_empty_string</object_reference>
-      <object_reference>object_static_run_usr_sysctls_sysctl_kernel_core_pattern_empty_string</object_reference>
+      <object_reference>object_static_etc_lib_sysctls_sysctl_kernel_core_pattern_empty_string</object_reference>
+      <object_reference>object_static_run_usr_local_sysctls_sysctl_kernel_core_pattern_empty_string</object_reference>
     </set>
   </ind:textfilecontent54_object>
 
-  <ind:textfilecontent54_object id="object_static_etc_sysctls_sysctl_kernel_core_pattern_empty_string" version="1">
+  <ind:textfilecontent54_object id="object_static_etc_lib_sysctls_sysctl_kernel_core_pattern_empty_string" version="1">
     <set>
       <object_reference>object_static_sysctl_sysctl_kernel_core_pattern_empty_string</object_reference>
       <object_reference>object_static_etc_sysctld_sysctl_kernel_core_pattern_empty_string</object_reference>
     </set>
   </ind:textfilecontent54_object>
 
-  <ind:textfilecontent54_object id="object_static_run_usr_sysctls_sysctl_kernel_core_pattern_empty_string" version="1">
+  <ind:textfilecontent54_object id="object_static_run_usr_local_sysctls_sysctl_kernel_core_pattern_empty_string" version="1">
     <set>
+      <object_reference>object_static_usr_local_lib_sysctld_sysctl_kernel_core_pattern_empty_string</object_reference>
       <object_reference>object_static_run_sysctld_sysctl_kernel_core_pattern_empty_string</object_reference>
     </set>
   </ind:textfilecontent54_object>
 
+  <!-- Individual directory objects -->
   <ind:textfilecontent54_object id="object_static_sysctl_sysctl_kernel_core_pattern_empty_string" version="1">
     <ind:filepath>/etc/sysctl.conf</ind:filepath>
     <ind:pattern operation="pattern match">^[[:blank:]]*kernel.core_pattern[[:blank:]]*=[[:blank:]]*(.*)$</ind:pattern>
@@ -205,6 +118,23 @@
     <ind:pattern operation="pattern match">^[[:blank:]]*kernel.core_pattern[[:blank:]]*=[[:blank:]]*(.*)$</ind:pattern>
     <ind:instance datatype="int" operation="greater than or equal">1</ind:instance>
   </ind:textfilecontent54_object>
+
+  <ind:textfilecontent54_object id="object_static_usr_local_lib_sysctld_sysctl_kernel_core_pattern_empty_string" version="1">
+    <ind:path>/usr/local/lib/sysctl.d</ind:path>
+    <ind:filename operation="pattern match">^.*\.conf$</ind:filename>
+    <ind:pattern operation="pattern match">^[[:blank:]]*kernel.core_pattern[[:blank:]]*=[[:blank:]]*(.*)$</ind:pattern>
+    <ind:instance datatype="int" operation="greater than or equal">1</ind:instance>
+  </ind:textfilecontent54_object>
+
+  <!-- Package-managed files: /usr/lib/sysctl.d/ -->
+  <ind:textfilecontent54_object id="object_static_usr_lib_sysctld_sysctl_kernel_core_pattern_empty_string" version="1">
+    <ind:path>/usr/lib/sysctl.d</ind:path>
+    <ind:filename operation="pattern match">^.*\.conf$</ind:filename>
+    <ind:pattern operation="pattern match">^[[:blank:]]*kernel.core_pattern[[:blank:]]*=[[:blank:]]*(.*)$</ind:pattern>
+    <ind:instance datatype="int" operation="greater than or equal">1</ind:instance>
+  </ind:textfilecontent54_object>
+
+  <!-- State: subexpression must be empty string -->
   <ind:textfilecontent54_state id="state_static_sysctld_sysctl_kernel_core_pattern_empty_string" version="1">
     <ind:subexpression operation="equals" datatype="string"></ind:subexpression>
   </ind:textfilecontent54_state>
diff --git a/linux_os/guide/system/permissions/restrictions/sysctl_kernel_modules_disabled/rule.yml b/linux_os/guide/system/permissions/restrictions/sysctl_kernel_modules_disabled/rule.yml
index ea7ed7dd56c9..7848282d36d4 100644
--- a/linux_os/guide/system/permissions/restrictions/sysctl_kernel_modules_disabled/rule.yml
+++ b/linux_os/guide/system/permissions/restrictions/sysctl_kernel_modules_disabled/rule.yml
@@ -20,6 +20,7 @@ identifiers:
     cce@rhel10: CCE-87060-0
     cce@sle12: CCE-91566-0
     cce@sle15: CCE-91256-8
+    cce@sle16: CCE-96441-1
 
 {{{ complete_ocil_entry_sysctl_option_value(sysctl="kernel.modules_disabled", value="1") }}}
 
diff --git a/linux_os/guide/system/permissions/restrictions/sysctl_kernel_panic_on_oops/rule.yml b/linux_os/guide/system/permissions/restrictions/sysctl_kernel_panic_on_oops/rule.yml
index 4978ee7b55fa..d5e0ff2d7630 100644
--- a/linux_os/guide/system/permissions/restrictions/sysctl_kernel_panic_on_oops/rule.yml
+++ b/linux_os/guide/system/permissions/restrictions/sysctl_kernel_panic_on_oops/rule.yml
@@ -19,6 +19,7 @@ identifiers:
     cce@rhel8: CCE-87666-4
     cce@rhel9: CCE-88666-3
     cce@rhel10: CCE-88293-6
+    cce@sle16: CCE-96624-2
 
 {{{ complete_ocil_entry_sysctl_option_value(sysctl="kernel.panic_on_oops", value="1") }}}
 
diff --git a/linux_os/guide/system/permissions/restrictions/sysctl_kernel_perf_cpu_time_max_percent/rule.yml b/linux_os/guide/system/permissions/restrictions/sysctl_kernel_perf_cpu_time_max_percent/rule.yml
index 4193087a450b..efa5539867f5 100644
--- a/linux_os/guide/system/permissions/restrictions/sysctl_kernel_perf_cpu_time_max_percent/rule.yml
+++ b/linux_os/guide/system/permissions/restrictions/sysctl_kernel_perf_cpu_time_max_percent/rule.yml
@@ -18,6 +18,7 @@ identifiers:
     cce@rhel10: CCE-87824-9
     cce@sle12: CCE-91567-8
     cce@sle15: CCE-91257-6
+    cce@sle16: CCE-95810-8
 
 {{{ complete_ocil_entry_sysctl_option_value(sysctl="kernel.perf_cpu_time_max_percent", value="1") }}}
 
diff --git a/linux_os/guide/system/permissions/restrictions/sysctl_kernel_perf_event_max_sample_rate/rule.yml b/linux_os/guide/system/permissions/restrictions/sysctl_kernel_perf_event_max_sample_rate/rule.yml
index a9cd4ecb8b02..311c2a720ae3 100644
--- a/linux_os/guide/system/permissions/restrictions/sysctl_kernel_perf_event_max_sample_rate/rule.yml
+++ b/linux_os/guide/system/permissions/restrictions/sysctl_kernel_perf_event_max_sample_rate/rule.yml
@@ -19,6 +19,7 @@ identifiers:
     cce@rhel10: CCE-88924-6
     cce@sle12: CCE-91569-4
     cce@sle15: CCE-91259-2
+    cce@sle16: CCE-96293-6
 
 {{{ complete_ocil_entry_sysctl_option_value(sysctl="kernel.perf_event_max_sample_rate", value="1") }}}
 
diff --git a/linux_os/guide/system/permissions/restrictions/sysctl_kernel_perf_event_paranoid/rule.yml b/linux_os/guide/system/permissions/restrictions/sysctl_kernel_perf_event_paranoid/rule.yml
index 0a3b7150118e..15066db66a1a 100644
--- a/linux_os/guide/system/permissions/restrictions/sysctl_kernel_perf_event_paranoid/rule.yml
+++ b/linux_os/guide/system/permissions/restrictions/sysctl_kernel_perf_event_paranoid/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhel10: CCE-90142-1
     cce@sle12: CCE-91568-6
     cce@sle15: CCE-91258-4
+    cce@sle16: CCE-96571-5
 
 references:
     nist: AC-6
diff --git a/linux_os/guide/system/permissions/restrictions/sysctl_kernel_pid_max/rule.yml b/linux_os/guide/system/permissions/restrictions/sysctl_kernel_pid_max/rule.yml
index d4fdaab86b80..d87e5a513942 100644
--- a/linux_os/guide/system/permissions/restrictions/sysctl_kernel_pid_max/rule.yml
+++ b/linux_os/guide/system/permissions/restrictions/sysctl_kernel_pid_max/rule.yml
@@ -19,6 +19,7 @@ identifiers:
     cce@rhel10: CCE-88134-2
     cce@sle12: CCE-91570-2
     cce@sle15: CCE-91260-0
+    cce@sle16: CCE-95760-5
 
 {{{ complete_ocil_entry_sysctl_option_value(sysctl="kernel.pid_max", value="65536") }}}
 
diff --git a/linux_os/guide/system/permissions/restrictions/sysctl_kernel_sysrq/rule.yml b/linux_os/guide/system/permissions/restrictions/sysctl_kernel_sysrq/rule.yml
index 61cb3a8d4f6c..7a4c299a370b 100644
--- a/linux_os/guide/system/permissions/restrictions/sysctl_kernel_sysrq/rule.yml
+++ b/linux_os/guide/system/permissions/restrictions/sysctl_kernel_sysrq/rule.yml
@@ -19,6 +19,7 @@ identifiers:
     cce@rhel10: CCE-90232-0
     cce@sle12: CCE-91571-0
     cce@sle15: CCE-91261-8
+    cce@sle16: CCE-96062-5
 
 {{{ complete_ocil_entry_sysctl_option_value(sysctl="kernel.sysrq", value="0") }}}
 
diff --git a/linux_os/guide/system/permissions/restrictions/sysctl_kernel_unprivileged_bpf_disabled/rule.yml b/linux_os/guide/system/permissions/restrictions/sysctl_kernel_unprivileged_bpf_disabled/rule.yml
index 53af78ce203b..d2d1e2cf9284 100644
--- a/linux_os/guide/system/permissions/restrictions/sysctl_kernel_unprivileged_bpf_disabled/rule.yml
+++ b/linux_os/guide/system/permissions/restrictions/sysctl_kernel_unprivileged_bpf_disabled/rule.yml
@@ -16,6 +16,7 @@ identifiers:
     cce@rhel8: CCE-82974-7
     cce@rhel9: CCE-83957-1
     cce@rhel10: CCE-89405-5
+    cce@sle16: CCE-96676-2
 
 references:
     nist: AC-6,SC-7(10)
diff --git a/linux_os/guide/system/permissions/restrictions/sysctl_kernel_yama_ptrace_scope/rule.yml b/linux_os/guide/system/permissions/restrictions/sysctl_kernel_yama_ptrace_scope/rule.yml
index 2c6e83019b64..3a56b472e039 100644
--- a/linux_os/guide/system/permissions/restrictions/sysctl_kernel_yama_ptrace_scope/rule.yml
+++ b/linux_os/guide/system/permissions/restrictions/sysctl_kernel_yama_ptrace_scope/rule.yml
@@ -20,6 +20,7 @@ identifiers:
     cce@rhel10: CCE-88785-1
     cce@sle12: CCE-91572-8
     cce@sle15: CCE-91262-6
+    cce@sle16: CCE-96674-7
 
 references:
     nist: SC-7(10)
diff --git a/linux_os/guide/system/permissions/restrictions/sysctl_net_core_bpf_jit_harden/rule.yml b/linux_os/guide/system/permissions/restrictions/sysctl_net_core_bpf_jit_harden/rule.yml
index e05977fecfbb..49c4d362a87a 100644
--- a/linux_os/guide/system/permissions/restrictions/sysctl_net_core_bpf_jit_harden/rule.yml
+++ b/linux_os/guide/system/permissions/restrictions/sysctl_net_core_bpf_jit_harden/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhel8: CCE-82934-1
     cce@rhel9: CCE-83966-2
     cce@rhel10: CCE-89631-6
+    cce@sle16: CCE-96656-4
 
 references:
     nist: CM-6,SC-7(10)
diff --git a/linux_os/guide/system/permissions/restrictions/sysctl_vm_mmap_min_addr/rule.yml b/linux_os/guide/system/permissions/restrictions/sysctl_vm_mmap_min_addr/rule.yml
index 3b247e01b199..581d1200fe48 100644
--- a/linux_os/guide/system/permissions/restrictions/sysctl_vm_mmap_min_addr/rule.yml
+++ b/linux_os/guide/system/permissions/restrictions/sysctl_vm_mmap_min_addr/rule.yml
@@ -19,6 +19,7 @@ identifiers:
     cce@rhel10: CCE-87534-4
     cce@sle12: CCE-91573-6
     cce@sle15: CCE-91263-4
+    cce@sle16: CCE-96371-0
 
 {{{ complete_ocil_entry_sysctl_option_value(sysctl="vm.mmap_min_addr", value="65536") }}}
 
diff --git a/linux_os/guide/system/selinux/directory_groupowner_etc_selinux/rule.yml b/linux_os/guide/system/selinux/directory_groupowner_etc_selinux/rule.yml
index 96333381c14e..4cf322bb6f65 100644
--- a/linux_os/guide/system/selinux/directory_groupowner_etc_selinux/rule.yml
+++ b/linux_os/guide/system/selinux/directory_groupowner_etc_selinux/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhel9: CCE-86274-8
     cce@rhel10: CCE-87637-5
     cce@sle15: CCE-92501-6
+    cce@sle16: CCE-96054-2
 
 ocil_clause: '{{{ ocil_clause_file_group_owner(file="/etc/selinux", group="root") }}}'
 
diff --git a/linux_os/guide/system/selinux/directory_owner_etc_selinux/rule.yml b/linux_os/guide/system/selinux/directory_owner_etc_selinux/rule.yml
index 5f14cf353776..5273edd45640 100644
--- a/linux_os/guide/system/selinux/directory_owner_etc_selinux/rule.yml
+++ b/linux_os/guide/system/selinux/directory_owner_etc_selinux/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhel9: CCE-86271-4
     cce@rhel10: CCE-89309-9
     cce@sle15: CCE-92510-7
+    cce@sle16: CCE-96414-8
 
 ocil_clause: '{{{ ocil_clause_file_owner(file="/etc/selinux", owner="root") }}}'
 
diff --git a/linux_os/guide/system/selinux/directory_permissions_etc_selinux/rule.yml b/linux_os/guide/system/selinux/directory_permissions_etc_selinux/rule.yml
index b2bbcef59795..1428e4d9ff4a 100644
--- a/linux_os/guide/system/selinux/directory_permissions_etc_selinux/rule.yml
+++ b/linux_os/guide/system/selinux/directory_permissions_etc_selinux/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhel9: CCE-86279-7
     cce@rhel10: CCE-87997-3
     cce@sle15: CCE-92524-8
+    cce@sle16: CCE-96570-7
 
 ocil_clause: '{{{ ocil_clause_file_permissions(file="/etc/selinux", perms="0755") }}}'
 
diff --git a/linux_os/guide/system/selinux/file_groupowner_etc_sestatus_conf/rule.yml b/linux_os/guide/system/selinux/file_groupowner_etc_sestatus_conf/rule.yml
index 73216cabd0aa..96b0d62306f2 100644
--- a/linux_os/guide/system/selinux/file_groupowner_etc_sestatus_conf/rule.yml
+++ b/linux_os/guide/system/selinux/file_groupowner_etc_sestatus_conf/rule.yml
@@ -16,6 +16,7 @@ identifiers:
     cce@rhel8: CCE-86288-8
     cce@rhel9: CCE-86289-6
     cce@rhel10: CCE-89741-3
+    cce@sle16: CCE-95848-8
 
 ocil_clause: '{{{ ocil_clause_file_group_owner(file="/etc/sestatus.conf", group="root") }}}'
 
diff --git a/linux_os/guide/system/selinux/file_owner_etc_sestatus_conf/rule.yml b/linux_os/guide/system/selinux/file_owner_etc_sestatus_conf/rule.yml
index ba62bf3c001b..923c2deafc18 100644
--- a/linux_os/guide/system/selinux/file_owner_etc_sestatus_conf/rule.yml
+++ b/linux_os/guide/system/selinux/file_owner_etc_sestatus_conf/rule.yml
@@ -16,6 +16,7 @@ identifiers:
     cce@rhel8: CCE-86285-4
     cce@rhel9: CCE-86286-2
     cce@rhel10: CCE-86503-0
+    cce@sle16: CCE-95806-6
 
 ocil_clause: '{{{ ocil_clause_file_owner(file="/etc/sestatus.conf", owner="root") }}}'
 
diff --git a/linux_os/guide/system/selinux/file_permissions_etc_sestatus_conf/rule.yml b/linux_os/guide/system/selinux/file_permissions_etc_sestatus_conf/rule.yml
index 0ae5fea5b3bb..23c360f25e80 100644
--- a/linux_os/guide/system/selinux/file_permissions_etc_sestatus_conf/rule.yml
+++ b/linux_os/guide/system/selinux/file_permissions_etc_sestatus_conf/rule.yml
@@ -16,6 +16,7 @@ identifiers:
     cce@rhel8: CCE-86291-2
     cce@rhel9: CCE-86293-8
     cce@rhel10: CCE-90692-5
+    cce@sle16: CCE-95722-5
 
 ocil_clause: '{{{ ocil_clause_file_permissions(file="/etc/sestatus.conf", perms="0644") }}}'
 
diff --git a/linux_os/guide/system/selinux/grub2_enable_selinux/ansible/shared.yml b/linux_os/guide/system/selinux/grub2_enable_selinux/ansible/shared.yml
index 38c97f2e8870..4ddfa4f42c56 100644
--- a/linux_os/guide/system/selinux/grub2_enable_selinux/ansible/shared.yml
+++ b/linux_os/guide/system/selinux/grub2_enable_selinux/ansible/shared.yml
@@ -1,4 +1,4 @@
-# platform = multi_platform_rhel,multi_platform_rhv,multi_platform_fedora,multi_platform_ol,SUSE Linux Enterprise 15,multi_platform_almalinux
+# platform = SUSE Linux Enterprise 15,SUSE Linux Enterprise 16,multi_platform_almalinux,multi_platform_fedora,multi_platform_ol,multi_platform_rhel,multi_platform_rhv
 # reboot = false
 # strategy = restrict
 # complexity = low
diff --git a/linux_os/guide/system/selinux/grub2_enable_selinux/bash/shared.sh b/linux_os/guide/system/selinux/grub2_enable_selinux/bash/shared.sh
index 997a564e0c71..b9c10607aa7b 100644
--- a/linux_os/guide/system/selinux/grub2_enable_selinux/bash/shared.sh
+++ b/linux_os/guide/system/selinux/grub2_enable_selinux/bash/shared.sh
@@ -1,4 +1,4 @@
-# platform = multi_platform_rhel,multi_platform_rhv,multi_platform_fedora,multi_platform_ol,SUSE Linux Enterprise 15,multi_platform_almalinux
+# platform = SUSE Linux Enterprise 15,SUSE Linux Enterprise 16,multi_platform_almalinux,multi_platform_fedora,multi_platform_ol,multi_platform_rhel,multi_platform_rhv
 
 sed -i --follow-symlinks "s/selinux=0//gI" /etc/default/grub /etc/grub2.cfg /etc/grub.d/*
 sed -i --follow-symlinks "s/enforcing=0//gI" /etc/default/grub /etc/grub2.cfg /etc/grub.d/*
diff --git a/linux_os/guide/system/selinux/package_setroubleshoot-plugins_removed/rule.yml b/linux_os/guide/system/selinux/package_setroubleshoot-plugins_removed/rule.yml
index c203843bb30c..2578c0675617 100644
--- a/linux_os/guide/system/selinux/package_setroubleshoot-plugins_removed/rule.yml
+++ b/linux_os/guide/system/selinux/package_setroubleshoot-plugins_removed/rule.yml
@@ -21,6 +21,7 @@ identifiers:
     cce@rhel10: CCE-89365-1
     cce@sle12: CCE-91582-7
     cce@sle15: CCE-91269-1
+    cce@sle16: CCE-96431-2
 
 {{{ complete_ocil_entry_package(package="setroubleshoot-plugins") }}}
 
diff --git a/linux_os/guide/system/selinux/package_setroubleshoot-server_removed/rule.yml b/linux_os/guide/system/selinux/package_setroubleshoot-server_removed/rule.yml
index 2e64ff92ed3e..b4d07c4ba6f2 100644
--- a/linux_os/guide/system/selinux/package_setroubleshoot-server_removed/rule.yml
+++ b/linux_os/guide/system/selinux/package_setroubleshoot-server_removed/rule.yml
@@ -22,6 +22,7 @@ identifiers:
     cce@rhel10: CCE-89569-8
     cce@sle12: CCE-91580-1
     cce@sle15: CCE-91267-5
+    cce@sle16: CCE-96268-8
 
 {{{ complete_ocil_entry_package(package="setroubleshoot-server") }}}
 
diff --git a/linux_os/guide/system/selinux/package_setroubleshoot_removed/rule.yml b/linux_os/guide/system/selinux/package_setroubleshoot_removed/rule.yml
index 5948b2d9202c..8c8fd76fa459 100644
--- a/linux_os/guide/system/selinux/package_setroubleshoot_removed/rule.yml
+++ b/linux_os/guide/system/selinux/package_setroubleshoot_removed/rule.yml
@@ -22,6 +22,7 @@ identifiers:
     cce@rhel10: CCE-89902-1
     cce@sle12: CCE-91581-9
     cce@sle15: CCE-91268-3
+    cce@sle16: CCE-96597-0
 
 template:
     name: package_removed
diff --git a/linux_os/guide/system/selinux/selinux-booleans/sebool_deny_execmem/rule.yml b/linux_os/guide/system/selinux/selinux-booleans/sebool_deny_execmem/rule.yml
index 54e9870d16ed..1c5b8900ad3a 100644
--- a/linux_os/guide/system/selinux/selinux-booleans/sebool_deny_execmem/rule.yml
+++ b/linux_os/guide/system/selinux/selinux-booleans/sebool_deny_execmem/rule.yml
@@ -20,6 +20,7 @@ identifiers:
     cce@rhel10: CCE-87708-4
     cce@sle12: CCE-91575-1
     cce@sle15: CCE-91265-9
+    cce@sle16: CCE-96278-7
 
 {{{ complete_ocil_entry_sebool_var(sebool="deny_execmem") }}}
 
diff --git a/linux_os/guide/system/selinux/selinux-booleans/sebool_polyinstantiation_enabled/rule.yml b/linux_os/guide/system/selinux/selinux-booleans/sebool_polyinstantiation_enabled/rule.yml
index 98f8fb788a78..dc41037d27f1 100644
--- a/linux_os/guide/system/selinux/selinux-booleans/sebool_polyinstantiation_enabled/rule.yml
+++ b/linux_os/guide/system/selinux/selinux-booleans/sebool_polyinstantiation_enabled/rule.yml
@@ -18,6 +18,7 @@ identifiers:
     cce@rhel10: CCE-88652-3
     cce@sle12: CCE-91579-3
     cce@sle15: CCE-91238-6
+    cce@sle16: CCE-95753-0
 
 {{{ complete_ocil_entry_sebool_var(sebool="polyinstantiation_enabled") }}}
 
diff --git a/linux_os/guide/system/selinux/selinux-booleans/sebool_ssh_sysadm_login/rule.yml b/linux_os/guide/system/selinux/selinux-booleans/sebool_ssh_sysadm_login/rule.yml
index 33e7510ffbae..778bfb653bff 100644
--- a/linux_os/guide/system/selinux/selinux-booleans/sebool_ssh_sysadm_login/rule.yml
+++ b/linux_os/guide/system/selinux/selinux-booleans/sebool_ssh_sysadm_login/rule.yml
@@ -32,6 +32,7 @@ identifiers:
     cce@rhel10: CCE-90429-2
     cce@sle12: CCE-91574-4
     cce@sle15: CCE-91264-2
+    cce@sle16: CCE-95928-8
 
 {{{ complete_ocil_entry_sebool_disabled(sebool="ssh_sysadm_login") }}}
 
diff --git a/linux_os/guide/system/selinux/selinux_not_disabled/ansible/shared.yml b/linux_os/guide/system/selinux/selinux_not_disabled/ansible/shared.yml
index 756897defedf..b3a694a27ed0 100644
--- a/linux_os/guide/system/selinux/selinux_not_disabled/ansible/shared.yml
+++ b/linux_os/guide/system/selinux/selinux_not_disabled/ansible/shared.yml
@@ -4,19 +4,22 @@
 # complexity = low
 # disruption = low
 
-- name: "{{{ rule_title }}} - Check current SELinux state"
+- name: "{{{ rule_title }}} - Check current SELinux configuration"
   ansible.builtin.command:
-    cmd: getenforce
-  register: current_selinux_state
+    cmd: grep -oP '^\s*SELINUX=\K(enforcing|permissive|disabled)' /etc/selinux/config
+  register: selinux_config_state
   check_mode: false
   changed_when: false
+  failed_when: false
 
-{{{ ansible_selinux_config_set(parameter="SELINUX", value="permissive", rule_title=rule_title) }}}
+- name: "{{{ rule_title }}} - Set SELinux state to permissive if disabled or not configured"
+  block:
+    {{{ ansible_selinux_config_set(parameter="SELINUX", value="permissive", rule_title=rule_title) | indent(4) }}}
 
-- name: "{{{ rule_title }}} - Mark system to relabel SELinux on next boot"
-  ansible.builtin.file:
-    path: /.autorelabel
-    state: touch
-    access_time: preserve
-    modification_time: preserve
-  when: current_selinux_state.stdout | lower != "permissive"
+    - name: "{{{ rule_title }}} - Mark system to relabel SELinux on next boot"
+      ansible.builtin.file:
+        path: /.autorelabel
+        state: touch
+        access_time: preserve
+        modification_time: preserve
+  when: selinux_config_state.stdout not in ['enforcing', 'permissive']
diff --git a/linux_os/guide/system/selinux/selinux_not_disabled/bash/shared.sh b/linux_os/guide/system/selinux/selinux_not_disabled/bash/shared.sh
index 95b0795ea481..c5e6dd817545 100644
--- a/linux_os/guide/system/selinux/selinux_not_disabled/bash/shared.sh
+++ b/linux_os/guide/system/selinux/selinux_not_disabled/bash/shared.sh
@@ -4,6 +4,16 @@
 # complexity = low
 # disruption = low
 
-{{{ bash_selinux_config_set(parameter="SELINUX", value="permissive", rule_id=rule_id) }}}
+# Check current SELinux state in config file
+selinux_current_state=""
+if [ -f "/etc/selinux/config" ]; then
+    selinux_current_state=$(grep -oP '^\s*SELINUX=\K(enforcing|permissive|disabled)' /etc/selinux/config || true)
+fi
 
-fixfiles onboot
+# Only remediate if SELinux is disabled or not configured
+# If already set to enforcing or permissive, it's compliant - preserve the current state
+if [ "$selinux_current_state" != "enforcing" ] && [ "$selinux_current_state" != "permissive" ]; then
+    # SELinux is disabled or not configured, set to permissive as a conservative approach
+    {{{ bash_selinux_config_set(parameter="SELINUX", value="permissive", rule_id=rule_id) }}}
+    fixfiles onboot
+fi
diff --git a/linux_os/guide/system/selinux/selinux_not_disabled/rule.yml b/linux_os/guide/system/selinux/selinux_not_disabled/rule.yml
index e9648d4d2235..73fe9ca6df76 100644
--- a/linux_os/guide/system/selinux/selinux_not_disabled/rule.yml
+++ b/linux_os/guide/system/selinux/selinux_not_disabled/rule.yml
@@ -9,7 +9,8 @@ description: |-
     <pre>SELINUX=enforcing</pre>
     OR
     <pre>SELINUX=permissive</pre>
-    Ensure that all files have correct SELinux labels by running:
+    If SELinux is currently disabled or not configured, ensure that all files have correct SELinux
+    labels by running:
     <pre>fixfiles onboot</pre>
     Then reboot the system.
 
@@ -40,7 +41,11 @@ ocil: |-
 fixtext: |-
     Configure {{{ full_name }}} to enable SELinux.
 
-    Edit the file <tt>/etc/selinux/config</tt> and add or modify the following line:
+    If SELinux is currently set to "enforcing" or "permissive" in /etc/selinux/config,
+    the system is compliant and no changes are needed.
+
+    If SELinux is disabled or not configured, edit the file <tt>/etc/selinux/config</tt>
+    and add or modify the following line:
     <pre>SELINUX=enforcing</pre>
     OR
     <pre>SELINUX=permissive</pre>
@@ -49,7 +54,9 @@ fixtext: |-
 
 warnings:
     - general: |-
-        In case the SELinux is "disabled", the automated remediation will adopt a more
-        conservative approach and set it to "permissive" in order to avoid any system disruption
-        and give the administrator the opportunity to assess the impact and necessary efforts
-        before setting it to "enforcing", which is strongly recommended.
+        The automated remediation checks the SELinux configuration in /etc/selinux/config.
+        If SELinux is already set to "enforcing" or "permissive", the current state is preserved
+        and no changes are made. If SELinux is "disabled" or not configured, the remediation will
+        adopt a conservative approach and set it to "permissive" in order to avoid any system
+        disruption and give the administrator the opportunity to assess the impact and necessary
+        efforts before setting it to "enforcing", which is strongly recommended.
diff --git a/linux_os/guide/system/software/disk_partitioning/partition_for_boot/rule.yml b/linux_os/guide/system/software/disk_partitioning/partition_for_boot/rule.yml
index 01c898effa81..11ea801cb32c 100644
--- a/linux_os/guide/system/software/disk_partitioning/partition_for_boot/rule.yml
+++ b/linux_os/guide/system/software/disk_partitioning/partition_for_boot/rule.yml
@@ -22,7 +22,7 @@ identifiers:
     cce@rhel10: CCE-90755-0
     cce@sle12: CCE-91484-6
     cce@sle15: CCE-91176-8
-
+    cce@sle16: CCE-96430-4
 
 {{{ complete_ocil_entry_separate_partition(part="/boot") }}}
 
diff --git a/linux_os/guide/system/software/disk_partitioning/partition_for_home/rule.yml b/linux_os/guide/system/software/disk_partitioning/partition_for_home/rule.yml
index f20cf960ae8e..9ea58be5c905 100644
--- a/linux_os/guide/system/software/disk_partitioning/partition_for_home/rule.yml
+++ b/linux_os/guide/system/software/disk_partitioning/partition_for_home/rule.yml
@@ -23,6 +23,7 @@ identifiers:
     cce@rhel10: CCE-88231-6
     cce@sle12: CCE-83152-9
     cce@sle15: CCE-85639-3
+    cce@sle16: CCE-95729-0
     cce@slmicro5: CCE-93796-1
     cce@slmicro6: CCE-95066-7 
 
diff --git a/linux_os/guide/system/software/disk_partitioning/partition_for_opt/rule.yml b/linux_os/guide/system/software/disk_partitioning/partition_for_opt/rule.yml
index dbb3529e26d0..077f8b781141 100644
--- a/linux_os/guide/system/software/disk_partitioning/partition_for_opt/rule.yml
+++ b/linux_os/guide/system/software/disk_partitioning/partition_for_opt/rule.yml
@@ -22,6 +22,7 @@ identifiers:
     cce@rhel10: CCE-90750-1
     cce@sle12: CCE-91485-3
     cce@sle15: CCE-91177-6
+    cce@sle16: CCE-96081-5
 
 {{{ complete_ocil_entry_separate_partition(part="/opt") }}}
 
diff --git a/linux_os/guide/system/software/disk_partitioning/partition_for_srv/rule.yml b/linux_os/guide/system/software/disk_partitioning/partition_for_srv/rule.yml
index 871ce4fc85ed..773ee54cce20 100644
--- a/linux_os/guide/system/software/disk_partitioning/partition_for_srv/rule.yml
+++ b/linux_os/guide/system/software/disk_partitioning/partition_for_srv/rule.yml
@@ -25,6 +25,7 @@ identifiers:
     cce@rhel10: CCE-88936-0
     cce@sle12: CCE-91486-1
     cce@sle15: CCE-91178-4
+    cce@sle16: CCE-95922-1
 
 {{{ complete_ocil_entry_separate_partition(part="/srv") }}}
 
diff --git a/linux_os/guide/system/software/disk_partitioning/partition_for_usr/rule.yml b/linux_os/guide/system/software/disk_partitioning/partition_for_usr/rule.yml
index a91af9b298db..ec9a94703a6b 100644
--- a/linux_os/guide/system/software/disk_partitioning/partition_for_usr/rule.yml
+++ b/linux_os/guide/system/software/disk_partitioning/partition_for_usr/rule.yml
@@ -21,7 +21,7 @@ identifiers:
     cce@rhel10: CCE-90748-5
     cce@sle12: CCE-91488-7
     cce@sle15: CCE-91180-0
-
+    cce@sle16: CCE-96274-6
 
 {{{ complete_ocil_entry_separate_partition(part="/usr") }}}
 
diff --git a/linux_os/guide/system/software/disk_partitioning/partition_for_var/rule.yml b/linux_os/guide/system/software/disk_partitioning/partition_for_var/rule.yml
index 98f4a53535fe..0c9ca10087f2 100644
--- a/linux_os/guide/system/software/disk_partitioning/partition_for_var/rule.yml
+++ b/linux_os/guide/system/software/disk_partitioning/partition_for_var/rule.yml
@@ -22,6 +22,7 @@ identifiers:
     cce@rhel10: CCE-89166-3
     cce@sle12: CCE-83153-7
     cce@sle15: CCE-85640-1
+    cce@sle16: CCE-95761-3
     cce@slmicro5: CCE-93797-9
     cce@slmicro6: CCE-95067-5 
 
diff --git a/linux_os/guide/system/software/disk_partitioning/partition_for_var_log/rule.yml b/linux_os/guide/system/software/disk_partitioning/partition_for_var_log/rule.yml
index 267652595db1..4afdabd4c279 100644
--- a/linux_os/guide/system/software/disk_partitioning/partition_for_var_log/rule.yml
+++ b/linux_os/guide/system/software/disk_partitioning/partition_for_var_log/rule.yml
@@ -20,6 +20,7 @@ identifiers:
     cce@rhel10: CCE-88355-3
     cce@sle12: CCE-91489-5
     cce@sle15: CCE-91181-8
+    cce@sle16: CCE-95945-2
 
 references:
     cis-csc: 1,12,14,15,16,3,5,6,8
diff --git a/linux_os/guide/system/software/disk_partitioning/partition_for_var_tmp/rule.yml b/linux_os/guide/system/software/disk_partitioning/partition_for_var_tmp/rule.yml
index c83b50a9f044..80b218b85f76 100644
--- a/linux_os/guide/system/software/disk_partitioning/partition_for_var_tmp/rule.yml
+++ b/linux_os/guide/system/software/disk_partitioning/partition_for_var_tmp/rule.yml
@@ -22,6 +22,7 @@ identifiers:
     cce@rhel10: CCE-87694-6
     cce@sle12: CCE-91490-3
     cce@sle15: CCE-91182-6
+    cce@sle16: CCE-96245-6
 
 references:
     cis@sle12: 1.1.11
diff --git a/linux_os/guide/system/software/disk_partitioning/systemd_tmp_mount_enabled/rule.yml b/linux_os/guide/system/software/disk_partitioning/systemd_tmp_mount_enabled/rule.yml
index 6f6532637e10..946e387e60c7 100644
--- a/linux_os/guide/system/software/disk_partitioning/systemd_tmp_mount_enabled/rule.yml
+++ b/linux_os/guide/system/software/disk_partitioning/systemd_tmp_mount_enabled/rule.yml
@@ -20,6 +20,7 @@ identifiers:
     cce@rhel8: CCE-86890-1
     cce@rhel9: CCE-86891-9
     cce@rhel10: CCE-89797-5
+    cce@sle16: CCE-96195-3
 
 ocil: |-
     {{{ ocil_systemd_mount_enabled("tmp") }}}
diff --git a/linux_os/guide/system/software/gnome/enable_dconf_user_profile/ansible/shared.yml b/linux_os/guide/system/software/gnome/enable_dconf_user_profile/ansible/shared.yml
index c6d042fb3ba3..df0e3739cdc3 100644
--- a/linux_os/guide/system/software/gnome/enable_dconf_user_profile/ansible/shared.yml
+++ b/linux_os/guide/system/software/gnome/enable_dconf_user_profile/ansible/shared.yml
@@ -4,9 +4,4 @@
 # complexity = low
 # disruption = medium
 
-- name: "Configure GNOME3 DConf User Profile"
-  ansible.builtin.lineinfile:
-    dest: "/etc/dconf/profile/gdm"
-    line: "user-db:user\nsystem-db:gdm"
-    create: yes
-    state: present
+{{{ ansible_enable_dconf_user_profile(profile="gdm", database="gdm") }}}
diff --git a/linux_os/guide/system/software/gnome/enable_dconf_user_profile/bash/shared.sh b/linux_os/guide/system/software/gnome/enable_dconf_user_profile/bash/shared.sh
index 06ba69b527b3..a0f5289b7df6 100644
--- a/linux_os/guide/system/software/gnome/enable_dconf_user_profile/bash/shared.sh
+++ b/linux_os/guide/system/software/gnome/enable_dconf_user_profile/bash/shared.sh
@@ -1,3 +1,3 @@
 # platform = multi_platform_sle
 
-echo -e 'user-db:user\nsystem-db:gdm' > /etc/dconf/profile/gdm
+{{{ bash_enable_dconf_user_profile(profile="gdm", database="gdm") }}}
diff --git a/linux_os/guide/system/software/gnome/gnome_login_screen/dconf_gnome_disable_user_list/ansible/shared.yml b/linux_os/guide/system/software/gnome/gnome_login_screen/dconf_gnome_disable_user_list/ansible/shared.yml
index d7ef96c9dce7..1d1453d42a41 100644
--- a/linux_os/guide/system/software/gnome/gnome_login_screen/dconf_gnome_disable_user_list/ansible/shared.yml
+++ b/linux_os/guide/system/software/gnome/gnome_login_screen/dconf_gnome_disable_user_list/ansible/shared.yml
@@ -21,6 +21,10 @@
     create: yes
   register: result_lineinfile
 
+{{% if product in ['sle15', 'sle16'] %}}
+{{{ ansible_enable_dconf_user_profile(profile="gdm", database="gdm") }}}
+{{% endif %}}
+
 - name: Dconf Update
   ansible.builtin.command: dconf update
   when: result_ini is changed or result_lineinfile is changed
diff --git a/linux_os/guide/system/software/gnome/gnome_login_screen/dconf_gnome_disable_user_list/bash/shared.sh b/linux_os/guide/system/software/gnome/gnome_login_screen/dconf_gnome_disable_user_list/bash/shared.sh
index 418467e2393d..4041b82f06fb 100644
--- a/linux_os/guide/system/software/gnome/gnome_login_screen/dconf_gnome_disable_user_list/bash/shared.sh
+++ b/linux_os/guide/system/software/gnome/gnome_login_screen/dconf_gnome_disable_user_list/bash/shared.sh
@@ -5,5 +5,9 @@
 {{{ bash_enable_dconf_user_profile(profile="gdm", database="gdm") }}}
 {{% endif %}}
 
+{{% if product in ['sle15', 'sle16'] %}}
+{{{ bash_enable_dconf_user_profile(profile="gdm", database="gdm") }}}
+{{% endif %}}
+
 {{{ bash_dconf_settings("org/gnome/login-screen", "disable-user-list", "true", dconf_gdm_dir, "00-security-settings", rule_id=rule_id) }}}
 {{{ bash_dconf_lock("org/gnome/login-screen", "disable-user-list", dconf_gdm_dir, "00-security-settings-lock") }}}
diff --git a/linux_os/guide/system/software/gnome/gnome_login_screen/dconf_gnome_disable_user_list/policy/stig/shared.yml b/linux_os/guide/system/software/gnome/gnome_login_screen/dconf_gnome_disable_user_list/policy/stig/shared.yml
index 9d2f897592bb..a30d3e50ba2e 100644
--- a/linux_os/guide/system/software/gnome/gnome_login_screen/dconf_gnome_disable_user_list/policy/stig/shared.yml
+++ b/linux_os/guide/system/software/gnome/gnome_login_screen/dconf_gnome_disable_user_list/policy/stig/shared.yml
@@ -19,9 +19,9 @@ fixtext: |-
     Configure {{{ full_name }}} to disable the user list at logon for graphical user interfaces.
 
     Create a database to contain the systemwide screensaver settings (if it does not already exist) with the following command:
-    Note: The example below is using the database "local" for the system. If the system is using another database in "/etc/dconf/profile/user", the file should be created under the appropriate subdirectory.
+    Note: The example below is using the database "{{{ dconf_gdm_dir }}}" for the system. If the system is using another database in "/etc/dconf/profile/user", the file should be created under the appropriate subdirectory.
 
-    $ sudo touch /etc/dconf/db/local.d/02-login-screen
+    $ sudo touch /etc/dconf/db/{{{ dconf_gdm_dir }}}/02-login-screen
 
     [org/gnome/login-screen]
     disable-user-list=true
@@ -29,4 +29,3 @@ fixtext: |-
     Update the system databases:
 
     $ sudo dconf update
-
diff --git a/linux_os/guide/system/software/gnome/gnome_login_screen/gnome_gdm_disable_unattended_automatic_login/bash/shared.sh b/linux_os/guide/system/software/gnome/gnome_login_screen/gnome_gdm_disable_unattended_automatic_login/bash/shared.sh
index 21e8eae8050b..501d4a066b6e 100644
--- a/linux_os/guide/system/software/gnome/gnome_login_screen/gnome_gdm_disable_unattended_automatic_login/bash/shared.sh
+++ b/linux_os/guide/system/software/gnome/gnome_login_screen/gnome_gdm_disable_unattended_automatic_login/bash/shared.sh
@@ -1,11 +1,9 @@
 # platform = multi_platform_sle,multi_platform_slmicro
 
-if ! (sed -n '/^DISPLAYMANAGER_AUTOLOGIN=\"\"/p' /etc/sysconfig/displaymanager)
-then
+if ! grep -q '^DISPLAYMANAGER_AUTOLOGIN=""' /etc/sysconfig/displaymanager; then
   sed -i "s/^DISPLAYMANAGER_AUTOLOGIN=.*/DISPLAYMANAGER_AUTOLOGIN=\"\"/g" /etc/sysconfig/displaymanager
 fi
 
-if ! (sed -n '/^DISPLAYMANAGER_PASSWORD_LESS_LOGIN=\"no\"/p' /etc/sysconfig/displaymanager)
-then
+if ! grep -q '^DISPLAYMANAGER_PASSWORD_LESS_LOGIN="no"' /etc/sysconfig/displaymanager; then
   sed -i "s/^DISPLAYMANAGER_PASSWORD_LESS_LOGIN=.*/DISPLAYMANAGER_PASSWORD_LESS_LOGIN=\"no\"/g" /etc/sysconfig/displaymanager
 fi
diff --git a/linux_os/guide/system/software/gnome/gnome_login_screen/gnome_gdm_disable_xdmcp/rule.yml b/linux_os/guide/system/software/gnome/gnome_login_screen/gnome_gdm_disable_xdmcp/rule.yml
index 4f228f0c3a4a..ac8e9953350d 100644
--- a/linux_os/guide/system/software/gnome/gnome_login_screen/gnome_gdm_disable_xdmcp/rule.yml
+++ b/linux_os/guide/system/software/gnome/gnome_login_screen/gnome_gdm_disable_xdmcp/rule.yml
@@ -11,9 +11,7 @@ title: 'Disable XDMCP in GDM'
 {{% endif %}}
 
 description: |-
-    XDMCP is an unencrypted protocol, and therefore, presents a security risk, see e.g.
-    {{{ weblink("https://help.gnome.org/admin/gdm/stable/security.html.en_GB#xdmcpsecurity", "XDMCP Gnome docs") }}}.
-
+    XDMCP is an unencrypted protocol, and therefore, presents a security risk.
     To disable XDMCP support in Gnome, set <code>Enable</code> to <code>false</code> under the <code>[xdmcp]</code> configuration section in <code>{{{ gdm_conf_path }}}</code>. For example:
     <pre>
     [xdmcp]
diff --git a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount/ansible/shared.yml b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount/ansible/shared.yml
index 3a44e002d5c9..7781bf9f6818 100644
--- a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount/ansible/shared.yml
+++ b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount/ansible/shared.yml
@@ -5,7 +5,11 @@
 # disruption = medium
 - name: "Disable GNOME3 Automounting - automount"
   community.general.ini_file:
+{{% if product in ['sle15', 'sle16'] %}}
+    dest: /etc/dconf/db/{{{ dconf_gdm_dir }}}/00-security-settings
+{{% else %}}
     dest: /etc/dconf/db/local.d/00-security-settings
+{{% endif %}}
     section: org/gnome/desktop/media-handling
     option: automount
     value: "false"
@@ -15,20 +19,18 @@
 
 - name: "Prevent user modification of GNOME3 Automounting - automount"
   ansible.builtin.lineinfile:
+{{% if product in ['sle15', 'sle16'] %}}
+    path: /etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/00-security-settings-lock
+{{% else %}}
     path: /etc/dconf/db/local.d/locks/00-security-settings-lock
+{{% endif %}}
     regexp: '^/org/gnome/desktop/media-handling/automount$'
     line: '/org/gnome/desktop/media-handling/automount'
     create: yes
   register: result_lineinfile
 
-# apply fix for enable_dconf_user_profile, OVAL checks it
 {{% if product in ['sle15', 'sle16'] %}}
-- name: "Configure GNOME3 DConf User Profile"
-  ansible.builtin.lineinfile:
-    dest: "/etc/dconf/profile/gdm"
-    line: "user-db:user\nsystem-db:gdm"
-    create: yes
-    state: present
+{{{ ansible_enable_dconf_user_profile(profile="gdm", database="gdm") }}}
 {{% endif %}}
 
 - name: Dconf Update
diff --git a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount/bash/shared.sh b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount/bash/shared.sh
index cb549a403266..0fc5cf0727ac 100644
--- a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount/bash/shared.sh
+++ b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount/bash/shared.sh
@@ -8,7 +8,9 @@
 # apply fix for enable_dconf_user_profile, OVAL checks it
 {{% if product in ['sle15', 'sle16'] %}}
 {{{ bash_enable_dconf_user_profile(profile="gdm", database="gdm") }}}
-{{% endif %}}
-
+{{{ bash_dconf_settings("org/gnome/desktop/media-handling", "automount", "false", dconf_gdm_dir, "00-security-settings", rule_id=rule_id) }}}
+{{{ bash_dconf_lock("org/gnome/desktop/media-handling", "automount", dconf_gdm_dir, "00-security-settings-lock") }}}
+{{% else %}}
 {{{ bash_dconf_settings("org/gnome/desktop/media-handling", "automount", "false", "local.d", "00-security-settings", rule_id=rule_id) }}}
 {{{ bash_dconf_lock("org/gnome/desktop/media-handling", "automount", "local.d", "00-security-settings-lock") }}}
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount/oval/shared.xml b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount/oval/shared.xml
index 35d7819f6072..e84d9434d7c6 100644
--- a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount/oval/shared.xml
+++ b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount/oval/shared.xml
@@ -20,7 +20,11 @@
   </ind:textfilecontent54_test>
   <ind:textfilecontent54_object id="obj_dconf_gnome_disable_automount"
   version="1">
+{{% if product in ['sle15', 'sle16'] %}}
+    <ind:path>/etc/dconf/db/{{{ dconf_gdm_dir }}}/</ind:path>
+{{% else %}}
     <ind:path>/etc/dconf/db/local.d/</ind:path>
+{{% endif %}}
     <ind:filename operation="pattern match">^.*$</ind:filename>
     <ind:pattern operation="pattern match">^\[org/gnome/desktop/media-handling\]([^\n]*\n+)+?automount=false$</ind:pattern>
     <ind:instance datatype="int">1</ind:instance>
@@ -33,7 +37,11 @@
   </ind:textfilecontent54_test>
   <ind:textfilecontent54_object id="obj_prevent_user_gnome_automount"
   version="1">
+{{% if product in ['sle15', 'sle16'] %}}
+    <ind:path>/etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/</ind:path>
+{{% else %}}
     <ind:path>/etc/dconf/db/local.d/locks/</ind:path>
+{{% endif %}}
     <ind:filename operation="pattern match">^.*$</ind:filename>
     <ind:pattern operation="pattern match">^/org/gnome/desktop/media-handling/automount$</ind:pattern>
     <ind:instance datatype="int">1</ind:instance>
diff --git a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount/rule.yml b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount/rule.yml
index d4c138569ff3..18d34513ebe2 100644
--- a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount/rule.yml
+++ b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount/rule.yml
@@ -7,12 +7,12 @@ description: |-
     The system's default desktop environment, GNOME3, will mount
     devices and removable media (such as DVDs, CDs and USB flash drives) whenever
     they are inserted into the system. To disable automount within GNOME3, add or set
-    <tt>automount</tt> to <tt>false</tt> in <tt>/etc/dconf/db/local.d/00-security-settings</tt>.
+    <tt>automount</tt> to <tt>false</tt> in <tt>/etc/dconf/db/{{{ dconf_gdm_dir }}}/00-security-settings</tt>.
     For example:
     <pre>[org/gnome/desktop/media-handling]
     automount=false</pre>
     Once the settings have been added, add a lock to
-    <tt>/etc/dconf/db/local.d/locks/00-security-settings-lock</tt> to prevent user modification.
+    <tt>/etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/00-security-settings-lock</tt> to prevent user modification.
     For example:
     <pre>/org/gnome/desktop/media-handling/automount</pre>
     After the settings have been set, run <tt>dconf update</tt>.
@@ -51,6 +51,5 @@ ocil: |-
     <pre>$ gsettings get org.gnome.desktop.media-handling automount</pre>
     If properly configured, the output for <tt>automount</tt> should be <tt>false</tt>.
     To ensure that users cannot enable automount in GNOME3, run the following:
-    <pre>$ grep 'automount' /etc/dconf/db/local.d/locks/*</pre>
+    <pre>$ grep 'automount' /etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/*</pre>
     If properly configured, the output for <tt>automount</tt> should be <tt>/org/gnome/desktop/media-handling/automount</tt>
-
diff --git a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount/tests/correct_value.pass.sh b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount/tests/correct_value.pass.sh
index 7d4b240f1bef..5efc7755c127 100644
--- a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount/tests/correct_value.pass.sh
+++ b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount/tests/correct_value.pass.sh
@@ -8,6 +8,10 @@ install_dconf_and_gdm_if_needed
 clean_dconf_settings
 
 add_dconf_profiles
+{{% if product in ['sle15', 'sle16'] %}}
+add_dconf_setting "org/gnome/desktop/media-handling" "automount" "false" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+add_dconf_lock "org/gnome/desktop/media-handling" "automount" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+{{% else %}}
 add_dconf_setting "org/gnome/desktop/media-handling" "automount" "false" "local.d" "00-security-settings"
 add_dconf_lock "org/gnome/desktop/media-handling" "automount" "local.d" "00-security-settings"
-
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount/tests/missing_profiles.fail.sh b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount/tests/missing_profiles.fail.sh
index 4f7194e4915b..27ec3eb39bb4 100644
--- a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount/tests/missing_profiles.fail.sh
+++ b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount/tests/missing_profiles.fail.sh
@@ -8,5 +8,10 @@
 install_dconf_and_gdm_if_needed
 clean_dconf_settings
 
+{{% if product in ['sle15', 'sle16'] %}}
+add_dconf_setting "org/gnome/desktop/media-handling" "automount" "false" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+add_dconf_lock "org/gnome/desktop/media-handling" "automount" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+{{% else %}}
 add_dconf_setting "org/gnome/desktop/media-handling" "automount" "false" "local.d" "00-security-settings"
 add_dconf_lock "org/gnome/desktop/media-handling" "automount" "local.d" "00-security-settings"
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount/tests/wrong_value.fail.sh b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount/tests/wrong_value.fail.sh
index af2b99f699e1..a6ad1796e7e2 100644
--- a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount/tests/wrong_value.fail.sh
+++ b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount/tests/wrong_value.fail.sh
@@ -7,5 +7,10 @@ install_dconf_and_gdm_if_needed
 clean_dconf_settings
 
 add_dconf_profiles
+{{% if product in ['sle15', 'sle16'] %}}
+add_dconf_setting "org/gnome/desktop/media-handling" "automount-open" "false" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+add_dconf_lock "org/gnome/desktop/media-handling" "automount-open" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+{{% else %}}
 add_dconf_setting "org/gnome/desktop/media-handling" "automount-open" "false" "local.d" "00-security-settings"
 add_dconf_lock "org/gnome/desktop/media-handling" "automount-open" "local.d" "00-security-settings"
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount_open/ansible/shared.yml b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount_open/ansible/shared.yml
index b807cc913da5..ba9b7ef40073 100644
--- a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount_open/ansible/shared.yml
+++ b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount_open/ansible/shared.yml
@@ -5,7 +5,11 @@
 # disruption = medium
 - name: "Disable GNOME3 Automounting - automount-open"
   community.general.ini_file:
+{{% if product in ['sle15', 'sle16'] %}}
+    dest: /etc/dconf/db/{{{ dconf_gdm_dir }}}/00-security-settings
+{{% else %}}
     dest: /etc/dconf/db/local.d/00-security-settings
+{{% endif %}}
     section: org/gnome/desktop/media-handling
     option: automount-open
     value: "false"
@@ -15,20 +19,18 @@
 
 - name: "Prevent user modification of GNOME3 Automounting - automount-open"
   ansible.builtin.lineinfile:
+{{% if product in ['sle15', 'sle16'] %}}
+    path: /etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/00-security-settings-lock
+{{% else %}}
     path: /etc/dconf/db/local.d/locks/00-security-settings-lock
+{{% endif %}}
     regexp: '^/org/gnome/desktop/media-handling/automount-open$'
     line: '/org/gnome/desktop/media-handling/automount-open'
     create: yes
   register: result_lineinfile
 
-# apply fix for enable_dconf_user_profile, OVAL checks it
 {{% if product in ['sle15', 'sle16'] %}}
-- name: "Configure GNOME3 DConf User Profile"
-  ansible.builtin.lineinfile:
-    dest: "/etc/dconf/profile/gdm"
-    line: "user-db:user\nsystem-db:gdm"
-    create: yes
-    state: present
+{{{ ansible_enable_dconf_user_profile(profile="gdm", database="gdm") }}}
 {{% endif %}}
 
 - name: Dconf Update
diff --git a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount_open/bash/shared.sh b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount_open/bash/shared.sh
index fb7ce9c74e2a..8f3790bd0722 100644
--- a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount_open/bash/shared.sh
+++ b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount_open/bash/shared.sh
@@ -8,7 +8,9 @@
 # apply fix for enable_dconf_user_profile, OVAL checks it
 {{% if product in ['sle15', 'sle16'] %}}
 {{{ bash_enable_dconf_user_profile(profile="gdm", database="gdm") }}}
-{{% endif %}}
-
+{{{ bash_dconf_settings("org/gnome/desktop/media-handling", "automount-open", "false", dconf_gdm_dir , "00-security-settings", rule_id=rule_id) }}}
+{{{ bash_dconf_lock("org/gnome/desktop/media-handling", "automount-open", dconf_gdm_dir, "00-security-settings-lock") }}}
+{{% else %}}
 {{{ bash_dconf_settings("org/gnome/desktop/media-handling", "automount-open", "false", "local.d", "00-security-settings", rule_id=rule_id) }}}
 {{{ bash_dconf_lock("org/gnome/desktop/media-handling", "automount-open", "local.d", "00-security-settings-lock") }}}
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount_open/oval/shared.xml b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount_open/oval/shared.xml
index d4000f292d26..be74ea547fa2 100644
--- a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount_open/oval/shared.xml
+++ b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount_open/oval/shared.xml
@@ -20,7 +20,11 @@
   </ind:textfilecontent54_test>
   <ind:textfilecontent54_object id="obj_dconf_gnome_disable_automount_open"
   version="1">
+{{% if product in ['sle15', 'sle16'] %}}
+    <ind:path>/etc/dconf/db/{{{ dconf_gdm_dir }}}/</ind:path>
+{{% else %}}
     <ind:path>/etc/dconf/db/local.d/</ind:path>
+{{% endif %}}
     <ind:filename operation="pattern match">^.*$</ind:filename>
     <ind:pattern operation="pattern match">^\[org/gnome/desktop/media-handling\]([^\n]*\n+)+?automount-open=false$</ind:pattern>
     <ind:instance datatype="int">1</ind:instance>
@@ -33,7 +37,11 @@
   </ind:textfilecontent54_test>
   <ind:textfilecontent54_object id="obj_prevent_user_gnome_automount_open"
   version="1">
+{{% if product in ['sle15', 'sle16'] %}}
+    <ind:path>/etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/</ind:path>
+{{% else %}}
     <ind:path>/etc/dconf/db/local.d/locks/</ind:path>
+{{% endif %}}
     <ind:filename operation="pattern match">^.*$</ind:filename>
     <ind:pattern operation="pattern match">^/org/gnome/desktop/media-handling/automount-open$</ind:pattern>
     <ind:instance datatype="int">1</ind:instance>
diff --git a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount_open/rule.yml b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount_open/rule.yml
index 1e0636944e3a..6757aeabd6d5 100644
--- a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount_open/rule.yml
+++ b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount_open/rule.yml
@@ -7,12 +7,12 @@ description: |-
     The system's default desktop environment, GNOME3, will mount
     devices and removable media (such as DVDs, CDs and USB flash drives) whenever
     they are inserted into the system. To disable automount-open within GNOME3, add or set
-    <tt>automount-open</tt> to <tt>false</tt> in <tt>/etc/dconf/db/local.d/00-security-settings</tt>.
+    <tt>automount-open</tt> to <tt>false</tt> in <tt>/etc/dconf/db/{{{ dconf_gdm_dir }}}/00-security-settings</tt>.
     For example:
     <pre>[org/gnome/desktop/media-handling]
     automount-open=false</pre>
     Once the settings have been added, add a lock to
-    <tt>/etc/dconf/db/local.d/locks/00-security-settings-lock</tt> to prevent user modification.
+    <tt>/etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/00-security-settings-lock</tt> to prevent user modification.
     For example:
     <pre>/org/gnome/desktop/media-handling/automount-open</pre>
     After the settings have been set, run <tt>dconf update</tt>.
@@ -52,7 +52,7 @@ ocil: |-
     <pre>$ gsettings get org.gnome.desktop.media-handling automount-open</pre>
     If properly configured, the output for <tt>automount-open</tt>should be <tt>false</tt>.
     To ensure that users cannot enable automount opening in GNOME3, run the following:
-    <pre>$ grep 'automount-open' /etc/dconf/db/local.d/locks/*</pre>
+    <pre>$ grep 'automount-open' /etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/*</pre>
     If properly configured, the output for <tt>automount-open</tt> should be <tt>/org/gnome/desktop/media-handling/automount-open</tt>
 
 
diff --git a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount_open/tests/correct_value.pass.sh b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount_open/tests/correct_value.pass.sh
index 4539136d777d..1abf5d412314 100644
--- a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount_open/tests/correct_value.pass.sh
+++ b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount_open/tests/correct_value.pass.sh
@@ -8,7 +8,10 @@ install_dconf_and_gdm_if_needed
 clean_dconf_settings
 
 add_dconf_profiles
+{{% if product in ['sle15', 'sle16'] %}}
+add_dconf_setting "org/gnome/desktop/media-handling" "automount-open" "false" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+add_dconf_lock "org/gnome/desktop/media-handling" "automount-open" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+{{% else %}}
 add_dconf_setting "org/gnome/desktop/media-handling" "automount-open" "false" "local.d" "00-security-settings"
 add_dconf_lock "org/gnome/desktop/media-handling" "automount-open" "local.d" "00-security-settings"
-
-
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount_open/tests/missing_profiles.fail.sh b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount_open/tests/missing_profiles.fail.sh
index 21c8d7c2f7a0..73b45031cd11 100644
--- a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount_open/tests/missing_profiles.fail.sh
+++ b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount_open/tests/missing_profiles.fail.sh
@@ -8,5 +8,10 @@
 install_dconf_and_gdm_if_needed
 clean_dconf_settings
 
+{{% if product in ['sle15', 'sle16'] %}}
+add_dconf_setting "org/gnome/desktop/media-handling" "automount-open" "false" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+add_dconf_lock "org/gnome/desktop/media-handling" "automount-open" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+{{% else %}}
 add_dconf_setting "org/gnome/desktop/media-handling" "automount-open" "false" "local.d" "00-security-settings"
 add_dconf_lock "org/gnome/desktop/media-handling" "automount-open" "local.d" "00-security-settings"
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_autorun/ansible/shared.yml b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_autorun/ansible/shared.yml
index cb6e011ff7ea..f5349391234d 100644
--- a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_autorun/ansible/shared.yml
+++ b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_autorun/ansible/shared.yml
@@ -1,11 +1,15 @@
-# platform = multi_platform_rhel,multi_platform_fedora,multi_platform_ol,multi_platform_almalinux
+# platform = multi_platform_almalinux,multi_platform_fedora,multi_platform_ol,multi_platform_rhel,multi_platform_sle
 # reboot = false
 # strategy = unknown
 # complexity = low
 # disruption = medium
 - name: "Disable GNOME3 Automounting - autorun-never"
   community.general.ini_file:
+{{% if product in ['sle15', 'sle16'] %}}
+    dest: /etc/dconf/db/{{{ dconf_gdm_dir }}}/00-security-settings
+{{% else %}}
     dest: /etc/dconf/db/local.d/00-security-settings
+{{% endif %}}
     section: org/gnome/desktop/media-handling
     option: autorun-never
     value: "true"
@@ -15,7 +19,11 @@
 
 - name: "Prevent user modification of GNOME3 Automounting - autorun-never"
   ansible.builtin.lineinfile:
+{{% if product in ['sle15', 'sle16'] %}}
+    path: /etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/00-security-settings-lock
+{{% else %}}
     path: /etc/dconf/db/local.d/locks/00-security-settings-lock
+{{% endif %}}
     regexp: '^/org/gnome/desktop/media-handling/autorun-never$'
     line: '/org/gnome/desktop/media-handling/autorun-never'
     create: yes
@@ -24,3 +32,7 @@
 - name: Dconf Update
   ansible.builtin.command: dconf update
   when: result_ini is changed or result_lineinfile is changed
+
+{{% if product in ['sle15', 'sle16'] %}}
+{{{ ansible_enable_dconf_user_profile(profile="gdm", database="gdm") }}}
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_autorun/bash/shared.sh b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_autorun/bash/shared.sh
index a0f809515812..35ce8adc2d9a 100644
--- a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_autorun/bash/shared.sh
+++ b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_autorun/bash/shared.sh
@@ -5,5 +5,11 @@
 {{{ bash_enable_dconf_user_profile(profile="gdm", database="gdm") }}}
 {{% endif %}}
 
+{{% if product in ['sle15', 'sle16'] %}}
+{{{ bash_enable_dconf_user_profile(profile="gdm", database="gdm") }}}
+{{{ bash_dconf_settings("org/gnome/desktop/media-handling", "autorun-never", "true", dconf_gdm_dir, "00-security-settings", rule_id=rule_id) }}}
+{{{ bash_dconf_lock("org/gnome/desktop/media-handling", "autorun-never", dconf_gdm_dir, "00-security-settings-lock") }}}
+{{% else %}}
 {{{ bash_dconf_settings("org/gnome/desktop/media-handling", "autorun-never", "true", "local.d", "00-security-settings", rule_id=rule_id) }}}
 {{{ bash_dconf_lock("org/gnome/desktop/media-handling", "autorun-never", "local.d", "00-security-settings-lock") }}}
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_autorun/oval/shared.xml b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_autorun/oval/shared.xml
index 976ac69ae151..e7f55bf5d43f 100644
--- a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_autorun/oval/shared.xml
+++ b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_autorun/oval/shared.xml
@@ -20,7 +20,11 @@
   </ind:textfilecontent54_test>
   <ind:textfilecontent54_object id="obj_dconf_gnome_disable_autorun"
   version="1">
+{{% if product in ['sle15', 'sle16'] %}}
+    <ind:path>/etc/dconf/db/{{{ dconf_gdm_dir }}}/</ind:path>
+{{% else %}}
     <ind:path>/etc/dconf/db/local.d/</ind:path>
+{{% endif %}}
     <ind:filename operation="pattern match">^.*$</ind:filename>
     <ind:pattern operation="pattern match">^\[org/gnome/desktop/media-handling\]([^\n]*\n+)+?autorun-never=true$</ind:pattern>
     <ind:instance datatype="int">1</ind:instance>
@@ -33,7 +37,11 @@
   </ind:textfilecontent54_test>
   <ind:textfilecontent54_object id="obj_prevent_user_gnome_autorun"
   version="1">
+{{% if product in ['sle15', 'sle16'] %}}
+    <ind:path>/etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/</ind:path>
+{{% else %}}
     <ind:path>/etc/dconf/db/local.d/locks/</ind:path>
+{{% endif %}}
     <ind:filename operation="pattern match">^.*$</ind:filename>
     <ind:pattern operation="pattern match">^/org/gnome/desktop/media-handling/autorun-never$</ind:pattern>
     <ind:instance datatype="int">1</ind:instance>
diff --git a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_autorun/rule.yml b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_autorun/rule.yml
index 6bd3a7d1c5cf..55fc533a287c 100644
--- a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_autorun/rule.yml
+++ b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_autorun/rule.yml
@@ -7,12 +7,12 @@ description: |-
     The system's default desktop environment, GNOME3, will mount
     devices and removable media (such as DVDs, CDs and USB flash drives) whenever
     they are inserted into the system. To disable autorun-never within GNOME3, add or set
-    <tt>autorun-never</tt> to <tt>true</tt> in <tt>/etc/dconf/db/local.d/00-security-settings</tt>.
+    <tt>autorun-never</tt> to <tt>true</tt> in <tt>/etc/dconf/db/{{{ dconf_gdm_dir }}}/00-security-settings</tt>.
     For example:
     <pre>[org/gnome/desktop/media-handling]
     autorun-never=true</pre>
     Once the settings have been added, add a lock to
-    <tt>/etc/dconf/db/local.d/locks/00-security-settings-lock</tt> to prevent user modification.
+    <tt>/etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/00-security-settings-lock</tt> to prevent user modification.
     For example:
     <pre>/org/gnome/desktop/media-handling/autorun-never</pre>
     After the settings have been set, run <tt>dconf update</tt>.
@@ -51,7 +51,7 @@ ocil: |-
     <pre>$ gsettings get org.gnome.desktop.media-handling autorun-never</pre>
     If properly configured, the output for <tt>autorun-never</tt>should be <tt>true</tt>.
     To ensure that users cannot enable autorun in GNOME3, run the following:
-    <pre>$ grep 'autorun-never' /etc/dconf/db/local.d/locks/*</pre>
+    <pre>$ grep 'autorun-never' /etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/*</pre>
     If properly configured, the output for <tt>autorun-never</tt> should be <tt>/org/gnome/desktop/media-handling/autorun-never</tt>
 
 
diff --git a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_autorun/tests/correct_value.pass.sh b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_autorun/tests/correct_value.pass.sh
index 4dc8e1444d97..35a93fead2eb 100644
--- a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_autorun/tests/correct_value.pass.sh
+++ b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_autorun/tests/correct_value.pass.sh
@@ -8,5 +8,10 @@ install_dconf_and_gdm_if_needed
 clean_dconf_settings
 
 add_dconf_profiles
+{{% if product in ['sle15', 'sle16'] %}}
+add_dconf_setting "org/gnome/desktop/media-handling" "autorun-never" "true" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+add_dconf_lock "org/gnome/desktop/media-handling" "autorun-never" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+{{% else %}}
 add_dconf_setting "org/gnome/desktop/media-handling" "autorun-never" "true" "local.d" "00-security-settings"
 add_dconf_lock "org/gnome/desktop/media-handling" "autorun-never" "local.d" "00-security-settings"
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_autorun/tests/missing_profiles.fail.sh b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_autorun/tests/missing_profiles.fail.sh
index 85dd9a330681..a7991c7f5383 100644
--- a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_autorun/tests/missing_profiles.fail.sh
+++ b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_autorun/tests/missing_profiles.fail.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-# platform = multi_platform_ubuntu
+# platform = multi_platform_sle,multi_platform_ubuntu
 # packages = gdm,dconf
 # profiles = xccdf_org.ssgproject.content_profile_stig
 
@@ -8,5 +8,10 @@
 install_dconf_and_gdm_if_needed
 clean_dconf_settings
 
+{{% if product in ['sle15', 'sle16'] %}}
+add_dconf_setting "org/gnome/desktop/media-handling" "autorun-never" "true" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+add_dconf_lock "org/gnome/desktop/media-handling" "autorun-never" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+{{% else %}}
 add_dconf_setting "org/gnome/desktop/media-handling" "autorun-never" "true" "local.d" "00-security-settings"
 add_dconf_lock "org/gnome/desktop/media-handling" "autorun-never" "local.d" "00-security-settings"
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_credential_prompt/ansible/shared.yml b/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_credential_prompt/ansible/shared.yml
index d11221f62506..708b572f31e7 100644
--- a/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_credential_prompt/ansible/shared.yml
+++ b/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_credential_prompt/ansible/shared.yml
@@ -5,7 +5,11 @@
 # disruption = medium
 - name: "Require Credential Prompting for Remote Access in GNOME3"
   community.general.ini_file:
+{{% if product in ['sle15', 'sle16'] %}}
+    dest: /etc/dconf/db/{{{ dconf_gdm_dir }}}/00-security-settings
+{{% else %}}
     dest: /etc/dconf/db/local.d/00-security-settings
+{{% endif %}}
     section: org/gnome/Vino
     option: authentication-methods
     value: "['vnc']"
@@ -15,7 +19,11 @@
 
 - name: "Prevent user modification of GNOME3 Credential Prompting for Remote Access"
   ansible.builtin.lineinfile:
+{{% if product in ['sle15', 'sle16'] %}}
+    path: /etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/00-security-settings-lock
+{{% else %}}
     path: /etc/dconf/db/local.d/locks/00-security-settings-lock
+{{% endif %}}
     regexp: '^/org/gnome/Vino/authentication-methods$'
     line: '/org/gnome/Vino/authentication-methods'
     create: yes
@@ -24,3 +32,7 @@
 - name: Dconf Update
   ansible.builtin.command: dconf update
   when: result_ini is changed or result_lineinfile is changed
+
+{{% if product in ['sle15', 'sle16'] %}}
+{{{ ansible_enable_dconf_user_profile(profile="gdm", database="gdm") }}}
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_credential_prompt/bash/shared.sh b/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_credential_prompt/bash/shared.sh
index 872cc4bad130..f42aab8bc6a3 100644
--- a/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_credential_prompt/bash/shared.sh
+++ b/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_credential_prompt/bash/shared.sh
@@ -1,5 +1,10 @@
 # platform = multi_platform_all
 
-
+{{% if product in ['sle15', 'sle16'] %}}
+{{{ bash_enable_dconf_user_profile(profile="gdm", database="gdm") }}}
+{{{ bash_dconf_settings("org/gnome/Vino", "authentication-methods", "['vnc']", dconf_gdm_dir, "00-security-settings", rule_id=rule_id) }}}
+{{{ bash_dconf_lock("org/gnome/Vino", "authentication-methods", dconf_gdm_dir, "00-security-settings-lock") }}}
+{{% else %}}
 {{{ bash_dconf_settings("org/gnome/Vino", "authentication-methods", "['vnc']", "local.d", "00-security-settings", rule_id=rule_id) }}}
 {{{ bash_dconf_lock("org/gnome/Vino", "authentication-methods", "local.d", "00-security-settings-lock") }}}
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_credential_prompt/oval/shared.xml b/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_credential_prompt/oval/shared.xml
index c92bd856aaa2..d62647da25f0 100644
--- a/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_credential_prompt/oval/shared.xml
+++ b/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_credential_prompt/oval/shared.xml
@@ -18,7 +18,11 @@
   </ind:textfilecontent54_test>
   <ind:textfilecontent54_object id="obj_configure_remote_access_creds"
   version="1">
+{{% if product in ['sle15', 'sle16'] %}}
+    <ind:path>/etc/dconf/db/{{{ dconf_gdm_dir }}}/</ind:path>
+{{% else %}}
     <ind:path>/etc/dconf/db/local.d/</ind:path>
+{{% endif %}}
     <ind:filename operation="pattern match">^.*$</ind:filename>
     <ind:pattern operation="pattern match">^\[org/gnome/Vino\]([^\n]*\n+)+?authentication-methods=\['vnc'\]$</ind:pattern>
     <ind:instance datatype="int">1</ind:instance>
@@ -31,7 +35,11 @@
   </ind:textfilecontent54_test>
   <ind:textfilecontent54_object id="obj_prevent_user_remote_access_creds"
   version="1">
+{{% if product in ['sle15', 'sle16'] %}}
+    <ind:path>/etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/</ind:path>
+{{% else %}}
     <ind:path>/etc/dconf/db/local.d/locks/</ind:path>
+{{% endif %}}
     <ind:filename operation="pattern match">^.*$</ind:filename>
     <ind:pattern operation="pattern match">^/org/gnome/Vino/authentication-methods$</ind:pattern>
     <ind:instance datatype="int">1</ind:instance>
diff --git a/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_credential_prompt/rule.yml b/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_credential_prompt/rule.yml
index 9cd95350def2..8da990470a3b 100644
--- a/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_credential_prompt/rule.yml
+++ b/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_credential_prompt/rule.yml
@@ -7,12 +7,12 @@ description: |-
     By default, <tt>GNOME</tt> does not require credentials when using <tt>Vino</tt> for
     remote access. To configure the system to require remote credentials, add or set
     <tt>authentication-methods</tt> to <tt>['vnc']</tt> in
-    <tt>/etc/dconf/db/local.d/00-security-settings</tt>. For example:
+    <tt>/etc/dconf/db/{{{ dconf_gdm_dir }}}/00-security-settings</tt>. For example:
     <pre>[org/gnome/Vino]
     authentication-methods=['vnc']
     </pre>
     Once the settings have been added, add a lock to
-    <tt>/etc/dconf/db/local.d/locks/00-security-settings-lock</tt> to prevent user modification.
+    <tt>/etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/00-security-settings-lock</tt> to prevent user modification.
     For example:
     <pre>/org/gnome/Vino/authentication-methods</pre>
     After the settings have been set, run <tt>dconf update</tt>.
@@ -41,7 +41,6 @@ ocil: |-
     <pre>$ gsettings get org.gnome.Vino authentication-methods</pre>
     If properly configured, the output should be <tt>false</tt>.
     To ensure that users cannot disable credentials for remote access, run the following:
-    <pre>$ grep authentication-methods /etc/dconf/db/local.d/locks/*</pre>
+    <pre>$ grep authentication-methods /etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/*</pre>
     If properly configured, the output should be
     <tt>/org/gnome/Vino/authentication-methods</tt>
-
diff --git a/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_encryption/ansible/shared.yml b/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_encryption/ansible/shared.yml
index f57ab3f7d511..e7a50cac89f6 100644
--- a/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_encryption/ansible/shared.yml
+++ b/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_encryption/ansible/shared.yml
@@ -5,7 +5,11 @@
 # disruption = medium
 - name: "Require Encryption for Remote Access in GNOME3"
   community.general.ini_file:
+{{% if product in ['sle15', 'sle16'] %}}
+    dest: /etc/dconf/db/{{{ dconf_gdm_dir }}}/00-security-settings
+{{% else %}}
     dest: /etc/dconf/db/local.d/00-security-settings
+{{% endif %}}
     section: org/gnome/Vino
     option: require-encryption
     value: "true"
@@ -15,7 +19,11 @@
 
 - name: "Prevent user modification of GNOME3 Encryption for Remote Access"
   ansible.builtin.lineinfile:
+{{% if product in ['sle15', 'sle16'] %}}
+    path: /etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/00-security-settings-lock
+{{% else %}}
     path: /etc/dconf/db/local.d/locks/00-security-settings-lock
+{{% endif %}}
     regexp: '^/org/gnome/Vino/require-encryption$'
     line: '/org/gnome/Vino/require-encryption'
     create: yes
@@ -24,3 +32,7 @@
 - name: Dconf Update
   ansible.builtin.command: dconf update
   when: result_ini is changed or result_lineinfile is changed
+
+{{% if product in ['sle15', 'sle16'] %}}
+{{{ ansible_enable_dconf_user_profile(profile="gdm", database="gdm") }}}
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_encryption/bash/shared.sh b/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_encryption/bash/shared.sh
index 51d61baf3068..944c461e081b 100644
--- a/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_encryption/bash/shared.sh
+++ b/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_encryption/bash/shared.sh
@@ -1,5 +1,10 @@
 # platform = multi_platform_all
 
-
+{{% if product in ['sle15', 'sle16'] %}}
+{{{ bash_enable_dconf_user_profile(profile="gdm", database="gdm") }}}
+{{{ bash_dconf_settings("org/gnome/Vino", "require-encryption", "true", dconf_gdm_dir, "00-security-settings", rule_id=rule_id) }}}
+{{{ bash_dconf_lock("org/gnome/Vino", "require-encryption", dconf_gdm_dir, "00-security-settings-lock") }}}
+{{% else %}}
 {{{ bash_dconf_settings("org/gnome/Vino", "require-encryption", "true", "local.d", "00-security-settings", rule_id=rule_id) }}}
 {{{ bash_dconf_lock("org/gnome/Vino", "require-encryption", "local.d", "00-security-settings-lock") }}}
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_encryption/oval/shared.xml b/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_encryption/oval/shared.xml
index 39ba68f4f149..fe360890aa8e 100644
--- a/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_encryption/oval/shared.xml
+++ b/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_encryption/oval/shared.xml
@@ -18,7 +18,11 @@
   </ind:textfilecontent54_test>
   <ind:textfilecontent54_object id="obj_configure_remote_access_encryption"
   version="1">
+{{% if product in ['sle15', 'sle16'] %}}
+    <ind:path>/etc/dconf/db/{{{ dconf_gdm_dir }}}/</ind:path>
+{{% else %}}
     <ind:path>/etc/dconf/db/local.d/</ind:path>
+{{% endif %}}
     <ind:filename operation="pattern match">^.*$</ind:filename>
     <ind:pattern operation="pattern match">^\[org/gnome/Vino\]([^\n]*\n+)+?require-encryption=true$</ind:pattern>
     <ind:instance datatype="int">1</ind:instance>
@@ -31,7 +35,11 @@
   </ind:textfilecontent54_test>
   <ind:textfilecontent54_object id="obj_prevent_user_remote_access_encryption"
   version="1">
+{{% if product in ['sle15', 'sle16'] %}}
+    <ind:path>/etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/</ind:path>
+{{% else %}}
     <ind:path>/etc/dconf/db/local.d/locks/</ind:path>
+{{% endif %}}
     <ind:filename operation="pattern match">^.*$</ind:filename>
     <ind:pattern operation="pattern match">^/org/gnome/Vino/require-encryption$</ind:pattern>
     <ind:instance datatype="int">1</ind:instance>
diff --git a/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_encryption/rule.yml b/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_encryption/rule.yml
index 12a8f4499433..1e3bb3e00e86 100644
--- a/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_encryption/rule.yml
+++ b/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_encryption/rule.yml
@@ -7,12 +7,12 @@ description: |-
     By default, <tt>GNOME</tt> requires encryption when using <tt>Vino</tt> for remote access.
     To prevent remote access encryption from being disabled, add or set
     <tt>require-encryption</tt> to <tt>true</tt> in
-    <tt>/etc/dconf/db/local.d/00-security-settings</tt>. For example:
+    <tt>/etc/dconf/db/{{{ dconf_gdm_dir }}}/00-security-settings</tt>. For example:
     <pre>[org/gnome/Vino]
     require-encryption=true
     </pre>
     Once the settings have been added, add a lock to
-    <tt>/etc/dconf/db/local.d/locks/00-security-settings-lock</tt> to prevent user modification.
+    <tt>/etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/00-security-settings-lock</tt> to prevent user modification.
     For example:
     <pre>/org/gnome/Vino/require-encryption</pre>
     After the settings have been set, run <tt>dconf update</tt>.
@@ -49,7 +49,6 @@ ocil: |-
     <pre>$ gsettings get org.gnome.Vino require-encrpytion</pre>
     If properly configured, the output should be <tt>true</tt>.
     To ensure that users cannot disable encrypted remote connections, run the following:
-    <pre>$ grep require-encryption /etc/dconf/db/local.d/locks/*</pre>
+    <pre>$ grep require-encryption /etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/*</pre>
     If properly configured, the output should be
     <tt>/org/gnome/Vino/require-encryption</tt>
-
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/ansible/shared.yml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/ansible/shared.yml
index dbccc97c5176..02b8b0430c14 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/ansible/shared.yml
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/ansible/shared.yml
@@ -5,7 +5,11 @@
 # disruption = medium
 - name: "Enable GNOME3 Screensaver Idle Activation"
   community.general.ini_file:
+{{% if product in ['sle15', 'sle16'] %}}
+    dest: "/etc/dconf/db/{{{ dconf_gdm_dir }}}/00-security-settings"
+{{% else %}}
     dest: "/etc/dconf/db/local.d/00-security-settings"
+{{% endif %}}
     section: "org/gnome/desktop/screensaver"
     option: "idle-activation-enabled"
     value: "true"
@@ -15,7 +19,11 @@
 
 - name: "Prevent user modification of GNOME idle-activation-enabled"
   ansible.builtin.lineinfile:
+{{% if product in ['sle15', 'sle16'] %}}
+    path: /etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/00-security-settings-lock
+{{% else %}}
     path: /etc/dconf/db/local.d/locks/00-security-settings-lock
+{{% endif %}}
     regexp: '^/org/gnome/desktop/screensaver/idle-activation-enabled$'
     line: '/org/gnome/desktop/screensaver/idle-activation-enabled'
     create: yes
@@ -24,3 +32,7 @@
 - name: Dconf Update
   ansible.builtin.command: dconf update
   when: result_ini is changed or result_lineinfile is changed
+
+{{% if product in ['sle15', 'sle16'] %}}
+{{{ ansible_enable_dconf_user_profile(profile="gdm", database="gdm") }}}
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/bash/shared.sh b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/bash/shared.sh
index 571567335263..31ee53228b9b 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/bash/shared.sh
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/bash/shared.sh
@@ -1,5 +1,10 @@
 # platform = multi_platform_all
 
-
+{{% if product in ['sle15', 'sle16'] %}}
+{{{ bash_enable_dconf_user_profile(profile="gdm", database="gdm") }}}
+{{{ bash_dconf_settings("org/gnome/desktop/screensaver", "idle-activation-enabled", "true", dconf_gdm_dir , "00-security-settings", rule_id=rule_id) }}}
+{{{ bash_dconf_lock("org/gnome/desktop/screensaver", "idle-activation-enabled", dconf_gdm_dir, "00-security-settings-lock") }}}
+{{% else %}}
 {{{ bash_dconf_settings("org/gnome/desktop/screensaver", "idle-activation-enabled", "true", "local.d", "00-security-settings", rule_id=rule_id) }}}
 {{{ bash_dconf_lock("org/gnome/desktop/screensaver", "idle-activation-enabled", "local.d", "00-security-settings-lock") }}}
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/oval/shared.xml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/oval/shared.xml
index 849b09080d2a..7ed4cdd67f84 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/oval/shared.xml
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/oval/shared.xml
@@ -18,7 +18,11 @@
   </ind:textfilecontent54_test>
   <ind:textfilecontent54_object id="obj_screensaver_idle_activation_enabled"
   version="1">
+{{% if product in ['sle15', 'sle16'] %}}
+    <ind:path>/etc/dconf/db/{{{ dconf_gdm_dir }}}/</ind:path>
+{{% else %}}
     <ind:path>/etc/dconf/db/local.d/</ind:path>
+{{% endif %}}
     <ind:filename operation="pattern match">^.*$</ind:filename>
     <ind:pattern operation="pattern match">^\[org/gnome/desktop/screensaver\]([^\n]*\n+)+?idle-activation-enabled=true$</ind:pattern>
     <ind:instance datatype="int">1</ind:instance>
@@ -31,7 +35,11 @@
   </ind:textfilecontent54_test>
   <ind:textfilecontent54_object id="obj_prevent_user_change_idle_activation_enabled"
   version="1">
+{{% if product in ['sle15', 'sle16'] %}}
+    <ind:path>/etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/</ind:path>
+{{% else %}}
     <ind:path>/etc/dconf/db/local.d/locks/</ind:path>
+{{% endif %}}
     <ind:filename operation="pattern match">^.*$</ind:filename>
     <ind:pattern operation="pattern match">^/org/gnome/desktop/screensaver/idle-activation-enabled$</ind:pattern>
     <ind:instance datatype="int">1</ind:instance>
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/rule.yml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/rule.yml
index c2d48df41ac4..dfc2874675d3 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/rule.yml
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/rule.yml
@@ -6,11 +6,11 @@ title: 'Enable GNOME3 Screensaver Idle Activation'
 description: |-
     To activate the screensaver in the GNOME3 desktop after a period of inactivity,
     add or set <tt>idle-activation-enabled</tt> to <tt>true</tt> in
-    <tt>/etc/dconf/db/local.d/00-security-settings</tt>. For example:
+    <tt>/etc/dconf/db/{{{ dconf_gdm_dir }}}/00-security-settings</tt>. For example:
     <pre>[org/gnome/desktop/screensaver]
     idle-activation-enabled=true</pre>
     Once the setting has been added, add a lock to
-    <tt>/etc/dconf/db/local.d/locks/00-security-settings-lock</tt> to prevent user modification.
+    <tt>/etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/00-security-settings-lock</tt> to prevent user modification.
     For example:
     <pre>/org/gnome/desktop/screensaver/idle-activation-enabled</pre>
     After the settings have been set, run <tt>dconf update</tt>.
@@ -59,6 +59,5 @@ ocil: |-
     <pre>$ gsettings get org.gnome.desktop.screensaver idle-activation-enabled</pre>
     If properly configured, the output should be <tt>true</tt>.
     To ensure that users cannot disable the screensaver idle inactivity setting, run the following:
-    <pre>$ grep idle-activation-enabled /etc/dconf/db/local.d/locks/*</pre>
+    <pre>$ grep idle-activation-enabled /etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/*</pre>
     If properly configured, the output should be <tt>/org/gnome/desktop/screensaver/idle-activation-enabled</tt>
-
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/tests/comment.fail.sh b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/tests/comment.fail.sh
index e8ff2ac2955c..5d205dd8d052 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/tests/comment.fail.sh
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/tests/comment.fail.sh
@@ -4,7 +4,14 @@
 . $SHARED/dconf_test_functions.sh
 
 clean_dconf_settings
+{{% if product in ['sle15', 'sle16'] %}}
+add_dconf_setting "org/gnome/desktop/screensaver" "#idle-activation-enabled" "true" \
+                  "{{{ dconf_gdm_dir }}}" "00-security-settings"
+add_dconf_lock "org/gnome/desktop/screensaver" "idle-activation-enabled" "{{{ dconf_gdm_dir }}}" \
+               "00-security-settings-lock"
+{{% else %}}
 add_dconf_setting "org/gnome/desktop/screensaver" "#idle-activation-enabled" "true" \
                   "local.d" "00-security-settings"
 add_dconf_lock "org/gnome/desktop/screensaver" "idle-activation-enabled" "local.d" \
                "00-security-settings-lock"
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/tests/correct_value.pass.sh b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/tests/correct_value.pass.sh
index 3d7cfa54c6d2..17cd6d979b5c 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/tests/correct_value.pass.sh
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/tests/correct_value.pass.sh
@@ -4,7 +4,15 @@
 . $SHARED/dconf_test_functions.sh
 
 clean_dconf_settings
+{{% if product in ['sle15', 'sle16'] %}}
+add_dconf_profiles
+add_dconf_setting "org/gnome/desktop/screensaver" "idle-activation-enabled" "true" \
+                  "{{{ dconf_gdm_dir }}}" "00-security-settings"
+add_dconf_lock "org/gnome/desktop/screensaver" "idle-activation-enabled" "{{{ dconf_gdm_dir }}}" \
+               "00-security-settings-lock"
+{{% else %}}
 add_dconf_setting "org/gnome/desktop/screensaver" "idle-activation-enabled" "true" \
                   "local.d" "00-security-settings"
 add_dconf_lock "org/gnome/desktop/screensaver" "idle-activation-enabled" "local.d" \
                "00-security-settings-lock"
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/tests/missing_lock.fail.sh b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/tests/missing_lock.fail.sh
index 5cfef8b62db8..831bb770d9b5 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/tests/missing_lock.fail.sh
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/tests/missing_lock.fail.sh
@@ -4,5 +4,10 @@
 . $SHARED/dconf_test_functions.sh
 
 clean_dconf_settings
+{{% if product in ['sle15', 'sle16'] %}}
+add_dconf_setting "org/gnome/desktop/screensaver" "idle-activation-enabled" "true" \
+                  "{{{ dconf_gdm_dir }}}" "00-security-settings"
+{{% else %}}
 add_dconf_setting "org/gnome/desktop/screensaver" "idle-activation-enabled" "true" \
                   "local.d" "00-security-settings"
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/tests/wrong_value.fail.sh b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/tests/wrong_value.fail.sh
index 76b9088c85f5..88027535c535 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/tests/wrong_value.fail.sh
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/tests/wrong_value.fail.sh
@@ -4,7 +4,14 @@
 . $SHARED/dconf_test_functions.sh
 
 clean_dconf_settings
+{{% if product in ['sle15', 'sle16'] %}}
+add_dconf_setting "org/gnome/desktop/screensaver" "idle-activation-enabled" "false" \
+                  "{{{ dconf_gdm_dir }}}" "00-security-settings"
+add_dconf_lock "org/gnome/desktop/screensaver" "idle-activation-enabled" "{{{ dconf_gdm_dir }}}" \
+               "00-security-settings-lock"
+{{% else %}}
 add_dconf_setting "org/gnome/desktop/screensaver" "idle-activation-enabled" "false" \
                   "local.d" "00-security-settings"
 add_dconf_lock "org/gnome/desktop/screensaver" "idle-activation-enabled" "local.d" \
                "00-security-settings-lock"
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/ansible/shared.yml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/ansible/shared.yml
index 78360c115b16..a1e43dcd17e6 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/ansible/shared.yml
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/ansible/shared.yml
@@ -7,7 +7,11 @@
 
 - name: "Set GNOME3 Screensaver Inactivity Timeout"
   community.general.ini_file:
+{{% if product in ['sle15', 'sle16'] %}}
+    dest: "/etc/dconf/db/{{{ dconf_gdm_dir }}}/00-security-settings"
+{{% else %}}
     dest: "/etc/dconf/db/local.d/00-security-settings"
+{{% endif %}}
     section: "org/gnome/desktop/session"
     option: idle-delay
     value: "uint32 {{ inactivity_timeout_value }}"
@@ -15,6 +19,28 @@
     no_extra_spaces: yes
   register: result_ini
 
+{{% if 'ubuntu' in product or product in ["sle15", "sle16"] %}}
+- name: "Prevent user modification of GNOME Screensaver Inactivity Timeout"
+  ansible.builtin.lineinfile:
+{{% if product in ['sle15', 'sle16'] %}}
+    path: /etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/00-security-settings-lock
+{{% else %}}
+    path: /etc/dconf/db/local.d/locks/00-security-settings-lock
+{{% endif %}}
+    regexp: '^/org/gnome/desktop/session/idle-delay$'
+    line: '/org/gnome/desktop/session/idle-delay'
+    create: yes
+  register: result_lineinfile
+{{% endif %}}
+
 - name: Dconf Update
   ansible.builtin.command: dconf update
+{{% if 'ubuntu' in product or product in ["sle15", "sle16"] %}}
+  when: result_ini is changed or result_lineinfile is changed
+{{% else %}}
   when: result_ini is changed
+{{% endif %}}
+
+{{% if product in ['sle15', 'sle16'] %}}
+{{{ ansible_enable_dconf_user_profile(profile="gdm", database="gdm") }}}
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/bash/shared.sh b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/bash/shared.sh
index de0854c03f83..48fbd7b92677 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/bash/shared.sh
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/bash/shared.sh
@@ -6,6 +6,15 @@
 {{{ bash_dconf_lock("org/gnome/desktop/session", "idle-delay", "local.d", "00-security-settings-lock") }}}
 {{% endif %}}
 
+{{% if product in ['sle15', 'sle16'] %}}
+{{{ bash_enable_dconf_user_profile(profile="gdm", database="gdm") }}}
+{{{ bash_dconf_lock("org/gnome/desktop/session", "idle-delay", dconf_gdm_dir, "00-security-settings-lock") }}}
+{{% endif %}}
+
 {{{ bash_instantiate_variables("inactivity_timeout_value") }}}
 
+{{% if product in ['sle15', 'sle16'] %}}
+{{{ bash_dconf_settings("org/gnome/desktop/session", "idle-delay", "uint32 ${inactivity_timeout_value}", dconf_gdm_dir, "00-security-settings", rule_id=rule_id) }}}
+{{% else %}}
 {{{ bash_dconf_settings("org/gnome/desktop/session", "idle-delay", "uint32 ${inactivity_timeout_value}", "local.d", "00-security-settings", rule_id=rule_id) }}}
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/oval/shared.xml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/oval/shared.xml
index a4173903a2c2..5108cdd21a2a 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/oval/shared.xml
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/oval/shared.xml
@@ -7,7 +7,7 @@
         <extend_definition comment="dconf user profile exists" definition_ref="enable_dconf_user_profile" />
         <criterion comment="idle delay has been configured" test_ref="test_screensaver_idle_delay" />
         <criterion comment="idle delay is set correctly" test_ref="test_screensaver_idle_delay_setting" />
-        {{% if 'ubuntu' in product %}}
+        {{% if 'ubuntu' in product or product in ["sle15", "sle16"] %}}
         <criterion comment="screensaver idle delay setting is locked" test_ref="test_screensaver_idle_delay_locked" />
         {{% endif %}}
       </criteria>
@@ -21,7 +21,11 @@
   </ind:textfilecontent54_test>
   <ind:textfilecontent54_object id="obj_screensaver_idle_delay"
   version="1">
+{{% if product in ['sle15', 'sle16'] %}}
+    <ind:path>/etc/dconf/db/{{{ dconf_gdm_dir }}}/</ind:path>
+{{% else %}}
     <ind:path>/etc/dconf/db/local.d/</ind:path>
+{{% endif %}}
     <ind:filename operation="pattern match">^.*$</ind:filename>
     <!-- GSettings expects unsigned integer when setting 'idle-delay' per:
          https://bugzilla.redhat.com/show_bug.cgi?id=1141779#c3
@@ -39,8 +43,12 @@
     <ind:state state_ref="state_screensaver_idle_delay_setting_not_zero" />
   </ind:textfilecontent54_test>
   <ind:textfilecontent54_object id="obj_screensaver_idle_delay_setting"
-  version="1"> 
+  version="1">
+{{% if product in ['sle15', 'sle16'] %}}
+    <ind:path>/etc/dconf/db/{{{ dconf_gdm_dir }}}/</ind:path>
+{{% else %}}
     <ind:path>/etc/dconf/db/local.d/</ind:path>
+{{% endif %}}
     <ind:filename operation="pattern match">^.*$</ind:filename>
     <!-- GSettings expects unsigned integer when setting 'idle-delay' per:
          https://bugzilla.redhat.com/show_bug.cgi?id=1141779#c3
@@ -60,7 +68,7 @@
   <external_variable comment="inactivity timeout variable" datatype="int"
   id="inactivity_timeout_value" version="1" />
 
-{{% if 'ubuntu' in product %}}
+{{% if 'ubuntu' in product or product in ["sle15", "sle16"] %}}
   <ind:textfilecontent54_test check="all" check_existence="all_exist"
       comment="screensaver idle delay setting is locked"
       id="test_screensaver_idle_delay_locked" version="1">
@@ -68,7 +76,11 @@
   </ind:textfilecontent54_test>
   <ind:textfilecontent54_object id="obj_screensaver_idle_delay_locked"
   version="1">
+{{% if product in ['sle15', 'sle16'] %}}
+    <ind:path>/etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/</ind:path>
+{{% else %}}
     <ind:path>/etc/dconf/db/local.d/locks/</ind:path>
+{{% endif %}}
     <ind:filename operation="pattern match">^.*$</ind:filename>
     <ind:pattern operation="pattern match">^/org/gnome/desktop/session/idle-delay$</ind:pattern>
     <ind:instance datatype="int">1</ind:instance>
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/policy/stig/shared.yml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/policy/stig/shared.yml
index 7b7bf0160181..f36b8f38b7cb 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/policy/stig/shared.yml
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/policy/stig/shared.yml
@@ -20,9 +20,9 @@ fixtext: |-
 
     Create a database to contain the system-wide screensaver settings (if it does not already exist) with the following command:
 
-    $ sudo touch /etc/dconf/db/local.d/00-screensaver
+    $ sudo touch /etc/dconf/db/{{{ dconf_gdm_dir }}}/00-screensaver
 
-    Edit /etc/dconf/db/local.d/00-screensaver and add or update the following lines:
+    Edit /etc/dconf/db/{{{ dconf_gdm_dir }}}/00-screensaver and add or update the following lines:
 
     [org/gnome/desktop/session]
     # Set the lock time out to 900 seconds before the session is considered idle
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/rule.yml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/rule.yml
index 7eceaf8c48ce..6689d0bd7a5a 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/rule.yml
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/rule.yml
@@ -5,11 +5,11 @@ title: 'Set GNOME3 Screensaver Inactivity Timeout'
 
 description: |-
     The idle time-out value for inactivity in the GNOME3 desktop is configured via the <tt>idle-delay</tt>
-    setting must be set under an appropriate configuration file(s) in the <tt>/etc/dconf/db/local.d</tt> directory
-    and locked in <tt>/etc/dconf/db/local.d/locks</tt> directory to prevent user modification.
+    setting must be set under an appropriate configuration file(s) in the <tt>/etc/dconf/db/{{{ dconf_gdm_dir }}}</tt> directory
+    and locked in <tt>/etc/dconf/db/{{{ dconf_gdm_dir }}}/locks</tt> directory to prevent user modification.
     <br /><br />
     For example, to configure the system for a 15 minute delay, add the following to
-    <tt>/etc/dconf/db/local.d/00-security-settings</tt>:
+    <tt>/etc/dconf/db/{{{ dconf_gdm_dir }}}/00-security-settings</tt>:
     <pre>[org/gnome/desktop/session]
     idle-delay=uint32 900</pre>
 
@@ -56,11 +56,10 @@ ocil: |-
     <pre>$ gsettings get org.gnome.desktop.session idle-delay</pre>
     If properly configured, the output should be <tt>'uint32 {{{ xccdf_value("inactivity_timeout_value") }}}'</tt>.
     To ensure that users cannot change the screensaver inactivity timeout setting, run the following:
-    <pre>$ grep idle-delay /etc/dconf/db/local.d/locks/*</pre>
+    <pre>$ grep idle-delay /etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/*</pre>
     If properly configured, the output should be <tt>/org/gnome/desktop/session/idle-delay</tt>
 
 fixtext: |-
     {{{ fixtext_dconf_ini_file("org/gnome/desktop/session", "idle-delay", "uint32 " ~ xccdf_value("inactivity_timeout_value")) }}}
 
 srg_requirement: '{{{ full_name }}} must automatically lock graphical user sessions after 15 minutes of inactivity.'
-
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/tests/comment.fail.sh b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/tests/comment.fail.sh
index e2932554e36b..5e0c633763aa 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/tests/comment.fail.sh
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/tests/comment.fail.sh
@@ -5,8 +5,14 @@
 
 clean_dconf_settings
 add_dconf_profiles
+{{% if product in ['sle15', 'sle16'] %}}
+add_dconf_setting "org/gnome/desktop/session" "#idle-delay" "uint32 900" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+{{% else %}}
 add_dconf_setting "org/gnome/desktop/session" "#idle-delay" "uint32 900" "local.d" "00-security-settings"
+{{% endif %}}
 
 {{% if 'ubuntu' in product %}}
 add_dconf_lock "org/gnome/desktop/session" "idle-delay" "local.d" "00-security-settings"
+{{% elif product in ['sle15', 'sle16'] %}}
+add_dconf_lock "org/gnome/desktop/session" "idle-delay" "{{{ dconf_gdm_dir }}}" "00-security-settings"
 {{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/tests/correct_value.pass.sh b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/tests/correct_value.pass.sh
index b3796ebc3248..6669faeae713 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/tests/correct_value.pass.sh
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/tests/correct_value.pass.sh
@@ -7,8 +7,14 @@
 clean_dconf_settings
 
 add_dconf_profiles
+{{% if product in ['sle15', 'sle16'] %}}
+add_dconf_setting "org/gnome/desktop/session" "idle-delay" "uint32 900" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+{{% else %}}
 add_dconf_setting "org/gnome/desktop/session" "idle-delay" "uint32 900" "local.d" "00-security-settings"
+{{% endif %}}
 
 {{% if 'ubuntu' in product %}}
 add_dconf_lock "org/gnome/desktop/session" "idle-delay" "local.d" "00-security-settings"
+{{% elif product in ['sle15', 'sle16'] %}}
+add_dconf_lock "org/gnome/desktop/session" "idle-delay" "{{{ dconf_gdm_dir }}}" "00-security-settings"
 {{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/tests/correct_value_wrong_db.fail.sh b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/tests/correct_value_wrong_db.fail.sh
index ade75844d249..6f01caf81842 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/tests/correct_value_wrong_db.fail.sh
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/tests/correct_value_wrong_db.fail.sh
@@ -11,4 +11,6 @@ add_dconf_setting "org/gnome/desktop/session" "idle-delay" "uint32 900" "dummy.d
 
 {{% if 'ubuntu' in product %}}
 add_dconf_lock "org/gnome/desktop/session" "idle-delay" "local.d" "00-security-settings"
+{{% elif product in ["sle15", "sle16"] %}}
+add_dconf_lock "org/gnome/desktop/session" "idle-delay" "{{{ dconf_gdm_dir }}}" "00-security-settings"
 {{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/tests/wrong_value.fail.sh b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/tests/wrong_value.fail.sh
index 8fbcb996b7ec..9ba07b3d3fa0 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/tests/wrong_value.fail.sh
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/tests/wrong_value.fail.sh
@@ -6,8 +6,14 @@
 
 clean_dconf_settings
 add_dconf_profiles
+{{% if product in ['sle15', 'sle16'] %}}
+add_dconf_setting "org/gnome/desktop/session" "idle-delay" "uint32 2900" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+{{% else %}}
 add_dconf_setting "org/gnome/desktop/session" "idle-delay" "uint32 2900" "local.d" "00-security-settings"
+{{% endif %}}
 
 {{% if 'ubuntu' in product %}}
 add_dconf_lock "org/gnome/desktop/session" "idle-delay" "local.d" "00-security-settings"
+{{% elif product in ["sle15", "sle16"] %}}
+add_dconf_lock "org/gnome/desktop/session" "idle-delay" "{{{ dconf_gdm_dir }}}" "00-security-settings"
 {{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/tests/zero_value.fail.sh b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/tests/zero_value.fail.sh
index fd90576957b2..f1f163681170 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/tests/zero_value.fail.sh
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/tests/zero_value.fail.sh
@@ -6,8 +6,14 @@
 
 clean_dconf_settings
 add_dconf_profiles
+{{% if product in ["sle15", "sle16"] %}}
+add_dconf_setting "org/gnome/desktop/session" "idle-delay" "uint32 0" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+{{% else %}}
 add_dconf_setting "org/gnome/desktop/session" "idle-delay" "uint32 0" "local.d" "00-security-settings"
+{{% endif %}}
 
 {{% if 'ubuntu' in product %}}
 add_dconf_lock "org/gnome/desktop/session" "idle-delay" "local.d" "00-security-settings"
+{{% elif product in ["sle15", "sle16"] %}}
+add_dconf_lock "org/gnome/desktop/session" "idle-delay" "{{{ dconf_gdm_dir }}}" "00-security-settings"
 {{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/ansible/shared.yml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/ansible/shared.yml
index e8391fd4e5c7..2c98a7d25ae9 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/ansible/shared.yml
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/ansible/shared.yml
@@ -7,7 +7,11 @@
 
 - name: "Set GNOME3 Screensaver Lock Delay After Activation Period"
   community.general.ini_file:
+{{% if product in ['sle15', 'sle16'] %}}
+    dest: "/etc/dconf/db/{{{ dconf_gdm_dir }}}/00-security-settings"
+{{% else %}}
     dest: "/etc/dconf/db/local.d/00-security-settings"
+{{% endif %}}
     section: "org/gnome/desktop/screensaver"
     option: lock-delay
     value: "uint32 {{ var_screensaver_lock_delay }}"
@@ -15,16 +19,24 @@
     no_extra_spaces: yes
   register: result_ini
 
-# apply fix for enable_dconf_user_profile, OVAL checks it
 {{% if product in ['sle15', 'sle16'] %}}
-- name: "Configure GNOME3 DConf User Profile"
+- name: "Prevent user modification of GNOME Screensaver Lock Delay"
   ansible.builtin.lineinfile:
-    dest: "/etc/dconf/profile/gdm"
-    line: "user-db:user\nsystem-db:gdm"
+    path: /etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/00-security-settings-lock
+    regexp: '^/org/gnome/desktop/screensaver/lock-delay$'
+    line: '/org/gnome/desktop/screensaver/lock-delay'
     create: yes
-    state: present
+  register: result_lineinfile
 {{% endif %}}
 
 - name: Dconf Update
   ansible.builtin.command: dconf update
+{{% if product in ['sle15', 'sle16'] %}}
+  when: result_ini is changed or result_lineinfile is changed
+{{% else %}}
   when: result_ini is changed
+{{% endif %}}
+
+{{% if product in ['sle15', 'sle16'] %}}
+{{{ ansible_enable_dconf_user_profile(profile="gdm", database="gdm") }}}
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/bash/shared.sh b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/bash/shared.sh
index 43612b5703d7..ea2d8951f0c3 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/bash/shared.sh
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/bash/shared.sh
@@ -6,11 +6,12 @@
 {{{ bash_dconf_lock("org/gnome/desktop/screensaver", "lock-delay", "local.d", "00-security-settings-lock") }}}
 {{% endif %}}
 
-# apply fix for enable_dconf_user_profile, OVAL checks it
-{{% if product in ['sle15', 'sle16'] %}}
-{{{ bash_enable_dconf_user_profile(profile="gdm", database="gdm") }}}
-{{% endif %}}
-
 {{{ bash_instantiate_variables("var_screensaver_lock_delay") }}}
 
+{{% if product in ['sle15', 'sle16'] %}}
+{{{ bash_enable_dconf_user_profile(profile="gdm", database="gdm") }}}
+{{{ bash_dconf_lock("org/gnome/desktop/screensaver", "lock-delay", dconf_gdm_dir, "00-security-settings-lock") }}}
+{{{ bash_dconf_settings("org/gnome/desktop/screensaver", "lock-delay", "uint32 ${var_screensaver_lock_delay}", dconf_gdm_dir, "00-security-settings", rule_id=rule_id) }}}
+{{% else %}}
 {{{ bash_dconf_settings("org/gnome/desktop/screensaver", "lock-delay", "uint32 ${var_screensaver_lock_delay}", "local.d", "00-security-settings", rule_id=rule_id) }}}
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/oval/shared.xml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/oval/shared.xml
index 6eef845bafad..2262be9e45d7 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/oval/shared.xml
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/oval/shared.xml
@@ -8,7 +8,7 @@
         <extend_definition comment="dconf user profile exists" definition_ref="enable_dconf_user_profile" />
         <criterion comment="screensaver lock delay is configured" test_ref="test_screensaver_lock_delay" />
         <criterion comment="lock delay is set correctly" test_ref="test_screensaver_lock_delay_setting" />
-        {{% if 'ubuntu' in product %}}
+        {{% if 'ubuntu' in product or product in ["sle15", "sle16"] %}}
         <criterion comment="screensaver lock delay setting is locked" test_ref="test_screensaver_lock_delay_locked" />
         {{% endif %}}
       </criteria>
@@ -22,7 +22,11 @@
   </ind:textfilecontent54_test>
   <ind:textfilecontent54_object id="obj_screensaver_lock_delay"
   version="1">
+{{% if product in ['sle15', 'sle16'] %}}
+    <ind:path>/etc/dconf/db/{{{ dconf_gdm_dir }}}/</ind:path>
+{{% else %}}
     <ind:path>/etc/dconf/db/local.d/</ind:path>
+{{% endif %}}
     <ind:filename operation="pattern match">^.*$</ind:filename>
     <!-- GSettings expects unsigned integer when setting 'lock-delay' per:
          https://bugzilla.redhat.com/show_bug.cgi?id=1141779#c3
@@ -39,7 +43,11 @@
   </ind:textfilecontent54_test>
   <ind:textfilecontent54_object id="obj_screensaver_lock_delay_setting"
   version="1">
+{{% if product in ['sle15', 'sle16'] %}}
+    <ind:path>/etc/dconf/db/{{{ dconf_gdm_dir }}}/</ind:path>
+{{% else %}}
     <ind:path>/etc/dconf/db/local.d/</ind:path>
+{{% endif %}}
     <ind:filename operation="pattern match">^.*$</ind:filename>
     <!-- GSettings expects unsigned integer when setting 'lock-delay' per:
          https://bugzilla.redhat.com/show_bug.cgi?id=1141779#c3
@@ -55,14 +63,18 @@
   <external_variable comment="screensaver lock delay variable" datatype="int"
   id="var_screensaver_lock_delay" version="1" />
 
-{{% if 'ubuntu' in product %}}
+{{% if 'ubuntu' in product or product in ["sle15", "sle16"] %}}
   <ind:textfilecontent54_test check="all" check_existence="all_exist"
       comment="screensaver lock delay setting is locked"
       id="test_screensaver_lock_delay_locked" version="1">
     <ind:object object_ref="obj_screensaver_lock_delay_locked" />
   </ind:textfilecontent54_test>
   <ind:textfilecontent54_object id="obj_screensaver_lock_delay_locked" version="1">
+{{% if product in ['sle15', 'sle16'] %}}
+    <ind:path>/etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/</ind:path>
+{{% else %}}
     <ind:path>/etc/dconf/db/local.d/locks/</ind:path>
+{{% endif %}}
     <ind:filename operation="pattern match">^.*$</ind:filename>
     <ind:pattern operation="pattern match">^/org/gnome/desktop/screensaver/lock-delay$</ind:pattern>
     <ind:instance datatype="int">1</ind:instance>
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/policy/stig/shared.yml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/policy/stig/shared.yml
index 741936e68063..89f30d897c8f 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/policy/stig/shared.yml
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/policy/stig/shared.yml
@@ -20,9 +20,9 @@ fixtext: |-
 
     Create a database to contain the system-wide screensaver settings (if it does not already exist) with the following command:
 
-    Note: The example below is using the database "local" for the system, so if the system is using another database in "/etc/dconf/profile/user", the file should be created under the appropriate subdirectory.
+    Note: The example below is using the database "{{{ dconf_gdm_dir }}}" for the system, so if the system is using another database in "/etc/dconf/profile/user", the file should be created under the appropriate subdirectory.
 
-    $ sudo touch /etc/dconf/db/local.d/00-screensaver
+    $ sudo touch /etc/dconf/db/{{{ dconf_gdm_dir }}}/00-screensaver
 
     [org/gnome/desktop/screensaver]
     lock-delay=uint32 5
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/rule.yml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/rule.yml
index 8c3d9b000416..f056cb276aff 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/rule.yml
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/rule.yml
@@ -6,7 +6,7 @@ title: 'Set GNOME3 Screensaver Lock Delay After Activation Period'
 description: |-
     To activate the locking delay of the screensaver in the GNOME3 desktop when
     the screensaver is activated, add or set <tt>lock-delay</tt> to <tt>uint32 {{{ xccdf_value("var_screensaver_lock_delay") }}}</tt> in
-    <tt>/etc/dconf/db/local.d/00-security-settings</tt>. For example:
+    <tt>/etc/dconf/db/{{{ dconf_gdm_dir }}}/00-security-settings</tt>. For example:
     <pre>[org/gnome/desktop/screensaver]
     lock-delay=uint32 {{{ xccdf_value("var_screensaver_lock_delay") }}}
     </pre>
@@ -50,4 +50,3 @@ fixtext: |-
     {{{ fixtext_dconf_ini_file("org/gnome/desktop/screensaver/lock-delay", "lock-delay", xccdf_value("var_screensaver_lock_delay")) }}}
 
 srg_requirement: '{{{ full_name }}} must initiate a session lock for graphical user interfaces when the screensaver is activated.'
-
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/tests/comment.fail.sh b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/tests/comment.fail.sh
index eecddf1b9d68..91506eef020e 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/tests/comment.fail.sh
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/tests/comment.fail.sh
@@ -5,8 +5,14 @@
 
 clean_dconf_settings
 add_dconf_profiles
+{{% if product in ['sle15', 'sle16'] %}}
+add_dconf_setting "org/gnome/desktop/screensaver" "#lock-delay" "uint32 5" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+{{% else %}}
 add_dconf_setting "org/gnome/desktop/screensaver" "#lock-delay" "uint32 5" "local.d" "00-security-settings"
+{{% endif %}}
 
 {{% if 'ubuntu' in product %}}
 add_dconf_lock "org/gnome/desktop/screensaver" "lock-delay" "local.d" "00-security-settings"
+{{% elif product in ['sle15', 'sle16'] %}}
+add_dconf_lock "org/gnome/desktop/screensaver" "lock-delay" "{{{ dconf_gdm_dir }}}" "00-security-settings"
 {{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/tests/correct_value.pass.sh b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/tests/correct_value.pass.sh
index da0acbdc0e8d..0d2d78c07a5c 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/tests/correct_value.pass.sh
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/tests/correct_value.pass.sh
@@ -7,8 +7,14 @@
 clean_dconf_settings
 
 add_dconf_profiles
+{{% if product in ['sle15', 'sle16'] %}}
+add_dconf_setting "org/gnome/desktop/screensaver" "lock-delay" "uint32 5" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+{{% else %}}
 add_dconf_setting "org/gnome/desktop/screensaver" "lock-delay" "uint32 5" "local.d" "00-security-settings"
+{{% endif %}}
 
 {{% if 'ubuntu' in product %}}
 add_dconf_lock "org/gnome/desktop/screensaver" "lock-delay" "local.d" "00-security-settings"
+{{% elif product in ['sle15', 'sle16'] %}}
+add_dconf_lock "org/gnome/desktop/screensaver" "lock-delay" "{{{ dconf_gdm_dir }}}" "00-security-settings"
 {{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/tests/correct_value_wrong_db.fail.sh b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/tests/correct_value_wrong_db.fail.sh
index 631861913830..28a2f1b08eaf 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/tests/correct_value_wrong_db.fail.sh
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/tests/correct_value_wrong_db.fail.sh
@@ -10,4 +10,6 @@ add_dconf_setting "org/gnome/desktop/screensaver" "lock-delay" "uint32 5" "dummy
 
 {{% if 'ubuntu' in product %}}
 add_dconf_lock "org/gnome/desktop/screensaver" "lock-delay" "local.d" "00-security-settings"
+{{% elif product in ['sle15', 'sle16'] %}}
+add_dconf_lock "org/gnome/desktop/screensaver" "lock-delay" "{{{ dconf_gdm_dir }}}" "00-security-settings"
 {{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/tests/missing_profiles.fail.sh b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/tests/missing_profiles.fail.sh
index c42150d3e513..b1e396ef0fcc 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/tests/missing_profiles.fail.sh
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/tests/missing_profiles.fail.sh
@@ -7,5 +7,10 @@
 
 clean_dconf_settings
 
+{{% if product in ['sle15', 'sle16'] %}}
+add_dconf_setting "org/gnome/desktop/screensaver" "lock-delay" "uint32 5" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+add_dconf_lock "org/gnome/desktop/screensaver" "lock-delay" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+{{% else %}}
 add_dconf_setting "org/gnome/desktop/screensaver" "lock-delay" "uint32 5" "local.d" "00-security-settings"
 add_dconf_lock "org/gnome/desktop/screensaver" "lock-delay" "local.d" "00-security-settings"
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/tests/setting_not_there.fail.sh b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/tests/setting_not_there.fail.sh
index fb80ab1957f8..82d7c77d7d7a 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/tests/setting_not_there.fail.sh
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/tests/setting_not_there.fail.sh
@@ -8,4 +8,6 @@ clean_dconf_settings
 
 {{% if 'ubuntu' in product %}}
 add_dconf_lock "org/gnome/desktop/screensaver" "lock-delay" "local.d" "00-security-settings"
+{{% elif product in ['sle15', 'sle16'] %}}
+add_dconf_lock "org/gnome/desktop/screensaver" "lock-delay" "{{{ dconf_gdm_dir }}}" "00-security-settings"
 {{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/tests/wrong_value.fail.sh b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/tests/wrong_value.fail.sh
index a35461b30473..bc5deb4f7640 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/tests/wrong_value.fail.sh
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/tests/wrong_value.fail.sh
@@ -6,8 +6,14 @@
 
 clean_dconf_settings
 add_dconf_profiles
+{{% if product in ['sle15', 'sle16'] %}}
+add_dconf_setting "org/gnome/desktop/screensaver" "lock-delay" "uint32 100" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+{{% else %}}
 add_dconf_setting "org/gnome/desktop/screensaver" "lock-delay" "uint32 100" "local.d" "00-security-settings"
+{{% endif %}}
 
 {{% if 'ubuntu' in product %}}
 add_dconf_lock "org/gnome/desktop/screensaver" "lock-delay" "local.d" "00-security-settings"
+{{% elif product in ['sle15', 'sle16'] %}}
+add_dconf_lock "org/gnome/desktop/screensaver" "lock-delay" "{{{ dconf_gdm_dir }}}" "00-security-settings"
 {{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/ansible/shared.yml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/ansible/shared.yml
index 1ec387f21571..596989ef71fa 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/ansible/shared.yml
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/ansible/shared.yml
@@ -26,7 +26,7 @@
 
 - name: "{{{ rule_title }}} - Enable GNOME3 Screensaver Lock After Idle Period"
   community.general.ini_file:
-    dest: "/etc/dconf/db/local.d/00-security-settings"
+    dest: "/etc/dconf/db/{{{ dconf_gdm_dir }}}/00-security-settings"
     section: "org/gnome/desktop/lockdown"
     option: disable-lock-screen
     value: "false"
@@ -37,7 +37,7 @@
 
 - name: "{{{ rule_title }}} - Prevent user modification of GNOME disable-lock-screen"
   ansible.builtin.lineinfile:
-    path: /etc/dconf/db/local.d/locks/00-security-settings-lock
+    path: /etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/00-security-settings-lock
     regexp: '^/org/gnome/desktop/lockdown/disable-lock-screen$'
     line: '/org/gnome/desktop/lockdown/disable-lock-screen'
     create: yes
@@ -67,3 +67,7 @@
   when:
     - ansible_distribution == 'SLES'
     - (lockdown_config is changed or lockdown_lock is changed)
+
+{{% if product in ['sle15', 'sle16'] %}}
+{{{ ansible_enable_dconf_user_profile(profile="gdm", database="gdm") }}}
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/bash/shared.sh b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/bash/shared.sh
index 6f69921eed10..b1cbfc4a048f 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/bash/shared.sh
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/bash/shared.sh
@@ -6,9 +6,10 @@
 {{% endif %}}
 
 {{% if 'sle' in product %}}
+{{{ bash_enable_dconf_user_profile(profile="gdm", database="gdm") }}}
 gsettings set org.gnome.desktop.lockdown disable-lock-screen false
-{{{ bash_dconf_settings("org/gnome/desktop/lockdown", "disable-lock-screen", "false", "local.d", "00-security-settings", rule_id=rule_id) }}}
-{{{ bash_dconf_lock("org/gnome/desktop/lockdown", "disable-lock-screen", "local.d", "00-security-settings-lock") }}}
+{{{ bash_dconf_settings("org/gnome/desktop/lockdown", "disable-lock-screen", "false", dconf_gdm_dir, "00-security-settings", rule_id=rule_id) }}}
+{{{ bash_dconf_lock("org/gnome/desktop/lockdown", "disable-lock-screen", dconf_gdm_dir, "00-security-settings-lock") }}}
 {{% else %}}
 {{{ bash_dconf_settings("org/gnome/desktop/screensaver", "lock-enabled", "true", "local.d", "00-security-settings", rule_id=rule_id) }}}
 {{{ bash_dconf_lock("org/gnome/desktop/screensaver", "lock-enabled", "local.d", "00-security-settings-lock") }}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/oval/shared.xml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/oval/shared.xml
index 0ea882c9ccbc..a577396eea33 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/oval/shared.xml
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/oval/shared.xml
@@ -18,11 +18,13 @@
   </ind:textfilecontent54_test>
   <ind:textfilecontent54_object id="obj_screensaver_lock_enabled"
   version="1">
-    <ind:path>/etc/dconf/db/local.d/</ind:path>
+{{% if product in ['sle12', 'sle15', 'sle16'] %}}
+    <ind:path>/etc/dconf/db/{{{ dconf_gdm_dir }}}/</ind:path>
     <ind:filename operation="pattern match">^.*$</ind:filename>
-{{% if product in ['sle12','sle15'] %}}
     <ind:pattern operation="pattern match">^\[org/gnome/desktop/lockdown\]([^\n]*\n+)+?disable-lock-screen=false$</ind:pattern>
 {{% else %}}
+    <ind:path>/etc/dconf/db/local.d/</ind:path>
+    <ind:filename operation="pattern match">^.*$</ind:filename>
     <ind:pattern operation="pattern match">^\[org/gnome/desktop/screensaver\]([^\n]*\n+)+?lock-enabled=true$</ind:pattern>
 {{% endif %}}
     <ind:instance datatype="int">1</ind:instance>
@@ -35,11 +37,13 @@
   </ind:textfilecontent54_test>
   <ind:textfilecontent54_object id="obj_prevent_user_screensaver_lock"
   version="1">
-    <ind:path>/etc/dconf/db/local.d/locks/</ind:path>
+{{% if product in ['sle12', 'sle15', 'sle16'] %}}
+    <ind:path>/etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/</ind:path>
     <ind:filename operation="pattern match">^.*$</ind:filename>
-{{% if product in ['sle12','sle15'] %}}
     <ind:pattern operation="pattern match">^/org/gnome/desktop/lockdown/disable-lock-screen$</ind:pattern>
 {{% else %}}
+    <ind:path>/etc/dconf/db/local.d/locks/</ind:path>
+    <ind:filename operation="pattern match">^.*$</ind:filename>
     <ind:pattern operation="pattern match">^/org/gnome/desktop/screensaver/lock-enabled$</ind:pattern>
 {{% endif %}}
     <ind:instance datatype="int">1</ind:instance>
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/policy/stig/shared.yml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/policy/stig/shared.yml
index 67cfb664c5a7..16e0a00da038 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/policy/stig/shared.yml
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/policy/stig/shared.yml
@@ -24,9 +24,9 @@ fixtext: |-
 
     Create a database to contain the systemwide screensaver settings (if it does not already exist) with the following command:
 
-    Note: The example below is using the database "local" for the system. If the system is using another database in "/etc/dconf/profile/user", the file should be created under the appropriate subdirectory.
+    Note: The example below is using the database "{{{ dconf_gdm_dir }}}" for the system. If the system is using another database in "/etc/dconf/profile/user", the file should be created under the appropriate subdirectory.
 
-    $ sudo touch /etc/dconf/db/local.d/locks/session
+    $ sudo touch /etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/session
 
     Add the following setting to prevent nonprivileged users from modifying it:
 
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/rule.yml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/rule.yml
index 7ba4dfea377c..52cd9f02e1d1 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/rule.yml
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/rule.yml
@@ -13,12 +13,12 @@ description: |-
     {{% else %}}
     To activate locking of the screensaver in the GNOME3 desktop when it is activated,
     add or set <tt>lock-enabled</tt> to <tt>true</tt> in
-    <tt>/etc/dconf/db/local.d/00-security-settings</tt>. For example:
+    <tt>/etc/dconf/db/{{{ dconf_gdm_dir }}}/00-security-settings</tt>. For example:
     <pre>[org/gnome/desktop/screensaver]
     lock-enabled=true
     </pre>
     Once the settings have been added, add a lock to
-    <tt>/etc/dconf/db/local.d/locks/00-security-settings-lock</tt> to prevent user modification.
+    <tt>/etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/00-security-settings-lock</tt> to prevent user modification.
     For example:
     <pre>/org/gnome/desktop/screensaver/lock-enabled</pre>
     After the settings have been set, run <tt>dconf update</tt>.
@@ -71,7 +71,7 @@ ocil: |-
     <pre>$ gsettings get org.gnome.desktop.screensaver lock-enabled</pre>
     If properly configured, the output should be <tt>true</tt>.
     To ensure that users cannot change how long until the screensaver locks, run the following:
-    <pre>$ grep lock-enabled /etc/dconf/db/local.d/locks/*</pre>
+    <pre>$ grep lock-enabled /etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/*</pre>
     If properly configured, the output for <tt>lock-enabled</tt> should be <tt>/org/gnome/desktop/screensaver/lock-enabled</tt>
     {{% endif %}}
 
@@ -80,4 +80,3 @@ fixtext: |-
 
 srg_requirement: |-
     {{{ full_name }}} must enable a user session lock until that user re-establishes access using established identification and authentication procedures for graphical user sessions.
-
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/tests/comment.fail.sh b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/tests/comment.fail.sh
index 1af588e1acfe..71bf01f44d5a 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/tests/comment.fail.sh
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/tests/comment.fail.sh
@@ -7,9 +7,9 @@ clean_dconf_settings
 add_dconf_profiles
 
 {{% if 'sle' in product %}}
-add_dconf_setting "org/gnome/desktop/lockdown", "disable-lock-screen", "true", "local.d", "00-security-settings"
-add_dconf_lock "org/gnome/desktop/lockdown", "disable-lock-screen", "local.d", "00-security-settings-lock"
+add_dconf_setting "org/gnome/desktop/lockdown" "#disable-lock-screen" "false" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+add_dconf_lock "org/gnome/desktop/lockdown" "disable-lock-screen" "{{{ dconf_gdm_dir }}}" "00-security-settings-lock"
 {{% else %}}
-add_dconf_setting "org/gnome/desktop/screensaver", "#lock-enabled", "true", "local.d", "00-security-settings"
-add_dconf_lock "org/gnome/desktop/screensaver", "lock-enabled", "local.d", "00-security-settings"
+add_dconf_setting "org/gnome/desktop/screensaver" "#lock-enabled" "true" "local.d" "00-security-settings"
+add_dconf_lock "org/gnome/desktop/screensaver" "lock-enabled" "local.d" "00-security-settings"
 {{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/tests/correct_value.pass.sh b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/tests/correct_value.pass.sh
index 2318b3ac3f13..4dfbde66f382 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/tests/correct_value.pass.sh
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/tests/correct_value.pass.sh
@@ -7,8 +7,8 @@ clean_dconf_settings
 add_dconf_profiles
 
 {{% if 'sle' in product %}}
-add_dconf_settings "org/gnome/desktop/lockdown", "disable-lock-screen", "false", "local.d", "00-security-settings"
-add_dconf_lock "org/gnome/desktop/lockdown", "disable-lock-screen", "local.d", "00-security-settings-lock"
+add_dconf_setting "org/gnome/desktop/lockdown" "disable-lock-screen" "false" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+add_dconf_lock "org/gnome/desktop/lockdown" "disable-lock-screen" "{{{ dconf_gdm_dir }}}" "00-security-settings-lock"
 {{% else %}}
 add_dconf_setting "org/gnome/desktop/screensaver" "lock-enabled" "true" "local.d" "00-security-settings"
 add_dconf_lock "org/gnome/desktop/screensaver" "lock-enabled" "local.d" "00-security-settings"
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/tests/correct_value_unlocked.fail.sh b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/tests/correct_value_unlocked.fail.sh
index 3e4c4c6a9642..c0993a206d03 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/tests/correct_value_unlocked.fail.sh
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/tests/correct_value_unlocked.fail.sh
@@ -7,7 +7,7 @@ clean_dconf_settings
 add_dconf_profiles
 
 {{% if 'sle' in product %}}
-add_dconf_settings "org/gnome/desktop/lockdown", "disable-lock-screen", "false", "local.d", "00-security-settings"
+add_dconf_setting "org/gnome/desktop/lockdown" "disable-lock-screen" "false" "{{{ dconf_gdm_dir }}}" "00-security-settings"
 {{% else %}}
 add_dconf_setting "org/gnome/desktop/screensaver" "lock-enabled" "true" "local.d" "00-security-settings"
 {{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/tests/correct_value_wrong_db.fail.sh b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/tests/correct_value_wrong_db.fail.sh
index ed706e42f5ed..af49dcf086ef 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/tests/correct_value_wrong_db.fail.sh
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/tests/correct_value_wrong_db.fail.sh
@@ -7,8 +7,8 @@ clean_dconf_settings
 add_dconf_profiles
 
 {{% if 'sle' in product %}}
-add_dconf_settings "org/gnome/desktop/lockdown", "disable-lock-screen", "false", "dummy.d", "00-security-settings"
-add_dconf_lock "org/gnome/desktop/lockdown", "disable-lock-screen", "dummy.d", "00-security-settings-lock"
+add_dconf_setting "org/gnome/desktop/lockdown" "disable-lock-screen" "false" "dummy.d" "00-security-settings"
+add_dconf_lock "org/gnome/desktop/lockdown" "disable-lock-screen" "dummy.d" "00-security-settings-lock"
 {{% else %}}
 add_dconf_setting "org/gnome/desktop/screensaver" "lock-enabled" "true" "dummy.d" "00-security-settings"
 add_dconf_lock "org/gnome/desktop/screensaver" "lock-enabled" "dummy.d" "00-security-settings"
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/tests/wrong_value.fail.sh b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/tests/wrong_value.fail.sh
index 8390dbcafb9b..a27061680661 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/tests/wrong_value.fail.sh
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/tests/wrong_value.fail.sh
@@ -7,9 +7,9 @@ clean_dconf_settings
 add_dconf_profiles
 
 {{% if 'sle' in product %}}
-add_dconf_setting "org/gnome/desktop/lockdown", "disable-lock-screen", "true", "local.d", "00-security-settings"
-add_dconf_lock "org/gnome/desktop/lockdown", "disable-lock-screen", "local.d", "00-security-settings-lock"
+add_dconf_setting "org/gnome/desktop/lockdown" "disable-lock-screen" "true" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+add_dconf_lock "org/gnome/desktop/lockdown" "disable-lock-screen" "{{{ dconf_gdm_dir }}}" "00-security-settings-lock"
 {{% else %}}
-add_dconf_setting "org/gnome/desktop/screensaver", "lock-enabled", "false", "local.d", "00-security-settings"
-add_dconf_lock "org/gnome/desktop/screensaver", "lock-enabled", "local.d", "00-security-settings"
+add_dconf_setting "org/gnome/desktop/screensaver" "lock-enabled" "false" "local.d" "00-security-settings"
+add_dconf_lock "org/gnome/desktop/screensaver" "lock-enabled" "local.d" "00-security-settings"
 {{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/ansible/shared.yml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/ansible/shared.yml
index ae2562a44779..3eb9ca04d3be 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/ansible/shared.yml
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/ansible/shared.yml
@@ -5,7 +5,11 @@
 # disruption = medium
 - name: "Implement Blank Screensaver"
   community.general.ini_file:
+{{% if product in ['sle15', 'sle16'] %}}
+    dest: "/etc/dconf/db/{{{ dconf_gdm_dir }}}/00-security-settings"
+{{% else %}}
     dest: "/etc/dconf/db/local.d/00-security-settings"
+{{% endif %}}
     section: "org/gnome/desktop/screensaver"
     option: picture-uri
     value: string ''
@@ -15,7 +19,11 @@
 
 - name: "Prevent user modification of GNOME picture-uri"
   ansible.builtin.lineinfile:
+{{% if product in ['sle15', 'sle16'] %}}
+    path: /etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/00-security-settings-lock
+{{% else %}}
     path: /etc/dconf/db/local.d/locks/00-security-settings-lock
+{{% endif %}}
     regexp: '^/org/gnome/desktop/screensaver/picture-uri$'
     line: '/org/gnome/desktop/screensaver/picture-uri'
     create: yes
@@ -24,3 +32,7 @@
 - name: Dconf Update
   ansible.builtin.command: dconf update
   when: result_ini is changed or result_lineinfile is changed
+
+{{% if product in ['sle15', 'sle16'] %}}
+{{{ ansible_enable_dconf_user_profile(profile="gdm", database="gdm") }}}
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/bash/shared.sh b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/bash/shared.sh
index ac2ab25018cf..e4d620dd1de3 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/bash/shared.sh
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/bash/shared.sh
@@ -1,5 +1,10 @@
 # platform = multi_platform_all
 
-
+{{% if product in ['sle15', 'sle16'] %}}
+{{{ bash_enable_dconf_user_profile(profile="gdm", database="gdm") }}}
+{{{ bash_dconf_settings("org/gnome/desktop/screensaver", "picture-uri", "string ''", dconf_gdm_dir, "00-security-settings", rule_id=rule_id) }}}
+{{{ bash_dconf_lock("org/gnome/desktop/screensaver", "picture-uri", dconf_gdm_dir, "00-security-settings-lock") }}}
+{{% else %}}
 {{{ bash_dconf_settings("org/gnome/desktop/screensaver", "picture-uri", "string ''", "local.d", "00-security-settings", rule_id=rule_id) }}}
 {{{ bash_dconf_lock("org/gnome/desktop/screensaver", "picture-uri", "local.d", "00-security-settings-lock") }}}
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/oval/shared.xml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/oval/shared.xml
index efecb44de698..fcbf59314639 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/oval/shared.xml
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/oval/shared.xml
@@ -18,7 +18,11 @@
   </ind:textfilecontent54_test>
   <ind:textfilecontent54_object id="obj_screensaver_mode_blank"
   version="1">
+{{% if product in ['sle15', 'sle16'] %}}
+    <ind:path>/etc/dconf/db/{{{ dconf_gdm_dir }}}/</ind:path>
+{{% else %}}
     <ind:path>/etc/dconf/db/local.d/</ind:path>
+{{% endif %}}
     <ind:filename operation="pattern match">^.*$</ind:filename>
     <!-- GSettings expects proper datatype specifier when setting 'picture-uri' per:
          https://bugzilla.redhat.com/show_bug.cgi?id=1141779#c3
@@ -34,7 +38,11 @@
   </ind:textfilecontent54_test>
   <ind:textfilecontent54_object id="obj_prevent_user_screensaver_mode_change"
   version="1">
+{{% if product in ['sle15', 'sle16'] %}}
+    <ind:path>/etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/</ind:path>
+{{% else %}}
     <ind:path>/etc/dconf/db/local.d/locks/</ind:path>
+{{% endif %}}
     <ind:filename operation="pattern match">^.*$</ind:filename>
     <ind:pattern operation="pattern match">^/org/gnome/desktop/screensaver/picture-uri$</ind:pattern>
     <ind:instance datatype="int">1</ind:instance>
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/policy/stig/shared.yml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/policy/stig/shared.yml
index 840f0d76f633..562189e4b2ce 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/policy/stig/shared.yml
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/policy/stig/shared.yml
@@ -4,12 +4,12 @@ srg_requirement: |-
 fixtext: |-
     Configure {{{ full_name }}} to prevent a user from overriding the picture-uri setting for graphical user interfaces.
 
-    In the file "/etc/dconf/db/local.d/00-security-settings", add or update the following lines:
+    In the file "/etc/dconf/db/{{{ dconf_gdm_dir }}}/00-security-settings", add or update the following lines:
 
     [org/gnome/desktop/screensaver]
     picture-uri=''
 
-    Prevent user modification by adding the following line to "/etc/dconf/db/local.d/locks/00-security-settings-lock":
+    Prevent user modification by adding the following line to "/etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/00-security-settings-lock":
 
     /org/gnome/desktop/screensaver/picture-uri
 
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/rule.yml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/rule.yml
index 08105969028c..d333b030f189 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/rule.yml
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/rule.yml
@@ -29,12 +29,12 @@ description: |-
     {{% endif %}}
     To set the screensaver mode in the GNOME3 desktop to a blank screen,
     add or set <tt>picture-uri</tt> to <tt>string ''</tt> in
-    <tt>/etc/dconf/db/local.d/00-security-settings</tt>. For example:
+    <tt>/etc/dconf/db/{{{ dconf_gdm_dir }}}/00-security-settings</tt>. For example:
     <pre>[org/gnome/desktop/screensaver]
     picture-uri=string ''
     </pre>
     Once the settings have been added, add a lock to
-    <tt>/etc/dconf/db/local.d/locks/00-security-settings-lock</tt> to prevent user modification.
+    <tt>/etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/00-security-settings-lock</tt> to prevent user modification.
     For example:
     <pre>/org/gnome/desktop/screensaver/picture-uri</pre>
     After the settings have been set, run <tt>dconf update</tt>.
@@ -76,10 +76,8 @@ ocil: |-
     If properly configured, the output should be <tt>''</tt>.
 
     To ensure that users cannot set the screensaver background, run the following:
-    <pre>$ grep picture-uri /etc/dconf/db/local.d/locks/*</pre>
+    <pre>$ grep picture-uri /etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/*</pre>
     If properly configured, the output should be <tt>/org/gnome/desktop/screensaver/picture-uri</tt>
 
 fixtext: |-
     {{{ fixtext_dconf_ini_file("org/gnome/desktop/screensaver", "picture-uri", "string ''") }}}
-
-
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/tests/comment.fail.sh b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/tests/comment.fail.sh
index 50536e57f4f7..030d50ccc39f 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/tests/comment.fail.sh
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/tests/comment.fail.sh
@@ -4,5 +4,10 @@
 . $SHARED/dconf_test_functions.sh
 
 clean_dconf_settings
+{{% if product in ['sle15', 'sle16'] %}}
+add_dconf_setting "org/gnome/desktop/screensaver" "#picture-uri" "string ''" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+add_dconf_lock "org/gnome/desktop/screensaver" "picture-uri" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+{{% else %}}
 add_dconf_setting "org/gnome/desktop/screensaver" "#picture-uri" "string ''" "local.d" "00-security-settings"
 add_dconf_lock "org/gnome/desktop/screensaver" "picture-uri" "local.d" "00-security-settings"
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/tests/correct_value.pass.sh b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/tests/correct_value.pass.sh
index c91e95395e68..22dd8ce9c146 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/tests/correct_value.pass.sh
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/tests/correct_value.pass.sh
@@ -5,5 +5,11 @@
 . $SHARED/dconf_test_functions.sh
 
 clean_dconf_settings
+add_dconf_profiles
+{{% if product in ['sle15', 'sle16'] %}}
+add_dconf_setting "org/gnome/desktop/screensaver" "picture-uri" "string ''" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+add_dconf_lock "org/gnome/desktop/screensaver" "picture-uri" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+{{% else %}}
 add_dconf_setting "org/gnome/desktop/screensaver" "picture-uri" "string ''" "local.d" "00-security-settings"
 add_dconf_lock "org/gnome/desktop/screensaver" "picture-uri" "local.d" "00-security-settings"
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/tests/correct_value_not_locked.fail.sh b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/tests/correct_value_not_locked.fail.sh
index 13da60b3c1ba..ca26333951c2 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/tests/correct_value_not_locked.fail.sh
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/tests/correct_value_not_locked.fail.sh
@@ -5,4 +5,8 @@
 . $SHARED/dconf_test_functions.sh
 
 clean_dconf_settings
+{{% if product in ['sle15', 'sle16'] %}}
+add_dconf_setting "org/gnome/desktop/screensaver" "picture-uri" "string ''" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+{{% else %}}
 add_dconf_setting "org/gnome/desktop/screensaver" "picture-uri" "string ''" "local.d" "00-security-settings"
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/tests/wrong_value.fail.sh b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/tests/wrong_value.fail.sh
index 100505531147..f611107f57eb 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/tests/wrong_value.fail.sh
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/tests/wrong_value.fail.sh
@@ -5,5 +5,10 @@
 . $SHARED/dconf_test_functions.sh
 
 clean_dconf_settings
+{{% if product in ['sle15', 'sle16'] %}}
+add_dconf_setting "org/gnome/desktop/screensaver" "picture-uri" "string 'somestring'" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+add_dconf_lock "org/gnome/desktop/screensaver" "picture-uri" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+{{% else %}}
 add_dconf_setting "org/gnome/desktop/screensaver" "picture-uri" "string 'somestring'" "local.d" "00-security-settings"
 add_dconf_lock "org/gnome/desktop/screensaver" "picture-uri" "local.d" "00-security-settings"
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_user_locks/ansible/shared.yml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_user_locks/ansible/shared.yml
index dc46618d7922..fc7d586753d7 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_user_locks/ansible/shared.yml
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_user_locks/ansible/shared.yml
@@ -1,11 +1,15 @@
-# platform = multi_platform_rhel,multi_platform_fedora,multi_platform_ol,multi_platform_almalinux
+# platform = multi_platform_almalinux,multi_platform_fedora,multi_platform_ol,multi_platform_rhel,multi_platform_sle
 # reboot = false
 # strategy = unknown
 # complexity = low
 # disruption = medium
 - name: "Prevent user modification of GNOME lock-delay"
   ansible.builtin.lineinfile:
+{{% if product in ['sle15', 'sle16'] %}}
+    path: /etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/00-security-settings-lock
+{{% else %}}
     path: /etc/dconf/db/local.d/locks/00-security-settings-lock
+{{% endif %}}
     regexp: '^/org/gnome/desktop/screensaver/lock-delay$'
     line: '/org/gnome/desktop/screensaver/lock-delay'
     create: yes
@@ -14,3 +18,7 @@
 - name: Dconf Update
   ansible.builtin.command: dconf update
   when: result_lineinfile is changed
+
+{{% if product in ['sle15', 'sle16'] %}}
+{{{ ansible_enable_dconf_user_profile(profile="gdm", database="gdm") }}}
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_user_locks/bash/shared.sh b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_user_locks/bash/shared.sh
index dbe7cc7989ad..b03ed1890806 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_user_locks/bash/shared.sh
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_user_locks/bash/shared.sh
@@ -1,3 +1,8 @@
 # platform = multi_platform_all
 
+{{% if product in ['sle15', 'sle16'] %}}
+{{{ bash_enable_dconf_user_profile(profile="gdm", database="gdm") }}}
+{{{ bash_dconf_lock("org/gnome/desktop/screensaver", "lock-delay", dconf_gdm_dir, "00-security-settings-lock") }}}
+{{% else %}}
 {{{ bash_dconf_lock("org/gnome/desktop/screensaver", "lock-delay", "local.d", "00-security-settings-lock") }}}
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_user_locks/oval/shared.xml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_user_locks/oval/shared.xml
index def9ec108083..f699b71bf5e2 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_user_locks/oval/shared.xml
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_user_locks/oval/shared.xml
@@ -17,7 +17,11 @@
   </ind:textfilecontent54_test>
   <ind:textfilecontent54_object id="obj_user_change_lock_delay_lock"
   version="1">
+{{% if product in ['sle15', 'sle16'] %}}
+    <ind:path>/etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/</ind:path>
+{{% else %}}
     <ind:path>/etc/dconf/db/local.d/locks/</ind:path>
+{{% endif %}}
     <ind:filename operation="pattern match">^.*$</ind:filename>
     <ind:pattern operation="pattern match">^/org/gnome/desktop/screensaver/lock-delay$</ind:pattern>
     <ind:instance datatype="int">1</ind:instance>
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_user_locks/policy/stig/shared.yml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_user_locks/policy/stig/shared.yml
index 1148261cd190..ca69fddf4141 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_user_locks/policy/stig/shared.yml
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_user_locks/policy/stig/shared.yml
@@ -20,9 +20,9 @@ fixtext: |-
 
     Create a database to contain the systemwide screensaver settings (if it does not already exist) with the following command:
 
-    Note: The example below is using the database "local" for the system. If the system is using another database in "/etc/dconf/profile/user", the file should be created under the appropriate subdirectory.
+    Note: The example below is using the database "{{{ dconf_gdm_dir }}}" for the system. If the system is using another database in "/etc/dconf/profile/user", the file should be created under the appropriate subdirectory.
 
-    $ sudo touch /etc/dconf/db/local.d/locks/session
+    $ sudo touch /etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/session
 
     Add the following setting to prevent nonprivileged users from modifying it:
 
@@ -31,5 +31,3 @@ fixtext: |-
     Run the following command to update the database:
 
     $ sudo dconf update
-
-
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_user_locks/rule.yml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_user_locks/rule.yml
index 730d76960d3c..ba32b858449c 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_user_locks/rule.yml
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_user_locks/rule.yml
@@ -6,7 +6,7 @@ title: 'Ensure Users Cannot Change GNOME3 Screensaver Settings'
 description: |-
     If not already configured, ensure that users cannot change GNOME3 screensaver lock settings
     by adding <tt>/org/gnome/desktop/screensaver/lock-delay</tt>
-    to <tt>/etc/dconf/db/local.d/locks/00-security-settings-lock</tt> to prevent user modification.
+    to <tt>/etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/00-security-settings-lock</tt> to prevent user modification.
     For example:
     <pre>/org/gnome/desktop/screensaver/lock-delay</pre>
     After the settings have been set, run <tt>dconf update</tt>.
@@ -43,7 +43,7 @@ ocil_clause: 'GNOME3 session settings are not locked or configured properly'
 
 ocil: |-
     To ensure that users cannot change session idle and lock settings, run the following:
-    <pre>$ grep 'lock-delay' /etc/dconf/db/local.d/locks/*</pre>
+    <pre>$ grep 'lock-delay' /etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/*</pre>
     If properly configured, the output should return:
     <tt>/org/gnome/desktop/screensaver/lock-delay</tt>
 
@@ -51,4 +51,3 @@ fixtext: |-
     {{{ fixtext_dconf_lock_settings("/org/gnome/desktop/screensaver/lock-delay") }}}
 
 srg_requirement: '{{{ full_name }}} must prevent a user from overriding the session lock-delay setting for the graphical user interface.'
-
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_user_locks/tests/correct_value.pass.sh b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_user_locks/tests/correct_value.pass.sh
index ad69666cc4b7..9f38debb5fb8 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_user_locks/tests/correct_value.pass.sh
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_user_locks/tests/correct_value.pass.sh
@@ -4,4 +4,9 @@
 . $SHARED/dconf_test_functions.sh
 
 clean_dconf_settings
+add_dconf_profiles
+{{% if product in ['sle15', 'sle16'] %}}
+add_dconf_lock "org/gnome/desktop/screensaver" "lock-delay" "{{{ dconf_gdm_dir }}}" "00-security-settings"
+{{% else %}}
 add_dconf_lock "org/gnome/desktop/screensaver" "lock-delay" "local.d" "00-security-settings"
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_session_idle_user_locks/ansible/shared.yml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_session_idle_user_locks/ansible/shared.yml
index 96f41f70b77d..0cf4587c0708 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_session_idle_user_locks/ansible/shared.yml
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_session_idle_user_locks/ansible/shared.yml
@@ -6,7 +6,11 @@
 
 - name: "Prevent user modification of GNOME Session idle-delay"
   ansible.builtin.lineinfile:
+{{% if product in ['sle15', 'sle16'] %}}
+    path: /etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/00-security-settings-lock
+{{% else %}}
     path: /etc/dconf/db/local.d/locks/00-security-settings-lock
+{{% endif %}}
     regexp: '^/org/gnome/desktop/session/idle-delay$'
     line: '/org/gnome/desktop/session/idle-delay'
     create: yes
@@ -15,3 +19,7 @@
 - name: Dconf Update
   ansible.builtin.command: dconf update
   when: result_lineinfile is changed
+
+{{% if product in ['sle15', 'sle16'] %}}
+{{{ ansible_enable_dconf_user_profile(profile="gdm", database="gdm") }}}
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_session_idle_user_locks/bash/shared.sh b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_session_idle_user_locks/bash/shared.sh
index ddbf4705e21b..054532bc47b7 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_session_idle_user_locks/bash/shared.sh
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_session_idle_user_locks/bash/shared.sh
@@ -1,4 +1,8 @@
 # platform = multi_platform_all
 
-
+{{% if product in ['sle15', 'sle16'] %}}
+{{{ bash_enable_dconf_user_profile(profile="gdm", database="gdm") }}}
+{{{ bash_dconf_lock("org/gnome/desktop/session", "idle-delay", dconf_gdm_dir, "00-security-settings-lock") }}}
+{{% else %}}
 {{{ bash_dconf_lock("org/gnome/desktop/session", "idle-delay", "local.d", "00-security-settings-lock") }}}
+{{% endif %}}
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_session_idle_user_locks/oval/shared.xml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_session_idle_user_locks/oval/shared.xml
index 4cfe57106d64..3cd1195f1fde 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_session_idle_user_locks/oval/shared.xml
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_session_idle_user_locks/oval/shared.xml
@@ -17,7 +17,11 @@
   </ind:textfilecontent54_test>
   <ind:textfilecontent54_object id="obj_user_change_idle_delay_lock"
   version="1">
+{{% if product in ['sle15', 'sle16'] %}}
+    <ind:path>/etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/</ind:path>
+{{% else %}}
     <ind:path>/etc/dconf/db/local.d/locks/</ind:path>
+{{% endif %}}
     <ind:filename operation="pattern match">^.*$</ind:filename>
     <ind:pattern operation="pattern match">^/org/gnome/desktop/session/idle-delay$</ind:pattern>
     <ind:instance datatype="int">1</ind:instance>
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_session_idle_user_locks/policy/stig/shared.yml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_session_idle_user_locks/policy/stig/shared.yml
index 9a880652c8c2..68ad72a16d52 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_session_idle_user_locks/policy/stig/shared.yml
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_session_idle_user_locks/policy/stig/shared.yml
@@ -22,9 +22,9 @@ fixtext: |-
 
     Create a database to contain the systemwide screensaver settings (if it does not already exist) with the following command:
 
-    Note: The example below is using the database "local" for the system. If the system is using another database in "/etc/dconf/profile/user", the file should be created under the appropriate subdirectory.
+    Note: The example below is using the database "{{{ dconf_gdm_dir }}}" for the system. If the system is using another database in "/etc/dconf/profile/user", the file should be created under the appropriate subdirectory.
 
-    $ sudo touch /etc/dconf/db/local.d/locks/session
+    $ sudo touch /etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/session
 
     Add the following setting to prevent nonprivileged users from modifying it:
 
@@ -33,5 +33,3 @@ fixtext: |-
     Run the following command to update the database:
 
     $ sudo dconf update
-
-
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_session_idle_user_locks/rule.yml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_session_idle_user_locks/rule.yml
index 467ac938fae9..8660efc708bf 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_session_idle_user_locks/rule.yml
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_session_idle_user_locks/rule.yml
@@ -6,7 +6,7 @@ title: 'Ensure Users Cannot Change GNOME3 Session Idle Settings'
 description: |-
     If not already configured, ensure that users cannot change GNOME3 session idle settings
     by adding <tt>/org/gnome/desktop/session/idle-delay</tt>
-    to <tt>/etc/dconf/db/local.d/locks/00-security-settings-lock</tt> to prevent user modification.
+    to <tt>/etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/00-security-settings-lock</tt> to prevent user modification.
     For example:
     <pre>/org/gnome/desktop/session/idle-delay</pre>
     After the settings have been set, run <tt>dconf update</tt>.
@@ -48,7 +48,7 @@ ocil_clause: 'idle-delay is not locked'
 
 ocil: |-
     To ensure that users cannot change session idle and lock settings, run the following:
-    <pre>$ grep 'idle-delay' /etc/dconf/db/local.d/locks/*</pre>
+    <pre>$ grep 'idle-delay' /etc/dconf/db/{{{ dconf_gdm_dir }}}/locks/*</pre>
     If properly configured, the output should return:
     <tt>/org/gnome/desktop/session/idle-delay</tt>
 
@@ -56,4 +56,3 @@ fixtext: |-
     {{{ fixtext_dconf_lock_settings("/org/gnome/desktop/session/idle-delay") }}}
 
 srg_requirement: '{{{ full_name }}} must prevent a user from overriding the session idle-delay setting for the graphical user interface.'
-
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_session_idle_user_locks/tests/comented_value.fail.sh b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_session_idle_user_locks/tests/comented_value.fail.sh
index ac4a3cf56076..8b3c7fb27796 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_session_idle_user_locks/tests/comented_value.fail.sh
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_session_idle_user_locks/tests/comented_value.fail.sh
@@ -4,6 +4,9 @@
 . $SHARED/dconf_test_functions.sh
 
 clean_dconf_settings
+{{% if product in ['sle15', 'sle16'] %}}
+add_dconf_lock "# org/gnome/desktop/session" "idle-delay" "{{{ dconf_gdm_dir }}}" "00-security-settings-lock"
+{{% else %}}
 add_dconf_lock "# org/gnome/desktop/session" "idle-delay" "local.d" "00-security-settings-lock"
-
+{{% endif %}}
 dconf update
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_session_idle_user_locks/tests/correct_value.pass.sh b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_session_idle_user_locks/tests/correct_value.pass.sh
index d5a371196316..1ea2fe380812 100644
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_session_idle_user_locks/tests/correct_value.pass.sh
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_session_idle_user_locks/tests/correct_value.pass.sh
@@ -4,6 +4,10 @@
 . $SHARED/dconf_test_functions.sh
 
 clean_dconf_settings
+add_dconf_profiles
+{{% if product in ['sle15', 'sle16'] %}}
+add_dconf_lock "org/gnome/desktop/session" "idle-delay" "{{{ dconf_gdm_dir }}}" "00-security-settings-lock"
+{{% else %}}
 add_dconf_lock "org/gnome/desktop/session" "idle-delay" "local.d" "00-security-settings-lock"
-
+{{% endif %}}
 dconf update
diff --git a/linux_os/guide/system/software/integrity/certified-vendor/installed_OS_is_vendor_supported/oval/shared.xml b/linux_os/guide/system/software/integrity/certified-vendor/installed_OS_is_vendor_supported/oval/shared.xml
index a028877c12a7..5d86a46a2388 100644
--- a/linux_os/guide/system/software/integrity/certified-vendor/installed_OS_is_vendor_supported/oval/shared.xml
+++ b/linux_os/guide/system/software/integrity/certified-vendor/installed_OS_is_vendor_supported/oval/shared.xml
@@ -16,6 +16,7 @@
       <extend_definition comment="Installed OS is SLE16" definition_ref="installed_OS_is_sle16" />
       <extend_definition comment="Installed OS is SLE Micro 5" definition_ref="installed_OS_is_slmicro5" />
       <extend_definition comment="Installed OS is SLE Micro 6" definition_ref="installed_OS_is_slmicro6" />
+      <extend_definition comment="Installed OS is Ubuntu 22.04" definition_ref="installed_OS_is_ubuntu2204" />
       <extend_definition comment="Installed OS is Ubuntu 24.04" definition_ref="installed_OS_is_ubuntu2404" />
     </criteria>
   </definition>
diff --git a/linux_os/guide/system/software/integrity/crypto/configure_custom_crypto_policy_cis/rule.yml b/linux_os/guide/system/software/integrity/crypto/configure_custom_crypto_policy_cis/rule.yml
index b80f01777048..72387b459f09 100644
--- a/linux_os/guide/system/software/integrity/crypto/configure_custom_crypto_policy_cis/rule.yml
+++ b/linux_os/guide/system/software/integrity/crypto/configure_custom_crypto_policy_cis/rule.yml
@@ -52,7 +52,8 @@ title: Implement Custom Crypto Policy Modules for CIS Benchmark
     {
         "module_name": "NO-RPMSHA1",
         "key": "hash@rpm",
-        "value": "-SHA1"
+        "value": "-SHA1",
+        "scope": "rpm-sequoia"
     },
 ] %}}
 {{% elif product == "rhel10" or product == "fedora" %}}
diff --git a/linux_os/guide/system/software/integrity/crypto/configure_libreswan_crypto_policy/rule.yml b/linux_os/guide/system/software/integrity/crypto/configure_libreswan_crypto_policy/rule.yml
index 8a14c3de7d55..f568fb714d9f 100644
--- a/linux_os/guide/system/software/integrity/crypto/configure_libreswan_crypto_policy/rule.yml
+++ b/linux_os/guide/system/software/integrity/crypto/configure_libreswan_crypto_policy/rule.yml
@@ -67,4 +67,4 @@ fixtext: |-
 
 srg_requirement: '{{{ full_name }}} must implement NIST FIPS-validated cryptography for the following: to provision digital signatures, to generate cryptographic hashes, and to protect data requiring data-at-rest protections in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, and standards.'
 
-platform: system_with_kernel
+platform: system_with_kernel and package[libreswan]
diff --git a/linux_os/guide/system/software/integrity/crypto/configure_ssh_crypto_policy/ansible/shared.yml b/linux_os/guide/system/software/integrity/crypto/configure_ssh_crypto_policy/ansible/shared.yml
index cfbff70b845c..65dccf57d6e7 100644
--- a/linux_os/guide/system/software/integrity/crypto/configure_ssh_crypto_policy/ansible/shared.yml
+++ b/linux_os/guide/system/software/integrity/crypto/configure_ssh_crypto_policy/ansible/shared.yml
@@ -6,6 +6,6 @@
 
 - name: "{{{ rule_title }}}"
   ansible.builtin.lineinfile:
-    dest: /etc/sysconfig/sshd
+    dest: '{{{ sshd_sysconfig_file }}}'
     state: absent
     regexp: (?i)^\s*CRYPTO_POLICY.*$
diff --git a/linux_os/guide/system/software/integrity/crypto/configure_ssh_crypto_policy/bash/shared.sh b/linux_os/guide/system/software/integrity/crypto/configure_ssh_crypto_policy/bash/shared.sh
index 2a04f5ea6bc0..8066e15c264a 100644
--- a/linux_os/guide/system/software/integrity/crypto/configure_ssh_crypto_policy/bash/shared.sh
+++ b/linux_os/guide/system/software/integrity/crypto/configure_ssh_crypto_policy/bash/shared.sh
@@ -1,5 +1,5 @@
 # platform = multi_platform_all
 
-SSH_CONF="/etc/sysconfig/sshd"
+SSH_CONF="{{{ sshd_sysconfig_file }}}"
 
 sed -i "/^\s*CRYPTO_POLICY.*$/Id" $SSH_CONF
diff --git a/linux_os/guide/system/software/integrity/crypto/configure_ssh_crypto_policy/oval/shared.xml b/linux_os/guide/system/software/integrity/crypto/configure_ssh_crypto_policy/oval/shared.xml
index e51181528eb3..0265d746b9ab 100644
--- a/linux_os/guide/system/software/integrity/crypto/configure_ssh_crypto_policy/oval/shared.xml
+++ b/linux_os/guide/system/software/integrity/crypto/configure_ssh_crypto_policy/oval/shared.xml
@@ -1,3 +1,4 @@
+{{%- set sshd_sysconfig = sshd_sysconfig_file -%}}
 <def-group>
   <definition class="compliance" id="configure_ssh_crypto_policy" version="1">
     {{{ oval_metadata("SSH should be configured to use the system-wide crypto policy setting.", rule_title=rule_title) }}}
@@ -14,7 +15,7 @@
   </ind:textfilecontent54_test>
 
   <ind:textfilecontent54_object id="object_configure_ssh_crypto_policy" version="1">
-    <ind:filepath>/etc/sysconfig/sshd</ind:filepath>
+    <ind:filepath>{{{ sshd_sysconfig }}}</ind:filepath>
     <ind:pattern operation="pattern match">^\s*(?i)CRYPTO_POLICY\s*=.*$</ind:pattern>
     <ind:instance datatype="int" operation="greater than or equal">1</ind:instance>
   </ind:textfilecontent54_object>
diff --git a/linux_os/guide/system/software/integrity/crypto/configure_ssh_crypto_policy/rule.yml b/linux_os/guide/system/software/integrity/crypto/configure_ssh_crypto_policy/rule.yml
index 7e722ab1170f..ccd2d2b2b5e5 100644
--- a/linux_os/guide/system/software/integrity/crypto/configure_ssh_crypto_policy/rule.yml
+++ b/linux_os/guide/system/software/integrity/crypto/configure_ssh_crypto_policy/rule.yml
@@ -1,4 +1,5 @@
 documentation_complete: true
+{{% set sshd_sysconfig = sshd_sysconfig_file %}}
 
 
 title: 'Configure SSH to use System Crypto Policy'
@@ -9,7 +10,7 @@ description: |-
     set up to ignore it.
     To check that Crypto Policies settings are configured correctly, ensure that
     the <tt>CRYPTO_POLICY</tt> variable is either commented or not set at all
-    in the <tt>/etc/sysconfig/sshd</tt>.
+    in the <tt>{{{ sshd_sysconfig }}}</tt>.
 
 rationale: |-
     Overriding the system crypto policy makes the behavior of the SSH service violate expectations,
@@ -34,23 +35,23 @@ references:
     srg: SRG-OS-000250-GPOS-00093
     stigid@ol8: OL08-00-010287
 
-ocil_clause: 'the CRYPTO_POLICY variable is set or is not commented out in the /etc/sysconfig/sshd'
+ocil_clause: 'the CRYPTO_POLICY variable is set or is not commented out in {{{ sshd_sysconfig }}}'
 
 ocil: |-
     Verify that sshd isn't configured to ignore the system wide cryptographic policy.
 
     Check that the <tt>CRYPTO_POLICY</tt> variable is not set or is commented out in the
-    <tt>/etc/sysconfig/sshd</tt>.
+    <tt>{{{ sshd_sysconfig }}}</tt>.
 
     Run the following command:
 
-    $ sudo grep CRYPTO_POLICY /etc/sysconfig/sshd
+    $ sudo grep CRYPTO_POLICY {{{ sshd_sysconfig }}}
 
 fixtext: |-
     Configure OpenSSH to not ignore the system wide cryptographic policy.
     Run the following command:
 
-    $ sudo sed -i "/^\s*CRYPTO_POLICY.*$/Id" /etc/sysconfig/sshd
+    $ sudo sed -i "/^\s*CRYPTO_POLICY.*$/Id" {{{ sshd_sysconfig }}}
 
 srg_requirement: |-
     {{{ full_name }}} must implement approved encryption in the OpenSSH package.
diff --git a/linux_os/guide/system/software/integrity/crypto/harden_ssh_client_crypto_policy/bash/shared.sh b/linux_os/guide/system/software/integrity/crypto/harden_ssh_client_crypto_policy/bash/shared.sh
index 61cd291a5c59..bbc1f53d7c8d 100644
--- a/linux_os/guide/system/software/integrity/crypto/harden_ssh_client_crypto_policy/bash/shared.sh
+++ b/linux_os/guide/system/software/integrity/crypto/harden_ssh_client_crypto_policy/bash/shared.sh
@@ -1,7 +1,8 @@
 # platform = multi_platform_all
 
 #the file starts with 02 so that it is loaded before the 05-redhat.conf which activates configuration provided by system vide crypto policy
-file="/etc/ssh/ssh_config.d/02-ospp.conf"
+{{% set sshc_crypto_policy_config = ssh_client_config_dir ~ "/02-ospp.conf" %}}
+file="{{{ sshc_crypto_policy_config }}}"
 echo -e "Match final all\n\
 RekeyLimit 512M 1h\n\
 GSSAPIAuthentication no\n\
diff --git a/linux_os/guide/system/software/integrity/crypto/harden_ssh_client_crypto_policy/oval/shared.xml b/linux_os/guide/system/software/integrity/crypto/harden_ssh_client_crypto_policy/oval/shared.xml
index f1227c5ef087..8700fda2e8be 100644
--- a/linux_os/guide/system/software/integrity/crypto/harden_ssh_client_crypto_policy/oval/shared.xml
+++ b/linux_os/guide/system/software/integrity/crypto/harden_ssh_client_crypto_policy/oval/shared.xml
@@ -4,6 +4,7 @@
 #}}
 {{%- set suffix_id_default_not_overriden = "_default_not_overriden" -%}}
 {{%- set common_prefix_regex = "^Match final all(?:.*\n)*?\s*" -%}}
+{{%- set sshc_crypto_policy_config = ssh_client_config_dir ~ "/02-ospp.conf" -%}}
 
 
 
@@ -131,43 +132,43 @@
 
 <def-group>
   <definition class="compliance" id="harden_ssh_client_crypto_policy" version="3">
-    {{{ oval_metadata("Ensure the ssh client ciphers are configured correctly in /etc/ssh/ssh_config.d/02-ospp.conf", rule_title=rule_title) }}}
+    {{{ oval_metadata("Ensure the ssh client ciphers are configured correctly in " ~ sshc_crypto_policy_config, rule_title=rule_title) }}}
     <criteria comment="SSH client is configured correctly"
     operator="AND">
-        {{{ hsccp_oval_line_in_file_criterion(path='/etc/ssh/ssh_config.d/02-ospp.conf', parameter='Match') }}}
-        {{{ hsccp_oval_line_in_file_criterion(path='/etc/ssh/ssh_config.d/02-ospp.conf', parameter='RekeyLimit') }}}
-        {{{ hsccp_oval_line_in_file_criterion(path='/etc/ssh/ssh_config.d/02-ospp.conf', parameter='GSSAPIAuthentication') }}}
-        {{{ hsccp_oval_line_in_file_criterion(path='/etc/ssh/ssh_config.d/02-ospp.conf', parameter='Ciphers') }}}
-        {{{ hsccp_oval_line_in_file_criterion(path='/etc/ssh/ssh_config.d/02-ospp.conf', parameter='PubkeyAcceptedKeyTypes') }}}
-        {{{ hsccp_oval_line_in_file_criterion(path='/etc/ssh/ssh_config.d/02-ospp.conf', parameter='MACs') }}}
-        {{{ hsccp_oval_line_in_file_criterion(path='/etc/ssh/ssh_config.d/02-ospp.conf', parameter='KexAlgorithms') }}}
+        {{{ hsccp_oval_line_in_file_criterion(path=sshc_crypto_policy_config, parameter='Match') }}}
+        {{{ hsccp_oval_line_in_file_criterion(path=sshc_crypto_policy_config, parameter='RekeyLimit') }}}
+        {{{ hsccp_oval_line_in_file_criterion(path=sshc_crypto_policy_config, parameter='GSSAPIAuthentication') }}}
+        {{{ hsccp_oval_line_in_file_criterion(path=sshc_crypto_policy_config, parameter='Ciphers') }}}
+        {{{ hsccp_oval_line_in_file_criterion(path=sshc_crypto_policy_config, parameter='PubkeyAcceptedKeyTypes') }}}
+        {{{ hsccp_oval_line_in_file_criterion(path=sshc_crypto_policy_config, parameter='MACs') }}}
+        {{{ hsccp_oval_line_in_file_criterion(path=sshc_crypto_policy_config, parameter='KexAlgorithms') }}}
     </criteria>
   </definition>
-  {{{ hsccp_oval_line_in_file_test(path='/etc/ssh/ssh_config.d/02-ospp.conf', parameter='Match', missing_parameter_pass=false) }}}
-  {{{ hsccp_oval_line_in_file_object(path='/etc/ssh/ssh_config.d/02-ospp.conf', parameter='Match', separator_regex='[\s]+', missing_parameter_pass=false) }}}
+  {{{ hsccp_oval_line_in_file_test(path=sshc_crypto_policy_config, parameter='Match', missing_parameter_pass=false) }}}
+  {{{ hsccp_oval_line_in_file_object(path=sshc_crypto_policy_config, parameter='Match', separator_regex='[\s]+', missing_parameter_pass=false) }}}
   {{{ hsccp_oval_line_in_file_state(parameter='Match', value='final all') }}}
 
-  {{{ hsccp_oval_line_in_file_test(path='/etc/ssh/ssh_config.d/02-ospp.conf', parameter='RekeyLimit', missing_parameter_pass=false) }}}
-  {{{ hsccp_oval_line_in_file_object(path='/etc/ssh/ssh_config.d/02-ospp.conf', parameter='RekeyLimit', separator_regex='[\s]+', missing_parameter_pass=false, prefix_regex=common_prefix_regex) }}}
+  {{{ hsccp_oval_line_in_file_test(path=sshc_crypto_policy_config, parameter='RekeyLimit', missing_parameter_pass=false) }}}
+  {{{ hsccp_oval_line_in_file_object(path=sshc_crypto_policy_config, parameter='RekeyLimit', separator_regex='[\s]+', missing_parameter_pass=false, prefix_regex=common_prefix_regex) }}}
   {{{ hsccp_oval_line_in_file_state(parameter='RekeyLimit', value='512M 1h') }}}
 
-  {{{ hsccp_oval_line_in_file_test(path='/etc/ssh/ssh_config.d/02-ospp.conf', parameter='GSSAPIAuthentication', missing_parameter_pass=false) }}}
-  {{{ hsccp_oval_line_in_file_object(path='/etc/ssh/ssh_config.d/02-ospp.conf', parameter='GSSAPIAuthentication', separator_regex='[\s]+', missing_parameter_pass=false, prefix_regex=common_prefix_regex) }}}
+  {{{ hsccp_oval_line_in_file_test(path=sshc_crypto_policy_config, parameter='GSSAPIAuthentication', missing_parameter_pass=false) }}}
+  {{{ hsccp_oval_line_in_file_object(path=sshc_crypto_policy_config, parameter='GSSAPIAuthentication', separator_regex='[\s]+', missing_parameter_pass=false, prefix_regex=common_prefix_regex) }}}
   {{{ hsccp_oval_line_in_file_state(parameter='GSSAPIAuthentication', value='no') }}}
 
-  {{{ hsccp_oval_line_in_file_test(path='/etc/ssh/ssh_config.d/02-ospp.conf', parameter='Ciphers', missing_parameter_pass=false) }}}
-  {{{ hsccp_oval_line_in_file_object(path='/etc/ssh/ssh_config.d/02-ospp.conf', parameter='Ciphers', separator_regex='[\s]+', missing_parameter_pass=false, prefix_regex=common_prefix_regex) }}}
+  {{{ hsccp_oval_line_in_file_test(path=sshc_crypto_policy_config, parameter='Ciphers', missing_parameter_pass=false) }}}
+  {{{ hsccp_oval_line_in_file_object(path=sshc_crypto_policy_config, parameter='Ciphers', separator_regex='[\s]+', missing_parameter_pass=false, prefix_regex=common_prefix_regex) }}}
   {{{ hsccp_oval_line_in_file_state(parameter='Ciphers', value='aes256-ctr,aes256-cbc,aes128-ctr,aes128-cbc') }}}
 
-  {{{ hsccp_oval_line_in_file_test(path='/etc/ssh/ssh_config.d/02-ospp.conf', parameter='PubkeyAcceptedKeyTypes', missing_parameter_pass=false) }}}
-  {{{ hsccp_oval_line_in_file_object(path='/etc/ssh/ssh_config.d/02-ospp.conf', parameter='PubkeyAcceptedKeyTypes', separator_regex='[\s]+', missing_parameter_pass=false, prefix_regex=common_prefix_regex) }}}
+  {{{ hsccp_oval_line_in_file_test(path=sshc_crypto_policy_config, parameter='PubkeyAcceptedKeyTypes', missing_parameter_pass=false) }}}
+  {{{ hsccp_oval_line_in_file_object(path=sshc_crypto_policy_config, parameter='PubkeyAcceptedKeyTypes', separator_regex='[\s]+', missing_parameter_pass=false, prefix_regex=common_prefix_regex) }}}
   {{{ hsccp_oval_line_in_file_state(parameter='PubkeyAcceptedKeyTypes', value='ssh-rsa,ecdsa-sha2-nistp384,ecdsa-sha2-nistp256') }}}
 
-  {{{ hsccp_oval_line_in_file_test(path='/etc/ssh/ssh_config.d/02-ospp.conf', parameter='MACs', missing_parameter_pass=false) }}}
-  {{{ hsccp_oval_line_in_file_object(path='/etc/ssh/ssh_config.d/02-ospp.conf', parameter='MACs', separator_regex='[\s]+', missing_parameter_pass=false, prefix_regex=common_prefix_regex) }}}
+  {{{ hsccp_oval_line_in_file_test(path=sshc_crypto_policy_config, parameter='MACs', missing_parameter_pass=false) }}}
+  {{{ hsccp_oval_line_in_file_object(path=sshc_crypto_policy_config, parameter='MACs', separator_regex='[\s]+', missing_parameter_pass=false, prefix_regex=common_prefix_regex) }}}
   {{{ hsccp_oval_line_in_file_state(parameter='MACs', value='hmac-sha2-512,hmac-sha2-256') }}}
 
-  {{{ hsccp_oval_line_in_file_test(path='/etc/ssh/ssh_config.d/02-ospp.conf', parameter='KexAlgorithms', missing_parameter_pass=false) }}}
-  {{{ hsccp_oval_line_in_file_object(path='/etc/ssh/ssh_config.d/02-ospp.conf', parameter='KexAlgorithms', separator_regex='[\s]+', missing_parameter_pass=false, prefix_regex=common_prefix_regex) }}}
+  {{{ hsccp_oval_line_in_file_test(path=sshc_crypto_policy_config, parameter='KexAlgorithms', missing_parameter_pass=false) }}}
+  {{{ hsccp_oval_line_in_file_object(path=sshc_crypto_policy_config, parameter='KexAlgorithms', separator_regex='[\s]+', missing_parameter_pass=false, prefix_regex=common_prefix_regex) }}}
   {{{ hsccp_oval_line_in_file_state(parameter='KexAlgorithms', value='ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group14-sha1') }}}
 </def-group>
diff --git a/linux_os/guide/system/software/integrity/crypto/harden_ssh_client_crypto_policy/rule.yml b/linux_os/guide/system/software/integrity/crypto/harden_ssh_client_crypto_policy/rule.yml
index 4d50c3ceca6e..2e7e19c30ae8 100644
--- a/linux_os/guide/system/software/integrity/crypto/harden_ssh_client_crypto_policy/rule.yml
+++ b/linux_os/guide/system/software/integrity/crypto/harden_ssh_client_crypto_policy/rule.yml
@@ -1,10 +1,12 @@
 documentation_complete: true
+{{% set sshc_config_dir = ssh_client_config_dir %}}
+{{% set sshc_crypto_policy_config = ssh_client_config_dir ~ "/02-ospp.conf" %}}
 
 title: 'Harden SSH client Crypto Policy'
 
 description: |-
     Crypto Policies are means of enforcing certain cryptographic settings for selected applications including OpenSSH client.
-    To override the system wide crypto policy for Openssh client, place a file in the <tt>/etc/ssh/ssh_config.d/</tt> so that it is loaded before the <tt>05-redhat.conf</tt>. In this case it is file named <tt>02-ospp.conf</tt> containing parameters which need to be changed with respect to the crypto policy.
+    To override the system wide crypto policy for Openssh client, place a file in the <tt>{{{ sshc_config_dir }}}</tt> directory so that it is loaded before the <tt>05-redhat.conf</tt>. In this case it is the <tt>{{{ sshc_crypto_policy_config }}}</tt> file containing parameters which need to be changed with respect to the crypto policy.
     This rule checks if the file exists and if it contains required parameters and values which modify the Crypto Policy.
     During the parsing process, as soon as Openssh client parses some configuration option and its value, it remembers it and ignores any subsequent overrides. The customization mechanism provided by crypto policies appends eventual customizations at the end of the system wide crypto policy. Therefore, if the crypto policy customization overrides some parameter which is already configured in the system wide crypto policy, the SSH client will not honor that customized parameter.
 
@@ -28,7 +30,7 @@ ocil_clause: 'Crypto Policy for OpenSSH Client is not configured according to CC
 
 ocil: |-
     To verify if the OpenSSH Client uses defined Crypto Policy, run:
-    <pre>$ cat /etc/ssh/ssh_config.d/02-ospp.conf</pre>
+    <pre>$ cat {{{ sshc_crypto_policy_config }}}</pre>
     and verify that the line matches
     <pre>Match final all</pre>
     <pre>RekeyLimit 512M 1h</pre>
diff --git a/linux_os/guide/system/software/integrity/fips/fips_custom_stig_sub_policy/rule.yml b/linux_os/guide/system/software/integrity/fips/fips_custom_stig_sub_policy/rule.yml
index 6e77c605a64b..d812375e6e5a 100644
--- a/linux_os/guide/system/software/integrity/fips/fips_custom_stig_sub_policy/rule.yml
+++ b/linux_os/guide/system/software/integrity/fips/fips_custom_stig_sub_policy/rule.yml
@@ -11,6 +11,7 @@ rationale: |-
 severity: medium
 
 identifiers:
+    cce@rhel8: CCE-86493-4
     cce@rhel9: CCE-86570-9
 
 references:
diff --git a/linux_os/guide/system/software/integrity/software-integrity/aide/aide_scan_notification/rule.yml b/linux_os/guide/system/software/integrity/software-integrity/aide/aide_scan_notification/rule.yml
index eb4520986a98..1b959ae04a4a 100644
--- a/linux_os/guide/system/software/integrity/software-integrity/aide/aide_scan_notification/rule.yml
+++ b/linux_os/guide/system/software/integrity/software-integrity/aide/aide_scan_notification/rule.yml
@@ -32,6 +32,7 @@ identifiers:
     cce@rhel10: CCE-90177-7
     cce@sle12: CCE-83048-9
     cce@sle15: CCE-91214-7
+    cce@sle16: CCE-96460-1
     cce@slmicro5: CCE-93722-7
     cce@slmicro6: CCE-94730-9
 
diff --git a/linux_os/guide/system/software/integrity/software-integrity/aide/aide_verify_acls/rule.yml b/linux_os/guide/system/software/integrity/software-integrity/aide/aide_verify_acls/rule.yml
index 0525db7b3921..6563fe6a637b 100644
--- a/linux_os/guide/system/software/integrity/software-integrity/aide/aide_verify_acls/rule.yml
+++ b/linux_os/guide/system/software/integrity/software-integrity/aide/aide_verify_acls/rule.yml
@@ -32,6 +32,7 @@ identifiers:
     cce@rhel10: CCE-89640-7
     cce@sle12: CCE-83150-3
     cce@sle15: CCE-85623-7
+    cce@sle16: CCE-96372-8
     cce@slmicro5: CCE-93742-5
     cce@slmicro6: CCE-95052-7 
 
diff --git a/linux_os/guide/system/software/integrity/software-integrity/aide/aide_verify_ext_attributes/rule.yml b/linux_os/guide/system/software/integrity/software-integrity/aide/aide_verify_ext_attributes/rule.yml
index 1f681250134a..35ed5b595891 100644
--- a/linux_os/guide/system/software/integrity/software-integrity/aide/aide_verify_ext_attributes/rule.yml
+++ b/linux_os/guide/system/software/integrity/software-integrity/aide/aide_verify_ext_attributes/rule.yml
@@ -32,6 +32,7 @@ identifiers:
     cce@rhel10: CCE-89625-8
     cce@sle12: CCE-83151-1
     cce@sle15: CCE-85624-5
+    cce@sle16: CCE-96620-0
     cce@slmicro5: CCE-93743-3
     cce@slmicro6: CCE-95053-5 
 
diff --git a/linux_os/guide/system/software/prefer_64bit_os/rule.yml b/linux_os/guide/system/software/prefer_64bit_os/rule.yml
index 59cf1d282ec8..ae680e70e632 100644
--- a/linux_os/guide/system/software/prefer_64bit_os/rule.yml
+++ b/linux_os/guide/system/software/prefer_64bit_os/rule.yml
@@ -21,6 +21,7 @@ identifiers:
   cce@rhel10: CCE-90578-6
   cce@sle12: CCE-91504-1
   cce@sle15: CCE-91195-8
+  cce@sle16: CCE-96208-4
 
 ocil_clause: the installed operating system is 32-bit but the CPU supports operation in 64-bit
 
diff --git a/linux_os/guide/system/software/sudo/directory_groupowner_etc_sudoersd/rule.yml b/linux_os/guide/system/software/sudo/directory_groupowner_etc_sudoersd/rule.yml
index 7f1dc1ddb307..ca8efcd5e8b9 100644
--- a/linux_os/guide/system/software/sudo/directory_groupowner_etc_sudoersd/rule.yml
+++ b/linux_os/guide/system/software/sudo/directory_groupowner_etc_sudoersd/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhel9: CCE-86351-4
     cce@rhel10: CCE-87598-9
     cce@sle15: CCE-92503-2
+    cce@sle16: CCE-96050-0
 
 ocil_clause: '{{{ ocil_clause_file_group_owner(file="/etc/sudoers.d", group="root") }}}'
 
diff --git a/linux_os/guide/system/software/sudo/directory_owner_etc_sudoersd/rule.yml b/linux_os/guide/system/software/sudo/directory_owner_etc_sudoersd/rule.yml
index 3183986c551a..1a87f6ee8fca 100644
--- a/linux_os/guide/system/software/sudo/directory_owner_etc_sudoersd/rule.yml
+++ b/linux_os/guide/system/software/sudo/directory_owner_etc_sudoersd/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhel9: CCE-86357-1
     cce@rhel10: CCE-89589-6
     cce@sle15: CCE-92512-3
+    cce@sle16: CCE-96623-4
 
 ocil_clause: '{{{ ocil_clause_file_owner(file="/etc/sudoers.d", owner="root") }}}'
 
diff --git a/linux_os/guide/system/software/sudo/directory_permissions_etc_sudoersd/rule.yml b/linux_os/guide/system/software/sudo/directory_permissions_etc_sudoersd/rule.yml
index da1a48a14465..652eef8152eb 100644
--- a/linux_os/guide/system/software/sudo/directory_permissions_etc_sudoersd/rule.yml
+++ b/linux_os/guide/system/software/sudo/directory_permissions_etc_sudoersd/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhel9: CCE-86360-5
     cce@rhel10: CCE-89200-0
     cce@sle15: CCE-92525-5
+    cce@sle16: CCE-96110-2
 
 ocil_clause: '{{{ ocil_clause_file_permissions(file="/etc/sudoers.d", perms="0750") }}}'
 
diff --git a/linux_os/guide/system/software/sudo/file_groupowner_etc_sudoers/rule.yml b/linux_os/guide/system/software/sudo/file_groupowner_etc_sudoers/rule.yml
index cfe3d033707d..a4f8eced4463 100644
--- a/linux_os/guide/system/software/sudo/file_groupowner_etc_sudoers/rule.yml
+++ b/linux_os/guide/system/software/sudo/file_groupowner_etc_sudoers/rule.yml
@@ -16,6 +16,7 @@ identifiers:
     cce@rhel8: CCE-86413-2
     cce@rhel9: CCE-86414-0
     cce@rhel10: CCE-89613-4
+    cce@sle16: CCE-96285-2
 
 ocil_clause: '{{{ ocil_clause_file_group_owner(file="/etc/sudoers", group="root") }}}'
 
diff --git a/linux_os/guide/system/software/sudo/file_owner_etc_sudoers/rule.yml b/linux_os/guide/system/software/sudo/file_owner_etc_sudoers/rule.yml
index a1e02385222c..913068677c86 100644
--- a/linux_os/guide/system/software/sudo/file_owner_etc_sudoers/rule.yml
+++ b/linux_os/guide/system/software/sudo/file_owner_etc_sudoers/rule.yml
@@ -16,6 +16,7 @@ identifiers:
     cce@rhel8: CCE-86416-5
     cce@rhel9: CCE-86417-3
     cce@rhel10: CCE-87065-9
+    cce@sle16: CCE-96512-9
 
 ocil_clause: '{{{ ocil_clause_file_owner(file="/etc/sudoers", owner="root") }}}'
 
diff --git a/linux_os/guide/system/software/sudo/file_permissions_etc_sudoers/rule.yml b/linux_os/guide/system/software/sudo/file_permissions_etc_sudoers/rule.yml
index d1e594c490d7..c6c7752ce18a 100644
--- a/linux_os/guide/system/software/sudo/file_permissions_etc_sudoers/rule.yml
+++ b/linux_os/guide/system/software/sudo/file_permissions_etc_sudoers/rule.yml
@@ -16,6 +16,7 @@ identifiers:
     cce@rhel8: CCE-86419-9
     cce@rhel9: CCE-86424-9
     cce@rhel10: CCE-90690-9
+    cce@sle16: CCE-96318-1
 
 ocil_clause: '{{{ ocil_clause_file_permissions(file="/etc/sudoers", perms="0440") }}}'
 
diff --git a/linux_os/guide/system/software/sudo/sudo_add_env_reset/rule.yml b/linux_os/guide/system/software/sudo/sudo_add_env_reset/rule.yml
index ee1af2c63369..6918afa2ea0f 100644
--- a/linux_os/guide/system/software/sudo/sudo_add_env_reset/rule.yml
+++ b/linux_os/guide/system/software/sudo/sudo_add_env_reset/rule.yml
@@ -24,7 +24,7 @@ identifiers:
     cce@rhel10: CCE-90747-7
     cce@sle12: CCE-91492-9
     cce@sle15: CCE-91184-2
-
+    cce@sle16: CCE-96178-9
 
 ocil_clause: 'env_reset is not enabled in sudo'
 
diff --git a/linux_os/guide/system/software/sudo/sudo_add_ignore_dot/rule.yml b/linux_os/guide/system/software/sudo/sudo_add_ignore_dot/rule.yml
index 3202a1efc830..9c4003d3e523 100644
--- a/linux_os/guide/system/software/sudo/sudo_add_ignore_dot/rule.yml
+++ b/linux_os/guide/system/software/sudo/sudo_add_ignore_dot/rule.yml
@@ -24,7 +24,7 @@ identifiers:
     cce@rhel10: CCE-90743-6
     cce@sle12: CCE-91493-7
     cce@sle15: CCE-91185-9
-
+    cce@sle16: CCE-96048-4
 
 ocil_clause: 'ignore_dot is not enabled in sudo'
 
diff --git a/linux_os/guide/system/software/sudo/sudo_add_noexec/rule.yml b/linux_os/guide/system/software/sudo/sudo_add_noexec/rule.yml
index 8c77ea2e3d79..93ee04d74015 100644
--- a/linux_os/guide/system/software/sudo/sudo_add_noexec/rule.yml
+++ b/linux_os/guide/system/software/sudo/sudo_add_noexec/rule.yml
@@ -21,6 +21,7 @@ identifiers:
     cce@rhel10: CCE-89119-2
     cce@sle12: CCE-91494-5
     cce@sle15: CCE-91186-7
+    cce@sle16: CCE-96653-1
 
 ocil_clause: 'noexec is not enabled in sudo'
 
diff --git a/linux_os/guide/system/software/sudo/sudo_add_requiretty/rule.yml b/linux_os/guide/system/software/sudo/sudo_add_requiretty/rule.yml
index ffce5a30d2c9..ace4a8de296d 100644
--- a/linux_os/guide/system/software/sudo/sudo_add_requiretty/rule.yml
+++ b/linux_os/guide/system/software/sudo/sudo_add_requiretty/rule.yml
@@ -21,6 +21,7 @@ identifiers:
     cce@rhel10: CCE-90076-1
     cce@sle12: CCE-91496-0
     cce@sle15: CCE-91188-3
+    cce@sle16: CCE-95927-0
 
 ocil_clause: 'requiretty is not enabled in sudo'
 
diff --git a/linux_os/guide/system/software/sudo/sudo_add_umask/rule.yml b/linux_os/guide/system/software/sudo/sudo_add_umask/rule.yml
index 03f2ed524dc6..ea5f13d80676 100644
--- a/linux_os/guide/system/software/sudo/sudo_add_umask/rule.yml
+++ b/linux_os/guide/system/software/sudo/sudo_add_umask/rule.yml
@@ -24,7 +24,7 @@ identifiers:
     cce@rhel8: CCE-83860-7
     cce@sle12: CCE-91498-6
     cce@sle15: CCE-91189-1
-
+    cce@sle16: CCE-96241-5
 
 ocil_clause: 'umask is not set with the appropriate value for sudo'
 
diff --git a/linux_os/guide/system/software/sudo/sudo_dedicated_group/rule.yml b/linux_os/guide/system/software/sudo/sudo_dedicated_group/rule.yml
index f04cfbfe2502..0fd5f740e5e3 100644
--- a/linux_os/guide/system/software/sudo/sudo_dedicated_group/rule.yml
+++ b/linux_os/guide/system/software/sudo/sudo_dedicated_group/rule.yml
@@ -26,6 +26,7 @@ identifiers:
     cce@rhel10: CCE-89208-3
     cce@sle12: CCE-91500-9
     cce@sle15: CCE-91191-7
+    cce@sle16: CCE-96236-5
 
 ocil_clause: '{{{ ocil_clause_file_group_owner(file="/usr/bin/sudo", group=xccdf_value("var_sudo_dedicated_group")) }}}'
 
diff --git a/linux_os/guide/system/software/sudo/sudoers_explicit_command_args/rule.yml b/linux_os/guide/system/software/sudo/sudoers_explicit_command_args/rule.yml
index 95798eda09f1..ed93aa6d2aef 100644
--- a/linux_os/guide/system/software/sudo/sudoers_explicit_command_args/rule.yml
+++ b/linux_os/guide/system/software/sudo/sudoers_explicit_command_args/rule.yml
@@ -27,6 +27,7 @@ identifiers:
     cce@rhel10: CCE-90002-7
     cce@sle12: CCE-91501-7
     cce@sle15: CCE-91192-5
+    cce@sle16: CCE-95946-0
 
 ocil_clause: '/etc/sudoers file contains user specifications that allow execution of commands with any arguments'
 
diff --git a/linux_os/guide/system/software/sudo/sudoers_no_command_negation/rule.yml b/linux_os/guide/system/software/sudo/sudoers_no_command_negation/rule.yml
index f956dbc51fb9..9c15e34b9897 100644
--- a/linux_os/guide/system/software/sudo/sudoers_no_command_negation/rule.yml
+++ b/linux_os/guide/system/software/sudo/sudoers_no_command_negation/rule.yml
@@ -26,6 +26,7 @@ identifiers:
     cce@rhel10: CCE-90660-2
     cce@sle12: CCE-91502-5
     cce@sle15: CCE-91193-3
+    cce@sle16: CCE-95859-5
 
 ocil_clause: '/etc/sudoers file contains rules that define the set of allowed commands using negation'
 
diff --git a/linux_os/guide/system/software/sudo/sudoers_no_root_target/rule.yml b/linux_os/guide/system/software/sudo/sudoers_no_root_target/rule.yml
index b48bd38dbd19..ebd11afe383b 100644
--- a/linux_os/guide/system/software/sudo/sudoers_no_root_target/rule.yml
+++ b/linux_os/guide/system/software/sudo/sudoers_no_root_target/rule.yml
@@ -20,6 +20,7 @@ identifiers:
     cce@rhel10: CCE-90532-3
     cce@sle12: CCE-91503-3
     cce@sle15: CCE-91194-1
+    cce@sle16: CCE-96440-3
 
 # The second part of the sentence explaining what got wrong.
 # ... Is it the case that <YOUR ocil_clause>
diff --git a/linux_os/guide/system/software/updating/ensure_redhat_gpgkey_installed/ansible/shared.yml b/linux_os/guide/system/software/updating/ensure_redhat_gpgkey_installed/ansible/shared.yml
index 8080f0c6ced3..514841546662 100644
--- a/linux_os/guide/system/software/updating/ensure_redhat_gpgkey_installed/ansible/shared.yml
+++ b/linux_os/guide/system/software/updating/ensure_redhat_gpgkey_installed/ansible/shared.yml
@@ -40,19 +40,31 @@
 
 {{% endif %}}
 
-- name: "{{{ rule_title }}}: Set Fact - Valid fingerprints"
+{{% if "rhel" in families and major_version_ordinal >= 10 %}}
+- name: "{{{ rule_title }}}: Set Fact - Valid fingerprints (without PQC)"
+  ansible.builtin.set_fact:
+    gpg_valid_fingerprints:
+    - "{{{ release_key_fingerprint }}}"
+    - "{{{ auxiliary_key_fingerprint }}}"
+  when: ansible_distribution_version is version('10.1', '<')
+
+- name: "{{{ rule_title }}}: Set Fact - Valid fingerprints (with PQC)"
   ansible.builtin.set_fact:
     gpg_valid_fingerprints:
     - "{{{ release_key_fingerprint }}}"
     - "{{{ auxiliary_key_fingerprint }}}"
-{{% if "rhel" in families  and major_version_ordinal >= 10 %}}
     - "{{{ pqc_key_fingerprint }}}"
+  when: ansible_distribution_version is version('10.1', '>=')
+{{% else %}}
+- name: "{{{ rule_title }}}: Set Fact - Valid fingerprints"
+  ansible.builtin.set_fact:
+    gpg_valid_fingerprints:
+    - "{{{ release_key_fingerprint }}}"
+    - "{{{ auxiliary_key_fingerprint }}}"
 {{% endif %}}
 
 - name: "{{{ rule_title }}}: Import RedHat GPG key"
-  ansible.builtin.rpm_key:
-    state: present
-    key: /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+  ansible.builtin.command: rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
   when:
    - gpg_key_directory_permission.stat.mode <= '0755'
    - (gpg_installed_fingerprints | difference(gpg_valid_fingerprints)) | length == 0
diff --git a/linux_os/guide/system/software/updating/ensure_redhat_gpgkey_installed/bash/shared.sh b/linux_os/guide/system/software/updating/ensure_redhat_gpgkey_installed/bash/shared.sh
index 53931cd4009d..5fdb792b79cd 100644
--- a/linux_os/guide/system/software/updating/ensure_redhat_gpgkey_installed/bash/shared.sh
+++ b/linux_os/guide/system/software/updating/ensure_redhat_gpgkey_installed/bash/shared.sh
@@ -25,13 +25,16 @@ then
   # No CRC error, safe to proceed
   if [ "${GPG_RESULT}" -eq "0" ]
   then
+  # If $REDHAT_RELEASE_KEY file doesn't contain any keys with unknown fingerprint, import it
 {{% if "rhel" in families  and major_version_ordinal >= 10 %}}
-    echo "${GPG_OUT[*]}" | grep -vE "${REDHAT_RELEASE_FINGERPRINT}|${REDHAT_AUXILIARY_FINGERPRINT}|${REDHAT_PQC_FINGERPRINT}" || {
+    if {{{ bash_os_linux_conditional("rhel", expected_ver="10.1", op=">=") | trim }}}
+    then
+      echo "${GPG_OUT[*]}" | grep -vE "${REDHAT_RELEASE_FINGERPRINT}|${REDHAT_AUXILIARY_FINGERPRINT}|${REDHAT_PQC_FINGERPRINT}" || rpm --import "${REDHAT_RELEASE_KEY}"
+    else
+      echo "${GPG_OUT[*]}" | grep -vE "${REDHAT_RELEASE_FINGERPRINT}|${REDHAT_AUXILIARY_FINGERPRINT}" || rpm --import "${REDHAT_RELEASE_KEY}"
+    fi
 {{% else %}}
-    echo "${GPG_OUT[*]}" | grep -vE "${REDHAT_RELEASE_FINGERPRINT}|${REDHAT_AUXILIARY_FINGERPRINT}" || {
+    echo "${GPG_OUT[*]}" | grep -vE "${REDHAT_RELEASE_FINGERPRINT}|${REDHAT_AUXILIARY_FINGERPRINT}" || rpm --import "${REDHAT_RELEASE_KEY}"
 {{% endif %}}
-      # If $REDHAT_RELEASE_KEY file doesn't contain any keys with unknown fingerprint, import it
-      rpm --import "${REDHAT_RELEASE_KEY}"
-    }
   fi
 fi
diff --git a/linux_os/guide/system/software/updating/ensure_redhat_gpgkey_installed/oval/shared.xml b/linux_os/guide/system/software/updating/ensure_redhat_gpgkey_installed/oval/shared.xml
index 6871feba83b3..52461f678900 100644
--- a/linux_os/guide/system/software/updating/ensure_redhat_gpgkey_installed/oval/shared.xml
+++ b/linux_os/guide/system/software/updating/ensure_redhat_gpgkey_installed/oval/shared.xml
@@ -13,8 +13,13 @@
           <criterion comment="package gpg-pubkey-{{{ aux_pkg_version }}}-{{{ aux_pkg_release }}} is installed"
           test_ref="test_redhat_package_gpgkey-{{{ aux_pkg_version }}}-{{{ aux_pkg_release }}}_installed" />
 {{% if "rhel" in families  and major_version_ordinal >= 10 %}}
-          <criterion comment="package gpg-pubkey-{{{ pqc_pkg_version }}}-{{{ pqc_pkg_release }}} is installed"
-          test_ref="test_redhat_package_gpgkey-{{{ pqc_pkg_version }}}-{{{ pqc_pkg_release }}}_installed" />
+          <criteria comment="If RHEL is 10.1 or newer then PQC key must be installed" operator="OR">
+            <criterion comment="RHEL is older than 10.1" test_ref="test_{{{ rule_id }}}_rhel_is_10_1_or_newer" negate="true" />
+            <criteria comment="RHEL is 10.1 or newer AND PQC is installed" operator="AND">
+              <criterion comment="RHEL is 10.1 or newer" test_ref="test_{{{ rule_id }}}_rhel_is_10_1_or_newer" />
+              <criterion comment="package gpg-pubkey-{{{ pqc_pkg_version }}}-{{{ pqc_pkg_release }}} is installed" test_ref="test_redhat_package_gpgkey-{{{ pqc_pkg_version }}}-{{{ pqc_pkg_release }}}_installed" />
+            </criteria>
+          </criteria>
 {{% endif %}}
       </criteria>
       {{%- if centos_major_version %}}
@@ -88,5 +93,22 @@
   </linux:rpminfo_state>
   {{%- endif %}}
 
+{{% if "rhel" in families and major_version_ordinal >= 10 %}}
+  <ind:textfilecontent54_test check="all" comment="VERSION_ID in os-release is greater than or equal 10.1" id="test_{{{ rule_id }}}_rhel_is_10_1_or_newer" version="1">
+    <ind:object object_ref="obj_{{{ rule_id }}}_rhel_is_10_1_or_newer" />
+    <ind:state state_ref="state_{{{ rule_id }}}_rhel_is_10_1_or_newer" />
+  </ind:textfilecontent54_test>
+
+  <ind:textfilecontent54_object id="obj_{{{ rule_id }}}_rhel_is_10_1_or_newer" version="1">
+    <ind:filepath>/etc/os-release</ind:filepath>
+    <ind:pattern operation="pattern match">^VERSION_ID=[&quot;&apos;]?([\w.]+)[&quot;&apos;]?$</ind:pattern>
+    <ind:instance operation="greater than or equal" datatype="int">1</ind:instance>
+  </ind:textfilecontent54_object>
+
+  <ind:textfilecontent54_state id="state_{{{ rule_id }}}_rhel_is_10_1_or_newer" version="1">
+    <ind:subexpression operation="greater than or equal" datatype="version">10.1</ind:subexpression>
+  </ind:textfilecontent54_state>
+{{% endif %}}
+
 </def-group>
 {{% endif %}}
diff --git a/product_properties/10-audit-binaries.yml b/product_properties/10-audit-binaries.yml
index 9fa2da7022e7..c0f332940794 100644
--- a/product_properties/10-audit-binaries.yml
+++ b/product_properties/10-audit-binaries.yml
@@ -11,9 +11,13 @@ default:
     - /sbin/audispd
     {{% endif %}}
     - /sbin/augenrules
-    {{% if 'rhel' in product or product == 'sle16' %}}
+    {{% if 'rhel' in product or product == 'sle16' or 'ubuntu' in product %}}
     - /sbin/audisp-syslog
     {{% endif %}}
+    {{% if 'ubuntu' in product %}}
+    - /sbin/audisp-remote
+    - /sbin/audispd-zos-remote
+    {{% endif %}}
 overrides:
 {{% if product == 'sle15' %}}
   audit_binaries:
diff --git a/products/anolis23/profiles/standard.profile b/products/anolis23/profiles/standard.profile
index 2cf3bfda5a31..69e8d39628fc 100644
--- a/products/anolis23/profiles/standard.profile
+++ b/products/anolis23/profiles/standard.profile
@@ -369,12 +369,14 @@ selections:
     ## 4.1-ensure-message-of-the-day-is-configured-properly
     ### Level 1
     - banner_etc_motd
-    - login_banner_text=cis_banners
+    - motd_banner_text=cis_banners
+    - motd_banner_contents=cis_default
 
     ## 4.2-ensure-local-login-warning-banner-is-configured-properly
     ### Level 1
     - banner_etc_issue
     - login_banner_text=cis_banners
+    - login_banner_contents=cis_default
 
     ## 4.3-ensure-remote-login-warning-banner-is-configured-properly
     ### Level 1
diff --git a/products/anolis8/profiles/standard.profile b/products/anolis8/profiles/standard.profile
index b60cba9e23d0..91f13490b1ab 100644
--- a/products/anolis8/profiles/standard.profile
+++ b/products/anolis8/profiles/standard.profile
@@ -369,12 +369,14 @@ selections:
     ## 4.1-ensure-message-of-the-day-is-configured-properly
     ### Level 1
     - banner_etc_motd
-    - login_banner_text=cis_banners
+    - motd_banner_text=cis_banners
+    - motd_banner_contents=cis_default
 
     ## 4.2-ensure-local-login-warning-banner-is-configured-properly
     ### Level 1
     - banner_etc_issue
     - login_banner_text=cis_banners
+    - login_banner_contents=cis_default
 
     ## 4.3-ensure-remote-login-warning-banner-is-configured-properly
     ### Level 1
diff --git a/products/bascontrol22d4/CMakeLists.txt b/products/bascontrol22d4/CMakeLists.txt
new file mode 100644
index 000000000000..53f23a29ba13
--- /dev/null
+++ b/products/bascontrol22d4/CMakeLists.txt
@@ -0,0 +1,6 @@
+# Sometimes our users will try to do: "cd bascontrol22d4; cmake ." That needs to error in a nice way.
+if("${CMAKE_SOURCE_DIR}" STREQUAL "${CMAKE_CURRENT_SOURCE_DIR}")
+    message(FATAL_ERROR "cmake has to be used on the root CMakeLists.txt, see the Building ComplianceAsCode section in the Developer Guide!")
+endif()
+
+ssg_build_product("bascontrol22d4")
diff --git a/products/bascontrol22d4/guide/benchmark.yml b/products/bascontrol22d4/guide/benchmark.yml
new file mode 100644
index 000000000000..f875507f9b5a
--- /dev/null
+++ b/products/bascontrol22d4/guide/benchmark.yml
@@ -0,0 +1,54 @@
+---
+documentation_complete: true
+
+title: Guide to the Secure Configuration of {{{ full_name }}}
+
+status: draft
+
+description: |
+    This guide presents a catalog of security-relevant
+    configuration settings for {{{ full_name }}}. It is a rendering of
+    content structured in the eXtensible Configuration Checklist Description Format (XCCDF)
+    in order to support security automation.  The SCAP content is
+    is available in the <tt>scap-security-guide</tt> package which is developed at
+    {{{ weblink(link="https://www.open-scap.org/security-policies/scap-security-guide") }}}.
+    <br/><br/>
+    Providing system administrators with such guidance informs them how to securely
+    configure systems under their control in a variety of network roles. Policy
+    makers and baseline creators can use this catalog of settings, with its
+    associated references to higher-level security control catalogs, in order to
+    assist them in security baseline creation. This guide is a <em>catalog, not a
+    checklist</em>, and satisfaction of every item is not likely to be possible or
+    sensible in many operational scenarios. However, the XCCDF format enables
+    granular selection and adjustment of settings, and their association with OVAL
+    and OCIL content provides an automated checking capability. Transformations of
+    this document, and its associated automated checking content, are capable of
+    providing baselines that meet a diverse set of policy objectives. Some example
+    XCCDF <em>Profiles</em>, which are selections of items that form checklists and
+    can be used as baselines, are available with this guide. They can be
+    processed, in an automated fashion, with tools that support the Security
+    Content Automation Protocol (SCAP). The DISA STIG for {{{ full_name }}},
+    which provides required settings for US Department of Defense systems, is
+    one example of a baseline created from this guidance.
+
+notice:
+    id: terms_of_use
+    description: |
+        Do not attempt to implement any of the settings in
+        this guide without first testing them in a non-operational environment. The
+        creators of this guidance assume no responsibility whatsoever for its use by
+        other parties, and makes no guarantees, expressed or implied, about its
+        quality, reliability, or any other characteristic.
+
+front-matter: |
+    # BASCONSTROL22D-$ Benchmark
+    The SCAP Security Guide Project<br/>
+    {{{ weblink(link="https://www.open-scap.org/security-policies/scap-security-guide") }}}
+
+rear-matter: |
+    Red Hat and Red Hat Enterprise Linux are either registered
+    trademarks or trademarks of Red Hat, Inc. in the United States and other
+    countries. All other names are registered trademarks or trademarks of their
+    respective companies.
+
+version: 0.9
diff --git a/products/bascontrol22d4/product.yml b/products/bascontrol22d4/product.yml
new file mode 100644
index 000000000000..16fa4d0d30ba
--- /dev/null
+++ b/products/bascontrol22d4/product.yml
@@ -0,0 +1,17 @@
+product: bascontrol22d4
+full_name: Contemporary Controls BAScontrol22D BACnet/IP Sedona Unitary Controller 4
+type: product
+
+benchmark_id: BASCONTROL22D-4
+benchmark_root: "./guide"
+
+components_root: "../../components"
+
+profiles_root: "./profiles"
+
+cpes_root: "../../shared/applicability"
+cpes:
+  - bascontrol22d4:
+      name: "cpe:/a:bascontrol22d:4"
+      title: "Contemporary Controls BAScontrol22D BACnet/IP Sedona Unitary Controller 4"
+      check_id: installed_app_is_bascontrol22d4
diff --git a/products/bascontrol22d4/profiles/standard.profile b/products/bascontrol22d4/profiles/standard.profile
new file mode 100644
index 000000000000..452bbd66ea13
--- /dev/null
+++ b/products/bascontrol22d4/profiles/standard.profile
@@ -0,0 +1,9 @@
+documentation_complete: true
+
+title: 'Standard System Security Profile for Contemporary Controls BAScontrol22D BACnet/IP Sedona Unitary Controller 4'
+
+description: |-
+    This profile contains rules to ensure standard security baseline
+    of a Contemporary Controls BAScontrol22D BACnet/IP Sedona Unitary Controller 4 system.
+
+#selections:
diff --git a/products/fedora/profiles/ospp.profile b/products/fedora/profiles/ospp.profile
index 601f0e2375ec..ea79c4506a7e 100644
--- a/products/fedora/profiles/ospp.profile
+++ b/products/fedora/profiles/ospp.profile
@@ -103,11 +103,14 @@ selections:
     - rsyslog_remote_loghost
     - auditd_audispd_encrypt_sent_records
     - login_banner_text=usgcb_default
+    - login_banner_contents=usgcb_default
     - sshd_enable_warning_banner
     - banner_etc_issue
     - sshd_rekey_limit
     - dconf_gnome_banner_enabled
     - dconf_gnome_login_banner_text
+    - dconf_login_banner_text=usgcb_default
+    - dconf_login_banner_contents=usgcb_default
     - audit_rules_login_events_faillock
     - audit_rules_login_events_lastlog
     - audit_rules_login_events_tallylog
diff --git a/products/ocp4/profiles/cis-1-7.profile b/products/ocp4/profiles/cis-1-7.profile
index 9ca64c32198a..f26be121c46d 100644
--- a/products/ocp4/profiles/cis-1-7.profile
+++ b/products/ocp4/profiles/cis-1-7.profile
@@ -5,6 +5,8 @@ title: 'CIS Red Hat OpenShift Container Platform 4 Benchmark'
 
 platform: ocp4
 
+status: deprecated
+
 metadata:
     SMEs:
         - rhmdnd
diff --git a/products/ocp4/profiles/cis-1-9.profile b/products/ocp4/profiles/cis-1-9.profile
new file mode 100644
index 000000000000..21109f3e7a1a
--- /dev/null
+++ b/products/ocp4/profiles/cis-1-9.profile
@@ -0,0 +1,37 @@
+---
+documentation_complete: true
+
+title: 'CIS Red Hat OpenShift Container Platform 4 Benchmark'
+
+platform: ocp4
+
+metadata:
+    SMEs:
+        - rhmdnd
+        - Vincent056
+        - yuumasato
+    version: 1.9.0
+
+description: |-
+    This profile defines a baseline that aligns to the Center for Internet Security®
+    Red Hat OpenShift Container Platform 4 Benchmark™, V1.9.0.
+
+    This profile includes Center for Internet Security®
+    Red Hat OpenShift Container Platform 4 CIS Benchmarks™ content.
+
+    Note that this part of the profile is meant to run on the Platform that
+    Red Hat OpenShift Container Platform 4 runs on top of.
+
+    This profile is applicable to OpenShift versions 4.12 and greater.
+
+filter_rules: '"ocp4-node" not in platform and "ocp4-master-node" not in platform and "ocp4-node-on-sdn"
+    not in platform and "ocp4-node-on-ovn" not in platform'
+
+selections:
+    - cis_ocp_190:all
+    ### Variables
+    - var_openshift_audit_profile=WriteRequestBodies
+    ### Helper Rules
+    ### This is a helper rule to fetch the required api resource for detecting OCP version
+    - version_detect_in_ocp
+    - version_detect_in_hypershift
diff --git a/products/ocp4/profiles/cis-node-1-7.profile b/products/ocp4/profiles/cis-node-1-7.profile
index bba8260fec3b..3e7a89d6bae4 100644
--- a/products/ocp4/profiles/cis-node-1-7.profile
+++ b/products/ocp4/profiles/cis-node-1-7.profile
@@ -5,6 +5,8 @@ title: 'CIS Red Hat OpenShift Container Platform 4 Benchmark'
 
 platform: ocp4-node
 
+status: deprecated
+
 metadata:
     SMEs:
         - rhmdnd
diff --git a/products/ocp4/profiles/cis-node-1-9.profile b/products/ocp4/profiles/cis-node-1-9.profile
new file mode 100644
index 000000000000..27ded73fe163
--- /dev/null
+++ b/products/ocp4/profiles/cis-node-1-9.profile
@@ -0,0 +1,31 @@
+---
+documentation_complete: true
+
+title: 'CIS Red Hat OpenShift Container Platform 4 Benchmark'
+
+platform: ocp4-node
+
+metadata:
+    SMEs:
+        - rhmdnd
+        - Vincent056
+        - yuumasato
+    version: 1.9.0
+
+description: |-
+    This profile defines a baseline that aligns to the Center for Internet Security®
+    Red Hat OpenShift Container Platform 4 Benchmark™, V1.9.0.
+
+    This profile includes Center for Internet Security®
+    Red Hat OpenShift Container Platform 4 CIS Benchmarks™ content.
+
+    Note that this part of the profile is meant to run on the Operating System that
+    Red Hat OpenShift Container Platform 4 runs on top of.
+
+    This profile is applicable to OpenShift versions 4.12 and greater.
+
+filter_rules: '"ocp4-node" in platform or "ocp4-master-node" in platform or "ocp4-node-on-sdn" in platform
+    or "ocp4-node-on-ovn" in platform'
+
+selections:
+    - cis_ocp_190:all
diff --git a/products/ocp4/profiles/cis-node.profile b/products/ocp4/profiles/cis-node.profile
index bd1ce3bfce8a..90d8cf879591 100644
--- a/products/ocp4/profiles/cis-node.profile
+++ b/products/ocp4/profiles/cis-node.profile
@@ -10,11 +10,11 @@ metadata:
         - rhmdnd
         - Vincent056
         - yuumasato
-    version: 1.7.0
+    version: 1.9.0
 
 description: |-
     This profile defines a baseline that aligns to the Center for Internet Security®
-    Red Hat OpenShift Container Platform 4 Benchmark™, V1.7.
+    Red Hat OpenShift Container Platform 4 Benchmark™, V1.9.0.
 
     This profile includes Center for Internet Security®
     Red Hat OpenShift Container Platform 4 CIS Benchmarks™ content.
@@ -24,4 +24,4 @@ description: |-
 
     This profile is applicable to OpenShift versions 4.12 and greater.
 
-extends: cis-node-1-7
+extends: cis-node-1-9
diff --git a/products/ocp4/profiles/cis.profile b/products/ocp4/profiles/cis.profile
index e46d12ad28c1..f63649d5437f 100644
--- a/products/ocp4/profiles/cis.profile
+++ b/products/ocp4/profiles/cis.profile
@@ -10,11 +10,11 @@ metadata:
         - rhmdnd
         - Vincent056
         - yuumasato
-    version: 1.7.0
+    version: 1.9.0
 
 description: |-
     This profile defines a baseline that aligns to the Center for Internet Security®
-    Red Hat OpenShift Container Platform 4 Benchmark™, V1.7.
+    Red Hat OpenShift Container Platform 4 Benchmark™, V1.9.0.
 
     This profile includes Center for Internet Security®
     Red Hat OpenShift Container Platform 4 CIS Benchmarks™ content.
@@ -24,4 +24,4 @@ description: |-
 
     This profile is applicable to OpenShift versions 4.12 and greater.
 
-extends: cis-1-7
+extends: cis-1-9
diff --git a/products/ol7/profiles/ncp.profile b/products/ol7/profiles/ncp.profile
index 2acb9c798f04..426901de8641 100644
--- a/products/ol7/profiles/ncp.profile
+++ b/products/ol7/profiles/ncp.profile
@@ -36,6 +36,7 @@ extends: ospp
 selections:
     - installed_OS_is_vendor_supported
     - login_banner_text=usgcb_default
+    - login_banner_contents=usgcb_default
     - inactivity_timeout_value=15_minutes
     - var_password_pam_minlen=15
     - accounts_password_all_shadowed
@@ -323,6 +324,8 @@ selections:
     - dconf_gnome_disable_wifi_notification
     - dconf_gnome_enable_smartcard_auth
     - dconf_gnome_login_banner_text
+    - dconf_login_banner_text=usgcb_default
+    - dconf_login_banner_contents=usgcb_default
     - dconf_gnome_login_retries
     - dconf_gnome_remote_access_credential_prompt
     - dconf_gnome_remote_access_encryption
diff --git a/products/ol7/profiles/stig.profile b/products/ol7/profiles/stig.profile
index 133832c72af2..27085939d81a 100644
--- a/products/ol7/profiles/stig.profile
+++ b/products/ol7/profiles/stig.profile
@@ -8,6 +8,7 @@ description: |-
 
 selections:
     - login_banner_text=dod_banners
+    - login_banner_contents=dod_default
     - inactivity_timeout_value=15_minutes
     - var_screensaver_lock_delay=5_seconds
     - sshd_idle_timeout_value=10_minutes
@@ -54,6 +55,8 @@ selections:
     - dconf_db_up_to_date
     - dconf_gnome_banner_enabled
     - dconf_gnome_login_banner_text
+    - dconf_login_banner_text=dod_default
+    - dconf_login_banner_contents=dod_default
     - banner_etc_issue
     - dconf_gnome_screensaver_lock_enabled
     - dconf_gnome_screensaver_lock_locked
diff --git a/products/ol8/profiles/stig.profile b/products/ol8/profiles/stig.profile
index fba0400ef38b..622bfa8a1e6b 100644
--- a/products/ol8/profiles/stig.profile
+++ b/products/ol8/profiles/stig.profile
@@ -1,7 +1,7 @@
 documentation_complete: true
 
 metadata:
-    version: V2R6
+    version: V2R7
 
 reference: https://www.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
 
@@ -9,7 +9,7 @@ title: 'DISA STIG for Oracle Linux 8'
 
 description: |-
     This profile contains configuration checks that align to the
-    DISA STIG for Oracle Linux 8 V2R6.
+    DISA STIG for Oracle Linux 8 V2R7.
 
 selections:
     ### Variables
@@ -39,7 +39,7 @@ selections:
     - var_password_pam_retry=3
     - var_password_pam_minlen=15
     - sshd_approved_macs=stig_extended
-    - sshd_approved_ciphers=stig_extended
+    - sshd_approved_ciphers=stig_ol8
     - sshd_idle_timeout_value=10_minutes
     - var_accounts_authorized_local_users_regex=ol8
     - var_accounts_passwords_pam_faillock_deny=3
@@ -61,6 +61,9 @@ selections:
     - var_auditd_disk_full_action=ol8
     - var_sssd_certificate_verification_digest_function=sha1
     - login_banner_text=dod_banners
+    - login_banner_contents=dod_default
+    - dconf_login_banner_text=dod_banners
+    - dconf_login_banner_contents=dod_default
     - var_authselect_profile=sssd
     - var_multiple_time_servers=stig
 
@@ -408,9 +411,6 @@ selections:
     # OL08-00-010650
     - mount_option_nosuid_remote_filesystems
 
-    # OL08-00-010660
-    - accounts_user_dot_no_world_writable_programs
-
     # OL08-00-010670
     - service_kdump_disabled
 
@@ -532,7 +532,11 @@ selections:
 
     # OL08-00-020035
     - logind_session_timeout
-    - var_logind_session_timeout=15_minutes
+    - var_logind_session_timeout=10_minutes
+
+    # OL08-00-020040
+    - accounts_tmout
+    - var_accounts_tmout=10_min
 
     # OL08-00-020043
     - vlock_installed
@@ -542,6 +546,7 @@ selections:
 
     # OL08-00-020060
     - dconf_gnome_screensaver_idle_delay
+    - inactivity_timeout_value=10_minutes
 
     # OL08-00-020080
     - dconf_gnome_screensaver_user_locks
@@ -651,9 +656,6 @@ selections:
     # OL08-00-020331, OL08-00-020332
     - no_empty_passwords
 
-    # OL08-00-020340
-    - display_login_attempts
-
     # OL08-00-020350
     - sshd_print_last_log
 
diff --git a/products/ol8/profiles/stig_gui.profile b/products/ol8/profiles/stig_gui.profile
index 8d26c7dd0d98..109fd4d08f8c 100644
--- a/products/ol8/profiles/stig_gui.profile
+++ b/products/ol8/profiles/stig_gui.profile
@@ -1,13 +1,13 @@
 documentation_complete: true
 
 metadata:
-    version: V2R6
+    version: V2R7
 
 title: 'DISA STIG with GUI for Oracle Linux 8'
 
 description: |-
     This profile contains configuration checks that align to the
-    DISA STIG with GUI for Oracle Linux V2R6.
+    DISA STIG with GUI for Oracle Linux V2R7.
 
     Warning: The installation and use of a Graphical User Interface (GUI)
     increases your attack vector and decreases your overall security posture. If
diff --git a/products/ol9/profiles/stig.profile b/products/ol9/profiles/stig.profile
index 883b970b43a8..adbe70ed2e64 100644
--- a/products/ol9/profiles/stig.profile
+++ b/products/ol9/profiles/stig.profile
@@ -2,7 +2,7 @@
 documentation_complete: true
 
 metadata:
-    version: V1R3
+    version: V1R4
 
 reference: https://www.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
 
@@ -10,7 +10,7 @@ title: 'DISA STIG for Oracle Linux 9'
 
 description: |-
     This profile contains configuration checks that align to the
-    DISA STIG for Oracle Linux 9 V1R3.
+    DISA STIG for Oracle Linux 9 V1R4.
 
 selections:
     - stig_ol9:all
diff --git a/products/ol9/profiles/stig_gui.profile b/products/ol9/profiles/stig_gui.profile
index 178e85a21e57..4f2b8b948abb 100644
--- a/products/ol9/profiles/stig_gui.profile
+++ b/products/ol9/profiles/stig_gui.profile
@@ -1,7 +1,7 @@
 documentation_complete: true
 
 metadata:
-    version: V1R3
+    version: V1R4
 
 reference: https://www.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
 
@@ -9,7 +9,7 @@ title: 'DISA STIG with GUI for Oracle Linux 9'
 
 description: |-
     This profile contains configuration checks that align to the
-    DISA STIG for Oracle Linux 9 V1R3.
+    DISA STIG for Oracle Linux 9 V1R4.
 
     Warning: The installation and use of a Graphical User Interface (GUI)
     increases your attack vector and decreases your overall security posture. If
diff --git a/products/openembedded/profiles/expanded.profile b/products/openembedded/profiles/expanded.profile
index 13db15a9530b..a43e6745f40c 100644
--- a/products/openembedded/profiles/expanded.profile
+++ b/products/openembedded/profiles/expanded.profile
@@ -112,8 +112,10 @@ selections:
     - service_dovecot_disabled
     - banner_etc_motd
     - motd_banner_text=cis_banners
+    - motd_banner_contents=cis_default
     - banner_etc_issue
     - login_banner_text=cis_banners
+    - login_banner_contents=cis_default
     - file_groupowner_etc_motd
     - file_owner_etc_motd
     - file_permissions_etc_motd
diff --git a/products/openembedded/profiles/standard.profile b/products/openembedded/profiles/standard.profile
index 37547a454e83..d183617a264b 100644
--- a/products/openembedded/profiles/standard.profile
+++ b/products/openembedded/profiles/standard.profile
@@ -107,8 +107,10 @@ selections:
     - service_dovecot_disabled
     - banner_etc_motd
     - motd_banner_text=cis_banners
+    - motd_banner_contents=cis_default
     - banner_etc_issue
     - login_banner_text=cis_banners
+    - login_banner_contents=cis_default
     - file_groupowner_etc_motd
     - file_owner_etc_motd
     - file_permissions_etc_motd
diff --git a/products/rhel10/controls/cis_rhel10.yml b/products/rhel10/controls/cis_rhel10.yml
index 8269196f2993..9ab136c4be7a 100644
--- a/products/rhel10/controls/cis_rhel10.yml
+++ b/products/rhel10/controls/cis_rhel10.yml
@@ -366,9 +366,14 @@ controls:
       levels:
           - l1_server
           - l1_workstation
-      status: manual
-      related_rules:
+      status: partial
+      rules:
           - ensure_redhat_gpgkey_installed
+      notes: >
+        In CIS Benchmark, the requirement is manual, because of GPG keys for 3rd party repositories.
+        But, add the rule ensure_redhat_gpgkey_installed to the profile because the requirement 1.2.1.2
+        adds ensure_gpgcheck_never_disabled which requires GPG key checking. If the Red Hat
+        GPG key wouldn't be installed, people won't be able to install any RPM package using dnf.
 
     - id: 1.2.1.2
       title: Ensure gpgcheck is configured (Automated)
@@ -706,7 +711,8 @@ controls:
       rules:
           - dconf_gnome_banner_enabled
           - dconf_gnome_login_banner_text
-          - login_banner_text=cis_banners
+          - dconf_login_banner_text=cis_banners
+          - dconf_login_banner_contents=cis_default
 
     - id: 1.8.2
       title: Ensure GDM disable-user-list is configured (Automated)
@@ -817,6 +823,8 @@ controls:
           - l1_workstation
       status: automated
       rules:
+          - service_dnsmasq_disabled
+      related_rules:
           - package_dnsmasq_removed
 
     - id: 2.1.7
diff --git a/products/rhel10/profiles/default.profile b/products/rhel10/profiles/default.profile
index 4d9b46867bc6..3be6b3d8376a 100644
--- a/products/rhel10/profiles/default.profile
+++ b/products/rhel10/profiles/default.profile
@@ -45,3 +45,4 @@ selections:
     - file_etc_security_opasswd
     - sshd_use_strong_macs
     - configure_ssh_crypto_policy
+    - package_dnsmasq_removed
diff --git a/products/rhel8/controls/cis_rhel8.yml b/products/rhel8/controls/cis_rhel8.yml
index cbe5d4d6454e..69773b6030d3 100644
--- a/products/rhel8/controls/cis_rhel8.yml
+++ b/products/rhel8/controls/cis_rhel8.yml
@@ -379,9 +379,14 @@ controls:
       levels:
           - l1_server
           - l1_workstation
-      status: manual
-      related_rules:
+      status: partial
+      rules:
           - ensure_redhat_gpgkey_installed
+      notes: >
+        In CIS Benchmark, the requirement is manual, because of GPG keys for 3rd party repositories.
+        But, add the rule ensure_redhat_gpgkey_installed to the profile because the requirement 1.2.1.2
+        adds ensure_gpgcheck_never_disabled which requires GPG key checking. If the Red Hat
+        GPG key wouldn't be installed, people won't be able to install any RPM package using dnf.
 
     - id: 1.2.1.2
       title: Ensure gpgcheck is configured (Automated)
@@ -740,7 +745,8 @@ controls:
       rules:
           - dconf_gnome_banner_enabled
           - dconf_gnome_login_banner_text
-          - login_banner_text=cis_banners
+          - dconf_login_banner_text=cis_banners
+          - dconf_login_banner_contents=cis_default
 
     - id: 1.8.2
       title: Ensure GDM disable-user-list is configured (Automated)
@@ -860,6 +866,8 @@ controls:
           - l1_workstation
       status: automated
       rules:
+          - service_dnsmasq_disabled
+      related_rules:
           - package_dnsmasq_removed
 
     - id: 2.1.7
diff --git a/products/rhel8/controls/stig_rhel8.yml b/products/rhel8/controls/stig_rhel8.yml
index b70ea1d7eab9..4c2de6146d37 100644
--- a/products/rhel8/controls/stig_rhel8.yml
+++ b/products/rhel8/controls/stig_rhel8.yml
@@ -2,7 +2,7 @@
 policy: Red Hat Enterprise Linux 8 Security Technical Implementation Guide
 title: Red Hat Enterprise Linux 8 Security Technical Implementation Guide
 id: stig_rhel8
-version: V2R5
+version: V2R6
 source: https://www.cyber.mil/stigs/downloads
 reference_type: stigid
 product: rhel8
@@ -67,17 +67,12 @@ controls:
           - var_auditd_disk_full_action=rhel8
           - var_sssd_certificate_verification_digest_function=sha1
           - login_banner_text=dod_banners
+          - login_banner_contents=dod_default
+          - dconf_login_banner_text=dod_banners
+          - dconf_login_banner_contents=dod_default
           - var_authselect_profile=sssd
           - var_multiple_time_servers=stig
           - var_time_service_set_maxpoll=18_hours
-            # Enable / Configure FIPS
-          - enable_fips_mode
-          - var_system_crypto_policy=fips
-          - configure_crypto_policy
-          - configure_bind_crypto_policy
-          - configure_libreswan_crypto_policy
-          - configure_kerberos_crypto_policy
-          - enable_dracut_fips_module
             # Other needed rules
           - enable_authselect
 
@@ -97,24 +92,23 @@ controls:
           - security_patches_up_to_date
       status: automated
 
+    - id: RHEL-08-010015
+      levels:
+          - high
+      title: RHEL 8 must have the crypto-policies package installed.
+      rules:
+          - package_crypto-policies_installed
+      status: automated
+
     - id: RHEL-08-010020
       levels:
           - high
-      title: 'RHEL 8 must implement NIST FIPS-validated cryptography for the following: To provision
-          digital signatures, to generate cryptographic hashes, and to protect data requiring data-at-rest
-          protections in accordance with applicable federal laws, Executive Orders, directives, policies,
-          regulations, and standards.'
+      title: RHEL 8 must implement a FIPS 140-3-compliant systemwide cryptographic policy.
       rules:
-          - configure_bind_crypto_policy
           - configure_crypto_policy
-          - configure_kerberos_crypto_policy
-          - configure_libreswan_crypto_policy
-          - enable_dracut_fips_module
-          - enable_fips_mode
           - fips_crypto_subpolicy
-          - harden_sshd_ciphers_openssh_conf_crypto_policy
-          - harden_sshd_macs_openssh_conf_crypto_policy
-          - sysctl_crypto_fips_enabled
+          - fips_custom_stig_sub_policy
+          - var_system_crypto_policy=fips_stig
       status: automated
 
     - id: RHEL-08-010030
@@ -338,54 +332,62 @@ controls:
           - file_groupowner_var_log
       status: automated
 
-    - id: RHEL-08-010290
+    - id: RHEL-08-010270
       levels:
-          - medium
-      title: The RHEL 8 SSH server must be configured to use only Message Authentication Codes (MACs)
-          employing FIPS 140-3 validated cryptographic hash algorithms.
+          - high
+      title: RHEL 8 cryptographic policy must not be overridden.
       rules:
-          - harden_sshd_macs_opensshserver_conf_crypto_policy
+          - configure_crypto_policy
       status: automated
 
-    - id: RHEL-08-010291
+    - id: RHEL-08-010275
       levels:
           - medium
-      title: The RHEL 8 operating system must implement DOD-approved encryption to protect the confidentiality
-          of SSH server connections.
+      title: RHEL 8 must implement DOD-approved encryption in the bind package.
       rules:
-          - harden_sshd_ciphers_opensshserver_conf_crypto_policy
+          - configure_bind_crypto_policy
       status: automated
 
-    - id: RHEL-08-010292
+    - id: RHEL-08-010280
       levels:
-          - low
-      title: RHEL 8 must ensure the SSH server uses strong entropy.
+          - medium
+      title: RHEL 8 IP tunnels must use FIPS 140-3-approved cryptographic algorithms.
       rules:
-          - sshd_use_strong_rng
+          - configure_libreswan_crypto_policy
       status: automated
 
-    - id: RHEL-08-010293
+    - id: RHEL-08-010290
       levels:
           - medium
-      title: The RHEL 8 operating system must implement DoD-approved encryption in the OpenSSL package.
+      title: The RHEL 8 SSH server must be configured to use only Message Authentication Codes (MACs)
+          employing FIPS 140-3 validated cryptographic hash algorithms.
+      notes: This is implemented by a special STIG subpolicy.
       rules:
-          - configure_openssl_crypto_policy
+          - configure_crypto_policy
+          - fips_crypto_subpolicy
+          - fips_custom_stig_sub_policy
+          - var_system_crypto_policy=fips_stig
       status: automated
 
-    - id: RHEL-08-010294
+    - id: RHEL-08-010291
       levels:
           - medium
-      title: The RHEL 8 operating system must implement DoD-approved TLS encryption in the OpenSSL package.
+      title: The RHEL 8 operating system must implement DOD-approved encryption to protect the confidentiality
+          of SSH server connections.
+      notes: This is implemented by a special STIG subpolicy.
       rules:
-          - configure_openssl_tls_crypto_policy
+          - configure_crypto_policy
+          - fips_crypto_subpolicy
+          - fips_custom_stig_sub_policy
+          - var_system_crypto_policy=fips_stig
       status: automated
 
-    - id: RHEL-08-010295
+    - id: RHEL-08-010292
       levels:
-          - medium
-      title: The RHEL 8 operating system must implement DoD-approved TLS encryption in the GnuTLS package.
+          - low
+      title: RHEL 8 must ensure the SSH server uses strong entropy.
       rules:
-          - configure_gnutls_tls_crypto_policy
+          - sshd_use_strong_rng
       status: automated
 
     - id: RHEL-08-010300
@@ -807,14 +809,6 @@ controls:
           - mount_option_nosuid_remote_filesystems
       status: automated
 
-    - id: RHEL-08-010660
-      levels:
-          - medium
-      title: Local RHEL 8 initialization files must not execute world-writable programs.
-      rules:
-          - accounts_user_dot_no_world_writable_programs
-      status: automated
-
     - id: RHEL-08-010670
       levels:
           - medium
@@ -975,6 +969,7 @@ controls:
           equivalent).
       rules:
           - partition_for_home
+          - accounts_user_interactive_home_directory_on_separate_partition
       status: automated
 
     - id: RHEL-08-010820
@@ -1375,14 +1370,6 @@ controls:
           - sshd_disable_empty_passwords
       status: automated
 
-    - id: RHEL-08-020340
-      levels:
-          - low
-      title: RHEL 8 must display the date and time of the last successful account logon upon logon.
-      rules:
-          - display_login_attempts
-      status: automated
-
     - id: RHEL-08-020350
       levels:
           - medium
@@ -1418,6 +1405,16 @@ controls:
           - accounts_umask_etc_profile
       status: automated
 
+    - id: RHEL-08-020353
+      levels:
+          - medium
+      title: RHEL 8 must automatically exit interactive command shell user sessions after 10 minutes of inactivity.
+      rules:
+          - accounts_tmout
+          - var_accounts_tmout=10_min
+      status: automated
+
+
     - id: RHEL-08-030000
       levels:
           - medium
@@ -2810,14 +2807,6 @@ controls:
           - sshd_set_idle_timeout
       status: automated
 
-    - id: RHEL-08-010287
-      levels:
-          - medium
-      title: The RHEL 8 SSH daemon must be configured to use system-wide crypto policies.
-      rules:
-          - configure_ssh_crypto_policy
-      status: automated
-
     - id: RHEL-08-010472
       levels:
           - low
@@ -3159,14 +3148,6 @@ controls:
           - selinux_user_login_roles
       status: automated
 
-    - id: RHEL-08-040342
-      levels:
-          - medium
-      title: RHEL 8 SSH server must be configured to use only FIPS-validated key exchange algorithms.
-      rules:
-          - sshd_use_approved_kex_ordered_stig
-      status: automated
-
     - id: RHEL-08-010019
       levels:
           - medium
@@ -3204,20 +3185,26 @@ controls:
     - id: RHEL-08-010296
       levels:
           - medium
-      title: RHEL 8 SSH client must be configured to use only Message Authentication Codes (MACs) employing
-          FIPS 140-3 validated cryptographic hash algorithms.
+      title: The RHEL 8 SSH client must be configured to use only DOD-approved Message Authentication Codes (MACs) employing FIPS 140-3-validated cryptographic hash algorithms to protect the confidentiality of SSH client connections.
+      notes: This is implemented by a special STIG subpolicy.
       rules:
-          - harden_sshd_ciphers_openssh_conf_crypto_policy
-          - harden_sshd_macs_openssh_conf_crypto_policy
+          - configure_crypto_policy
+          - fips_crypto_subpolicy
+          - fips_custom_stig_sub_policy
+          - var_system_crypto_policy=fips_stig
       status: automated
 
     - id: RHEL-08-010297
       levels:
           - medium
-      title: RHEL 8 SSH client must be configured to use only ciphers employing FIPS 140-3 validated
-          cryptographic hash algorithms.
-      rules: []
-      status: pending
+      title: The RHEL 8 SSH client must be configured to use only DOD-approved encryption ciphers employing FIPS 140-3-validated cryptographic hash algorithms to protect the confidentiality of SSH client connections.
+      notes: This is implemented by a special STIG subpolicy.
+      rules:
+          - configure_crypto_policy
+          - fips_crypto_subpolicy
+          - fips_custom_stig_sub_policy
+          - var_system_crypto_policy=fips_stig
+      status: automated
 
     - id: RHEL-08-010455
       levels:
diff --git a/products/rhel8/kickstart/ssg-rhel8-anssi_bp28_enhanced-ks.cfg b/products/rhel8/kickstart/ssg-rhel8-anssi_bp28_enhanced-ks.cfg
index 1b95e71705f9..069855e80d26 100644
--- a/products/rhel8/kickstart/ssg-rhel8-anssi_bp28_enhanced-ks.cfg
+++ b/products/rhel8/kickstart/ssg-rhel8-anssi_bp28_enhanced-ks.cfg
@@ -80,7 +80,7 @@ zerombr
 
 # The following partition layout scheme assumes disk of size 20GB or larger
 # Modify size of partitions appropriately to reflect actual machine's hardware
-# 
+#
 # Remove Linux partitions from the system prior to creating new ones (optional)
 # --linux	erase all Linux partitions
 # --initlabel	initialize the disk label to the default based on the underlying architecture
@@ -95,15 +95,15 @@ part pv.01 --grow --size=1
 volgroup VolGroup pv.01
 
 # Create particular logical volumes (optional)
-logvol / --fstype=xfs --name=root --vgname=VolGroup --size=3192 --grow
+logvol / --fstype=xfs --name=root --vgname=VolGroup --size=1024 --grow
 # Ensure /usr Located On Separate Partition
-logvol /usr --fstype=xfs --name=usr --vgname=VolGroup --size=6536 --fsoptions="nodev"
+logvol /usr --fstype=xfs --name=usr --vgname=VolGroup --size=6667 --fsoptions="nodev"
 # Ensure /opt Located On Separate Partition
-logvol /opt --fstype=xfs --name=opt --vgname=VolGroup --size=512 --fsoptions="nodev,nosuid"
+logvol /opt --fstype=xfs --name=opt --vgname=VolGroup --size=128 --fsoptions="nodev,nosuid"
 # Ensure /srv Located On Separate Partition
-logvol /srv --fstype=xfs --name=srv --vgname=VolGroup --size=512 --fsoptions="nodev,nosuid"
+logvol /srv --fstype=xfs --name=srv --vgname=VolGroup --size=128 --fsoptions="nodev,nosuid"
 # Ensure /home Located On Separate Partition
-logvol /home --fstype=xfs --name=home --vgname=VolGroup --size=512 --fsoptions="nodev,nosuid"
+logvol /home --fstype=xfs --name=home --vgname=VolGroup --size=128 --fsoptions="nodev,nosuid"
 # Ensure /tmp Located On Separate Partition
 logvol /tmp --fstype=xfs --name=tmp --vgname=VolGroup --size=1024 --fsoptions="nodev,nosuid,noexec"
 # Ensure /var/tmp Located On Separate Partition
@@ -118,17 +118,17 @@ logvol swap --name=swap --vgname=VolGroup --size=2016
 
 # The OpenSCAP installer add-on is used to apply SCAP (Security Content Automation Protocol)
 # content - security policies - on the installed system.This add-on has been enabled by default
-# since Red Hat Enterprise Linux 7.2. When enabled, the packages necessary to provide this 
+# since Red Hat Enterprise Linux 7.2. When enabled, the packages necessary to provide this
 # functionality will automatically be installed. However, by default, no policies are enforced,
 # meaning that no checks are performed during or after installation unless specifically configured.
-#  
+#
 #  Important
 #   Applying a security policy is not necessary on all systems. This screen should only be used
 #   when a specific policy is mandated by your organization rules or government regulations.
 #   Unlike most other commands, this add-on does not accept regular options, but uses key-value
 #   pairs in the body of the %addon definition instead. These pairs are whitespace-agnostic.
 #   Values can be optionally enclosed in single quotes (') or double quotes (").
-#   
+#
 # For more details and configuration options see
 # https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/performing_an_advanced_rhel_8_installation/kickstart-commands-and-options-reference_installing-rhel-as-an-experienced-user#addon-org_fedora_oscap_kickstart-commands-for-addons-supplied-with-the-rhel-installation-program
 %addon org_fedora_oscap
diff --git a/products/rhel8/kickstart/ssg-rhel8-anssi_bp28_high-ks.cfg b/products/rhel8/kickstart/ssg-rhel8-anssi_bp28_high-ks.cfg
index 7b57de148d7f..3477225767b6 100644
--- a/products/rhel8/kickstart/ssg-rhel8-anssi_bp28_high-ks.cfg
+++ b/products/rhel8/kickstart/ssg-rhel8-anssi_bp28_high-ks.cfg
@@ -84,7 +84,7 @@ zerombr
 
 # The following partition layout scheme assumes disk of size 20GB or larger
 # Modify size of partitions appropriately to reflect actual machine's hardware
-# 
+#
 # Remove Linux partitions from the system prior to creating new ones (optional)
 # --linux	erase all Linux partitions
 # --initlabel	initialize the disk label to the default based on the underlying architecture
@@ -99,15 +99,15 @@ part pv.01 --grow --size=1
 volgroup VolGroup pv.01
 
 # Create particular logical volumes (optional)
-logvol / --fstype=xfs --name=root --vgname=VolGroup --size=3192 --grow
+logvol / --fstype=xfs --name=root --vgname=VolGroup --size=1024 --grow
 # Ensure /usr Located On Separate Partition
-logvol /usr --fstype=xfs --name=usr --vgname=VolGroup --size=6536 --fsoptions="nodev"
+logvol /usr --fstype=xfs --name=usr --vgname=VolGroup --size=6667 --fsoptions="nodev"
 # Ensure /opt Located On Separate Partition
-logvol /opt --fstype=xfs --name=opt --vgname=VolGroup --size=512 --fsoptions="nodev,nosuid"
+logvol /opt --fstype=xfs --name=opt --vgname=VolGroup --size=128 --fsoptions="nodev,nosuid"
 # Ensure /srv Located On Separate Partition
-logvol /srv --fstype=xfs --name=srv --vgname=VolGroup --size=512 --fsoptions="nodev,nosuid"
+logvol /srv --fstype=xfs --name=srv --vgname=VolGroup --size=128 --fsoptions="nodev,nosuid"
 # Ensure /home Located On Separate Partition
-logvol /home --fstype=xfs --name=home --vgname=VolGroup --size=512 --fsoptions="nodev,nosuid"
+logvol /home --fstype=xfs --name=home --vgname=VolGroup --size=128 --fsoptions="nodev,nosuid,noexec"
 # Ensure /tmp Located On Separate Partition
 logvol /tmp --fstype=xfs --name=tmp --vgname=VolGroup --size=1024 --fsoptions="nodev,nosuid,noexec"
 # Ensure /var/tmp Located On Separate Partition
@@ -123,17 +123,17 @@ logvol swap --name=swap --vgname=VolGroup --size=2016
 
 # The OpenSCAP installer add-on is used to apply SCAP (Security Content Automation Protocol)
 # content - security policies - on the installed system.This add-on has been enabled by default
-# since Red Hat Enterprise Linux 7.2. When enabled, the packages necessary to provide this 
+# since Red Hat Enterprise Linux 7.2. When enabled, the packages necessary to provide this
 # functionality will automatically be installed. However, by default, no policies are enforced,
 # meaning that no checks are performed during or after installation unless specifically configured.
-#  
+#
 #  Important
 #   Applying a security policy is not necessary on all systems. This screen should only be used
 #   when a specific policy is mandated by your organization rules or government regulations.
 #   Unlike most other commands, this add-on does not accept regular options, but uses key-value
 #   pairs in the body of the %addon definition instead. These pairs are whitespace-agnostic.
 #   Values can be optionally enclosed in single quotes (') or double quotes (").
-#   
+#
 # For more details and configuration options see
 # https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/performing_an_advanced_rhel_8_installation/kickstart-commands-and-options-reference_installing-rhel-as-an-experienced-user#addon-org_fedora_oscap_kickstart-commands-for-addons-supplied-with-the-rhel-installation-program
 %addon org_fedora_oscap
diff --git a/products/rhel8/kickstart/ssg-rhel8-anssi_bp28_intermediary-ks.cfg b/products/rhel8/kickstart/ssg-rhel8-anssi_bp28_intermediary-ks.cfg
index 9080117a63c3..5789b94da59d 100644
--- a/products/rhel8/kickstart/ssg-rhel8-anssi_bp28_intermediary-ks.cfg
+++ b/products/rhel8/kickstart/ssg-rhel8-anssi_bp28_intermediary-ks.cfg
@@ -81,7 +81,7 @@ zerombr
 
 # The following partition layout scheme assumes disk of size 20GB or larger
 # Modify size of partitions appropriately to reflect actual machine's hardware
-# 
+#
 # Remove Linux partitions from the system prior to creating new ones (optional)
 # --linux	erase all Linux partitions
 # --initlabel	initialize the disk label to the default based on the underlying architecture
@@ -96,15 +96,15 @@ part pv.01 --grow --size=1
 volgroup VolGroup pv.01
 
 # Create particular logical volumes (optional)
-logvol / --fstype=xfs --name=root --vgname=VolGroup --size=3192 --grow
+logvol / --fstype=xfs --name=root --vgname=VolGroup --size=1024 --grow
 # Ensure /usr Located On Separate Partition
-logvol /usr --fstype=xfs --name=usr --vgname=VolGroup --size=6536 --fsoptions="nodev"
+logvol /usr --fstype=xfs --name=usr --vgname=VolGroup --size=6667 --fsoptions="nodev"
 # Ensure /opt Located On Separate Partition
-logvol /opt --fstype=xfs --name=opt --vgname=VolGroup --size=512 --fsoptions="nodev,nosuid"
+logvol /opt --fstype=xfs --name=opt --vgname=VolGroup --size=128 --fsoptions="nodev,nosuid"
 # Ensure /srv Located On Separate Partition
-logvol /srv --fstype=xfs --name=srv --vgname=VolGroup --size=512 --fsoptions="nodev,nosuid"
+logvol /srv --fstype=xfs --name=srv --vgname=VolGroup --size=128 --fsoptions="nodev,nosuid"
 # Ensure /home Located On Separate Partition
-logvol /home --fstype=xfs --name=home --vgname=VolGroup --size=512 --fsoptions="nodev,nosuid,noexec"
+logvol /home --fstype=xfs --name=home --vgname=VolGroup --size=128 --fsoptions="nodev,nosuid,noexec"
 # Ensure /tmp Located On Separate Partition
 logvol /tmp --fstype=xfs --name=tmp --vgname=VolGroup --size=1024 --fsoptions="nodev,nosuid,noexec"
 # Ensure /var/tmp Located On Separate Partition
@@ -119,17 +119,17 @@ logvol swap --name=swap --vgname=VolGroup --size=2016
 
 # The OpenSCAP installer add-on is used to apply SCAP (Security Content Automation Protocol)
 # content - security policies - on the installed system.This add-on has been enabled by default
-# since Red Hat Enterprise Linux 7.2. When enabled, the packages necessary to provide this 
+# since Red Hat Enterprise Linux 7.2. When enabled, the packages necessary to provide this
 # functionality will automatically be installed. However, by default, no policies are enforced,
 # meaning that no checks are performed during or after installation unless specifically configured.
-#  
+#
 #  Important
 #   Applying a security policy is not necessary on all systems. This screen should only be used
 #   when a specific policy is mandated by your organization rules or government regulations.
 #   Unlike most other commands, this add-on does not accept regular options, but uses key-value
 #   pairs in the body of the %addon definition instead. These pairs are whitespace-agnostic.
 #   Values can be optionally enclosed in single quotes (') or double quotes (").
-#   
+#
 # For more details and configuration options see
 # https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/performing_an_advanced_rhel_8_installation/kickstart-commands-and-options-reference_installing-rhel-as-an-experienced-user#addon-org_fedora_oscap_kickstart-commands-for-addons-supplied-with-the-rhel-installation-program
 %addon org_fedora_oscap
diff --git a/products/rhel8/profiles/default.profile b/products/rhel8/profiles/default.profile
index 8b3cd0016da6..7e7401a04ac7 100644
--- a/products/rhel8/profiles/default.profile
+++ b/products/rhel8/profiles/default.profile
@@ -731,3 +731,11 @@ selections:
     - package_xorg-x11-server-common_removed
     - accounts_users_netrc_file_permissions
     - journald_forward_to_syslog
+    - harden_sshd_ciphers_opensshserver_conf_crypto_policy
+    - harden_sshd_macs_opensshserver_conf_crypto_policy
+    - sysctl_crypto_fips_enabled
+    - configure_gnutls_tls_crypto_policy
+    - configure_openssl_tls_crypto_policy
+    - sshd_use_approved_kex_ordered_stig
+    - accounts_user_dot_no_world_writable_programs
+    - package_dnsmasq_removed
diff --git a/products/rhel8/profiles/rht-ccp.profile b/products/rhel8/profiles/rht-ccp.profile
index 4e67d3893c0c..cff0b644c55a 100644
--- a/products/rhel8/profiles/rht-ccp.profile
+++ b/products/rhel8/profiles/rht-ccp.profile
@@ -27,6 +27,7 @@ selections:
     - var_password_pam_difok=3
     - var_password_pam_unix_remember=5
     - var_accounts_user_umask=077
+    - login_banner_contents=usgcb_default
     - login_banner_text=usgcb_default
     - partition_for_tmp
     - partition_for_var
diff --git a/products/rhel8/profiles/stig.profile b/products/rhel8/profiles/stig.profile
index 0369365b5d48..093b78a38b73 100644
--- a/products/rhel8/profiles/stig.profile
+++ b/products/rhel8/profiles/stig.profile
@@ -2,7 +2,7 @@
 documentation_complete: true
 
 metadata:
-    version: V2R5
+    version: V2R6
     SMEs:
         - mab879
         - ggbecker
@@ -13,7 +13,7 @@ title: 'DISA STIG for Red Hat Enterprise Linux 8'
 
 description: |-
     This profile contains configuration checks that align to the
-    DISA STIG for Red Hat Enterprise Linux 8 V2R5.
+    DISA STIG for Red Hat Enterprise Linux 8 V2R6.
 
     In addition to being applicable to Red Hat Enterprise Linux 8, this
     configuration baseline is applicable to the operating system tier of
diff --git a/products/rhel8/profiles/stig_gui.profile b/products/rhel8/profiles/stig_gui.profile
index 6d3e322442a5..56f1126f614b 100644
--- a/products/rhel8/profiles/stig_gui.profile
+++ b/products/rhel8/profiles/stig_gui.profile
@@ -2,7 +2,7 @@
 documentation_complete: true
 
 metadata:
-    version: V2R5
+    version: V2R6
     SMEs:
         - mab879
         - ggbecker
@@ -13,7 +13,7 @@ title: 'DISA STIG with GUI for Red Hat Enterprise Linux 8'
 
 description: |-
     This profile contains configuration checks that align to the
-    DISA STIG with GUI for Red Hat Enterprise Linux 8 V2R5.
+    DISA STIG with GUI for Red Hat Enterprise Linux 8 V2R6.
 
     In addition to being applicable to Red Hat Enterprise Linux 8, this
     configuration baseline is applicable to the operating system tier of
diff --git a/products/rhel9/controls/ccn_rhel9.yml b/products/rhel9/controls/ccn_rhel9.yml
index 6f0dcc2928f3..84a168b77395 100644
--- a/products/rhel9/controls/ccn_rhel9.yml
+++ b/products/rhel9/controls/ccn_rhel9.yml
@@ -635,11 +635,17 @@ controls:
           - banner_etc_issue
           - banner_etc_issue_net
           - banner_etc_motd
+          - motd_banner_text=cis_banners
+          - motd_banner_contents=cis_default
           - dconf_gnome_banner_enabled
           - dconf_gnome_login_banner_text
+          - dconf_login_banner_text=cis_banners
+          - dconf_login_banner_contents=cis_default
           - sshd_enable_warning_banner_net
           - login_banner_text=cis_banners
+          - login_banner_contents=cis_default
           - remote_login_banner_text=cis_banners
+          - remote_login_banner_contents=cis_default
 
     - id: A.11.SEC-RHEL5
       title: Network Acess to the System is Controlled
diff --git a/products/rhel9/controls/cis_rhel9.yml b/products/rhel9/controls/cis_rhel9.yml
index f73fbd1f6d79..d96d8ad21fed 100644
--- a/products/rhel9/controls/cis_rhel9.yml
+++ b/products/rhel9/controls/cis_rhel9.yml
@@ -361,9 +361,14 @@ controls:
       levels:
           - l1_server
           - l1_workstation
-      status: manual
-      related_rules:
+      status: partial
+      rules:
           - ensure_redhat_gpgkey_installed
+      notes: >
+        In CIS Benchmark, the requirement is manual, because of GPG keys for 3rd party repositories.
+        But, add the rule ensure_redhat_gpgkey_installed to the profile because the requirement 1.2.1.2
+        adds ensure_gpgcheck_never_disabled which requires GPG key checking. If the Red Hat
+        GPG key wouldn't be installed, people won't be able to install any RPM package using dnf.
 
     - id: 1.2.1.2
       title: Ensure gpgcheck is globally activated (Automated)
@@ -690,7 +695,8 @@ controls:
       rules:
           - dconf_gnome_banner_enabled
           - dconf_gnome_login_banner_text
-          - login_banner_text=cis_banners
+          - dconf_login_banner_text=cis_banners
+          - dconf_login_banner_contents=cis_default
 
     - id: 1.8.3
       title: Ensure GDM disable-user-list option is enabled (Automated)
@@ -819,6 +825,8 @@ controls:
           - l1_workstation
       status: automated
       rules:
+          - service_dnsmasq_disabled
+      related_rules:
           - package_dnsmasq_removed
 
     - id: 2.1.6
diff --git a/products/rhel9/controls/stig_rhel9.yml b/products/rhel9/controls/stig_rhel9.yml
index 03d14b620735..554496291306 100644
--- a/products/rhel9/controls/stig_rhel9.yml
+++ b/products/rhel9/controls/stig_rhel9.yml
@@ -3,7 +3,7 @@ policy: 'Red Hat Enterprise Linux 9 Security Technical Implementation Guide'
 title: 'Red Hat Enterprise Linux 9 Security Technical Implementation Guide'
 id: stig_rhel9
 source: https://www.cyber.mil/stigs/downloads/
-version: V2R4
+version: V2R7
 reference_type: stigid
 product: rhel9
 
@@ -25,6 +25,8 @@ controls:
           - medium
       rules:
           - dconf_gnome_login_banner_text
+          - dconf_login_banner_text=dod_banners
+          - dconf_login_banner_contents=dod_default
     - id: RHEL-09-211010
       levels:
           - high
@@ -49,6 +51,7 @@ controls:
       rules:
           - banner_etc_issue
           - login_banner_text=dod_banners
+          - login_banner_contents=dod_default
       status: automated
 
     - id: RHEL-09-211030
@@ -1303,7 +1306,7 @@ controls:
       title: All RHEL 9 world-writable directories must be owned by root, sys, bin, or an application
           user.
       rules:
-          - dir_perms_world_writable_root_owned
+          - dir_perms_world_writable_system_owned
       status: automated
 
     - id: RHEL-09-232245
@@ -1766,23 +1769,6 @@ controls:
           - sshd_enable_pam
       status: automated
 
-    - id: RHEL-09-255055
-      levels:
-          - medium
-      title: RHEL 9 SSH daemon must be configured to use system-wide crypto policies.
-      rules:
-          - file_sshd_50_redhat_exists
-          - sshd_include_crypto_policy
-      status: automated
-
-    - id: RHEL-09-255060
-      levels:
-          - medium
-      title: RHEL 9 must implement DOD-approved encryption ciphers to protect the confidentiality of
-          SSH client connections.
-      rules:
-          - sshd_include_crypto_policy
-      status: automated
     - id: RHEL-09-255064
       title: The RHEL 9 SSH client must be configured to use only DOD-approved encryption ciphers employing
           FIPS 140-3 validated cryptographic hash algorithms to protect the confidentiality of SSH client
@@ -1795,9 +1781,10 @@ controls:
     - id: RHEL-09-255065
       levels:
           - medium
-      title: RHEL 9 must implement DOD-approved encryption ciphers to protect the confidentiality of
-          SSH server connections.
+      title: The RHEL 9 SSH server must be configured to use only DOD-approved encryption ciphers employing
+          FIPS 140-3 validated cryptographic hash algorithms to protect the confidentiality of SSH server connections.
       rules:
+          - sshd_include_crypto_policy
           - harden_sshd_ciphers_opensshserver_conf_crypto_policy
           - sshd_approved_ciphers=stig_rhel9
       status: automated
@@ -1872,6 +1859,7 @@ controls:
           - medium
       title: RHEL 9 SSH server configuration file must be group-owned by root.
       rules:
+          - file_sshd_50_redhat_exists
           - file_groupowner_sshd_config
           - directory_groupowner_sshd_config_d
           - file_groupowner_sshd_drop_in_config
@@ -1882,6 +1870,7 @@ controls:
           - medium
       title: RHEL 9 SSH server configuration file must be owned by root.
       rules:
+          - file_sshd_50_redhat_exists
           - file_owner_sshd_config
           - directory_owner_sshd_config_d
           - file_owner_sshd_drop_in_config
@@ -2087,9 +2076,10 @@ controls:
     - id: RHEL-09-271065
       levels:
           - medium
-      title: RHEL 9 must automatically lock graphical user sessions after 15 minutes of inactivity.
+      title: RHEL 9 must automatically lock graphical user sessions after 10 minutes of inactivity.
       rules:
           - dconf_gnome_screensaver_idle_delay
+          - inactivity_timeout_value=10_minutes
       status: automated
 
     - id: RHEL-09-271070
@@ -2495,7 +2485,7 @@ controls:
       title: RHEL 9 must terminate idle user sessions.
       rules:
           - logind_session_timeout
-          - var_logind_session_timeout=15_minutes
+          - var_logind_session_timeout=10_minutes
       status: automated
 
     - id: RHEL-09-431010
@@ -3280,14 +3270,6 @@ controls:
           roles appointed by the ISSM) to select which auditable events are to be audited.
       rules:
           - file_permissions_audit_configuration
-      status: automated
-
-    - id: RHEL-09-653115
-      levels:
-          - medium
-      title: RHEL 9 /etc/audit/auditd.conf file must have 0640 or less permissive to prevent unauthorized
-          access.
-      rules:
           - file_permissions_etc_audit_auditd
       status: automated
 
@@ -3484,6 +3466,16 @@ controls:
           - audit_rules_privileged_commands_crontab
       status: automated
 
+    - id: RHEL-09-654097
+      levels:
+          - medium
+      title: RHEL 9 must audit any script or executable called by cron as root or by any privileged user.
+      rules:
+          - audit_rules_etc_cron_d
+          - audit_rules_var_spool_cron
+      status: automated
+
+
     - id: RHEL-09-654100
       levels:
           - medium
@@ -3820,7 +3812,7 @@ controls:
     - id: RHEL-09-672020
       levels:
           - medium
-      title: RHEL 9 crypto policy must not be overridden.
+      title: RHEL 9 cryptographic policy must not be overridden.
       notes: Rules for this control are intentionally not implemented. Checking whether files under /etc/crypto-policies/back-ends/
           are symlinks is not an appropriate way to verify the consistency of the system's cryptographic settings.
           The suggested fix mentioned in the STIG does not fully satisfy its own requirements, as it also symlinks the nss.config file.
@@ -3830,16 +3822,6 @@ controls:
           More information can be found at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/security_hardening/switching-rhel-to-fips-mode_security-hardening
       status: pending
 
-    - id: RHEL-09-672025
-      levels:
-          - medium
-      title: RHEL 9 must use mechanisms meeting the requirements of applicable federal laws, executive
-          orders, directives, policies, regulations, standards, and guidance for authentication to a
-          cryptographic module.
-      rules:
-          - configure_kerberos_crypto_policy
-      status: automated
-
     - id: RHEL-09-672030
       levels:
           - high
diff --git a/products/rhel9/kickstart/ssg-rhel9-anssi_bp28_enhanced-ks.cfg b/products/rhel9/kickstart/ssg-rhel9-anssi_bp28_enhanced-ks.cfg
index 5b170c0a635f..48dbcf396ce8 100644
--- a/products/rhel9/kickstart/ssg-rhel9-anssi_bp28_enhanced-ks.cfg
+++ b/products/rhel9/kickstart/ssg-rhel9-anssi_bp28_enhanced-ks.cfg
@@ -80,7 +80,7 @@ zerombr
 
 # The following partition layout scheme assumes disk of size 20GB or larger
 # Modify size of partitions appropriately to reflect actual machine's hardware
-# 
+#
 # Remove Linux partitions from the system prior to creating new ones (optional)
 # --linux	erase all Linux partitions
 # --initlabel	initialize the disk label to the default based on the underlying architecture
@@ -95,15 +95,15 @@ part pv.01 --grow --size=1
 volgroup VolGroup pv.01
 
 # Create particular logical volumes (optional)
-logvol / --fstype=xfs --name=root --vgname=VolGroup --size=3192 --grow
+logvol / --fstype=xfs --name=root --vgname=VolGroup --size=1024 --grow
 # Ensure /usr Located On Separate Partition
-logvol /usr --fstype=xfs --name=usr --vgname=VolGroup --size=5000 --fsoptions="nodev"
+logvol /usr --fstype=xfs --name=usr --vgname=VolGroup --size=6667 --fsoptions="nodev"
 # Ensure /opt Located On Separate Partition
-logvol /opt --fstype=xfs --name=opt --vgname=VolGroup --size=1024 --fsoptions="nodev,nosuid"
+logvol /opt --fstype=xfs --name=opt --vgname=VolGroup --size=128 --fsoptions="nodev,nosuid"
 # Ensure /srv Located On Separate Partition
-logvol /srv --fstype=xfs --name=srv --vgname=VolGroup --size=1024 --fsoptions="nodev,nosuid"
+logvol /srv --fstype=xfs --name=srv --vgname=VolGroup --size=128 --fsoptions="nodev,nosuid"
 # Ensure /home Located On Separate Partition
-logvol /home --fstype=xfs --name=home --vgname=VolGroup --size=1024 --fsoptions="nodev,noexec,nosuid"
+logvol /home --fstype=xfs --name=home --vgname=VolGroup --size=128 --fsoptions="nodev,noexec,nosuid"
 # Ensure /tmp Located On Separate Partition
 logvol /tmp --fstype=xfs --name=tmp --vgname=VolGroup --size=1024 --fsoptions="nodev,nosuid,noexec"
 # Ensure /var/tmp Located On Separate Partition
@@ -118,17 +118,17 @@ logvol swap --name=swap --vgname=VolGroup --size=2016
 
 # The OpenSCAP installer add-on is used to apply SCAP (Security Content Automation Protocol)
 # content - security policies - on the installed system.This add-on has been enabled by default
-# since Red Hat Enterprise Linux 7.2. When enabled, the packages necessary to provide this 
+# since Red Hat Enterprise Linux 7.2. When enabled, the packages necessary to provide this
 # functionality will automatically be installed. However, by default, no policies are enforced,
 # meaning that no checks are performed during or after installation unless specifically configured.
-#  
+#
 #  Important
 #   Applying a security policy is not necessary on all systems. This screen should only be used
 #   when a specific policy is mandated by your organization rules or government regulations.
 #   Unlike most other commands, this add-on does not accept regular options, but uses key-value
 #   pairs in the body of the %addon definition instead. These pairs are whitespace-agnostic.
 #   Values can be optionally enclosed in single quotes (') or double quotes (").
-#   
+#
 # For more details and configuration options see
 # https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html-single/performing_an_advanced_rhel_9_installation/index#addon-com_redhat_oscap_kickstart-commands-for-addons-supplied-with-the-rhel-installation-program
 %addon com_redhat_oscap
diff --git a/products/rhel9/kickstart/ssg-rhel9-anssi_bp28_high-ks.cfg b/products/rhel9/kickstart/ssg-rhel9-anssi_bp28_high-ks.cfg
index 2bd43b2fa6cf..bbb3a2cadf90 100644
--- a/products/rhel9/kickstart/ssg-rhel9-anssi_bp28_high-ks.cfg
+++ b/products/rhel9/kickstart/ssg-rhel9-anssi_bp28_high-ks.cfg
@@ -84,7 +84,7 @@ zerombr
 
 # The following partition layout scheme assumes disk of size 20GB or larger
 # Modify size of partitions appropriately to reflect actual machine's hardware
-# 
+#
 # Remove Linux partitions from the system prior to creating new ones (optional)
 # --linux	erase all Linux partitions
 # --initlabel	initialize the disk label to the default based on the underlying architecture
@@ -99,15 +99,15 @@ part pv.01 --grow --size=1
 volgroup VolGroup pv.01
 
 # Create particular logical volumes (optional)
-logvol / --fstype=xfs --name=root --vgname=VolGroup --size=3192 --grow
+logvol / --fstype=xfs --name=root --vgname=VolGroup --size=1024 --grow
 # Ensure /usr Located On Separate Partition
-logvol /usr --fstype=xfs --name=usr --vgname=VolGroup --size=5000 --fsoptions="nodev"
+logvol /usr --fstype=xfs --name=usr --vgname=VolGroup --size=6667 --fsoptions="nodev"
 # Ensure /opt Located On Separate Partition
-logvol /opt --fstype=xfs --name=opt --vgname=VolGroup --size=1024 --fsoptions="nodev,nosuid"
+logvol /opt --fstype=xfs --name=opt --vgname=VolGroup --size=128 --fsoptions="nodev,nosuid"
 # Ensure /srv Located On Separate Partition
-logvol /srv --fstype=xfs --name=srv --vgname=VolGroup --size=1024 --fsoptions="nodev,nosuid"
+logvol /srv --fstype=xfs --name=srv --vgname=VolGroup --size=128 --fsoptions="nodev,nosuid"
 # Ensure /home Located On Separate Partition
-logvol /home --fstype=xfs --name=home --vgname=VolGroup --size=1024 --fsoptions="nodev,nosuid,noexec"
+logvol /home --fstype=xfs --name=home --vgname=VolGroup --size=128 --fsoptions="nodev,nosuid,noexec"
 # Ensure /tmp Located On Separate Partition
 logvol /tmp --fstype=xfs --name=tmp --vgname=VolGroup --size=1024 --fsoptions="nodev,nosuid,noexec"
 # Ensure /var/tmp Located On Separate Partition
@@ -122,17 +122,17 @@ logvol swap --name=swap --vgname=VolGroup --size=2016
 
 # The OpenSCAP installer add-on is used to apply SCAP (Security Content Automation Protocol)
 # content - security policies - on the installed system.This add-on has been enabled by default
-# since Red Hat Enterprise Linux 7.2. When enabled, the packages necessary to provide this 
+# since Red Hat Enterprise Linux 7.2. When enabled, the packages necessary to provide this
 # functionality will automatically be installed. However, by default, no policies are enforced,
 # meaning that no checks are performed during or after installation unless specifically configured.
-#  
+#
 #  Important
 #   Applying a security policy is not necessary on all systems. This screen should only be used
 #   when a specific policy is mandated by your organization rules or government regulations.
 #   Unlike most other commands, this add-on does not accept regular options, but uses key-value
 #   pairs in the body of the %addon definition instead. These pairs are whitespace-agnostic.
 #   Values can be optionally enclosed in single quotes (') or double quotes (").
-#   
+#
 # For more details and configuration options see
 # https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html-single/performing_an_advanced_rhel_9_installation/index#addon-com_redhat_oscap_kickstart-commands-for-addons-supplied-with-the-rhel-installation-program
 %addon com_redhat_oscap
diff --git a/products/rhel9/kickstart/ssg-rhel9-anssi_bp28_intermediary-ks.cfg b/products/rhel9/kickstart/ssg-rhel9-anssi_bp28_intermediary-ks.cfg
index 4feee55f0f8c..d5649e10ece3 100644
--- a/products/rhel9/kickstart/ssg-rhel9-anssi_bp28_intermediary-ks.cfg
+++ b/products/rhel9/kickstart/ssg-rhel9-anssi_bp28_intermediary-ks.cfg
@@ -80,7 +80,7 @@ zerombr
 
 # The following partition layout scheme assumes disk of size 20GB or larger
 # Modify size of partitions appropriately to reflect actual machine's hardware
-# 
+#
 # Remove Linux partitions from the system prior to creating new ones (optional)
 # --linux	erase all Linux partitions
 # --initlabel	initialize the disk label to the default based on the underlying architecture
@@ -95,15 +95,15 @@ part pv.01 --grow --size=1
 volgroup VolGroup pv.01
 
 # Create particular logical volumes (optional)
-logvol / --fstype=xfs --name=root --vgname=VolGroup --size=3192 --grow
+logvol / --fstype=xfs --name=root --vgname=VolGroup --size=1024 --grow
 # Ensure /usr Located On Separate Partition
-logvol /usr --fstype=xfs --name=usr --vgname=VolGroup --size=5000 --fsoptions="nodev"
+logvol /usr --fstype=xfs --name=usr --vgname=VolGroup --size=6667 --fsoptions="nodev"
 # Ensure /opt Located On Separate Partition
-logvol /opt --fstype=xfs --name=opt --vgname=VolGroup --size=1024 --fsoptions="nodev,nosuid"
+logvol /opt --fstype=xfs --name=opt --vgname=VolGroup --size=128 --fsoptions="nodev,nosuid"
 # Ensure /srv Located On Separate Partition
-logvol /srv --fstype=xfs --name=srv --vgname=VolGroup --size=1024 --fsoptions="nodev,nosuid"
+logvol /srv --fstype=xfs --name=srv --vgname=VolGroup --size=128 --fsoptions="nodev,nosuid"
 # Ensure /home Located On Separate Partition
-logvol /home --fstype=xfs --name=home --vgname=VolGroup --size=1024 --fsoptions="nodev,nosuid,noexec"
+logvol /home --fstype=xfs --name=home --vgname=VolGroup --size=128 --fsoptions="nodev,nosuid,noexec"
 # Ensure /tmp Located On Separate Partition
 logvol /tmp --fstype=xfs --name=tmp --vgname=VolGroup --size=1024 --fsoptions="nodev,nosuid,noexec"
 # Ensure /var/tmp Located On Separate Partition
@@ -118,17 +118,17 @@ logvol swap --name=swap --vgname=VolGroup --size=2016
 
 # The OpenSCAP installer add-on is used to apply SCAP (Security Content Automation Protocol)
 # content - security policies - on the installed system.This add-on has been enabled by default
-# since Red Hat Enterprise Linux 7.2. When enabled, the packages necessary to provide this 
+# since Red Hat Enterprise Linux 7.2. When enabled, the packages necessary to provide this
 # functionality will automatically be installed. However, by default, no policies are enforced,
 # meaning that no checks are performed during or after installation unless specifically configured.
-#  
+#
 #  Important
 #   Applying a security policy is not necessary on all systems. This screen should only be used
 #   when a specific policy is mandated by your organization rules or government regulations.
 #   Unlike most other commands, this add-on does not accept regular options, but uses key-value
 #   pairs in the body of the %addon definition instead. These pairs are whitespace-agnostic.
 #   Values can be optionally enclosed in single quotes (') or double quotes (").
-#   
+#
 # For more details and configuration options see
 # https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html-single/performing_an_advanced_rhel_9_installation/index#addon-com_redhat_oscap_kickstart-commands-for-addons-supplied-with-the-rhel-installation-program
 %addon com_redhat_oscap
diff --git a/products/rhel9/kickstart/ssg-rhel9-bsi-ks.cfg b/products/rhel9/kickstart/ssg-rhel9-bsi-ks.cfg
index e696055b9140..68a69d4d0d9c 100644
--- a/products/rhel9/kickstart/ssg-rhel9-bsi-ks.cfg
+++ b/products/rhel9/kickstart/ssg-rhel9-bsi-ks.cfg
@@ -97,16 +97,16 @@ part pv.01 --grow --size=1
 volgroup VolGroup pv.01
 
 # Create particular logical volumes (optional)
-logvol / --fstype=xfs --name=root --vgname=VolGroup --size=4272
+logvol / --fstype=xfs --name=root --vgname=VolGroup --size=1024 --grow
 # Ensure /usr Located On Separate Partition
 # partition_for_usr
-logvol /usr --fstype=xfs --name=usr --vgname=VolGroup --size=5000 --fsoptions="nodev"
+logvol /usr --fstype=xfs --name=usr --vgname=VolGroup --size=6667 --fsoptions="nodev"
 # Ensure /opt Located On Separate Partition
 # partition_for_opt
-logvol /opt --fstype=xfs --name=opt --vgname=VolGroup --size=1024
+logvol /opt --fstype=xfs --name=opt --vgname=VolGroup --size=128
 # Ensure /home Located On Separate Partition
 # partition_for_home
-logvol /home --fstype=xfs --name=home --vgname=VolGroup --size=1024 --fsoptions="nodev"
+logvol /home --fstype=xfs --name=home --vgname=VolGroup --size=512 --fsoptions="nodev"
 # Ensure /tmp Located On Separate Partition
 # partition_for_tmp
 logvol /tmp --fstype=xfs --name=tmp --vgname=VolGroup --size=1024 --fsoptions="nodev,noexec,nosuid"
@@ -115,7 +115,7 @@ logvol /tmp --fstype=xfs --name=tmp --vgname=VolGroup --size=1024 --fsoptions="n
 logvol /var/tmp --fstype=xfs --name=vartmp --vgname=VolGroup --size=1024 --fsoptions="nodev,nosuid,noexec"
 # Ensure /var Located On Separate Partition
 # partition_for_var
-logvol /var --fstype=xfs --name=var --vgname=VolGroup --size=3072
+logvol /var --fstype=xfs --name=var --vgname=VolGroup --size=4096
 # Ensure /var/log Located On Separate Partition
 # partition_for_var_log
 logvol /var/log --fstype=xfs --name=varlog --vgname=VolGroup --size=1024
diff --git a/products/rhel9/kickstart/ssg-rhel9-ccn_intermediate-ks.cfg b/products/rhel9/kickstart/ssg-rhel9-ccn_intermediate-ks.cfg
index 263be16f4566..73e367ce22dc 100644
--- a/products/rhel9/kickstart/ssg-rhel9-ccn_intermediate-ks.cfg
+++ b/products/rhel9/kickstart/ssg-rhel9-ccn_intermediate-ks.cfg
@@ -94,7 +94,7 @@ part pv.01 --grow --size=1
 volgroup VolGroup pv.01
 
 # Create particular logical volumes (optional)
-logvol / --fstype=xfs --name=root --vgname=VolGroup --size=9728 --grow
+logvol / --fstype=xfs --name=root --vgname=VolGroup --size=1024 --grow
 # Ensure /home Located On Separate Partition
 logvol /home --fstype=xfs --name=home --vgname=VolGroup --size=1024 --fsoptions="nodev"
 # Ensure /tmp Located On Separate Partition
@@ -111,17 +111,17 @@ logvol swap --name=swap --vgname=VolGroup --size=2016
 
 # The OpenSCAP installer add-on is used to apply SCAP (Security Content Automation Protocol)
 # content - security policies - on the installed system.This add-on has been enabled by default
-# since Red Hat Enterprise Linux 7.2. When enabled, the packages necessary to provide this 
+# since Red Hat Enterprise Linux 7.2. When enabled, the packages necessary to provide this
 # functionality will automatically be installed. However, by default, no policies are enforced,
 # meaning that no checks are performed during or after installation unless specifically configured.
-#  
+#
 #  Important
 #   Applying a security policy is not necessary on all systems. This screen should only be used
 #   when a specific policy is mandated by your organization rules or government regulations.
 #   Unlike most other commands, this add-on does not accept regular options, but uses key-value
 #   pairs in the body of the %addon definition instead. These pairs are whitespace-agnostic.
 #   Values can be optionally enclosed in single quotes (') or double quotes (").
-#   
+#
 # For more details and configuration options see
 # https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html-single/performing_an_advanced_rhel_9_installation/index#addon-com_redhat_oscap_kickstart-commands-for-addons-supplied-with-the-rhel-installation-program
 %addon com_redhat_oscap
diff --git a/products/rhel9/kickstart/ssg-rhel9-pci-dss-ks.cfg b/products/rhel9/kickstart/ssg-rhel9-pci-dss-ks.cfg
index 55a0a069cac0..cbb5ce7e2dcb 100644
--- a/products/rhel9/kickstart/ssg-rhel9-pci-dss-ks.cfg
+++ b/products/rhel9/kickstart/ssg-rhel9-pci-dss-ks.cfg
@@ -78,7 +78,7 @@ zerombr
 
 # The following partition layout scheme assumes disk of size 20GB or larger
 # Modify size of partitions appropriately to reflect actual machine's hardware
-# 
+#
 # Remove Linux partitions from the system prior to creating new ones (optional)
 # --linux	erase all Linux partitions
 # --initlabel	initialize the disk label to the default based on the underlying architecture
@@ -93,32 +93,32 @@ part pv.01 --grow --size=1
 volgroup VolGroup pv.01
 
 # Create particular logical volumes (optional)
-logvol / --fstype=xfs --name=root --vgname=VolGroup --size=5120 --grow
+logvol / --fstype=xfs --name=root --vgname=VolGroup --size=1024 --grow
 # CCE-26557-9: Ensure /home Located On Separate Partition
-logvol /home --fstype=xfs --name=home --vgname=VolGroup --size=1024 --fsoptions="nodev"
+logvol /home --fstype=xfs --name=home --vgname=VolGroup --size=512 --fsoptions="nodev"
 # CCE-26435-8: Ensure /tmp Located On Separate Partition
 logvol /tmp --fstype=xfs --name=tmp --vgname=VolGroup --size=1024 --fsoptions="nodev,noexec,nosuid"
 # CCE-26639-5: Ensure /var Located On Separate Partition
-logvol /var --fstype=xfs --name=var --vgname=VolGroup --size=3072 --fsoptions="nodev"
+logvol /var --fstype=xfs --name=var --vgname=VolGroup --size=4096 --fsoptions="nodev"
 # CCE-26215-4: Ensure /var/log Located On Separate Partition
-logvol /var/log --fstype=xfs --name=varlog --vgname=VolGroup --size=1024 --fsoptions="nodev"
+logvol /var/log --fstype=xfs --name=varlog --vgname=VolGroup --size=512 --fsoptions="nodev"
 # CCE-26436-6: Ensure /var/log/audit Located On Separate Partition
 logvol /var/log/audit --fstype=xfs --name=varlogaudit --vgname=VolGroup --size=512 --fsoptions="nodev"
 logvol swap --name=swap --vgname=VolGroup --size=2016
 
 # The OpenSCAP installer add-on is used to apply SCAP (Security Content Automation Protocol)
 # content - security policies - on the installed system.This add-on has been enabled by default
-# since Red Hat Enterprise Linux 7.2. When enabled, the packages necessary to provide this 
+# since Red Hat Enterprise Linux 7.2. When enabled, the packages necessary to provide this
 # functionality will automatically be installed. However, by default, no policies are enforced,
 # meaning that no checks are performed during or after installation unless specifically configured.
-#  
+#
 #  Important
 #   Applying a security policy is not necessary on all systems. This screen should only be used
 #   when a specific policy is mandated by your organization rules or government regulations.
 #   Unlike most other commands, this add-on does not accept regular options, but uses key-value
 #   pairs in the body of the %addon definition instead. These pairs are whitespace-agnostic.
 #   Values can be optionally enclosed in single quotes (') or double quotes (").
-#   
+#
 # For more details and configuration options see
 # https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html-single/performing_an_advanced_rhel_9_installation/index#addon-com_redhat_oscap_kickstart-commands-for-addons-supplied-with-the-rhel-installation-program
 %addon com_redhat_oscap
diff --git a/products/rhel9/profiles/default.profile b/products/rhel9/profiles/default.profile
index 20b0a150da0c..f817322dbdab 100644
--- a/products/rhel9/profiles/default.profile
+++ b/products/rhel9/profiles/default.profile
@@ -13,6 +13,7 @@ description: |-
     is to keep a rule in the product's XCCDF Benchmark.
 
 selections:
+    - configure_kerberos_crypto_policy
     - sshd_use_strong_kex
     - sebool_nfsd_anon_write
     - sebool_squid_connect_any
@@ -591,3 +592,4 @@ selections:
     - audit_rules_login_events_tallylog
     - configure_ssh_crypto_policy
     - accounts_user_dot_no_world_writable_programs
+    - package_dnsmasq_removed
diff --git a/products/rhel9/profiles/stig.profile b/products/rhel9/profiles/stig.profile
index 25ec12884fcc..d2d156f5325f 100644
--- a/products/rhel9/profiles/stig.profile
+++ b/products/rhel9/profiles/stig.profile
@@ -2,7 +2,7 @@
 documentation_complete: true
 
 metadata:
-    version: V2R6
+    version: V2R7
     SMEs:
         - mab879
         - ggbecker
@@ -13,7 +13,7 @@ title: 'DISA STIG for Red Hat Enterprise Linux 9'
 
 description: |-
     This profile contains configuration checks that align to the
-    DISA STIG for Red Hat Enterprise Linux 9 V2R6.
+    DISA STIG for Red Hat Enterprise Linux 9 V2R7.
 
     In addition to being applicable to Red Hat Enterprise Linux 9, this
     configuration baseline is applicable to the operating system tier of
diff --git a/products/rhel9/profiles/stig_gui.profile b/products/rhel9/profiles/stig_gui.profile
index 84f6010b8bce..f4dd8575e3db 100644
--- a/products/rhel9/profiles/stig_gui.profile
+++ b/products/rhel9/profiles/stig_gui.profile
@@ -2,7 +2,7 @@
 documentation_complete: true
 
 metadata:
-    version: V2R6
+    version: V2R7
     SMEs:
         - mab879
         - ggbecker
@@ -13,7 +13,7 @@ title: 'DISA STIG with GUI for Red Hat Enterprise Linux 9'
 
 description: |-
     This profile contains configuration checks that align to the
-    DISA STIG for Red Hat Enterprise Linux 9 V2R6.
+    DISA STIG for Red Hat Enterprise Linux 9 V2R7.
 
     In addition to being applicable to Red Hat Enterprise Linux 9, this
     configuration baseline is applicable to the operating system tier of
diff --git a/products/rhv4/profiles/rhvh-stig.profile b/products/rhv4/profiles/rhvh-stig.profile
index ec2dd7bdbfb5..a0c8bc01d309 100644
--- a/products/rhv4/profiles/rhvh-stig.profile
+++ b/products/rhv4/profiles/rhvh-stig.profile
@@ -17,6 +17,7 @@ description: |-
 selections:
     - installed_OS_is_FIPS_certified
     - login_banner_text=dod_banners
+    - login_banner_contents=dod_default
     - inactivity_timeout_value=15_minutes
     - var_password_pam_minlen=15
     - accounts_password_pam_minlen
diff --git a/products/sle12/profiles/stig.profile b/products/sle12/profiles/stig.profile
index 33b341569721..60a154b79dfa 100644
--- a/products/sle12/profiles/stig.profile
+++ b/products/sle12/profiles/stig.profile
@@ -1,7 +1,7 @@
 documentation_complete: true
 
 metadata:
-    version: V3R3
+    version: V3R4
     SMEs:
         - svet-se
         - rumch-se
@@ -13,7 +13,7 @@ title: 'DISA STIG for SUSE Linux Enterprise 12'
 
 description: |-
     This profile contains configuration checks that align to the
-    DISA STIG for SUSE Linux Enterprise 12 V3R3.
+    DISA STIG for SUSE Linux Enterprise 12 V3R4.
 
 selections:
     - sshd_approved_macs=stig
@@ -32,6 +32,9 @@ selections:
     - var_password_pam_ucredit=1
     - var_accounts_maximum_age_login_defs=60
     - login_banner_text=dod_banners
+    - login_banner_contents=dod_default
+    - dconf_login_banner_text=dod_banners
+    - dconf_login_banner_contents=dod_default
     #
     # Note: must configure "var_accounts_authorized_local_users_regex" when
     # "accounts_authorized_local_users" rule is enabled
@@ -176,7 +179,6 @@ selections:
     - dir_system_commands_root_owned
     - disable_ctrlaltdel_reboot
     - disallow_bypass_password_sudo
-    - display_login_attempts
     - enable_dconf_user_profile
     - encrypt_partitions
     - ensure_gpgcheck_globally_activated
diff --git a/products/sle15/profiles/pcs-hardening-sap.profile b/products/sle15/profiles/pcs-hardening-sap.profile
index 63231a2b3b34..22c9e487becf 100644
--- a/products/sle15/profiles/pcs-hardening-sap.profile
+++ b/products/sle15/profiles/pcs-hardening-sap.profile
@@ -5,7 +5,7 @@ metadata:
     SMEs:
         - esampson
 
-reference: 
+reference:
 
 title: 'Hardening for Public Cloud Image of SUSE Linux Enterprise Server (SLES) for SAP Applications 15'
 
@@ -24,8 +24,9 @@ selections:
     - var_apparmor_mode=complain
     - motd_banner_text=cis_banners
     - login_banner_text=cis_banners
+    - login_banner_contents=cis_default
     - remote_login_banner_text=cis_banners
-    - login_banner_text=cis_default
+    - remote_login_banner_contents=cis_default
     - var_multiple_time_servers=suse
     - var_multiple_time_pools=suse
     - var_postfix_inet_interfaces=loopback-only
diff --git a/products/sle15/profiles/pcs-hardening.profile b/products/sle15/profiles/pcs-hardening.profile
index 69da010c6d09..0bfc746d362c 100644
--- a/products/sle15/profiles/pcs-hardening.profile
+++ b/products/sle15/profiles/pcs-hardening.profile
@@ -5,7 +5,7 @@ metadata:
     SMEs:
         - esampson
 
-reference: 
+reference:
 
 title: 'Public Cloud Hardening for SUSE Linux Enterprise 15'
 
@@ -31,6 +31,9 @@ selections:
     - var_password_pam_delay=4000000
     #- login_banner_text=dod_banners
     - login_banner_text=cis_banners
+    - login_banner_contents=cis_default
+    - motd_banner_text=cis_banners
+    - motd_banner_contents=cis_default
     #
     # Note: must configure "var_accounts_authorized_local_users_regex" when
     # "accounts_authorized_local_users" rule is enabled
@@ -410,7 +413,7 @@ selections:
     #- package_net-snmp_removed
     #- package_telnet_removed
     #- package_telnet-server_removed
-    #### OTHER 
+    #### OTHER
     #### can't do at image build time
     #- accounts_authorized_local_users
     #- accounts_max_concurrent_login_sessions
diff --git a/products/sle15/profiles/stig.profile b/products/sle15/profiles/stig.profile
index 309c043b17a3..37233d8004c5 100644
--- a/products/sle15/profiles/stig.profile
+++ b/products/sle15/profiles/stig.profile
@@ -1,7 +1,7 @@
 documentation_complete: true
 
 metadata:
-    version: V2R5
+    version: V2R6
     SMEs:
         - svet-se
         - rumch-se
@@ -13,7 +13,7 @@ title: 'DISA STIG for SUSE Linux Enterprise 15'
 
 description: |-
     This profile contains configuration checks that align to the
-    DISA STIG for SUSE Linux Enterprise 15 V2R5.
+    DISA STIG for SUSE Linux Enterprise 15 V2R6.
 
 
 selections:
@@ -31,6 +31,9 @@ selections:
     - var_accounts_maximum_age_login_defs=60
     - var_password_pam_delay=4000000
     - login_banner_text=dod_banners
+    - login_banner_contents=dod_default
+    - dconf_login_banner_text=dod_banners
+    - dconf_login_banner_contents=dod_default
     #
     # Note: must configure "var_accounts_authorized_local_users_regex" when
     # "accounts_authorized_local_users" rule is enabled
@@ -191,7 +194,6 @@ selections:
     - disable_ctrlaltdel_reboot
     - disable_ctrlaltdel_reboot
     - disallow_bypass_password_sudo
-    - display_login_attempts
     - enable_dconf_user_profile
     - encrypt_partitions
     - ensure_gpgcheck_globally_activated
diff --git a/products/sle16/profiles/anssi_bp28_enhanced.profile b/products/sle16/profiles/anssi_bp28_enhanced.profile
new file mode 100644
index 000000000000..d93e440d079a
--- /dev/null
+++ b/products/sle16/profiles/anssi_bp28_enhanced.profile
@@ -0,0 +1,76 @@
+---
+documentation_complete: true
+
+metadata:
+    SMEs:
+        - svet-se
+        - teacup-on-rockingchair
+
+title: 'ANSSI-BP-028 (enhanced)'
+
+description: |-
+    This profile contains configurations that align to ANSSI-BP-028 v2.0 at the enhanced hardening level.
+
+    ANSSI is the French National Information Security Agency, and stands for Agence nationale de la sécurité des systèmes d'information.
+    ANSSI-BP-028 is a configuration recommendation for GNU/Linux systems.
+
+    A copy of the ANSSI-BP-028 can be found at the ANSSI website:
+    https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/
+
+    An English version of the ANSSI-BP-028 can also be found at the ANSSI website:
+    https://messervices.cyber.gouv.fr/guides/en-configuration-recommendations-gnulinux-system
+
+selections:
+    - anssi:all:enhanced
+    - var_multiple_time_servers=suse
+    - var_multiple_time_pools=suse
+    - var_sudo_dedicated_group=root
+    - accounts_password_pam_pwhistory_remember
+    - set_password_hashing_min_rounds_logindefs
+    - '!cracklib_accounts_password_pam_dcredit'
+    - '!cracklib_accounts_password_pam_lcredit'
+    - '!cracklib_accounts_password_pam_minlen'
+    - '!cracklib_accounts_password_pam_ocredit'
+    - '!cracklib_accounts_password_pam_ucredit'
+    - '!accounts_password_pam_unix_rounds_system_auth'
+    - '!accounts_passwords_pam_tally2_deny_root'
+    - '!accounts_passwords_pam_tally2_unlock_time'
+    - '!accounts_passwords_pam_tally2'
+    - '!aide_periodic_cron_checking'
+    - '!all_apparmor_profiles_enforced'
+    - '!apparmor_configured'
+    - '!audit_rules_immutable'
+    - '!dnf-automatic_apply_updates'
+    - '!dnf-automatic_security_updates_only'
+    - '!enable_authselect'
+    - '!ensure_almalinux_gpgkey_installed'
+    - '!ensure_oracle_gpgkey_installed'
+    - '!ensure_redhat_gpgkey_installed'
+    - '!file_groupowner_user_cfg'
+    - '!file_owner_user_cfg'
+    - '!file_permissions_sudo'
+    - '!file_permissions_user_cfg'
+    - '!grub2_enable_apparmor'
+    - '!kernel_config_arm64_sw_ttbr0_pan'
+    - '!kernel_config_gcc_plugin_latent_entropy'
+    - '!kernel_config_gcc_plugin_randstruct'
+    - '!kernel_config_gcc_plugin_stackleak'
+    - '!kernel_config_gcc_plugin_structleak_byref_all'
+    - '!kernel_config_gcc_plugin_structleak'
+    - '!kernel_config_legacy_vsyscall_emulate'
+    - '!kernel_config_modify_ldt_syscall'
+    - '!kernel_config_refcount_full'
+    - '!kernel_config_slab_merge_default'
+    - '!ldap_client_start_tls'
+    - '!ldap_client_tls_cacertpath'
+    - '!no_nis_in_nsswitch'
+    - '!package_apparmor_installed'
+    - '!package_dnf-automatic_installed'
+    - '!package_dracut-fips-aesni_installed'
+    - '!package_pam_apparmor_installed'
+    - '!package_rsh_removed'
+    - '!package_rsh-server_removed'
+    - '!package_ypbind_removed'
+    - '!package_ypserv_removed'
+    - '!sebool_secure_mode_insmod'
+    - '!timer_dnf-automatic_enabled'
diff --git a/products/sle16/profiles/anssi_bp28_high.profile b/products/sle16/profiles/anssi_bp28_high.profile
new file mode 100644
index 000000000000..c0c4fd81912c
--- /dev/null
+++ b/products/sle16/profiles/anssi_bp28_high.profile
@@ -0,0 +1,76 @@
+---
+documentation_complete: true
+
+metadata:
+    SMEs:
+        - svet-se
+        - teacup-on-rockingchair
+
+title: 'ANSSI-BP-028 (high)'
+
+description: |-
+    This profile contains configurations that align to ANSSI-BP-028 v2.0 at the high hardening level.
+
+    ANSSI is the French National Information Security Agency, and stands for Agence nationale de la sécurité des systèmes d'information.
+    ANSSI-BP-028 is a configuration recommendation for GNU/Linux systems.
+
+    A copy of the ANSSI-BP-028 can be found at the ANSSI website:
+    https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/
+
+    An English version of the ANSSI-BP-028 can also be found at the ANSSI website:
+    https://messervices.cyber.gouv.fr/guides/en-configuration-recommendations-gnulinux-system
+
+selections:
+    - anssi:all:high
+    - var_multiple_time_servers=suse
+    - var_multiple_time_pools=suse
+    - var_sudo_dedicated_group=root
+    - accounts_password_pam_pwhistory_remember
+    - set_password_hashing_min_rounds_logindefs
+    - '!cracklib_accounts_password_pam_dcredit'
+    - '!cracklib_accounts_password_pam_lcredit'
+    - '!cracklib_accounts_password_pam_minlen'
+    - '!cracklib_accounts_password_pam_ocredit'
+    - '!cracklib_accounts_password_pam_ucredit'
+    - '!accounts_password_pam_unix_rounds_system_auth'
+    - '!accounts_passwords_pam_tally2_deny_root'
+    - '!accounts_passwords_pam_tally2_unlock_time'
+    - '!accounts_passwords_pam_tally2'
+    - '!aide_periodic_cron_checking'
+    - '!all_apparmor_profiles_enforced'
+    - '!apparmor_configured'
+    - '!audit_rules_immutable'
+    - '!dnf-automatic_apply_updates'
+    - '!dnf-automatic_security_updates_only'
+    - '!enable_authselect'
+    - '!ensure_almalinux_gpgkey_installed'
+    - '!ensure_oracle_gpgkey_installed'
+    - '!ensure_redhat_gpgkey_installed'
+    - '!file_groupowner_user_cfg'
+    - '!file_owner_user_cfg'
+    - '!file_permissions_sudo'
+    - '!file_permissions_user_cfg'
+    - '!grub2_enable_apparmor'
+    - '!kernel_config_arm64_sw_ttbr0_pan'
+    - '!kernel_config_gcc_plugin_latent_entropy'
+    - '!kernel_config_gcc_plugin_randstruct'
+    - '!kernel_config_gcc_plugin_stackleak'
+    - '!kernel_config_gcc_plugin_structleak_byref_all'
+    - '!kernel_config_gcc_plugin_structleak'
+    - '!kernel_config_legacy_vsyscall_emulate'
+    - '!kernel_config_modify_ldt_syscall'
+    - '!kernel_config_refcount_full'
+    - '!kernel_config_slab_merge_default'
+    - '!ldap_client_start_tls'
+    - '!ldap_client_tls_cacertpath'
+    - '!no_nis_in_nsswitch'
+    - '!package_apparmor_installed'
+    - '!package_dnf-automatic_installed'
+    - '!package_dracut-fips-aesni_installed'
+    - '!package_pam_apparmor_installed'
+    - '!package_rsh_removed'
+    - '!package_rsh-server_removed'
+    - '!package_ypbind_removed'
+    - '!package_ypserv_removed'
+    - '!sebool_secure_mode_insmod'
+    - '!timer_dnf-automatic_enabled'
diff --git a/products/sle16/profiles/anssi_bp28_intermediary.profile b/products/sle16/profiles/anssi_bp28_intermediary.profile
new file mode 100644
index 000000000000..5fbf1d3ee013
--- /dev/null
+++ b/products/sle16/profiles/anssi_bp28_intermediary.profile
@@ -0,0 +1,76 @@
+---
+documentation_complete: true
+
+metadata:
+    SMEs:
+        - svet-se
+        - teacup-on-rockingchair
+
+title: 'ANSSI-BP-028 (intermediary)'
+
+description: |-
+    This profile contains configurations that align to ANSSI-BP-028 v2.0 at the intermediary hardening level.
+
+    ANSSI is the French National Information Security Agency, and stands for Agence nationale de la sécurité des systèmes d'information.
+    ANSSI-BP-028 is a configuration recommendation for GNU/Linux systems.
+
+    A copy of the ANSSI-BP-028 can be found at the ANSSI website:
+    https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/
+
+    An English version of the ANSSI-BP-028 can also be found at the ANSSI website:
+    https://messervices.cyber.gouv.fr/guides/en-configuration-recommendations-gnulinux-system
+
+selections:
+    - anssi:all:intermediary
+    - var_multiple_time_servers=suse
+    - var_multiple_time_pools=suse
+    - var_sudo_dedicated_group=root
+    - accounts_password_pam_pwhistory_remember
+    - set_password_hashing_min_rounds_logindefs
+    - '!cracklib_accounts_password_pam_dcredit'
+    - '!cracklib_accounts_password_pam_lcredit'
+    - '!cracklib_accounts_password_pam_minlen'
+    - '!cracklib_accounts_password_pam_ocredit'
+    - '!cracklib_accounts_password_pam_ucredit'
+    - '!accounts_password_pam_unix_rounds_system_auth'
+    - '!accounts_passwords_pam_tally2_deny_root'
+    - '!accounts_passwords_pam_tally2_unlock_time'
+    - '!accounts_passwords_pam_tally2'
+    - '!aide_periodic_cron_checking'
+    - '!all_apparmor_profiles_enforced'
+    - '!apparmor_configured'
+    - '!audit_rules_immutable'
+    - '!dnf-automatic_apply_updates'
+    - '!dnf-automatic_security_updates_only'
+    - '!enable_authselect'
+    - '!ensure_almalinux_gpgkey_installed'
+    - '!ensure_oracle_gpgkey_installed'
+    - '!ensure_redhat_gpgkey_installed'
+    - '!file_groupowner_user_cfg'
+    - '!file_owner_user_cfg'
+    - '!file_permissions_sudo'
+    - '!file_permissions_user_cfg'
+    - '!grub2_enable_apparmor'
+    - '!kernel_config_arm64_sw_ttbr0_pan'
+    - '!kernel_config_gcc_plugin_latent_entropy'
+    - '!kernel_config_gcc_plugin_randstruct'
+    - '!kernel_config_gcc_plugin_stackleak'
+    - '!kernel_config_gcc_plugin_structleak_byref_all'
+    - '!kernel_config_gcc_plugin_structleak'
+    - '!kernel_config_legacy_vsyscall_emulate'
+    - '!kernel_config_modify_ldt_syscall'
+    - '!kernel_config_refcount_full'
+    - '!kernel_config_slab_merge_default'
+    - '!ldap_client_start_tls'
+    - '!ldap_client_tls_cacertpath'
+    - '!no_nis_in_nsswitch'
+    - '!package_apparmor_installed'
+    - '!package_dnf-automatic_installed'
+    - '!package_dracut-fips-aesni_installed'
+    - '!package_pam_apparmor_installed'
+    - '!package_rsh_removed'
+    - '!package_rsh-server_removed'
+    - '!package_ypbind_removed'
+    - '!package_ypserv_removed'
+    - '!sebool_secure_mode_insmod'
+    - '!timer_dnf-automatic_enabled'
diff --git a/products/sle16/profiles/anssi_bp28_minimal.profile b/products/sle16/profiles/anssi_bp28_minimal.profile
new file mode 100644
index 000000000000..441229a07086
--- /dev/null
+++ b/products/sle16/profiles/anssi_bp28_minimal.profile
@@ -0,0 +1,76 @@
+---
+documentation_complete: true
+
+metadata:
+    SMEs:
+        - svet-se
+        - teacup-on-rockingchair
+
+title: 'ANSSI-BP-028 (minimal)'
+
+description: |-
+    This profile contains configurations that align to ANSSI-BP-028 v2.0 at the minimal hardening level.
+
+    ANSSI is the French National Information Security Agency, and stands for Agence nationale de la sécurité des systèmes d'information.
+    ANSSI-BP-028 is a configuration recommendation for GNU/Linux systems.
+
+    A copy of the ANSSI-BP-028 can be found at the ANSSI website:
+    https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/
+
+    An English version of the ANSSI-BP-028 can also be found at the ANSSI website:
+    https://messervices.cyber.gouv.fr/guides/en-configuration-recommendations-gnulinux-system
+
+selections:
+    - anssi:all:minimal
+    - var_multiple_time_servers=suse
+    - var_multiple_time_pools=suse
+    - var_sudo_dedicated_group=root
+    - accounts_password_pam_pwhistory_remember
+    - set_password_hashing_min_rounds_logindefs
+    - '!cracklib_accounts_password_pam_dcredit'
+    - '!cracklib_accounts_password_pam_lcredit'
+    - '!cracklib_accounts_password_pam_minlen'
+    - '!cracklib_accounts_password_pam_ocredit'
+    - '!cracklib_accounts_password_pam_ucredit'
+    - '!accounts_password_pam_unix_rounds_system_auth'
+    - '!accounts_passwords_pam_tally2_deny_root'
+    - '!accounts_passwords_pam_tally2_unlock_time'
+    - '!accounts_passwords_pam_tally2'
+    - '!aide_periodic_cron_checking'
+    - '!all_apparmor_profiles_enforced'
+    - '!apparmor_configured'
+    - '!audit_rules_immutable'
+    - '!dnf-automatic_apply_updates'
+    - '!dnf-automatic_security_updates_only'
+    - '!enable_authselect'
+    - '!ensure_almalinux_gpgkey_installed'
+    - '!ensure_oracle_gpgkey_installed'
+    - '!ensure_redhat_gpgkey_installed'
+    - '!file_groupowner_user_cfg'
+    - '!file_owner_user_cfg'
+    - '!file_permissions_sudo'
+    - '!file_permissions_user_cfg'
+    - '!grub2_enable_apparmor'
+    - '!kernel_config_arm64_sw_ttbr0_pan'
+    - '!kernel_config_gcc_plugin_latent_entropy'
+    - '!kernel_config_gcc_plugin_randstruct'
+    - '!kernel_config_gcc_plugin_stackleak'
+    - '!kernel_config_gcc_plugin_structleak_byref_all'
+    - '!kernel_config_gcc_plugin_structleak'
+    - '!kernel_config_legacy_vsyscall_emulate'
+    - '!kernel_config_modify_ldt_syscall'
+    - '!kernel_config_refcount_full'
+    - '!kernel_config_slab_merge_default'
+    - '!ldap_client_start_tls'
+    - '!ldap_client_tls_cacertpath'
+    - '!no_nis_in_nsswitch'
+    - '!package_apparmor_installed'
+    - '!package_dnf-automatic_installed'
+    - '!package_dracut-fips-aesni_installed'
+    - '!package_pam_apparmor_installed'
+    - '!package_rsh_removed'
+    - '!package_rsh-server_removed'
+    - '!package_ypbind_removed'
+    - '!package_ypserv_removed'
+    - '!sebool_secure_mode_insmod'
+    - '!timer_dnf-automatic_enabled'
diff --git a/products/slmicro5/profiles/stig.profile b/products/slmicro5/profiles/stig.profile
index f5024ff753bd..33560c324eee 100644
--- a/products/slmicro5/profiles/stig.profile
+++ b/products/slmicro5/profiles/stig.profile
@@ -1,7 +1,7 @@
 documentation_complete: true
 
 metadata:
-    version: V1R2
+    version: V1R3
     SMEs:
         - svet-se
         - rumch-se
@@ -13,7 +13,7 @@ title: 'DISA STIG for SUSE Linux Enterprise Micro (SLEM) 5'
 
 description: |-
     This profile contains configuration checks that align to the
-    DISA STIG for SUSE Linux Enterprise Micro (SLEM) 5 V1R2.
+    DISA STIG for SUSE Linux Enterprise Micro (SLEM) 5 V1R3.
 
 selections:
     - stig_slmicro5:all
diff --git a/products/ubuntu2204/profiles/default.profile b/products/ubuntu2204/profiles/default.profile
index 982095129892..54a33e3d1ac9 100644
--- a/products/ubuntu2204/profiles/default.profile
+++ b/products/ubuntu2204/profiles/default.profile
@@ -582,8 +582,7 @@ selections:
     - sudo_add_use_pty
     - sudo_custom_logfile
     - sudo_remove_no_authenticate
-    - sudo_require_authentication
-    - sudo_require_reauthentication
+    - sudo_remove_nopasswd
     - sysctl_fs_suid_dumpable
     - sysctl_kernel_dmesg_restrict
     - sysctl_kernel_randomize_va_space
diff --git a/products/ubuntu2204/profiles/stig.profile b/products/ubuntu2204/profiles/stig.profile
index 0a7b4bf2fb2e..ccc40b0a53b3 100644
--- a/products/ubuntu2204/profiles/stig.profile
+++ b/products/ubuntu2204/profiles/stig.profile
@@ -2,7 +2,7 @@
 documentation_complete: true
 
 metadata:
-    version: V2R3
+    version: V2R7
     SMEs:
         - mpurg
         - dodys
@@ -11,11 +11,11 @@ metadata:
 
 reference: https://www.cyber.mil/stigs/downloads
 
-title: 'Canonical Ubuntu 22.04 LTS Security Technical Implementation Guide (STIG) V2R3'
+title: 'Canonical Ubuntu 22.04 LTS Security Technical Implementation Guide (STIG) V2R7'
 
 description: |-
     This profile contains configuration checks that align to the
-    DISA STIG for Canonical Ubuntu 22.04 LTS V2R3.
+    DISA STIG for Canonical Ubuntu 22.04 LTS V2R7.
 
 selections:
     - stig_ubuntu2204:all
diff --git a/pyproject.toml b/pyproject.toml
index 3acf91a4a68b..6290304e2901 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -11,7 +11,7 @@ dependencies = [
   "Jinja2",
   "setuptools"
 ]
-requires-python = ">= 3"
+requires-python = ">=3.6"
 maintainers = [
   {name = "Gabriel Gaspar Becker", email = "ggasparb@redhat.com"},
   {name = "Jan Cerny", email = "jcerny@redhat.com"},
diff --git a/requirements.txt b/requirements.txt
index bcca1c6c2aaf..5c95ce49307e 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -15,6 +15,6 @@ pycompliance
 prometheus_client
 # used in utils/oscal
 requests
-compliance-trestle==3.11.0
+compliance-trestle==3.12.0
 pyopenssl>=23.2.0
 pcre2
diff --git a/ruff.toml b/ruff.toml
index d5e89e0e13c1..266d8054ff15 100644
--- a/ruff.toml
+++ b/ruff.toml
@@ -1,9 +1,10 @@
 line-length = 99
 indent-width = 4
-target-version = "py39"
+target-version = "py37"
 
 [lint]
 select = [
+    "B",    # flake8-bugbear
     "F",    # Pyflakes
     "E",    # pycodestyle
     "W",    # pycodestyle
diff --git a/shared/applicability/oval/installed_app_is_bascontrol22d4.xml b/shared/applicability/oval/installed_app_is_bascontrol22d4.xml
new file mode 100644
index 000000000000..bef7e8324fea
--- /dev/null
+++ b/shared/applicability/oval/installed_app_is_bascontrol22d4.xml
@@ -0,0 +1,28 @@
+<def-group>
+  <definition class="inventory"
+  id="installed_app_is_bascontrol22d" version="4">
+    <metadata>
+      <title>Mozilla Firefox</title>
+      <affected family="unix">
+        <product>Mozilla Firefox</product>
+      </affected>
+      <reference ref_id="cpe:/a:bascontrol22d:4"
+      source="CPE" />
+      <description>The application installed on the system is firefox.</description>
+       </metadata>
+    <criteria operator="AND">
+      <extend_definition comment="Installed OS is part of the Unix family"
+      definition_ref="installed_OS_is_part_of_Unix_family" />
+      <criterion comment="Firefox is installed"
+      test_ref="test_bascontroll2d4" />
+    </criteria>
+  </definition>
+
+  <linux:rpminfo_test check="all" check_existence="at_least_one_exists" comment="Firefox is installed via RPM" id="test_bascontroll2d4" version="1">
+    <linux:object object_ref="obj_bascontrol22d" />
+  </linux:rpminfo_test>
+  <linux:rpminfo_object id="obj_bascontrol22d" version="1">
+    <linux:name>firefox</linux:name>
+  </linux:rpminfo_object>
+
+</def-group>
diff --git a/shared/checks/oval/audit_rules_auditctl.xml b/shared/checks/oval/audit_rules_auditctl.xml
index b08adf438882..27a4e5489599 100644
--- a/shared/checks/oval/audit_rules_auditctl.xml
+++ b/shared/checks/oval/audit_rules_auditctl.xml
@@ -18,7 +18,7 @@
     <ind:object object_ref="object_audit_rules_auditctl" />
   </ind:textfilecontent54_test>
   <ind:textfilecontent54_object id="object_audit_rules_auditctl" version="1">
-{{% if product in ['rhel10', 'ol10'] %}}
+{{% if product in ['fedora', 'rhel10', 'ol10'] %}}
     <ind:filepath>/usr/lib/systemd/system/audit-rules.service</ind:filepath>
     <ind:pattern operation="pattern match">^ExecStart=\/sbin\/auditctl.*$</ind:pattern>
   {{% else %}}
diff --git a/shared/checks/oval/audit_rules_augenrules.xml b/shared/checks/oval/audit_rules_augenrules.xml
index 7d651e43a0fb..7533f88e2866 100644
--- a/shared/checks/oval/audit_rules_augenrules.xml
+++ b/shared/checks/oval/audit_rules_augenrules.xml
@@ -18,7 +18,7 @@
     <ind:object object_ref="object_audit_rules_augenrules" />
   </ind:textfilecontent54_test>
   <ind:textfilecontent54_object id="object_audit_rules_augenrules" version="1">
-  {{% if product in ['rhel10', 'ol10']  %}}
+  {{% if product in ['fedora', 'rhel10', 'ol10']  %}}
     <ind:filepath>/usr/lib/systemd/system/audit-rules.service</ind:filepath>
     <ind:pattern operation="pattern match">^ExecStart=(\/usr|)?\/sbin\/augenrules.*$</ind:pattern>
   {{% else %}}
diff --git a/shared/macros/10-ansible.jinja b/shared/macros/10-ansible.jinja
index 33417159b0a1..69ed975ad8c4 100644
--- a/shared/macros/10-ansible.jinja
+++ b/shared/macros/10-ansible.jinja
@@ -198,7 +198,7 @@ value: :code:`Setting={{ varname1 }}`
   (but case-sensitive values). We also specify the validation program here;
   -t specifies test and -f allows Ansible to pass a file at a different path.
 
-  Set set a parameter in /etc/sshd_config or /etc/ssh/sshd_config.d/
+  Set a parameter in ``sshd_main_config_file`` or ``sshd_config_dir``.
 
 :parameter msg: Message to be set as Task Title, if not set the rule's title will be used instead
 :type msg: str
@@ -206,17 +206,20 @@ value: :code:`Setting={{ varname1 }}`
 :type parameter: str
 :parameter value: The value to set
 :type value: str
-:parameter config_is_distributed: If true, will ok look in /etc/ssh/sshd_config.d
+:parameter config_is_distributed: If true, use ``sshd_config_dir`` for configuration
 :type config_is_distributed: str
 :parameter config_basename: Filename of configuration file when using distributed configuration
 :type config_basename: str
 
 #}}
-{{%- macro ansible_sshd_set(msg='', parameter='', value='', config_is_distributed="false", config_basename="00-complianceascode-hardening.conf", rule_title=None) %}}
+{{%- macro ansible_sshd_set(msg='', parameter='', value='', config_is_distributed="false", config_basename="", rule_title=None) %}}
+{{%- set sshd_main_config = sshd_main_config_file -%}}
+{{%- set sshd_drop_in_dir = sshd_config_dir -%}}
+{{%- set sshd_base_dir = sshd_config_base_dir -%}}
 {{% if product in ["ol8", "ol9"] %}}
 - name: "Find sshd_config included files"
   ansible.builtin.shell: |-
-    included_files=$(grep -oP "^\s*(?i)include.*" /etc/ssh/sshd_config | sed -e 's/\s*Include\s*//i' | sed -e 's|^[^/]|/etc/ssh/&|')
+    included_files=$(grep -oP "^\s*(?i)include.*" {{{ sshd_main_config }}} | sed -e 's/\s*Include\s*//i' | sed -e 's|^[^/]|{{{ sshd_base_dir }}}/&|')
     [[ -n $included_files ]] && ls $included_files || true
   register: sshd_config_included_files
 
@@ -229,9 +232,10 @@ value: :code:`Setting={{ varname1 }}`
 
 {{% endif %}}
 {{%- if config_is_distributed == "true" %}}
-{{% set config_dir = "/etc/ssh/sshd_config.d" %}}
-{{% set config_file = "/etc/ssh/sshd_config.d" ~ "/" ~ config_basename %}}
-{{{ ansible_set_config_file_dir(msg, config_file="/etc/ssh/sshd_config", config_dir=config_dir, set_file=config_file, parameter=parameter, separator_regex="\s+", value=value, prefix_regex="(?i)^\s*", create='yes', validate='/usr/sbin/sshd -t -f %s', insert_after='', insert_before="BOF", rule_title=rule_title) }}}
+{{% set hardening_config_basename = config_basename or sshd_hardening_config_basename %}}
+{{% set config_dir = sshd_drop_in_dir %}}
+{{% set config_file = sshd_drop_in_dir ~ "/" ~ hardening_config_basename %}}
+{{{ ansible_set_config_file_dir(msg, config_file=sshd_main_config, config_dir=config_dir, set_file=config_file, parameter=parameter, separator_regex="\s+", value=value, prefix_regex="(?i)^\s*", create='yes', validate='/usr/sbin/sshd -t -f %s', insert_after='', insert_before="BOF", rule_title=rule_title) }}}
 - name: {{{ rule_title }}} - set file mode for {{{ config_file }}}
   ansible.builtin.file:
     path: {{{ config_file }}}
@@ -240,7 +244,7 @@ value: :code:`Setting={{ varname1 }}`
     modification_time: preserve
     access_time: preserve
 {{%- else %}}
-{{{ ansible_set_config_file(msg, "/etc/ssh/sshd_config", parameter, value=value, create="yes", prefix_regex='(?i)^\s*', validate="/usr/sbin/sshd -t -f %s", insert_before="BOF", rule_title=rule_title) }}}
+{{{ ansible_set_config_file(msg, sshd_main_config, parameter, value=value, create="yes", prefix_regex='(?i)^\s*', validate="/usr/sbin/sshd -t -f %s", insert_before="BOF", rule_title=rule_title) }}}
 {{%- endif %}}
 {{%- endmacro %}}
 
@@ -2353,3 +2357,154 @@ Part of the grub2_bootloader_argument_absent template.
     ansible.builtin.shell: find /etc/rsyslog.d -type f -name "*.conf" -exec sed -i '/^{{{ start_pattern }}}/,/{{{ end_pattern }}}/d' {} +
     changed_when: true
 {{%- endmacro -%}}
+
+{{#
+Macro for enabling dconf user profile in /etc/dconf/profile/<PROFILE>
+
+The macro adds the following lines to the profile:
+---
+user-db:user
+system-db:<DATABASE>
+---
+If the profile exists but does not contain the above lines, the
+lines will be inserted at the beginning of the profile.
+
+:param profile: name of dconf profile (e.g. user, gdm)
+:type profile: str
+:param database: name of dconf database (e.g. local, gdm)
+:type database: str
+#}}
+{{% macro ansible_enable_dconf_user_profile(profile, database) -%}}
+
+- name: "Configure GNOME3 DConf User Profile"
+  ansible.builtin.lineinfile:
+    path: "/etc/dconf/profile/{{{ profile }}}"
+    line: "{{ item }}"
+    create: yes
+    state: present
+  loop:
+    - "user-db:user"
+    - "system-db:{{{ database }}}"
+  register: dconf_user_profile_blockinfile
+
+- name: Dconf Update
+  ansible.builtin.command: dconf update
+  when: dconf_user_profile_blockinfile is changed
+{{%- endmacro -%}}
+
+
+{{#
+
+    Set a sshd configuration parameter to a value for system with /usr - located default config 
+
+:parameter msg: Message to be set as Task Title, if not set the rule's title will be used instead
+:type msg: str
+:parameter parameter: Parameter to set
+:type parameter: str
+:parameter value: The value to set
+:type value: str
+:param copy_defaults: If true default sshd configuration in /usr/etc/ssh/sshd_config will be
+copied onto /etc/ssh/sshd_config, if /etc/ssh/sshd_config does not exist
+:type copy_defaults: bool
+:parameter config_basename: drop-in filename of sshd configuration file
+:type config_basename: str
+
+#}}
+{{%- macro ansible_sshd_set_usr(msg='', parameter='', value='', copy_defaults=true, config_basename="00-complianceascode-hardening.conf", rule_title=None) %}}
+{{%- set sshd_config_path = "/etc/ssh/sshd_config" %}}
+{{%- set sshd_usr_config_path = "/usr/etc/ssh/sshd_config" %}}
+{{%- set sshd_config_dir = "/etc/ssh/sshd_config.d" -%}}
+{{%- set sshd_usr_config_dir = "/usr/etc/ssh/sshd_config.d" -%}}
+{{%- set ssh_paths = ['/etc/ssh/sshd_config.d', '/usr/etc/ssh/sshd_config.d'] -%}}
+{{%- set config_file = "/etc/ssh/sshd_config.d/" ~ config_basename -%}}
+{{%- set new_line = parameter + ' ' + value -%}}
+{{%- set line_regex = "(?i)^\s*" + "{{ \"" + parameter + "\"| regex_escape }}" + "\s+" -%}}
+{{%- set dir_parameter = "sshd_config_d_has_parameter" -%}}
+{{%- set lineinfile_items = "{{ " + dir_parameter + ".files }}" -%}}
+
+- name: {{{ rule_title }}} - Copy default {{{ sshd_usr_config_path }}} to {{{ sshd_config_path }}}
+  ansible.builtin.copy:
+    src: {{{ sshd_usr_config_path }}}
+    dest: {{{ sshd_config_path }}}
+    force: no
+    mode: '0600'
+- name: {{{ rule_title }}} - Check if the parameter {{{ parameter }}} is configured in sshd configuration(s)
+  ansible.builtin.find:
+    paths:
+    - '/etc/ssh'
+    - '/usr/etc/ssh'
+    - {{{ sshd_config_dir }}}
+    - {{{ sshd_usr_config_dir }}}
+    contains: {{{ line_regex }}}
+    patterns:
+    - '*.conf'
+    - 'sshd_config'
+  register: _sshd_config_has_parameter
+- name: {{{ rule_title }}} - Check if the parameter {{{ parameter }}} is configured correctly in sshd configuration(s)
+  ansible.builtin.find:
+    paths:
+    - '/etc/ssh'
+    - '/usr/etc/ssh'
+    - {{{ sshd_config_dir }}}
+    - {{{ sshd_usr_config_dir }}}
+    contains: {{{ line_regex ~ value ~ "$" }}}
+    patterns:
+    - '*.conf'
+    - 'sshd_config'
+  register: _sshd_config_correctly
+- name: '{{{ msg or rule_title }}}'
+  block:
+    {{{ ansible_lineinfile(
+            "Deduplicate values from " + sshd_config_path,
+            sshd_config_path,
+            regex=line_regex,
+            insensitive='false',
+            create='no',
+            state='absent')|indent }}}
+    {{{ ansible_lineinfile(
+            "Deduplicate values from " + sshd_usr_config_path,
+            sshd_usr_config_path,
+            regex=line_regex,
+            insensitive='false',
+            create='no',
+            state='absent')|indent }}}
+    - name: "{{{ rule_title }}} - Check if the parameter {{{ parameter }}} is present in {{{ sshd_config_dir }}} and in {{{ sshd_usr_config_dir }}}"
+      ansible.builtin.find:
+        paths: {{{ ssh_paths }}}
+        recurse: 'yes'
+        follow: 'no'
+        contains: '(?i)^\s*{{ "{{{ parameter }}}"| regex_escape }}\s+'
+      register: {{{ dir_parameter }}}
+    {{{ ansible_lineinfile(
+            "Remove parameter from files in " + sshd_config_dir,
+            path="{{ item.path }}",
+            regex=line_regex,
+            state="absent",
+            with_items=lineinfile_items)|indent}}}
+    {{{ ansible_lineinfile(
+            "Remove parameter from files in " + sshd_usr_config_dir,
+            path="{{ item.path }}",
+            regex=line_regex,
+            state="absent",
+            with_items=lineinfile_items)|indent }}}
+    {{{ ansible_lineinfile(
+            "Insert correct line to " + config_file,
+            config_file,
+            regex=line_regex,
+            insensitive='false',
+            new_line=new_line,
+            create='yes',
+            state='present',
+            validate='/usr/sbin/sshd -t -f %s',
+            insert_after='',
+            insert_before="BOF" )|indent }}}
+  when: _sshd_config_correctly.matched == 0 or _sshd_config_has_parameter.matched != 1
+
+- name: {{{ rule_title }}} - set file mode for {{{ config_file }}}
+  ansible.builtin.file:
+    path: {{{ config_file }}}
+    mode: '0600'
+    state: touch
+    modification_time: preserve
+    access_time: preserve
+{{%- endmacro %}}
diff --git a/shared/macros/10-bash.jinja b/shared/macros/10-bash.jinja
index 7a92cfd8cdb7..f41a8eb87bf2 100644
--- a/shared/macros/10-bash.jinja
+++ b/shared/macros/10-bash.jinja
@@ -173,8 +173,9 @@ test "$(stat -c %d:%i /)" != "$(stat -c %d:%i /proc/1/root/.)"
 
 #}}
 {{%- macro bash_sshd_config_set(parameter, value, rule_id=None) -%}}
+{{%- set sshd_config_path = sshd_main_config_file -%}}
 {{{ set_config_file(
-        path="/etc/ssh/sshd_config",
+        path=sshd_config_path,
         parameter=parameter,
         value=value,
         create=true,
@@ -201,14 +202,15 @@ test "$(stat -c %d:%i /)" != "$(stat -c %d:%i /proc/1/root/.)"
 :type config_basename: str
 
 #}}
-{{% macro bash_sshd_remediation(parameter, value, config_is_distributed="false", config_basename="00-complianceascode-hardening.conf", rule_id=None) -%}}
-{{%- set sshd_config_path = "/etc/ssh/sshd_config" %}}
-{{%- set sshd_config_dir = "/etc/ssh/sshd_config.d" -%}}
+{{% macro bash_sshd_remediation(parameter, value, config_is_distributed="false", config_basename="", rule_id=None) -%}}
+{{%- set sshd_config_path = sshd_main_config_file %}}
+{{%- set sshd_drop_in_dir = sshd_config_dir -%}}
+{{%- set sshd_base_dir = sshd_config_base_dir -%}}
 
 {{% if product in ["ol8", "ol9"] %}}
 # Find the include keyword, extract from the line the glob expression representing included files.
-# And if it is a relative path prepend '/etc/ssh/'
-included_files=$(grep -oP "^\s*(?i)include.*" /etc/ssh/sshd_config | sed -e 's/\s*include\s*//I' | sed -e 's|^[^/]|/etc/ssh/&|')
+# And if it is a relative path prepend '{{{ sshd_base_dir }}}/'
+included_files=$(grep -oP "^\s*(?i)include.*" {{{ sshd_config_path }}} | sed -e 's/\s*include\s*//I' | sed -e 's|^[^/]|{{{ sshd_base_dir }}}/&|')
 for included_file in ${included_files} ; do
     {{{ lineinfile_absent("$included_file", "^\s*" ~ parameter, insensitive=true, rule_id=rule_id) | indent(4) }}}
 done
@@ -216,15 +218,15 @@ done
 {{%- if config_is_distributed == "true" %}}
 {{%- set prefix_regex = "^\s*" -%}}
 {{%- set separator_regex = "\s\+" -%}}
-{{%- set hardening_config_basename = config_basename %}}
+{{%- set hardening_config_basename = config_basename or sshd_hardening_config_basename %}}
 {{%- set line_regex = prefix_regex ~ parameter ~ separator_regex %}}
-mkdir -p {{{ sshd_config_dir }}}
-touch {{{ sshd_config_dir }}}/{{{ hardening_config_basename }}}
-chmod 0600 {{{ sshd_config_dir }}}/{{{ hardening_config_basename }}}
+mkdir -p {{{ sshd_drop_in_dir }}}
+touch {{{ sshd_drop_in_dir }}}/{{{ hardening_config_basename }}}
+chmod 0600 {{{ sshd_drop_in_dir }}}/{{{ hardening_config_basename }}}
 {{{ lineinfile_absent(sshd_config_path, line_regex, insensitive=true, rule_id=rule_id) }}}
-{{{ lineinfile_absent_in_directory(sshd_config_dir, line_regex, insensitive=true, filename_glob="*.conf") }}}
+{{{ lineinfile_absent_in_directory(sshd_drop_in_dir, line_regex, insensitive=true, filename_glob="*.conf") }}}
 {{{ set_config_file(
-        path=sshd_config_dir ~ "/" ~ hardening_config_basename,
+        path=sshd_drop_in_dir ~ "/" ~ hardening_config_basename,
         parameter=parameter,
         value=value,
         create=true,
@@ -500,7 +502,9 @@ fi
 {{%- elif pkg_manager == "apt_get" -%}}
 DEBIAN_FRONTEND=noninteractive apt-get -o DPkg::Lock::Timeout=60 remove -y "{{{ package }}}"
 {{%- elif pkg_manager == "zypper" -%}}
-zypper remove -y "{{{ package }}}"
+if rpm -q --quiet "{{{ package }}}" ; then
+   zypper remove -y "{{{ package }}}"
+fi
 {{%- else -%}}
 {{{ die("Can't generate a remediation for " + pkg_manager) }}}
 {{%- endif -%}}
@@ -807,7 +811,7 @@ pam_file="/etc/pam.d/common-auth"
 if ! grep -qE '^\s*auth\s+required\s+pam_faillock\.so\s+preauth.*$' "$pam_file" ; then
     {{% if  product in ['sle15', 'sle16'] %}}
     # insert before pam_unix.so
-    sed -i --follow-symlinks '/^auth.*required.*pam_unix\.so.*/i auth        required      pam_faillock.so preauth' "$pam_file"
+    sed -i --follow-symlinks '/^auth.*pam_unix\.so.*/i auth        required      pam_faillock.so preauth' "$pam_file"
     {{% else %}}
     # insert at the top
     sed -i --follow-symlinks '/^# here are the per-package modules/i auth        required      pam_faillock.so preauth' "$pam_file"
@@ -844,6 +848,19 @@ if ! grep -qE '^\s*account\s+required\s+pam_faillock\.so.*$' "$pam_file" ; then
     echo 'account   required     pam_faillock.so' >> "$pam_file"
     {{% endif %}}
 fi
+
+{{% if  product in ['sle15', 'sle16'] %}}
+{{{
+    bash_ensure_pam_module_configuration(
+    '/etc/pam.d/common-auth',
+    'auth',
+    '\[success=1 default=ignore\]',
+    'pam_unix.so',
+    '',
+    '',
+    '')
+}}}
+{{% endif %}}
 {{% elif 'ubuntu' in product %}}
 conf_name=cac_faillock
 
@@ -2253,23 +2270,23 @@ for f in $(echo -n "{{{ files }}}"); do
     fi
 
     # find key in section and change value
-    if grep -qzosP "[[:space:]]*\[{{{ section }}}\]([^\n\[]*\n+)+?[[:space:]]*{{{ key }}}" "$f"; then
-        if ! grep -qPz "{{{ key }}}={{{ value }}}" "$f"; then
+    if grep -qzosP "(?m)^[[:space:]]*\[{{{ section }}}\]([^\n\[]*\n+)+?[[:space:]]*{{{ key }}}" "$f"; then
+        if ! grep -qzosP "(?m)^[[:space:]]*{{{ key }}}[[:space:]]*=[[:space:]]*{{{ value }}}" "$f"; then
 {{% if no_quotes %}}
-            sed -i "s/{{{ key }}}[^(\n)]*/{{{ key }}}={{{ value | replace("/", "\/") }}}/" "$f"
+            sed -i "/^[[:space:]]*{{{ key }}}/s/\([[:blank:]]*=[[:blank:]]*\).*/\1{{{ value | replace("/", "\/") }}}/" "$f"
 {{% else %}}
-            sed -i 's/{{{ key }}}[^(\n)]*/{{{ key }}}="{{{ value | replace("/", "\/") }}}"/' "$f"
+            sed -i '/^[[:space:]]*{{{ key }}}/s/\([[:blank:]]*=[[:blank:]]*\).*/\1"{{{ value | replace("/", "\/") }}}"/' "$f"
 {{% endif %}}
         fi
 
         found=true
 
     # find section and add key = value to it
-    elif grep -qs "[[:space:]]*\[{{{ section }}}\]" "$f"; then
+    elif grep -qs "^[[:space:]]*\[{{{ section }}}\]" "$f"; then
 {{% if no_quotes %}}
-            sed -i "/[[:space:]]*\[{{{ section }}}\]/a {{{ key }}}={{{ value | replace("/", "\/") }}}" "$f"
+            sed -i "/^[[:space:]]*\[{{{ section }}}\]/a {{{ key }}}={{{ value | replace("/", "\/") }}}" "$f"
 {{% else %}}
-            sed -i '/[[:space:]]*\[{{{ section }}}\]/a {{{ key }}}="{{{ value | replace ("/", "\/") }}}"' "$f"
+            sed -i '/^[[:space:]]*\[{{{ section }}}\]/a {{{ key }}}="{{{ value | replace ("/", "\/") }}}"' "$f"
 {{% endif %}}
             found=true
     fi
@@ -2746,3 +2763,53 @@ This macro creates a Bash conditional which checks the system architecture in /p
 {{%- macro bash_arch_conditional(arch) -%}}
 ( grep -sqE "^.*\.{{{ arch }}}$" /proc/sys/kernel/osrelease || grep -sqE "^{{{ arch }}}$" /proc/sys/kernel/arch; )
 {{%- endmacro -%}}
+
+
+{{#
+    Set a sshd configuration parameter to a value for system with default configuration in /usr subdir 
+
+:parameter parameter: Parameter to set
+:type parameter: str
+:parameter value: The value to set
+:type value: str
+:param copy_defaults: If true default sshd configuration in /usr/etc/ssh/sshd_config will be
+copied onto /etc/ssh/sshd_config, if /etc/ssh/sshd_config does not exist
+:type copy_defaults: bool
+:parameter config_basename: drop-in filename of sshd configuration file
+:type config_basename: str
+
+#}}
+{{% macro bash_sshd_remediation_usr(parameter, value, copy_defaults="true", config_basename="00-complianceascode-hardening.conf", rule_id=None) -%}}
+{{%- set sshd_config_path = "/etc/ssh/sshd_config" %}}
+{{%- set sshd_config_dir = "/etc/ssh/sshd_config.d" -%}}
+{{%- set sshd_usr_config_path = "/usr/etc/ssh/sshd_config" %}}
+{{%- set sshd_usr_config_dir = "/usr/etc/ssh/sshd_config.d" -%}}
+{{%- set prefix_regex = "^\s*" -%}}
+{{%- set separator_regex = "\s\+" -%}}
+{{%- set hardening_config_basename = config_basename %}}
+{{%- set line_regex = prefix_regex ~ parameter ~ separator_regex %}}
+
+if ! [ -e "{{{ sshd_config_path }}}" ] ; then
+    cp "{{{ sshd_usr_config_path }}}" "{{{ sshd_config_path }}}"
+fi
+
+mkdir -p {{{ sshd_config_dir }}}
+touch {{{ sshd_config_dir }}}/{{{ hardening_config_basename }}}
+chmod 0600 {{{ sshd_config_dir }}}/{{{ hardening_config_basename }}}
+{{{ lineinfile_absent(sshd_config_path, line_regex, insensitive=true, rule_id=rule_id) }}}
+{{{ lineinfile_absent_in_directory(sshd_config_dir, line_regex, insensitive=true, filename_glob="*.conf") }}}
+{{{ lineinfile_absent(sshd_usr_config_path, line_regex, insensitive=true, rule_id=rule_id) }}}
+{{{ lineinfile_absent_in_directory(sshd_usr_config_dir, line_regex, insensitive=true, filename_glob="*.conf") }}}
+{{{ set_config_file(
+        path=sshd_config_dir ~ "/" ~ hardening_config_basename,
+        parameter=parameter,
+        value=value,
+        create=true,
+        insert_after="",
+        insert_before="BOF",
+        insensitive=true,
+        separator=" ",
+        separator_regex=separator_regex,
+        prefix_regex=prefix_regex, rule_id=rule_id)
+    }}}
+{{%- endmacro %}}
diff --git a/shared/macros/10-fixtext.jinja b/shared/macros/10-fixtext.jinja
index 1ecca316fe66..ebba0ef3a26b 100644
--- a/shared/macros/10-fixtext.jinja
+++ b/shared/macros/10-fixtext.jinja
@@ -233,10 +233,12 @@ The audit daemon must be restarted for the changes to take effect.
 
 #}}
 {{%- macro fixtext_sshd_lineinfile(parameter, value, config_is_distributed) -%}}
+{{%- set sshd_main_config = sshd_main_config_file -%}}
+{{%- set sshd_hardening_config = sshd_config_dir ~ "/" ~ sshd_hardening_config_basename -%}}
 {{%- if config_is_distributed -%}}
-{{%- set path = "/etc/ssh/sshd_config.d/00-complianceascode-hardening.conf" -%}}
+{{%- set path = sshd_hardening_config -%}}
 {{%- else -%}}
-{{%- set path = "/etc/ssh/sshd_config" -%}}
+{{%- set path = sshd_main_config -%}}
 {{%- endif -%}}
     To configure the system add or modify the following line in "{{{ path }}}".
 
diff --git a/shared/macros/10-ocil.jinja b/shared/macros/10-ocil.jinja
index ab94d0956921..76759bdde775 100644
--- a/shared/macros/10-ocil.jinja
+++ b/shared/macros/10-ocil.jinja
@@ -26,10 +26,12 @@ $ oc get {{% if all_namespaces %}}--all-namespaces{{% elif namespace %}}-n {{{ n
 
 
 {{% macro sshd_config_file() %}}
+    {{% set sshd_main_config = sshd_main_config_file %}}
+    {{% set sshd_hardening_config = sshd_config_dir ~ "/" ~ sshd_hardening_config_basename %}}
     {{% if sshd_distributed_config == "true" %}}
-    <tt>/etc/ssh/sshd_config.d/00-complianceascode-hardening.conf</tt>:
+    <tt>{{{ sshd_hardening_config }}}</tt>:
     {{% else %}}
-    <tt>/etc/ssh/sshd_config</tt>:
+    <tt>{{{ sshd_main_config }}}</tt>:
     {{% endif %}}
 {{%- endmacro %}}
 
@@ -509,14 +511,17 @@ ocil_clause: "the required value is not set"
 
 #}}
 {{% macro ocil_sshd_option(default, option, value) -%}}
+    {{% set sshd_main_config = sshd_main_config_file %}}
+    {{% set sshd_hardening_config = sshd_config_dir ~ "/" ~ sshd_hardening_config_basename %}}
+    {{% set sshd_reinforce_defaults_config = sshd_config_dir ~ "/01-complianceascode-reinforce-os-defaults.conf" %}}
     To determine how the SSH daemon's <tt>{{{ option }}}</tt> option is set, run the following command:
     {{% if sshd_distributed_config == "true" %}}
-    <pre>$ sudo grep -i {{{ option }}} /etc/ssh/sshd_config.d/00-complianceascode-hardening.conf</pre>
+    <pre>$ sudo grep -i {{{ option }}} {{{ sshd_hardening_config }}}</pre>
     {{% if default == "yes" -%}}
-    <pre>$ sudo grep -i {{{ option }}} /etc/ssh/sshd_config.d/01-complianceascode-reinforce-os-defaults.conf</pre>
+    <pre>$ sudo grep -i {{{ option }}} {{{ sshd_reinforce_defaults_config }}}</pre>
     {{%- endif %}}
     {{% else %}}
-    <pre>$ sudo grep -i {{{ option }}} /etc/ssh/sshd_config</pre>
+    <pre>$ sudo grep -i {{{ option }}} {{{ sshd_main_config }}}</pre>
     {{% endif %}}
     If a line indicating <tt>{{{ value }}}</tt> is returned, then the required value is set.
 {{%- endmacro %}}
diff --git a/shared/macros/10-oval.jinja b/shared/macros/10-oval.jinja
index 6466728189db..784d659e94fd 100644
--- a/shared/macros/10-oval.jinja
+++ b/shared/macros/10-oval.jinja
@@ -1034,16 +1034,17 @@ Generates the :code:`<affected>` tag for OVAL check using correct product platfo
 
 #}}
 {{%- macro sshd_oval_check(parameter, value, missing_parameter_pass, config_is_distributed, runtime_check="false", xccdf_variable="", datatype="", rule_id=None, rule_title=None) -%}}
-{{%- set sshd_config_path = "/etc/ssh/sshd_config" %}}
-{{%- set sshd_config_dir = "/etc/ssh/sshd_config.d" -%}}
+{{%- set sshd_main_config = sshd_main_config_file %}}
+{{%- set sshd_drop_in_dir = sshd_config_dir -%}}
+{{%- set sshd_base_dir = sshd_config_base_dir -%}}
 {{%- set sshd_runtime_path = "/tmp/runtime/sshd_effective_config" -%}}
 {{%- if xccdf_variable -%}}
-{{%- set description = "Ensure '" ~ parameter ~ "' is configured with value configured in " ~ xccdf_variable ~ " variable in " ~ sshd_config_path %}}
+{{%- set description = "Ensure '" ~ parameter ~ "' is configured with value configured in " ~ xccdf_variable ~ " variable in " ~ sshd_main_config %}}
 {{%- else -%}}
-{{%- set description = "Ensure '" ~ parameter ~ "' is configured with value '" ~ value ~ "' in " ~ sshd_config_path %}}
+{{%- set description = "Ensure '" ~ parameter ~ "' is configured with value '" ~ value ~ "' in " ~ sshd_main_config %}}
 {{%- endif -%}}
 {{%- if config_is_distributed == "true" %}}
-{{%- set description = description  ~ " or in " ~ sshd_config_dir -%}}
+{{%- set description = description  ~ " or in " ~ sshd_drop_in_dir -%}}
 {{%- endif %}}
 {{%- set case_insensitivity_kwargs = dict(prefix_regex="^[ \\t]*(?i)", separator_regex = "(?-i)[ \\t]+") -%}}
 
@@ -1081,10 +1082,10 @@ Generates the :code:`<affected>` tag for OVAL check using correct product platfo
           {{%- endif %}}
           {{%- if runtime_check != "true" %}}
           <criteria comment="static configuration is correct" operator="AND">
-            <criteria comment="the configuration is correct if it exists" operator="AND">
-              {{{- oval_line_in_file_criterion(sshd_config_path, parameter, avoid_conflicting=true, rule_id=rule_id) | indent(12)}}}
+              <criteria comment="the configuration is correct if it exists" operator="AND">
+              {{{- oval_line_in_file_criterion(sshd_main_config, parameter, avoid_conflicting=true, rule_id=rule_id) | indent(12)}}}
               {{%- if config_is_distributed == "true" %}}
-              {{{- oval_line_in_directory_criterion(sshd_config_dir, parameter, avoid_conflicting=true, rule_id=rule_id) | indent(12) }}}
+              {{{- oval_line_in_directory_criterion(sshd_drop_in_dir, parameter, avoid_conflicting=true, rule_id=rule_id) | indent(12) }}}
               {{%- endif %}}
               {{% if product in ["ol8", "ol9"] %}}
               {{{- oval_line_in_file_criterion("sshd_config included", parameter, id_stem=rule_id ~ "_sshd_included_files", avoid_conflicting=true, rule_id=rule_id) | indent(12)}}}
@@ -1105,11 +1106,11 @@ Generates the :code:`<affected>` tag for OVAL check using correct product platfo
 {{% endif %}}
 
   {{% if product in ["ol8", "ol9"] %}}
-  {{{ oval_line_in_file_object(sshd_config_path, parameter="include", id_stem="sshd_include_value_" ~ rule_id, rule_id=rule_id, ** case_insensitivity_kwargs)| indent (2) }}}
+  {{{ oval_line_in_file_object(sshd_main_config, parameter="include", id_stem="sshd_include_value_" ~ rule_id, rule_id=rule_id, ** case_insensitivity_kwargs)| indent (2) }}}
   <local_variable id="var_sshd_config_included_files_{{{ rule_id }}}" datatype="string" version="1"
   comment="Include value converted to regex">
     <concat>
-      <literal_component>^(/etc/ssh/(?!/))?</literal_component>
+      <literal_component>^({{{ sshd_base_dir }}}/(?!/))?</literal_component>
       <substring substring_start="2" substring_length="-1">
         <unique>
           <glob_to_regex>
@@ -1136,8 +1137,8 @@ Generates the :code:`<affected>` tag for OVAL check using correct product platfo
 
   {{% endif %}}
 
-  {{{ oval_line_in_file_test(sshd_config_path, parameter, avoid_conflicting=true, rule_id=rule_id) | indent (2) }}}
-  {{{ oval_line_in_file_object(sshd_config_path, parameter=parameter, rule_id=rule_id, ** case_insensitivity_kwargs)| indent (2) }}}
+  {{{ oval_line_in_file_test(sshd_main_config, parameter, avoid_conflicting=true, rule_id=rule_id) | indent (2) }}}
+  {{{ oval_line_in_file_object(sshd_main_config, parameter=parameter, rule_id=rule_id, ** case_insensitivity_kwargs)| indent (2) }}}
   {{%- if xccdf_variable -%}}
   {{{ oval_line_in_file_state_xccdf_variable(xccdf_variable, datatype=datatype, rule_id=rule_id) }}}
   {{%- else -%}}
@@ -1145,8 +1146,8 @@ Generates the :code:`<affected>` tag for OVAL check using correct product platfo
   {{%- endif -%}}
 
   {{%- if config_is_distributed == "true" %}}
-  {{{ oval_line_in_directory_test(sshd_config_dir, parameter, avoid_conflicting=true, rule_id=rule_id) | indent (2) }}}
-  {{{ oval_line_in_directory_object(sshd_config_dir, parameter=parameter, rule_id=rule_id, ** case_insensitivity_kwargs) | indent (2) }}}
+  {{{ oval_line_in_directory_test(sshd_drop_in_dir, parameter, avoid_conflicting=true, rule_id=rule_id) | indent (2) }}}
+  {{{ oval_line_in_directory_object(sshd_drop_in_dir, parameter=parameter, rule_id=rule_id, ** case_insensitivity_kwargs) | indent (2) }}}
   {{%- if xccdf_variable -%}}
   {{{ oval_line_in_directory_state_xccdf_variable(xccdf_variable, datatype, rule_id=rule_id) | indent (2) }}}
   {{%- else -%}}
@@ -1878,3 +1879,150 @@ Macro generates an OVAL test definition to verify that a specified audit tool is
   </ind:textfilecontent54_object>
 
 {{%- endmacro -%}}
+
+
+{{#
+    Create a full OVAL check for an sshd parameter and value in /etc/ssh/sshd_config or /usr/etc/ssh/sshd_config.
+    Including /etc/ssh/sshd_config.d/*.conf and /usr/etc/ssh/sshd_config.d/*.conf (default on SUSE Linux Enterprise Server 16)
+
+:param parameter: Parameter to check
+:type parameter: str
+:param value: Value to check
+:type value: str
+:param missing_parameter_pass: If true, the check will pass if the parameter missing.
+:type missing_parameter_pass: bool
+:param xccdf_variable: the name of an XCCDF variable carrying the value, this conflicts with the value parameter
+:type xccdf_variable: str
+:param datatype: a data type of the value
+:type datatype: str
+
+#}}
+{{%- macro sshd_oval_check_usr(parameter, value, missing_parameter_pass, xccdf_variable="", datatype="", rule_id=None, rule_title=None) -%}}
+{{%- set sshd_config_path = "/etc/ssh/sshd_config" %}}
+{{%- set sshd_usr_config_path = "/usr/etc/ssh/sshd_config" -%}}
+{{%- set sshd_config_dir = "/etc/ssh/sshd_config.d" -%}}
+{{%- set sshd_usr_config_dir = "/usr/etc/ssh/sshd_config.d" -%}}
+{{%- if xccdf_variable -%}}
+{{%- set description = "Ensure '" ~ parameter ~ "' is configured with value configured in " ~ xccdf_variable ~ " variable in " ~ sshd_config_path %}}
+{{%- else -%}}
+{{%- set description = "Ensure '" ~ parameter ~ "' is configured with value '" ~ value ~ "' in " ~ sshd_config_path -%}}
+{{%- endif -%}}
+{{%- set description = description  ~ " or in " ~ sshd_config_dir -%}}
+{{%- set description = description  ~ " or in " ~ sshd_usr_config_path -%}}
+{{%- set description = description  ~ " or in " ~ sshd_usr_config_dir -%}}
+{{%- set case_insensitivity_kwargs = dict(prefix_regex="^[ \\t]*(?i)", separator_regex = "(?-i)[ \\t]+") -%}}
+
+<def-group>
+  <definition class="compliance" id="{{{ rule_id }}}" version="1">
+   {{{ oval_metadata(description, rule_title=rule_title) }}}
+   <criteria comment="sshd is configured correctly or is not installed" operator="OR">
+     <criteria comment="sshd is not installed" operator="AND">
+        <extend_definition comment="sshd is not required or requirement is unset" definition_ref="sshd_not_required_or_unset" />
+        <extend_definition comment="rpm package openssh-server removed" definition_ref="package_openssh-server_removed" />
+     </criteria>
+     <criteria comment="sshd is installed and configured using /etc/ssh/sshd_config" operator="AND">
+        <extend_definition comment="sshd is required or requirement is unset" definition_ref="sshd_required_or_unset" />
+        <extend_definition comment="rpm package openssh-server installed" definition_ref="package_openssh-server_installed" />
+        <criterion comment="test if configuration file {{{ sshd_config_path }}} exists for {{{ rule_id }}}" test_ref="test_{{{ rule_id }}}_config_file_exists"/>
+        <criteria comment="sshd is configured correctly" operator="AND">
+          <criteria comment="static configuration is correct" operator="AND">
+            <criteria comment="the configuration is correct if it exists" operator="AND">
+              {{{ oval_line_in_file_criterion(sshd_config_path, parameter, avoid_conflicting=true, rule_id=rule_id) | indent(12)}}}
+              {{{ oval_line_in_directory_criterion(sshd_config_dir, parameter, avoid_conflicting=true, rule_id=rule_id) | indent(12) }}}
+              {{{ oval_line_in_file_criterion(sshd_usr_config_dir, parameter, id_stem=rule_id ~ "_sshd_usr_config_dir") | indent(12) }}}
+            </criteria>
+            {{%- if not missing_parameter_pass -%}}
+            <criterion comment="the configuration exists" test_ref="test_{{{ parameter }}}_present_{{{ rule_id }}}_etc_ssh_sshd_config" />
+            {{%- endif -%}}
+          </criteria>
+        </criteria>
+      </criteria>
+      <criteria comment="sshd is installed and configured using /usr/etc/ssh/sshd_config" operator="AND">
+        <extend_definition comment="sshd is required or requirement is unset" definition_ref="sshd_required_or_unset" />
+        <extend_definition comment="rpm package openssh-server installed" definition_ref="package_openssh-server_installed" />
+        <criterion comment="test if configuration file {{{ sshd_config_path }}} does not exists for {{{ rule_id }}}" test_ref="test_{{{ rule_id }}}_config_file_exists" negate="true"/>
+        <criteria comment="sshd is configured correctly" operator="AND">
+          <criteria comment="static configuration is correct" operator="AND">
+            <criteria comment="the configuration is correct if it exists" operator="AND">
+              {{{ oval_line_in_file_criterion(sshd_usr_config_path, parameter, avoid_conflicting=true, id_stem=rule_id ~ "_sshd_usr_config_path") | indent(12)}}}
+              {{{ oval_line_in_directory_criterion(sshd_config_dir, parameter, avoid_conflicting=true, rule_id=rule_id) | indent(12) }}}
+              {{{ oval_line_in_file_criterion(sshd_usr_config_dir, parameter, id_stem=rule_id ~ "_sshd_usr_config_dir") | indent(12) }}}
+            </criteria>
+            {{%- if not missing_parameter_pass -%}}
+            <criterion comment="the configuration exists" test_ref="test_{{{ parameter }}}_present_{{{ rule_id }}}_usr_etc_ssh_sshd_config" />
+            {{%- endif -%}}
+          </criteria>
+        </criteria>
+      </criteria>
+    </criteria>
+  </definition>
+
+  {{{ oval_config_file_exists_test(sshd_config_path, rule_id=rule_id) }}}
+  {{{ oval_config_file_exists_object(sshd_config_path, rule_id=rule_id) }}}
+
+  {{{ oval_line_in_file_test(sshd_config_path, parameter, avoid_conflicting=true, rule_id=rule_id) | indent (2) }}}
+  {{{ oval_line_in_file_object(sshd_config_path, parameter=parameter, rule_id=rule_id, ** case_insensitivity_kwargs)| indent (2) }}}
+
+  {{{ oval_line_in_directory_test(sshd_config_dir, parameter, avoid_conflicting=true, rule_id=rule_id) | indent (2) }}}
+  {{{ oval_line_in_directory_object(sshd_config_dir, parameter=parameter, rule_id=rule_id, ** case_insensitivity_kwargs) | indent (2) }}}
+  {{%- if xccdf_variable -%}}
+  {{{ oval_line_in_file_define_variable(xccdf_variable, datatype) }}}
+  {{{ oval_line_in_file_state_xccdf_variable(xccdf_variable, datatype=datatype, rule_id=rule_id) }}}
+  {{{ oval_line_in_directory_state_xccdf_variable(xccdf_variable, datatype, rule_id=rule_id) | indent (2) }}}
+  {{{ oval_line_in_file_state_xccdf_variable(var_name=xccdf_variable, datatype=datatype, id_stem=rule_id ~ "_sshd_usr_config_path") | indent (2) }}}
+  {{{ oval_line_in_file_state_xccdf_variable(var_name=xccdf_variable, datatype=datatype, id_stem=rule_id ~ "_sshd_usr_config_dir") | indent (2) }}}
+  {{%- else -%}}
+  {{{ oval_line_in_file_state(value, rule_id=rule_id) | indent (2) }}}
+  {{{ oval_line_in_directory_state(value, rule_id=rule_id) | indent (2) }}}
+  {{{ oval_line_in_file_state(value, id_stem=rule_id ~ "_sshd_usr_config_path") | indent (2) }}}
+  {{{ oval_line_in_file_state(value, id_stem=rule_id ~ "_sshd_usr_config_dir") | indent (2) }}}
+  {{%- endif -%}}
+
+  {{{ oval_line_in_file_test(sshd_usr_config_path, parameter, avoid_conflicting=true, id_stem=rule_id ~ "_sshd_usr_config_path") | indent (2) }}}
+  {{{ oval_line_in_file_object(sshd_usr_config_path, parameter=parameter, id_stem=rule_id ~ "_sshd_usr_config_path", ** case_insensitivity_kwargs)| indent (2) }}}
+  {{{ oval_line_in_file_test(sshd_usr_config_dir, parameter, avoid_conflicting=true, id_stem=rule_id ~ "_sshd_usr_config_dir") | indent (2) }}}
+  {{{ oval_line_in_file_object(sshd_usr_config_dir, parameter=parameter, filename_regex=".*\.conf$", id_stem=rule_id ~ "_sshd_usr_config_dir", ** case_insensitivity_kwargs) | indent (2) }}}
+
+  {{%- if not missing_parameter_pass -%}}
+  <ind:textfilecontent54_object comment="All confs collection when using /etc/ssh/sshd_config"
+                                id="obj_collection_obj_{{{ rule_id }}}_etc_ssh_sshd_config"
+                                version="1">
+    <set set_operator="UNION">
+      <set set_operator="UNION">
+        <object_reference>obj_{{{ rule_id }}}</object_reference>
+        <object_reference>obj_{{{ rule_id }}}_config_dir</object_reference>
+      </set>
+      <set set_operator="UNION">
+        <object_reference>obj_{{{ rule_id }}}_sshd_usr_config_dir</object_reference>
+      </set>
+    </set>
+  </ind:textfilecontent54_object>
+
+  <ind:textfilecontent54_test id="test_{{{ parameter }}}_present_{{{ rule_id }}}_etc_ssh_sshd_config" version="1"
+                              check="all" check_existence="at_least_one_exists"
+                              comment="Verify that the value of {{{ parameter }}} is present">
+    <ind:object object_ref="obj_collection_obj_{{{ rule_id }}}_etc_ssh_sshd_config" />
+  </ind:textfilecontent54_test>
+
+  <ind:textfilecontent54_object comment="All confs collection when using /usr/etc/ssh/sshd_config"
+                                id="obj_collection_obj_{{{ rule_id }}}_usr_etc_ssh_sshd_config"
+                                version="1">
+    <set set_operator="UNION">
+      <set set_operator="UNION">
+        <object_reference>obj_{{{ rule_id }}}_config_dir</object_reference>
+      </set>
+      <set set_operator="UNION">
+        <object_reference>obj_{{{ rule_id }}}_sshd_usr_config_path</object_reference>
+        <object_reference>obj_{{{ rule_id }}}_sshd_usr_config_dir</object_reference>
+      </set>
+    </set>
+  </ind:textfilecontent54_object>
+
+  <ind:textfilecontent54_test id="test_{{{ parameter }}}_present_{{{ rule_id }}}_usr_etc_ssh_sshd_config" version="1"
+                              check="all" check_existence="at_least_one_exists"
+                              comment="Verify that the value of {{{ parameter }}} is present">
+    <ind:object object_ref="obj_collection_obj_{{{ rule_id }}}_usr_etc_ssh_sshd_config" />
+  </ind:textfilecontent54_test>
+  {{%- endif -%}}
+</def-group>
+{{%- endmacro -%}}
diff --git a/shared/macros/20-test-scenarios.jinja b/shared/macros/20-test-scenarios.jinja
index 53bfe16e7338..87015c86b9f8 100644
--- a/shared/macros/20-test-scenarios.jinja
+++ b/shared/macros/20-test-scenarios.jinja
@@ -15,6 +15,23 @@ This macro changes the configuration of the audit service so that it looks like
 {{%- endmacro -%}}
 
 
+{{#
+This macro changes the configuration of the audit service so that it looks like augenrules is used to load rules.
+#}}
+
+{{%- macro setup_augenrules_environment () -%}}
+  {{% if product in ["fedora", "ol10", "rhel10"] %}}
+  sed -i "s%^ExecStart=.*%ExecStart=/sbin/augenrules%" /usr/lib/systemd/system/audit-rules.service
+  {{% else %}}
+  {{% if product == "sle15" %}}
+  sed -i "s%^#ExecStartPost=.*%ExecStartPost=-/sbin/augenrules%" /usr/lib/systemd/system/auditd.service
+  {{% else %}}
+  sed -i "s%^ExecStartPost=.*%ExecStartPost=-/sbin/augenrules%" /usr/lib/systemd/system/auditd.service
+  {{% endif %}}
+  {{% endif %}}
+{{%- endmacro -%}}
+
+
 {{#
 This macro is used by pam_account_password_faillock template to initialize
 the external variable and parameter value to a desired state.
diff --git a/shared/references/cce-redhat-avail.txt b/shared/references/cce-redhat-avail.txt
index f1dff1792b67..3681684fcdf0 100644
--- a/shared/references/cce-redhat-avail.txt
+++ b/shared/references/cce-redhat-avail.txt
@@ -1,14 +1,9 @@
-CCE-86459-5
-CCE-86461-1
-CCE-86465-2
 CCE-86466-0
 CCE-86468-6
-CCE-86469-4
 CCE-86482-7
 CCE-86483-5
 CCE-86484-3
 CCE-86492-6
-CCE-86493-4
 CCE-86494-2
 CCE-86497-5
 CCE-86498-3
@@ -2345,8 +2340,4 @@ CCE-90705-5
 CCE-90706-3
 CCE-90707-1
 CCE-90710-5
-CCE-90711-3
 CCE-90715-4
-CCE-90720-4
-CCE-90721-2
-CCE-90722-0
diff --git a/shared/references/cce-sle16-avail.txt b/shared/references/cce-sle16-avail.txt
index 85d8169d528f..f0e358f3e7e6 100644
--- a/shared/references/cce-sle16-avail.txt
+++ b/shared/references/cce-sle16-avail.txt
@@ -1,84 +1,49 @@
 CCE-95718-3
-CCE-95719-1
 CCE-95720-9
-CCE-95722-5
-CCE-95723-3
-CCE-95724-1
 CCE-95725-8
-CCE-95726-6
-CCE-95727-4
-CCE-95729-0
 CCE-95730-8
 CCE-95731-6
 CCE-95732-4
-CCE-95733-2
 CCE-95735-7
-CCE-95736-5
-CCE-95737-3
-CCE-95738-1
 CCE-95741-5
-CCE-95742-3
 CCE-95751-4
 CCE-95752-2
-CCE-95753-0
 CCE-95754-8
 CCE-95755-5
-CCE-95756-3
 CCE-95758-9
 CCE-95759-7
-CCE-95760-5
-CCE-95761-3
-CCE-95762-1
 CCE-95766-2
 CCE-95767-0
 CCE-95768-8
 CCE-95770-4
 CCE-95772-0
-CCE-95774-6
 CCE-95775-3
-CCE-95777-9
 CCE-95779-5
 CCE-95781-1
 CCE-95785-2
 CCE-95786-0
-CCE-95787-8
-CCE-95788-6
 CCE-95789-4
 CCE-95790-2
 CCE-95791-0
-CCE-95794-4
 CCE-95798-5
-CCE-95799-3
 CCE-95800-9
 CCE-95802-5
 CCE-95803-3
 CCE-95804-1
-CCE-95806-6
-CCE-95807-4
 CCE-95808-2
-CCE-95810-8
 CCE-95813-2
-CCE-95814-0
 CCE-95815-7
-CCE-95816-5
 CCE-95819-9
-CCE-95822-3
 CCE-95823-1
 CCE-95824-9
 CCE-95826-4
-CCE-95827-2
 CCE-95829-8
-CCE-95831-4
 CCE-95832-2
 CCE-95833-0
 CCE-95834-8
 CCE-95836-3
 CCE-95838-9
 CCE-95839-7
-CCE-95841-3
-CCE-95842-1
-CCE-95847-0
-CCE-95848-8
 CCE-95849-6
 CCE-95852-0
 CCE-95853-8
@@ -86,58 +51,40 @@ CCE-95854-6
 CCE-95856-1
 CCE-95857-9
 CCE-95858-7
-CCE-95859-5
 CCE-95860-3
 CCE-95861-1
-CCE-95862-9
-CCE-95863-7
 CCE-95864-5
-CCE-95865-2
 CCE-95867-8
 CCE-95868-6
 CCE-95869-4
 CCE-95870-2
 CCE-95871-0
-CCE-95872-8
 CCE-95875-1
 CCE-95876-9
 CCE-95877-7
 CCE-95878-5
-CCE-95879-3
 CCE-95881-9
 CCE-95883-5
-CCE-95884-3
 CCE-95887-6
 CCE-95890-0
 CCE-95892-6
 CCE-95894-2
 CCE-95896-7
-CCE-95897-5
 CCE-95899-1
 CCE-95901-5
 CCE-95904-9
 CCE-95906-4
 CCE-95907-2
 CCE-95908-0
-CCE-95909-8
-CCE-95910-6
 CCE-95912-2
 CCE-95913-0
 CCE-95914-8
-CCE-95915-5
 CCE-95916-3
 CCE-95917-1
-CCE-95918-9
-CCE-95919-7
 CCE-95920-5
-CCE-95922-1
 CCE-95923-9
-CCE-95924-7
 CCE-95925-4
 CCE-95926-2
-CCE-95927-0
-CCE-95928-8
-CCE-95929-6
 CCE-95930-4
 CCE-95932-0
 CCE-95934-6
@@ -145,19 +92,14 @@ CCE-95935-3
 CCE-95937-9
 CCE-95938-7
 CCE-95939-5
-CCE-95940-3
 CCE-95941-1
 CCE-95943-7
-CCE-95945-2
-CCE-95946-0
 CCE-95947-8
 CCE-95948-6
 CCE-95949-4
-CCE-95950-2
 CCE-95951-0
 CCE-95952-8
 CCE-95953-6
-CCE-95955-1
 CCE-95956-9
 CCE-95957-7
 CCE-95958-5
@@ -165,7 +107,6 @@ CCE-95960-1
 CCE-95962-7
 CCE-95963-5
 CCE-95964-3
-CCE-95966-8
 CCE-95967-6
 CCE-95969-2
 CCE-95970-0
@@ -176,17 +117,11 @@ CCE-95976-7
 CCE-95977-5
 CCE-95978-3
 CCE-95979-1
-CCE-95980-9
-CCE-95981-7
 CCE-95984-1
 CCE-95986-6
-CCE-95987-4
 CCE-95988-2
-CCE-95989-0
 CCE-95990-8
 CCE-95991-6
-CCE-95993-2
-CCE-95994-0
 CCE-95995-7
 CCE-95997-3
 CCE-95998-1
@@ -198,11 +133,7 @@ CCE-96004-7
 CCE-96006-2
 CCE-96009-6
 CCE-96011-2
-CCE-96015-3
-CCE-96017-9
 CCE-96022-9
-CCE-96023-7
-CCE-96025-2
 CCE-96026-0
 CCE-96028-6
 CCE-96029-4
@@ -212,39 +143,23 @@ CCE-96034-4
 CCE-96035-1
 CCE-96036-9
 CCE-96037-7
-CCE-96038-5
-CCE-96039-3
 CCE-96040-1
 CCE-96041-9
 CCE-96042-7
 CCE-96044-3
 CCE-96045-0
 CCE-96046-8
-CCE-96048-4
-CCE-96050-0
 CCE-96051-8
-CCE-96054-2
-CCE-96055-9
 CCE-96056-7
-CCE-96057-5
 CCE-96059-1
-CCE-96060-9
 CCE-96061-7
-CCE-96062-5
-CCE-96064-1
-CCE-96065-8
 CCE-96067-4
-CCE-96069-0
 CCE-96070-8
 CCE-96071-6
 CCE-96073-2
-CCE-96076-5
 CCE-96078-1
 CCE-96079-9
-CCE-96081-5
 CCE-96082-3
-CCE-96083-1
-CCE-96085-6
 CCE-96086-4
 CCE-96087-2
 CCE-96091-4
@@ -253,15 +168,12 @@ CCE-96093-0
 CCE-96095-5
 CCE-96097-1
 CCE-96098-9
-CCE-96099-7
 CCE-96100-3
 CCE-96103-7
 CCE-96104-5
 CCE-96105-2
-CCE-96106-0
 CCE-96108-6
 CCE-96109-4
-CCE-96110-2
 CCE-96111-0
 CCE-96112-8
 CCE-96113-6
@@ -275,26 +187,18 @@ CCE-96121-9
 CCE-96124-3
 CCE-96125-0
 CCE-96126-8
-CCE-96129-2
-CCE-96130-0
-CCE-96132-6
 CCE-96136-7
 CCE-96137-5
-CCE-96138-3
 CCE-96139-1
-CCE-96140-9
 CCE-96143-3
-CCE-96146-6
 CCE-96147-4
 CCE-96149-0
 CCE-96150-8
 CCE-96151-6
 CCE-96153-2
 CCE-96154-0
-CCE-96157-3
 CCE-96159-9
 CCE-96160-7
-CCE-96161-5
 CCE-96162-3
 CCE-96163-1
 CCE-96164-9
@@ -304,92 +208,56 @@ CCE-96167-2
 CCE-96168-0
 CCE-96170-6
 CCE-96173-0
-CCE-96174-8
 CCE-96175-5
 CCE-96176-3
-CCE-96177-1
-CCE-96178-9
 CCE-96179-7
 CCE-96180-5
 CCE-96181-3
 CCE-96182-1
 CCE-96184-7
 CCE-96186-2
-CCE-96187-0
-CCE-96189-6
-CCE-96190-4
 CCE-96191-2
-CCE-96192-0
-CCE-96193-8
-CCE-96194-6
-CCE-96195-3
-CCE-96196-1
 CCE-96197-9
 CCE-96198-7
-CCE-96199-5
 CCE-96200-1
 CCE-96204-3
 CCE-96205-0
 CCE-96206-8
-CCE-96208-4
 CCE-96209-2
-CCE-96211-8
 CCE-96214-2
 CCE-96216-7
 CCE-96219-1
-CCE-96220-9
 CCE-96222-5
 CCE-96223-3
 CCE-96224-1
 CCE-96225-8
-CCE-96227-4
 CCE-96228-2
-CCE-96229-0
 CCE-96230-8
 CCE-96231-6
 CCE-96233-2
-CCE-96235-7
-CCE-96236-5
 CCE-96237-3
 CCE-96238-1
 CCE-96240-7
-CCE-96241-5
-CCE-96245-6
-CCE-96246-4
 CCE-96248-0
 CCE-96249-8
 CCE-96250-6
 CCE-96251-4
-CCE-96252-2
 CCE-96253-0
-CCE-96255-5
-CCE-96256-3
 CCE-96258-9
-CCE-96259-7
 CCE-96260-5
 CCE-96261-3
 CCE-96264-7
-CCE-96265-4
 CCE-96267-0
-CCE-96268-8
 CCE-96269-6
 CCE-96270-4
-CCE-96274-6
-CCE-96275-3
 CCE-96277-9
-CCE-96278-7
 CCE-96280-3
 CCE-96281-1
-CCE-96285-2
-CCE-96288-6
 CCE-96289-4
 CCE-96291-0
 CCE-96292-8
-CCE-96293-6
-CCE-96294-4
 CCE-96296-9
 CCE-96297-7
-CCE-96298-5
 CCE-96302-5
 CCE-96303-3
 CCE-96304-1
@@ -401,14 +269,11 @@ CCE-96311-6
 CCE-96312-4
 CCE-96313-2
 CCE-96316-5
-CCE-96318-1
 CCE-96319-9
 CCE-96320-7
-CCE-96321-5
 CCE-96322-3
 CCE-96324-9
 CCE-96326-4
-CCE-96327-2
 CCE-96331-4
 CCE-96332-2
 CCE-96333-0
@@ -417,9 +282,7 @@ CCE-96336-3
 CCE-96337-1
 CCE-96338-9
 CCE-96339-7
-CCE-96340-5
 CCE-96343-9
-CCE-96344-7
 CCE-96345-4
 CCE-96346-2
 CCE-96347-0
@@ -428,85 +291,44 @@ CCE-96349-6
 CCE-96351-2
 CCE-96352-0
 CCE-96354-6
-CCE-96355-3
-CCE-96356-1
 CCE-96357-9
-CCE-96358-7
-CCE-96359-5
-CCE-96361-1
 CCE-96362-9
-CCE-96363-7
-CCE-96366-0
-CCE-96367-8
 CCE-96369-4
-CCE-96370-2
-CCE-96371-0
-CCE-96372-8
 CCE-96374-4
 CCE-96375-1
 CCE-96379-3
 CCE-96380-1
-CCE-96383-5
 CCE-96387-6
 CCE-96389-2
-CCE-96390-0
 CCE-96392-6
-CCE-96394-2
 CCE-96395-9
-CCE-96396-7
-CCE-96397-5
 CCE-96399-1
 CCE-96400-7
 CCE-96401-5
 CCE-96402-3
 CCE-96403-1
-CCE-96404-9
-CCE-96405-6
-CCE-96407-2
-CCE-96408-0
 CCE-96410-6
-CCE-96411-4
 CCE-96412-2
 CCE-96413-0
-CCE-96414-8
 CCE-96415-5
 CCE-96417-1
 CCE-96418-9
 CCE-96419-7
 CCE-96421-3
-CCE-96423-9
 CCE-96424-7
 CCE-96425-4
 CCE-96426-2
 CCE-96427-0
-CCE-96428-8
-CCE-96430-4
-CCE-96431-2
 CCE-96432-0
-CCE-96438-7
 CCE-96439-5
-CCE-96440-3
-CCE-96441-1
-CCE-96444-5
-CCE-96445-2
-CCE-96446-0
-CCE-96447-8
-CCE-96448-6
 CCE-96449-4
-CCE-96450-2
-CCE-96452-8
 CCE-96454-4
 CCE-96455-1
-CCE-96456-9
 CCE-96459-3
-CCE-96460-1
 CCE-96461-9
-CCE-96462-7
 CCE-96463-5
-CCE-96464-3
 CCE-96466-8
 CCE-96469-2
-CCE-96470-0
 CCE-96471-8
 CCE-96472-6
 CCE-96474-2
@@ -523,79 +345,51 @@ CCE-96492-4
 CCE-96493-2
 CCE-96494-0
 CCE-96495-7
-CCE-96496-5
 CCE-96497-3
 CCE-96498-1
 CCE-96502-0
-CCE-96503-8
 CCE-96504-6
 CCE-96507-9
 CCE-96508-7
-CCE-96510-3
 CCE-96511-1
-CCE-96512-9
-CCE-96513-7
-CCE-96514-5
 CCE-96515-2
 CCE-96517-8
 CCE-96518-6
-CCE-96519-4
 CCE-96520-2
 CCE-96523-6
 CCE-96524-4
 CCE-96525-1
-CCE-96527-7
 CCE-96528-5
-CCE-96529-3
 CCE-96530-1
-CCE-96533-5
 CCE-96536-8
 CCE-96537-6
 CCE-96538-4
 CCE-96539-2
-CCE-96540-0
 CCE-96542-6
 CCE-96543-4
 CCE-96545-9
 CCE-96546-7
 CCE-96548-3
-CCE-96549-1
-CCE-96551-7
 CCE-96552-5
 CCE-96553-3
 CCE-96554-1
-CCE-96555-8
-CCE-96557-4
 CCE-96558-2
 CCE-96559-0
-CCE-96560-8
 CCE-96561-6
 CCE-96562-4
 CCE-96563-2
 CCE-96564-0
 CCE-96565-7
-CCE-96566-5
-CCE-96569-9
-CCE-96570-7
-CCE-96571-5
 CCE-96572-3
-CCE-96573-1
-CCE-96574-9
-CCE-96575-6
 CCE-96577-2
 CCE-96580-6
-CCE-96582-2
 CCE-96583-0
 CCE-96586-3
 CCE-96587-1
 CCE-96588-9
-CCE-96589-7
 CCE-96590-5
 CCE-96594-7
-CCE-96595-4
 CCE-96596-2
-CCE-96597-0
-CCE-96599-6
 CCE-96600-2
 CCE-96601-0
 CCE-96602-8
@@ -603,63 +397,28 @@ CCE-96603-6
 CCE-96605-1
 CCE-96607-7
 CCE-96608-5
-CCE-96609-3
 CCE-96610-1
-CCE-96612-7
 CCE-96613-5
 CCE-96614-3
-CCE-96615-0
-CCE-96618-4
 CCE-96619-2
-CCE-96620-0
 CCE-96621-8
-CCE-96622-6
-CCE-96623-4
-CCE-96624-2
-CCE-96626-7
 CCE-96628-3
-CCE-96629-1
 CCE-96630-9
-CCE-96632-5
-CCE-96633-3
 CCE-96635-8
 CCE-96636-6
 CCE-96637-4
 CCE-96638-2
-CCE-96640-8
-CCE-96642-4
 CCE-96643-2
 CCE-96644-0
 CCE-96645-7
 CCE-96647-3
-CCE-96648-1
-CCE-96649-9
 CCE-96651-5
 CCE-96652-3
-CCE-96653-1
 CCE-96655-6
-CCE-96656-4
 CCE-96657-2
 CCE-96659-8
 CCE-96662-2
-CCE-96663-0
-CCE-96664-8
-CCE-96665-5
-CCE-96666-3
-CCE-96668-9
-CCE-96669-7
-CCE-96671-3
-CCE-96672-1
-CCE-96674-7
-CCE-96676-2
-CCE-96679-6
-CCE-96680-4
-CCE-96682-0
-CCE-96684-6
 CCE-96685-3
 CCE-96687-9
 CCE-96689-5
 CCE-96690-3
-CCE-96692-9
-CCE-96693-7
-CCE-96696-0
diff --git a/shared/references/disa-stig-ol8-v2r6-xccdf-manual.xml b/shared/references/disa-stig-ol8-v2r7-xccdf-manual.xml
similarity index 81%
rename from shared/references/disa-stig-ol8-v2r6-xccdf-manual.xml
rename to shared/references/disa-stig-ol8-v2r7-xccdf-manual.xml
index 00942589bb06..b0668a886a3d 100644
--- a/shared/references/disa-stig-ol8-v2r6-xccdf-manual.xml
+++ b/shared/references/disa-stig-ol8-v2r7-xccdf-manual.xml
@@ -1,4 +1,4 @@
-<?xml version="1.0" encoding="utf-8"?><?xml-stylesheet type='text/xsl' href='STIG_unclass.xsl'?><Benchmark xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.1 http://nvd.nist.gov/schema/xccdf-1.1.4.xsd http://cpe.mitre.org/dictionary/2.0 http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd" id="Oracle_Linux_8_STIG" xml:lang="en" xmlns="http://checklists.nist.gov/xccdf/1.1"><status date="2025-08-19">accepted</status><title>Oracle Linux 8 Security Technical Implementation Guide</title><description>This Security Technical Implementation Guide is published as a tool to improve the security of Department of Defense (DOD) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.</description><notice id="terms-of-use" xml:lang="en"></notice><front-matter xml:lang="en"></front-matter><rear-matter xml:lang="en"></rear-matter><reference href="https://cyber.mil"><dc:publisher>DISA</dc:publisher><dc:source>STIG.DOD.MIL</dc:source></reference><plain-text id="release-info">Release: 6 Benchmark Date: 01 Oct 2025</plain-text><plain-text id="generator">3.5.1</plain-text><plain-text id="conventionsVersion">1.10.0</plain-text><version>2</version><Profile id="MAC-1_Classified"><title>I - Mission Critical Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-248519" selected="true" /><select idref="V-248520" selected="true" /><select idref="V-248521" selected="true" /><select idref="V-248523" selected="true" /><select idref="V-248524" selected="true" /><select idref="V-248525" selected="true" /><select idref="V-248526" selected="true" /><select idref="V-248527" selected="true" /><select idref="V-248528" selected="true" /><select idref="V-248529" selected="true" /><select idref="V-248530" selected="true" /><select idref="V-248531" selected="true" /><select idref="V-248532" selected="true" /><select idref="V-248533" selected="true" /><select idref="V-248534" selected="true" /><select idref="V-248535" selected="true" /><select idref="V-248537" selected="true" /><select idref="V-248538" selected="true" /><select idref="V-248539" selected="true" /><select idref="V-248540" selected="true" /><select idref="V-248541" selected="true" /><select idref="V-248542" selected="true" /><select idref="V-248543" selected="true" /><select idref="V-248544" selected="true" /><select idref="V-248545" selected="true" /><select idref="V-248546" selected="true" /><select idref="V-248547" selected="true" /><select idref="V-248548" selected="true" /><select idref="V-248549" selected="true" /><select idref="V-248551" selected="true" /><select idref="V-248552" selected="true" /><select idref="V-248553" selected="true" /><select idref="V-248554" selected="true" /><select idref="V-248555" selected="true" /><select idref="V-248556" selected="true" /><select idref="V-248557" selected="true" /><select idref="V-248558" selected="true" /><select idref="V-248559" selected="true" /><select idref="V-248560" selected="true" /><select idref="V-248561" selected="true" /><select idref="V-248562" selected="true" /><select idref="V-248563" selected="true" /><select idref="V-248564" selected="true" /><select idref="V-248565" selected="true" /><select idref="V-248566" selected="true" /><select idref="V-248567" selected="true" /><select idref="V-248568" selected="true" /><select idref="V-248569" selected="true" /><select idref="V-248570" selected="true" /><select idref="V-248571" selected="true" /><select idref="V-248572" selected="true" /><select idref="V-248573" selected="true" /><select idref="V-248574" selected="true" /><select idref="V-248575" selected="true" /><select idref="V-248576" selected="true" /><select idref="V-248577" selected="true" /><select idref="V-248578" selected="true" /><select idref="V-248579" selected="true" /><select idref="V-248580" selected="true" /><select idref="V-248581" selected="true" /><select idref="V-248582" selected="true" /><select idref="V-248583" selected="true" /><select idref="V-248584" selected="true" /><select idref="V-248585" selected="true" /><select idref="V-248586" selected="true" /><select idref="V-248587" selected="true" /><select idref="V-248588" selected="true" /><select idref="V-248589" selected="true" /><select idref="V-248590" selected="true" /><select idref="V-248591" selected="true" /><select idref="V-248592" selected="true" /><select idref="V-248593" selected="true" /><select idref="V-248594" selected="true" /><select idref="V-248595" selected="true" /><select idref="V-248596" selected="true" /><select idref="V-248597" selected="true" /><select idref="V-248598" selected="true" /><select idref="V-248599" selected="true" /><select idref="V-248600" selected="true" /><select idref="V-248601" selected="true" /><select idref="V-248602" selected="true" /><select idref="V-248603" selected="true" /><select idref="V-248605" selected="true" /><select idref="V-248606" selected="true" /><select idref="V-248607" selected="true" /><select idref="V-248608" selected="true" /><select idref="V-248609" selected="true" /><select idref="V-248610" selected="true" /><select idref="V-248611" selected="true" /><select idref="V-248612" selected="true" /><select idref="V-248613" selected="true" /><select idref="V-248615" selected="true" /><select idref="V-248616" selected="true" /><select idref="V-248617" selected="true" /><select idref="V-248618" selected="true" /><select idref="V-248619" selected="true" /><select idref="V-248620" selected="true" /><select idref="V-248621" selected="true" /><select idref="V-248622" selected="true" /><select idref="V-248623" selected="true" /><select idref="V-248624" selected="true" /><select idref="V-248625" selected="true" /><select idref="V-248626" selected="true" /><select idref="V-248627" selected="true" /><select idref="V-248628" selected="true" /><select idref="V-248629" selected="true" /><select idref="V-248630" selected="true" /><select idref="V-248631" selected="true" /><select idref="V-248632" selected="true" /><select idref="V-248633" selected="true" /><select idref="V-248634" selected="true" /><select idref="V-248635" selected="true" /><select idref="V-248636" selected="true" /><select idref="V-248637" selected="true" /><select idref="V-248638" selected="true" /><select idref="V-248639" selected="true" /><select idref="V-248640" selected="true" /><select idref="V-248641" selected="true" /><select idref="V-248642" selected="true" /><select idref="V-248643" selected="true" /><select idref="V-248644" selected="true" /><select idref="V-248645" selected="true" /><select idref="V-248646" selected="true" /><select idref="V-248647" selected="true" /><select idref="V-248648" selected="true" /><select idref="V-248649" selected="true" /><select idref="V-248650" selected="true" /><select idref="V-248651" selected="true" /><select idref="V-248652" selected="true" /><select idref="V-248653" selected="true" /><select idref="V-248654" selected="true" /><select idref="V-248655" selected="true" /><select idref="V-248656" selected="true" /><select idref="V-248657" selected="true" /><select idref="V-248658" selected="true" /><select idref="V-248659" selected="true" /><select idref="V-248660" selected="true" /><select idref="V-248661" selected="true" /><select idref="V-248662" selected="true" /><select idref="V-248663" selected="true" /><select idref="V-248664" selected="true" /><select idref="V-248665" selected="true" /><select idref="V-248666" selected="true" /><select idref="V-248667" selected="true" /><select idref="V-248668" selected="true" /><select idref="V-248669" selected="true" /><select idref="V-248670" selected="true" /><select idref="V-248671" selected="true" /><select idref="V-248672" selected="true" /><select idref="V-248673" selected="true" /><select idref="V-248678" selected="true" /><select idref="V-248679" selected="true" /><select idref="V-248680" selected="true" /><select idref="V-248682" selected="true" /><select idref="V-248683" selected="true" /><select idref="V-248684" selected="true" /><select idref="V-248685" selected="true" /><select idref="V-248686" selected="true" /><select idref="V-248687" selected="true" /><select idref="V-248688" selected="true" /><select idref="V-248689" selected="true" /><select idref="V-248690" selected="true" /><select idref="V-248691" selected="true" /><select idref="V-248692" selected="true" /><select idref="V-248693" selected="true" /><select idref="V-248694" selected="true" /><select idref="V-248695" selected="true" /><select idref="V-248696" selected="true" /><select idref="V-248697" selected="true" /><select idref="V-248699" selected="true" /><select idref="V-248700" selected="true" /><select idref="V-248701" selected="true" /><select idref="V-248702" selected="true" /><select idref="V-248703" selected="true" /><select idref="V-248704" selected="true" /><select idref="V-248705" selected="true" /><select idref="V-248706" selected="true" /><select idref="V-248707" selected="true" /><select idref="V-248708" selected="true" /><select idref="V-248709" selected="true" /><select idref="V-248710" selected="true" /><select idref="V-248711" selected="true" /><select idref="V-248712" selected="true" /><select idref="V-248713" selected="true" /><select idref="V-248714" selected="true" /><select idref="V-248715" selected="true" /><select idref="V-248716" selected="true" /><select idref="V-248717" selected="true" /><select idref="V-248718" selected="true" /><select idref="V-248719" selected="true" /><select idref="V-248720" selected="true" /><select idref="V-248721" selected="true" /><select idref="V-248722" selected="true" /><select idref="V-248723" selected="true" /><select idref="V-248724" selected="true" /><select idref="V-248725" selected="true" /><select idref="V-248726" selected="true" /><select idref="V-248728" selected="true" /><select idref="V-248729" selected="true" /><select idref="V-248730" selected="true" /><select idref="V-248731" selected="true" /><select idref="V-248732" selected="true" /><select idref="V-248733" selected="true" /><select idref="V-248734" selected="true" /><select idref="V-248735" selected="true" /><select idref="V-248736" selected="true" /><select idref="V-248737" selected="true" /><select idref="V-248738" selected="true" /><select idref="V-248739" selected="true" /><select idref="V-248740" selected="true" /><select idref="V-248741" selected="true" /><select idref="V-248742" selected="true" /><select idref="V-248743" selected="true" /><select idref="V-248744" selected="true" /><select idref="V-248745" selected="true" /><select idref="V-248746" selected="true" /><select idref="V-248747" selected="true" /><select idref="V-248748" selected="true" /><select idref="V-248753" selected="true" /><select idref="V-248754" selected="true" /><select idref="V-248756" selected="true" /><select idref="V-248757" selected="true" /><select idref="V-248758" selected="true" /><select idref="V-248759" selected="true" /><select idref="V-248760" selected="true" /><select idref="V-248761" selected="true" /><select idref="V-248762" selected="true" /><select idref="V-248763" selected="true" /><select idref="V-248764" selected="true" /><select idref="V-248765" selected="true" /><select idref="V-248766" selected="true" /><select idref="V-248767" selected="true" /><select idref="V-248768" selected="true" /><select idref="V-248769" selected="true" /><select idref="V-248770" selected="true" /><select idref="V-248771" selected="true" /><select idref="V-248772" selected="true" /><select idref="V-248773" selected="true" /><select idref="V-248774" selected="true" /><select idref="V-248779" selected="true" /><select idref="V-248781" selected="true" /><select idref="V-248782" selected="true" /><select idref="V-248783" selected="true" /><select idref="V-248784" selected="true" /><select idref="V-248790" selected="true" /><select idref="V-248791" selected="true" /><select idref="V-248797" selected="true" /><select idref="V-248798" selected="true" /><select idref="V-248799" selected="true" /><select idref="V-248800" selected="true" /><select idref="V-248801" selected="true" /><select idref="V-248802" selected="true" /><select idref="V-248803" selected="true" /><select idref="V-248804" selected="true" /><select idref="V-248805" selected="true" /><select idref="V-248806" selected="true" /><select idref="V-248807" selected="true" /><select idref="V-248808" selected="true" /><select idref="V-248809" selected="true" /><select idref="V-248810" selected="true" /><select idref="V-248811" selected="true" /><select idref="V-248812" selected="true" /><select idref="V-248813" selected="true" /><select idref="V-248814" selected="true" /><select idref="V-248815" selected="true" /><select idref="V-248816" selected="true" /><select idref="V-248817" selected="true" /><select idref="V-248818" selected="true" /><select idref="V-248819" selected="true" /><select idref="V-248820" selected="true" /><select idref="V-248821" selected="true" /><select idref="V-248822" selected="true" /><select idref="V-248823" selected="true" /><select idref="V-248824" selected="true" /><select idref="V-248825" selected="true" /><select idref="V-248826" selected="true" /><select idref="V-248827" selected="true" /><select idref="V-248828" selected="true" /><select idref="V-248829" selected="true" /><select idref="V-248830" selected="true" /><select idref="V-248831" selected="true" /><select idref="V-248832" selected="true" /><select idref="V-248833" selected="true" /><select idref="V-248834" selected="true" /><select idref="V-248835" selected="true" /><select idref="V-248836" selected="true" /><select idref="V-248837" selected="true" /><select idref="V-248839" selected="true" /><select idref="V-248840" selected="true" /><select idref="V-248841" selected="true" /><select idref="V-248842" selected="true" /><select idref="V-248843" selected="true" /><select idref="V-248844" selected="true" /><select idref="V-248845" selected="true" /><select idref="V-248846" selected="true" /><select idref="V-248847" selected="true" /><select idref="V-248848" selected="true" /><select idref="V-248849" selected="true" /><select idref="V-248850" selected="true" /><select idref="V-248851" selected="true" /><select idref="V-248852" selected="true" /><select idref="V-248853" selected="true" /><select idref="V-248854" selected="true" /><select idref="V-248855" selected="true" /><select idref="V-248856" selected="true" /><select idref="V-248857" selected="true" /><select idref="V-248858" selected="true" /><select idref="V-248859" selected="true" /><select idref="V-248860" selected="true" /><select idref="V-248861" selected="true" /><select idref="V-248862" selected="true" /><select idref="V-248863" selected="true" /><select idref="V-248864" selected="true" /><select idref="V-248865" selected="true" /><select idref="V-248866" selected="true" /><select idref="V-248867" selected="true" /><select idref="V-248868" selected="true" /><select idref="V-248869" selected="true" /><select idref="V-248870" selected="true" /><select idref="V-248871" selected="true" /><select idref="V-248872" selected="true" /><select idref="V-248873" selected="true" /><select idref="V-248874" selected="true" /><select idref="V-248875" selected="true" /><select idref="V-248876" selected="true" /><select idref="V-248877" selected="true" /><select idref="V-248878" selected="true" /><select idref="V-248879" selected="true" /><select idref="V-248880" selected="true" /><select idref="V-248881" selected="true" /><select idref="V-248882" selected="true" /><select idref="V-248883" selected="true" /><select idref="V-248884" selected="true" /><select idref="V-248885" selected="true" /><select idref="V-248886" selected="true" /><select idref="V-248887" selected="true" /><select idref="V-248888" selected="true" /><select idref="V-248889" selected="true" /><select idref="V-248890" selected="true" /><select idref="V-248891" selected="true" /><select idref="V-248892" selected="true" /><select idref="V-248893" selected="true" /><select idref="V-248894" selected="true" /><select idref="V-248895" selected="true" /><select idref="V-248896" selected="true" /><select idref="V-248897" selected="true" /><select idref="V-248898" selected="true" /><select idref="V-248899" selected="true" /><select idref="V-248900" selected="true" /><select idref="V-248901" selected="true" /><select idref="V-248902" selected="true" /><select idref="V-248903" selected="true" /><select idref="V-248904" selected="true" /><select idref="V-248905" selected="true" /><select idref="V-248906" selected="true" /><select idref="V-248907" selected="true" /><select idref="V-252650" selected="true" /><select idref="V-252651" selected="true" /><select idref="V-252652" selected="true" /><select idref="V-252653" selected="true" /><select idref="V-252654" selected="true" /><select idref="V-252655" selected="true" /><select idref="V-252656" selected="true" /><select idref="V-252657" selected="true" /><select idref="V-252658" selected="true" /><select idref="V-252659" selected="true" /><select idref="V-252660" selected="true" /><select idref="V-252662" selected="true" /><select idref="V-252663" selected="true" /><select idref="V-255898" selected="true" /><select idref="V-256978" selected="true" /><select idref="V-256979" selected="true" /><select idref="V-257259" selected="true" /><select idref="V-274876" selected="true" /></Profile><Profile id="MAC-1_Public"><title>I - Mission Critical Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-248519" selected="true" /><select idref="V-248520" selected="true" /><select idref="V-248521" selected="true" /><select idref="V-248523" selected="true" /><select idref="V-248524" selected="true" /><select idref="V-248525" selected="true" /><select idref="V-248526" selected="true" /><select idref="V-248527" selected="true" /><select idref="V-248528" selected="true" /><select idref="V-248529" selected="true" /><select idref="V-248530" selected="true" /><select idref="V-248531" selected="true" /><select idref="V-248532" selected="true" /><select idref="V-248533" selected="true" /><select idref="V-248534" selected="true" /><select idref="V-248535" selected="true" /><select idref="V-248537" selected="true" /><select idref="V-248538" selected="true" /><select idref="V-248539" selected="true" /><select idref="V-248540" selected="true" /><select idref="V-248541" selected="true" /><select idref="V-248542" selected="true" /><select idref="V-248543" selected="true" /><select idref="V-248544" selected="true" /><select idref="V-248545" selected="true" /><select idref="V-248546" selected="true" /><select idref="V-248547" selected="true" /><select idref="V-248548" selected="true" /><select idref="V-248549" selected="true" /><select idref="V-248551" selected="true" /><select idref="V-248552" selected="true" /><select idref="V-248553" selected="true" /><select idref="V-248554" selected="true" /><select idref="V-248555" selected="true" /><select idref="V-248556" selected="true" /><select idref="V-248557" selected="true" /><select idref="V-248558" selected="true" /><select idref="V-248559" selected="true" /><select idref="V-248560" selected="true" /><select idref="V-248561" selected="true" /><select idref="V-248562" selected="true" /><select idref="V-248563" selected="true" /><select idref="V-248564" selected="true" /><select idref="V-248565" selected="true" /><select idref="V-248566" selected="true" /><select idref="V-248567" selected="true" /><select idref="V-248568" selected="true" /><select idref="V-248569" selected="true" /><select idref="V-248570" selected="true" /><select idref="V-248571" selected="true" /><select idref="V-248572" selected="true" /><select idref="V-248573" selected="true" /><select idref="V-248574" selected="true" /><select idref="V-248575" selected="true" /><select idref="V-248576" selected="true" /><select idref="V-248577" selected="true" /><select idref="V-248578" selected="true" /><select idref="V-248579" selected="true" /><select idref="V-248580" selected="true" /><select idref="V-248581" selected="true" /><select idref="V-248582" selected="true" /><select idref="V-248583" selected="true" /><select idref="V-248584" selected="true" /><select idref="V-248585" selected="true" /><select idref="V-248586" selected="true" /><select idref="V-248587" selected="true" /><select idref="V-248588" selected="true" /><select idref="V-248589" selected="true" /><select idref="V-248590" selected="true" /><select idref="V-248591" selected="true" /><select idref="V-248592" selected="true" /><select idref="V-248593" selected="true" /><select idref="V-248594" selected="true" /><select idref="V-248595" selected="true" /><select idref="V-248596" selected="true" /><select idref="V-248597" selected="true" /><select idref="V-248598" selected="true" /><select idref="V-248599" selected="true" /><select idref="V-248600" selected="true" /><select idref="V-248601" selected="true" /><select idref="V-248602" selected="true" /><select idref="V-248603" selected="true" /><select idref="V-248605" selected="true" /><select idref="V-248606" selected="true" /><select idref="V-248607" selected="true" /><select idref="V-248608" selected="true" /><select idref="V-248609" selected="true" /><select idref="V-248610" selected="true" /><select idref="V-248611" selected="true" /><select idref="V-248612" selected="true" /><select idref="V-248613" selected="true" /><select idref="V-248615" selected="true" /><select idref="V-248616" selected="true" /><select idref="V-248617" selected="true" /><select idref="V-248618" selected="true" /><select idref="V-248619" selected="true" /><select idref="V-248620" selected="true" /><select idref="V-248621" selected="true" /><select idref="V-248622" selected="true" /><select idref="V-248623" selected="true" /><select idref="V-248624" selected="true" /><select idref="V-248625" selected="true" /><select idref="V-248626" selected="true" /><select idref="V-248627" selected="true" /><select idref="V-248628" selected="true" /><select idref="V-248629" selected="true" /><select idref="V-248630" selected="true" /><select idref="V-248631" selected="true" /><select idref="V-248632" selected="true" /><select idref="V-248633" selected="true" /><select idref="V-248634" selected="true" /><select idref="V-248635" selected="true" /><select idref="V-248636" selected="true" /><select idref="V-248637" selected="true" /><select idref="V-248638" selected="true" /><select idref="V-248639" selected="true" /><select idref="V-248640" selected="true" /><select idref="V-248641" selected="true" /><select idref="V-248642" selected="true" /><select idref="V-248643" selected="true" /><select idref="V-248644" selected="true" /><select idref="V-248645" selected="true" /><select idref="V-248646" selected="true" /><select idref="V-248647" selected="true" /><select idref="V-248648" selected="true" /><select idref="V-248649" selected="true" /><select idref="V-248650" selected="true" /><select idref="V-248651" selected="true" /><select idref="V-248652" selected="true" /><select idref="V-248653" selected="true" /><select idref="V-248654" selected="true" /><select idref="V-248655" selected="true" /><select idref="V-248656" selected="true" /><select idref="V-248657" selected="true" /><select idref="V-248658" selected="true" /><select idref="V-248659" selected="true" /><select idref="V-248660" selected="true" /><select idref="V-248661" selected="true" /><select idref="V-248662" selected="true" /><select idref="V-248663" selected="true" /><select idref="V-248664" selected="true" /><select idref="V-248665" selected="true" /><select idref="V-248666" selected="true" /><select idref="V-248667" selected="true" /><select idref="V-248668" selected="true" /><select idref="V-248669" selected="true" /><select idref="V-248670" selected="true" /><select idref="V-248671" selected="true" /><select idref="V-248672" selected="true" /><select idref="V-248673" selected="true" /><select idref="V-248678" selected="true" /><select idref="V-248679" selected="true" /><select idref="V-248680" selected="true" /><select idref="V-248682" selected="true" /><select idref="V-248683" selected="true" /><select idref="V-248684" selected="true" /><select idref="V-248685" selected="true" /><select idref="V-248686" selected="true" /><select idref="V-248687" selected="true" /><select idref="V-248688" selected="true" /><select idref="V-248689" selected="true" /><select idref="V-248690" selected="true" /><select idref="V-248691" selected="true" /><select idref="V-248692" selected="true" /><select idref="V-248693" selected="true" /><select idref="V-248694" selected="true" /><select idref="V-248695" selected="true" /><select idref="V-248696" selected="true" /><select idref="V-248697" selected="true" /><select idref="V-248699" selected="true" /><select idref="V-248700" selected="true" /><select idref="V-248701" selected="true" /><select idref="V-248702" selected="true" /><select idref="V-248703" selected="true" /><select idref="V-248704" selected="true" /><select idref="V-248705" selected="true" /><select idref="V-248706" selected="true" /><select idref="V-248707" selected="true" /><select idref="V-248708" selected="true" /><select idref="V-248709" selected="true" /><select idref="V-248710" selected="true" /><select idref="V-248711" selected="true" /><select idref="V-248712" selected="true" /><select idref="V-248713" selected="true" /><select idref="V-248714" selected="true" /><select idref="V-248715" selected="true" /><select idref="V-248716" selected="true" /><select idref="V-248717" selected="true" /><select idref="V-248718" selected="true" /><select idref="V-248719" selected="true" /><select idref="V-248720" selected="true" /><select idref="V-248721" selected="true" /><select idref="V-248722" selected="true" /><select idref="V-248723" selected="true" /><select idref="V-248724" selected="true" /><select idref="V-248725" selected="true" /><select idref="V-248726" selected="true" /><select idref="V-248728" selected="true" /><select idref="V-248729" selected="true" /><select idref="V-248730" selected="true" /><select idref="V-248731" selected="true" /><select idref="V-248732" selected="true" /><select idref="V-248733" selected="true" /><select idref="V-248734" selected="true" /><select idref="V-248735" selected="true" /><select idref="V-248736" selected="true" /><select idref="V-248737" selected="true" /><select idref="V-248738" selected="true" /><select idref="V-248739" selected="true" /><select idref="V-248740" selected="true" /><select idref="V-248741" selected="true" /><select idref="V-248742" selected="true" /><select idref="V-248743" selected="true" /><select idref="V-248744" selected="true" /><select idref="V-248745" selected="true" /><select idref="V-248746" selected="true" /><select idref="V-248747" selected="true" /><select idref="V-248748" selected="true" /><select idref="V-248753" selected="true" /><select idref="V-248754" selected="true" /><select idref="V-248756" selected="true" /><select idref="V-248757" selected="true" /><select idref="V-248758" selected="true" /><select idref="V-248759" selected="true" /><select idref="V-248760" selected="true" /><select idref="V-248761" selected="true" /><select idref="V-248762" selected="true" /><select idref="V-248763" selected="true" /><select idref="V-248764" selected="true" /><select idref="V-248765" selected="true" /><select idref="V-248766" selected="true" /><select idref="V-248767" selected="true" /><select idref="V-248768" selected="true" /><select idref="V-248769" selected="true" /><select idref="V-248770" selected="true" /><select idref="V-248771" selected="true" /><select idref="V-248772" selected="true" /><select idref="V-248773" selected="true" /><select idref="V-248774" selected="true" /><select idref="V-248779" selected="true" /><select idref="V-248781" selected="true" /><select idref="V-248782" selected="true" /><select idref="V-248783" selected="true" /><select idref="V-248784" selected="true" /><select idref="V-248790" selected="true" /><select idref="V-248791" selected="true" /><select idref="V-248797" selected="true" /><select idref="V-248798" selected="true" /><select idref="V-248799" selected="true" /><select idref="V-248800" selected="true" /><select idref="V-248801" selected="true" /><select idref="V-248802" selected="true" /><select idref="V-248803" selected="true" /><select idref="V-248804" selected="true" /><select idref="V-248805" selected="true" /><select idref="V-248806" selected="true" /><select idref="V-248807" selected="true" /><select idref="V-248808" selected="true" /><select idref="V-248809" selected="true" /><select idref="V-248810" selected="true" /><select idref="V-248811" selected="true" /><select idref="V-248812" selected="true" /><select idref="V-248813" selected="true" /><select idref="V-248814" selected="true" /><select idref="V-248815" selected="true" /><select idref="V-248816" selected="true" /><select idref="V-248817" selected="true" /><select idref="V-248818" selected="true" /><select idref="V-248819" selected="true" /><select idref="V-248820" selected="true" /><select idref="V-248821" selected="true" /><select idref="V-248822" selected="true" /><select idref="V-248823" selected="true" /><select idref="V-248824" selected="true" /><select idref="V-248825" selected="true" /><select idref="V-248826" selected="true" /><select idref="V-248827" selected="true" /><select idref="V-248828" selected="true" /><select idref="V-248829" selected="true" /><select idref="V-248830" selected="true" /><select idref="V-248831" selected="true" /><select idref="V-248832" selected="true" /><select idref="V-248833" selected="true" /><select idref="V-248834" selected="true" /><select idref="V-248835" selected="true" /><select idref="V-248836" selected="true" /><select idref="V-248837" selected="true" /><select idref="V-248839" selected="true" /><select idref="V-248840" selected="true" /><select idref="V-248841" selected="true" /><select idref="V-248842" selected="true" /><select idref="V-248843" selected="true" /><select idref="V-248844" selected="true" /><select idref="V-248845" selected="true" /><select idref="V-248846" selected="true" /><select idref="V-248847" selected="true" /><select idref="V-248848" selected="true" /><select idref="V-248849" selected="true" /><select idref="V-248850" selected="true" /><select idref="V-248851" selected="true" /><select idref="V-248852" selected="true" /><select idref="V-248853" selected="true" /><select idref="V-248854" selected="true" /><select idref="V-248855" selected="true" /><select idref="V-248856" selected="true" /><select idref="V-248857" selected="true" /><select idref="V-248858" selected="true" /><select idref="V-248859" selected="true" /><select idref="V-248860" selected="true" /><select idref="V-248861" selected="true" /><select idref="V-248862" selected="true" /><select idref="V-248863" selected="true" /><select idref="V-248864" selected="true" /><select idref="V-248865" selected="true" /><select idref="V-248866" selected="true" /><select idref="V-248867" selected="true" /><select idref="V-248868" selected="true" /><select idref="V-248869" selected="true" /><select idref="V-248870" selected="true" /><select idref="V-248871" selected="true" /><select idref="V-248872" selected="true" /><select idref="V-248873" selected="true" /><select idref="V-248874" selected="true" /><select idref="V-248875" selected="true" /><select idref="V-248876" selected="true" /><select idref="V-248877" selected="true" /><select idref="V-248878" selected="true" /><select idref="V-248879" selected="true" /><select idref="V-248880" selected="true" /><select idref="V-248881" selected="true" /><select idref="V-248882" selected="true" /><select idref="V-248883" selected="true" /><select idref="V-248884" selected="true" /><select idref="V-248885" selected="true" /><select idref="V-248886" selected="true" /><select idref="V-248887" selected="true" /><select idref="V-248888" selected="true" /><select idref="V-248889" selected="true" /><select idref="V-248890" selected="true" /><select idref="V-248891" selected="true" /><select idref="V-248892" selected="true" /><select idref="V-248893" selected="true" /><select idref="V-248894" selected="true" /><select idref="V-248895" selected="true" /><select idref="V-248896" selected="true" /><select idref="V-248897" selected="true" /><select idref="V-248898" selected="true" /><select idref="V-248899" selected="true" /><select idref="V-248900" selected="true" /><select idref="V-248901" selected="true" /><select idref="V-248902" selected="true" /><select idref="V-248903" selected="true" /><select idref="V-248904" selected="true" /><select idref="V-248905" selected="true" /><select idref="V-248906" selected="true" /><select idref="V-248907" selected="true" /><select idref="V-252650" selected="true" /><select idref="V-252651" selected="true" /><select idref="V-252652" selected="true" /><select idref="V-252653" selected="true" /><select idref="V-252654" selected="true" /><select idref="V-252655" selected="true" /><select idref="V-252656" selected="true" /><select idref="V-252657" selected="true" /><select idref="V-252658" selected="true" /><select idref="V-252659" selected="true" /><select idref="V-252660" selected="true" /><select idref="V-252662" selected="true" /><select idref="V-252663" selected="true" /><select idref="V-255898" selected="true" /><select idref="V-256978" selected="true" /><select idref="V-256979" selected="true" /><select idref="V-257259" selected="true" /><select idref="V-274876" selected="true" /></Profile><Profile id="MAC-1_Sensitive"><title>I - Mission Critical Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-248519" selected="true" /><select idref="V-248520" selected="true" /><select idref="V-248521" selected="true" /><select idref="V-248523" selected="true" /><select idref="V-248524" selected="true" /><select idref="V-248525" selected="true" /><select idref="V-248526" selected="true" /><select idref="V-248527" selected="true" /><select idref="V-248528" selected="true" /><select idref="V-248529" selected="true" /><select idref="V-248530" selected="true" /><select idref="V-248531" selected="true" /><select idref="V-248532" selected="true" /><select idref="V-248533" selected="true" /><select idref="V-248534" selected="true" /><select idref="V-248535" selected="true" /><select idref="V-248537" selected="true" /><select idref="V-248538" selected="true" /><select idref="V-248539" selected="true" /><select idref="V-248540" selected="true" /><select idref="V-248541" selected="true" /><select idref="V-248542" selected="true" /><select idref="V-248543" selected="true" /><select idref="V-248544" selected="true" /><select idref="V-248545" selected="true" /><select idref="V-248546" selected="true" /><select idref="V-248547" selected="true" /><select idref="V-248548" selected="true" /><select idref="V-248549" selected="true" /><select idref="V-248551" selected="true" /><select idref="V-248552" selected="true" /><select idref="V-248553" selected="true" /><select idref="V-248554" selected="true" /><select idref="V-248555" selected="true" /><select idref="V-248556" selected="true" /><select idref="V-248557" selected="true" /><select idref="V-248558" selected="true" /><select idref="V-248559" selected="true" /><select idref="V-248560" selected="true" /><select idref="V-248561" selected="true" /><select idref="V-248562" selected="true" /><select idref="V-248563" selected="true" /><select idref="V-248564" selected="true" /><select idref="V-248565" selected="true" /><select idref="V-248566" selected="true" /><select idref="V-248567" selected="true" /><select idref="V-248568" selected="true" /><select idref="V-248569" selected="true" /><select idref="V-248570" selected="true" /><select idref="V-248571" selected="true" /><select idref="V-248572" selected="true" /><select idref="V-248573" selected="true" /><select idref="V-248574" selected="true" /><select idref="V-248575" selected="true" /><select idref="V-248576" selected="true" /><select idref="V-248577" selected="true" /><select idref="V-248578" selected="true" /><select idref="V-248579" selected="true" /><select idref="V-248580" selected="true" /><select idref="V-248581" selected="true" /><select idref="V-248582" selected="true" /><select idref="V-248583" selected="true" /><select idref="V-248584" selected="true" /><select idref="V-248585" selected="true" /><select idref="V-248586" selected="true" /><select idref="V-248587" selected="true" /><select idref="V-248588" selected="true" /><select idref="V-248589" selected="true" /><select idref="V-248590" selected="true" /><select idref="V-248591" selected="true" /><select idref="V-248592" selected="true" /><select idref="V-248593" selected="true" /><select idref="V-248594" selected="true" /><select idref="V-248595" selected="true" /><select idref="V-248596" selected="true" /><select idref="V-248597" selected="true" /><select idref="V-248598" selected="true" /><select idref="V-248599" selected="true" /><select idref="V-248600" selected="true" /><select idref="V-248601" selected="true" /><select idref="V-248602" selected="true" /><select idref="V-248603" selected="true" /><select idref="V-248605" selected="true" /><select idref="V-248606" selected="true" /><select idref="V-248607" selected="true" /><select idref="V-248608" selected="true" /><select idref="V-248609" selected="true" /><select idref="V-248610" selected="true" /><select idref="V-248611" selected="true" /><select idref="V-248612" selected="true" /><select idref="V-248613" selected="true" /><select idref="V-248615" selected="true" /><select idref="V-248616" selected="true" /><select idref="V-248617" selected="true" /><select idref="V-248618" selected="true" /><select idref="V-248619" selected="true" /><select idref="V-248620" selected="true" /><select idref="V-248621" selected="true" /><select idref="V-248622" selected="true" /><select idref="V-248623" selected="true" /><select idref="V-248624" selected="true" /><select idref="V-248625" selected="true" /><select idref="V-248626" selected="true" /><select idref="V-248627" selected="true" /><select idref="V-248628" selected="true" /><select idref="V-248629" selected="true" /><select idref="V-248630" selected="true" /><select idref="V-248631" selected="true" /><select idref="V-248632" selected="true" /><select idref="V-248633" selected="true" /><select idref="V-248634" selected="true" /><select idref="V-248635" selected="true" /><select idref="V-248636" selected="true" /><select idref="V-248637" selected="true" /><select idref="V-248638" selected="true" /><select idref="V-248639" selected="true" /><select idref="V-248640" selected="true" /><select idref="V-248641" selected="true" /><select idref="V-248642" selected="true" /><select idref="V-248643" selected="true" /><select idref="V-248644" selected="true" /><select idref="V-248645" selected="true" /><select idref="V-248646" selected="true" /><select idref="V-248647" selected="true" /><select idref="V-248648" selected="true" /><select idref="V-248649" selected="true" /><select idref="V-248650" selected="true" /><select idref="V-248651" selected="true" /><select idref="V-248652" selected="true" /><select idref="V-248653" selected="true" /><select idref="V-248654" selected="true" /><select idref="V-248655" selected="true" /><select idref="V-248656" selected="true" /><select idref="V-248657" selected="true" /><select idref="V-248658" selected="true" /><select idref="V-248659" selected="true" /><select idref="V-248660" selected="true" /><select idref="V-248661" selected="true" /><select idref="V-248662" selected="true" /><select idref="V-248663" selected="true" /><select idref="V-248664" selected="true" /><select idref="V-248665" selected="true" /><select idref="V-248666" selected="true" /><select idref="V-248667" selected="true" /><select idref="V-248668" selected="true" /><select idref="V-248669" selected="true" /><select idref="V-248670" selected="true" /><select idref="V-248671" selected="true" /><select idref="V-248672" selected="true" /><select idref="V-248673" selected="true" /><select idref="V-248678" selected="true" /><select idref="V-248679" selected="true" /><select idref="V-248680" selected="true" /><select idref="V-248682" selected="true" /><select idref="V-248683" selected="true" /><select idref="V-248684" selected="true" /><select idref="V-248685" selected="true" /><select idref="V-248686" selected="true" /><select idref="V-248687" selected="true" /><select idref="V-248688" selected="true" /><select idref="V-248689" selected="true" /><select idref="V-248690" selected="true" /><select idref="V-248691" selected="true" /><select idref="V-248692" selected="true" /><select idref="V-248693" selected="true" /><select idref="V-248694" selected="true" /><select idref="V-248695" selected="true" /><select idref="V-248696" selected="true" /><select idref="V-248697" selected="true" /><select idref="V-248699" selected="true" /><select idref="V-248700" selected="true" /><select idref="V-248701" selected="true" /><select idref="V-248702" selected="true" /><select idref="V-248703" selected="true" /><select idref="V-248704" selected="true" /><select idref="V-248705" selected="true" /><select idref="V-248706" selected="true" /><select idref="V-248707" selected="true" /><select idref="V-248708" selected="true" /><select idref="V-248709" selected="true" /><select idref="V-248710" selected="true" /><select idref="V-248711" selected="true" /><select idref="V-248712" selected="true" /><select idref="V-248713" selected="true" /><select idref="V-248714" selected="true" /><select idref="V-248715" selected="true" /><select idref="V-248716" selected="true" /><select idref="V-248717" selected="true" /><select idref="V-248718" selected="true" /><select idref="V-248719" selected="true" /><select idref="V-248720" selected="true" /><select idref="V-248721" selected="true" /><select idref="V-248722" selected="true" /><select idref="V-248723" selected="true" /><select idref="V-248724" selected="true" /><select idref="V-248725" selected="true" /><select idref="V-248726" selected="true" /><select idref="V-248728" selected="true" /><select idref="V-248729" selected="true" /><select idref="V-248730" selected="true" /><select idref="V-248731" selected="true" /><select idref="V-248732" selected="true" /><select idref="V-248733" selected="true" /><select idref="V-248734" selected="true" /><select idref="V-248735" selected="true" /><select idref="V-248736" selected="true" /><select idref="V-248737" selected="true" /><select idref="V-248738" selected="true" /><select idref="V-248739" selected="true" /><select idref="V-248740" selected="true" /><select idref="V-248741" selected="true" /><select idref="V-248742" selected="true" /><select idref="V-248743" selected="true" /><select idref="V-248744" selected="true" /><select idref="V-248745" selected="true" /><select idref="V-248746" selected="true" /><select idref="V-248747" selected="true" /><select idref="V-248748" selected="true" /><select idref="V-248753" selected="true" /><select idref="V-248754" selected="true" /><select idref="V-248756" selected="true" /><select idref="V-248757" selected="true" /><select idref="V-248758" selected="true" /><select idref="V-248759" selected="true" /><select idref="V-248760" selected="true" /><select idref="V-248761" selected="true" /><select idref="V-248762" selected="true" /><select idref="V-248763" selected="true" /><select idref="V-248764" selected="true" /><select idref="V-248765" selected="true" /><select idref="V-248766" selected="true" /><select idref="V-248767" selected="true" /><select idref="V-248768" selected="true" /><select idref="V-248769" selected="true" /><select idref="V-248770" selected="true" /><select idref="V-248771" selected="true" /><select idref="V-248772" selected="true" /><select idref="V-248773" selected="true" /><select idref="V-248774" selected="true" /><select idref="V-248779" selected="true" /><select idref="V-248781" selected="true" /><select idref="V-248782" selected="true" /><select idref="V-248783" selected="true" /><select idref="V-248784" selected="true" /><select idref="V-248790" selected="true" /><select idref="V-248791" selected="true" /><select idref="V-248797" selected="true" /><select idref="V-248798" selected="true" /><select idref="V-248799" selected="true" /><select idref="V-248800" selected="true" /><select idref="V-248801" selected="true" /><select idref="V-248802" selected="true" /><select idref="V-248803" selected="true" /><select idref="V-248804" selected="true" /><select idref="V-248805" selected="true" /><select idref="V-248806" selected="true" /><select idref="V-248807" selected="true" /><select idref="V-248808" selected="true" /><select idref="V-248809" selected="true" /><select idref="V-248810" selected="true" /><select idref="V-248811" selected="true" /><select idref="V-248812" selected="true" /><select idref="V-248813" selected="true" /><select idref="V-248814" selected="true" /><select idref="V-248815" selected="true" /><select idref="V-248816" selected="true" /><select idref="V-248817" selected="true" /><select idref="V-248818" selected="true" /><select idref="V-248819" selected="true" /><select idref="V-248820" selected="true" /><select idref="V-248821" selected="true" /><select idref="V-248822" selected="true" /><select idref="V-248823" selected="true" /><select idref="V-248824" selected="true" /><select idref="V-248825" selected="true" /><select idref="V-248826" selected="true" /><select idref="V-248827" selected="true" /><select idref="V-248828" selected="true" /><select idref="V-248829" selected="true" /><select idref="V-248830" selected="true" /><select idref="V-248831" selected="true" /><select idref="V-248832" selected="true" /><select idref="V-248833" selected="true" /><select idref="V-248834" selected="true" /><select idref="V-248835" selected="true" /><select idref="V-248836" selected="true" /><select idref="V-248837" selected="true" /><select idref="V-248839" selected="true" /><select idref="V-248840" selected="true" /><select idref="V-248841" selected="true" /><select idref="V-248842" selected="true" /><select idref="V-248843" selected="true" /><select idref="V-248844" selected="true" /><select idref="V-248845" selected="true" /><select idref="V-248846" selected="true" /><select idref="V-248847" selected="true" /><select idref="V-248848" selected="true" /><select idref="V-248849" selected="true" /><select idref="V-248850" selected="true" /><select idref="V-248851" selected="true" /><select idref="V-248852" selected="true" /><select idref="V-248853" selected="true" /><select idref="V-248854" selected="true" /><select idref="V-248855" selected="true" /><select idref="V-248856" selected="true" /><select idref="V-248857" selected="true" /><select idref="V-248858" selected="true" /><select idref="V-248859" selected="true" /><select idref="V-248860" selected="true" /><select idref="V-248861" selected="true" /><select idref="V-248862" selected="true" /><select idref="V-248863" selected="true" /><select idref="V-248864" selected="true" /><select idref="V-248865" selected="true" /><select idref="V-248866" selected="true" /><select idref="V-248867" selected="true" /><select idref="V-248868" selected="true" /><select idref="V-248869" selected="true" /><select idref="V-248870" selected="true" /><select idref="V-248871" selected="true" /><select idref="V-248872" selected="true" /><select idref="V-248873" selected="true" /><select idref="V-248874" selected="true" /><select idref="V-248875" selected="true" /><select idref="V-248876" selected="true" /><select idref="V-248877" selected="true" /><select idref="V-248878" selected="true" /><select idref="V-248879" selected="true" /><select idref="V-248880" selected="true" /><select idref="V-248881" selected="true" /><select idref="V-248882" selected="true" /><select idref="V-248883" selected="true" /><select idref="V-248884" selected="true" /><select idref="V-248885" selected="true" /><select idref="V-248886" selected="true" /><select idref="V-248887" selected="true" /><select idref="V-248888" selected="true" /><select idref="V-248889" selected="true" /><select idref="V-248890" selected="true" /><select idref="V-248891" selected="true" /><select idref="V-248892" selected="true" /><select idref="V-248893" selected="true" /><select idref="V-248894" selected="true" /><select idref="V-248895" selected="true" /><select idref="V-248896" selected="true" /><select idref="V-248897" selected="true" /><select idref="V-248898" selected="true" /><select idref="V-248899" selected="true" /><select idref="V-248900" selected="true" /><select idref="V-248901" selected="true" /><select idref="V-248902" selected="true" /><select idref="V-248903" selected="true" /><select idref="V-248904" selected="true" /><select idref="V-248905" selected="true" /><select idref="V-248906" selected="true" /><select idref="V-248907" selected="true" /><select idref="V-252650" selected="true" /><select idref="V-252651" selected="true" /><select idref="V-252652" selected="true" /><select idref="V-252653" selected="true" /><select idref="V-252654" selected="true" /><select idref="V-252655" selected="true" /><select idref="V-252656" selected="true" /><select idref="V-252657" selected="true" /><select idref="V-252658" selected="true" /><select idref="V-252659" selected="true" /><select idref="V-252660" selected="true" /><select idref="V-252662" selected="true" /><select idref="V-252663" selected="true" /><select idref="V-255898" selected="true" /><select idref="V-256978" selected="true" /><select idref="V-256979" selected="true" /><select idref="V-257259" selected="true" /><select idref="V-274876" selected="true" /></Profile><Profile id="MAC-2_Classified"><title>II - Mission Support Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-248519" selected="true" /><select idref="V-248520" selected="true" /><select idref="V-248521" selected="true" /><select idref="V-248523" selected="true" /><select idref="V-248524" selected="true" /><select idref="V-248525" selected="true" /><select idref="V-248526" selected="true" /><select idref="V-248527" selected="true" /><select idref="V-248528" selected="true" /><select idref="V-248529" selected="true" /><select idref="V-248530" selected="true" /><select idref="V-248531" selected="true" /><select idref="V-248532" selected="true" /><select idref="V-248533" selected="true" /><select idref="V-248534" selected="true" /><select idref="V-248535" selected="true" /><select idref="V-248537" selected="true" /><select idref="V-248538" selected="true" /><select idref="V-248539" selected="true" /><select idref="V-248540" selected="true" /><select idref="V-248541" selected="true" /><select idref="V-248542" selected="true" /><select idref="V-248543" selected="true" /><select idref="V-248544" selected="true" /><select idref="V-248545" selected="true" /><select idref="V-248546" selected="true" /><select idref="V-248547" selected="true" /><select idref="V-248548" selected="true" /><select idref="V-248549" selected="true" /><select idref="V-248551" selected="true" /><select idref="V-248552" selected="true" /><select idref="V-248553" selected="true" /><select idref="V-248554" selected="true" /><select idref="V-248555" selected="true" /><select idref="V-248556" selected="true" /><select idref="V-248557" selected="true" /><select idref="V-248558" selected="true" /><select idref="V-248559" selected="true" /><select idref="V-248560" selected="true" /><select idref="V-248561" selected="true" /><select idref="V-248562" selected="true" /><select idref="V-248563" selected="true" /><select idref="V-248564" selected="true" /><select idref="V-248565" selected="true" /><select idref="V-248566" selected="true" /><select idref="V-248567" selected="true" /><select idref="V-248568" selected="true" /><select idref="V-248569" selected="true" /><select idref="V-248570" selected="true" /><select idref="V-248571" selected="true" /><select idref="V-248572" selected="true" /><select idref="V-248573" selected="true" /><select idref="V-248574" selected="true" /><select idref="V-248575" selected="true" /><select idref="V-248576" selected="true" /><select idref="V-248577" selected="true" /><select idref="V-248578" selected="true" /><select idref="V-248579" selected="true" /><select idref="V-248580" selected="true" /><select idref="V-248581" selected="true" /><select idref="V-248582" selected="true" /><select idref="V-248583" selected="true" /><select idref="V-248584" selected="true" /><select idref="V-248585" selected="true" /><select idref="V-248586" selected="true" /><select idref="V-248587" selected="true" /><select idref="V-248588" selected="true" /><select idref="V-248589" selected="true" /><select idref="V-248590" selected="true" /><select idref="V-248591" selected="true" /><select idref="V-248592" selected="true" /><select idref="V-248593" selected="true" /><select idref="V-248594" selected="true" /><select idref="V-248595" selected="true" /><select idref="V-248596" selected="true" /><select idref="V-248597" selected="true" /><select idref="V-248598" selected="true" /><select idref="V-248599" selected="true" /><select idref="V-248600" selected="true" /><select idref="V-248601" selected="true" /><select idref="V-248602" selected="true" /><select idref="V-248603" selected="true" /><select idref="V-248605" selected="true" /><select idref="V-248606" selected="true" /><select idref="V-248607" selected="true" /><select idref="V-248608" selected="true" /><select idref="V-248609" selected="true" /><select idref="V-248610" selected="true" /><select idref="V-248611" selected="true" /><select idref="V-248612" selected="true" /><select idref="V-248613" selected="true" /><select idref="V-248615" selected="true" /><select idref="V-248616" selected="true" /><select idref="V-248617" selected="true" /><select idref="V-248618" selected="true" /><select idref="V-248619" selected="true" /><select idref="V-248620" selected="true" /><select idref="V-248621" selected="true" /><select idref="V-248622" selected="true" /><select idref="V-248623" selected="true" /><select idref="V-248624" selected="true" /><select idref="V-248625" selected="true" /><select idref="V-248626" selected="true" /><select idref="V-248627" selected="true" /><select idref="V-248628" selected="true" /><select idref="V-248629" selected="true" /><select idref="V-248630" selected="true" /><select idref="V-248631" selected="true" /><select idref="V-248632" selected="true" /><select idref="V-248633" selected="true" /><select idref="V-248634" selected="true" /><select idref="V-248635" selected="true" /><select idref="V-248636" selected="true" /><select idref="V-248637" selected="true" /><select idref="V-248638" selected="true" /><select idref="V-248639" selected="true" /><select idref="V-248640" selected="true" /><select idref="V-248641" selected="true" /><select idref="V-248642" selected="true" /><select idref="V-248643" selected="true" /><select idref="V-248644" selected="true" /><select idref="V-248645" selected="true" /><select idref="V-248646" selected="true" /><select idref="V-248647" selected="true" /><select idref="V-248648" selected="true" /><select idref="V-248649" selected="true" /><select idref="V-248650" selected="true" /><select idref="V-248651" selected="true" /><select idref="V-248652" selected="true" /><select idref="V-248653" selected="true" /><select idref="V-248654" selected="true" /><select idref="V-248655" selected="true" /><select idref="V-248656" selected="true" /><select idref="V-248657" selected="true" /><select idref="V-248658" selected="true" /><select idref="V-248659" selected="true" /><select idref="V-248660" selected="true" /><select idref="V-248661" selected="true" /><select idref="V-248662" selected="true" /><select idref="V-248663" selected="true" /><select idref="V-248664" selected="true" /><select idref="V-248665" selected="true" /><select idref="V-248666" selected="true" /><select idref="V-248667" selected="true" /><select idref="V-248668" selected="true" /><select idref="V-248669" selected="true" /><select idref="V-248670" selected="true" /><select idref="V-248671" selected="true" /><select idref="V-248672" selected="true" /><select idref="V-248673" selected="true" /><select idref="V-248678" selected="true" /><select idref="V-248679" selected="true" /><select idref="V-248680" selected="true" /><select idref="V-248682" selected="true" /><select idref="V-248683" selected="true" /><select idref="V-248684" selected="true" /><select idref="V-248685" selected="true" /><select idref="V-248686" selected="true" /><select idref="V-248687" selected="true" /><select idref="V-248688" selected="true" /><select idref="V-248689" selected="true" /><select idref="V-248690" selected="true" /><select idref="V-248691" selected="true" /><select idref="V-248692" selected="true" /><select idref="V-248693" selected="true" /><select idref="V-248694" selected="true" /><select idref="V-248695" selected="true" /><select idref="V-248696" selected="true" /><select idref="V-248697" selected="true" /><select idref="V-248699" selected="true" /><select idref="V-248700" selected="true" /><select idref="V-248701" selected="true" /><select idref="V-248702" selected="true" /><select idref="V-248703" selected="true" /><select idref="V-248704" selected="true" /><select idref="V-248705" selected="true" /><select idref="V-248706" selected="true" /><select idref="V-248707" selected="true" /><select idref="V-248708" selected="true" /><select idref="V-248709" selected="true" /><select idref="V-248710" selected="true" /><select idref="V-248711" selected="true" /><select idref="V-248712" selected="true" /><select idref="V-248713" selected="true" /><select idref="V-248714" selected="true" /><select idref="V-248715" selected="true" /><select idref="V-248716" selected="true" /><select idref="V-248717" selected="true" /><select idref="V-248718" selected="true" /><select idref="V-248719" selected="true" /><select idref="V-248720" selected="true" /><select idref="V-248721" selected="true" /><select idref="V-248722" selected="true" /><select idref="V-248723" selected="true" /><select idref="V-248724" selected="true" /><select idref="V-248725" selected="true" /><select idref="V-248726" selected="true" /><select idref="V-248728" selected="true" /><select idref="V-248729" selected="true" /><select idref="V-248730" selected="true" /><select idref="V-248731" selected="true" /><select idref="V-248732" selected="true" /><select idref="V-248733" selected="true" /><select idref="V-248734" selected="true" /><select idref="V-248735" selected="true" /><select idref="V-248736" selected="true" /><select idref="V-248737" selected="true" /><select idref="V-248738" selected="true" /><select idref="V-248739" selected="true" /><select idref="V-248740" selected="true" /><select idref="V-248741" selected="true" /><select idref="V-248742" selected="true" /><select idref="V-248743" selected="true" /><select idref="V-248744" selected="true" /><select idref="V-248745" selected="true" /><select idref="V-248746" selected="true" /><select idref="V-248747" selected="true" /><select idref="V-248748" selected="true" /><select idref="V-248753" selected="true" /><select idref="V-248754" selected="true" /><select idref="V-248756" selected="true" /><select idref="V-248757" selected="true" /><select idref="V-248758" selected="true" /><select idref="V-248759" selected="true" /><select idref="V-248760" selected="true" /><select idref="V-248761" selected="true" /><select idref="V-248762" selected="true" /><select idref="V-248763" selected="true" /><select idref="V-248764" selected="true" /><select idref="V-248765" selected="true" /><select idref="V-248766" selected="true" /><select idref="V-248767" selected="true" /><select idref="V-248768" selected="true" /><select idref="V-248769" selected="true" /><select idref="V-248770" selected="true" /><select idref="V-248771" selected="true" /><select idref="V-248772" selected="true" /><select idref="V-248773" selected="true" /><select idref="V-248774" selected="true" /><select idref="V-248779" selected="true" /><select idref="V-248781" selected="true" /><select idref="V-248782" selected="true" /><select idref="V-248783" selected="true" /><select idref="V-248784" selected="true" /><select idref="V-248790" selected="true" /><select idref="V-248791" selected="true" /><select idref="V-248797" selected="true" /><select idref="V-248798" selected="true" /><select idref="V-248799" selected="true" /><select idref="V-248800" selected="true" /><select idref="V-248801" selected="true" /><select idref="V-248802" selected="true" /><select idref="V-248803" selected="true" /><select idref="V-248804" selected="true" /><select idref="V-248805" selected="true" /><select idref="V-248806" selected="true" /><select idref="V-248807" selected="true" /><select idref="V-248808" selected="true" /><select idref="V-248809" selected="true" /><select idref="V-248810" selected="true" /><select idref="V-248811" selected="true" /><select idref="V-248812" selected="true" /><select idref="V-248813" selected="true" /><select idref="V-248814" selected="true" /><select idref="V-248815" selected="true" /><select idref="V-248816" selected="true" /><select idref="V-248817" selected="true" /><select idref="V-248818" selected="true" /><select idref="V-248819" selected="true" /><select idref="V-248820" selected="true" /><select idref="V-248821" selected="true" /><select idref="V-248822" selected="true" /><select idref="V-248823" selected="true" /><select idref="V-248824" selected="true" /><select idref="V-248825" selected="true" /><select idref="V-248826" selected="true" /><select idref="V-248827" selected="true" /><select idref="V-248828" selected="true" /><select idref="V-248829" selected="true" /><select idref="V-248830" selected="true" /><select idref="V-248831" selected="true" /><select idref="V-248832" selected="true" /><select idref="V-248833" selected="true" /><select idref="V-248834" selected="true" /><select idref="V-248835" selected="true" /><select idref="V-248836" selected="true" /><select idref="V-248837" selected="true" /><select idref="V-248839" selected="true" /><select idref="V-248840" selected="true" /><select idref="V-248841" selected="true" /><select idref="V-248842" selected="true" /><select idref="V-248843" selected="true" /><select idref="V-248844" selected="true" /><select idref="V-248845" selected="true" /><select idref="V-248846" selected="true" /><select idref="V-248847" selected="true" /><select idref="V-248848" selected="true" /><select idref="V-248849" selected="true" /><select idref="V-248850" selected="true" /><select idref="V-248851" selected="true" /><select idref="V-248852" selected="true" /><select idref="V-248853" selected="true" /><select idref="V-248854" selected="true" /><select idref="V-248855" selected="true" /><select idref="V-248856" selected="true" /><select idref="V-248857" selected="true" /><select idref="V-248858" selected="true" /><select idref="V-248859" selected="true" /><select idref="V-248860" selected="true" /><select idref="V-248861" selected="true" /><select idref="V-248862" selected="true" /><select idref="V-248863" selected="true" /><select idref="V-248864" selected="true" /><select idref="V-248865" selected="true" /><select idref="V-248866" selected="true" /><select idref="V-248867" selected="true" /><select idref="V-248868" selected="true" /><select idref="V-248869" selected="true" /><select idref="V-248870" selected="true" /><select idref="V-248871" selected="true" /><select idref="V-248872" selected="true" /><select idref="V-248873" selected="true" /><select idref="V-248874" selected="true" /><select idref="V-248875" selected="true" /><select idref="V-248876" selected="true" /><select idref="V-248877" selected="true" /><select idref="V-248878" selected="true" /><select idref="V-248879" selected="true" /><select idref="V-248880" selected="true" /><select idref="V-248881" selected="true" /><select idref="V-248882" selected="true" /><select idref="V-248883" selected="true" /><select idref="V-248884" selected="true" /><select idref="V-248885" selected="true" /><select idref="V-248886" selected="true" /><select idref="V-248887" selected="true" /><select idref="V-248888" selected="true" /><select idref="V-248889" selected="true" /><select idref="V-248890" selected="true" /><select idref="V-248891" selected="true" /><select idref="V-248892" selected="true" /><select idref="V-248893" selected="true" /><select idref="V-248894" selected="true" /><select idref="V-248895" selected="true" /><select idref="V-248896" selected="true" /><select idref="V-248897" selected="true" /><select idref="V-248898" selected="true" /><select idref="V-248899" selected="true" /><select idref="V-248900" selected="true" /><select idref="V-248901" selected="true" /><select idref="V-248902" selected="true" /><select idref="V-248903" selected="true" /><select idref="V-248904" selected="true" /><select idref="V-248905" selected="true" /><select idref="V-248906" selected="true" /><select idref="V-248907" selected="true" /><select idref="V-252650" selected="true" /><select idref="V-252651" selected="true" /><select idref="V-252652" selected="true" /><select idref="V-252653" selected="true" /><select idref="V-252654" selected="true" /><select idref="V-252655" selected="true" /><select idref="V-252656" selected="true" /><select idref="V-252657" selected="true" /><select idref="V-252658" selected="true" /><select idref="V-252659" selected="true" /><select idref="V-252660" selected="true" /><select idref="V-252662" selected="true" /><select idref="V-252663" selected="true" /><select idref="V-255898" selected="true" /><select idref="V-256978" selected="true" /><select idref="V-256979" selected="true" /><select idref="V-257259" selected="true" /><select idref="V-274876" selected="true" /></Profile><Profile id="MAC-2_Public"><title>II - Mission Support Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-248519" selected="true" /><select idref="V-248520" selected="true" /><select idref="V-248521" selected="true" /><select idref="V-248523" selected="true" /><select idref="V-248524" selected="true" /><select idref="V-248525" selected="true" /><select idref="V-248526" selected="true" /><select idref="V-248527" selected="true" /><select idref="V-248528" selected="true" /><select idref="V-248529" selected="true" /><select idref="V-248530" selected="true" /><select idref="V-248531" selected="true" /><select idref="V-248532" selected="true" /><select idref="V-248533" selected="true" /><select idref="V-248534" selected="true" /><select idref="V-248535" selected="true" /><select idref="V-248537" selected="true" /><select idref="V-248538" selected="true" /><select idref="V-248539" selected="true" /><select idref="V-248540" selected="true" /><select idref="V-248541" selected="true" /><select idref="V-248542" selected="true" /><select idref="V-248543" selected="true" /><select idref="V-248544" selected="true" /><select idref="V-248545" selected="true" /><select idref="V-248546" selected="true" /><select idref="V-248547" selected="true" /><select idref="V-248548" selected="true" /><select idref="V-248549" selected="true" /><select idref="V-248551" selected="true" /><select idref="V-248552" selected="true" /><select idref="V-248553" selected="true" /><select idref="V-248554" selected="true" /><select idref="V-248555" selected="true" /><select idref="V-248556" selected="true" /><select idref="V-248557" selected="true" /><select idref="V-248558" selected="true" /><select idref="V-248559" selected="true" /><select idref="V-248560" selected="true" /><select idref="V-248561" selected="true" /><select idref="V-248562" selected="true" /><select idref="V-248563" selected="true" /><select idref="V-248564" selected="true" /><select idref="V-248565" selected="true" /><select idref="V-248566" selected="true" /><select idref="V-248567" selected="true" /><select idref="V-248568" selected="true" /><select idref="V-248569" selected="true" /><select idref="V-248570" selected="true" /><select idref="V-248571" selected="true" /><select idref="V-248572" selected="true" /><select idref="V-248573" selected="true" /><select idref="V-248574" selected="true" /><select idref="V-248575" selected="true" /><select idref="V-248576" selected="true" /><select idref="V-248577" selected="true" /><select idref="V-248578" selected="true" /><select idref="V-248579" selected="true" /><select idref="V-248580" selected="true" /><select idref="V-248581" selected="true" /><select idref="V-248582" selected="true" /><select idref="V-248583" selected="true" /><select idref="V-248584" selected="true" /><select idref="V-248585" selected="true" /><select idref="V-248586" selected="true" /><select idref="V-248587" selected="true" /><select idref="V-248588" selected="true" /><select idref="V-248589" selected="true" /><select idref="V-248590" selected="true" /><select idref="V-248591" selected="true" /><select idref="V-248592" selected="true" /><select idref="V-248593" selected="true" /><select idref="V-248594" selected="true" /><select idref="V-248595" selected="true" /><select idref="V-248596" selected="true" /><select idref="V-248597" selected="true" /><select idref="V-248598" selected="true" /><select idref="V-248599" selected="true" /><select idref="V-248600" selected="true" /><select idref="V-248601" selected="true" /><select idref="V-248602" selected="true" /><select idref="V-248603" selected="true" /><select idref="V-248605" selected="true" /><select idref="V-248606" selected="true" /><select idref="V-248607" selected="true" /><select idref="V-248608" selected="true" /><select idref="V-248609" selected="true" /><select idref="V-248610" selected="true" /><select idref="V-248611" selected="true" /><select idref="V-248612" selected="true" /><select idref="V-248613" selected="true" /><select idref="V-248615" selected="true" /><select idref="V-248616" selected="true" /><select idref="V-248617" selected="true" /><select idref="V-248618" selected="true" /><select idref="V-248619" selected="true" /><select idref="V-248620" selected="true" /><select idref="V-248621" selected="true" /><select idref="V-248622" selected="true" /><select idref="V-248623" selected="true" /><select idref="V-248624" selected="true" /><select idref="V-248625" selected="true" /><select idref="V-248626" selected="true" /><select idref="V-248627" selected="true" /><select idref="V-248628" selected="true" /><select idref="V-248629" selected="true" /><select idref="V-248630" selected="true" /><select idref="V-248631" selected="true" /><select idref="V-248632" selected="true" /><select idref="V-248633" selected="true" /><select idref="V-248634" selected="true" /><select idref="V-248635" selected="true" /><select idref="V-248636" selected="true" /><select idref="V-248637" selected="true" /><select idref="V-248638" selected="true" /><select idref="V-248639" selected="true" /><select idref="V-248640" selected="true" /><select idref="V-248641" selected="true" /><select idref="V-248642" selected="true" /><select idref="V-248643" selected="true" /><select idref="V-248644" selected="true" /><select idref="V-248645" selected="true" /><select idref="V-248646" selected="true" /><select idref="V-248647" selected="true" /><select idref="V-248648" selected="true" /><select idref="V-248649" selected="true" /><select idref="V-248650" selected="true" /><select idref="V-248651" selected="true" /><select idref="V-248652" selected="true" /><select idref="V-248653" selected="true" /><select idref="V-248654" selected="true" /><select idref="V-248655" selected="true" /><select idref="V-248656" selected="true" /><select idref="V-248657" selected="true" /><select idref="V-248658" selected="true" /><select idref="V-248659" selected="true" /><select idref="V-248660" selected="true" /><select idref="V-248661" selected="true" /><select idref="V-248662" selected="true" /><select idref="V-248663" selected="true" /><select idref="V-248664" selected="true" /><select idref="V-248665" selected="true" /><select idref="V-248666" selected="true" /><select idref="V-248667" selected="true" /><select idref="V-248668" selected="true" /><select idref="V-248669" selected="true" /><select idref="V-248670" selected="true" /><select idref="V-248671" selected="true" /><select idref="V-248672" selected="true" /><select idref="V-248673" selected="true" /><select idref="V-248678" selected="true" /><select idref="V-248679" selected="true" /><select idref="V-248680" selected="true" /><select idref="V-248682" selected="true" /><select idref="V-248683" selected="true" /><select idref="V-248684" selected="true" /><select idref="V-248685" selected="true" /><select idref="V-248686" selected="true" /><select idref="V-248687" selected="true" /><select idref="V-248688" selected="true" /><select idref="V-248689" selected="true" /><select idref="V-248690" selected="true" /><select idref="V-248691" selected="true" /><select idref="V-248692" selected="true" /><select idref="V-248693" selected="true" /><select idref="V-248694" selected="true" /><select idref="V-248695" selected="true" /><select idref="V-248696" selected="true" /><select idref="V-248697" selected="true" /><select idref="V-248699" selected="true" /><select idref="V-248700" selected="true" /><select idref="V-248701" selected="true" /><select idref="V-248702" selected="true" /><select idref="V-248703" selected="true" /><select idref="V-248704" selected="true" /><select idref="V-248705" selected="true" /><select idref="V-248706" selected="true" /><select idref="V-248707" selected="true" /><select idref="V-248708" selected="true" /><select idref="V-248709" selected="true" /><select idref="V-248710" selected="true" /><select idref="V-248711" selected="true" /><select idref="V-248712" selected="true" /><select idref="V-248713" selected="true" /><select idref="V-248714" selected="true" /><select idref="V-248715" selected="true" /><select idref="V-248716" selected="true" /><select idref="V-248717" selected="true" /><select idref="V-248718" selected="true" /><select idref="V-248719" selected="true" /><select idref="V-248720" selected="true" /><select idref="V-248721" selected="true" /><select idref="V-248722" selected="true" /><select idref="V-248723" selected="true" /><select idref="V-248724" selected="true" /><select idref="V-248725" selected="true" /><select idref="V-248726" selected="true" /><select idref="V-248728" selected="true" /><select idref="V-248729" selected="true" /><select idref="V-248730" selected="true" /><select idref="V-248731" selected="true" /><select idref="V-248732" selected="true" /><select idref="V-248733" selected="true" /><select idref="V-248734" selected="true" /><select idref="V-248735" selected="true" /><select idref="V-248736" selected="true" /><select idref="V-248737" selected="true" /><select idref="V-248738" selected="true" /><select idref="V-248739" selected="true" /><select idref="V-248740" selected="true" /><select idref="V-248741" selected="true" /><select idref="V-248742" selected="true" /><select idref="V-248743" selected="true" /><select idref="V-248744" selected="true" /><select idref="V-248745" selected="true" /><select idref="V-248746" selected="true" /><select idref="V-248747" selected="true" /><select idref="V-248748" selected="true" /><select idref="V-248753" selected="true" /><select idref="V-248754" selected="true" /><select idref="V-248756" selected="true" /><select idref="V-248757" selected="true" /><select idref="V-248758" selected="true" /><select idref="V-248759" selected="true" /><select idref="V-248760" selected="true" /><select idref="V-248761" selected="true" /><select idref="V-248762" selected="true" /><select idref="V-248763" selected="true" /><select idref="V-248764" selected="true" /><select idref="V-248765" selected="true" /><select idref="V-248766" selected="true" /><select idref="V-248767" selected="true" /><select idref="V-248768" selected="true" /><select idref="V-248769" selected="true" /><select idref="V-248770" selected="true" /><select idref="V-248771" selected="true" /><select idref="V-248772" selected="true" /><select idref="V-248773" selected="true" /><select idref="V-248774" selected="true" /><select idref="V-248779" selected="true" /><select idref="V-248781" selected="true" /><select idref="V-248782" selected="true" /><select idref="V-248783" selected="true" /><select idref="V-248784" selected="true" /><select idref="V-248790" selected="true" /><select idref="V-248791" selected="true" /><select idref="V-248797" selected="true" /><select idref="V-248798" selected="true" /><select idref="V-248799" selected="true" /><select idref="V-248800" selected="true" /><select idref="V-248801" selected="true" /><select idref="V-248802" selected="true" /><select idref="V-248803" selected="true" /><select idref="V-248804" selected="true" /><select idref="V-248805" selected="true" /><select idref="V-248806" selected="true" /><select idref="V-248807" selected="true" /><select idref="V-248808" selected="true" /><select idref="V-248809" selected="true" /><select idref="V-248810" selected="true" /><select idref="V-248811" selected="true" /><select idref="V-248812" selected="true" /><select idref="V-248813" selected="true" /><select idref="V-248814" selected="true" /><select idref="V-248815" selected="true" /><select idref="V-248816" selected="true" /><select idref="V-248817" selected="true" /><select idref="V-248818" selected="true" /><select idref="V-248819" selected="true" /><select idref="V-248820" selected="true" /><select idref="V-248821" selected="true" /><select idref="V-248822" selected="true" /><select idref="V-248823" selected="true" /><select idref="V-248824" selected="true" /><select idref="V-248825" selected="true" /><select idref="V-248826" selected="true" /><select idref="V-248827" selected="true" /><select idref="V-248828" selected="true" /><select idref="V-248829" selected="true" /><select idref="V-248830" selected="true" /><select idref="V-248831" selected="true" /><select idref="V-248832" selected="true" /><select idref="V-248833" selected="true" /><select idref="V-248834" selected="true" /><select idref="V-248835" selected="true" /><select idref="V-248836" selected="true" /><select idref="V-248837" selected="true" /><select idref="V-248839" selected="true" /><select idref="V-248840" selected="true" /><select idref="V-248841" selected="true" /><select idref="V-248842" selected="true" /><select idref="V-248843" selected="true" /><select idref="V-248844" selected="true" /><select idref="V-248845" selected="true" /><select idref="V-248846" selected="true" /><select idref="V-248847" selected="true" /><select idref="V-248848" selected="true" /><select idref="V-248849" selected="true" /><select idref="V-248850" selected="true" /><select idref="V-248851" selected="true" /><select idref="V-248852" selected="true" /><select idref="V-248853" selected="true" /><select idref="V-248854" selected="true" /><select idref="V-248855" selected="true" /><select idref="V-248856" selected="true" /><select idref="V-248857" selected="true" /><select idref="V-248858" selected="true" /><select idref="V-248859" selected="true" /><select idref="V-248860" selected="true" /><select idref="V-248861" selected="true" /><select idref="V-248862" selected="true" /><select idref="V-248863" selected="true" /><select idref="V-248864" selected="true" /><select idref="V-248865" selected="true" /><select idref="V-248866" selected="true" /><select idref="V-248867" selected="true" /><select idref="V-248868" selected="true" /><select idref="V-248869" selected="true" /><select idref="V-248870" selected="true" /><select idref="V-248871" selected="true" /><select idref="V-248872" selected="true" /><select idref="V-248873" selected="true" /><select idref="V-248874" selected="true" /><select idref="V-248875" selected="true" /><select idref="V-248876" selected="true" /><select idref="V-248877" selected="true" /><select idref="V-248878" selected="true" /><select idref="V-248879" selected="true" /><select idref="V-248880" selected="true" /><select idref="V-248881" selected="true" /><select idref="V-248882" selected="true" /><select idref="V-248883" selected="true" /><select idref="V-248884" selected="true" /><select idref="V-248885" selected="true" /><select idref="V-248886" selected="true" /><select idref="V-248887" selected="true" /><select idref="V-248888" selected="true" /><select idref="V-248889" selected="true" /><select idref="V-248890" selected="true" /><select idref="V-248891" selected="true" /><select idref="V-248892" selected="true" /><select idref="V-248893" selected="true" /><select idref="V-248894" selected="true" /><select idref="V-248895" selected="true" /><select idref="V-248896" selected="true" /><select idref="V-248897" selected="true" /><select idref="V-248898" selected="true" /><select idref="V-248899" selected="true" /><select idref="V-248900" selected="true" /><select idref="V-248901" selected="true" /><select idref="V-248902" selected="true" /><select idref="V-248903" selected="true" /><select idref="V-248904" selected="true" /><select idref="V-248905" selected="true" /><select idref="V-248906" selected="true" /><select idref="V-248907" selected="true" /><select idref="V-252650" selected="true" /><select idref="V-252651" selected="true" /><select idref="V-252652" selected="true" /><select idref="V-252653" selected="true" /><select idref="V-252654" selected="true" /><select idref="V-252655" selected="true" /><select idref="V-252656" selected="true" /><select idref="V-252657" selected="true" /><select idref="V-252658" selected="true" /><select idref="V-252659" selected="true" /><select idref="V-252660" selected="true" /><select idref="V-252662" selected="true" /><select idref="V-252663" selected="true" /><select idref="V-255898" selected="true" /><select idref="V-256978" selected="true" /><select idref="V-256979" selected="true" /><select idref="V-257259" selected="true" /><select idref="V-274876" selected="true" /></Profile><Profile id="MAC-2_Sensitive"><title>II - Mission Support Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-248519" selected="true" /><select idref="V-248520" selected="true" /><select idref="V-248521" selected="true" /><select idref="V-248523" selected="true" /><select idref="V-248524" selected="true" /><select idref="V-248525" selected="true" /><select idref="V-248526" selected="true" /><select idref="V-248527" selected="true" /><select idref="V-248528" selected="true" /><select idref="V-248529" selected="true" /><select idref="V-248530" selected="true" /><select idref="V-248531" selected="true" /><select idref="V-248532" selected="true" /><select idref="V-248533" selected="true" /><select idref="V-248534" selected="true" /><select idref="V-248535" selected="true" /><select idref="V-248537" selected="true" /><select idref="V-248538" selected="true" /><select idref="V-248539" selected="true" /><select idref="V-248540" selected="true" /><select idref="V-248541" selected="true" /><select idref="V-248542" selected="true" /><select idref="V-248543" selected="true" /><select idref="V-248544" selected="true" /><select idref="V-248545" selected="true" /><select idref="V-248546" selected="true" /><select idref="V-248547" selected="true" /><select idref="V-248548" selected="true" /><select idref="V-248549" selected="true" /><select idref="V-248551" selected="true" /><select idref="V-248552" selected="true" /><select idref="V-248553" selected="true" /><select idref="V-248554" selected="true" /><select idref="V-248555" selected="true" /><select idref="V-248556" selected="true" /><select idref="V-248557" selected="true" /><select idref="V-248558" selected="true" /><select idref="V-248559" selected="true" /><select idref="V-248560" selected="true" /><select idref="V-248561" selected="true" /><select idref="V-248562" selected="true" /><select idref="V-248563" selected="true" /><select idref="V-248564" selected="true" /><select idref="V-248565" selected="true" /><select idref="V-248566" selected="true" /><select idref="V-248567" selected="true" /><select idref="V-248568" selected="true" /><select idref="V-248569" selected="true" /><select idref="V-248570" selected="true" /><select idref="V-248571" selected="true" /><select idref="V-248572" selected="true" /><select idref="V-248573" selected="true" /><select idref="V-248574" selected="true" /><select idref="V-248575" selected="true" /><select idref="V-248576" selected="true" /><select idref="V-248577" selected="true" /><select idref="V-248578" selected="true" /><select idref="V-248579" selected="true" /><select idref="V-248580" selected="true" /><select idref="V-248581" selected="true" /><select idref="V-248582" selected="true" /><select idref="V-248583" selected="true" /><select idref="V-248584" selected="true" /><select idref="V-248585" selected="true" /><select idref="V-248586" selected="true" /><select idref="V-248587" selected="true" /><select idref="V-248588" selected="true" /><select idref="V-248589" selected="true" /><select idref="V-248590" selected="true" /><select idref="V-248591" selected="true" /><select idref="V-248592" selected="true" /><select idref="V-248593" selected="true" /><select idref="V-248594" selected="true" /><select idref="V-248595" selected="true" /><select idref="V-248596" selected="true" /><select idref="V-248597" selected="true" /><select idref="V-248598" selected="true" /><select idref="V-248599" selected="true" /><select idref="V-248600" selected="true" /><select idref="V-248601" selected="true" /><select idref="V-248602" selected="true" /><select idref="V-248603" selected="true" /><select idref="V-248605" selected="true" /><select idref="V-248606" selected="true" /><select idref="V-248607" selected="true" /><select idref="V-248608" selected="true" /><select idref="V-248609" selected="true" /><select idref="V-248610" selected="true" /><select idref="V-248611" selected="true" /><select idref="V-248612" selected="true" /><select idref="V-248613" selected="true" /><select idref="V-248615" selected="true" /><select idref="V-248616" selected="true" /><select idref="V-248617" selected="true" /><select idref="V-248618" selected="true" /><select idref="V-248619" selected="true" /><select idref="V-248620" selected="true" /><select idref="V-248621" selected="true" /><select idref="V-248622" selected="true" /><select idref="V-248623" selected="true" /><select idref="V-248624" selected="true" /><select idref="V-248625" selected="true" /><select idref="V-248626" selected="true" /><select idref="V-248627" selected="true" /><select idref="V-248628" selected="true" /><select idref="V-248629" selected="true" /><select idref="V-248630" selected="true" /><select idref="V-248631" selected="true" /><select idref="V-248632" selected="true" /><select idref="V-248633" selected="true" /><select idref="V-248634" selected="true" /><select idref="V-248635" selected="true" /><select idref="V-248636" selected="true" /><select idref="V-248637" selected="true" /><select idref="V-248638" selected="true" /><select idref="V-248639" selected="true" /><select idref="V-248640" selected="true" /><select idref="V-248641" selected="true" /><select idref="V-248642" selected="true" /><select idref="V-248643" selected="true" /><select idref="V-248644" selected="true" /><select idref="V-248645" selected="true" /><select idref="V-248646" selected="true" /><select idref="V-248647" selected="true" /><select idref="V-248648" selected="true" /><select idref="V-248649" selected="true" /><select idref="V-248650" selected="true" /><select idref="V-248651" selected="true" /><select idref="V-248652" selected="true" /><select idref="V-248653" selected="true" /><select idref="V-248654" selected="true" /><select idref="V-248655" selected="true" /><select idref="V-248656" selected="true" /><select idref="V-248657" selected="true" /><select idref="V-248658" selected="true" /><select idref="V-248659" selected="true" /><select idref="V-248660" selected="true" /><select idref="V-248661" selected="true" /><select idref="V-248662" selected="true" /><select idref="V-248663" selected="true" /><select idref="V-248664" selected="true" /><select idref="V-248665" selected="true" /><select idref="V-248666" selected="true" /><select idref="V-248667" selected="true" /><select idref="V-248668" selected="true" /><select idref="V-248669" selected="true" /><select idref="V-248670" selected="true" /><select idref="V-248671" selected="true" /><select idref="V-248672" selected="true" /><select idref="V-248673" selected="true" /><select idref="V-248678" selected="true" /><select idref="V-248679" selected="true" /><select idref="V-248680" selected="true" /><select idref="V-248682" selected="true" /><select idref="V-248683" selected="true" /><select idref="V-248684" selected="true" /><select idref="V-248685" selected="true" /><select idref="V-248686" selected="true" /><select idref="V-248687" selected="true" /><select idref="V-248688" selected="true" /><select idref="V-248689" selected="true" /><select idref="V-248690" selected="true" /><select idref="V-248691" selected="true" /><select idref="V-248692" selected="true" /><select idref="V-248693" selected="true" /><select idref="V-248694" selected="true" /><select idref="V-248695" selected="true" /><select idref="V-248696" selected="true" /><select idref="V-248697" selected="true" /><select idref="V-248699" selected="true" /><select idref="V-248700" selected="true" /><select idref="V-248701" selected="true" /><select idref="V-248702" selected="true" /><select idref="V-248703" selected="true" /><select idref="V-248704" selected="true" /><select idref="V-248705" selected="true" /><select idref="V-248706" selected="true" /><select idref="V-248707" selected="true" /><select idref="V-248708" selected="true" /><select idref="V-248709" selected="true" /><select idref="V-248710" selected="true" /><select idref="V-248711" selected="true" /><select idref="V-248712" selected="true" /><select idref="V-248713" selected="true" /><select idref="V-248714" selected="true" /><select idref="V-248715" selected="true" /><select idref="V-248716" selected="true" /><select idref="V-248717" selected="true" /><select idref="V-248718" selected="true" /><select idref="V-248719" selected="true" /><select idref="V-248720" selected="true" /><select idref="V-248721" selected="true" /><select idref="V-248722" selected="true" /><select idref="V-248723" selected="true" /><select idref="V-248724" selected="true" /><select idref="V-248725" selected="true" /><select idref="V-248726" selected="true" /><select idref="V-248728" selected="true" /><select idref="V-248729" selected="true" /><select idref="V-248730" selected="true" /><select idref="V-248731" selected="true" /><select idref="V-248732" selected="true" /><select idref="V-248733" selected="true" /><select idref="V-248734" selected="true" /><select idref="V-248735" selected="true" /><select idref="V-248736" selected="true" /><select idref="V-248737" selected="true" /><select idref="V-248738" selected="true" /><select idref="V-248739" selected="true" /><select idref="V-248740" selected="true" /><select idref="V-248741" selected="true" /><select idref="V-248742" selected="true" /><select idref="V-248743" selected="true" /><select idref="V-248744" selected="true" /><select idref="V-248745" selected="true" /><select idref="V-248746" selected="true" /><select idref="V-248747" selected="true" /><select idref="V-248748" selected="true" /><select idref="V-248753" selected="true" /><select idref="V-248754" selected="true" /><select idref="V-248756" selected="true" /><select idref="V-248757" selected="true" /><select idref="V-248758" selected="true" /><select idref="V-248759" selected="true" /><select idref="V-248760" selected="true" /><select idref="V-248761" selected="true" /><select idref="V-248762" selected="true" /><select idref="V-248763" selected="true" /><select idref="V-248764" selected="true" /><select idref="V-248765" selected="true" /><select idref="V-248766" selected="true" /><select idref="V-248767" selected="true" /><select idref="V-248768" selected="true" /><select idref="V-248769" selected="true" /><select idref="V-248770" selected="true" /><select idref="V-248771" selected="true" /><select idref="V-248772" selected="true" /><select idref="V-248773" selected="true" /><select idref="V-248774" selected="true" /><select idref="V-248779" selected="true" /><select idref="V-248781" selected="true" /><select idref="V-248782" selected="true" /><select idref="V-248783" selected="true" /><select idref="V-248784" selected="true" /><select idref="V-248790" selected="true" /><select idref="V-248791" selected="true" /><select idref="V-248797" selected="true" /><select idref="V-248798" selected="true" /><select idref="V-248799" selected="true" /><select idref="V-248800" selected="true" /><select idref="V-248801" selected="true" /><select idref="V-248802" selected="true" /><select idref="V-248803" selected="true" /><select idref="V-248804" selected="true" /><select idref="V-248805" selected="true" /><select idref="V-248806" selected="true" /><select idref="V-248807" selected="true" /><select idref="V-248808" selected="true" /><select idref="V-248809" selected="true" /><select idref="V-248810" selected="true" /><select idref="V-248811" selected="true" /><select idref="V-248812" selected="true" /><select idref="V-248813" selected="true" /><select idref="V-248814" selected="true" /><select idref="V-248815" selected="true" /><select idref="V-248816" selected="true" /><select idref="V-248817" selected="true" /><select idref="V-248818" selected="true" /><select idref="V-248819" selected="true" /><select idref="V-248820" selected="true" /><select idref="V-248821" selected="true" /><select idref="V-248822" selected="true" /><select idref="V-248823" selected="true" /><select idref="V-248824" selected="true" /><select idref="V-248825" selected="true" /><select idref="V-248826" selected="true" /><select idref="V-248827" selected="true" /><select idref="V-248828" selected="true" /><select idref="V-248829" selected="true" /><select idref="V-248830" selected="true" /><select idref="V-248831" selected="true" /><select idref="V-248832" selected="true" /><select idref="V-248833" selected="true" /><select idref="V-248834" selected="true" /><select idref="V-248835" selected="true" /><select idref="V-248836" selected="true" /><select idref="V-248837" selected="true" /><select idref="V-248839" selected="true" /><select idref="V-248840" selected="true" /><select idref="V-248841" selected="true" /><select idref="V-248842" selected="true" /><select idref="V-248843" selected="true" /><select idref="V-248844" selected="true" /><select idref="V-248845" selected="true" /><select idref="V-248846" selected="true" /><select idref="V-248847" selected="true" /><select idref="V-248848" selected="true" /><select idref="V-248849" selected="true" /><select idref="V-248850" selected="true" /><select idref="V-248851" selected="true" /><select idref="V-248852" selected="true" /><select idref="V-248853" selected="true" /><select idref="V-248854" selected="true" /><select idref="V-248855" selected="true" /><select idref="V-248856" selected="true" /><select idref="V-248857" selected="true" /><select idref="V-248858" selected="true" /><select idref="V-248859" selected="true" /><select idref="V-248860" selected="true" /><select idref="V-248861" selected="true" /><select idref="V-248862" selected="true" /><select idref="V-248863" selected="true" /><select idref="V-248864" selected="true" /><select idref="V-248865" selected="true" /><select idref="V-248866" selected="true" /><select idref="V-248867" selected="true" /><select idref="V-248868" selected="true" /><select idref="V-248869" selected="true" /><select idref="V-248870" selected="true" /><select idref="V-248871" selected="true" /><select idref="V-248872" selected="true" /><select idref="V-248873" selected="true" /><select idref="V-248874" selected="true" /><select idref="V-248875" selected="true" /><select idref="V-248876" selected="true" /><select idref="V-248877" selected="true" /><select idref="V-248878" selected="true" /><select idref="V-248879" selected="true" /><select idref="V-248880" selected="true" /><select idref="V-248881" selected="true" /><select idref="V-248882" selected="true" /><select idref="V-248883" selected="true" /><select idref="V-248884" selected="true" /><select idref="V-248885" selected="true" /><select idref="V-248886" selected="true" /><select idref="V-248887" selected="true" /><select idref="V-248888" selected="true" /><select idref="V-248889" selected="true" /><select idref="V-248890" selected="true" /><select idref="V-248891" selected="true" /><select idref="V-248892" selected="true" /><select idref="V-248893" selected="true" /><select idref="V-248894" selected="true" /><select idref="V-248895" selected="true" /><select idref="V-248896" selected="true" /><select idref="V-248897" selected="true" /><select idref="V-248898" selected="true" /><select idref="V-248899" selected="true" /><select idref="V-248900" selected="true" /><select idref="V-248901" selected="true" /><select idref="V-248902" selected="true" /><select idref="V-248903" selected="true" /><select idref="V-248904" selected="true" /><select idref="V-248905" selected="true" /><select idref="V-248906" selected="true" /><select idref="V-248907" selected="true" /><select idref="V-252650" selected="true" /><select idref="V-252651" selected="true" /><select idref="V-252652" selected="true" /><select idref="V-252653" selected="true" /><select idref="V-252654" selected="true" /><select idref="V-252655" selected="true" /><select idref="V-252656" selected="true" /><select idref="V-252657" selected="true" /><select idref="V-252658" selected="true" /><select idref="V-252659" selected="true" /><select idref="V-252660" selected="true" /><select idref="V-252662" selected="true" /><select idref="V-252663" selected="true" /><select idref="V-255898" selected="true" /><select idref="V-256978" selected="true" /><select idref="V-256979" selected="true" /><select idref="V-257259" selected="true" /><select idref="V-274876" selected="true" /></Profile><Profile id="MAC-3_Classified"><title>III - Administrative Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-248519" selected="true" /><select idref="V-248520" selected="true" /><select idref="V-248521" selected="true" /><select idref="V-248523" selected="true" /><select idref="V-248524" selected="true" /><select idref="V-248525" selected="true" /><select idref="V-248526" selected="true" /><select idref="V-248527" selected="true" /><select idref="V-248528" selected="true" /><select idref="V-248529" selected="true" /><select idref="V-248530" selected="true" /><select idref="V-248531" selected="true" /><select idref="V-248532" selected="true" /><select idref="V-248533" selected="true" /><select idref="V-248534" selected="true" /><select idref="V-248535" selected="true" /><select idref="V-248537" selected="true" /><select idref="V-248538" selected="true" /><select idref="V-248539" selected="true" /><select idref="V-248540" selected="true" /><select idref="V-248541" selected="true" /><select idref="V-248542" selected="true" /><select idref="V-248543" selected="true" /><select idref="V-248544" selected="true" /><select idref="V-248545" selected="true" /><select idref="V-248546" selected="true" /><select idref="V-248547" selected="true" /><select idref="V-248548" selected="true" /><select idref="V-248549" selected="true" /><select idref="V-248551" selected="true" /><select idref="V-248552" selected="true" /><select idref="V-248553" selected="true" /><select idref="V-248554" selected="true" /><select idref="V-248555" selected="true" /><select idref="V-248556" selected="true" /><select idref="V-248557" selected="true" /><select idref="V-248558" selected="true" /><select idref="V-248559" selected="true" /><select idref="V-248560" selected="true" /><select idref="V-248561" selected="true" /><select idref="V-248562" selected="true" /><select idref="V-248563" selected="true" /><select idref="V-248564" selected="true" /><select idref="V-248565" selected="true" /><select idref="V-248566" selected="true" /><select idref="V-248567" selected="true" /><select idref="V-248568" selected="true" /><select idref="V-248569" selected="true" /><select idref="V-248570" selected="true" /><select idref="V-248571" selected="true" /><select idref="V-248572" selected="true" /><select idref="V-248573" selected="true" /><select idref="V-248574" selected="true" /><select idref="V-248575" selected="true" /><select idref="V-248576" selected="true" /><select idref="V-248577" selected="true" /><select idref="V-248578" selected="true" /><select idref="V-248579" selected="true" /><select idref="V-248580" selected="true" /><select idref="V-248581" selected="true" /><select idref="V-248582" selected="true" /><select idref="V-248583" selected="true" /><select idref="V-248584" selected="true" /><select idref="V-248585" selected="true" /><select idref="V-248586" selected="true" /><select idref="V-248587" selected="true" /><select idref="V-248588" selected="true" /><select idref="V-248589" selected="true" /><select idref="V-248590" selected="true" /><select idref="V-248591" selected="true" /><select idref="V-248592" selected="true" /><select idref="V-248593" selected="true" /><select idref="V-248594" selected="true" /><select idref="V-248595" selected="true" /><select idref="V-248596" selected="true" /><select idref="V-248597" selected="true" /><select idref="V-248598" selected="true" /><select idref="V-248599" selected="true" /><select idref="V-248600" selected="true" /><select idref="V-248601" selected="true" /><select idref="V-248602" selected="true" /><select idref="V-248603" selected="true" /><select idref="V-248605" selected="true" /><select idref="V-248606" selected="true" /><select idref="V-248607" selected="true" /><select idref="V-248608" selected="true" /><select idref="V-248609" selected="true" /><select idref="V-248610" selected="true" /><select idref="V-248611" selected="true" /><select idref="V-248612" selected="true" /><select idref="V-248613" selected="true" /><select idref="V-248615" selected="true" /><select idref="V-248616" selected="true" /><select idref="V-248617" selected="true" /><select idref="V-248618" selected="true" /><select idref="V-248619" selected="true" /><select idref="V-248620" selected="true" /><select idref="V-248621" selected="true" /><select idref="V-248622" selected="true" /><select idref="V-248623" selected="true" /><select idref="V-248624" selected="true" /><select idref="V-248625" selected="true" /><select idref="V-248626" selected="true" /><select idref="V-248627" selected="true" /><select idref="V-248628" selected="true" /><select idref="V-248629" selected="true" /><select idref="V-248630" selected="true" /><select idref="V-248631" selected="true" /><select idref="V-248632" selected="true" /><select idref="V-248633" selected="true" /><select idref="V-248634" selected="true" /><select idref="V-248635" selected="true" /><select idref="V-248636" selected="true" /><select idref="V-248637" selected="true" /><select idref="V-248638" selected="true" /><select idref="V-248639" selected="true" /><select idref="V-248640" selected="true" /><select idref="V-248641" selected="true" /><select idref="V-248642" selected="true" /><select idref="V-248643" selected="true" /><select idref="V-248644" selected="true" /><select idref="V-248645" selected="true" /><select idref="V-248646" selected="true" /><select idref="V-248647" selected="true" /><select idref="V-248648" selected="true" /><select idref="V-248649" selected="true" /><select idref="V-248650" selected="true" /><select idref="V-248651" selected="true" /><select idref="V-248652" selected="true" /><select idref="V-248653" selected="true" /><select idref="V-248654" selected="true" /><select idref="V-248655" selected="true" /><select idref="V-248656" selected="true" /><select idref="V-248657" selected="true" /><select idref="V-248658" selected="true" /><select idref="V-248659" selected="true" /><select idref="V-248660" selected="true" /><select idref="V-248661" selected="true" /><select idref="V-248662" selected="true" /><select idref="V-248663" selected="true" /><select idref="V-248664" selected="true" /><select idref="V-248665" selected="true" /><select idref="V-248666" selected="true" /><select idref="V-248667" selected="true" /><select idref="V-248668" selected="true" /><select idref="V-248669" selected="true" /><select idref="V-248670" selected="true" /><select idref="V-248671" selected="true" /><select idref="V-248672" selected="true" /><select idref="V-248673" selected="true" /><select idref="V-248678" selected="true" /><select idref="V-248679" selected="true" /><select idref="V-248680" selected="true" /><select idref="V-248682" selected="true" /><select idref="V-248683" selected="true" /><select idref="V-248684" selected="true" /><select idref="V-248685" selected="true" /><select idref="V-248686" selected="true" /><select idref="V-248687" selected="true" /><select idref="V-248688" selected="true" /><select idref="V-248689" selected="true" /><select idref="V-248690" selected="true" /><select idref="V-248691" selected="true" /><select idref="V-248692" selected="true" /><select idref="V-248693" selected="true" /><select idref="V-248694" selected="true" /><select idref="V-248695" selected="true" /><select idref="V-248696" selected="true" /><select idref="V-248697" selected="true" /><select idref="V-248699" selected="true" /><select idref="V-248700" selected="true" /><select idref="V-248701" selected="true" /><select idref="V-248702" selected="true" /><select idref="V-248703" selected="true" /><select idref="V-248704" selected="true" /><select idref="V-248705" selected="true" /><select idref="V-248706" selected="true" /><select idref="V-248707" selected="true" /><select idref="V-248708" selected="true" /><select idref="V-248709" selected="true" /><select idref="V-248710" selected="true" /><select idref="V-248711" selected="true" /><select idref="V-248712" selected="true" /><select idref="V-248713" selected="true" /><select idref="V-248714" selected="true" /><select idref="V-248715" selected="true" /><select idref="V-248716" selected="true" /><select idref="V-248717" selected="true" /><select idref="V-248718" selected="true" /><select idref="V-248719" selected="true" /><select idref="V-248720" selected="true" /><select idref="V-248721" selected="true" /><select idref="V-248722" selected="true" /><select idref="V-248723" selected="true" /><select idref="V-248724" selected="true" /><select idref="V-248725" selected="true" /><select idref="V-248726" selected="true" /><select idref="V-248728" selected="true" /><select idref="V-248729" selected="true" /><select idref="V-248730" selected="true" /><select idref="V-248731" selected="true" /><select idref="V-248732" selected="true" /><select idref="V-248733" selected="true" /><select idref="V-248734" selected="true" /><select idref="V-248735" selected="true" /><select idref="V-248736" selected="true" /><select idref="V-248737" selected="true" /><select idref="V-248738" selected="true" /><select idref="V-248739" selected="true" /><select idref="V-248740" selected="true" /><select idref="V-248741" selected="true" /><select idref="V-248742" selected="true" /><select idref="V-248743" selected="true" /><select idref="V-248744" selected="true" /><select idref="V-248745" selected="true" /><select idref="V-248746" selected="true" /><select idref="V-248747" selected="true" /><select idref="V-248748" selected="true" /><select idref="V-248753" selected="true" /><select idref="V-248754" selected="true" /><select idref="V-248756" selected="true" /><select idref="V-248757" selected="true" /><select idref="V-248758" selected="true" /><select idref="V-248759" selected="true" /><select idref="V-248760" selected="true" /><select idref="V-248761" selected="true" /><select idref="V-248762" selected="true" /><select idref="V-248763" selected="true" /><select idref="V-248764" selected="true" /><select idref="V-248765" selected="true" /><select idref="V-248766" selected="true" /><select idref="V-248767" selected="true" /><select idref="V-248768" selected="true" /><select idref="V-248769" selected="true" /><select idref="V-248770" selected="true" /><select idref="V-248771" selected="true" /><select idref="V-248772" selected="true" /><select idref="V-248773" selected="true" /><select idref="V-248774" selected="true" /><select idref="V-248779" selected="true" /><select idref="V-248781" selected="true" /><select idref="V-248782" selected="true" /><select idref="V-248783" selected="true" /><select idref="V-248784" selected="true" /><select idref="V-248790" selected="true" /><select idref="V-248791" selected="true" /><select idref="V-248797" selected="true" /><select idref="V-248798" selected="true" /><select idref="V-248799" selected="true" /><select idref="V-248800" selected="true" /><select idref="V-248801" selected="true" /><select idref="V-248802" selected="true" /><select idref="V-248803" selected="true" /><select idref="V-248804" selected="true" /><select idref="V-248805" selected="true" /><select idref="V-248806" selected="true" /><select idref="V-248807" selected="true" /><select idref="V-248808" selected="true" /><select idref="V-248809" selected="true" /><select idref="V-248810" selected="true" /><select idref="V-248811" selected="true" /><select idref="V-248812" selected="true" /><select idref="V-248813" selected="true" /><select idref="V-248814" selected="true" /><select idref="V-248815" selected="true" /><select idref="V-248816" selected="true" /><select idref="V-248817" selected="true" /><select idref="V-248818" selected="true" /><select idref="V-248819" selected="true" /><select idref="V-248820" selected="true" /><select idref="V-248821" selected="true" /><select idref="V-248822" selected="true" /><select idref="V-248823" selected="true" /><select idref="V-248824" selected="true" /><select idref="V-248825" selected="true" /><select idref="V-248826" selected="true" /><select idref="V-248827" selected="true" /><select idref="V-248828" selected="true" /><select idref="V-248829" selected="true" /><select idref="V-248830" selected="true" /><select idref="V-248831" selected="true" /><select idref="V-248832" selected="true" /><select idref="V-248833" selected="true" /><select idref="V-248834" selected="true" /><select idref="V-248835" selected="true" /><select idref="V-248836" selected="true" /><select idref="V-248837" selected="true" /><select idref="V-248839" selected="true" /><select idref="V-248840" selected="true" /><select idref="V-248841" selected="true" /><select idref="V-248842" selected="true" /><select idref="V-248843" selected="true" /><select idref="V-248844" selected="true" /><select idref="V-248845" selected="true" /><select idref="V-248846" selected="true" /><select idref="V-248847" selected="true" /><select idref="V-248848" selected="true" /><select idref="V-248849" selected="true" /><select idref="V-248850" selected="true" /><select idref="V-248851" selected="true" /><select idref="V-248852" selected="true" /><select idref="V-248853" selected="true" /><select idref="V-248854" selected="true" /><select idref="V-248855" selected="true" /><select idref="V-248856" selected="true" /><select idref="V-248857" selected="true" /><select idref="V-248858" selected="true" /><select idref="V-248859" selected="true" /><select idref="V-248860" selected="true" /><select idref="V-248861" selected="true" /><select idref="V-248862" selected="true" /><select idref="V-248863" selected="true" /><select idref="V-248864" selected="true" /><select idref="V-248865" selected="true" /><select idref="V-248866" selected="true" /><select idref="V-248867" selected="true" /><select idref="V-248868" selected="true" /><select idref="V-248869" selected="true" /><select idref="V-248870" selected="true" /><select idref="V-248871" selected="true" /><select idref="V-248872" selected="true" /><select idref="V-248873" selected="true" /><select idref="V-248874" selected="true" /><select idref="V-248875" selected="true" /><select idref="V-248876" selected="true" /><select idref="V-248877" selected="true" /><select idref="V-248878" selected="true" /><select idref="V-248879" selected="true" /><select idref="V-248880" selected="true" /><select idref="V-248881" selected="true" /><select idref="V-248882" selected="true" /><select idref="V-248883" selected="true" /><select idref="V-248884" selected="true" /><select idref="V-248885" selected="true" /><select idref="V-248886" selected="true" /><select idref="V-248887" selected="true" /><select idref="V-248888" selected="true" /><select idref="V-248889" selected="true" /><select idref="V-248890" selected="true" /><select idref="V-248891" selected="true" /><select idref="V-248892" selected="true" /><select idref="V-248893" selected="true" /><select idref="V-248894" selected="true" /><select idref="V-248895" selected="true" /><select idref="V-248896" selected="true" /><select idref="V-248897" selected="true" /><select idref="V-248898" selected="true" /><select idref="V-248899" selected="true" /><select idref="V-248900" selected="true" /><select idref="V-248901" selected="true" /><select idref="V-248902" selected="true" /><select idref="V-248903" selected="true" /><select idref="V-248904" selected="true" /><select idref="V-248905" selected="true" /><select idref="V-248906" selected="true" /><select idref="V-248907" selected="true" /><select idref="V-252650" selected="true" /><select idref="V-252651" selected="true" /><select idref="V-252652" selected="true" /><select idref="V-252653" selected="true" /><select idref="V-252654" selected="true" /><select idref="V-252655" selected="true" /><select idref="V-252656" selected="true" /><select idref="V-252657" selected="true" /><select idref="V-252658" selected="true" /><select idref="V-252659" selected="true" /><select idref="V-252660" selected="true" /><select idref="V-252662" selected="true" /><select idref="V-252663" selected="true" /><select idref="V-255898" selected="true" /><select idref="V-256978" selected="true" /><select idref="V-256979" selected="true" /><select idref="V-257259" selected="true" /><select idref="V-274876" selected="true" /></Profile><Profile id="MAC-3_Public"><title>III - Administrative Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-248519" selected="true" /><select idref="V-248520" selected="true" /><select idref="V-248521" selected="true" /><select idref="V-248523" selected="true" /><select idref="V-248524" selected="true" /><select idref="V-248525" selected="true" /><select idref="V-248526" selected="true" /><select idref="V-248527" selected="true" /><select idref="V-248528" selected="true" /><select idref="V-248529" selected="true" /><select idref="V-248530" selected="true" /><select idref="V-248531" selected="true" /><select idref="V-248532" selected="true" /><select idref="V-248533" selected="true" /><select idref="V-248534" selected="true" /><select idref="V-248535" selected="true" /><select idref="V-248537" selected="true" /><select idref="V-248538" selected="true" /><select idref="V-248539" selected="true" /><select idref="V-248540" selected="true" /><select idref="V-248541" selected="true" /><select idref="V-248542" selected="true" /><select idref="V-248543" selected="true" /><select idref="V-248544" selected="true" /><select idref="V-248545" selected="true" /><select idref="V-248546" selected="true" /><select idref="V-248547" selected="true" /><select idref="V-248548" selected="true" /><select idref="V-248549" selected="true" /><select idref="V-248551" selected="true" /><select idref="V-248552" selected="true" /><select idref="V-248553" selected="true" /><select idref="V-248554" selected="true" /><select idref="V-248555" selected="true" /><select idref="V-248556" selected="true" /><select idref="V-248557" selected="true" /><select idref="V-248558" selected="true" /><select idref="V-248559" selected="true" /><select idref="V-248560" selected="true" /><select idref="V-248561" selected="true" /><select idref="V-248562" selected="true" /><select idref="V-248563" selected="true" /><select idref="V-248564" selected="true" /><select idref="V-248565" selected="true" /><select idref="V-248566" selected="true" /><select idref="V-248567" selected="true" /><select idref="V-248568" selected="true" /><select idref="V-248569" selected="true" /><select idref="V-248570" selected="true" /><select idref="V-248571" selected="true" /><select idref="V-248572" selected="true" /><select idref="V-248573" selected="true" /><select idref="V-248574" selected="true" /><select idref="V-248575" selected="true" /><select idref="V-248576" selected="true" /><select idref="V-248577" selected="true" /><select idref="V-248578" selected="true" /><select idref="V-248579" selected="true" /><select idref="V-248580" selected="true" /><select idref="V-248581" selected="true" /><select idref="V-248582" selected="true" /><select idref="V-248583" selected="true" /><select idref="V-248584" selected="true" /><select idref="V-248585" selected="true" /><select idref="V-248586" selected="true" /><select idref="V-248587" selected="true" /><select idref="V-248588" selected="true" /><select idref="V-248589" selected="true" /><select idref="V-248590" selected="true" /><select idref="V-248591" selected="true" /><select idref="V-248592" selected="true" /><select idref="V-248593" selected="true" /><select idref="V-248594" selected="true" /><select idref="V-248595" selected="true" /><select idref="V-248596" selected="true" /><select idref="V-248597" selected="true" /><select idref="V-248598" selected="true" /><select idref="V-248599" selected="true" /><select idref="V-248600" selected="true" /><select idref="V-248601" selected="true" /><select idref="V-248602" selected="true" /><select idref="V-248603" selected="true" /><select idref="V-248605" selected="true" /><select idref="V-248606" selected="true" /><select idref="V-248607" selected="true" /><select idref="V-248608" selected="true" /><select idref="V-248609" selected="true" /><select idref="V-248610" selected="true" /><select idref="V-248611" selected="true" /><select idref="V-248612" selected="true" /><select idref="V-248613" selected="true" /><select idref="V-248615" selected="true" /><select idref="V-248616" selected="true" /><select idref="V-248617" selected="true" /><select idref="V-248618" selected="true" /><select idref="V-248619" selected="true" /><select idref="V-248620" selected="true" /><select idref="V-248621" selected="true" /><select idref="V-248622" selected="true" /><select idref="V-248623" selected="true" /><select idref="V-248624" selected="true" /><select idref="V-248625" selected="true" /><select idref="V-248626" selected="true" /><select idref="V-248627" selected="true" /><select idref="V-248628" selected="true" /><select idref="V-248629" selected="true" /><select idref="V-248630" selected="true" /><select idref="V-248631" selected="true" /><select idref="V-248632" selected="true" /><select idref="V-248633" selected="true" /><select idref="V-248634" selected="true" /><select idref="V-248635" selected="true" /><select idref="V-248636" selected="true" /><select idref="V-248637" selected="true" /><select idref="V-248638" selected="true" /><select idref="V-248639" selected="true" /><select idref="V-248640" selected="true" /><select idref="V-248641" selected="true" /><select idref="V-248642" selected="true" /><select idref="V-248643" selected="true" /><select idref="V-248644" selected="true" /><select idref="V-248645" selected="true" /><select idref="V-248646" selected="true" /><select idref="V-248647" selected="true" /><select idref="V-248648" selected="true" /><select idref="V-248649" selected="true" /><select idref="V-248650" selected="true" /><select idref="V-248651" selected="true" /><select idref="V-248652" selected="true" /><select idref="V-248653" selected="true" /><select idref="V-248654" selected="true" /><select idref="V-248655" selected="true" /><select idref="V-248656" selected="true" /><select idref="V-248657" selected="true" /><select idref="V-248658" selected="true" /><select idref="V-248659" selected="true" /><select idref="V-248660" selected="true" /><select idref="V-248661" selected="true" /><select idref="V-248662" selected="true" /><select idref="V-248663" selected="true" /><select idref="V-248664" selected="true" /><select idref="V-248665" selected="true" /><select idref="V-248666" selected="true" /><select idref="V-248667" selected="true" /><select idref="V-248668" selected="true" /><select idref="V-248669" selected="true" /><select idref="V-248670" selected="true" /><select idref="V-248671" selected="true" /><select idref="V-248672" selected="true" /><select idref="V-248673" selected="true" /><select idref="V-248678" selected="true" /><select idref="V-248679" selected="true" /><select idref="V-248680" selected="true" /><select idref="V-248682" selected="true" /><select idref="V-248683" selected="true" /><select idref="V-248684" selected="true" /><select idref="V-248685" selected="true" /><select idref="V-248686" selected="true" /><select idref="V-248687" selected="true" /><select idref="V-248688" selected="true" /><select idref="V-248689" selected="true" /><select idref="V-248690" selected="true" /><select idref="V-248691" selected="true" /><select idref="V-248692" selected="true" /><select idref="V-248693" selected="true" /><select idref="V-248694" selected="true" /><select idref="V-248695" selected="true" /><select idref="V-248696" selected="true" /><select idref="V-248697" selected="true" /><select idref="V-248699" selected="true" /><select idref="V-248700" selected="true" /><select idref="V-248701" selected="true" /><select idref="V-248702" selected="true" /><select idref="V-248703" selected="true" /><select idref="V-248704" selected="true" /><select idref="V-248705" selected="true" /><select idref="V-248706" selected="true" /><select idref="V-248707" selected="true" /><select idref="V-248708" selected="true" /><select idref="V-248709" selected="true" /><select idref="V-248710" selected="true" /><select idref="V-248711" selected="true" /><select idref="V-248712" selected="true" /><select idref="V-248713" selected="true" /><select idref="V-248714" selected="true" /><select idref="V-248715" selected="true" /><select idref="V-248716" selected="true" /><select idref="V-248717" selected="true" /><select idref="V-248718" selected="true" /><select idref="V-248719" selected="true" /><select idref="V-248720" selected="true" /><select idref="V-248721" selected="true" /><select idref="V-248722" selected="true" /><select idref="V-248723" selected="true" /><select idref="V-248724" selected="true" /><select idref="V-248725" selected="true" /><select idref="V-248726" selected="true" /><select idref="V-248728" selected="true" /><select idref="V-248729" selected="true" /><select idref="V-248730" selected="true" /><select idref="V-248731" selected="true" /><select idref="V-248732" selected="true" /><select idref="V-248733" selected="true" /><select idref="V-248734" selected="true" /><select idref="V-248735" selected="true" /><select idref="V-248736" selected="true" /><select idref="V-248737" selected="true" /><select idref="V-248738" selected="true" /><select idref="V-248739" selected="true" /><select idref="V-248740" selected="true" /><select idref="V-248741" selected="true" /><select idref="V-248742" selected="true" /><select idref="V-248743" selected="true" /><select idref="V-248744" selected="true" /><select idref="V-248745" selected="true" /><select idref="V-248746" selected="true" /><select idref="V-248747" selected="true" /><select idref="V-248748" selected="true" /><select idref="V-248753" selected="true" /><select idref="V-248754" selected="true" /><select idref="V-248756" selected="true" /><select idref="V-248757" selected="true" /><select idref="V-248758" selected="true" /><select idref="V-248759" selected="true" /><select idref="V-248760" selected="true" /><select idref="V-248761" selected="true" /><select idref="V-248762" selected="true" /><select idref="V-248763" selected="true" /><select idref="V-248764" selected="true" /><select idref="V-248765" selected="true" /><select idref="V-248766" selected="true" /><select idref="V-248767" selected="true" /><select idref="V-248768" selected="true" /><select idref="V-248769" selected="true" /><select idref="V-248770" selected="true" /><select idref="V-248771" selected="true" /><select idref="V-248772" selected="true" /><select idref="V-248773" selected="true" /><select idref="V-248774" selected="true" /><select idref="V-248779" selected="true" /><select idref="V-248781" selected="true" /><select idref="V-248782" selected="true" /><select idref="V-248783" selected="true" /><select idref="V-248784" selected="true" /><select idref="V-248790" selected="true" /><select idref="V-248791" selected="true" /><select idref="V-248797" selected="true" /><select idref="V-248798" selected="true" /><select idref="V-248799" selected="true" /><select idref="V-248800" selected="true" /><select idref="V-248801" selected="true" /><select idref="V-248802" selected="true" /><select idref="V-248803" selected="true" /><select idref="V-248804" selected="true" /><select idref="V-248805" selected="true" /><select idref="V-248806" selected="true" /><select idref="V-248807" selected="true" /><select idref="V-248808" selected="true" /><select idref="V-248809" selected="true" /><select idref="V-248810" selected="true" /><select idref="V-248811" selected="true" /><select idref="V-248812" selected="true" /><select idref="V-248813" selected="true" /><select idref="V-248814" selected="true" /><select idref="V-248815" selected="true" /><select idref="V-248816" selected="true" /><select idref="V-248817" selected="true" /><select idref="V-248818" selected="true" /><select idref="V-248819" selected="true" /><select idref="V-248820" selected="true" /><select idref="V-248821" selected="true" /><select idref="V-248822" selected="true" /><select idref="V-248823" selected="true" /><select idref="V-248824" selected="true" /><select idref="V-248825" selected="true" /><select idref="V-248826" selected="true" /><select idref="V-248827" selected="true" /><select idref="V-248828" selected="true" /><select idref="V-248829" selected="true" /><select idref="V-248830" selected="true" /><select idref="V-248831" selected="true" /><select idref="V-248832" selected="true" /><select idref="V-248833" selected="true" /><select idref="V-248834" selected="true" /><select idref="V-248835" selected="true" /><select idref="V-248836" selected="true" /><select idref="V-248837" selected="true" /><select idref="V-248839" selected="true" /><select idref="V-248840" selected="true" /><select idref="V-248841" selected="true" /><select idref="V-248842" selected="true" /><select idref="V-248843" selected="true" /><select idref="V-248844" selected="true" /><select idref="V-248845" selected="true" /><select idref="V-248846" selected="true" /><select idref="V-248847" selected="true" /><select idref="V-248848" selected="true" /><select idref="V-248849" selected="true" /><select idref="V-248850" selected="true" /><select idref="V-248851" selected="true" /><select idref="V-248852" selected="true" /><select idref="V-248853" selected="true" /><select idref="V-248854" selected="true" /><select idref="V-248855" selected="true" /><select idref="V-248856" selected="true" /><select idref="V-248857" selected="true" /><select idref="V-248858" selected="true" /><select idref="V-248859" selected="true" /><select idref="V-248860" selected="true" /><select idref="V-248861" selected="true" /><select idref="V-248862" selected="true" /><select idref="V-248863" selected="true" /><select idref="V-248864" selected="true" /><select idref="V-248865" selected="true" /><select idref="V-248866" selected="true" /><select idref="V-248867" selected="true" /><select idref="V-248868" selected="true" /><select idref="V-248869" selected="true" /><select idref="V-248870" selected="true" /><select idref="V-248871" selected="true" /><select idref="V-248872" selected="true" /><select idref="V-248873" selected="true" /><select idref="V-248874" selected="true" /><select idref="V-248875" selected="true" /><select idref="V-248876" selected="true" /><select idref="V-248877" selected="true" /><select idref="V-248878" selected="true" /><select idref="V-248879" selected="true" /><select idref="V-248880" selected="true" /><select idref="V-248881" selected="true" /><select idref="V-248882" selected="true" /><select idref="V-248883" selected="true" /><select idref="V-248884" selected="true" /><select idref="V-248885" selected="true" /><select idref="V-248886" selected="true" /><select idref="V-248887" selected="true" /><select idref="V-248888" selected="true" /><select idref="V-248889" selected="true" /><select idref="V-248890" selected="true" /><select idref="V-248891" selected="true" /><select idref="V-248892" selected="true" /><select idref="V-248893" selected="true" /><select idref="V-248894" selected="true" /><select idref="V-248895" selected="true" /><select idref="V-248896" selected="true" /><select idref="V-248897" selected="true" /><select idref="V-248898" selected="true" /><select idref="V-248899" selected="true" /><select idref="V-248900" selected="true" /><select idref="V-248901" selected="true" /><select idref="V-248902" selected="true" /><select idref="V-248903" selected="true" /><select idref="V-248904" selected="true" /><select idref="V-248905" selected="true" /><select idref="V-248906" selected="true" /><select idref="V-248907" selected="true" /><select idref="V-252650" selected="true" /><select idref="V-252651" selected="true" /><select idref="V-252652" selected="true" /><select idref="V-252653" selected="true" /><select idref="V-252654" selected="true" /><select idref="V-252655" selected="true" /><select idref="V-252656" selected="true" /><select idref="V-252657" selected="true" /><select idref="V-252658" selected="true" /><select idref="V-252659" selected="true" /><select idref="V-252660" selected="true" /><select idref="V-252662" selected="true" /><select idref="V-252663" selected="true" /><select idref="V-255898" selected="true" /><select idref="V-256978" selected="true" /><select idref="V-256979" selected="true" /><select idref="V-257259" selected="true" /><select idref="V-274876" selected="true" /></Profile><Profile id="MAC-3_Sensitive"><title>III - Administrative Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-248519" selected="true" /><select idref="V-248520" selected="true" /><select idref="V-248521" selected="true" /><select idref="V-248523" selected="true" /><select idref="V-248524" selected="true" /><select idref="V-248525" selected="true" /><select idref="V-248526" selected="true" /><select idref="V-248527" selected="true" /><select idref="V-248528" selected="true" /><select idref="V-248529" selected="true" /><select idref="V-248530" selected="true" /><select idref="V-248531" selected="true" /><select idref="V-248532" selected="true" /><select idref="V-248533" selected="true" /><select idref="V-248534" selected="true" /><select idref="V-248535" selected="true" /><select idref="V-248537" selected="true" /><select idref="V-248538" selected="true" /><select idref="V-248539" selected="true" /><select idref="V-248540" selected="true" /><select idref="V-248541" selected="true" /><select idref="V-248542" selected="true" /><select idref="V-248543" selected="true" /><select idref="V-248544" selected="true" /><select idref="V-248545" selected="true" /><select idref="V-248546" selected="true" /><select idref="V-248547" selected="true" /><select idref="V-248548" selected="true" /><select idref="V-248549" selected="true" /><select idref="V-248551" selected="true" /><select idref="V-248552" selected="true" /><select idref="V-248553" selected="true" /><select idref="V-248554" selected="true" /><select idref="V-248555" selected="true" /><select idref="V-248556" selected="true" /><select idref="V-248557" selected="true" /><select idref="V-248558" selected="true" /><select idref="V-248559" selected="true" /><select idref="V-248560" selected="true" /><select idref="V-248561" selected="true" /><select idref="V-248562" selected="true" /><select idref="V-248563" selected="true" /><select idref="V-248564" selected="true" /><select idref="V-248565" selected="true" /><select idref="V-248566" selected="true" /><select idref="V-248567" selected="true" /><select idref="V-248568" selected="true" /><select idref="V-248569" selected="true" /><select idref="V-248570" selected="true" /><select idref="V-248571" selected="true" /><select idref="V-248572" selected="true" /><select idref="V-248573" selected="true" /><select idref="V-248574" selected="true" /><select idref="V-248575" selected="true" /><select idref="V-248576" selected="true" /><select idref="V-248577" selected="true" /><select idref="V-248578" selected="true" /><select idref="V-248579" selected="true" /><select idref="V-248580" selected="true" /><select idref="V-248581" selected="true" /><select idref="V-248582" selected="true" /><select idref="V-248583" selected="true" /><select idref="V-248584" selected="true" /><select idref="V-248585" selected="true" /><select idref="V-248586" selected="true" /><select idref="V-248587" selected="true" /><select idref="V-248588" selected="true" /><select idref="V-248589" selected="true" /><select idref="V-248590" selected="true" /><select idref="V-248591" selected="true" /><select idref="V-248592" selected="true" /><select idref="V-248593" selected="true" /><select idref="V-248594" selected="true" /><select idref="V-248595" selected="true" /><select idref="V-248596" selected="true" /><select idref="V-248597" selected="true" /><select idref="V-248598" selected="true" /><select idref="V-248599" selected="true" /><select idref="V-248600" selected="true" /><select idref="V-248601" selected="true" /><select idref="V-248602" selected="true" /><select idref="V-248603" selected="true" /><select idref="V-248605" selected="true" /><select idref="V-248606" selected="true" /><select idref="V-248607" selected="true" /><select idref="V-248608" selected="true" /><select idref="V-248609" selected="true" /><select idref="V-248610" selected="true" /><select idref="V-248611" selected="true" /><select idref="V-248612" selected="true" /><select idref="V-248613" selected="true" /><select idref="V-248615" selected="true" /><select idref="V-248616" selected="true" /><select idref="V-248617" selected="true" /><select idref="V-248618" selected="true" /><select idref="V-248619" selected="true" /><select idref="V-248620" selected="true" /><select idref="V-248621" selected="true" /><select idref="V-248622" selected="true" /><select idref="V-248623" selected="true" /><select idref="V-248624" selected="true" /><select idref="V-248625" selected="true" /><select idref="V-248626" selected="true" /><select idref="V-248627" selected="true" /><select idref="V-248628" selected="true" /><select idref="V-248629" selected="true" /><select idref="V-248630" selected="true" /><select idref="V-248631" selected="true" /><select idref="V-248632" selected="true" /><select idref="V-248633" selected="true" /><select idref="V-248634" selected="true" /><select idref="V-248635" selected="true" /><select idref="V-248636" selected="true" /><select idref="V-248637" selected="true" /><select idref="V-248638" selected="true" /><select idref="V-248639" selected="true" /><select idref="V-248640" selected="true" /><select idref="V-248641" selected="true" /><select idref="V-248642" selected="true" /><select idref="V-248643" selected="true" /><select idref="V-248644" selected="true" /><select idref="V-248645" selected="true" /><select idref="V-248646" selected="true" /><select idref="V-248647" selected="true" /><select idref="V-248648" selected="true" /><select idref="V-248649" selected="true" /><select idref="V-248650" selected="true" /><select idref="V-248651" selected="true" /><select idref="V-248652" selected="true" /><select idref="V-248653" selected="true" /><select idref="V-248654" selected="true" /><select idref="V-248655" selected="true" /><select idref="V-248656" selected="true" /><select idref="V-248657" selected="true" /><select idref="V-248658" selected="true" /><select idref="V-248659" selected="true" /><select idref="V-248660" selected="true" /><select idref="V-248661" selected="true" /><select idref="V-248662" selected="true" /><select idref="V-248663" selected="true" /><select idref="V-248664" selected="true" /><select idref="V-248665" selected="true" /><select idref="V-248666" selected="true" /><select idref="V-248667" selected="true" /><select idref="V-248668" selected="true" /><select idref="V-248669" selected="true" /><select idref="V-248670" selected="true" /><select idref="V-248671" selected="true" /><select idref="V-248672" selected="true" /><select idref="V-248673" selected="true" /><select idref="V-248678" selected="true" /><select idref="V-248679" selected="true" /><select idref="V-248680" selected="true" /><select idref="V-248682" selected="true" /><select idref="V-248683" selected="true" /><select idref="V-248684" selected="true" /><select idref="V-248685" selected="true" /><select idref="V-248686" selected="true" /><select idref="V-248687" selected="true" /><select idref="V-248688" selected="true" /><select idref="V-248689" selected="true" /><select idref="V-248690" selected="true" /><select idref="V-248691" selected="true" /><select idref="V-248692" selected="true" /><select idref="V-248693" selected="true" /><select idref="V-248694" selected="true" /><select idref="V-248695" selected="true" /><select idref="V-248696" selected="true" /><select idref="V-248697" selected="true" /><select idref="V-248699" selected="true" /><select idref="V-248700" selected="true" /><select idref="V-248701" selected="true" /><select idref="V-248702" selected="true" /><select idref="V-248703" selected="true" /><select idref="V-248704" selected="true" /><select idref="V-248705" selected="true" /><select idref="V-248706" selected="true" /><select idref="V-248707" selected="true" /><select idref="V-248708" selected="true" /><select idref="V-248709" selected="true" /><select idref="V-248710" selected="true" /><select idref="V-248711" selected="true" /><select idref="V-248712" selected="true" /><select idref="V-248713" selected="true" /><select idref="V-248714" selected="true" /><select idref="V-248715" selected="true" /><select idref="V-248716" selected="true" /><select idref="V-248717" selected="true" /><select idref="V-248718" selected="true" /><select idref="V-248719" selected="true" /><select idref="V-248720" selected="true" /><select idref="V-248721" selected="true" /><select idref="V-248722" selected="true" /><select idref="V-248723" selected="true" /><select idref="V-248724" selected="true" /><select idref="V-248725" selected="true" /><select idref="V-248726" selected="true" /><select idref="V-248728" selected="true" /><select idref="V-248729" selected="true" /><select idref="V-248730" selected="true" /><select idref="V-248731" selected="true" /><select idref="V-248732" selected="true" /><select idref="V-248733" selected="true" /><select idref="V-248734" selected="true" /><select idref="V-248735" selected="true" /><select idref="V-248736" selected="true" /><select idref="V-248737" selected="true" /><select idref="V-248738" selected="true" /><select idref="V-248739" selected="true" /><select idref="V-248740" selected="true" /><select idref="V-248741" selected="true" /><select idref="V-248742" selected="true" /><select idref="V-248743" selected="true" /><select idref="V-248744" selected="true" /><select idref="V-248745" selected="true" /><select idref="V-248746" selected="true" /><select idref="V-248747" selected="true" /><select idref="V-248748" selected="true" /><select idref="V-248753" selected="true" /><select idref="V-248754" selected="true" /><select idref="V-248756" selected="true" /><select idref="V-248757" selected="true" /><select idref="V-248758" selected="true" /><select idref="V-248759" selected="true" /><select idref="V-248760" selected="true" /><select idref="V-248761" selected="true" /><select idref="V-248762" selected="true" /><select idref="V-248763" selected="true" /><select idref="V-248764" selected="true" /><select idref="V-248765" selected="true" /><select idref="V-248766" selected="true" /><select idref="V-248767" selected="true" /><select idref="V-248768" selected="true" /><select idref="V-248769" selected="true" /><select idref="V-248770" selected="true" /><select idref="V-248771" selected="true" /><select idref="V-248772" selected="true" /><select idref="V-248773" selected="true" /><select idref="V-248774" selected="true" /><select idref="V-248779" selected="true" /><select idref="V-248781" selected="true" /><select idref="V-248782" selected="true" /><select idref="V-248783" selected="true" /><select idref="V-248784" selected="true" /><select idref="V-248790" selected="true" /><select idref="V-248791" selected="true" /><select idref="V-248797" selected="true" /><select idref="V-248798" selected="true" /><select idref="V-248799" selected="true" /><select idref="V-248800" selected="true" /><select idref="V-248801" selected="true" /><select idref="V-248802" selected="true" /><select idref="V-248803" selected="true" /><select idref="V-248804" selected="true" /><select idref="V-248805" selected="true" /><select idref="V-248806" selected="true" /><select idref="V-248807" selected="true" /><select idref="V-248808" selected="true" /><select idref="V-248809" selected="true" /><select idref="V-248810" selected="true" /><select idref="V-248811" selected="true" /><select idref="V-248812" selected="true" /><select idref="V-248813" selected="true" /><select idref="V-248814" selected="true" /><select idref="V-248815" selected="true" /><select idref="V-248816" selected="true" /><select idref="V-248817" selected="true" /><select idref="V-248818" selected="true" /><select idref="V-248819" selected="true" /><select idref="V-248820" selected="true" /><select idref="V-248821" selected="true" /><select idref="V-248822" selected="true" /><select idref="V-248823" selected="true" /><select idref="V-248824" selected="true" /><select idref="V-248825" selected="true" /><select idref="V-248826" selected="true" /><select idref="V-248827" selected="true" /><select idref="V-248828" selected="true" /><select idref="V-248829" selected="true" /><select idref="V-248830" selected="true" /><select idref="V-248831" selected="true" /><select idref="V-248832" selected="true" /><select idref="V-248833" selected="true" /><select idref="V-248834" selected="true" /><select idref="V-248835" selected="true" /><select idref="V-248836" selected="true" /><select idref="V-248837" selected="true" /><select idref="V-248839" selected="true" /><select idref="V-248840" selected="true" /><select idref="V-248841" selected="true" /><select idref="V-248842" selected="true" /><select idref="V-248843" selected="true" /><select idref="V-248844" selected="true" /><select idref="V-248845" selected="true" /><select idref="V-248846" selected="true" /><select idref="V-248847" selected="true" /><select idref="V-248848" selected="true" /><select idref="V-248849" selected="true" /><select idref="V-248850" selected="true" /><select idref="V-248851" selected="true" /><select idref="V-248852" selected="true" /><select idref="V-248853" selected="true" /><select idref="V-248854" selected="true" /><select idref="V-248855" selected="true" /><select idref="V-248856" selected="true" /><select idref="V-248857" selected="true" /><select idref="V-248858" selected="true" /><select idref="V-248859" selected="true" /><select idref="V-248860" selected="true" /><select idref="V-248861" selected="true" /><select idref="V-248862" selected="true" /><select idref="V-248863" selected="true" /><select idref="V-248864" selected="true" /><select idref="V-248865" selected="true" /><select idref="V-248866" selected="true" /><select idref="V-248867" selected="true" /><select idref="V-248868" selected="true" /><select idref="V-248869" selected="true" /><select idref="V-248870" selected="true" /><select idref="V-248871" selected="true" /><select idref="V-248872" selected="true" /><select idref="V-248873" selected="true" /><select idref="V-248874" selected="true" /><select idref="V-248875" selected="true" /><select idref="V-248876" selected="true" /><select idref="V-248877" selected="true" /><select idref="V-248878" selected="true" /><select idref="V-248879" selected="true" /><select idref="V-248880" selected="true" /><select idref="V-248881" selected="true" /><select idref="V-248882" selected="true" /><select idref="V-248883" selected="true" /><select idref="V-248884" selected="true" /><select idref="V-248885" selected="true" /><select idref="V-248886" selected="true" /><select idref="V-248887" selected="true" /><select idref="V-248888" selected="true" /><select idref="V-248889" selected="true" /><select idref="V-248890" selected="true" /><select idref="V-248891" selected="true" /><select idref="V-248892" selected="true" /><select idref="V-248893" selected="true" /><select idref="V-248894" selected="true" /><select idref="V-248895" selected="true" /><select idref="V-248896" selected="true" /><select idref="V-248897" selected="true" /><select idref="V-248898" selected="true" /><select idref="V-248899" selected="true" /><select idref="V-248900" selected="true" /><select idref="V-248901" selected="true" /><select idref="V-248902" selected="true" /><select idref="V-248903" selected="true" /><select idref="V-248904" selected="true" /><select idref="V-248905" selected="true" /><select idref="V-248906" selected="true" /><select idref="V-248907" selected="true" /><select idref="V-252650" selected="true" /><select idref="V-252651" selected="true" /><select idref="V-252652" selected="true" /><select idref="V-252653" selected="true" /><select idref="V-252654" selected="true" /><select idref="V-252655" selected="true" /><select idref="V-252656" selected="true" /><select idref="V-252657" selected="true" /><select idref="V-252658" selected="true" /><select idref="V-252659" selected="true" /><select idref="V-252660" selected="true" /><select idref="V-252662" selected="true" /><select idref="V-252663" selected="true" /><select idref="V-255898" selected="true" /><select idref="V-256978" selected="true" /><select idref="V-256979" selected="true" /><select idref="V-257259" selected="true" /><select idref="V-274876" selected="true" /></Profile><Group id="V-248519"><title>SRG-OS-000037-GPOS-00015</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248519r1015024_rule" weight="10.0" severity="medium"><version>OL08-00-030180</version><title>The OL 8 audit package must be installed.</title><description>&lt;VulnDiscussion&gt;Without establishing what type of events occurred and their source, location, and outcome, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack. 
+<?xml version="1.0" encoding="utf-8"?><?xml-stylesheet type='text/xsl' href='STIG_unclass.xsl'?><Benchmark xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.1 http://nvd.nist.gov/schema/xccdf-1.1.4.xsd http://cpe.mitre.org/dictionary/2.0 http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd" id="Oracle_Linux_8_STIG" xml:lang="en" xmlns="http://checklists.nist.gov/xccdf/1.1"><status date="2025-12-08">accepted</status><title>Oracle Linux 8 Security Technical Implementation Guide</title><description>This Security Technical Implementation Guide is published as a tool to improve the security of Department of Defense (DOD) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.</description><notice id="terms-of-use" xml:lang="en"></notice><front-matter xml:lang="en"></front-matter><rear-matter xml:lang="en"></rear-matter><reference href="https://cyber.mil"><dc:publisher>DISA</dc:publisher><dc:source>STIG.DOD.MIL</dc:source></reference><plain-text id="release-info">Release: 7 Benchmark Date: 05 Jan 2026</plain-text><plain-text id="generator">3.5.2</plain-text><plain-text id="conventionsVersion">1.10.0</plain-text><version>2</version><Profile id="MAC-1_Classified"><title>I - Mission Critical Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-248519" selected="true" /><select idref="V-248520" selected="true" /><select idref="V-248521" selected="true" /><select idref="V-248523" selected="true" /><select idref="V-248524" selected="true" /><select idref="V-248525" selected="true" /><select idref="V-248526" selected="true" /><select idref="V-248527" selected="true" /><select idref="V-248528" selected="true" /><select idref="V-248529" selected="true" /><select idref="V-248530" selected="true" /><select idref="V-248531" selected="true" /><select idref="V-248532" selected="true" /><select idref="V-248533" selected="true" /><select idref="V-248534" selected="true" /><select idref="V-248535" selected="true" /><select idref="V-248537" selected="true" /><select idref="V-248538" selected="true" /><select idref="V-248539" selected="true" /><select idref="V-248540" selected="true" /><select idref="V-248541" selected="true" /><select idref="V-248542" selected="true" /><select idref="V-248543" selected="true" /><select idref="V-248544" selected="true" /><select idref="V-248545" selected="true" /><select idref="V-248546" selected="true" /><select idref="V-248547" selected="true" /><select idref="V-248548" selected="true" /><select idref="V-248549" selected="true" /><select idref="V-248551" selected="true" /><select idref="V-248552" selected="true" /><select idref="V-248553" selected="true" /><select idref="V-248554" selected="true" /><select idref="V-248555" selected="true" /><select idref="V-248556" selected="true" /><select idref="V-248557" selected="true" /><select idref="V-248558" selected="true" /><select idref="V-248559" selected="true" /><select idref="V-248560" selected="true" /><select idref="V-248561" selected="true" /><select idref="V-248562" selected="true" /><select idref="V-248563" selected="true" /><select idref="V-248564" selected="true" /><select idref="V-248565" selected="true" /><select idref="V-248566" selected="true" /><select idref="V-248567" selected="true" /><select idref="V-248568" selected="true" /><select idref="V-248569" selected="true" /><select idref="V-248570" selected="true" /><select idref="V-248571" selected="true" /><select idref="V-248572" selected="true" /><select idref="V-248573" selected="true" /><select idref="V-248574" selected="true" /><select idref="V-248575" selected="true" /><select idref="V-248576" selected="true" /><select idref="V-248577" selected="true" /><select idref="V-248578" selected="true" /><select idref="V-248579" selected="true" /><select idref="V-248580" selected="true" /><select idref="V-248581" selected="true" /><select idref="V-248582" selected="true" /><select idref="V-248583" selected="true" /><select idref="V-248584" selected="true" /><select idref="V-248585" selected="true" /><select idref="V-248586" selected="true" /><select idref="V-248587" selected="true" /><select idref="V-248588" selected="true" /><select idref="V-248589" selected="true" /><select idref="V-248590" selected="true" /><select idref="V-248591" selected="true" /><select idref="V-248592" selected="true" /><select idref="V-248593" selected="true" /><select idref="V-248594" selected="true" /><select idref="V-248595" selected="true" /><select idref="V-248596" selected="true" /><select idref="V-248597" selected="true" /><select idref="V-248598" selected="true" /><select idref="V-248599" selected="true" /><select idref="V-248600" selected="true" /><select idref="V-248601" selected="true" /><select idref="V-248602" selected="true" /><select idref="V-248603" selected="true" /><select idref="V-248605" selected="true" /><select idref="V-248606" selected="true" /><select idref="V-248607" selected="true" /><select idref="V-248608" selected="true" /><select idref="V-248609" selected="true" /><select idref="V-248610" selected="true" /><select idref="V-248611" selected="true" /><select idref="V-248612" selected="true" /><select idref="V-248613" selected="true" /><select idref="V-248615" selected="true" /><select idref="V-248616" selected="true" /><select idref="V-248617" selected="true" /><select idref="V-248618" selected="true" /><select idref="V-248619" selected="true" /><select idref="V-248620" selected="true" /><select idref="V-248621" selected="true" /><select idref="V-248622" selected="true" /><select idref="V-248623" selected="true" /><select idref="V-248624" selected="true" /><select idref="V-248625" selected="true" /><select idref="V-248626" selected="true" /><select idref="V-248628" selected="true" /><select idref="V-248629" selected="true" /><select idref="V-248630" selected="true" /><select idref="V-248631" selected="true" /><select idref="V-248632" selected="true" /><select idref="V-248633" selected="true" /><select idref="V-248634" selected="true" /><select idref="V-248635" selected="true" /><select idref="V-248636" selected="true" /><select idref="V-248637" selected="true" /><select idref="V-248638" selected="true" /><select idref="V-248639" selected="true" /><select idref="V-248640" selected="true" /><select idref="V-248641" selected="true" /><select idref="V-248642" selected="true" /><select idref="V-248643" selected="true" /><select idref="V-248644" selected="true" /><select idref="V-248645" selected="true" /><select idref="V-248646" selected="true" /><select idref="V-248647" selected="true" /><select idref="V-248648" selected="true" /><select idref="V-248649" selected="true" /><select idref="V-248650" selected="true" /><select idref="V-248651" selected="true" /><select idref="V-248652" selected="true" /><select idref="V-248653" selected="true" /><select idref="V-248654" selected="true" /><select idref="V-248655" selected="true" /><select idref="V-248656" selected="true" /><select idref="V-248657" selected="true" /><select idref="V-248658" selected="true" /><select idref="V-248659" selected="true" /><select idref="V-248660" selected="true" /><select idref="V-248661" selected="true" /><select idref="V-248662" selected="true" /><select idref="V-248663" selected="true" /><select idref="V-248664" selected="true" /><select idref="V-248665" selected="true" /><select idref="V-248666" selected="true" /><select idref="V-248667" selected="true" /><select idref="V-248668" selected="true" /><select idref="V-248669" selected="true" /><select idref="V-248670" selected="true" /><select idref="V-248671" selected="true" /><select idref="V-248672" selected="true" /><select idref="V-248673" selected="true" /><select idref="V-248678" selected="true" /><select idref="V-248679" selected="true" /><select idref="V-248680" selected="true" /><select idref="V-248682" selected="true" /><select idref="V-248683" selected="true" /><select idref="V-248684" selected="true" /><select idref="V-248685" selected="true" /><select idref="V-248686" selected="true" /><select idref="V-248687" selected="true" /><select idref="V-248688" selected="true" /><select idref="V-248689" selected="true" /><select idref="V-248690" selected="true" /><select idref="V-248691" selected="true" /><select idref="V-248692" selected="true" /><select idref="V-248693" selected="true" /><select idref="V-248694" selected="true" /><select idref="V-248695" selected="true" /><select idref="V-248696" selected="true" /><select idref="V-248697" selected="true" /><select idref="V-248699" selected="true" /><select idref="V-248700" selected="true" /><select idref="V-248701" selected="true" /><select idref="V-248702" selected="true" /><select idref="V-248703" selected="true" /><select idref="V-248704" selected="true" /><select idref="V-248705" selected="true" /><select idref="V-248706" selected="true" /><select idref="V-248707" selected="true" /><select idref="V-248708" selected="true" /><select idref="V-248709" selected="true" /><select idref="V-248710" selected="true" /><select idref="V-248711" selected="true" /><select idref="V-248712" selected="true" /><select idref="V-248713" selected="true" /><select idref="V-248714" selected="true" /><select idref="V-248715" selected="true" /><select idref="V-248716" selected="true" /><select idref="V-248718" selected="true" /><select idref="V-248719" selected="true" /><select idref="V-248720" selected="true" /><select idref="V-248721" selected="true" /><select idref="V-248722" selected="true" /><select idref="V-248723" selected="true" /><select idref="V-248724" selected="true" /><select idref="V-248725" selected="true" /><select idref="V-248726" selected="true" /><select idref="V-248728" selected="true" /><select idref="V-248729" selected="true" /><select idref="V-248730" selected="true" /><select idref="V-248731" selected="true" /><select idref="V-248732" selected="true" /><select idref="V-248733" selected="true" /><select idref="V-248734" selected="true" /><select idref="V-248735" selected="true" /><select idref="V-248736" selected="true" /><select idref="V-248737" selected="true" /><select idref="V-248738" selected="true" /><select idref="V-248739" selected="true" /><select idref="V-248740" selected="true" /><select idref="V-248741" selected="true" /><select idref="V-248742" selected="true" /><select idref="V-248743" selected="true" /><select idref="V-248744" selected="true" /><select idref="V-248745" selected="true" /><select idref="V-248746" selected="true" /><select idref="V-248747" selected="true" /><select idref="V-248748" selected="true" /><select idref="V-248753" selected="true" /><select idref="V-248754" selected="true" /><select idref="V-248756" selected="true" /><select idref="V-248757" selected="true" /><select idref="V-248758" selected="true" /><select idref="V-248759" selected="true" /><select idref="V-248760" selected="true" /><select idref="V-248761" selected="true" /><select idref="V-248762" selected="true" /><select idref="V-248763" selected="true" /><select idref="V-248764" selected="true" /><select idref="V-248765" selected="true" /><select idref="V-248766" selected="true" /><select idref="V-248767" selected="true" /><select idref="V-248768" selected="true" /><select idref="V-248769" selected="true" /><select idref="V-248770" selected="true" /><select idref="V-248771" selected="true" /><select idref="V-248772" selected="true" /><select idref="V-248773" selected="true" /><select idref="V-248774" selected="true" /><select idref="V-248779" selected="true" /><select idref="V-248781" selected="true" /><select idref="V-248782" selected="true" /><select idref="V-248783" selected="true" /><select idref="V-248784" selected="true" /><select idref="V-248790" selected="true" /><select idref="V-248791" selected="true" /><select idref="V-248797" selected="true" /><select idref="V-248798" selected="true" /><select idref="V-248799" selected="true" /><select idref="V-248800" selected="true" /><select idref="V-248801" selected="true" /><select idref="V-248802" selected="true" /><select idref="V-248803" selected="true" /><select idref="V-248804" selected="true" /><select idref="V-248805" selected="true" /><select idref="V-248806" selected="true" /><select idref="V-248807" selected="true" /><select idref="V-248808" selected="true" /><select idref="V-248809" selected="true" /><select idref="V-248810" selected="true" /><select idref="V-248811" selected="true" /><select idref="V-248812" selected="true" /><select idref="V-248813" selected="true" /><select idref="V-248814" selected="true" /><select idref="V-248815" selected="true" /><select idref="V-248816" selected="true" /><select idref="V-248817" selected="true" /><select idref="V-248818" selected="true" /><select idref="V-248819" selected="true" /><select idref="V-248820" selected="true" /><select idref="V-248821" selected="true" /><select idref="V-248822" selected="true" /><select idref="V-248823" selected="true" /><select idref="V-248824" selected="true" /><select idref="V-248825" selected="true" /><select idref="V-248826" selected="true" /><select idref="V-248827" selected="true" /><select idref="V-248828" selected="true" /><select idref="V-248829" selected="true" /><select idref="V-248830" selected="true" /><select idref="V-248831" selected="true" /><select idref="V-248832" selected="true" /><select idref="V-248833" selected="true" /><select idref="V-248834" selected="true" /><select idref="V-248835" selected="true" /><select idref="V-248836" selected="true" /><select idref="V-248837" selected="true" /><select idref="V-248839" selected="true" /><select idref="V-248840" selected="true" /><select idref="V-248841" selected="true" /><select idref="V-248842" selected="true" /><select idref="V-248843" selected="true" /><select idref="V-248844" selected="true" /><select idref="V-248845" selected="true" /><select idref="V-248846" selected="true" /><select idref="V-248847" selected="true" /><select idref="V-248848" selected="true" /><select idref="V-248849" selected="true" /><select idref="V-248850" selected="true" /><select idref="V-248851" selected="true" /><select idref="V-248852" selected="true" /><select idref="V-248853" selected="true" /><select idref="V-248854" selected="true" /><select idref="V-248855" selected="true" /><select idref="V-248856" selected="true" /><select idref="V-248857" selected="true" /><select idref="V-248858" selected="true" /><select idref="V-248859" selected="true" /><select idref="V-248860" selected="true" /><select idref="V-248861" selected="true" /><select idref="V-248862" selected="true" /><select idref="V-248863" selected="true" /><select idref="V-248864" selected="true" /><select idref="V-248865" selected="true" /><select idref="V-248866" selected="true" /><select idref="V-248867" selected="true" /><select idref="V-248868" selected="true" /><select idref="V-248869" selected="true" /><select idref="V-248870" selected="true" /><select idref="V-248871" selected="true" /><select idref="V-248872" selected="true" /><select idref="V-248873" selected="true" /><select idref="V-248874" selected="true" /><select idref="V-248875" selected="true" /><select idref="V-248876" selected="true" /><select idref="V-248877" selected="true" /><select idref="V-248878" selected="true" /><select idref="V-248879" selected="true" /><select idref="V-248880" selected="true" /><select idref="V-248881" selected="true" /><select idref="V-248882" selected="true" /><select idref="V-248883" selected="true" /><select idref="V-248884" selected="true" /><select idref="V-248885" selected="true" /><select idref="V-248886" selected="true" /><select idref="V-248887" selected="true" /><select idref="V-248888" selected="true" /><select idref="V-248889" selected="true" /><select idref="V-248890" selected="true" /><select idref="V-248891" selected="true" /><select idref="V-248892" selected="true" /><select idref="V-248893" selected="true" /><select idref="V-248894" selected="true" /><select idref="V-248895" selected="true" /><select idref="V-248896" selected="true" /><select idref="V-248897" selected="true" /><select idref="V-248898" selected="true" /><select idref="V-248899" selected="true" /><select idref="V-248900" selected="true" /><select idref="V-248901" selected="true" /><select idref="V-248902" selected="true" /><select idref="V-248903" selected="true" /><select idref="V-248904" selected="true" /><select idref="V-248905" selected="true" /><select idref="V-248906" selected="true" /><select idref="V-248907" selected="true" /><select idref="V-252650" selected="true" /><select idref="V-252651" selected="true" /><select idref="V-252652" selected="true" /><select idref="V-252653" selected="true" /><select idref="V-252654" selected="true" /><select idref="V-252655" selected="true" /><select idref="V-252656" selected="true" /><select idref="V-252657" selected="true" /><select idref="V-252658" selected="true" /><select idref="V-252659" selected="true" /><select idref="V-252660" selected="true" /><select idref="V-252662" selected="true" /><select idref="V-252663" selected="true" /><select idref="V-255898" selected="true" /><select idref="V-256978" selected="true" /><select idref="V-256979" selected="true" /><select idref="V-257259" selected="true" /><select idref="V-274876" selected="true" /><select idref="V-279934" selected="true" /></Profile><Profile id="MAC-1_Public"><title>I - Mission Critical Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-248519" selected="true" /><select idref="V-248520" selected="true" /><select idref="V-248521" selected="true" /><select idref="V-248523" selected="true" /><select idref="V-248524" selected="true" /><select idref="V-248525" selected="true" /><select idref="V-248526" selected="true" /><select idref="V-248527" selected="true" /><select idref="V-248528" selected="true" /><select idref="V-248529" selected="true" /><select idref="V-248530" selected="true" /><select idref="V-248531" selected="true" /><select idref="V-248532" selected="true" /><select idref="V-248533" selected="true" /><select idref="V-248534" selected="true" /><select idref="V-248535" selected="true" /><select idref="V-248537" selected="true" /><select idref="V-248538" selected="true" /><select idref="V-248539" selected="true" /><select idref="V-248540" selected="true" /><select idref="V-248541" selected="true" /><select idref="V-248542" selected="true" /><select idref="V-248543" selected="true" /><select idref="V-248544" selected="true" /><select idref="V-248545" selected="true" /><select idref="V-248546" selected="true" /><select idref="V-248547" selected="true" /><select idref="V-248548" selected="true" /><select idref="V-248549" selected="true" /><select idref="V-248551" selected="true" /><select idref="V-248552" selected="true" /><select idref="V-248553" selected="true" /><select idref="V-248554" selected="true" /><select idref="V-248555" selected="true" /><select idref="V-248556" selected="true" /><select idref="V-248557" selected="true" /><select idref="V-248558" selected="true" /><select idref="V-248559" selected="true" /><select idref="V-248560" selected="true" /><select idref="V-248561" selected="true" /><select idref="V-248562" selected="true" /><select idref="V-248563" selected="true" /><select idref="V-248564" selected="true" /><select idref="V-248565" selected="true" /><select idref="V-248566" selected="true" /><select idref="V-248567" selected="true" /><select idref="V-248568" selected="true" /><select idref="V-248569" selected="true" /><select idref="V-248570" selected="true" /><select idref="V-248571" selected="true" /><select idref="V-248572" selected="true" /><select idref="V-248573" selected="true" /><select idref="V-248574" selected="true" /><select idref="V-248575" selected="true" /><select idref="V-248576" selected="true" /><select idref="V-248577" selected="true" /><select idref="V-248578" selected="true" /><select idref="V-248579" selected="true" /><select idref="V-248580" selected="true" /><select idref="V-248581" selected="true" /><select idref="V-248582" selected="true" /><select idref="V-248583" selected="true" /><select idref="V-248584" selected="true" /><select idref="V-248585" selected="true" /><select idref="V-248586" selected="true" /><select idref="V-248587" selected="true" /><select idref="V-248588" selected="true" /><select idref="V-248589" selected="true" /><select idref="V-248590" selected="true" /><select idref="V-248591" selected="true" /><select idref="V-248592" selected="true" /><select idref="V-248593" selected="true" /><select idref="V-248594" selected="true" /><select idref="V-248595" selected="true" /><select idref="V-248596" selected="true" /><select idref="V-248597" selected="true" /><select idref="V-248598" selected="true" /><select idref="V-248599" selected="true" /><select idref="V-248600" selected="true" /><select idref="V-248601" selected="true" /><select idref="V-248602" selected="true" /><select idref="V-248603" selected="true" /><select idref="V-248605" selected="true" /><select idref="V-248606" selected="true" /><select idref="V-248607" selected="true" /><select idref="V-248608" selected="true" /><select idref="V-248609" selected="true" /><select idref="V-248610" selected="true" /><select idref="V-248611" selected="true" /><select idref="V-248612" selected="true" /><select idref="V-248613" selected="true" /><select idref="V-248615" selected="true" /><select idref="V-248616" selected="true" /><select idref="V-248617" selected="true" /><select idref="V-248618" selected="true" /><select idref="V-248619" selected="true" /><select idref="V-248620" selected="true" /><select idref="V-248621" selected="true" /><select idref="V-248622" selected="true" /><select idref="V-248623" selected="true" /><select idref="V-248624" selected="true" /><select idref="V-248625" selected="true" /><select idref="V-248626" selected="true" /><select idref="V-248628" selected="true" /><select idref="V-248629" selected="true" /><select idref="V-248630" selected="true" /><select idref="V-248631" selected="true" /><select idref="V-248632" selected="true" /><select idref="V-248633" selected="true" /><select idref="V-248634" selected="true" /><select idref="V-248635" selected="true" /><select idref="V-248636" selected="true" /><select idref="V-248637" selected="true" /><select idref="V-248638" selected="true" /><select idref="V-248639" selected="true" /><select idref="V-248640" selected="true" /><select idref="V-248641" selected="true" /><select idref="V-248642" selected="true" /><select idref="V-248643" selected="true" /><select idref="V-248644" selected="true" /><select idref="V-248645" selected="true" /><select idref="V-248646" selected="true" /><select idref="V-248647" selected="true" /><select idref="V-248648" selected="true" /><select idref="V-248649" selected="true" /><select idref="V-248650" selected="true" /><select idref="V-248651" selected="true" /><select idref="V-248652" selected="true" /><select idref="V-248653" selected="true" /><select idref="V-248654" selected="true" /><select idref="V-248655" selected="true" /><select idref="V-248656" selected="true" /><select idref="V-248657" selected="true" /><select idref="V-248658" selected="true" /><select idref="V-248659" selected="true" /><select idref="V-248660" selected="true" /><select idref="V-248661" selected="true" /><select idref="V-248662" selected="true" /><select idref="V-248663" selected="true" /><select idref="V-248664" selected="true" /><select idref="V-248665" selected="true" /><select idref="V-248666" selected="true" /><select idref="V-248667" selected="true" /><select idref="V-248668" selected="true" /><select idref="V-248669" selected="true" /><select idref="V-248670" selected="true" /><select idref="V-248671" selected="true" /><select idref="V-248672" selected="true" /><select idref="V-248673" selected="true" /><select idref="V-248678" selected="true" /><select idref="V-248679" selected="true" /><select idref="V-248680" selected="true" /><select idref="V-248682" selected="true" /><select idref="V-248683" selected="true" /><select idref="V-248684" selected="true" /><select idref="V-248685" selected="true" /><select idref="V-248686" selected="true" /><select idref="V-248687" selected="true" /><select idref="V-248688" selected="true" /><select idref="V-248689" selected="true" /><select idref="V-248690" selected="true" /><select idref="V-248691" selected="true" /><select idref="V-248692" selected="true" /><select idref="V-248693" selected="true" /><select idref="V-248694" selected="true" /><select idref="V-248695" selected="true" /><select idref="V-248696" selected="true" /><select idref="V-248697" selected="true" /><select idref="V-248699" selected="true" /><select idref="V-248700" selected="true" /><select idref="V-248701" selected="true" /><select idref="V-248702" selected="true" /><select idref="V-248703" selected="true" /><select idref="V-248704" selected="true" /><select idref="V-248705" selected="true" /><select idref="V-248706" selected="true" /><select idref="V-248707" selected="true" /><select idref="V-248708" selected="true" /><select idref="V-248709" selected="true" /><select idref="V-248710" selected="true" /><select idref="V-248711" selected="true" /><select idref="V-248712" selected="true" /><select idref="V-248713" selected="true" /><select idref="V-248714" selected="true" /><select idref="V-248715" selected="true" /><select idref="V-248716" selected="true" /><select idref="V-248718" selected="true" /><select idref="V-248719" selected="true" /><select idref="V-248720" selected="true" /><select idref="V-248721" selected="true" /><select idref="V-248722" selected="true" /><select idref="V-248723" selected="true" /><select idref="V-248724" selected="true" /><select idref="V-248725" selected="true" /><select idref="V-248726" selected="true" /><select idref="V-248728" selected="true" /><select idref="V-248729" selected="true" /><select idref="V-248730" selected="true" /><select idref="V-248731" selected="true" /><select idref="V-248732" selected="true" /><select idref="V-248733" selected="true" /><select idref="V-248734" selected="true" /><select idref="V-248735" selected="true" /><select idref="V-248736" selected="true" /><select idref="V-248737" selected="true" /><select idref="V-248738" selected="true" /><select idref="V-248739" selected="true" /><select idref="V-248740" selected="true" /><select idref="V-248741" selected="true" /><select idref="V-248742" selected="true" /><select idref="V-248743" selected="true" /><select idref="V-248744" selected="true" /><select idref="V-248745" selected="true" /><select idref="V-248746" selected="true" /><select idref="V-248747" selected="true" /><select idref="V-248748" selected="true" /><select idref="V-248753" selected="true" /><select idref="V-248754" selected="true" /><select idref="V-248756" selected="true" /><select idref="V-248757" selected="true" /><select idref="V-248758" selected="true" /><select idref="V-248759" selected="true" /><select idref="V-248760" selected="true" /><select idref="V-248761" selected="true" /><select idref="V-248762" selected="true" /><select idref="V-248763" selected="true" /><select idref="V-248764" selected="true" /><select idref="V-248765" selected="true" /><select idref="V-248766" selected="true" /><select idref="V-248767" selected="true" /><select idref="V-248768" selected="true" /><select idref="V-248769" selected="true" /><select idref="V-248770" selected="true" /><select idref="V-248771" selected="true" /><select idref="V-248772" selected="true" /><select idref="V-248773" selected="true" /><select idref="V-248774" selected="true" /><select idref="V-248779" selected="true" /><select idref="V-248781" selected="true" /><select idref="V-248782" selected="true" /><select idref="V-248783" selected="true" /><select idref="V-248784" selected="true" /><select idref="V-248790" selected="true" /><select idref="V-248791" selected="true" /><select idref="V-248797" selected="true" /><select idref="V-248798" selected="true" /><select idref="V-248799" selected="true" /><select idref="V-248800" selected="true" /><select idref="V-248801" selected="true" /><select idref="V-248802" selected="true" /><select idref="V-248803" selected="true" /><select idref="V-248804" selected="true" /><select idref="V-248805" selected="true" /><select idref="V-248806" selected="true" /><select idref="V-248807" selected="true" /><select idref="V-248808" selected="true" /><select idref="V-248809" selected="true" /><select idref="V-248810" selected="true" /><select idref="V-248811" selected="true" /><select idref="V-248812" selected="true" /><select idref="V-248813" selected="true" /><select idref="V-248814" selected="true" /><select idref="V-248815" selected="true" /><select idref="V-248816" selected="true" /><select idref="V-248817" selected="true" /><select idref="V-248818" selected="true" /><select idref="V-248819" selected="true" /><select idref="V-248820" selected="true" /><select idref="V-248821" selected="true" /><select idref="V-248822" selected="true" /><select idref="V-248823" selected="true" /><select idref="V-248824" selected="true" /><select idref="V-248825" selected="true" /><select idref="V-248826" selected="true" /><select idref="V-248827" selected="true" /><select idref="V-248828" selected="true" /><select idref="V-248829" selected="true" /><select idref="V-248830" selected="true" /><select idref="V-248831" selected="true" /><select idref="V-248832" selected="true" /><select idref="V-248833" selected="true" /><select idref="V-248834" selected="true" /><select idref="V-248835" selected="true" /><select idref="V-248836" selected="true" /><select idref="V-248837" selected="true" /><select idref="V-248839" selected="true" /><select idref="V-248840" selected="true" /><select idref="V-248841" selected="true" /><select idref="V-248842" selected="true" /><select idref="V-248843" selected="true" /><select idref="V-248844" selected="true" /><select idref="V-248845" selected="true" /><select idref="V-248846" selected="true" /><select idref="V-248847" selected="true" /><select idref="V-248848" selected="true" /><select idref="V-248849" selected="true" /><select idref="V-248850" selected="true" /><select idref="V-248851" selected="true" /><select idref="V-248852" selected="true" /><select idref="V-248853" selected="true" /><select idref="V-248854" selected="true" /><select idref="V-248855" selected="true" /><select idref="V-248856" selected="true" /><select idref="V-248857" selected="true" /><select idref="V-248858" selected="true" /><select idref="V-248859" selected="true" /><select idref="V-248860" selected="true" /><select idref="V-248861" selected="true" /><select idref="V-248862" selected="true" /><select idref="V-248863" selected="true" /><select idref="V-248864" selected="true" /><select idref="V-248865" selected="true" /><select idref="V-248866" selected="true" /><select idref="V-248867" selected="true" /><select idref="V-248868" selected="true" /><select idref="V-248869" selected="true" /><select idref="V-248870" selected="true" /><select idref="V-248871" selected="true" /><select idref="V-248872" selected="true" /><select idref="V-248873" selected="true" /><select idref="V-248874" selected="true" /><select idref="V-248875" selected="true" /><select idref="V-248876" selected="true" /><select idref="V-248877" selected="true" /><select idref="V-248878" selected="true" /><select idref="V-248879" selected="true" /><select idref="V-248880" selected="true" /><select idref="V-248881" selected="true" /><select idref="V-248882" selected="true" /><select idref="V-248883" selected="true" /><select idref="V-248884" selected="true" /><select idref="V-248885" selected="true" /><select idref="V-248886" selected="true" /><select idref="V-248887" selected="true" /><select idref="V-248888" selected="true" /><select idref="V-248889" selected="true" /><select idref="V-248890" selected="true" /><select idref="V-248891" selected="true" /><select idref="V-248892" selected="true" /><select idref="V-248893" selected="true" /><select idref="V-248894" selected="true" /><select idref="V-248895" selected="true" /><select idref="V-248896" selected="true" /><select idref="V-248897" selected="true" /><select idref="V-248898" selected="true" /><select idref="V-248899" selected="true" /><select idref="V-248900" selected="true" /><select idref="V-248901" selected="true" /><select idref="V-248902" selected="true" /><select idref="V-248903" selected="true" /><select idref="V-248904" selected="true" /><select idref="V-248905" selected="true" /><select idref="V-248906" selected="true" /><select idref="V-248907" selected="true" /><select idref="V-252650" selected="true" /><select idref="V-252651" selected="true" /><select idref="V-252652" selected="true" /><select idref="V-252653" selected="true" /><select idref="V-252654" selected="true" /><select idref="V-252655" selected="true" /><select idref="V-252656" selected="true" /><select idref="V-252657" selected="true" /><select idref="V-252658" selected="true" /><select idref="V-252659" selected="true" /><select idref="V-252660" selected="true" /><select idref="V-252662" selected="true" /><select idref="V-252663" selected="true" /><select idref="V-255898" selected="true" /><select idref="V-256978" selected="true" /><select idref="V-256979" selected="true" /><select idref="V-257259" selected="true" /><select idref="V-274876" selected="true" /><select idref="V-279934" selected="true" /></Profile><Profile id="MAC-1_Sensitive"><title>I - Mission Critical Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-248519" selected="true" /><select idref="V-248520" selected="true" /><select idref="V-248521" selected="true" /><select idref="V-248523" selected="true" /><select idref="V-248524" selected="true" /><select idref="V-248525" selected="true" /><select idref="V-248526" selected="true" /><select idref="V-248527" selected="true" /><select idref="V-248528" selected="true" /><select idref="V-248529" selected="true" /><select idref="V-248530" selected="true" /><select idref="V-248531" selected="true" /><select idref="V-248532" selected="true" /><select idref="V-248533" selected="true" /><select idref="V-248534" selected="true" /><select idref="V-248535" selected="true" /><select idref="V-248537" selected="true" /><select idref="V-248538" selected="true" /><select idref="V-248539" selected="true" /><select idref="V-248540" selected="true" /><select idref="V-248541" selected="true" /><select idref="V-248542" selected="true" /><select idref="V-248543" selected="true" /><select idref="V-248544" selected="true" /><select idref="V-248545" selected="true" /><select idref="V-248546" selected="true" /><select idref="V-248547" selected="true" /><select idref="V-248548" selected="true" /><select idref="V-248549" selected="true" /><select idref="V-248551" selected="true" /><select idref="V-248552" selected="true" /><select idref="V-248553" selected="true" /><select idref="V-248554" selected="true" /><select idref="V-248555" selected="true" /><select idref="V-248556" selected="true" /><select idref="V-248557" selected="true" /><select idref="V-248558" selected="true" /><select idref="V-248559" selected="true" /><select idref="V-248560" selected="true" /><select idref="V-248561" selected="true" /><select idref="V-248562" selected="true" /><select idref="V-248563" selected="true" /><select idref="V-248564" selected="true" /><select idref="V-248565" selected="true" /><select idref="V-248566" selected="true" /><select idref="V-248567" selected="true" /><select idref="V-248568" selected="true" /><select idref="V-248569" selected="true" /><select idref="V-248570" selected="true" /><select idref="V-248571" selected="true" /><select idref="V-248572" selected="true" /><select idref="V-248573" selected="true" /><select idref="V-248574" selected="true" /><select idref="V-248575" selected="true" /><select idref="V-248576" selected="true" /><select idref="V-248577" selected="true" /><select idref="V-248578" selected="true" /><select idref="V-248579" selected="true" /><select idref="V-248580" selected="true" /><select idref="V-248581" selected="true" /><select idref="V-248582" selected="true" /><select idref="V-248583" selected="true" /><select idref="V-248584" selected="true" /><select idref="V-248585" selected="true" /><select idref="V-248586" selected="true" /><select idref="V-248587" selected="true" /><select idref="V-248588" selected="true" /><select idref="V-248589" selected="true" /><select idref="V-248590" selected="true" /><select idref="V-248591" selected="true" /><select idref="V-248592" selected="true" /><select idref="V-248593" selected="true" /><select idref="V-248594" selected="true" /><select idref="V-248595" selected="true" /><select idref="V-248596" selected="true" /><select idref="V-248597" selected="true" /><select idref="V-248598" selected="true" /><select idref="V-248599" selected="true" /><select idref="V-248600" selected="true" /><select idref="V-248601" selected="true" /><select idref="V-248602" selected="true" /><select idref="V-248603" selected="true" /><select idref="V-248605" selected="true" /><select idref="V-248606" selected="true" /><select idref="V-248607" selected="true" /><select idref="V-248608" selected="true" /><select idref="V-248609" selected="true" /><select idref="V-248610" selected="true" /><select idref="V-248611" selected="true" /><select idref="V-248612" selected="true" /><select idref="V-248613" selected="true" /><select idref="V-248615" selected="true" /><select idref="V-248616" selected="true" /><select idref="V-248617" selected="true" /><select idref="V-248618" selected="true" /><select idref="V-248619" selected="true" /><select idref="V-248620" selected="true" /><select idref="V-248621" selected="true" /><select idref="V-248622" selected="true" /><select idref="V-248623" selected="true" /><select idref="V-248624" selected="true" /><select idref="V-248625" selected="true" /><select idref="V-248626" selected="true" /><select idref="V-248628" selected="true" /><select idref="V-248629" selected="true" /><select idref="V-248630" selected="true" /><select idref="V-248631" selected="true" /><select idref="V-248632" selected="true" /><select idref="V-248633" selected="true" /><select idref="V-248634" selected="true" /><select idref="V-248635" selected="true" /><select idref="V-248636" selected="true" /><select idref="V-248637" selected="true" /><select idref="V-248638" selected="true" /><select idref="V-248639" selected="true" /><select idref="V-248640" selected="true" /><select idref="V-248641" selected="true" /><select idref="V-248642" selected="true" /><select idref="V-248643" selected="true" /><select idref="V-248644" selected="true" /><select idref="V-248645" selected="true" /><select idref="V-248646" selected="true" /><select idref="V-248647" selected="true" /><select idref="V-248648" selected="true" /><select idref="V-248649" selected="true" /><select idref="V-248650" selected="true" /><select idref="V-248651" selected="true" /><select idref="V-248652" selected="true" /><select idref="V-248653" selected="true" /><select idref="V-248654" selected="true" /><select idref="V-248655" selected="true" /><select idref="V-248656" selected="true" /><select idref="V-248657" selected="true" /><select idref="V-248658" selected="true" /><select idref="V-248659" selected="true" /><select idref="V-248660" selected="true" /><select idref="V-248661" selected="true" /><select idref="V-248662" selected="true" /><select idref="V-248663" selected="true" /><select idref="V-248664" selected="true" /><select idref="V-248665" selected="true" /><select idref="V-248666" selected="true" /><select idref="V-248667" selected="true" /><select idref="V-248668" selected="true" /><select idref="V-248669" selected="true" /><select idref="V-248670" selected="true" /><select idref="V-248671" selected="true" /><select idref="V-248672" selected="true" /><select idref="V-248673" selected="true" /><select idref="V-248678" selected="true" /><select idref="V-248679" selected="true" /><select idref="V-248680" selected="true" /><select idref="V-248682" selected="true" /><select idref="V-248683" selected="true" /><select idref="V-248684" selected="true" /><select idref="V-248685" selected="true" /><select idref="V-248686" selected="true" /><select idref="V-248687" selected="true" /><select idref="V-248688" selected="true" /><select idref="V-248689" selected="true" /><select idref="V-248690" selected="true" /><select idref="V-248691" selected="true" /><select idref="V-248692" selected="true" /><select idref="V-248693" selected="true" /><select idref="V-248694" selected="true" /><select idref="V-248695" selected="true" /><select idref="V-248696" selected="true" /><select idref="V-248697" selected="true" /><select idref="V-248699" selected="true" /><select idref="V-248700" selected="true" /><select idref="V-248701" selected="true" /><select idref="V-248702" selected="true" /><select idref="V-248703" selected="true" /><select idref="V-248704" selected="true" /><select idref="V-248705" selected="true" /><select idref="V-248706" selected="true" /><select idref="V-248707" selected="true" /><select idref="V-248708" selected="true" /><select idref="V-248709" selected="true" /><select idref="V-248710" selected="true" /><select idref="V-248711" selected="true" /><select idref="V-248712" selected="true" /><select idref="V-248713" selected="true" /><select idref="V-248714" selected="true" /><select idref="V-248715" selected="true" /><select idref="V-248716" selected="true" /><select idref="V-248718" selected="true" /><select idref="V-248719" selected="true" /><select idref="V-248720" selected="true" /><select idref="V-248721" selected="true" /><select idref="V-248722" selected="true" /><select idref="V-248723" selected="true" /><select idref="V-248724" selected="true" /><select idref="V-248725" selected="true" /><select idref="V-248726" selected="true" /><select idref="V-248728" selected="true" /><select idref="V-248729" selected="true" /><select idref="V-248730" selected="true" /><select idref="V-248731" selected="true" /><select idref="V-248732" selected="true" /><select idref="V-248733" selected="true" /><select idref="V-248734" selected="true" /><select idref="V-248735" selected="true" /><select idref="V-248736" selected="true" /><select idref="V-248737" selected="true" /><select idref="V-248738" selected="true" /><select idref="V-248739" selected="true" /><select idref="V-248740" selected="true" /><select idref="V-248741" selected="true" /><select idref="V-248742" selected="true" /><select idref="V-248743" selected="true" /><select idref="V-248744" selected="true" /><select idref="V-248745" selected="true" /><select idref="V-248746" selected="true" /><select idref="V-248747" selected="true" /><select idref="V-248748" selected="true" /><select idref="V-248753" selected="true" /><select idref="V-248754" selected="true" /><select idref="V-248756" selected="true" /><select idref="V-248757" selected="true" /><select idref="V-248758" selected="true" /><select idref="V-248759" selected="true" /><select idref="V-248760" selected="true" /><select idref="V-248761" selected="true" /><select idref="V-248762" selected="true" /><select idref="V-248763" selected="true" /><select idref="V-248764" selected="true" /><select idref="V-248765" selected="true" /><select idref="V-248766" selected="true" /><select idref="V-248767" selected="true" /><select idref="V-248768" selected="true" /><select idref="V-248769" selected="true" /><select idref="V-248770" selected="true" /><select idref="V-248771" selected="true" /><select idref="V-248772" selected="true" /><select idref="V-248773" selected="true" /><select idref="V-248774" selected="true" /><select idref="V-248779" selected="true" /><select idref="V-248781" selected="true" /><select idref="V-248782" selected="true" /><select idref="V-248783" selected="true" /><select idref="V-248784" selected="true" /><select idref="V-248790" selected="true" /><select idref="V-248791" selected="true" /><select idref="V-248797" selected="true" /><select idref="V-248798" selected="true" /><select idref="V-248799" selected="true" /><select idref="V-248800" selected="true" /><select idref="V-248801" selected="true" /><select idref="V-248802" selected="true" /><select idref="V-248803" selected="true" /><select idref="V-248804" selected="true" /><select idref="V-248805" selected="true" /><select idref="V-248806" selected="true" /><select idref="V-248807" selected="true" /><select idref="V-248808" selected="true" /><select idref="V-248809" selected="true" /><select idref="V-248810" selected="true" /><select idref="V-248811" selected="true" /><select idref="V-248812" selected="true" /><select idref="V-248813" selected="true" /><select idref="V-248814" selected="true" /><select idref="V-248815" selected="true" /><select idref="V-248816" selected="true" /><select idref="V-248817" selected="true" /><select idref="V-248818" selected="true" /><select idref="V-248819" selected="true" /><select idref="V-248820" selected="true" /><select idref="V-248821" selected="true" /><select idref="V-248822" selected="true" /><select idref="V-248823" selected="true" /><select idref="V-248824" selected="true" /><select idref="V-248825" selected="true" /><select idref="V-248826" selected="true" /><select idref="V-248827" selected="true" /><select idref="V-248828" selected="true" /><select idref="V-248829" selected="true" /><select idref="V-248830" selected="true" /><select idref="V-248831" selected="true" /><select idref="V-248832" selected="true" /><select idref="V-248833" selected="true" /><select idref="V-248834" selected="true" /><select idref="V-248835" selected="true" /><select idref="V-248836" selected="true" /><select idref="V-248837" selected="true" /><select idref="V-248839" selected="true" /><select idref="V-248840" selected="true" /><select idref="V-248841" selected="true" /><select idref="V-248842" selected="true" /><select idref="V-248843" selected="true" /><select idref="V-248844" selected="true" /><select idref="V-248845" selected="true" /><select idref="V-248846" selected="true" /><select idref="V-248847" selected="true" /><select idref="V-248848" selected="true" /><select idref="V-248849" selected="true" /><select idref="V-248850" selected="true" /><select idref="V-248851" selected="true" /><select idref="V-248852" selected="true" /><select idref="V-248853" selected="true" /><select idref="V-248854" selected="true" /><select idref="V-248855" selected="true" /><select idref="V-248856" selected="true" /><select idref="V-248857" selected="true" /><select idref="V-248858" selected="true" /><select idref="V-248859" selected="true" /><select idref="V-248860" selected="true" /><select idref="V-248861" selected="true" /><select idref="V-248862" selected="true" /><select idref="V-248863" selected="true" /><select idref="V-248864" selected="true" /><select idref="V-248865" selected="true" /><select idref="V-248866" selected="true" /><select idref="V-248867" selected="true" /><select idref="V-248868" selected="true" /><select idref="V-248869" selected="true" /><select idref="V-248870" selected="true" /><select idref="V-248871" selected="true" /><select idref="V-248872" selected="true" /><select idref="V-248873" selected="true" /><select idref="V-248874" selected="true" /><select idref="V-248875" selected="true" /><select idref="V-248876" selected="true" /><select idref="V-248877" selected="true" /><select idref="V-248878" selected="true" /><select idref="V-248879" selected="true" /><select idref="V-248880" selected="true" /><select idref="V-248881" selected="true" /><select idref="V-248882" selected="true" /><select idref="V-248883" selected="true" /><select idref="V-248884" selected="true" /><select idref="V-248885" selected="true" /><select idref="V-248886" selected="true" /><select idref="V-248887" selected="true" /><select idref="V-248888" selected="true" /><select idref="V-248889" selected="true" /><select idref="V-248890" selected="true" /><select idref="V-248891" selected="true" /><select idref="V-248892" selected="true" /><select idref="V-248893" selected="true" /><select idref="V-248894" selected="true" /><select idref="V-248895" selected="true" /><select idref="V-248896" selected="true" /><select idref="V-248897" selected="true" /><select idref="V-248898" selected="true" /><select idref="V-248899" selected="true" /><select idref="V-248900" selected="true" /><select idref="V-248901" selected="true" /><select idref="V-248902" selected="true" /><select idref="V-248903" selected="true" /><select idref="V-248904" selected="true" /><select idref="V-248905" selected="true" /><select idref="V-248906" selected="true" /><select idref="V-248907" selected="true" /><select idref="V-252650" selected="true" /><select idref="V-252651" selected="true" /><select idref="V-252652" selected="true" /><select idref="V-252653" selected="true" /><select idref="V-252654" selected="true" /><select idref="V-252655" selected="true" /><select idref="V-252656" selected="true" /><select idref="V-252657" selected="true" /><select idref="V-252658" selected="true" /><select idref="V-252659" selected="true" /><select idref="V-252660" selected="true" /><select idref="V-252662" selected="true" /><select idref="V-252663" selected="true" /><select idref="V-255898" selected="true" /><select idref="V-256978" selected="true" /><select idref="V-256979" selected="true" /><select idref="V-257259" selected="true" /><select idref="V-274876" selected="true" /><select idref="V-279934" selected="true" /></Profile><Profile id="MAC-2_Classified"><title>II - Mission Support Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-248519" selected="true" /><select idref="V-248520" selected="true" /><select idref="V-248521" selected="true" /><select idref="V-248523" selected="true" /><select idref="V-248524" selected="true" /><select idref="V-248525" selected="true" /><select idref="V-248526" selected="true" /><select idref="V-248527" selected="true" /><select idref="V-248528" selected="true" /><select idref="V-248529" selected="true" /><select idref="V-248530" selected="true" /><select idref="V-248531" selected="true" /><select idref="V-248532" selected="true" /><select idref="V-248533" selected="true" /><select idref="V-248534" selected="true" /><select idref="V-248535" selected="true" /><select idref="V-248537" selected="true" /><select idref="V-248538" selected="true" /><select idref="V-248539" selected="true" /><select idref="V-248540" selected="true" /><select idref="V-248541" selected="true" /><select idref="V-248542" selected="true" /><select idref="V-248543" selected="true" /><select idref="V-248544" selected="true" /><select idref="V-248545" selected="true" /><select idref="V-248546" selected="true" /><select idref="V-248547" selected="true" /><select idref="V-248548" selected="true" /><select idref="V-248549" selected="true" /><select idref="V-248551" selected="true" /><select idref="V-248552" selected="true" /><select idref="V-248553" selected="true" /><select idref="V-248554" selected="true" /><select idref="V-248555" selected="true" /><select idref="V-248556" selected="true" /><select idref="V-248557" selected="true" /><select idref="V-248558" selected="true" /><select idref="V-248559" selected="true" /><select idref="V-248560" selected="true" /><select idref="V-248561" selected="true" /><select idref="V-248562" selected="true" /><select idref="V-248563" selected="true" /><select idref="V-248564" selected="true" /><select idref="V-248565" selected="true" /><select idref="V-248566" selected="true" /><select idref="V-248567" selected="true" /><select idref="V-248568" selected="true" /><select idref="V-248569" selected="true" /><select idref="V-248570" selected="true" /><select idref="V-248571" selected="true" /><select idref="V-248572" selected="true" /><select idref="V-248573" selected="true" /><select idref="V-248574" selected="true" /><select idref="V-248575" selected="true" /><select idref="V-248576" selected="true" /><select idref="V-248577" selected="true" /><select idref="V-248578" selected="true" /><select idref="V-248579" selected="true" /><select idref="V-248580" selected="true" /><select idref="V-248581" selected="true" /><select idref="V-248582" selected="true" /><select idref="V-248583" selected="true" /><select idref="V-248584" selected="true" /><select idref="V-248585" selected="true" /><select idref="V-248586" selected="true" /><select idref="V-248587" selected="true" /><select idref="V-248588" selected="true" /><select idref="V-248589" selected="true" /><select idref="V-248590" selected="true" /><select idref="V-248591" selected="true" /><select idref="V-248592" selected="true" /><select idref="V-248593" selected="true" /><select idref="V-248594" selected="true" /><select idref="V-248595" selected="true" /><select idref="V-248596" selected="true" /><select idref="V-248597" selected="true" /><select idref="V-248598" selected="true" /><select idref="V-248599" selected="true" /><select idref="V-248600" selected="true" /><select idref="V-248601" selected="true" /><select idref="V-248602" selected="true" /><select idref="V-248603" selected="true" /><select idref="V-248605" selected="true" /><select idref="V-248606" selected="true" /><select idref="V-248607" selected="true" /><select idref="V-248608" selected="true" /><select idref="V-248609" selected="true" /><select idref="V-248610" selected="true" /><select idref="V-248611" selected="true" /><select idref="V-248612" selected="true" /><select idref="V-248613" selected="true" /><select idref="V-248615" selected="true" /><select idref="V-248616" selected="true" /><select idref="V-248617" selected="true" /><select idref="V-248618" selected="true" /><select idref="V-248619" selected="true" /><select idref="V-248620" selected="true" /><select idref="V-248621" selected="true" /><select idref="V-248622" selected="true" /><select idref="V-248623" selected="true" /><select idref="V-248624" selected="true" /><select idref="V-248625" selected="true" /><select idref="V-248626" selected="true" /><select idref="V-248628" selected="true" /><select idref="V-248629" selected="true" /><select idref="V-248630" selected="true" /><select idref="V-248631" selected="true" /><select idref="V-248632" selected="true" /><select idref="V-248633" selected="true" /><select idref="V-248634" selected="true" /><select idref="V-248635" selected="true" /><select idref="V-248636" selected="true" /><select idref="V-248637" selected="true" /><select idref="V-248638" selected="true" /><select idref="V-248639" selected="true" /><select idref="V-248640" selected="true" /><select idref="V-248641" selected="true" /><select idref="V-248642" selected="true" /><select idref="V-248643" selected="true" /><select idref="V-248644" selected="true" /><select idref="V-248645" selected="true" /><select idref="V-248646" selected="true" /><select idref="V-248647" selected="true" /><select idref="V-248648" selected="true" /><select idref="V-248649" selected="true" /><select idref="V-248650" selected="true" /><select idref="V-248651" selected="true" /><select idref="V-248652" selected="true" /><select idref="V-248653" selected="true" /><select idref="V-248654" selected="true" /><select idref="V-248655" selected="true" /><select idref="V-248656" selected="true" /><select idref="V-248657" selected="true" /><select idref="V-248658" selected="true" /><select idref="V-248659" selected="true" /><select idref="V-248660" selected="true" /><select idref="V-248661" selected="true" /><select idref="V-248662" selected="true" /><select idref="V-248663" selected="true" /><select idref="V-248664" selected="true" /><select idref="V-248665" selected="true" /><select idref="V-248666" selected="true" /><select idref="V-248667" selected="true" /><select idref="V-248668" selected="true" /><select idref="V-248669" selected="true" /><select idref="V-248670" selected="true" /><select idref="V-248671" selected="true" /><select idref="V-248672" selected="true" /><select idref="V-248673" selected="true" /><select idref="V-248678" selected="true" /><select idref="V-248679" selected="true" /><select idref="V-248680" selected="true" /><select idref="V-248682" selected="true" /><select idref="V-248683" selected="true" /><select idref="V-248684" selected="true" /><select idref="V-248685" selected="true" /><select idref="V-248686" selected="true" /><select idref="V-248687" selected="true" /><select idref="V-248688" selected="true" /><select idref="V-248689" selected="true" /><select idref="V-248690" selected="true" /><select idref="V-248691" selected="true" /><select idref="V-248692" selected="true" /><select idref="V-248693" selected="true" /><select idref="V-248694" selected="true" /><select idref="V-248695" selected="true" /><select idref="V-248696" selected="true" /><select idref="V-248697" selected="true" /><select idref="V-248699" selected="true" /><select idref="V-248700" selected="true" /><select idref="V-248701" selected="true" /><select idref="V-248702" selected="true" /><select idref="V-248703" selected="true" /><select idref="V-248704" selected="true" /><select idref="V-248705" selected="true" /><select idref="V-248706" selected="true" /><select idref="V-248707" selected="true" /><select idref="V-248708" selected="true" /><select idref="V-248709" selected="true" /><select idref="V-248710" selected="true" /><select idref="V-248711" selected="true" /><select idref="V-248712" selected="true" /><select idref="V-248713" selected="true" /><select idref="V-248714" selected="true" /><select idref="V-248715" selected="true" /><select idref="V-248716" selected="true" /><select idref="V-248718" selected="true" /><select idref="V-248719" selected="true" /><select idref="V-248720" selected="true" /><select idref="V-248721" selected="true" /><select idref="V-248722" selected="true" /><select idref="V-248723" selected="true" /><select idref="V-248724" selected="true" /><select idref="V-248725" selected="true" /><select idref="V-248726" selected="true" /><select idref="V-248728" selected="true" /><select idref="V-248729" selected="true" /><select idref="V-248730" selected="true" /><select idref="V-248731" selected="true" /><select idref="V-248732" selected="true" /><select idref="V-248733" selected="true" /><select idref="V-248734" selected="true" /><select idref="V-248735" selected="true" /><select idref="V-248736" selected="true" /><select idref="V-248737" selected="true" /><select idref="V-248738" selected="true" /><select idref="V-248739" selected="true" /><select idref="V-248740" selected="true" /><select idref="V-248741" selected="true" /><select idref="V-248742" selected="true" /><select idref="V-248743" selected="true" /><select idref="V-248744" selected="true" /><select idref="V-248745" selected="true" /><select idref="V-248746" selected="true" /><select idref="V-248747" selected="true" /><select idref="V-248748" selected="true" /><select idref="V-248753" selected="true" /><select idref="V-248754" selected="true" /><select idref="V-248756" selected="true" /><select idref="V-248757" selected="true" /><select idref="V-248758" selected="true" /><select idref="V-248759" selected="true" /><select idref="V-248760" selected="true" /><select idref="V-248761" selected="true" /><select idref="V-248762" selected="true" /><select idref="V-248763" selected="true" /><select idref="V-248764" selected="true" /><select idref="V-248765" selected="true" /><select idref="V-248766" selected="true" /><select idref="V-248767" selected="true" /><select idref="V-248768" selected="true" /><select idref="V-248769" selected="true" /><select idref="V-248770" selected="true" /><select idref="V-248771" selected="true" /><select idref="V-248772" selected="true" /><select idref="V-248773" selected="true" /><select idref="V-248774" selected="true" /><select idref="V-248779" selected="true" /><select idref="V-248781" selected="true" /><select idref="V-248782" selected="true" /><select idref="V-248783" selected="true" /><select idref="V-248784" selected="true" /><select idref="V-248790" selected="true" /><select idref="V-248791" selected="true" /><select idref="V-248797" selected="true" /><select idref="V-248798" selected="true" /><select idref="V-248799" selected="true" /><select idref="V-248800" selected="true" /><select idref="V-248801" selected="true" /><select idref="V-248802" selected="true" /><select idref="V-248803" selected="true" /><select idref="V-248804" selected="true" /><select idref="V-248805" selected="true" /><select idref="V-248806" selected="true" /><select idref="V-248807" selected="true" /><select idref="V-248808" selected="true" /><select idref="V-248809" selected="true" /><select idref="V-248810" selected="true" /><select idref="V-248811" selected="true" /><select idref="V-248812" selected="true" /><select idref="V-248813" selected="true" /><select idref="V-248814" selected="true" /><select idref="V-248815" selected="true" /><select idref="V-248816" selected="true" /><select idref="V-248817" selected="true" /><select idref="V-248818" selected="true" /><select idref="V-248819" selected="true" /><select idref="V-248820" selected="true" /><select idref="V-248821" selected="true" /><select idref="V-248822" selected="true" /><select idref="V-248823" selected="true" /><select idref="V-248824" selected="true" /><select idref="V-248825" selected="true" /><select idref="V-248826" selected="true" /><select idref="V-248827" selected="true" /><select idref="V-248828" selected="true" /><select idref="V-248829" selected="true" /><select idref="V-248830" selected="true" /><select idref="V-248831" selected="true" /><select idref="V-248832" selected="true" /><select idref="V-248833" selected="true" /><select idref="V-248834" selected="true" /><select idref="V-248835" selected="true" /><select idref="V-248836" selected="true" /><select idref="V-248837" selected="true" /><select idref="V-248839" selected="true" /><select idref="V-248840" selected="true" /><select idref="V-248841" selected="true" /><select idref="V-248842" selected="true" /><select idref="V-248843" selected="true" /><select idref="V-248844" selected="true" /><select idref="V-248845" selected="true" /><select idref="V-248846" selected="true" /><select idref="V-248847" selected="true" /><select idref="V-248848" selected="true" /><select idref="V-248849" selected="true" /><select idref="V-248850" selected="true" /><select idref="V-248851" selected="true" /><select idref="V-248852" selected="true" /><select idref="V-248853" selected="true" /><select idref="V-248854" selected="true" /><select idref="V-248855" selected="true" /><select idref="V-248856" selected="true" /><select idref="V-248857" selected="true" /><select idref="V-248858" selected="true" /><select idref="V-248859" selected="true" /><select idref="V-248860" selected="true" /><select idref="V-248861" selected="true" /><select idref="V-248862" selected="true" /><select idref="V-248863" selected="true" /><select idref="V-248864" selected="true" /><select idref="V-248865" selected="true" /><select idref="V-248866" selected="true" /><select idref="V-248867" selected="true" /><select idref="V-248868" selected="true" /><select idref="V-248869" selected="true" /><select idref="V-248870" selected="true" /><select idref="V-248871" selected="true" /><select idref="V-248872" selected="true" /><select idref="V-248873" selected="true" /><select idref="V-248874" selected="true" /><select idref="V-248875" selected="true" /><select idref="V-248876" selected="true" /><select idref="V-248877" selected="true" /><select idref="V-248878" selected="true" /><select idref="V-248879" selected="true" /><select idref="V-248880" selected="true" /><select idref="V-248881" selected="true" /><select idref="V-248882" selected="true" /><select idref="V-248883" selected="true" /><select idref="V-248884" selected="true" /><select idref="V-248885" selected="true" /><select idref="V-248886" selected="true" /><select idref="V-248887" selected="true" /><select idref="V-248888" selected="true" /><select idref="V-248889" selected="true" /><select idref="V-248890" selected="true" /><select idref="V-248891" selected="true" /><select idref="V-248892" selected="true" /><select idref="V-248893" selected="true" /><select idref="V-248894" selected="true" /><select idref="V-248895" selected="true" /><select idref="V-248896" selected="true" /><select idref="V-248897" selected="true" /><select idref="V-248898" selected="true" /><select idref="V-248899" selected="true" /><select idref="V-248900" selected="true" /><select idref="V-248901" selected="true" /><select idref="V-248902" selected="true" /><select idref="V-248903" selected="true" /><select idref="V-248904" selected="true" /><select idref="V-248905" selected="true" /><select idref="V-248906" selected="true" /><select idref="V-248907" selected="true" /><select idref="V-252650" selected="true" /><select idref="V-252651" selected="true" /><select idref="V-252652" selected="true" /><select idref="V-252653" selected="true" /><select idref="V-252654" selected="true" /><select idref="V-252655" selected="true" /><select idref="V-252656" selected="true" /><select idref="V-252657" selected="true" /><select idref="V-252658" selected="true" /><select idref="V-252659" selected="true" /><select idref="V-252660" selected="true" /><select idref="V-252662" selected="true" /><select idref="V-252663" selected="true" /><select idref="V-255898" selected="true" /><select idref="V-256978" selected="true" /><select idref="V-256979" selected="true" /><select idref="V-257259" selected="true" /><select idref="V-274876" selected="true" /><select idref="V-279934" selected="true" /></Profile><Profile id="MAC-2_Public"><title>II - Mission Support Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-248519" selected="true" /><select idref="V-248520" selected="true" /><select idref="V-248521" selected="true" /><select idref="V-248523" selected="true" /><select idref="V-248524" selected="true" /><select idref="V-248525" selected="true" /><select idref="V-248526" selected="true" /><select idref="V-248527" selected="true" /><select idref="V-248528" selected="true" /><select idref="V-248529" selected="true" /><select idref="V-248530" selected="true" /><select idref="V-248531" selected="true" /><select idref="V-248532" selected="true" /><select idref="V-248533" selected="true" /><select idref="V-248534" selected="true" /><select idref="V-248535" selected="true" /><select idref="V-248537" selected="true" /><select idref="V-248538" selected="true" /><select idref="V-248539" selected="true" /><select idref="V-248540" selected="true" /><select idref="V-248541" selected="true" /><select idref="V-248542" selected="true" /><select idref="V-248543" selected="true" /><select idref="V-248544" selected="true" /><select idref="V-248545" selected="true" /><select idref="V-248546" selected="true" /><select idref="V-248547" selected="true" /><select idref="V-248548" selected="true" /><select idref="V-248549" selected="true" /><select idref="V-248551" selected="true" /><select idref="V-248552" selected="true" /><select idref="V-248553" selected="true" /><select idref="V-248554" selected="true" /><select idref="V-248555" selected="true" /><select idref="V-248556" selected="true" /><select idref="V-248557" selected="true" /><select idref="V-248558" selected="true" /><select idref="V-248559" selected="true" /><select idref="V-248560" selected="true" /><select idref="V-248561" selected="true" /><select idref="V-248562" selected="true" /><select idref="V-248563" selected="true" /><select idref="V-248564" selected="true" /><select idref="V-248565" selected="true" /><select idref="V-248566" selected="true" /><select idref="V-248567" selected="true" /><select idref="V-248568" selected="true" /><select idref="V-248569" selected="true" /><select idref="V-248570" selected="true" /><select idref="V-248571" selected="true" /><select idref="V-248572" selected="true" /><select idref="V-248573" selected="true" /><select idref="V-248574" selected="true" /><select idref="V-248575" selected="true" /><select idref="V-248576" selected="true" /><select idref="V-248577" selected="true" /><select idref="V-248578" selected="true" /><select idref="V-248579" selected="true" /><select idref="V-248580" selected="true" /><select idref="V-248581" selected="true" /><select idref="V-248582" selected="true" /><select idref="V-248583" selected="true" /><select idref="V-248584" selected="true" /><select idref="V-248585" selected="true" /><select idref="V-248586" selected="true" /><select idref="V-248587" selected="true" /><select idref="V-248588" selected="true" /><select idref="V-248589" selected="true" /><select idref="V-248590" selected="true" /><select idref="V-248591" selected="true" /><select idref="V-248592" selected="true" /><select idref="V-248593" selected="true" /><select idref="V-248594" selected="true" /><select idref="V-248595" selected="true" /><select idref="V-248596" selected="true" /><select idref="V-248597" selected="true" /><select idref="V-248598" selected="true" /><select idref="V-248599" selected="true" /><select idref="V-248600" selected="true" /><select idref="V-248601" selected="true" /><select idref="V-248602" selected="true" /><select idref="V-248603" selected="true" /><select idref="V-248605" selected="true" /><select idref="V-248606" selected="true" /><select idref="V-248607" selected="true" /><select idref="V-248608" selected="true" /><select idref="V-248609" selected="true" /><select idref="V-248610" selected="true" /><select idref="V-248611" selected="true" /><select idref="V-248612" selected="true" /><select idref="V-248613" selected="true" /><select idref="V-248615" selected="true" /><select idref="V-248616" selected="true" /><select idref="V-248617" selected="true" /><select idref="V-248618" selected="true" /><select idref="V-248619" selected="true" /><select idref="V-248620" selected="true" /><select idref="V-248621" selected="true" /><select idref="V-248622" selected="true" /><select idref="V-248623" selected="true" /><select idref="V-248624" selected="true" /><select idref="V-248625" selected="true" /><select idref="V-248626" selected="true" /><select idref="V-248628" selected="true" /><select idref="V-248629" selected="true" /><select idref="V-248630" selected="true" /><select idref="V-248631" selected="true" /><select idref="V-248632" selected="true" /><select idref="V-248633" selected="true" /><select idref="V-248634" selected="true" /><select idref="V-248635" selected="true" /><select idref="V-248636" selected="true" /><select idref="V-248637" selected="true" /><select idref="V-248638" selected="true" /><select idref="V-248639" selected="true" /><select idref="V-248640" selected="true" /><select idref="V-248641" selected="true" /><select idref="V-248642" selected="true" /><select idref="V-248643" selected="true" /><select idref="V-248644" selected="true" /><select idref="V-248645" selected="true" /><select idref="V-248646" selected="true" /><select idref="V-248647" selected="true" /><select idref="V-248648" selected="true" /><select idref="V-248649" selected="true" /><select idref="V-248650" selected="true" /><select idref="V-248651" selected="true" /><select idref="V-248652" selected="true" /><select idref="V-248653" selected="true" /><select idref="V-248654" selected="true" /><select idref="V-248655" selected="true" /><select idref="V-248656" selected="true" /><select idref="V-248657" selected="true" /><select idref="V-248658" selected="true" /><select idref="V-248659" selected="true" /><select idref="V-248660" selected="true" /><select idref="V-248661" selected="true" /><select idref="V-248662" selected="true" /><select idref="V-248663" selected="true" /><select idref="V-248664" selected="true" /><select idref="V-248665" selected="true" /><select idref="V-248666" selected="true" /><select idref="V-248667" selected="true" /><select idref="V-248668" selected="true" /><select idref="V-248669" selected="true" /><select idref="V-248670" selected="true" /><select idref="V-248671" selected="true" /><select idref="V-248672" selected="true" /><select idref="V-248673" selected="true" /><select idref="V-248678" selected="true" /><select idref="V-248679" selected="true" /><select idref="V-248680" selected="true" /><select idref="V-248682" selected="true" /><select idref="V-248683" selected="true" /><select idref="V-248684" selected="true" /><select idref="V-248685" selected="true" /><select idref="V-248686" selected="true" /><select idref="V-248687" selected="true" /><select idref="V-248688" selected="true" /><select idref="V-248689" selected="true" /><select idref="V-248690" selected="true" /><select idref="V-248691" selected="true" /><select idref="V-248692" selected="true" /><select idref="V-248693" selected="true" /><select idref="V-248694" selected="true" /><select idref="V-248695" selected="true" /><select idref="V-248696" selected="true" /><select idref="V-248697" selected="true" /><select idref="V-248699" selected="true" /><select idref="V-248700" selected="true" /><select idref="V-248701" selected="true" /><select idref="V-248702" selected="true" /><select idref="V-248703" selected="true" /><select idref="V-248704" selected="true" /><select idref="V-248705" selected="true" /><select idref="V-248706" selected="true" /><select idref="V-248707" selected="true" /><select idref="V-248708" selected="true" /><select idref="V-248709" selected="true" /><select idref="V-248710" selected="true" /><select idref="V-248711" selected="true" /><select idref="V-248712" selected="true" /><select idref="V-248713" selected="true" /><select idref="V-248714" selected="true" /><select idref="V-248715" selected="true" /><select idref="V-248716" selected="true" /><select idref="V-248718" selected="true" /><select idref="V-248719" selected="true" /><select idref="V-248720" selected="true" /><select idref="V-248721" selected="true" /><select idref="V-248722" selected="true" /><select idref="V-248723" selected="true" /><select idref="V-248724" selected="true" /><select idref="V-248725" selected="true" /><select idref="V-248726" selected="true" /><select idref="V-248728" selected="true" /><select idref="V-248729" selected="true" /><select idref="V-248730" selected="true" /><select idref="V-248731" selected="true" /><select idref="V-248732" selected="true" /><select idref="V-248733" selected="true" /><select idref="V-248734" selected="true" /><select idref="V-248735" selected="true" /><select idref="V-248736" selected="true" /><select idref="V-248737" selected="true" /><select idref="V-248738" selected="true" /><select idref="V-248739" selected="true" /><select idref="V-248740" selected="true" /><select idref="V-248741" selected="true" /><select idref="V-248742" selected="true" /><select idref="V-248743" selected="true" /><select idref="V-248744" selected="true" /><select idref="V-248745" selected="true" /><select idref="V-248746" selected="true" /><select idref="V-248747" selected="true" /><select idref="V-248748" selected="true" /><select idref="V-248753" selected="true" /><select idref="V-248754" selected="true" /><select idref="V-248756" selected="true" /><select idref="V-248757" selected="true" /><select idref="V-248758" selected="true" /><select idref="V-248759" selected="true" /><select idref="V-248760" selected="true" /><select idref="V-248761" selected="true" /><select idref="V-248762" selected="true" /><select idref="V-248763" selected="true" /><select idref="V-248764" selected="true" /><select idref="V-248765" selected="true" /><select idref="V-248766" selected="true" /><select idref="V-248767" selected="true" /><select idref="V-248768" selected="true" /><select idref="V-248769" selected="true" /><select idref="V-248770" selected="true" /><select idref="V-248771" selected="true" /><select idref="V-248772" selected="true" /><select idref="V-248773" selected="true" /><select idref="V-248774" selected="true" /><select idref="V-248779" selected="true" /><select idref="V-248781" selected="true" /><select idref="V-248782" selected="true" /><select idref="V-248783" selected="true" /><select idref="V-248784" selected="true" /><select idref="V-248790" selected="true" /><select idref="V-248791" selected="true" /><select idref="V-248797" selected="true" /><select idref="V-248798" selected="true" /><select idref="V-248799" selected="true" /><select idref="V-248800" selected="true" /><select idref="V-248801" selected="true" /><select idref="V-248802" selected="true" /><select idref="V-248803" selected="true" /><select idref="V-248804" selected="true" /><select idref="V-248805" selected="true" /><select idref="V-248806" selected="true" /><select idref="V-248807" selected="true" /><select idref="V-248808" selected="true" /><select idref="V-248809" selected="true" /><select idref="V-248810" selected="true" /><select idref="V-248811" selected="true" /><select idref="V-248812" selected="true" /><select idref="V-248813" selected="true" /><select idref="V-248814" selected="true" /><select idref="V-248815" selected="true" /><select idref="V-248816" selected="true" /><select idref="V-248817" selected="true" /><select idref="V-248818" selected="true" /><select idref="V-248819" selected="true" /><select idref="V-248820" selected="true" /><select idref="V-248821" selected="true" /><select idref="V-248822" selected="true" /><select idref="V-248823" selected="true" /><select idref="V-248824" selected="true" /><select idref="V-248825" selected="true" /><select idref="V-248826" selected="true" /><select idref="V-248827" selected="true" /><select idref="V-248828" selected="true" /><select idref="V-248829" selected="true" /><select idref="V-248830" selected="true" /><select idref="V-248831" selected="true" /><select idref="V-248832" selected="true" /><select idref="V-248833" selected="true" /><select idref="V-248834" selected="true" /><select idref="V-248835" selected="true" /><select idref="V-248836" selected="true" /><select idref="V-248837" selected="true" /><select idref="V-248839" selected="true" /><select idref="V-248840" selected="true" /><select idref="V-248841" selected="true" /><select idref="V-248842" selected="true" /><select idref="V-248843" selected="true" /><select idref="V-248844" selected="true" /><select idref="V-248845" selected="true" /><select idref="V-248846" selected="true" /><select idref="V-248847" selected="true" /><select idref="V-248848" selected="true" /><select idref="V-248849" selected="true" /><select idref="V-248850" selected="true" /><select idref="V-248851" selected="true" /><select idref="V-248852" selected="true" /><select idref="V-248853" selected="true" /><select idref="V-248854" selected="true" /><select idref="V-248855" selected="true" /><select idref="V-248856" selected="true" /><select idref="V-248857" selected="true" /><select idref="V-248858" selected="true" /><select idref="V-248859" selected="true" /><select idref="V-248860" selected="true" /><select idref="V-248861" selected="true" /><select idref="V-248862" selected="true" /><select idref="V-248863" selected="true" /><select idref="V-248864" selected="true" /><select idref="V-248865" selected="true" /><select idref="V-248866" selected="true" /><select idref="V-248867" selected="true" /><select idref="V-248868" selected="true" /><select idref="V-248869" selected="true" /><select idref="V-248870" selected="true" /><select idref="V-248871" selected="true" /><select idref="V-248872" selected="true" /><select idref="V-248873" selected="true" /><select idref="V-248874" selected="true" /><select idref="V-248875" selected="true" /><select idref="V-248876" selected="true" /><select idref="V-248877" selected="true" /><select idref="V-248878" selected="true" /><select idref="V-248879" selected="true" /><select idref="V-248880" selected="true" /><select idref="V-248881" selected="true" /><select idref="V-248882" selected="true" /><select idref="V-248883" selected="true" /><select idref="V-248884" selected="true" /><select idref="V-248885" selected="true" /><select idref="V-248886" selected="true" /><select idref="V-248887" selected="true" /><select idref="V-248888" selected="true" /><select idref="V-248889" selected="true" /><select idref="V-248890" selected="true" /><select idref="V-248891" selected="true" /><select idref="V-248892" selected="true" /><select idref="V-248893" selected="true" /><select idref="V-248894" selected="true" /><select idref="V-248895" selected="true" /><select idref="V-248896" selected="true" /><select idref="V-248897" selected="true" /><select idref="V-248898" selected="true" /><select idref="V-248899" selected="true" /><select idref="V-248900" selected="true" /><select idref="V-248901" selected="true" /><select idref="V-248902" selected="true" /><select idref="V-248903" selected="true" /><select idref="V-248904" selected="true" /><select idref="V-248905" selected="true" /><select idref="V-248906" selected="true" /><select idref="V-248907" selected="true" /><select idref="V-252650" selected="true" /><select idref="V-252651" selected="true" /><select idref="V-252652" selected="true" /><select idref="V-252653" selected="true" /><select idref="V-252654" selected="true" /><select idref="V-252655" selected="true" /><select idref="V-252656" selected="true" /><select idref="V-252657" selected="true" /><select idref="V-252658" selected="true" /><select idref="V-252659" selected="true" /><select idref="V-252660" selected="true" /><select idref="V-252662" selected="true" /><select idref="V-252663" selected="true" /><select idref="V-255898" selected="true" /><select idref="V-256978" selected="true" /><select idref="V-256979" selected="true" /><select idref="V-257259" selected="true" /><select idref="V-274876" selected="true" /><select idref="V-279934" selected="true" /></Profile><Profile id="MAC-2_Sensitive"><title>II - Mission Support Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-248519" selected="true" /><select idref="V-248520" selected="true" /><select idref="V-248521" selected="true" /><select idref="V-248523" selected="true" /><select idref="V-248524" selected="true" /><select idref="V-248525" selected="true" /><select idref="V-248526" selected="true" /><select idref="V-248527" selected="true" /><select idref="V-248528" selected="true" /><select idref="V-248529" selected="true" /><select idref="V-248530" selected="true" /><select idref="V-248531" selected="true" /><select idref="V-248532" selected="true" /><select idref="V-248533" selected="true" /><select idref="V-248534" selected="true" /><select idref="V-248535" selected="true" /><select idref="V-248537" selected="true" /><select idref="V-248538" selected="true" /><select idref="V-248539" selected="true" /><select idref="V-248540" selected="true" /><select idref="V-248541" selected="true" /><select idref="V-248542" selected="true" /><select idref="V-248543" selected="true" /><select idref="V-248544" selected="true" /><select idref="V-248545" selected="true" /><select idref="V-248546" selected="true" /><select idref="V-248547" selected="true" /><select idref="V-248548" selected="true" /><select idref="V-248549" selected="true" /><select idref="V-248551" selected="true" /><select idref="V-248552" selected="true" /><select idref="V-248553" selected="true" /><select idref="V-248554" selected="true" /><select idref="V-248555" selected="true" /><select idref="V-248556" selected="true" /><select idref="V-248557" selected="true" /><select idref="V-248558" selected="true" /><select idref="V-248559" selected="true" /><select idref="V-248560" selected="true" /><select idref="V-248561" selected="true" /><select idref="V-248562" selected="true" /><select idref="V-248563" selected="true" /><select idref="V-248564" selected="true" /><select idref="V-248565" selected="true" /><select idref="V-248566" selected="true" /><select idref="V-248567" selected="true" /><select idref="V-248568" selected="true" /><select idref="V-248569" selected="true" /><select idref="V-248570" selected="true" /><select idref="V-248571" selected="true" /><select idref="V-248572" selected="true" /><select idref="V-248573" selected="true" /><select idref="V-248574" selected="true" /><select idref="V-248575" selected="true" /><select idref="V-248576" selected="true" /><select idref="V-248577" selected="true" /><select idref="V-248578" selected="true" /><select idref="V-248579" selected="true" /><select idref="V-248580" selected="true" /><select idref="V-248581" selected="true" /><select idref="V-248582" selected="true" /><select idref="V-248583" selected="true" /><select idref="V-248584" selected="true" /><select idref="V-248585" selected="true" /><select idref="V-248586" selected="true" /><select idref="V-248587" selected="true" /><select idref="V-248588" selected="true" /><select idref="V-248589" selected="true" /><select idref="V-248590" selected="true" /><select idref="V-248591" selected="true" /><select idref="V-248592" selected="true" /><select idref="V-248593" selected="true" /><select idref="V-248594" selected="true" /><select idref="V-248595" selected="true" /><select idref="V-248596" selected="true" /><select idref="V-248597" selected="true" /><select idref="V-248598" selected="true" /><select idref="V-248599" selected="true" /><select idref="V-248600" selected="true" /><select idref="V-248601" selected="true" /><select idref="V-248602" selected="true" /><select idref="V-248603" selected="true" /><select idref="V-248605" selected="true" /><select idref="V-248606" selected="true" /><select idref="V-248607" selected="true" /><select idref="V-248608" selected="true" /><select idref="V-248609" selected="true" /><select idref="V-248610" selected="true" /><select idref="V-248611" selected="true" /><select idref="V-248612" selected="true" /><select idref="V-248613" selected="true" /><select idref="V-248615" selected="true" /><select idref="V-248616" selected="true" /><select idref="V-248617" selected="true" /><select idref="V-248618" selected="true" /><select idref="V-248619" selected="true" /><select idref="V-248620" selected="true" /><select idref="V-248621" selected="true" /><select idref="V-248622" selected="true" /><select idref="V-248623" selected="true" /><select idref="V-248624" selected="true" /><select idref="V-248625" selected="true" /><select idref="V-248626" selected="true" /><select idref="V-248628" selected="true" /><select idref="V-248629" selected="true" /><select idref="V-248630" selected="true" /><select idref="V-248631" selected="true" /><select idref="V-248632" selected="true" /><select idref="V-248633" selected="true" /><select idref="V-248634" selected="true" /><select idref="V-248635" selected="true" /><select idref="V-248636" selected="true" /><select idref="V-248637" selected="true" /><select idref="V-248638" selected="true" /><select idref="V-248639" selected="true" /><select idref="V-248640" selected="true" /><select idref="V-248641" selected="true" /><select idref="V-248642" selected="true" /><select idref="V-248643" selected="true" /><select idref="V-248644" selected="true" /><select idref="V-248645" selected="true" /><select idref="V-248646" selected="true" /><select idref="V-248647" selected="true" /><select idref="V-248648" selected="true" /><select idref="V-248649" selected="true" /><select idref="V-248650" selected="true" /><select idref="V-248651" selected="true" /><select idref="V-248652" selected="true" /><select idref="V-248653" selected="true" /><select idref="V-248654" selected="true" /><select idref="V-248655" selected="true" /><select idref="V-248656" selected="true" /><select idref="V-248657" selected="true" /><select idref="V-248658" selected="true" /><select idref="V-248659" selected="true" /><select idref="V-248660" selected="true" /><select idref="V-248661" selected="true" /><select idref="V-248662" selected="true" /><select idref="V-248663" selected="true" /><select idref="V-248664" selected="true" /><select idref="V-248665" selected="true" /><select idref="V-248666" selected="true" /><select idref="V-248667" selected="true" /><select idref="V-248668" selected="true" /><select idref="V-248669" selected="true" /><select idref="V-248670" selected="true" /><select idref="V-248671" selected="true" /><select idref="V-248672" selected="true" /><select idref="V-248673" selected="true" /><select idref="V-248678" selected="true" /><select idref="V-248679" selected="true" /><select idref="V-248680" selected="true" /><select idref="V-248682" selected="true" /><select idref="V-248683" selected="true" /><select idref="V-248684" selected="true" /><select idref="V-248685" selected="true" /><select idref="V-248686" selected="true" /><select idref="V-248687" selected="true" /><select idref="V-248688" selected="true" /><select idref="V-248689" selected="true" /><select idref="V-248690" selected="true" /><select idref="V-248691" selected="true" /><select idref="V-248692" selected="true" /><select idref="V-248693" selected="true" /><select idref="V-248694" selected="true" /><select idref="V-248695" selected="true" /><select idref="V-248696" selected="true" /><select idref="V-248697" selected="true" /><select idref="V-248699" selected="true" /><select idref="V-248700" selected="true" /><select idref="V-248701" selected="true" /><select idref="V-248702" selected="true" /><select idref="V-248703" selected="true" /><select idref="V-248704" selected="true" /><select idref="V-248705" selected="true" /><select idref="V-248706" selected="true" /><select idref="V-248707" selected="true" /><select idref="V-248708" selected="true" /><select idref="V-248709" selected="true" /><select idref="V-248710" selected="true" /><select idref="V-248711" selected="true" /><select idref="V-248712" selected="true" /><select idref="V-248713" selected="true" /><select idref="V-248714" selected="true" /><select idref="V-248715" selected="true" /><select idref="V-248716" selected="true" /><select idref="V-248718" selected="true" /><select idref="V-248719" selected="true" /><select idref="V-248720" selected="true" /><select idref="V-248721" selected="true" /><select idref="V-248722" selected="true" /><select idref="V-248723" selected="true" /><select idref="V-248724" selected="true" /><select idref="V-248725" selected="true" /><select idref="V-248726" selected="true" /><select idref="V-248728" selected="true" /><select idref="V-248729" selected="true" /><select idref="V-248730" selected="true" /><select idref="V-248731" selected="true" /><select idref="V-248732" selected="true" /><select idref="V-248733" selected="true" /><select idref="V-248734" selected="true" /><select idref="V-248735" selected="true" /><select idref="V-248736" selected="true" /><select idref="V-248737" selected="true" /><select idref="V-248738" selected="true" /><select idref="V-248739" selected="true" /><select idref="V-248740" selected="true" /><select idref="V-248741" selected="true" /><select idref="V-248742" selected="true" /><select idref="V-248743" selected="true" /><select idref="V-248744" selected="true" /><select idref="V-248745" selected="true" /><select idref="V-248746" selected="true" /><select idref="V-248747" selected="true" /><select idref="V-248748" selected="true" /><select idref="V-248753" selected="true" /><select idref="V-248754" selected="true" /><select idref="V-248756" selected="true" /><select idref="V-248757" selected="true" /><select idref="V-248758" selected="true" /><select idref="V-248759" selected="true" /><select idref="V-248760" selected="true" /><select idref="V-248761" selected="true" /><select idref="V-248762" selected="true" /><select idref="V-248763" selected="true" /><select idref="V-248764" selected="true" /><select idref="V-248765" selected="true" /><select idref="V-248766" selected="true" /><select idref="V-248767" selected="true" /><select idref="V-248768" selected="true" /><select idref="V-248769" selected="true" /><select idref="V-248770" selected="true" /><select idref="V-248771" selected="true" /><select idref="V-248772" selected="true" /><select idref="V-248773" selected="true" /><select idref="V-248774" selected="true" /><select idref="V-248779" selected="true" /><select idref="V-248781" selected="true" /><select idref="V-248782" selected="true" /><select idref="V-248783" selected="true" /><select idref="V-248784" selected="true" /><select idref="V-248790" selected="true" /><select idref="V-248791" selected="true" /><select idref="V-248797" selected="true" /><select idref="V-248798" selected="true" /><select idref="V-248799" selected="true" /><select idref="V-248800" selected="true" /><select idref="V-248801" selected="true" /><select idref="V-248802" selected="true" /><select idref="V-248803" selected="true" /><select idref="V-248804" selected="true" /><select idref="V-248805" selected="true" /><select idref="V-248806" selected="true" /><select idref="V-248807" selected="true" /><select idref="V-248808" selected="true" /><select idref="V-248809" selected="true" /><select idref="V-248810" selected="true" /><select idref="V-248811" selected="true" /><select idref="V-248812" selected="true" /><select idref="V-248813" selected="true" /><select idref="V-248814" selected="true" /><select idref="V-248815" selected="true" /><select idref="V-248816" selected="true" /><select idref="V-248817" selected="true" /><select idref="V-248818" selected="true" /><select idref="V-248819" selected="true" /><select idref="V-248820" selected="true" /><select idref="V-248821" selected="true" /><select idref="V-248822" selected="true" /><select idref="V-248823" selected="true" /><select idref="V-248824" selected="true" /><select idref="V-248825" selected="true" /><select idref="V-248826" selected="true" /><select idref="V-248827" selected="true" /><select idref="V-248828" selected="true" /><select idref="V-248829" selected="true" /><select idref="V-248830" selected="true" /><select idref="V-248831" selected="true" /><select idref="V-248832" selected="true" /><select idref="V-248833" selected="true" /><select idref="V-248834" selected="true" /><select idref="V-248835" selected="true" /><select idref="V-248836" selected="true" /><select idref="V-248837" selected="true" /><select idref="V-248839" selected="true" /><select idref="V-248840" selected="true" /><select idref="V-248841" selected="true" /><select idref="V-248842" selected="true" /><select idref="V-248843" selected="true" /><select idref="V-248844" selected="true" /><select idref="V-248845" selected="true" /><select idref="V-248846" selected="true" /><select idref="V-248847" selected="true" /><select idref="V-248848" selected="true" /><select idref="V-248849" selected="true" /><select idref="V-248850" selected="true" /><select idref="V-248851" selected="true" /><select idref="V-248852" selected="true" /><select idref="V-248853" selected="true" /><select idref="V-248854" selected="true" /><select idref="V-248855" selected="true" /><select idref="V-248856" selected="true" /><select idref="V-248857" selected="true" /><select idref="V-248858" selected="true" /><select idref="V-248859" selected="true" /><select idref="V-248860" selected="true" /><select idref="V-248861" selected="true" /><select idref="V-248862" selected="true" /><select idref="V-248863" selected="true" /><select idref="V-248864" selected="true" /><select idref="V-248865" selected="true" /><select idref="V-248866" selected="true" /><select idref="V-248867" selected="true" /><select idref="V-248868" selected="true" /><select idref="V-248869" selected="true" /><select idref="V-248870" selected="true" /><select idref="V-248871" selected="true" /><select idref="V-248872" selected="true" /><select idref="V-248873" selected="true" /><select idref="V-248874" selected="true" /><select idref="V-248875" selected="true" /><select idref="V-248876" selected="true" /><select idref="V-248877" selected="true" /><select idref="V-248878" selected="true" /><select idref="V-248879" selected="true" /><select idref="V-248880" selected="true" /><select idref="V-248881" selected="true" /><select idref="V-248882" selected="true" /><select idref="V-248883" selected="true" /><select idref="V-248884" selected="true" /><select idref="V-248885" selected="true" /><select idref="V-248886" selected="true" /><select idref="V-248887" selected="true" /><select idref="V-248888" selected="true" /><select idref="V-248889" selected="true" /><select idref="V-248890" selected="true" /><select idref="V-248891" selected="true" /><select idref="V-248892" selected="true" /><select idref="V-248893" selected="true" /><select idref="V-248894" selected="true" /><select idref="V-248895" selected="true" /><select idref="V-248896" selected="true" /><select idref="V-248897" selected="true" /><select idref="V-248898" selected="true" /><select idref="V-248899" selected="true" /><select idref="V-248900" selected="true" /><select idref="V-248901" selected="true" /><select idref="V-248902" selected="true" /><select idref="V-248903" selected="true" /><select idref="V-248904" selected="true" /><select idref="V-248905" selected="true" /><select idref="V-248906" selected="true" /><select idref="V-248907" selected="true" /><select idref="V-252650" selected="true" /><select idref="V-252651" selected="true" /><select idref="V-252652" selected="true" /><select idref="V-252653" selected="true" /><select idref="V-252654" selected="true" /><select idref="V-252655" selected="true" /><select idref="V-252656" selected="true" /><select idref="V-252657" selected="true" /><select idref="V-252658" selected="true" /><select idref="V-252659" selected="true" /><select idref="V-252660" selected="true" /><select idref="V-252662" selected="true" /><select idref="V-252663" selected="true" /><select idref="V-255898" selected="true" /><select idref="V-256978" selected="true" /><select idref="V-256979" selected="true" /><select idref="V-257259" selected="true" /><select idref="V-274876" selected="true" /><select idref="V-279934" selected="true" /></Profile><Profile id="MAC-3_Classified"><title>III - Administrative Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-248519" selected="true" /><select idref="V-248520" selected="true" /><select idref="V-248521" selected="true" /><select idref="V-248523" selected="true" /><select idref="V-248524" selected="true" /><select idref="V-248525" selected="true" /><select idref="V-248526" selected="true" /><select idref="V-248527" selected="true" /><select idref="V-248528" selected="true" /><select idref="V-248529" selected="true" /><select idref="V-248530" selected="true" /><select idref="V-248531" selected="true" /><select idref="V-248532" selected="true" /><select idref="V-248533" selected="true" /><select idref="V-248534" selected="true" /><select idref="V-248535" selected="true" /><select idref="V-248537" selected="true" /><select idref="V-248538" selected="true" /><select idref="V-248539" selected="true" /><select idref="V-248540" selected="true" /><select idref="V-248541" selected="true" /><select idref="V-248542" selected="true" /><select idref="V-248543" selected="true" /><select idref="V-248544" selected="true" /><select idref="V-248545" selected="true" /><select idref="V-248546" selected="true" /><select idref="V-248547" selected="true" /><select idref="V-248548" selected="true" /><select idref="V-248549" selected="true" /><select idref="V-248551" selected="true" /><select idref="V-248552" selected="true" /><select idref="V-248553" selected="true" /><select idref="V-248554" selected="true" /><select idref="V-248555" selected="true" /><select idref="V-248556" selected="true" /><select idref="V-248557" selected="true" /><select idref="V-248558" selected="true" /><select idref="V-248559" selected="true" /><select idref="V-248560" selected="true" /><select idref="V-248561" selected="true" /><select idref="V-248562" selected="true" /><select idref="V-248563" selected="true" /><select idref="V-248564" selected="true" /><select idref="V-248565" selected="true" /><select idref="V-248566" selected="true" /><select idref="V-248567" selected="true" /><select idref="V-248568" selected="true" /><select idref="V-248569" selected="true" /><select idref="V-248570" selected="true" /><select idref="V-248571" selected="true" /><select idref="V-248572" selected="true" /><select idref="V-248573" selected="true" /><select idref="V-248574" selected="true" /><select idref="V-248575" selected="true" /><select idref="V-248576" selected="true" /><select idref="V-248577" selected="true" /><select idref="V-248578" selected="true" /><select idref="V-248579" selected="true" /><select idref="V-248580" selected="true" /><select idref="V-248581" selected="true" /><select idref="V-248582" selected="true" /><select idref="V-248583" selected="true" /><select idref="V-248584" selected="true" /><select idref="V-248585" selected="true" /><select idref="V-248586" selected="true" /><select idref="V-248587" selected="true" /><select idref="V-248588" selected="true" /><select idref="V-248589" selected="true" /><select idref="V-248590" selected="true" /><select idref="V-248591" selected="true" /><select idref="V-248592" selected="true" /><select idref="V-248593" selected="true" /><select idref="V-248594" selected="true" /><select idref="V-248595" selected="true" /><select idref="V-248596" selected="true" /><select idref="V-248597" selected="true" /><select idref="V-248598" selected="true" /><select idref="V-248599" selected="true" /><select idref="V-248600" selected="true" /><select idref="V-248601" selected="true" /><select idref="V-248602" selected="true" /><select idref="V-248603" selected="true" /><select idref="V-248605" selected="true" /><select idref="V-248606" selected="true" /><select idref="V-248607" selected="true" /><select idref="V-248608" selected="true" /><select idref="V-248609" selected="true" /><select idref="V-248610" selected="true" /><select idref="V-248611" selected="true" /><select idref="V-248612" selected="true" /><select idref="V-248613" selected="true" /><select idref="V-248615" selected="true" /><select idref="V-248616" selected="true" /><select idref="V-248617" selected="true" /><select idref="V-248618" selected="true" /><select idref="V-248619" selected="true" /><select idref="V-248620" selected="true" /><select idref="V-248621" selected="true" /><select idref="V-248622" selected="true" /><select idref="V-248623" selected="true" /><select idref="V-248624" selected="true" /><select idref="V-248625" selected="true" /><select idref="V-248626" selected="true" /><select idref="V-248628" selected="true" /><select idref="V-248629" selected="true" /><select idref="V-248630" selected="true" /><select idref="V-248631" selected="true" /><select idref="V-248632" selected="true" /><select idref="V-248633" selected="true" /><select idref="V-248634" selected="true" /><select idref="V-248635" selected="true" /><select idref="V-248636" selected="true" /><select idref="V-248637" selected="true" /><select idref="V-248638" selected="true" /><select idref="V-248639" selected="true" /><select idref="V-248640" selected="true" /><select idref="V-248641" selected="true" /><select idref="V-248642" selected="true" /><select idref="V-248643" selected="true" /><select idref="V-248644" selected="true" /><select idref="V-248645" selected="true" /><select idref="V-248646" selected="true" /><select idref="V-248647" selected="true" /><select idref="V-248648" selected="true" /><select idref="V-248649" selected="true" /><select idref="V-248650" selected="true" /><select idref="V-248651" selected="true" /><select idref="V-248652" selected="true" /><select idref="V-248653" selected="true" /><select idref="V-248654" selected="true" /><select idref="V-248655" selected="true" /><select idref="V-248656" selected="true" /><select idref="V-248657" selected="true" /><select idref="V-248658" selected="true" /><select idref="V-248659" selected="true" /><select idref="V-248660" selected="true" /><select idref="V-248661" selected="true" /><select idref="V-248662" selected="true" /><select idref="V-248663" selected="true" /><select idref="V-248664" selected="true" /><select idref="V-248665" selected="true" /><select idref="V-248666" selected="true" /><select idref="V-248667" selected="true" /><select idref="V-248668" selected="true" /><select idref="V-248669" selected="true" /><select idref="V-248670" selected="true" /><select idref="V-248671" selected="true" /><select idref="V-248672" selected="true" /><select idref="V-248673" selected="true" /><select idref="V-248678" selected="true" /><select idref="V-248679" selected="true" /><select idref="V-248680" selected="true" /><select idref="V-248682" selected="true" /><select idref="V-248683" selected="true" /><select idref="V-248684" selected="true" /><select idref="V-248685" selected="true" /><select idref="V-248686" selected="true" /><select idref="V-248687" selected="true" /><select idref="V-248688" selected="true" /><select idref="V-248689" selected="true" /><select idref="V-248690" selected="true" /><select idref="V-248691" selected="true" /><select idref="V-248692" selected="true" /><select idref="V-248693" selected="true" /><select idref="V-248694" selected="true" /><select idref="V-248695" selected="true" /><select idref="V-248696" selected="true" /><select idref="V-248697" selected="true" /><select idref="V-248699" selected="true" /><select idref="V-248700" selected="true" /><select idref="V-248701" selected="true" /><select idref="V-248702" selected="true" /><select idref="V-248703" selected="true" /><select idref="V-248704" selected="true" /><select idref="V-248705" selected="true" /><select idref="V-248706" selected="true" /><select idref="V-248707" selected="true" /><select idref="V-248708" selected="true" /><select idref="V-248709" selected="true" /><select idref="V-248710" selected="true" /><select idref="V-248711" selected="true" /><select idref="V-248712" selected="true" /><select idref="V-248713" selected="true" /><select idref="V-248714" selected="true" /><select idref="V-248715" selected="true" /><select idref="V-248716" selected="true" /><select idref="V-248718" selected="true" /><select idref="V-248719" selected="true" /><select idref="V-248720" selected="true" /><select idref="V-248721" selected="true" /><select idref="V-248722" selected="true" /><select idref="V-248723" selected="true" /><select idref="V-248724" selected="true" /><select idref="V-248725" selected="true" /><select idref="V-248726" selected="true" /><select idref="V-248728" selected="true" /><select idref="V-248729" selected="true" /><select idref="V-248730" selected="true" /><select idref="V-248731" selected="true" /><select idref="V-248732" selected="true" /><select idref="V-248733" selected="true" /><select idref="V-248734" selected="true" /><select idref="V-248735" selected="true" /><select idref="V-248736" selected="true" /><select idref="V-248737" selected="true" /><select idref="V-248738" selected="true" /><select idref="V-248739" selected="true" /><select idref="V-248740" selected="true" /><select idref="V-248741" selected="true" /><select idref="V-248742" selected="true" /><select idref="V-248743" selected="true" /><select idref="V-248744" selected="true" /><select idref="V-248745" selected="true" /><select idref="V-248746" selected="true" /><select idref="V-248747" selected="true" /><select idref="V-248748" selected="true" /><select idref="V-248753" selected="true" /><select idref="V-248754" selected="true" /><select idref="V-248756" selected="true" /><select idref="V-248757" selected="true" /><select idref="V-248758" selected="true" /><select idref="V-248759" selected="true" /><select idref="V-248760" selected="true" /><select idref="V-248761" selected="true" /><select idref="V-248762" selected="true" /><select idref="V-248763" selected="true" /><select idref="V-248764" selected="true" /><select idref="V-248765" selected="true" /><select idref="V-248766" selected="true" /><select idref="V-248767" selected="true" /><select idref="V-248768" selected="true" /><select idref="V-248769" selected="true" /><select idref="V-248770" selected="true" /><select idref="V-248771" selected="true" /><select idref="V-248772" selected="true" /><select idref="V-248773" selected="true" /><select idref="V-248774" selected="true" /><select idref="V-248779" selected="true" /><select idref="V-248781" selected="true" /><select idref="V-248782" selected="true" /><select idref="V-248783" selected="true" /><select idref="V-248784" selected="true" /><select idref="V-248790" selected="true" /><select idref="V-248791" selected="true" /><select idref="V-248797" selected="true" /><select idref="V-248798" selected="true" /><select idref="V-248799" selected="true" /><select idref="V-248800" selected="true" /><select idref="V-248801" selected="true" /><select idref="V-248802" selected="true" /><select idref="V-248803" selected="true" /><select idref="V-248804" selected="true" /><select idref="V-248805" selected="true" /><select idref="V-248806" selected="true" /><select idref="V-248807" selected="true" /><select idref="V-248808" selected="true" /><select idref="V-248809" selected="true" /><select idref="V-248810" selected="true" /><select idref="V-248811" selected="true" /><select idref="V-248812" selected="true" /><select idref="V-248813" selected="true" /><select idref="V-248814" selected="true" /><select idref="V-248815" selected="true" /><select idref="V-248816" selected="true" /><select idref="V-248817" selected="true" /><select idref="V-248818" selected="true" /><select idref="V-248819" selected="true" /><select idref="V-248820" selected="true" /><select idref="V-248821" selected="true" /><select idref="V-248822" selected="true" /><select idref="V-248823" selected="true" /><select idref="V-248824" selected="true" /><select idref="V-248825" selected="true" /><select idref="V-248826" selected="true" /><select idref="V-248827" selected="true" /><select idref="V-248828" selected="true" /><select idref="V-248829" selected="true" /><select idref="V-248830" selected="true" /><select idref="V-248831" selected="true" /><select idref="V-248832" selected="true" /><select idref="V-248833" selected="true" /><select idref="V-248834" selected="true" /><select idref="V-248835" selected="true" /><select idref="V-248836" selected="true" /><select idref="V-248837" selected="true" /><select idref="V-248839" selected="true" /><select idref="V-248840" selected="true" /><select idref="V-248841" selected="true" /><select idref="V-248842" selected="true" /><select idref="V-248843" selected="true" /><select idref="V-248844" selected="true" /><select idref="V-248845" selected="true" /><select idref="V-248846" selected="true" /><select idref="V-248847" selected="true" /><select idref="V-248848" selected="true" /><select idref="V-248849" selected="true" /><select idref="V-248850" selected="true" /><select idref="V-248851" selected="true" /><select idref="V-248852" selected="true" /><select idref="V-248853" selected="true" /><select idref="V-248854" selected="true" /><select idref="V-248855" selected="true" /><select idref="V-248856" selected="true" /><select idref="V-248857" selected="true" /><select idref="V-248858" selected="true" /><select idref="V-248859" selected="true" /><select idref="V-248860" selected="true" /><select idref="V-248861" selected="true" /><select idref="V-248862" selected="true" /><select idref="V-248863" selected="true" /><select idref="V-248864" selected="true" /><select idref="V-248865" selected="true" /><select idref="V-248866" selected="true" /><select idref="V-248867" selected="true" /><select idref="V-248868" selected="true" /><select idref="V-248869" selected="true" /><select idref="V-248870" selected="true" /><select idref="V-248871" selected="true" /><select idref="V-248872" selected="true" /><select idref="V-248873" selected="true" /><select idref="V-248874" selected="true" /><select idref="V-248875" selected="true" /><select idref="V-248876" selected="true" /><select idref="V-248877" selected="true" /><select idref="V-248878" selected="true" /><select idref="V-248879" selected="true" /><select idref="V-248880" selected="true" /><select idref="V-248881" selected="true" /><select idref="V-248882" selected="true" /><select idref="V-248883" selected="true" /><select idref="V-248884" selected="true" /><select idref="V-248885" selected="true" /><select idref="V-248886" selected="true" /><select idref="V-248887" selected="true" /><select idref="V-248888" selected="true" /><select idref="V-248889" selected="true" /><select idref="V-248890" selected="true" /><select idref="V-248891" selected="true" /><select idref="V-248892" selected="true" /><select idref="V-248893" selected="true" /><select idref="V-248894" selected="true" /><select idref="V-248895" selected="true" /><select idref="V-248896" selected="true" /><select idref="V-248897" selected="true" /><select idref="V-248898" selected="true" /><select idref="V-248899" selected="true" /><select idref="V-248900" selected="true" /><select idref="V-248901" selected="true" /><select idref="V-248902" selected="true" /><select idref="V-248903" selected="true" /><select idref="V-248904" selected="true" /><select idref="V-248905" selected="true" /><select idref="V-248906" selected="true" /><select idref="V-248907" selected="true" /><select idref="V-252650" selected="true" /><select idref="V-252651" selected="true" /><select idref="V-252652" selected="true" /><select idref="V-252653" selected="true" /><select idref="V-252654" selected="true" /><select idref="V-252655" selected="true" /><select idref="V-252656" selected="true" /><select idref="V-252657" selected="true" /><select idref="V-252658" selected="true" /><select idref="V-252659" selected="true" /><select idref="V-252660" selected="true" /><select idref="V-252662" selected="true" /><select idref="V-252663" selected="true" /><select idref="V-255898" selected="true" /><select idref="V-256978" selected="true" /><select idref="V-256979" selected="true" /><select idref="V-257259" selected="true" /><select idref="V-274876" selected="true" /><select idref="V-279934" selected="true" /></Profile><Profile id="MAC-3_Public"><title>III - Administrative Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-248519" selected="true" /><select idref="V-248520" selected="true" /><select idref="V-248521" selected="true" /><select idref="V-248523" selected="true" /><select idref="V-248524" selected="true" /><select idref="V-248525" selected="true" /><select idref="V-248526" selected="true" /><select idref="V-248527" selected="true" /><select idref="V-248528" selected="true" /><select idref="V-248529" selected="true" /><select idref="V-248530" selected="true" /><select idref="V-248531" selected="true" /><select idref="V-248532" selected="true" /><select idref="V-248533" selected="true" /><select idref="V-248534" selected="true" /><select idref="V-248535" selected="true" /><select idref="V-248537" selected="true" /><select idref="V-248538" selected="true" /><select idref="V-248539" selected="true" /><select idref="V-248540" selected="true" /><select idref="V-248541" selected="true" /><select idref="V-248542" selected="true" /><select idref="V-248543" selected="true" /><select idref="V-248544" selected="true" /><select idref="V-248545" selected="true" /><select idref="V-248546" selected="true" /><select idref="V-248547" selected="true" /><select idref="V-248548" selected="true" /><select idref="V-248549" selected="true" /><select idref="V-248551" selected="true" /><select idref="V-248552" selected="true" /><select idref="V-248553" selected="true" /><select idref="V-248554" selected="true" /><select idref="V-248555" selected="true" /><select idref="V-248556" selected="true" /><select idref="V-248557" selected="true" /><select idref="V-248558" selected="true" /><select idref="V-248559" selected="true" /><select idref="V-248560" selected="true" /><select idref="V-248561" selected="true" /><select idref="V-248562" selected="true" /><select idref="V-248563" selected="true" /><select idref="V-248564" selected="true" /><select idref="V-248565" selected="true" /><select idref="V-248566" selected="true" /><select idref="V-248567" selected="true" /><select idref="V-248568" selected="true" /><select idref="V-248569" selected="true" /><select idref="V-248570" selected="true" /><select idref="V-248571" selected="true" /><select idref="V-248572" selected="true" /><select idref="V-248573" selected="true" /><select idref="V-248574" selected="true" /><select idref="V-248575" selected="true" /><select idref="V-248576" selected="true" /><select idref="V-248577" selected="true" /><select idref="V-248578" selected="true" /><select idref="V-248579" selected="true" /><select idref="V-248580" selected="true" /><select idref="V-248581" selected="true" /><select idref="V-248582" selected="true" /><select idref="V-248583" selected="true" /><select idref="V-248584" selected="true" /><select idref="V-248585" selected="true" /><select idref="V-248586" selected="true" /><select idref="V-248587" selected="true" /><select idref="V-248588" selected="true" /><select idref="V-248589" selected="true" /><select idref="V-248590" selected="true" /><select idref="V-248591" selected="true" /><select idref="V-248592" selected="true" /><select idref="V-248593" selected="true" /><select idref="V-248594" selected="true" /><select idref="V-248595" selected="true" /><select idref="V-248596" selected="true" /><select idref="V-248597" selected="true" /><select idref="V-248598" selected="true" /><select idref="V-248599" selected="true" /><select idref="V-248600" selected="true" /><select idref="V-248601" selected="true" /><select idref="V-248602" selected="true" /><select idref="V-248603" selected="true" /><select idref="V-248605" selected="true" /><select idref="V-248606" selected="true" /><select idref="V-248607" selected="true" /><select idref="V-248608" selected="true" /><select idref="V-248609" selected="true" /><select idref="V-248610" selected="true" /><select idref="V-248611" selected="true" /><select idref="V-248612" selected="true" /><select idref="V-248613" selected="true" /><select idref="V-248615" selected="true" /><select idref="V-248616" selected="true" /><select idref="V-248617" selected="true" /><select idref="V-248618" selected="true" /><select idref="V-248619" selected="true" /><select idref="V-248620" selected="true" /><select idref="V-248621" selected="true" /><select idref="V-248622" selected="true" /><select idref="V-248623" selected="true" /><select idref="V-248624" selected="true" /><select idref="V-248625" selected="true" /><select idref="V-248626" selected="true" /><select idref="V-248628" selected="true" /><select idref="V-248629" selected="true" /><select idref="V-248630" selected="true" /><select idref="V-248631" selected="true" /><select idref="V-248632" selected="true" /><select idref="V-248633" selected="true" /><select idref="V-248634" selected="true" /><select idref="V-248635" selected="true" /><select idref="V-248636" selected="true" /><select idref="V-248637" selected="true" /><select idref="V-248638" selected="true" /><select idref="V-248639" selected="true" /><select idref="V-248640" selected="true" /><select idref="V-248641" selected="true" /><select idref="V-248642" selected="true" /><select idref="V-248643" selected="true" /><select idref="V-248644" selected="true" /><select idref="V-248645" selected="true" /><select idref="V-248646" selected="true" /><select idref="V-248647" selected="true" /><select idref="V-248648" selected="true" /><select idref="V-248649" selected="true" /><select idref="V-248650" selected="true" /><select idref="V-248651" selected="true" /><select idref="V-248652" selected="true" /><select idref="V-248653" selected="true" /><select idref="V-248654" selected="true" /><select idref="V-248655" selected="true" /><select idref="V-248656" selected="true" /><select idref="V-248657" selected="true" /><select idref="V-248658" selected="true" /><select idref="V-248659" selected="true" /><select idref="V-248660" selected="true" /><select idref="V-248661" selected="true" /><select idref="V-248662" selected="true" /><select idref="V-248663" selected="true" /><select idref="V-248664" selected="true" /><select idref="V-248665" selected="true" /><select idref="V-248666" selected="true" /><select idref="V-248667" selected="true" /><select idref="V-248668" selected="true" /><select idref="V-248669" selected="true" /><select idref="V-248670" selected="true" /><select idref="V-248671" selected="true" /><select idref="V-248672" selected="true" /><select idref="V-248673" selected="true" /><select idref="V-248678" selected="true" /><select idref="V-248679" selected="true" /><select idref="V-248680" selected="true" /><select idref="V-248682" selected="true" /><select idref="V-248683" selected="true" /><select idref="V-248684" selected="true" /><select idref="V-248685" selected="true" /><select idref="V-248686" selected="true" /><select idref="V-248687" selected="true" /><select idref="V-248688" selected="true" /><select idref="V-248689" selected="true" /><select idref="V-248690" selected="true" /><select idref="V-248691" selected="true" /><select idref="V-248692" selected="true" /><select idref="V-248693" selected="true" /><select idref="V-248694" selected="true" /><select idref="V-248695" selected="true" /><select idref="V-248696" selected="true" /><select idref="V-248697" selected="true" /><select idref="V-248699" selected="true" /><select idref="V-248700" selected="true" /><select idref="V-248701" selected="true" /><select idref="V-248702" selected="true" /><select idref="V-248703" selected="true" /><select idref="V-248704" selected="true" /><select idref="V-248705" selected="true" /><select idref="V-248706" selected="true" /><select idref="V-248707" selected="true" /><select idref="V-248708" selected="true" /><select idref="V-248709" selected="true" /><select idref="V-248710" selected="true" /><select idref="V-248711" selected="true" /><select idref="V-248712" selected="true" /><select idref="V-248713" selected="true" /><select idref="V-248714" selected="true" /><select idref="V-248715" selected="true" /><select idref="V-248716" selected="true" /><select idref="V-248718" selected="true" /><select idref="V-248719" selected="true" /><select idref="V-248720" selected="true" /><select idref="V-248721" selected="true" /><select idref="V-248722" selected="true" /><select idref="V-248723" selected="true" /><select idref="V-248724" selected="true" /><select idref="V-248725" selected="true" /><select idref="V-248726" selected="true" /><select idref="V-248728" selected="true" /><select idref="V-248729" selected="true" /><select idref="V-248730" selected="true" /><select idref="V-248731" selected="true" /><select idref="V-248732" selected="true" /><select idref="V-248733" selected="true" /><select idref="V-248734" selected="true" /><select idref="V-248735" selected="true" /><select idref="V-248736" selected="true" /><select idref="V-248737" selected="true" /><select idref="V-248738" selected="true" /><select idref="V-248739" selected="true" /><select idref="V-248740" selected="true" /><select idref="V-248741" selected="true" /><select idref="V-248742" selected="true" /><select idref="V-248743" selected="true" /><select idref="V-248744" selected="true" /><select idref="V-248745" selected="true" /><select idref="V-248746" selected="true" /><select idref="V-248747" selected="true" /><select idref="V-248748" selected="true" /><select idref="V-248753" selected="true" /><select idref="V-248754" selected="true" /><select idref="V-248756" selected="true" /><select idref="V-248757" selected="true" /><select idref="V-248758" selected="true" /><select idref="V-248759" selected="true" /><select idref="V-248760" selected="true" /><select idref="V-248761" selected="true" /><select idref="V-248762" selected="true" /><select idref="V-248763" selected="true" /><select idref="V-248764" selected="true" /><select idref="V-248765" selected="true" /><select idref="V-248766" selected="true" /><select idref="V-248767" selected="true" /><select idref="V-248768" selected="true" /><select idref="V-248769" selected="true" /><select idref="V-248770" selected="true" /><select idref="V-248771" selected="true" /><select idref="V-248772" selected="true" /><select idref="V-248773" selected="true" /><select idref="V-248774" selected="true" /><select idref="V-248779" selected="true" /><select idref="V-248781" selected="true" /><select idref="V-248782" selected="true" /><select idref="V-248783" selected="true" /><select idref="V-248784" selected="true" /><select idref="V-248790" selected="true" /><select idref="V-248791" selected="true" /><select idref="V-248797" selected="true" /><select idref="V-248798" selected="true" /><select idref="V-248799" selected="true" /><select idref="V-248800" selected="true" /><select idref="V-248801" selected="true" /><select idref="V-248802" selected="true" /><select idref="V-248803" selected="true" /><select idref="V-248804" selected="true" /><select idref="V-248805" selected="true" /><select idref="V-248806" selected="true" /><select idref="V-248807" selected="true" /><select idref="V-248808" selected="true" /><select idref="V-248809" selected="true" /><select idref="V-248810" selected="true" /><select idref="V-248811" selected="true" /><select idref="V-248812" selected="true" /><select idref="V-248813" selected="true" /><select idref="V-248814" selected="true" /><select idref="V-248815" selected="true" /><select idref="V-248816" selected="true" /><select idref="V-248817" selected="true" /><select idref="V-248818" selected="true" /><select idref="V-248819" selected="true" /><select idref="V-248820" selected="true" /><select idref="V-248821" selected="true" /><select idref="V-248822" selected="true" /><select idref="V-248823" selected="true" /><select idref="V-248824" selected="true" /><select idref="V-248825" selected="true" /><select idref="V-248826" selected="true" /><select idref="V-248827" selected="true" /><select idref="V-248828" selected="true" /><select idref="V-248829" selected="true" /><select idref="V-248830" selected="true" /><select idref="V-248831" selected="true" /><select idref="V-248832" selected="true" /><select idref="V-248833" selected="true" /><select idref="V-248834" selected="true" /><select idref="V-248835" selected="true" /><select idref="V-248836" selected="true" /><select idref="V-248837" selected="true" /><select idref="V-248839" selected="true" /><select idref="V-248840" selected="true" /><select idref="V-248841" selected="true" /><select idref="V-248842" selected="true" /><select idref="V-248843" selected="true" /><select idref="V-248844" selected="true" /><select idref="V-248845" selected="true" /><select idref="V-248846" selected="true" /><select idref="V-248847" selected="true" /><select idref="V-248848" selected="true" /><select idref="V-248849" selected="true" /><select idref="V-248850" selected="true" /><select idref="V-248851" selected="true" /><select idref="V-248852" selected="true" /><select idref="V-248853" selected="true" /><select idref="V-248854" selected="true" /><select idref="V-248855" selected="true" /><select idref="V-248856" selected="true" /><select idref="V-248857" selected="true" /><select idref="V-248858" selected="true" /><select idref="V-248859" selected="true" /><select idref="V-248860" selected="true" /><select idref="V-248861" selected="true" /><select idref="V-248862" selected="true" /><select idref="V-248863" selected="true" /><select idref="V-248864" selected="true" /><select idref="V-248865" selected="true" /><select idref="V-248866" selected="true" /><select idref="V-248867" selected="true" /><select idref="V-248868" selected="true" /><select idref="V-248869" selected="true" /><select idref="V-248870" selected="true" /><select idref="V-248871" selected="true" /><select idref="V-248872" selected="true" /><select idref="V-248873" selected="true" /><select idref="V-248874" selected="true" /><select idref="V-248875" selected="true" /><select idref="V-248876" selected="true" /><select idref="V-248877" selected="true" /><select idref="V-248878" selected="true" /><select idref="V-248879" selected="true" /><select idref="V-248880" selected="true" /><select idref="V-248881" selected="true" /><select idref="V-248882" selected="true" /><select idref="V-248883" selected="true" /><select idref="V-248884" selected="true" /><select idref="V-248885" selected="true" /><select idref="V-248886" selected="true" /><select idref="V-248887" selected="true" /><select idref="V-248888" selected="true" /><select idref="V-248889" selected="true" /><select idref="V-248890" selected="true" /><select idref="V-248891" selected="true" /><select idref="V-248892" selected="true" /><select idref="V-248893" selected="true" /><select idref="V-248894" selected="true" /><select idref="V-248895" selected="true" /><select idref="V-248896" selected="true" /><select idref="V-248897" selected="true" /><select idref="V-248898" selected="true" /><select idref="V-248899" selected="true" /><select idref="V-248900" selected="true" /><select idref="V-248901" selected="true" /><select idref="V-248902" selected="true" /><select idref="V-248903" selected="true" /><select idref="V-248904" selected="true" /><select idref="V-248905" selected="true" /><select idref="V-248906" selected="true" /><select idref="V-248907" selected="true" /><select idref="V-252650" selected="true" /><select idref="V-252651" selected="true" /><select idref="V-252652" selected="true" /><select idref="V-252653" selected="true" /><select idref="V-252654" selected="true" /><select idref="V-252655" selected="true" /><select idref="V-252656" selected="true" /><select idref="V-252657" selected="true" /><select idref="V-252658" selected="true" /><select idref="V-252659" selected="true" /><select idref="V-252660" selected="true" /><select idref="V-252662" selected="true" /><select idref="V-252663" selected="true" /><select idref="V-255898" selected="true" /><select idref="V-256978" selected="true" /><select idref="V-256979" selected="true" /><select idref="V-257259" selected="true" /><select idref="V-274876" selected="true" /><select idref="V-279934" selected="true" /></Profile><Profile id="MAC-3_Sensitive"><title>III - Administrative Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-248519" selected="true" /><select idref="V-248520" selected="true" /><select idref="V-248521" selected="true" /><select idref="V-248523" selected="true" /><select idref="V-248524" selected="true" /><select idref="V-248525" selected="true" /><select idref="V-248526" selected="true" /><select idref="V-248527" selected="true" /><select idref="V-248528" selected="true" /><select idref="V-248529" selected="true" /><select idref="V-248530" selected="true" /><select idref="V-248531" selected="true" /><select idref="V-248532" selected="true" /><select idref="V-248533" selected="true" /><select idref="V-248534" selected="true" /><select idref="V-248535" selected="true" /><select idref="V-248537" selected="true" /><select idref="V-248538" selected="true" /><select idref="V-248539" selected="true" /><select idref="V-248540" selected="true" /><select idref="V-248541" selected="true" /><select idref="V-248542" selected="true" /><select idref="V-248543" selected="true" /><select idref="V-248544" selected="true" /><select idref="V-248545" selected="true" /><select idref="V-248546" selected="true" /><select idref="V-248547" selected="true" /><select idref="V-248548" selected="true" /><select idref="V-248549" selected="true" /><select idref="V-248551" selected="true" /><select idref="V-248552" selected="true" /><select idref="V-248553" selected="true" /><select idref="V-248554" selected="true" /><select idref="V-248555" selected="true" /><select idref="V-248556" selected="true" /><select idref="V-248557" selected="true" /><select idref="V-248558" selected="true" /><select idref="V-248559" selected="true" /><select idref="V-248560" selected="true" /><select idref="V-248561" selected="true" /><select idref="V-248562" selected="true" /><select idref="V-248563" selected="true" /><select idref="V-248564" selected="true" /><select idref="V-248565" selected="true" /><select idref="V-248566" selected="true" /><select idref="V-248567" selected="true" /><select idref="V-248568" selected="true" /><select idref="V-248569" selected="true" /><select idref="V-248570" selected="true" /><select idref="V-248571" selected="true" /><select idref="V-248572" selected="true" /><select idref="V-248573" selected="true" /><select idref="V-248574" selected="true" /><select idref="V-248575" selected="true" /><select idref="V-248576" selected="true" /><select idref="V-248577" selected="true" /><select idref="V-248578" selected="true" /><select idref="V-248579" selected="true" /><select idref="V-248580" selected="true" /><select idref="V-248581" selected="true" /><select idref="V-248582" selected="true" /><select idref="V-248583" selected="true" /><select idref="V-248584" selected="true" /><select idref="V-248585" selected="true" /><select idref="V-248586" selected="true" /><select idref="V-248587" selected="true" /><select idref="V-248588" selected="true" /><select idref="V-248589" selected="true" /><select idref="V-248590" selected="true" /><select idref="V-248591" selected="true" /><select idref="V-248592" selected="true" /><select idref="V-248593" selected="true" /><select idref="V-248594" selected="true" /><select idref="V-248595" selected="true" /><select idref="V-248596" selected="true" /><select idref="V-248597" selected="true" /><select idref="V-248598" selected="true" /><select idref="V-248599" selected="true" /><select idref="V-248600" selected="true" /><select idref="V-248601" selected="true" /><select idref="V-248602" selected="true" /><select idref="V-248603" selected="true" /><select idref="V-248605" selected="true" /><select idref="V-248606" selected="true" /><select idref="V-248607" selected="true" /><select idref="V-248608" selected="true" /><select idref="V-248609" selected="true" /><select idref="V-248610" selected="true" /><select idref="V-248611" selected="true" /><select idref="V-248612" selected="true" /><select idref="V-248613" selected="true" /><select idref="V-248615" selected="true" /><select idref="V-248616" selected="true" /><select idref="V-248617" selected="true" /><select idref="V-248618" selected="true" /><select idref="V-248619" selected="true" /><select idref="V-248620" selected="true" /><select idref="V-248621" selected="true" /><select idref="V-248622" selected="true" /><select idref="V-248623" selected="true" /><select idref="V-248624" selected="true" /><select idref="V-248625" selected="true" /><select idref="V-248626" selected="true" /><select idref="V-248628" selected="true" /><select idref="V-248629" selected="true" /><select idref="V-248630" selected="true" /><select idref="V-248631" selected="true" /><select idref="V-248632" selected="true" /><select idref="V-248633" selected="true" /><select idref="V-248634" selected="true" /><select idref="V-248635" selected="true" /><select idref="V-248636" selected="true" /><select idref="V-248637" selected="true" /><select idref="V-248638" selected="true" /><select idref="V-248639" selected="true" /><select idref="V-248640" selected="true" /><select idref="V-248641" selected="true" /><select idref="V-248642" selected="true" /><select idref="V-248643" selected="true" /><select idref="V-248644" selected="true" /><select idref="V-248645" selected="true" /><select idref="V-248646" selected="true" /><select idref="V-248647" selected="true" /><select idref="V-248648" selected="true" /><select idref="V-248649" selected="true" /><select idref="V-248650" selected="true" /><select idref="V-248651" selected="true" /><select idref="V-248652" selected="true" /><select idref="V-248653" selected="true" /><select idref="V-248654" selected="true" /><select idref="V-248655" selected="true" /><select idref="V-248656" selected="true" /><select idref="V-248657" selected="true" /><select idref="V-248658" selected="true" /><select idref="V-248659" selected="true" /><select idref="V-248660" selected="true" /><select idref="V-248661" selected="true" /><select idref="V-248662" selected="true" /><select idref="V-248663" selected="true" /><select idref="V-248664" selected="true" /><select idref="V-248665" selected="true" /><select idref="V-248666" selected="true" /><select idref="V-248667" selected="true" /><select idref="V-248668" selected="true" /><select idref="V-248669" selected="true" /><select idref="V-248670" selected="true" /><select idref="V-248671" selected="true" /><select idref="V-248672" selected="true" /><select idref="V-248673" selected="true" /><select idref="V-248678" selected="true" /><select idref="V-248679" selected="true" /><select idref="V-248680" selected="true" /><select idref="V-248682" selected="true" /><select idref="V-248683" selected="true" /><select idref="V-248684" selected="true" /><select idref="V-248685" selected="true" /><select idref="V-248686" selected="true" /><select idref="V-248687" selected="true" /><select idref="V-248688" selected="true" /><select idref="V-248689" selected="true" /><select idref="V-248690" selected="true" /><select idref="V-248691" selected="true" /><select idref="V-248692" selected="true" /><select idref="V-248693" selected="true" /><select idref="V-248694" selected="true" /><select idref="V-248695" selected="true" /><select idref="V-248696" selected="true" /><select idref="V-248697" selected="true" /><select idref="V-248699" selected="true" /><select idref="V-248700" selected="true" /><select idref="V-248701" selected="true" /><select idref="V-248702" selected="true" /><select idref="V-248703" selected="true" /><select idref="V-248704" selected="true" /><select idref="V-248705" selected="true" /><select idref="V-248706" selected="true" /><select idref="V-248707" selected="true" /><select idref="V-248708" selected="true" /><select idref="V-248709" selected="true" /><select idref="V-248710" selected="true" /><select idref="V-248711" selected="true" /><select idref="V-248712" selected="true" /><select idref="V-248713" selected="true" /><select idref="V-248714" selected="true" /><select idref="V-248715" selected="true" /><select idref="V-248716" selected="true" /><select idref="V-248718" selected="true" /><select idref="V-248719" selected="true" /><select idref="V-248720" selected="true" /><select idref="V-248721" selected="true" /><select idref="V-248722" selected="true" /><select idref="V-248723" selected="true" /><select idref="V-248724" selected="true" /><select idref="V-248725" selected="true" /><select idref="V-248726" selected="true" /><select idref="V-248728" selected="true" /><select idref="V-248729" selected="true" /><select idref="V-248730" selected="true" /><select idref="V-248731" selected="true" /><select idref="V-248732" selected="true" /><select idref="V-248733" selected="true" /><select idref="V-248734" selected="true" /><select idref="V-248735" selected="true" /><select idref="V-248736" selected="true" /><select idref="V-248737" selected="true" /><select idref="V-248738" selected="true" /><select idref="V-248739" selected="true" /><select idref="V-248740" selected="true" /><select idref="V-248741" selected="true" /><select idref="V-248742" selected="true" /><select idref="V-248743" selected="true" /><select idref="V-248744" selected="true" /><select idref="V-248745" selected="true" /><select idref="V-248746" selected="true" /><select idref="V-248747" selected="true" /><select idref="V-248748" selected="true" /><select idref="V-248753" selected="true" /><select idref="V-248754" selected="true" /><select idref="V-248756" selected="true" /><select idref="V-248757" selected="true" /><select idref="V-248758" selected="true" /><select idref="V-248759" selected="true" /><select idref="V-248760" selected="true" /><select idref="V-248761" selected="true" /><select idref="V-248762" selected="true" /><select idref="V-248763" selected="true" /><select idref="V-248764" selected="true" /><select idref="V-248765" selected="true" /><select idref="V-248766" selected="true" /><select idref="V-248767" selected="true" /><select idref="V-248768" selected="true" /><select idref="V-248769" selected="true" /><select idref="V-248770" selected="true" /><select idref="V-248771" selected="true" /><select idref="V-248772" selected="true" /><select idref="V-248773" selected="true" /><select idref="V-248774" selected="true" /><select idref="V-248779" selected="true" /><select idref="V-248781" selected="true" /><select idref="V-248782" selected="true" /><select idref="V-248783" selected="true" /><select idref="V-248784" selected="true" /><select idref="V-248790" selected="true" /><select idref="V-248791" selected="true" /><select idref="V-248797" selected="true" /><select idref="V-248798" selected="true" /><select idref="V-248799" selected="true" /><select idref="V-248800" selected="true" /><select idref="V-248801" selected="true" /><select idref="V-248802" selected="true" /><select idref="V-248803" selected="true" /><select idref="V-248804" selected="true" /><select idref="V-248805" selected="true" /><select idref="V-248806" selected="true" /><select idref="V-248807" selected="true" /><select idref="V-248808" selected="true" /><select idref="V-248809" selected="true" /><select idref="V-248810" selected="true" /><select idref="V-248811" selected="true" /><select idref="V-248812" selected="true" /><select idref="V-248813" selected="true" /><select idref="V-248814" selected="true" /><select idref="V-248815" selected="true" /><select idref="V-248816" selected="true" /><select idref="V-248817" selected="true" /><select idref="V-248818" selected="true" /><select idref="V-248819" selected="true" /><select idref="V-248820" selected="true" /><select idref="V-248821" selected="true" /><select idref="V-248822" selected="true" /><select idref="V-248823" selected="true" /><select idref="V-248824" selected="true" /><select idref="V-248825" selected="true" /><select idref="V-248826" selected="true" /><select idref="V-248827" selected="true" /><select idref="V-248828" selected="true" /><select idref="V-248829" selected="true" /><select idref="V-248830" selected="true" /><select idref="V-248831" selected="true" /><select idref="V-248832" selected="true" /><select idref="V-248833" selected="true" /><select idref="V-248834" selected="true" /><select idref="V-248835" selected="true" /><select idref="V-248836" selected="true" /><select idref="V-248837" selected="true" /><select idref="V-248839" selected="true" /><select idref="V-248840" selected="true" /><select idref="V-248841" selected="true" /><select idref="V-248842" selected="true" /><select idref="V-248843" selected="true" /><select idref="V-248844" selected="true" /><select idref="V-248845" selected="true" /><select idref="V-248846" selected="true" /><select idref="V-248847" selected="true" /><select idref="V-248848" selected="true" /><select idref="V-248849" selected="true" /><select idref="V-248850" selected="true" /><select idref="V-248851" selected="true" /><select idref="V-248852" selected="true" /><select idref="V-248853" selected="true" /><select idref="V-248854" selected="true" /><select idref="V-248855" selected="true" /><select idref="V-248856" selected="true" /><select idref="V-248857" selected="true" /><select idref="V-248858" selected="true" /><select idref="V-248859" selected="true" /><select idref="V-248860" selected="true" /><select idref="V-248861" selected="true" /><select idref="V-248862" selected="true" /><select idref="V-248863" selected="true" /><select idref="V-248864" selected="true" /><select idref="V-248865" selected="true" /><select idref="V-248866" selected="true" /><select idref="V-248867" selected="true" /><select idref="V-248868" selected="true" /><select idref="V-248869" selected="true" /><select idref="V-248870" selected="true" /><select idref="V-248871" selected="true" /><select idref="V-248872" selected="true" /><select idref="V-248873" selected="true" /><select idref="V-248874" selected="true" /><select idref="V-248875" selected="true" /><select idref="V-248876" selected="true" /><select idref="V-248877" selected="true" /><select idref="V-248878" selected="true" /><select idref="V-248879" selected="true" /><select idref="V-248880" selected="true" /><select idref="V-248881" selected="true" /><select idref="V-248882" selected="true" /><select idref="V-248883" selected="true" /><select idref="V-248884" selected="true" /><select idref="V-248885" selected="true" /><select idref="V-248886" selected="true" /><select idref="V-248887" selected="true" /><select idref="V-248888" selected="true" /><select idref="V-248889" selected="true" /><select idref="V-248890" selected="true" /><select idref="V-248891" selected="true" /><select idref="V-248892" selected="true" /><select idref="V-248893" selected="true" /><select idref="V-248894" selected="true" /><select idref="V-248895" selected="true" /><select idref="V-248896" selected="true" /><select idref="V-248897" selected="true" /><select idref="V-248898" selected="true" /><select idref="V-248899" selected="true" /><select idref="V-248900" selected="true" /><select idref="V-248901" selected="true" /><select idref="V-248902" selected="true" /><select idref="V-248903" selected="true" /><select idref="V-248904" selected="true" /><select idref="V-248905" selected="true" /><select idref="V-248906" selected="true" /><select idref="V-248907" selected="true" /><select idref="V-252650" selected="true" /><select idref="V-252651" selected="true" /><select idref="V-252652" selected="true" /><select idref="V-252653" selected="true" /><select idref="V-252654" selected="true" /><select idref="V-252655" selected="true" /><select idref="V-252656" selected="true" /><select idref="V-252657" selected="true" /><select idref="V-252658" selected="true" /><select idref="V-252659" selected="true" /><select idref="V-252660" selected="true" /><select idref="V-252662" selected="true" /><select idref="V-252663" selected="true" /><select idref="V-255898" selected="true" /><select idref="V-256978" selected="true" /><select idref="V-256979" selected="true" /><select idref="V-257259" selected="true" /><select idref="V-274876" selected="true" /><select idref="V-279934" selected="true" /></Profile><Group id="V-248519"><title>SRG-OS-000037-GPOS-00015</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248519r1015024_rule" weight="10.0" severity="medium"><version>OL08-00-030180</version><title>The OL 8 audit package must be installed.</title><description>&lt;VulnDiscussion&gt;Without establishing what type of events occurred and their source, location, and outcome, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack. 
  
 Audit record content that may be necessary to satisfy this requirement includes, for example, time stamps, source and destination addresses, user/process identifiers, event descriptions, success/fail indications, filenames involved, and access control or flow control rules invoked. 
  
@@ -32,17 +32,20 @@ auditd.service - Security Auditing Service
 Loaded:loaded (/usr/lib/systemd/system/auditd.service; enabled; vendor preset: enabled)
 Active: active (running) since Tues 2020-12-11 12:56:56 EST; 4 weeks 0 days ago
 
-If the audit service is not "active" and "running", this is a finding.</check-content></check></Rule></Group><Group id="V-248521"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248521r991589_rule" weight="10.0" severity="high"><version>OL08-00-010000</version><title>OL 8 must be a vendor-supported release.</title><description>&lt;VulnDiscussion&gt;Configuring the operating system to implement organization-wide security implementation guides and security checklists verifies compliance with federal standards and establishes a common security baseline across the DoD that reflects the most restrictive security posture consistent with operational requirements. 
+If the audit service is not "active" and "running", this is a finding.</check-content></check></Rule></Group><Group id="V-248521"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248521r1156679_rule" weight="10.0" severity="high"><version>OL08-00-010000</version><title>OL 8 must be a vendor-supported release.</title><description>&lt;VulnDiscussion&gt;Configuring the operating system to implement organization-wide security implementation guides and security checklists verifies compliance with federal standards and establishes a common security baseline across the DOD that reflects the most restrictive security posture consistent with operational requirements. 
  
-Configuration settings are the set of parameters that can be changed in hardware, software, or firmware components of the system that affect the security posture and/or functionality of the system. Security-related parameters are parameters impacting the security state of the system, including the parameters required to satisfy other security control requirements. Security-related parameters include, for example, registry settings; account, file, and directory permission settings; and settings for functions, ports, protocols, services, and remote connections.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-51909r779128_fix">Upgrade to a supported version of the operating system.</fixtext><fix id="F-51909r779128_fix" /><check system="C-51955r779127_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify the version of the operating system is vendor supported. 
+Configuration settings are the set of parameters that can be changed in hardware, software, or firmware components of the system that affect the security posture and/or functionality of the system. Security-related parameters are parameters impacting the security state of the system, including the parameters required to satisfy other security control requirements. Security-related parameters include, for example, registry settings; account, file, and directory permission settings; and settings for functions, ports, protocols, services, and remote connections.
+
+End Of Life dates for Oracle Linux 8 releases are as follows:
+Current end of Premier Support for Oracle Linux 8 is July 2029.
+Current end of Extended Support for Oracle Linux 8 is July 2032. 
+
+Each minor version reaches end of life when the new version is released.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-51909r779128_fix">Upgrade to a supported version of the operating system.</fixtext><fix id="F-51909r779128_fix" /><check system="C-51955r1155567_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify the version of the operating system is vendor supported. 
  
 Check the version of the operating system with the following command: 
  
-$ udo cat /etc/oracle-release 
- 
-Oracle Linux Server release 8.2 
- 
-Current End of Premier Support for Oracle Linux 8 is July 2029, while Extended Support might consider an extended term. 
+$ sudo cat /etc/oracle-release 
+Oracle Linux Server release 8.10
  
 If the release is not supported by the vendor, this is a finding.</check-content></check></Rule></Group><Group id="V-248523"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248523r991589_rule" weight="10.0" severity="medium"><version>OL08-00-010010</version><title>OL 8 vendor-packaged system security patches and updates must be installed and up to date.</title><description>&lt;VulnDiscussion&gt;Timely patching is critical for maintaining the operational availability, confidentiality, and integrity of information technology (IT) systems. However, failure to keep operating system and application software patched is a common mistake made by IT professionals.  
  
@@ -425,7 +428,7 @@ SHA_CRYPT_MIN_ROUNDS 100000</fixtext><fix id="F-51923r1044785_fix" /><check syst
 
 If only one of "SHA_CRYPT_MIN_ROUNDS" or "SHA_CRYPT_MAX_ROUNDS" is set, and this value is below "100000", this is a finding.
 
-If both "SHA_CRYPT_MIN_ROUNDS" and "SHA_CRYPT_MAX_ROUNDS" are set, and the value for either is below "100000", this is a finding.</check-content></check></Rule></Group><Group id="V-248537"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248537r1117265_rule" weight="10.0" severity="high"><version>OL08-00-010140</version><title>OL 8 operating systems booted with United Extensible Firmware Interface (UEFI) must require authentication upon booting into single-user mode and maintenance.</title><description>&lt;VulnDiscussion&gt;If the system does not require valid authentication before it boots into single-user or maintenance mode, anyone who invokes single-user or maintenance mode is granted privileged access to all files on the system. GRUB 2 is the default boot loader for OL 8 and is designed to require a password to boot into single-user mode or modify the boot menu.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-51925r779176_fix">Configure the system to require an encrypted grub bootloader password for the grub superusers account with the grub2-setpassword command, which creates/overwrites the "/boot/efi/EFI/redhat/user.cfg" file. 
+If both "SHA_CRYPT_MIN_ROUNDS" and "SHA_CRYPT_MAX_ROUNDS" are set, and the value for either is below "100000", this is a finding.</check-content></check></Rule></Group><Group id="V-248537"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248537r1137691_rule" weight="10.0" severity="high"><version>OL08-00-010140</version><title>OL 8 operating systems booted with United Extensible Firmware Interface (UEFI) must require authentication upon booting into single-user mode and maintenance.</title><description>&lt;VulnDiscussion&gt;If the system does not require valid authentication before it boots into single-user or maintenance mode, anyone who invokes single-user or maintenance mode is granted privileged access to all files on the system. GRUB 2 is the default boot loader for OL 8 and is designed to require a password to boot into single-user mode or modify the boot menu.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-51925r779176_fix">Configure the system to require an encrypted grub bootloader password for the grub superusers account with the grub2-setpassword command, which creates/overwrites the "/boot/efi/EFI/redhat/user.cfg" file. 
  
 Generate an encrypted grub2 password for the grub superusers account with the following command: 
  
@@ -439,7 +442,7 @@ $ sudo grep -iw grub2_password /boot/efi/EFI/redhat/user.cfg
  
 GRUB2_PASSWORD=grub.pbkdf2.sha512.[password_hash] 
  
-If the grub superusers account password does not begin with "grub.pbkdf2.sha512", this is a finding.</check-content></check></Rule></Group><Group id="V-248538"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248538r1117265_rule" weight="10.0" severity="medium"><version>OL08-00-010141</version><title>OL 8 operating systems booted with United Extensible Firmware Interface (UEFI) must have a unique name for the grub superusers account when booting into single-user mode and maintenance.</title><description>&lt;VulnDiscussion&gt;If the system does not require valid authentication before it boots into single-user or maintenance mode, anyone who invokes single-user or maintenance mode is granted privileged access to all files on the system. GRUB 2 is the default boot loader for OL 8 and is designed to require a password to boot into single-user mode or modify the boot menu.
+If the grub superusers account password does not begin with "grub.pbkdf2.sha512", this is a finding.</check-content></check></Rule></Group><Group id="V-248538"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248538r1137691_rule" weight="10.0" severity="medium"><version>OL08-00-010141</version><title>OL 8 operating systems booted with United Extensible Firmware Interface (UEFI) must have a unique name for the grub superusers account when booting into single-user mode and maintenance.</title><description>&lt;VulnDiscussion&gt;If the system does not require valid authentication before it boots into single-user or maintenance mode, anyone who invokes single-user or maintenance mode is granted privileged access to all files on the system. GRUB 2 is the default boot loader for OL 8 and is designed to require a password to boot into single-user mode or modify the boot menu.
 The GRUB 2 superuser account is an account of last resort. Establishing a unique username for this account hardens the boot loader against brute force attacks. Due to the nature of the superuser account database being distinct from the OS account database, this allows the use of a username that is not among those within the OS account database. Examples of non-unique superusers names are (root, superuser, unlock, etc.)&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-51926r779179_fix">Configure the system to replace "root" with a unique name for the grub superusers account.
 
 Edit the /etc/grub.d/01_users file and add or modify the following lines:
@@ -458,7 +461,7 @@ $ sudo grep -iw "superusers" /boot/efi/EFI/redhat/grub.cfg
 set superusers="[someuniqueUserNamehere]"
 export superusers
 
-If "superusers" is identical to any OS account name or is missing a name, this is a finding.</check-content></check></Rule></Group><Group id="V-248539"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248539r1117265_rule" weight="10.0" severity="medium"><version>OL08-00-010149</version><title>OL 8 operating systems booted with a BIOS must have a unique name for the grub superusers account when booting into single-user and maintenance modes.</title><description>&lt;VulnDiscussion&gt;If the system does not require valid authentication before it boots into single-user or maintenance mode, anyone who invokes single-user or maintenance mode is granted privileged access to all files on the system. GRUB 2 is the default boot loader for OL 8 and is designed to require a password to boot into single-user mode or modify the boot menu.
+If "superusers" is identical to any OS account name or is missing a name, this is a finding.</check-content></check></Rule></Group><Group id="V-248539"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248539r1137691_rule" weight="10.0" severity="medium"><version>OL08-00-010149</version><title>OL 8 operating systems booted with a BIOS must have a unique name for the grub superusers account when booting into single-user and maintenance modes.</title><description>&lt;VulnDiscussion&gt;If the system does not require valid authentication before it boots into single-user or maintenance mode, anyone who invokes single-user or maintenance mode is granted privileged access to all files on the system. GRUB 2 is the default boot loader for OL 8 and is designed to require a password to boot into single-user mode or modify the boot menu.
 The GRUB 2 superuser account is an account of last resort.  Establishing a unique username for this account hardens the boot loader against brute force attacks. Due to the nature of the superuser account database being distinct from the OS account database, this allows the use of a username that is not among those within the OS account database. Examples of non-unique superusers names are (root, superuser, unlock, etc.)&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-51927r779182_fix">Configure the system to replace "root" with a unique name for the grub superusers account.
 
 Edit the /etc/grub.d/01_users file and add or modify the following lines:
@@ -477,7 +480,7 @@ $ sudo grep -iw "superusers" /boot/grub2/grub.cfg
 set superusers="[someuniqueUserNamehere]"
 export superusers
 
-If "superusers" is identical to any OS account name or is missing a name, this is a finding.</check-content></check></Rule></Group><Group id="V-248540"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248540r1117265_rule" weight="10.0" severity="high"><version>OL08-00-010150</version><title>OL 8 operating systems booted with a BIOS must require authentication upon booting into single-user and maintenance modes.</title><description>&lt;VulnDiscussion&gt;If the system does not require valid authentication before it boots into single-user or maintenance mode, anyone who invokes single-user or maintenance mode is granted privileged access to all files on the system. GRUB 2 is the default boot loader for OL 8 and is designed to require a password to boot into single-user mode or modify the boot menu.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-51928r779185_fix">Configure the system to require a grub bootloader password for the grub superusers account with the grub2-setpassword command, which creates/overwrites the "/boot/grub2/user.cfg" file. 
+If "superusers" is identical to any OS account name or is missing a name, this is a finding.</check-content></check></Rule></Group><Group id="V-248540"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248540r1137691_rule" weight="10.0" severity="high"><version>OL08-00-010150</version><title>OL 8 operating systems booted with a BIOS must require authentication upon booting into single-user and maintenance modes.</title><description>&lt;VulnDiscussion&gt;If the system does not require valid authentication before it boots into single-user or maintenance mode, anyone who invokes single-user or maintenance mode is granted privileged access to all files on the system. GRUB 2 is the default boot loader for OL 8 and is designed to require a password to boot into single-user mode or modify the boot menu.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-51928r779185_fix">Configure the system to require a grub bootloader password for the grub superusers account with the grub2-setpassword command, which creates/overwrites the "/boot/grub2/user.cfg" file. 
  
 Generate an encrypted grub2 password for the grub superusers account with the following command: 
  
@@ -491,7 +494,7 @@ $ sudo grep -iw grub2_password /boot/grub2/user.cfg
  
 GRUB2_PASSWORD=grub.pbkdf2.sha512.[password_hash] 
  
-If the grub superusers account password does not begin with "grub.pbkdf2.sha512", this is a finding.</check-content></check></Rule></Group><Group id="V-248541"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248541r1117265_rule" weight="10.0" severity="medium"><version>OL08-00-010151</version><title>OL 8 operating systems must require authentication upon booting into rescue mode.</title><description>&lt;VulnDiscussion&gt;If the system does not require valid root authentication before it boots into emergency or rescue mode, anyone who invokes emergency or rescue mode is granted privileged access to all files on the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-51929r779188_fix">Configure the system to require authentication upon booting into rescue mode by adding the following line to the "/usr/lib/systemd/system/rescue.service" file: 
+If the grub superusers account password does not begin with "grub.pbkdf2.sha512", this is a finding.</check-content></check></Rule></Group><Group id="V-248541"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248541r1137691_rule" weight="10.0" severity="medium"><version>OL08-00-010151</version><title>OL 8 operating systems must require authentication upon booting into rescue mode.</title><description>&lt;VulnDiscussion&gt;If the system does not require valid root authentication before it boots into emergency or rescue mode, anyone who invokes emergency or rescue mode is granted privileged access to all files on the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-51929r779188_fix">Configure the system to require authentication upon booting into rescue mode by adding the following line to the "/usr/lib/systemd/system/rescue.service" file: 
  
 ExecStart=-/usr/lib/systemd/systemd-sulogin-shell rescue</fixtext><fix id="F-51929r779188_fix" /><check system="C-51975r779187_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Determine if the system requires authentication for rescue mode with the following command: 
  
@@ -499,7 +502,7 @@ $ sudo grep sulogin-shell /usr/lib/systemd/system/rescue.service
  
 ExecStart=-/usr/lib/systemd/systemd-sulogin-shell rescue 
  
-If the "ExecStart" line is configured for anything other than "/usr/lib/systemd/systemd-sulogin-shell rescue" or is commented out or missing, this is a finding.</check-content></check></Rule></Group><Group id="V-248542"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248542r1117265_rule" weight="10.0" severity="medium"><version>OL08-00-010152</version><title>OL 8 operating systems must require authentication upon booting into emergency mode.</title><description>&lt;VulnDiscussion&gt;If the system does not require valid root authentication before it boots into emergency or rescue mode, anyone who invokes emergency or rescue mode is granted privileged access to all files on the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-51930r779191_fix">Configure the system to require authentication upon booting into emergency mode by adding the following line to the "/usr/lib/systemd/system/emergency.service" file: 
+If the "ExecStart" line is configured for anything other than "/usr/lib/systemd/systemd-sulogin-shell rescue" or is commented out or missing, this is a finding.</check-content></check></Rule></Group><Group id="V-248542"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248542r1137691_rule" weight="10.0" severity="medium"><version>OL08-00-010152</version><title>OL 8 operating systems must require authentication upon booting into emergency mode.</title><description>&lt;VulnDiscussion&gt;If the system does not require valid root authentication before it boots into emergency or rescue mode, anyone who invokes emergency or rescue mode is granted privileged access to all files on the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-51930r779191_fix">Configure the system to require authentication upon booting into emergency mode by adding the following line to the "/usr/lib/systemd/system/emergency.service" file: 
  
 ExecStart=-/usr/lib/systemd/systemd-sulogin-shell emergency</fixtext><fix id="F-51930r779191_fix" /><check system="C-51976r779190_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Determine if the system requires authentication for emergency mode with the following command: 
  
@@ -612,7 +615,7 @@ $ sudo yum list installed policycoreutils
  
 policycoreutils.x86_64 2.9-3.el8 @anaconda 
  
-If the "policycoreutils" package is not installed, this is a finding.</check-content></check></Rule></Group><Group id="V-248551"><title>SRG-OS-000138-GPOS-00069</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248551r1117267_rule" weight="10.0" severity="medium"><version>OL08-00-010190</version><title>A sticky bit must be set on all OL 8 public directories to prevent unauthorized and unintended information transferred via shared system resources.</title><description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection. 
+If the "policycoreutils" package is not installed, this is a finding.</check-content></check></Rule></Group><Group id="V-248551"><title>SRG-OS-000138-GPOS-00069</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248551r1137695_rule" weight="10.0" severity="medium"><version>OL08-00-010190</version><title>A sticky bit must be set on all OL 8 public directories to prevent unauthorized and unintended information transferred via shared system resources.</title><description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection. 
  
 This requirement generally applies to the design of an information technology product, but it can also apply to the configuration of particular information system components that are, or use, such products. This can be verified by acceptance/validation processes in DoD or other government agencies. 
  
@@ -754,45 +757,58 @@ $ sudo grep -i CRYPTO_POLICY /etc/sysconfig/sshd
 
 # CRYPTO_POLICY=
 
-If the "CRYPTO_POLICY" is uncommented, this is a finding.</check-content></check></Rule></Group><Group id="V-248561"><title>SRG-OS-000125-GPOS-00065</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248561r958510_rule" weight="10.0" severity="medium"><version>OL08-00-010290</version><title>The OL 8 SSH server must be configured to use only Message Authentication Codes (MACs) employing FIPS 140-2 validated cryptographic hash algorithms.</title><description>&lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection. 
- 
-Remote access (e.g., RDP) is access to DoD nonpublic information systems by an authorized user (or an information system) communicating through an external, non-organization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless. 
- 
-Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography, enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash. 
- 
-OL 8 incorporates system-wide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the "/etc/sysconfig/sshd" file. The employed algorithms can be viewed in the "/etc/crypto-policies/back-ends/opensshserver.config" file.
+If the "CRYPTO_POLICY" is uncommented, this is a finding.</check-content></check></Rule></Group><Group id="V-248561"><title>SRG-OS-000125-GPOS-00065</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248561r1156661_rule" weight="10.0" severity="medium"><version>OL08-00-010290</version><title>The OL 8 SSH server must be configured to use only Message Authentication Codes (MACs) employing FIPS 140-3 validated cryptographic hash algorithms to protect the confidentiality of SSH server connections.</title><description>&lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
 
-The system will attempt to use the first hash presented by the client that matches the server list. Listing the values "strongest to weakest" is a method to ensure the use of the strongest hash available to secure the SSH connection.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000877</ident><fixtext fixref="F-51949r917901_fix">Configure the OL 8 SSH server to use only MACs employing FIPS 140-2 approved algorithms:
+Remote access (e.g., RDP) is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
 
-Update the "/etc/crypto-policies/back-ends/opensshserver.config" file to include these MACs employing FIPS 140-2 approved algorithms: 
- 
--oMACS=hmac-sha2-512,hmac-sha2-256,hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com
- 
-A reboot is required for the changes to take effect.</fixtext><fix id="F-51949r917901_fix" /><check system="C-51995r917900_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify the SSH server is configured to use only MACs employing FIPS 140-2-approved algorithms with the following command:
+Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
 
-     $ sudo grep -i macs /etc/crypto-policies/back-ends/opensshserver.config
+OL 8 incorporates systemwide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the /etc/sysconfig/sshd file. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/opensshserver.config file.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000877</ident><fixtext fixref="F-51949r1156660_fix">Configure the OL 8 SSH server to use only MACs employing FIPS 140-3-approved algorithms.
 
-     -oMACS=hmac-sha2-512,hmac-sha2-256,hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com
+Reinstall crypto-policies with the following command:
 
-If the MACs entries in the "opensshserver.config" file have any hashes other than shown here, the order differs from the example above, or they are missing or commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-248562"><title>SRG-OS-000125-GPOS-00065</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248562r958510_rule" weight="10.0" severity="medium"><version>OL08-00-010291</version><title>The OL 8 SSH server must be configured to use only ciphers employing FIPS 140-2 validated cryptographic algorithms.</title><description>&lt;VulnDiscussion&gt;Unapproved mechanisms that are used for authentication to the cryptographic module are not verified and therefore cannot be relied on to provide confidentiality or integrity, and DoD data may be compromised. 
- 
-Operating systems using encryption are required to use FIPS-compliant mechanisms for authenticating to cryptographic modules. 
- 
-FIPS 140-2 is the current standard for validating that mechanisms used to access cryptographic modules use authentication that meets DoD requirements. This allows for Security Levels 1, 2, 3, or 4 for use on a general-purpose computing system.
+$ sudo dnf -y reinstall crypto-policies
 
-The system will attempt to use the first hash presented by the client that matches the server list. Listing the values "strongest to weakest" is a method to ensure the use of the strongest cipher available to secure the SSH connection.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000877</ident><fixtext fixref="F-51950r917904_fix">Configure the OL 8 SSH server to use only ciphers employing FIPS 140-2 approved algorithms: 
+Set the crypto-policy to FIPS with the following command:
 
-Update the "/etc/crypto-policies/back-ends/opensshserver.config" file to include these ciphers employing FIPS 140-2-approved algorithms: 
- 
-CRYPTO_POLICY='-oCiphers=aes256-ctr,aes192-ctr,aes128-ctr,aes256-gcm@openssh.com,aes128-gcm@openssh.com'
- 
-A reboot is required for the changes to take effect.</fixtext><fix id="F-51950r917904_fix" /><check system="C-51996r917903_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify the OL 8 SSH server is configured to use only ciphers employing FIPS 140-2 approved algorithms with the following command: 
-  
-     $ sudo grep -i ciphers /etc/crypto-policies/back-ends/opensshserver.config 
- 
-     CRYPTO_POLICY='-oCiphers=aes256-ctr,aes192-ctr,aes128-ctr,aes256-gcm@openssh.com,aes128-gcm@openssh.com'
- 
-If the cipher entries in the "opensshserver.config" file have any ciphers other than shown here, the order differs from the example above, or they are missing or commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-248563"><title>SRG-OS-000480-GPOS-00232</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248563r991593_rule" weight="10.0" severity="low"><version>OL08-00-010292</version><title>The OL 8 SSH server must be configured to use strong entropy.</title><description>&lt;VulnDiscussion&gt;The most important characteristic of a random number generator is its randomness, namely its ability to deliver random numbers that are impossible to predict. Entropy in computer security is associated with the unpredictability of a source of randomness. The random source with high entropy tends to achieve a uniform distribution of random values. Random number generators are one of the most important building blocks of cryptosystems. 
+$ sudo update-crypto-policies --set FIPS
+
+Setting system policy to FIPS
+
+Note: Systemwide crypto policies are applied on application startup. It is recommended to restart the system for the change of policies to fully take place.</fixtext><fix id="F-51949r1156660_fix" /><check system="C-51995r1156659_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify the OL 8 SSH server is configured to use only MACs employing FIPS 140-3-approved algorithms.
+
+To verify the MACs in the systemwide SSH configuration file, use the following command:
+
+$ sudo grep -i MACs /etc/crypto-policies/back-ends/opensshserver.config
+
+-oMACs=hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-256
+
+If the MACs entries in the "opensshserver.config" file have any hashes other than "hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-256", or they are missing or commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-248562"><title>SRG-OS-000125-GPOS-00065</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248562r1156658_rule" weight="10.0" severity="medium"><version>OL08-00-010291</version><title>The OL 8 SSH server must be configured to use only DOD-approved encryption ciphers employing FIPS 140-3 validated cryptographic hash algorithms to protect the confidentiality of SSH server connections.</title><description>&lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
+
+Remote access (e.g., RDP) is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
+
+Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
+
+OL 8 incorporates systemwide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the /etc/sysconfig/sshd file. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/opensshserver.config file.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000877</ident><fixtext fixref="F-51950r1156657_fix">Configure the OL 8 SSH server to use only ciphers employing FIPS 140-3-approved algorithms.
+
+Reinstall crypto-policies with the following command:
+
+$ sudo dnf -y reinstall crypto-policies
+
+Set the crypto-policy to FIPS with the following command:
+
+$ sudo update-crypto-policies --set FIPS
+
+Setting system policy to FIPS
+
+Note: Systemwide crypto policies are applied on application startup. It is recommended to restart the system for the change of policies to fully take place.</fixtext><fix id="F-51950r1156657_fix" /><check system="C-51996r1156656_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify the OL 8 SSH server is configured to use only ciphers employing FIPS 140-3-approved algorithms.
+
+To verify the ciphers in the systemwide SSH configuration file, use the following command:
+
+$ sudo grep -i Ciphers /etc/crypto-policies/back-ends/opensshserver.config 
+CRYPTO_POLICY='-oCiphers=aes256-gcm@openssh.com,aes256-ctr,aes128-gcm@openssh.com,aes128-ctr
+
+If the cipher entries in the "opensshserver.config" file have any ciphers other than "aes256-gcm@openssh.com,aes256-ctr,aes128-gcm@openssh.com,aes128-ctr", or they are missing or commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-248563"><title>SRG-OS-000480-GPOS-00232</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248563r991593_rule" weight="10.0" severity="low"><version>OL08-00-010292</version><title>The OL 8 SSH server must be configured to use strong entropy.</title><description>&lt;VulnDiscussion&gt;The most important characteristic of a random number generator is its randomness, namely its ability to deliver random numbers that are impossible to predict. Entropy in computer security is associated with the unpredictability of a source of randomness. The random source with high entropy tends to achieve a uniform distribution of random values. Random number generators are one of the most important building blocks of cryptosystems. 
  
 The SSH implementation in OL 8 uses the OPENSSL library, which does not use high-entropy sources by default. By using the SSH_USE_STRONG_RNG environment variable, the OPENSSL random generator is reseeded from "/dev/random". This setting is not recommended on computers without the hardware random generator because insufficient entropy causes the connection to be blocked until enough entropy is available.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-51951r779254_fix">Configure the operating system SSH server to use strong entropy. 
  
@@ -1001,241 +1017,146 @@ $ sudo grep -i localpkg_gpgcheck /etc/dnf/dnf.conf
 
 localpkg_gpgcheck =True
 
-If "localpkg_gpgcheck" is not set to either "1", "True", or "yes", commented out, or is missing from "/etc/dnf/dnf.conf", this is a finding.</check-content></check></Rule></Group><Group id="V-248576"><title>SRG-OS-000366-GPOS-00153</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248576r1015033_rule" weight="10.0" severity="medium"><version>OL08-00-010372</version><title>OL 8 must prevent the loading of a new kernel for later execution.</title><description>&lt;VulnDiscussion&gt;Changes to any software components can have significant effects on the overall security of the operating system. This requirement ensures the software has not been tampered with and that it has been provided by a trusted vendor.
+If "localpkg_gpgcheck" is not set to either "1", "True", or "yes", commented out, or is missing from "/etc/dnf/dnf.conf", this is a finding.</check-content></check></Rule></Group><Group id="V-248576"><title>SRG-OS-000366-GPOS-00153</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248576r1156619_rule" weight="10.0" severity="medium"><version>OL08-00-010372</version><title>OL 8 must prevent the loading of a new kernel for later execution.</title><description>&lt;VulnDiscussion&gt;Changes to any software components can have significant effects on the overall security of the operating system. This requirement ensures the software has not been tampered with and that it has been provided by a trusted vendor.
 
 Disabling "kexec_load" prevents an unsigned kernel image (that could be a windows kernel or modified vulnerable kernel) from being loaded. Kexec can be used to subvert the entire secureboot process and should be avoided at all costs, especially since it can load unsigned kernel images.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-003992</ident><ident system="http://cyber.mil/cci">CCI-001749</ident><fixtext fixref="F-51964r858608_fix">Configure OL 8 to disable kernel image loading.
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-003992</ident><ident system="http://cyber.mil/cci">CCI-001749</ident><fixtext fixref="F-51964r1155437_fix">Configure OL 8 to prevent the loading of a new kernel for later execution.
 
 Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
 
 kernel.kexec_load_disabled = 1
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
-
 Load settings from all system configuration files with the following command:
 
-$ sudo sysctl --system</fixtext><fix id="F-51964r858608_fix" /><check system="C-52010r986334_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Note: For OL 8 systems using the Oracle Unbreakable Enterprise Kernel (UEK) Release 6 or above and with secureboot enabled, this requirement is Not Applicable.
-
-Verify the operating system is configured to disable kernel image loading with the following commands.
+$ sudo sysctl --system</fixtext><fix id="F-51964r1155437_fix" /><check system="C-52010r1155436_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Note: For OL 8 systems using the Oracle Unbreakable Enterprise Kernel (UEK) Release 6 or above and with secureboot enabled, this requirement is Not Applicable.
 
-Check the status of the "kernel.kexec_load_disabled" kernel parameter:
+Verify OL 8 is configured to disable kernel image loading.
 
-$ sudo sysctl kernel.kexec_load_disabled
+Check the status of the kernel.kexec_load_disabled kernel parameter with the following command:
 
+$ sysctl kernel.kexec_load_disabled
 kernel.kexec_load_disabled = 1
 
-If "kernel.kexec_load_disabled" is not set to "1" or is missing, this is a finding.
-
-Check that the configuration files are present to enable this kernel parameter:
-
-$ sudo grep -r kernel.kexec_load_disabled /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf:kernel.kexec_load_disabled = 1
-
-If "kernel.kexec_load_disabled" is not set to "1" or is missing or commented out, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-248577"><title>SRG-OS-000312-GPOS-00122</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248577r958702_rule" weight="10.0" severity="medium"><version>OL08-00-010373</version><title>OL 8 must enable kernel parameters to enforce Discretionary Access Control (DAC) on symlinks.</title><description>&lt;VulnDiscussion&gt;DAC is based on the notion that individual users are "owners" of objects and therefore have discretion over who should be authorized to access the object and in which mode (e.g., read or write). Ownership is usually acquired as a consequence of creating the object or via specified ownership assignment. DAC allows the owner to determine who will have access to objects they control. An example of DAC includes user-controlled file permissions.
+If "kernel.kexec_load_disabled" is not set to "1" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-248577"><title>SRG-OS-000312-GPOS-00122</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248577r1156620_rule" weight="10.0" severity="medium"><version>OL08-00-010373</version><title>OL 8 must enable kernel parameters to enforce Discretionary Access Control (DAC) on symlinks.</title><description>&lt;VulnDiscussion&gt;DAC is based on the notion that individual users are "owners" of objects and therefore have discretion over who should be authorized to access the object and in which mode (e.g., read or write). Ownership is usually acquired as a consequence of creating the object or via specified ownership assignment. DAC allows the owner to determine who will have access to objects they control. An example of DAC includes user-controlled file permissions.
 
 When DAC policies are implemented, subjects are not constrained as to what actions they can take with information for which they have already been granted access. Thus, subjects that have been granted access to information are not prevented from passing (i.e., the subjects have the discretion to pass) the information to other subjects or objects. A subject that is constrained in its operation by Mandatory Access Control (MAC) policies is still able to operate under the less rigorous constraints of this requirement. Therefore, while MAC imposes constraints preventing a subject from passing information to another subject operating at a different sensitivity level, this requirement permits the subject to pass the information to any subject at the same sensitivity level. The policy is bounded by the information system boundary. Once the information is passed outside the control of the information system, additional means may be required to ensure the constraints remain in effect. While the older, more traditional definitions of DAC require identity-based access control, that limitation is not required for this use of DAC.
 
 By enabling the "fs.protected_symlinks" kernel parameter, symbolic links are permitted to be followed only when outside a sticky world-writable directory, or when the UID of the link and follower match, or when the directory owner matches the symlink's owner. Disallowing such symlinks helps mitigate vulnerabilities based on insecure file system accessed by privileged programs, avoiding an exploitation vector exploiting unsafe use of open() or creat().
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-002165</ident><fixtext fixref="F-51965r858611_fix">Configure OL 8 to enable DAC on symlinks.
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-002165</ident><fixtext fixref="F-51965r1155440_fix">Configure OL 8 to enable DAC on symlinks with the following:
 
 Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
 
 fs.protected_symlinks = 1
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
-
 Load settings from all system configuration files with the following command:
 
-$ sudo sysctl --system</fixtext><fix id="F-51965r858611_fix" /><check system="C-52011r858610_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify the operating system is configured to enable DAC on symlinks with the following commands.
+$ sudo sysctl --system</fixtext><fix id="F-51965r1155440_fix" /><check system="C-52011r1155439_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 is configured to enable DAC on symlinks.
 
-Check the status of the "fs.protected_symlinks" kernel parameter:
+Check the status of the fs.protected_symlinks kernel parameter with the following command:
 
 $ sudo sysctl fs.protected_symlinks
-
 fs.protected_symlinks = 1
 
-If "fs.protected_symlinks" is not set to "1" or is missing, this is a finding.
-
-Check that the configuration files are present to enable this kernel parameter:
-
-$ sudo grep -r fs.protected_symlinks /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf:fs.protected_symlinks = 1
-
-If "fs.protected_symlinks" is not set to "1" or is missing or commented out, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-248578"><title>SRG-OS-000312-GPOS-00122</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248578r958702_rule" weight="10.0" severity="medium"><version>OL08-00-010374</version><title>OL 8 must enable kernel parameters to enforce Discretionary Access Control (DAC) on hardlinks.</title><description>&lt;VulnDiscussion&gt;DAC is based on the notion that individual users are "owners" of objects and therefore have discretion over who should be authorized to access the object and in which mode (e.g., read or write). Ownership is usually acquired as a consequence of creating the object or via specified ownership assignment. DAC allows the owner to determine who will have access to objects they control. An example of DAC includes user-controlled file permissions.
+If "fs.protected_symlinks " is not set to "1" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-248578"><title>SRG-OS-000312-GPOS-00122</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248578r1156621_rule" weight="10.0" severity="medium"><version>OL08-00-010374</version><title>OL 8 must enable kernel parameters to enforce Discretionary Access Control (DAC) on hardlinks.</title><description>&lt;VulnDiscussion&gt;DAC is based on the notion that individual users are "owners" of objects and therefore have discretion over who should be authorized to access the object and in which mode (e.g., read or write). Ownership is usually acquired as a consequence of creating the object or via specified ownership assignment. DAC allows the owner to determine who will have access to objects they control. An example of DAC includes user-controlled file permissions.
 
 When DAC policies are implemented, subjects are not constrained as to what actions they can take with information for which they have already been granted access. Thus, subjects that have been granted access to information are not prevented from passing (i.e., the subjects have the discretion to pass) the information to other subjects or objects. A subject that is constrained in its operation by Mandatory Access Control (MAC) policies is still able to operate under the less rigorous constraints of this requirement. Therefore, while MAC imposes constraints preventing a subject from passing information to another subject operating at a different sensitivity level, this requirement permits the subject to pass the information to any subject at the same sensitivity level. The policy is bounded by the information system boundary. Once the information is passed outside the control of the information system, additional means may be required to ensure the constraints remain in effect. While the older, more traditional definitions of DAC require identity-based access control, that limitation is not required for this use of DAC.
 
 By enabling the "fs.protected_hardlinks" kernel parameter, users can no longer create soft or hard links to files they do not own. Disallowing such hardlinks mitigate vulnerabilities based on insecure file system accessed by privileged programs, avoiding an exploitation vector exploiting unsafe use of open() or creat().
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-002165</ident><fixtext fixref="F-51966r858614_fix">Configure OL 8 to enable DAC on hardlinks.
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-002165</ident><fixtext fixref="F-51966r1155443_fix">Configure OL 8 to enable DAC on hardlinks with the following:
 
 Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
 
 fs.protected_hardlinks = 1
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
-
 Load settings from all system configuration files with the following command:
 
-$ sudo sysctl --system</fixtext><fix id="F-51966r858614_fix" /><check system="C-52012r858613_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify the operating system is configured to enable DAC on hardlinks with the following commands.
+$ sudo sysctl --system</fixtext><fix id="F-51966r1155443_fix" /><check system="C-52012r1155442_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 is configured to enable DAC on hardlinks.
 
-Check the status of the "fs.protected_hardlinks" kernel parameter:
+Check the status of the fs.protected_hardlinks kernel parameter with the following command:
 
 $ sudo sysctl fs.protected_hardlinks
-
 fs.protected_hardlinks = 1
 
-If "fs.protected_hardlinks" is not set to "1" or is missing, this is a finding.
-
-Check that the configuration files are present to enable this kernel parameter:
-
-$ sudo grep -r fs.protected_hardlinks /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf:fs.protected_hardlinks = 1
+If "fs.protected_hardlinks" is not set to "1" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-248579"><title>SRG-OS-000138-GPOS-00069</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248579r1156622_rule" weight="10.0" severity="low"><version>OL08-00-010375</version><title>OL 8 must restrict access to the kernel message buffer.</title><description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
 
-If "fs.protected_hardlinks" is not set to "1" or is missing or commented out, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-248579"><title>SRG-OS-000138-GPOS-00069</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248579r1117267_rule" weight="10.0" severity="low"><version>OL08-00-010375</version><title>OL 8 must restrict access to the kernel message buffer.</title><description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
-
-This requirement generally applies to the design of an information technology product, but it can also apply to the configuration of particular information system components that are, or use, such products. This can be verified by acceptance/validation processes in DoD or other government agencies.
+This requirement generally applies to the design of an information technology product, but it can also apply to the configuration of particular information system components that are, or use, such products. This can be verified by acceptance/validation processes in DOD or other government agencies.
 
 There may be shared resources with configurable protections (e.g., files in storage) that may be assessed on specific information system components.
 
-Restricting access to the kernel message buffer limits access to only root. This prevents attackers from gaining additional system information as a non-privileged user.
+Restricting access to the kernel message buffer limits access to only root. This prevents attackers from gaining additional system information as a nonprivileged user.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001090</ident><fixtext fixref="F-51967r858616_fix">Configure OL 8 to restrict access to the kernel message buffer.
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001090</ident><fixtext fixref="F-51967r1155446_fix">Configure OL 8 to restrict access to the kernel message buffer.
 
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+Add or edit the following line in /etc/sysctl.d/99-sysctl.conf system configuration file:
 
 kernel.dmesg_restrict = 1
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
-
 Load settings from all system configuration files with the following command:
 
-$ sudo sysctl --system</fixtext><fix id="F-51967r858616_fix" /><check system="C-52013r833200_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify the operating system is configured to restrict access to the kernel message buffer with the following commands.
+$ sudo sysctl --system</fixtext><fix id="F-51967r1155446_fix" /><check system="C-52013r1155445_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 is configured to restrict access to the kernel message buffer with the following commands:
 
-Check the status of the "kernel.dmesg_restrict" kernel parameter:
+Check the status of the kernel.dmesg_restrict kernel parameter.
 
 $ sudo sysctl kernel.dmesg_restrict
-
 kernel.dmesg_restrict = 1
 
-If "kernel.dmesg_restrict" is not set to "1" or is missing, this is a finding.
-
-Check that the configuration files are present to enable this kernel parameter:
-
-$ sudo grep -r kernel.dmesg_restrict /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf:kernel.dmesg_restrict = 1
-
-If "kernel.dmesg_restrict" is not set to "1" or is missing or commented out, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-248580"><title>SRG-OS-000138-GPOS-00069</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248580r1117267_rule" weight="10.0" severity="low"><version>OL08-00-010376</version><title>OL 8 must prevent kernel profiling by unprivileged users.</title><description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection. 
+If "kernel.dmesg_restrict" is not set to "1" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-248580"><title>SRG-OS-000138-GPOS-00069</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248580r1156623_rule" weight="10.0" severity="low"><version>OL08-00-010376</version><title>OL 8 must prevent kernel profiling by nonprivileged users.</title><description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection. 
  
-This requirement generally applies to the design of an information technology product, but it can also apply to the configuration of particular information system components that are, or use, such products. This can be verified by acceptance/validation processes in DoD or other government agencies. 
+This requirement generally applies to the design of an information technology product, but it can also apply to the configuration of particular information system components that are, or use, such products. This can be verified by acceptance/validation processes in DOD or other government agencies. 
  
 There may be shared resources with configurable protections (e.g., files in storage) that may be assessed on specific information system components.
  
-Setting the "kernel.perf_event_paranoid" kernel parameter to "2" prevents attackers from gaining additional system information as a non-privileged user.
+Setting the "kernel.perf_event_paranoid" kernel parameter to "2" prevents attackers from gaining additional system information as a nonprivileged user.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001090</ident><fixtext fixref="F-51968r858618_fix">Configure OL 8 to prevent kernel profiling by unprivileged users.
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001090</ident><fixtext fixref="F-51968r1155449_fix">Configure OL 8 to prevent kernel profiling by nonprivileged users.
 
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+Add or edit the following line in /etc/sysctl.d/99-sysctl.conf system configuration file:
 
 kernel.perf_event_paranoid = 2
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
-
 Load settings from all system configuration files with the following command:
 
-$ sudo sysctl --system</fixtext><fix id="F-51968r858618_fix" /><check system="C-52014r833202_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify the operating system is configured to prevent kernel profiling by unprivileged users with the following commands.
+$ sudo sysctl --system</fixtext><fix id="F-51968r1155449_fix" /><check system="C-52014r1155448_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 is configured to prevent kernel profiling by nonprivileged users with the following commands:
 
-Check the status of the "kernel.perf_event_paranoid" kernel parameter:
-
-$ sudo sysctl kernel.perf_event_paranoid
+Check the status of the kernel.perf_event_paranoid kernel parameter.
 
+$ sysctl kernel.perf_event_paranoid
 kernel.perf_event_paranoid = 2
 
-If "kernel.perf_event_paranoid" is not set to "2" or is missing, this is a finding.
-
-Check that the configuration files are present to enable this kernel parameter:
-
-$ sudo grep -r kernel.perf_event_paranoid /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf:kernel.perf_event_paranoid = 2
-
-If "kernel.perf_event_paranoid" is not set to "2" or is missing or commented out, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-248581"><title>SRG-OS-000373-GPOS-00156</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248581r1101870_rule" weight="10.0" severity="medium"><version>OL08-00-010380</version><title>OL 8 must require users to provide a password for privilege escalation.</title><description>&lt;VulnDiscussion&gt;Without reauthentication, users may access resources or perform tasks for which they do not have authorization.
+If "kernel.perf_event_paranoid" is not set to "2" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-248581"><title>SRG-OS-000373-GPOS-00156</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248581r1101870_rule" weight="10.0" severity="medium"><version>OL08-00-010380</version><title>OL 8 must require users to provide a password for privilege escalation.</title><description>&lt;VulnDiscussion&gt;Without reauthentication, users may access resources or perform tasks for which they do not have authorization.
 
 When operating systems provide the capability to escalate a functional capability, it is critical the user reauthenticate.
 
@@ -1474,49 +1395,30 @@ $ grubby --info=/boot/vmlinuz-$(uname -r) | grep mitigations
 
 If the "mitigations" parameter is set to "off" (mitigations=off), this is a finding.
 
-Note: The default behavior of the kernel is to enable mitigations for vulnerabilities like Meltdown and Spectre based on hardware and system requirements. Therefore, if the "mitigation" parameter is not present or if it is set to on this is not a finding.</check-content></check></Rule></Group><Group id="V-248594"><title>SRG-OS-000433-GPOS-00193</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248594r958928_rule" weight="10.0" severity="medium"><version>OL08-00-010430</version><title>OL 8 must implement address space layout randomization (ASLR) to protect its memory from unauthorized code execution.</title><description>&lt;VulnDiscussion&gt;Some adversaries launch attacks with the intent of executing code in non-executable regions of memory or in memory locations that are prohibited. Security safeguards employed to protect memory include, for example, data execution prevention and address space layout randomization. Data execution prevention safeguards can be either hardware-enforced or software-enforced, with hardware providing the greater strength of mechanism. 
+Note: The default behavior of the kernel is to enable mitigations for vulnerabilities like Meltdown and Spectre based on hardware and system requirements. Therefore, if the "mitigation" parameter is not present or if it is set to on this is not a finding.</check-content></check></Rule></Group><Group id="V-248594"><title>SRG-OS-000433-GPOS-00193</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248594r1156624_rule" weight="10.0" severity="medium"><version>OL08-00-010430</version><title>OL 8 must implement address space layout randomization (ASLR) to protect its memory from unauthorized code execution.</title><description>&lt;VulnDiscussion&gt;Some adversaries launch attacks with the intent of executing code in nonexecutable regions of memory or in memory locations that are prohibited. Security safeguards employed to protect memory include, for example, data execution prevention and address space layout randomization. Data execution prevention safeguards can be either hardware-enforced or software-enforced, with hardware providing the greater strength of mechanism. 
  
 Examples of attacks are buffer overflow attacks.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-002824</ident><fixtext fixref="F-51982r858626_fix">Configure OL 8 to implement virtual address space randomization. 
- 
-Set the system to the required kernel parameter by adding the following line to "/etc/sysctl.d/*.conf" (or modify the line to have the required value): 
- 
-kernel.randomize_va_space=2 
- 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-002824</ident><fixtext fixref="F-51982r1155452_fix">Configure OL 8 to implement ASLR to protect its memory from unauthorized code execution.
 
-Issue the following command to make the changes take effect: 
- 
-$ sudo sysctl --system</fixtext><fix id="F-51982r858626_fix" /><check system="C-52028r858625_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify that OL 8 implements ASLR with the following command: 
- 
-$ sudo sysctl kernel.randomize_va_space 
- 
-kernel.randomize_va_space = 2 
- 
-If "kernel.randomize_va_space" is not set to "2", this is a finding.
+Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
 
-Check that the configuration files are present to enable this kernel parameter.
+kernel.randomize_va_space = 2
 
-$ sudo grep -r kernel.randomize_va_space /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
+Reload settings from all system configuration files with the following command:
 
-/etc/sysctl.d/99-sysctl.conf:kernel.randomize_va_space = 2
+$ sudo sysctl --system</fixtext><fix id="F-51982r1155452_fix" /><check system="C-52028r1155451_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 is implementing ASLR with the following command:
 
-If "kernel.randomize_va_space" is not set to "2", is missing or commented out, this is a finding.
+$ sysctl kernel.randomize_va_space
+kernel.randomize_va_space = 2
 
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-248595"><title>SRG-OS-000437-GPOS-00194</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248595r958936_rule" weight="10.0" severity="low"><version>OL08-00-010440</version><title>YUM must remove all software components after updated versions have been installed on OL 8.</title><description>&lt;VulnDiscussion&gt;Previous versions of software components that are not removed from the information system after updates have been installed may be exploited by adversaries. Some information technology products may remove older versions of software automatically from the information system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-002617</ident><fixtext fixref="F-51983r779350_fix">Configure OL 8 to remove all software components after updated versions have been installed. 
+If "kernel.randomize_va_space" is not set to "2" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-248595"><title>SRG-OS-000437-GPOS-00194</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248595r958936_rule" weight="10.0" severity="low"><version>OL08-00-010440</version><title>YUM must remove all software components after updated versions have been installed on OL 8.</title><description>&lt;VulnDiscussion&gt;Previous versions of software components that are not removed from the information system after updates have been installed may be exploited by adversaries. Some information technology products may remove older versions of software automatically from the information system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-002617</ident><fixtext fixref="F-51983r779350_fix">Configure OL 8 to remove all software components after updated versions have been installed. 
  
 Set the "clean_requirements_on_remove" option to "True" in the "/etc/yum.conf" file: 
  
@@ -1790,7 +1692,7 @@ $ sudo mount | grep '\s/boot\s'
 
 /dev/sda1 on /boot type xfs (rw,nosuid,relatime,seclabe,attr2,inode64,noquota)
 
-If the /boot file system does not have the "nosuid" option set, this is a finding.</check-content></check></Rule></Group><Group id="V-248618"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248618r991589_rule" weight="10.0" severity="medium"><version>OL08-00-010572</version><title>OL 8 must prevent files with the setuid and setgid bit set from being executed on the /boot/efi directory.</title><description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system not to execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for unprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52006r779419_fix">Configure the "/etc/fstab" to use the "nosuid" option on the /boot/efi directory.</fixtext><fix id="F-52006r779419_fix" /><check system="C-52052r818647_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>For systems that use BIOS, this is Not Applicable.
+If the /boot file system does not have the "nosuid" option set, this is a finding.</check-content></check></Rule></Group><Group id="V-248618"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248618r1156675_rule" weight="10.0" severity="medium"><version>OL08-00-010572</version><title>OL 8 must prevent files with the setuid and setgid bit set from being executed on the /boot/efi directory.</title><description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system not to execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52006r779419_fix">Configure the "/etc/fstab" to use the "nosuid" option on the /boot/efi directory.</fixtext><fix id="F-52006r779419_fix" /><check system="C-52052r1155563_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Note: For vfat file systems and for systems that use BIOS, this is Not Applicable.
 
 Verify the /boot/efi directory is mounted with the "nosuid" option with the following command:
 
@@ -1798,7 +1700,9 @@ $ sudo mount | grep '\s/boot/efi\s'
 
 /dev/sda1 on /boot/efi type vfat (rw,nosuid,relatime,fmask=0077,dmask=0077,codepage=437,iocharset=ascii,shortname=winnt,errors=remount-ro)
 
-If the /boot/efi file system does not have the "nosuid" option set, this is a finding.</check-content></check></Rule></Group><Group id="V-248619"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248619r991589_rule" weight="10.0" severity="medium"><version>OL08-00-010580</version><title>OL 8 must prevent special devices on non-root local partitions.</title><description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for unprivileged users to attain unauthorized administrative access. The only legitimate location for device files is the /dev directory located on the root partition.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52007r779422_fix">Configure the "/etc/fstab" to use the "nodev" option on all non-root local partitions.</fixtext><fix id="F-52007r779422_fix" /><check system="C-52053r779421_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify all non-root local partitions are mounted with the "nodev" option with the following command:
+If the /boot/efi file system does not have the "nosuid" option set, this is a finding.</check-content></check></Rule></Group><Group id="V-248619"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248619r1156678_rule" weight="10.0" severity="medium"><version>OL08-00-010580</version><title>OL 8 must prevent special devices on nonroot local partitions.</title><description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access. The only legitimate location for device files is the /dev directory located on the root partition.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52007r1156677_fix">Configure the "/etc/fstab" to use the "nodev" option on all nonroot local partitions.</fixtext><fix id="F-52007r1156677_fix" /><check system="C-52053r1156676_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Note: This control is not applicable to vfat file systems.
+
+Verify all nonroot local partitions are mounted with the "nodev" option with the following command:
 
 $ sudo mount | grep '^/dev\S* on /\S' | grep --invert-match 'nodev'
 
@@ -1835,41 +1739,31 @@ $ sudo more /etc/fstab
  
 UUID=2bc871e4-e2a3-4f29-9ece-3be60c835222 /mnt/usbflash vfat noauto,owner,ro,nosuid,nodev,noexec 0 0 
  
-If a file system found in "/etc/fstab" refers to removable media and it does not have the "nosuid" option set, this is a finding.</check-content></check></Rule></Group><Group id="V-248624"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248624r991589_rule" weight="10.0" severity="medium"><version>OL08-00-010630</version><title>OL 8 file systems must not execute binary files that are imported via Network File System (NFS).</title><description>&lt;VulnDiscussion&gt;The "noexec" mount option causes the system not to execute binary files. This option must be used for mounting any file system not containing approved binary as they may be incompatible. Executing files from untrusted file systems increases the opportunity for unprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52012r779437_fix">Configure the "/etc/fstab" to use the "noexec" option on file systems that are being imported via NFS.</fixtext><fix id="F-52012r779437_fix" /><check system="C-52058r779436_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify that file systems being imported via NFS are mounted with the "noexec" option with the following command: 
+If a file system found in "/etc/fstab" refers to removable media and it does not have the "nosuid" option set, this is a finding.</check-content></check></Rule></Group><Group id="V-248624"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248624r1156664_rule" weight="10.0" severity="medium"><version>OL08-00-010630</version><title>OL 8 file systems must not execute binary files that are imported via Network File System (NFS).</title><description>&lt;VulnDiscussion&gt;The "noexec" mount option causes the system not to execute binary files. This option must be used for mounting any file system not containing approved binary as they may be incompatible. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52012r779437_fix">Configure the "/etc/fstab" to use the "noexec" option on file systems that are being imported via NFS.</fixtext><fix id="F-52012r779437_fix" /><check system="C-52058r1155536_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Note: If no NFS mounts are configured, this requirement is Not Applicable.
+
+Verify file systems being imported via NFS are mounted with the "noexec" option with the following command: 
  
 $ sudo grep nfs /etc/fstab | grep noexec 
  
 UUID=e06097bb-cfcd-437b-9e4d-a691f5662a7d /store nfs rw,nosuid,nodev,noexec 0 0 
  
-If a file system found in "/etc/fstab" refers to NFS and it does not have the "noexec" option set, this is a finding.</check-content></check></Rule></Group><Group id="V-248625"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248625r991589_rule" weight="10.0" severity="medium"><version>OL08-00-010640</version><title>OL 8 file systems must not interpret character or block special devices that are imported via NFS.</title><description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for unprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52013r779440_fix">Configure the "/etc/fstab" to use the "nodev" option on file systems that are being imported via NFS.</fixtext><fix id="F-52013r779440_fix" /><check system="C-52059r779439_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify that file systems being imported via NFS are mounted with the "nodev" option with the following command: 
+If a file system found in "/etc/fstab" refers to NFS and it does not have the "noexec" option set, this is a finding.</check-content></check></Rule></Group><Group id="V-248625"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248625r1156665_rule" weight="10.0" severity="medium"><version>OL08-00-010640</version><title>OL 8 file systems must not interpret character or block special devices that are imported via Network File System (NFS).</title><description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52013r779440_fix">Configure the "/etc/fstab" to use the "nodev" option on file systems that are being imported via NFS.</fixtext><fix id="F-52013r779440_fix" /><check system="C-52059r1155538_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Note: If no NFS mounts are configured, this requirement is Not Applicable.
+
+Verify file systems being imported via NFS are mounted with the "nodev" option with the following command: 
  
 $ sudo grep nfs /etc/fstab | grep nodev 
  
 UUID=e06097bb-cfcd-437b-9e4d-a691f5662a7d /store nfs rw,nosuid,nodev,noexec 0 0 
  
-If a file system found in "/etc/fstab" refers to NFS and it does not have the "nodev" option set, this is a finding.</check-content></check></Rule></Group><Group id="V-248626"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248626r991589_rule" weight="10.0" severity="medium"><version>OL08-00-010650</version><title>OL 8 must prevent files with the setuid and setgid bit set from being executed on file systems that are imported via Network File System (NFS).</title><description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system not to execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for unprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52014r779443_fix">Configure the "/etc/fstab" to use the "nosuid" option on file systems that are being imported via NFS.</fixtext><fix id="F-52014r779443_fix" /><check system="C-52060r779442_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify that file systems being imported via NFS are mounted with the "nosuid" option with the following command: 
+If a file system found in "/etc/fstab" refers to NFS and it does not have the "nodev" option set, this is a finding.</check-content></check></Rule></Group><Group id="V-248626"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248626r1156666_rule" weight="10.0" severity="medium"><version>OL08-00-010650</version><title>OL 8 must prevent files with the setuid and setgid bit set from being executed on file systems that are imported via Network File System (NFS).</title><description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system not to execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52014r779443_fix">Configure the "/etc/fstab" to use the "nosuid" option on file systems that are being imported via NFS.</fixtext><fix id="F-52014r779443_fix" /><check system="C-52060r1155540_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Note: If no NFS mounts are configured, this requirement is Not Applicable.
+
+Verify file systems being imported via NFS are mounted with the "nosuid" option with the following command: 
  
 $ sudo grep nfs /etc/fstab | grep nosuid 
  
 UUID=e06097bb-cfcd-437b-9e4d-a691f5662a7d /store nfs rw,nosuid,nodev,noexec 0 0 
  
-If a file system found in "/etc/fstab" refers to NFS and it does not have the "nosuid" option set, this is a finding.</check-content></check></Rule></Group><Group id="V-248627"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248627r991589_rule" weight="10.0" severity="medium"><version>OL08-00-010660</version><title>Local OL 8 initialization files must not execute world-writable programs.</title><description>&lt;VulnDiscussion&gt;If user start-up files execute world-writable programs, especially in unprotected directories, they could be maliciously modified to destroy user files or otherwise compromise the system at the user level. If the system is compromised at the user level, it is easier to elevate privileges to eventually compromise the system at the root and network level.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52015r779446_fix">Set the mode on files being executed by the local initialization files with the following command: 
- 
-$ sudo chmod 0755 &lt;file&gt;</fixtext><fix id="F-52015r779446_fix" /><check system="C-52061r779445_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify that local initialization files do not execute world-writable programs. 
- 
-Check the system for world-writable files. 
- 
-The following command will discover and print world-writable files. Run it once for each local partition [PART]: 
- 
-$ sudo find [PART] -xdev -type f -perm -0002 -print 
- 
-For all files listed, check for their presence in the local initialization files with the following commands: 
- 
-Note: The example will be for a system that is configured to create users' home directories in the "/home" directory. 
- 
-$ sudo grep &lt;file&gt; /home/*/.* 
- 
-If any local initialization files are found to reference world-writable files, this is a finding.</check-content></check></Rule></Group><Group id="V-248628"><title>SRG-OS-000269-GPOS-00103</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248628r991562_rule" weight="10.0" severity="medium"><version>OL08-00-010670</version><title>OL 8 must disable kernel dumps unless needed.</title><description>&lt;VulnDiscussion&gt;Kernel core dumps may contain the full contents of system memory at the time of the crash. Kernel core dumps may consume a considerable amount of disk space and may result in denial of service by exhausting the available space on the target file system partition.
+If a file system found in "/etc/fstab" refers to NFS and it does not have the "nosuid" option set, this is a finding.</check-content></check></Rule></Group><Group id="V-248628"><title>SRG-OS-000269-GPOS-00103</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248628r991562_rule" weight="10.0" severity="medium"><version>OL08-00-010670</version><title>OL 8 must disable kernel dumps unless needed.</title><description>&lt;VulnDiscussion&gt;Kernel core dumps may contain the full contents of system memory at the time of the crash. Kernel core dumps may consume a considerable amount of disk space and may result in denial of service by exhausting the available space on the target file system partition.
 
 OL 8 installation media presents the option to enable or disable the kdump service at the time of system installation.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001665</ident><fixtext fixref="F-52016r779449_fix">If kernel core dumps are not required, disable the "kdump" service with the following command:
 
@@ -1886,55 +1780,40 @@ Main PID: 1130 (code=exited, status=0/FAILURE)
 
 If the "kdump" service is active, ask the System Administrator if the use of the service is required and documented with the Information System Security Officer (ISSO).
 
-If the service is active and is not documented, this is a finding.</check-content></check></Rule></Group><Group id="V-248629"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248629r991589_rule" weight="10.0" severity="medium"><version>OL08-00-010671</version><title>OL 8 must disable the "kernel.core_pattern".</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+If the service is active and is not documented, this is a finding.</check-content></check></Rule></Group><Group id="V-248629"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248629r1156626_rule" weight="10.0" severity="medium"><version>OL08-00-010671</version><title>OL 8 must disable the "kernel.core_pattern".</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52017r858628_fix">Configure OL 8 to disable storing core dumps by adding the following line to a file in the "/etc/sysctl.d" directory:
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52017r1156625_fix">Configure OL 8 to disable storing core dumps.
 
-kernel.core_pattern = |/bin/false
+Add or edit the following line in a system configuration file, in the "/etc/sysctl.d/" directory:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+kernel.core_pattern = |/bin/false
 
 The system configuration files must be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
 
-$ sudo sysctl --system</fixtext><fix id="F-52017r858628_fix" /><check system="C-52063r833215_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify that OL 8 disables storing core dumps with the following commands: 
- 
-$ sudo sysctl kernel.core_pattern 
- 
-kernel.core_pattern = |/bin/false 
- 
-If the returned line does not have a value of "|/bin/false", or a line is not returned and the need for core dumps is not documented with the Information System Security Officer (ISSO) as an operational requirement, this is a finding.
-
-Check that the configuration files are present to enable this kernel parameter:
+$ sudo sysctl --system</fixtext><fix id="F-52017r1156625_fix" /><check system="C-52063r1155454_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 disables storing core dumps with the following commands:
 
-$ sudo grep -r kernel.core_pattern /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf:kernel.core_pattern = |/bin/false
-
-If "kernel.core_pattern" is not set to "|/bin/false", is missing or commented out, this is a finding.
+$ sysctl kernel.core_pattern
+kernel.core_pattern = |/bin/false
 
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-248630"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248630r991589_rule" weight="10.0" severity="medium"><version>OL08-00-010672</version><title>OL 8 must disable acquiring, saving, and processing core dumps.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors. 
+If the returned line does not have a value of "|/bin/false", or a line is not returned and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-248630"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248630r1156670_rule" weight="10.0" severity="medium"><version>OL08-00-010672</version><title>OL 8 must disable acquiring, saving, and processing core dumps.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors. 
  
 A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems. 
  
-When the kernel invokes "systemd-coredump" to handle a core dump, it runs in privileged mode and will connect to the socket created by the "systemd-coredump.socket" unit. This, in turn, will spawn an unprivileged "systemd-coredump@.service" instance to process the core dump.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52018r779455_fix">Configure the system to disable the "systemd-coredump.socket" with the following commands:
+When the kernel invokes "systemd-coredump" to handle a core dump, it runs in privileged mode and will connect to the socket created by the "systemd-coredump.socket" unit. This, in turn, will spawn an nonprivileged "systemd-coredump@.service" instance to process the core dump.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52018r779455_fix">Configure the system to disable the "systemd-coredump.socket" with the following commands:
 
 $ sudo systemctl disable --now systemd-coredump.socket
 
 $ sudo systemctl mask systemd-coredump.socket
 
-Created symlink /etc/systemd/system/systemd-coredump.socket -&gt; /dev/null</fixtext><fix id="F-52018r779455_fix" /><check system="C-52064r779454_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 is not configured to acquire, save, or process core dumps with the following command: 
+Created symlink /etc/systemd/system/systemd-coredump.socket -&gt; /dev/null</fixtext><fix id="F-52018r779455_fix" /><check system="C-52064r1155551_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Note: If kernel dumps are disabled in accordance with OL08-00-010671, this requirement is not applicable.
+
+Verify OL 8 is not configured to acquire, save, or process core dumps with the following command: 
  
 $ sudo systemctl status systemd-coredump.socket 
  
@@ -1942,45 +1821,55 @@ systemd-coredump.socket
 Loaded: masked (Reason: Unit systemd-coredump.socket is masked.) 
 Active: inactive (dead) 
  
-If the "systemd-coredump.socket" is loaded and not masked and the need for core dumps is not documented with the Information System Security Officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-248631"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248631r991589_rule" weight="10.0" severity="medium"><version>OL08-00-010673</version><title>OL 8 must disable core dumps for all users.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors. 
- 
-A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52019r779458_fix">Configure OL 8 to disable core dumps for all users. 
- 
-Add the following line to the top of "/etc/security/limits.conf" or in a ".conf" file defined in "/etc/security/limits.d/": 
- 
-* hard core 0</fixtext><fix id="F-52019r779458_fix" /><check system="C-52065r779457_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify the operating system disables core dumps for all users with the following command: 
- 
-$ sudo grep -r -s '^[^#].*core' /etc/security/limits.conf /etc/security/limits.d/*.conf 
- 
-* hard core 0 
- 
-This can be set as a global domain (with the * wildcard) but may be set differently for multiple domains. 
+If the "systemd-coredump.socket" is loaded and not masked and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-248631"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248631r1156685_rule" weight="10.0" severity="medium"><version>OL08-00-010673</version><title>OL 8 must disable core dumps for all users.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors. 
  
-If the "core" item is missing or commented out or the value is anything other than "0", and the need for core dumps is not documented with the Information System Security Officer (ISSO) as an operational requirement for all domains that have the "core" item assigned, this is a finding.</check-content></check></Rule></Group><Group id="V-248632"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248632r991589_rule" weight="10.0" severity="medium"><version>OL08-00-010674</version><title>OL 8 must disable storing core dumps.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors. 
+A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52019r1156684_fix">Configure OL 8 to disable core dumps for all users. 
+
+Add the following line to the top of the /etc/security/limits.conf or in a single ".conf" file defined in /etc/security/limits.d/:
+
+* hard core 0
+
+Remove or comment out any entries for users or groups with a value set to anything other than "0".</fixtext><fix id="F-52019r1156684_fix" /><check system="C-52065r1156683_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Note: If kernel dumps are disabled in accordance with OL08-00-010671, this requirement is not applicable.
+
+Verify OL 8 disables core dumps for all users by issuing the following command:
+
+$ grep -r -s core /etc/security/limits.conf /etc/security/limits.d/*.conf
+
+/etc/security/limits.conf:* hard core 0
+
+This can be set as a global domain (with the * wildcard) but may be set differently for multiple domains.
+
+If the "core" item is missing or commented out, or the value is anything other than "0", and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement for all domains that have the "core" item assigned, this is a finding.
+
+If entries exist for users or groups with a value set to anything other than "0", this is a finding.</check-content></check></Rule></Group><Group id="V-248632"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248632r1156671_rule" weight="10.0" severity="medium"><version>OL08-00-010674</version><title>OL 8 must disable storing core dumps.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors. 
  
 A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52020r779461_fix">Configure OL 8 to disable storing core dumps for all users. 
  
 Add or modify the following line in "/etc/systemd/coredump.conf": 
  
-Storage=none</fixtext><fix id="F-52020r779461_fix" /><check system="C-52066r779460_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify the operating system disables storing core dumps for all users with the following command: 
+Storage=none</fixtext><fix id="F-52020r779461_fix" /><check system="C-52066r1155553_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Note: If kernel dumps are disabled in accordance with OL08-00-010671, this requirement is not applicable.
+
+Verify OL 8 disables storing core dumps for all users with the following command: 
  
 $ sudo grep -i storage /etc/systemd/coredump.conf 
  
 Storage=none 
  
-If the "Storage" item is missing or commented out or the value is anything other than "none", and the need for core dumps is not documented with the Information System Security Officer (ISSO) as an operational requirement for all domains that have the "core" item assigned, this is a finding.</check-content></check></Rule></Group><Group id="V-248633"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248633r991589_rule" weight="10.0" severity="medium"><version>OL08-00-010675</version><title>OL 8 must disable core dump backtraces.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors. 
+If the "Storage" item is missing or commented out or the value is anything other than "none", and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement for all domains that have the "core" item assigned, this is a finding.</check-content></check></Rule></Group><Group id="V-248633"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248633r1156672_rule" weight="10.0" severity="medium"><version>OL08-00-010675</version><title>OL 8 must disable core dump backtraces.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors. 
  
 A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52021r779464_fix">Configure OL 8 to disable core dump backtraces. 
  
 Add or modify the following line in "/etc/systemd/coredump.conf": 
  
-ProcessSizeMax=0</fixtext><fix id="F-52021r779464_fix" /><check system="C-52067r779463_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify the operating system disables core dump backtraces by issuing the following command: 
+ProcessSizeMax=0</fixtext><fix id="F-52021r779464_fix" /><check system="C-52067r1155555_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Note: If kernel dumps are disabled in accordance with OL08-00-010671, this requirement is not applicable.
+
+Verify OL 8 disables core dump backtraces by issuing the following command: 
  
 $ sudo grep -i ProcessSizeMax /etc/systemd/coredump.conf 
  
 ProcessSizeMax=0 
  
-If the "ProcessSizeMax" item is missing or commented out or the value is anything other than "0", and the need for core dumps is not documented with the Information System Security Officer (ISSO) as an operational requirement for all domains that have the "core" item assigned, this is a finding.</check-content></check></Rule></Group><Group id="V-248634"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248634r991589_rule" weight="10.0" severity="medium"><version>OL08-00-010680</version><title>For OL 8 systems using Domain Name Servers (DNS) resolution, at least two name servers must be configured.</title><description>&lt;VulnDiscussion&gt;To provide availability for name resolution services, multiple redundant name servers are mandated. A failure in name resolution could lead to the failure of security functions requiring name resolution, which may include time synchronization, centralized authentication, and remote system logging.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52022r779467_fix">Configure OL 8 to use two or more name servers for DNS resolution. 
+If the "ProcessSizeMax" item is missing or commented out or the value is anything other than "0", and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement for all domains that have the "core" item assigned, this is a finding.</check-content></check></Rule></Group><Group id="V-248634"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248634r991589_rule" weight="10.0" severity="medium"><version>OL08-00-010680</version><title>For OL 8 systems using Domain Name Servers (DNS) resolution, at least two name servers must be configured.</title><description>&lt;VulnDiscussion&gt;To provide availability for name resolution services, multiple redundant name servers are mandated. A failure in name resolution could lead to the failure of security functions requiring name resolution, which may include time synchronization, centralized authentication, and remote system logging.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52022r779467_fix">Configure OL 8 to use two or more name servers for DNS resolution. 
  
 By default, "NetworkManager" on OL 8 dynamically updates the "/etc/resolv.conf" file with the DNS settings from active "NetworkManager" connection profiles. However, this feature can be disabled to allow manual configurations. 
  
@@ -2026,13 +1915,17 @@ $ sudo grep -i path /home/smithj/.*
 /home/smithj/.bash_profile:PATH=$PATH:$HOME/.local/bin:$HOME/bin 
 /home/smithj/.bash_profile:export PATH 
  
-If any local interactive user initialization files have executable search path statements that include directories outside of their home directory, this is a finding.</check-content></check></Rule></Group><Group id="V-248636"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248636r991589_rule" weight="10.0" severity="medium"><version>OL08-00-010700</version><title>All OL 8 world-writable directories must be owned by root, sys, bin, or an application user.</title><description>&lt;VulnDiscussion&gt;If a world-writable directory is not owned by root, sys, bin, or an application User Identifier (UID), unauthorized users may be able to modify files created by others. 
+If any local interactive user initialization files have executable search path statements that include directories outside of their home directory, this is a finding.</check-content></check></Rule></Group><Group id="V-248636"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248636r1156655_rule" weight="10.0" severity="medium"><version>OL08-00-010700</version><title>All OL 8 world-writable directories must be owned by root, sys, bin, or an application user.</title><description>&lt;VulnDiscussion&gt;If a world-writable directory is not owned by root, sys, bin, or an application User Identifier (UID), unauthorized users may be able to modify files created by others. 
  
-The only authorized public directories are the temporary directories supplied with the system or those designed to be temporary file repositories. The setting is normally reserved for directories used by the system and by users for temporary file storage, (e.g., /tmp), and for directories requiring global read/write access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52024r779473_fix">Investigate any world-writable directories that are not owned by a system account and then delete the files or assign them to an appropriate group.</fixtext><fix id="F-52024r779473_fix" /><check system="C-52070r779472_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>The following command will discover and print world-writable directories that are not owned by a system account, given the assumption that only system accounts have a UID lower than 1000. Run it once for each local partition [PART]: 
- 
-$ sudo find [PART] -xdev -type d -perm -0002 -uid +999 -print 
- 
-If there is output, this is a finding.</check-content></check></Rule></Group><Group id="V-248637"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248637r991589_rule" weight="10.0" severity="medium"><version>OL08-00-010710</version><title>All OL 8 world-writable directories must be group-owned by root, sys, bin, or an application group.</title><description>&lt;VulnDiscussion&gt;If a world-writable directory is not group-owned by root, sys, bin, or an application Group Identifier (GID), unauthorized users may be able to modify files created by others. 
+The only authorized public directories are the temporary directories supplied with the system or those designed to be temporary file repositories. The setting is normally reserved for directories used by the system and by users for temporary file storage, (e.g., /tmp), and for directories requiring global read/write access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52024r1155521_fix">Configure all OL 8 public directories to be owned by root or a system account to prevent unauthorized and unintended information transferred via shared system resources.
+
+Use the following command template to set ownership of public directories to root or a system account:
+
+$ sudo chown [root or system account] [Public Directory]</fixtext><fix id="F-52024r1155521_fix" /><check system="C-52070r1155520_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 world writable directories are owned by root, a system account, or an application account with the following command:
+
+$ sudo find / -xdev -type d -perm -0002 -uid +999 -exec stat -c "%U, %u, %A, %n" {} \; 2&gt;/dev/null
+
+If there is output that indicates world-writable directories are owned by any account other than root or an approved system account, this is a finding.</check-content></check></Rule></Group><Group id="V-248637"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248637r991589_rule" weight="10.0" severity="medium"><version>OL08-00-010710</version><title>All OL 8 world-writable directories must be group-owned by root, sys, bin, or an application group.</title><description>&lt;VulnDiscussion&gt;If a world-writable directory is not group-owned by root, sys, bin, or an application Group Identifier (GID), unauthorized users may be able to modify files created by others. 
  
 The only authorized public directories are the temporary directories supplied with the system or those designed to be temporary file repositories. The setting is normally reserved for directories used by the system and by users for temporary file storage, (e.g., /tmp), and for directories requiring global read/write access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52025r779476_fix">Investigate any world-writable directories that are not group-owned by a system account and then delete the files or assign them to an appropriate group.</fixtext><fix id="F-52025r779476_fix" /><check system="C-52071r779475_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>The following command will discover and print world-writable directories that are not group-owned by a system account, given the assumption that only system accounts have a gid lower than 1000. Run it once for each local partition [PART]: 
  
@@ -2866,33 +2759,33 @@ $ sudo grep -r removal-action /etc/dconf/db/*
 
 /etc/dconf/db/distro.d/20-authselect:removal-action='lock-screen'
 
-If the "removal-action='lock-screen'" setting is missing or commented out from the "dconf" database files, this is a finding.</check-content></check></Rule></Group><Group id="V-248680"><title>SRG-OS-000029-GPOS-00010</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248680r958402_rule" weight="10.0" severity="medium"><version>OL08-00-020060</version><title>OL 8 must automatically lock graphical user sessions after 15 minutes of inactivity.</title><description>&lt;VulnDiscussion&gt;A session time-out lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not log out because of the temporary nature of the absence. Rather than relying on the user to manually lock their operating system session prior to vacating the vicinity, operating systems must be able to identify when a user's session has idled and take action to initiate the session lock. 
+If the "removal-action='lock-screen'" setting is missing or commented out from the "dconf" database files, this is a finding.</check-content></check></Rule></Group><Group id="V-248680"><title>SRG-OS-000029-GPOS-00010</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248680r1156673_rule" weight="10.0" severity="medium"><version>OL08-00-020060</version><title>OL 8 must automatically lock graphical user sessions after 15 minutes of inactivity.</title><description>&lt;VulnDiscussion&gt;A session time-out lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not log out because of the temporary nature of the absence. Rather than relying on the user to manually lock their operating system session prior to vacating the vicinity, operating systems must be able to identify when a user's session has idled and take action to initiate the session lock. 
  
 The session lock is implemented at the point where session activity can be determined and/or controlled.
 
-Satisfies: SRG-OS-000029-GPOS-00010, SRG-OS-000031-GPOS-00012&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000057</ident><ident system="http://cyber.mil/cci">CCI-000060</ident><fixtext fixref="F-52068r779605_fix">Configure OL 8 to initiate a screensaver after a 15-minute period of inactivity for graphical user interfaces. 
+Satisfies: SRG-OS-000029-GPOS-00010, SRG-OS-000031-GPOS-00012&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000057</ident><ident system="http://cyber.mil/cci">CCI-000060</ident><fixtext fixref="F-52068r1155558_fix">Configure OL 8 to initiate a screensaver after a 10-minute period of inactivity for graphical user interfaces. 
  
-Create a database to contain the system-wide screensaver settings (if it does not already exist) with the following command: 
+Create a database to contain the systemwide screensaver settings (if it does not already exist) with the following command: 
  
 $ sudo touch /etc/dconf/db/local.d/00-screensaver 
  
 Edit "/etc/dconf/db/local.d/00-screensaver" and add or update the following lines: 
  
 [org/gnome/desktop/session] 
-# Set the lock time out to 900 seconds before the session is considered idle 
-idle-delay=uint32 900 
+# Set the lock time out to 600 seconds before the session is considered idle 
+idle-delay=uint32 600 
  
 Update the system databases: 
  
-$ sudo dconf update</fixtext><fix id="F-52068r779605_fix" /><check system="C-52114r779604_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Note: This requirement assumes the use of the OL 8 default graphical user interface, Gnome Shell. If the system does not have any graphical user interface installed, this requirement is Not Applicable. 
+$ sudo dconf update</fixtext><fix id="F-52068r1155558_fix" /><check system="C-52114r1155557_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Note: This requirement assumes the use of the OL 8 default graphical user interface, Gnome Shell. If the system does not have any graphical user interface installed, this requirement is Not Applicable. 
  
-Verify the operating system initiates a session lock after a 15-minute period of inactivity for graphical user interfaces with the following commands: 
+Verify OL 8 initiates a session lock after a 10-minute period of inactivity for graphical user interfaces with the following commands: 
  
 $ sudo gsettings get org.gnome.desktop.session idle-delay 
  
-uint32 900 
+uint32 600 
  
-If "idle-delay" is set to "0" or a value greater than "900", this is a finding.</check-content></check></Rule></Group><Group id="V-248682"><title>SRG-OS-000029-GPOS-00010</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248682r958402_rule" weight="10.0" severity="medium"><version>OL08-00-020080</version><title>OL 8 must prevent a user from overriding the session lock-delay setting for the graphical user interface.</title><description>&lt;VulnDiscussion&gt;A session time-out lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not log out because of the temporary nature of the absence. Rather than relying on the user to manually lock their operating system session prior to vacating the vicinity, operating systems need to be able to identify when a user's session has idled and take action to initiate the session lock. 
+If "idle-delay" is set to "0" or a value greater than "600", this is a finding.</check-content></check></Rule></Group><Group id="V-248682"><title>SRG-OS-000029-GPOS-00010</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248682r958402_rule" weight="10.0" severity="medium"><version>OL08-00-020080</version><title>OL 8 must prevent a user from overriding the session lock-delay setting for the graphical user interface.</title><description>&lt;VulnDiscussion&gt;A session time-out lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not log out because of the temporary nature of the absence. Rather than relying on the user to manually lock their operating system session prior to vacating the vicinity, operating systems need to be able to identify when a user's session has idled and take action to initiate the session lock. 
  
 The session lock is implemented at the point where session activity can be determined and/or controlled. 
  
@@ -3478,17 +3371,7 @@ Note: Manual changes to the listed file may be overwritten by the "authselect" p
 
 $ sudo grep -i nullok /etc/pam.d/password-auth
 
-If output is produced, this is a finding.</check-content></check></Rule></Group><Group id="V-248717"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248717r991589_rule" weight="10.0" severity="low"><version>OL08-00-020340</version><title>OL 8 must display the date and time of the last successful account logon upon logon.</title><description>&lt;VulnDiscussion&gt;Providing users with feedback on when account accesses last occurred facilitates user recognition and reporting of unauthorized account use.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000052</ident><fixtext fixref="F-52105r779716_fix">Configure OL 8 to provide users with feedback on when account accesses last occurred by setting the required configuration options in "/etc/pam.d/postlogin". 
- 
-Add the following line to the top of "/etc/pam.d/postlogin": 
- 
-session required pam_lastlog.so showfailed</fixtext><fix id="F-52105r779716_fix" /><check system="C-52151r779715_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify users are provided with feedback on when account accesses last occurred with the following command: 
- 
-$ sudo grep pam_lastlog /etc/pam.d/postlogin 
- 
-session required pam_lastlog.so showfailed 
- 
-If "pam_lastlog" is missing from the "/etc/pam.d/postlogin" file or the silent option is present, this is a finding.</check-content></check></Rule></Group><Group id="V-248718"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248718r991589_rule" weight="10.0" severity="medium"><version>OL08-00-020350</version><title>OL 8 must display the date and time of the last successful account logon upon an SSH logon.</title><description>&lt;VulnDiscussion&gt;Providing users with feedback on when account accesses via SSH last occurred facilitates user recognition and reporting of unauthorized account use.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000052</ident><fixtext fixref="F-52106r779719_fix">Configure SSH to provide users with feedback on when account accesses last occurred by setting the required configuration options in "/etc/pam.d/sshd" or in the "sshd_config" file used by the system ("/etc/ssh/sshd_config" will be used in the example). Note that this file may be named differently or be in a different location if using a version of SSH that is provided by a third-party vendor. 
+If output is produced, this is a finding.</check-content></check></Rule></Group><Group id="V-248718"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248718r991589_rule" weight="10.0" severity="medium"><version>OL08-00-020350</version><title>OL 8 must display the date and time of the last successful account logon upon an SSH logon.</title><description>&lt;VulnDiscussion&gt;Providing users with feedback on when account accesses via SSH last occurred facilitates user recognition and reporting of unauthorized account use.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000052</ident><fixtext fixref="F-52106r779719_fix">Configure SSH to provide users with feedback on when account accesses last occurred by setting the required configuration options in "/etc/pam.d/sshd" or in the "sshd_config" file used by the system ("/etc/ssh/sshd_config" will be used in the example). Note that this file may be named differently or be in a different location if using a version of SSH that is provided by a third-party vendor. 
  
 Modify the "PrintLastLog" line in "/etc/ssh/sshd_config" to match the following: 
  
@@ -3545,31 +3428,31 @@ $ sudo  grep -i umask /etc/bashrc /etc/csh.cshrc /etc/profile
 /etc/profile: umask 077
 /etc/profile: umask 077
 
-If the value for the "UMASK" parameter is not "077", or the "UMASK" parameter is missing or is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-248722"><title>SRG-OS-000326-GPOS-00126</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248722r958730_rule" weight="10.0" severity="medium"><version>OL08-00-030000</version><title>The OL 8 audit system must be configured to audit the execution of privileged functions and prevent all software from executing at higher privilege levels than users executing the software.</title><description>&lt;VulnDiscussion&gt;Misuse of privileged functions, either intentionally or unintentionally by authorized users, or by unauthorized external entities that have compromised information system accounts, is a serious and ongoing concern and can have significant adverse impacts on organizations. Auditing the use of privileged functions is one way to detect such misuse and identify the risk from insider threats and the advanced persistent threat.
+If the value for the "UMASK" parameter is not "077", or the "UMASK" parameter is missing or is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-248722"><title>SRG-OS-000326-GPOS-00126</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248722r1156669_rule" weight="10.0" severity="medium"><version>OL08-00-030000</version><title>The OL 8 audit system must be configured to audit the execution of privileged functions and prevent all software from executing at higher privilege levels than users executing the software.</title><description>&lt;VulnDiscussion&gt;Misuse of privileged functions, either intentionally or unintentionally by authorized users, or by unauthorized external entities that have compromised information system accounts, is a serious and ongoing concern and can have significant adverse impacts on organizations. Auditing the use of privileged functions is one way to detect such misuse and identify the risk from insider threats and the advanced persistent threat.
 
-Satisfies: SRG-OS-000326-GPOS-00126, SRG-OS-000327-GPOS-00127&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-002233</ident><ident system="http://cyber.mil/cci">CCI-002234</ident><fixtext fixref="F-52110r779731_fix">Configure OL 8 to audit the execution of the "execve" system call. 
+Satisfies: SRG-OS-000326-GPOS-00126, SRG-OS-000327-GPOS-00127&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-002233</ident><ident system="http://cyber.mil/cci">CCI-002234</ident><fixtext fixref="F-52110r1155549_fix">Configure OL 8 to audit the execution of the "execve" system call. 
  
 Add or update the following file system rules to "/etc/audit/rules.d/audit.rules": 
  
--a always,exit -F arch=b32 -S execve -C uid!=euid -F key=execpriv 
--a always,exit -F arch=b64 -S execve -C uid!=euid -F key=execpriv 
+-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 key=execpriv 
+-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 key=execpriv 
  
--a always,exit -F arch=b32 -S execve -C gid!=egid -F key=execpriv 
--a always,exit -F arch=b64 -S execve -C gid!=egid -F key=execpriv 
+-a always,exit -F arch=b32 -S execve -C gid!=egid -F euid=0 key=execpriv 
+-a always,exit -F arch=b64 -S execve -C gid!=egid -F euid=0 key=execpriv
  
 The audit daemon must be restarted for the changes to take effect. To restart the audit daemon, run the following command: 
  
-$ sudo service auditd restart</fixtext><fix id="F-52110r779731_fix" /><check system="C-52156r779730_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 audits the execution of privileged functions. 
+$ sudo service auditd restart</fixtext><fix id="F-52110r1155549_fix" /><check system="C-52156r1155548_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 audits the execution of privileged functions. 
  
 Check if OL 8 is configured to audit the execution of the "execve" system call, by running the following command: 
  
 $ sudo grep execve /etc/audit/audit.rules 
  
--a always,exit -F arch=b32 -S execve -C uid!=euid -F key=execpriv 
--a always,exit -F arch=b64 -S execve -C uid!=euid -F key=execpriv 
+-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 key=execpriv 
+-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 key=execpriv 
  
--a always,exit -F arch=b32 -S execve -C gid!=egid -F key=execpriv 
--a always,exit -F arch=b64 -S execve -C gid!=egid -F key=execpriv 
+-a always,exit -F arch=b32 -S execve -C gid!=egid -F euid=0 key=execpriv 
+-a always,exit -F arch=b64 -S execve -C gid!=egid -F euid=0 key=execpriv
  
 If the command does not return all lines or the lines are commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-248723"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248723r991589_rule" weight="10.0" severity="medium"><version>OL08-00-030010</version><title>Cron logging must be implemented in OL 8.</title><description>&lt;VulnDiscussion&gt;Cron logging can be used to trace the successful or unsuccessful execution of cron jobs. It can also be used to spot intrusions into the use of the cron facility by unauthorized and malicious users.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52111r779734_fix">Configure "rsyslog" to log all cron messages by adding or updating the following line to "/etc/rsyslog.conf" or a configuration file in the "/etc/rsyslog.d/" directory: 
  
@@ -5562,7 +5445,7 @@ rich rules:
  
 Ask the System Administrator for the site or program PPSM Component Local Service Assessment (CLSA). Verify the services allowed by the firewall match the PPSM CLSA.  
  
-If there are additional ports, protocols, or services that are not in the PPSM CLSA, or there are ports, protocols, or services that are prohibited by the PPSM CAL, this is a finding.</check-content></check></Rule></Group><Group id="V-248836"><title>SRG-OS-000114-GPOS-00059</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248836r958498_rule" weight="10.0" severity="medium"><version>OL08-00-040070</version><title>The OL 8 file system automounter must be disabled unless required.</title><description>&lt;VulnDiscussion&gt;Verify the operating system disables the ability to automount devices. 
+If there are additional ports, protocols, or services that are not in the PPSM CLSA, or there are ports, protocols, or services that are prohibited by the PPSM CAL, this is a finding.</check-content></check></Rule></Group><Group id="V-248836"><title>SRG-OS-000114-GPOS-00059</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248836r1156663_rule" weight="10.0" severity="medium"><version>OL08-00-040070</version><title>The OL 8 file system automounter must be disabled.</title><description>&lt;VulnDiscussion&gt;Verify the operating system disables the ability to automount devices. 
  
 Determine if automounter service is active with the following command: 
  
@@ -5572,14 +5455,12 @@ autofs.service - Automounts filesystems on demand
 Loaded: loaded (/usr/lib/systemd/system/autofs.service; disabled) 
 Active: inactive (dead) 
  
-If the "autofs" status is set to "active" and is not documented with the Information System Security Officer (ISSO) as an operational requirement, this is a finding.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000778</ident><fixtext fixref="F-52224r780073_fix">Configure OL 8 to disable the ability to automount devices. 
- 
-Turn off the automount service with the following commands: 
- 
-$ sudo systemctl stop autofs 
-$ sudo systemctl disable autofs 
- 
-If "autofs" is required for Network File System (NFS), it must be documented with the ISSO.</fixtext><fix id="F-52224r780073_fix" /><check system="C-52270r780072_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify the operating system disables the ability to automount devices. 
+If the "autofs" status is set to "active" and is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000778</ident><fixtext fixref="F-52224r1155534_fix">Configure OL 8 to disable the ability to automount devices.
+
+Turn off the automount service with the following commands:
+
+$ sudo systemctl stop autofs
+$ sudo systemctl disable autofs</fixtext><fix id="F-52224r1155534_fix" /><check system="C-52270r1155533_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 disables the ability to automount devices. 
  
 Determine if the automounter service is active with the following command: 
  
@@ -5589,7 +5470,7 @@ autofs.service - Automounts filesystems on demand
 Loaded: loaded (/usr/lib/systemd/system/autofs.service; disabled) 
 Active: inactive (dead) 
  
-If the "autofs" status is set to "active" and is not documented with the Information System Security Officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-248837"><title>SRG-OS-000114-GPOS-00059</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248837r986386_rule" weight="10.0" severity="medium"><version>OL08-00-040080</version><title>OL 8 must be configured to disable the ability to use USB mass storage devices.</title><description>&lt;VulnDiscussion&gt;USB mass storage permits easy introduction of unknown devices, thereby facilitating malicious activity.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000778</ident><ident system="http://cyber.mil/cci">CCI-003959</ident><fixtext fixref="F-52225r943088_fix">Configure OL 8 to disable the ability to use the USB Storage kernel module and to use USB mass storage devices.
+If the "autofs" status is set to "active" this is a finding.</check-content></check></Rule></Group><Group id="V-248837"><title>SRG-OS-000114-GPOS-00059</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248837r986386_rule" weight="10.0" severity="medium"><version>OL08-00-040080</version><title>OL 8 must be configured to disable the ability to use USB mass storage devices.</title><description>&lt;VulnDiscussion&gt;USB mass storage permits easy introduction of unknown devices, thereby facilitating malicious activity.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000778</ident><ident system="http://cyber.mil/cci">CCI-003959</ident><fixtext fixref="F-52225r943088_fix">Configure OL 8 to disable the ability to use the USB Storage kernel module and to use USB mass storage devices.
 
      $ sudo vi /etc/modprobe.d/blacklist.conf
 
@@ -6277,17 +6158,22 @@ $ sudo grep logout /etc/dconf/db/local.d/*
  
 logout='' 
  
-If the "logout" key is bound to an action, is commented out, or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-248871"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248871r991589_rule" weight="10.0" severity="medium"><version>OL08-00-040172</version><title>OL 8 must disable the systemd Ctrl-Alt-Delete burst key sequence.</title><description>&lt;VulnDiscussion&gt;A locally logged-on user who presses Ctrl-Alt-Delete when at the console can reboot the system. If accidentally pressed, as could happen in the case of a mixed OS environment, this can create the risk of short-term loss of availability of systems due to unintentional reboot. In a graphical user environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is reduced because the user will be prompted before any action is taken.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52259r780178_fix">Configure the system to disable the CtrlAltDelBurstAction by added or modifying the following line in the "/etc/systemd/system.conf" configuration file: 
- 
-CtrlAltDelBurstAction=none 
- 
-Reload the daemon for this change to take effect: 
- 
-$ sudo systemctl daemon-reload</fixtext><fix id="F-52259r780178_fix" /><check system="C-52305r780177_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 is not configured to reboot the system when Ctrl-Alt-Delete is pressed seven times within two seconds with the following command: 
- 
-$ sudo grep -i ctrl /etc/systemd/system.conf 
+If the "logout" key is bound to an action, is commented out, or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-248871"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248871r1156667_rule" weight="10.0" severity="medium"><version>OL08-00-040172</version><title>OL 8 must disable the systemd Ctrl-Alt-Delete burst key sequence.</title><description>&lt;VulnDiscussion&gt;A locally logged-on user who presses Ctrl-Alt-Delete when at the console can reboot the system. If accidentally pressed, as could happen in the case of a mixed OS environment, this can create the risk of short-term loss of availability of systems due to unintentional reboot. In a graphical user environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is reduced because the user will be prompted before any action is taken.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52259r1155543_fix">Configure OL 8 to disable the CtrlAltDelBurstAction by adding it to a drop file in a "/etc/systemd/system.conf.d/" configuration file:
+
+If no drop file exists, create one with the following command:
+
+$ sudo mkdir -p /etc/systemd/system.conf.d &amp;&amp; sudo vi /etc/systemd/system.conf.d/55-CtrlAltDel-BurstAction
+
+Edit the file to contain the setting by adding the following text:
+
+CtrlAltDelBurstAction=none
+
+Reload the daemon for this change to take effect.
+
+$ sudo systemctl daemon-reload</fixtext><fix id="F-52259r1155543_fix" /><check system="C-52305r1155542_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 is not configured to reboot the system when Ctrl-Alt-Delete is pressed seven times within two seconds with the following command: 
  
-CtrlAltDelBurstAction=none 
+$ sudo grep -iR CtrlAltDelBurstAction /etc/systemd/system*
+/etc/systemd/system.conf.d/55-CtrlAltDel-BurstAction:CtrlAltDelBurstAction=none
  
 If the "CtrlAltDelBurstAction" is not set to "none" or is commented out or missing, this is a finding.</check-content></check></Rule></Group><Group id="V-248872"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248872r991589_rule" weight="10.0" severity="low"><version>OL08-00-040180</version><title>OL 8 must disable the debug-shell systemd service.</title><description>&lt;VulnDiscussion&gt;The debug-shell requires no authentication and provides root privileges to anyone who has physical access to the machine. While this feature is disabled by default, masking it adds a layer of assurance that it will not be enabled via a dependency in "system". This also prevents attackers with physical access from trivially bypassing security on the machine through valid troubleshooting configurations and gaining root access when the system is rebooted.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52260r780181_fix">Configure the system to mask the "debug-shell systemd" service with the following command: 
  
@@ -6319,825 +6205,478 @@ If the account is associated with system commands or applications, change the UI
  
 $ sudo awk -F: '$3 == 0 {print $1}' /etc/passwd 
  
-If any accounts other than root have a UID of "0", this is a finding.</check-content></check></Rule></Group><Group id="V-248875"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248875r991589_rule" weight="10.0" severity="medium"><version>OL08-00-040209</version><title>OL 8 must prevent IPv4 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</title><description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
+If any accounts other than root have a UID of "0", this is a finding.</check-content></check></Rule></Group><Group id="V-248875"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248875r1156627_rule" weight="10.0" severity="medium"><version>OL08-00-040209</version><title>OL 8 must prevent IPv4 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</title><description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52263r858650_fix">Configure OL 8 to prevent IPv4 ICMP redirect messages from being accepted with the following command:
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52263r1155458_fix">Configure OL 8 to prevent IPv4 ICMP redirect messages from being accepted.
 
-$ sudo sysctl -w net.ipv4.conf.default.accept_redirects=0
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+net.ipv4.conf.default.accept_redirects = 0
 
-If "0" is not the system's default value then add or update the following line in the appropriate file under "/etc/sysctl.d":
+Load settings from all system configuration files with the following command:
 
-net.ipv4.conf.default.accept_redirects=0</fixtext><fix id="F-52263r858650_fix" /><check system="C-52309r833247_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 will not accept IPv4 ICMP redirect messages.
+$ sudo sysctl --system</fixtext><fix id="F-52263r1155458_fix" /><check system="C-52309r1155457_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 will not accept IPv4 ICMP redirect messages.
 
 Check the value of the default "accept_redirects" variables with the following command:
 
-$ sudo sysctl net.ipv4.conf.default.accept_redirects
-
+$ sysctl net.ipv4.conf.default.accept_redirects
 net.ipv4.conf.default.accept_redirects = 0
 
-If the returned line does not have a value of "0", a line is not returned, or the line is commented out, this is a finding.
-
-Check that the configuration files are present to enable this network parameter.
-
-$ sudo grep -r net.ipv4.conf.default.accept_redirects /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf: net.ipv4.conf.default.accept_redirects = 0
+If the returned line does not have a value of "0", a line is not returned, or the line is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-248876"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248876r1156628_rule" weight="10.0" severity="medium"><version>OL08-00-040210</version><title>OL 8 must prevent IPv6 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</title><description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
 
-If "net.ipv4.conf.default.accept_redirects" is not set to "0", is missing or commented out, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-248876"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248876r991589_rule" weight="10.0" severity="medium"><version>OL08-00-040210</version><title>OL 8 must prevent IPv6 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</title><description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
-
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52264r858652_fix">Configure OL 8 to prevent IPv6 ICMP redirect messages from being accepted with the following command:
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52264r1155461_fix">Configure OL 8 to prevent IPv6 ICMP redirect messages from being accepted.
 
-$ sudo sysctl -w net.ipv6.conf.default.accept_redirects=0
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
-Remove any configurations that conflict with the above from the following locations:
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+net.ipv6.conf.default.accept_redirects = 0
 
-If "0" is not the system's default value, add or update the following line in "/etc/sysctl.conf" or in the appropriate file under "/etc/sysctl.d":
+Load settings from all system configuration files with the following command:
 
-net.ipv6.conf.default.accept_redirects=0</fixtext><fix id="F-52264r858652_fix" /><check system="C-52310r833249_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 will not accept IPv6 ICMP redirect messages.
+$ sudo sysctl --system</fixtext><fix id="F-52264r1155461_fix" /><check system="C-52310r1155460_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Note: If IPv6 is disabled on the system, this requirement is Not Applicable.
 
-Note: IPv6 is disabled on the system, this requirement is Not Applicable.
+Verify OL 8 will not accept IPv6 ICMP redirect messages.
 
 Check the value of the default "accept_redirects" variables with the following command:
 
-$ sudo sysctl net.ipv6.conf.default.accept_redirects
-
+$ sysctl net.ipv6.conf.default.accept_redirects
 net.ipv6.conf.default.accept_redirects = 0
 
-If the returned line does not have a value of "0", a line is not returned, or the line is commented out, this is a finding.
-
-Check that the configuration files are present to enable this network parameter.
-
-$ sudo grep -r net.ipv6.conf.default.accept_redirects /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf: net.ipv6.conf.default.accept_redirects = 0
-
-If "net.ipv6.conf.default.accept_redirects" is not set to "0", is missing or commented out, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-248877"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248877r991589_rule" weight="10.0" severity="medium"><version>OL08-00-040220</version><title>OL 8 must not send Internet Control Message Protocol (ICMP) redirects.</title><description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages contain information from the system's route table, possibly revealing portions of the network topology. 
+If the returned line does not have a value of "0", a line is not returned, or the line is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-248877"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248877r1156629_rule" weight="10.0" severity="medium"><version>OL08-00-040220</version><title>OL 8 must not send Internet Control Message Protocol (ICMP) redirects.</title><description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages contain information from the system's route table, possibly revealing portions of the network topology. 
  
 There are notable differences between Internet Protocol version 4 (IPv4) and Internet Protocol version 6 (IPv6). There is only a directive to disable sending of IPv4 redirected packets. Refer to RFC4294 for an explanation of "IPv6 Node Requirements", which resulted in this difference between IPv4 and IPv6.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52265r858654_fix">Configure OL 8 to not allow interfaces to perform IPv4 ICMP redirects with the following command:
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52265r1155464_fix">Configure OL 8 to not allow interfaces to perform IPv4 ICMP redirects.
 
-$ sudo sysctl -w net.ipv4.conf.all.send_redirects=0
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+net.ipv4.conf.all.send_redirects = 0
 
-If "0" is not the system's default value, add or update the following line in "/etc/sysctl.conf" or in the appropriate file under "/etc/sysctl.d":
+Load settings from all system configuration files with the following command:
 
-net.ipv4.conf.all.send_redirects=0</fixtext><fix id="F-52265r858654_fix" /><check system="C-52311r833251_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 does not send IPv4 ICMP redirect messages.
+$ sudo sysctl --system</fixtext><fix id="F-52265r1155464_fix" /><check system="C-52311r1155463_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 does not IPv4 ICMP redirect messages.
 
 Check the value of the "all send_redirects" variables with the following command:
 
-$ sudo sysctl net.ipv4.conf.all.send_redirects
-
+$ sysctl net.ipv4.conf.all.send_redirects
 net.ipv4.conf.all.send_redirects = 0
 
-If the returned line does not have a value of "0" or a line is not returned, this is a finding.
-
-Check that the configuration files are present to enable this network parameter.
-
-$ sudo grep -r net.ipv4.conf.all.send_redirects /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf: net.ipv4.conf.all.send_redirects = 0
-
-If "net.ipv4.conf.all.send_redirects" is not set to "0", is missing or commented out, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-248878"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248878r991589_rule" weight="10.0" severity="medium"><version>OL08-00-040230</version><title>OL 8 must not respond to Internet Control Message Protocol (ICMP) echoes sent to a broadcast address.</title><description>&lt;VulnDiscussion&gt;Responding to broadcast ICMP echoes facilitates network mapping and provides a vector for amplification attacks. 
+If "net.ipv4.conf.all.send_redirects" is not set to "0" and is not documented with the information system security officer (ISSO) as an operational requirement or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-248878"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248878r1156630_rule" weight="10.0" severity="medium"><version>OL08-00-040230</version><title>OL 8 must not respond to Internet Control Message Protocol (ICMP) echoes sent to a broadcast address.</title><description>&lt;VulnDiscussion&gt;Responding to broadcast ICMP echoes facilitates network mapping and provides a vector for amplification attacks. 
  
 There are notable differences between Internet Protocol version 4 (IPv4) and Internet Protocol version 6 (IPv6). IPv6 does not implement the same method of broadcast as IPv4. Instead, IPv6 uses multicast addressing to the all-hosts multicast group. Refer to RFC4294 for an explanation of "IPv6 Node Requirements", which resulted in this difference between IPv4 and IPv6.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52266r858656_fix">Configure OL 8 to not respond to IPv4 ICMP echoes sent to a broadcast address with the following command:
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52266r1155467_fix">Configure OL 8 to not respond to IPv4 ICMP echoes sent to a broadcast address.
 
-$ sudo sysctl -w net.ipv4.icmp_echo_ignore_broadcasts=1
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+net.ipv4.icmp_echo_ignore_broadcasts = 1
 
-If "1" is not the system's default value, add or update the following line in "/etc/sysctl.conf" or in the appropriate file under "/etc/sysctl.d":
+Load settings from all system configuration files with the following command:
 
-net.ipv4.icmp_echo_ignore_broadcasts=1</fixtext><fix id="F-52266r858656_fix" /><check system="C-52312r833253_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 does not respond to ICMP echoes sent to a broadcast address.
+$ sudo sysctl --system</fixtext><fix id="F-52266r1155467_fix" /><check system="C-52312r1155466_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 does not respond to ICMP echoes sent to a broadcast address.
 
 Check the value of the "icmp_echo_ignore_broadcasts" variable with the following command:
 
-$ sudo sysctl net.ipv4.icmp_echo_ignore_broadcasts
-
+$ sysctl net.ipv4.icmp_echo_ignore_broadcasts
 net.ipv4.icmp_echo_ignore_broadcasts = 1
 
-If the returned line does not have a value of "1", a line is not returned, or the retuned line is commented out, this is a finding.
-
-Check that the configuration files are present to enable this network parameter.
-
-$ sudo grep -r net.ipv4.icmp_echo_ignore_broadcasts /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf: net.ipv4.icmp_echo_ignore_broadcasts = 1
+If the returned line does not have a value of "1", a line is not returned, or the retuned line is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-248879"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248879r1156631_rule" weight="10.0" severity="medium"><version>OL08-00-040239</version><title>OL 8 must not forward IPv4 source-routed packets.</title><description>&lt;VulnDiscussion&gt;Source-routed packets allow the source of the packet to suggest that routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when forwarding is enabled and the system is functioning as a router.
 
-If "net.ipv4.icmp_echo_ignore_broadcasts" is not set to "1", is missing or commented out, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-248879"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248879r991589_rule" weight="10.0" severity="medium"><version>OL08-00-040239</version><title>OL 8 must not forward IPv4 source-routed packets.</title><description>&lt;VulnDiscussion&gt;Source-routed packets allow the source of the packet to suggest that routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when forwarding is enabled and the system is functioning as a router.
-
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52267r858658_fix">Configure OL 8 to not forward IPv4 source-routed packets with the following command:
-
-$ sudo sysctl -w net.ipv4.conf.all.accept_source_route=0
-
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
-
-If "0" is not the system's all value then add or update the following line in the appropriate file under "/etc/sysctl.d":
-
-net.ipv4.conf.all.accept_source_route=0</fixtext><fix id="F-52267r858658_fix" /><check system="C-52313r833255_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 does not accept IPv4 source-routed packets.
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52267r1155470_fix">Configure OL 8 to ignore IPv4 source-routed packets.
 
-Check the value of the accept source route variable with the following command:
-
-$ sudo sysctl net.ipv4.conf.all.accept_source_route
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
 net.ipv4.conf.all.accept_source_route = 0
 
-If the returned line does not have a value of "0", a line is not returned, or the line is commented out, this is a finding.
-
-Check that the configuration files are present to enable this network parameter.
+Load settings from all system configuration files with the following command:
 
-$ sudo grep -r net.ipv4.conf.all.accept_source_route /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
+$ sudo sysctl --system</fixtext><fix id="F-52267r1155470_fix" /><check system="C-52313r1155469_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 will not accept IPv4 source-routed packets.
 
-/etc/sysctl.d/99-sysctl.conf: net.ipv4.conf.all.accept_source_route = 0
+Check the value of the all "accept_source_route" variables with the following command:
 
-If "net.ipv4.conf.all.accept_source_route" is not set to "0", is missing or commented out, this is a finding.
+$ sysctl net.ipv4.conf.all.accept_source_route
+net.ipv4.conf.all.accept_source_route = 0
 
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-248880"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248880r991589_rule" weight="10.0" severity="medium"><version>OL08-00-040240</version><title>OL 8 must not forward IPv6 source-routed packets.</title><description>&lt;VulnDiscussion&gt;Source-routed packets allow the source of the packet to suggest that routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when forwarding is enabled and the system is functioning as a router.
+If the returned line does not have a value of "0", a line is not returned, or the line is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-248880"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248880r1156632_rule" weight="10.0" severity="medium"><version>OL08-00-040240</version><title>OL 8 must not forward IPv6 source-routed packets.</title><description>&lt;VulnDiscussion&gt;Source-routed packets allow the source of the packet to suggest that routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when forwarding is enabled and the system is functioning as a router.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52268r858660_fix">Configure OL 8 to not forward IPv6 source-routed packets with the following command:
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52268r1155473_fix">Configure OL 8 to not forward IPv6 source-routed packets.
 
-$ sudo sysctl -w net.ipv6.conf.all.accept_source_route=0
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+net.ipv6.conf.all.accept_source_route = 0
 
-If "0" is not the system's all value then add or update the following line in the appropriate file under "/etc/sysctl.d":
+Load settings from all system configuration files with the following command:
 
-net.ipv6.conf.all.accept_source_route=0</fixtext><fix id="F-52268r858660_fix" /><check system="C-52314r833257_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 does not accept IPv6 source-routed packets.
+$ sudo sysctl --system</fixtext><fix id="F-52268r1155473_fix" /><check system="C-52314r1155472_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Note: If IPv6 is disabled on the system, this requirement is Not Applicable.
 
-Note: If IPv6 is disabled on the system, this requirement is Not Applicable.
+Verify OL 8 does not accept IPv6 source-routed packets.
 
 Check the value of the accept source route variable with the following command:
 
-$ sudo sysctl net.ipv6.conf.all.accept_source_route
-
+$ sysctl net.ipv6.conf.all.accept_source_route
 net.ipv6.conf.all.accept_source_route = 0
 
-If the returned line does not have a value of "0", a line is not returned, or the line is commented out, this is a finding.
-
-Check that the configuration files are present to enable this network parameter.
-
-$ sudo grep -r net.ipv6.conf.all.accept_source_route /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf: net.ipv6.conf.all.accept_source_route = 0
-
-If "net.ipv6.conf.all.accept_source_route" is not set to "0", is missing or commented out, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-248881"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248881r991589_rule" weight="10.0" severity="medium"><version>OL08-00-040249</version><title>OL 8 must not forward IPv4 source-routed packets by default.</title><description>&lt;VulnDiscussion&gt;Source-routed packets allow the source of the packet to suggest that routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when forwarding is enabled and the system is functioning as a router.
+If the returned line does not have a value of "0", a line is not returned, or the line is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-248881"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248881r1156633_rule" weight="10.0" severity="medium"><version>OL08-00-040249</version><title>OL 8 must not forward IPv4 source-routed packets by default.</title><description>&lt;VulnDiscussion&gt;Source-routed packets allow the source of the packet to suggest that routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when forwarding is enabled and the system is functioning as a router.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52269r858662_fix">Configure OL 8 to not forward IPv4 source-routed packets by default with the following command:
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52269r1155476_fix">Configure OL 8 to not forward IPv4 source-routed packets by default.
 
-$ sudo sysctl -w net.ipv4.conf.default.accept_source_route=0
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+net.ipv4.conf.default.accept_source_route = 0
 
-If "0" is not the system's default value then add or update the following line in the appropriate file under "/etc/sysctl.d":
+Load settings from all system configuration files with the following command:
 
-net.ipv4.conf.default.accept_source_route=0</fixtext><fix id="F-52269r858662_fix" /><check system="C-52315r833259_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 does not accept IPv4 source-routed packets by default.
+$ sudo sysctl --system</fixtext><fix id="F-52269r1155476_fix" /><check system="C-52315r1155475_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 does not accept IPv4 source-routed packets by default.
 
 Check the value of the accept source route variable with the following command:
 
-$ sudo sysctl net.ipv4.conf.default.accept_source_route
-
+$ sysctl net.ipv4.conf.default.accept_source_route
 net.ipv4.conf.default.accept_source_route = 0
 
-If the returned line does not have a value of "0", a line is not returned, or the line is commented out, this is a finding.
-
-Check that the configuration files are present to enable this network parameter.
-
-$ sudo grep -r net.ipv4.conf.default.accept_source_route /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf: net.ipv4.conf.default.accept_source_route = 0
+If the returned line does not have a value of "0", a line is not returned, or the line is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-248882"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248882r1156634_rule" weight="10.0" severity="medium"><version>OL08-00-040250</version><title>OL 8 must not forward IPv6 source-routed packets by default.</title><description>&lt;VulnDiscussion&gt;Source-routed packets allow the source of the packet to suggest that routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when forwarding is enabled and the system is functioning as a router.
 
-If "net.ipv4.conf.default.accept_source_route" is not set to "0", is missing or commented out, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-248882"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248882r991589_rule" weight="10.0" severity="medium"><version>OL08-00-040250</version><title>OL 8 must not forward IPv6 source-routed packets by default.</title><description>&lt;VulnDiscussion&gt;Source-routed packets allow the source of the packet to suggest that routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when forwarding is enabled and the system is functioning as a router.
-
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52270r858664_fix">Configure OL 8 to not forward IPv6 source-routed packets by default with the following command:
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52270r1155479_fix">Configure OL 8 to not forward IPv6 source-routed packets by default.
 
-$ sudo sysctl -w net.ipv6.conf.default.accept_source_route=0
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+net.ipv6.conf.default.accept_source_route = 0
 
-If "0" is not the system's default value then add or update the following line in the appropriate file under "/etc/sysctl.d":
+Load settings from all system configuration files with the following command:
 
-net.ipv6.conf.default.accept_source_route=0</fixtext><fix id="F-52270r858664_fix" /><check system="C-52316r833261_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 does not accept IPv6 source-routed packets by default.
+$ sudo sysctl --system</fixtext><fix id="F-52270r1155479_fix" /><check system="C-52316r1155478_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Note: If IPv6 is disabled on the system, this requirement is Not Applicable.
 
-Note: If IPv6 is disabled on the system, this requirement is Not Applicable.
+Verify OL 8 does not accept IPv6 source-routed packets by default.
 
 Check the value of the accept source route variable with the following command:
 
-$ sudo sysctl net.ipv6.conf.default.accept_source_route
-
+$ sysctl net.ipv6.conf.default.accept_source_route
 net.ipv6.conf.default.accept_source_route = 0
 
-If the returned line does not have a value of "0", a line is not returned, or the line is commented out, this is a finding.
-
-Check that the configuration files are present to enable this network parameter.
+If the returned line does not have a value of "0", a line is not returned, or the line is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-248883"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248883r1156636_rule" weight="10.0" severity="medium"><version>OL08-00-040260</version><title>OL 8 must not enable IPv6 packet forwarding unless the system is a router.</title><description>&lt;VulnDiscussion&gt;Routing protocol daemons are typically used on routers to exchange network topology information with other routers. If this software is used when not required, system network information may be unnecessarily transmitted across the network.
 
-$ sudo grep -r net.ipv6.conf.default.accept_source_route /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf: net.ipv6.conf.default.accept_source_route = 0
-
-If "net.ipv6.conf.default.accept_source_route" is not set to "0", is missing or commented out, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-248883"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248883r991589_rule" weight="10.0" severity="medium"><version>OL08-00-040260</version><title>OL 8 must not enable IPv6 packet forwarding unless the system is a router.</title><description>&lt;VulnDiscussion&gt;Routing protocol daemons are typically used on routers to exchange network topology information with other routers. If this software is used when not required, system network information may be unnecessarily transmitted across the network.
-
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52271r858668_fix">Configure OL 8 to not allow IPv6 packet forwarding unless the system is a router with the following command:
-
-$ sudo sysctl -w net.ipv6.conf.all.forwarding=0
-
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
-
-If "0" is not the system's default value, add or update the following lines in "/etc/sysctl.conf" or in the appropriate file under "/etc/sysctl.d":
-
-net.ipv6.conf.all.forwarding=0</fixtext><fix id="F-52271r858668_fix" /><check system="C-52317r833265_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 is not performing IPv6 packet forwarding unless the system is a router.
-
-Note: If IPv6 is disabled on the system, this requirement is Not Applicable.
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52271r1155485_fix">Configure OL 8 to not allow IPv6 packet forwarding unless the system is a router.
 
-Determine if IPv6 forwarding is disabled using the following commands:
-
-$ sudo sysctl net.ipv6.conf.all.forwarding
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
 net.ipv6.conf.all.forwarding = 0
 
-If the IPv6 forwarding value is "1" and is not documented with the Information System Security Officer (ISSO) as an operational requirement, this is a finding.
+Load settings from all system configuration files with the following command:
 
-Check that the configuration files are present to enable this network parameter.
+$ sudo sysctl --system</fixtext><fix id="F-52271r1155485_fix" /><check system="C-52317r1155484_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Note: If IPv6 is disabled on the system, this requirement is Not Applicable.
 
-$ sudo grep -r net.ipv6.conf.all.forwarding /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
+Verify OL 8 is not performing IPv6 packet forwarding, unless the system is a router.
 
-/etc/sysctl.d/99-sysctl.conf: net.ipv6.conf.all.forwarding = 0
+Check that IPv6 forwarding is disabled using the following commands:
 
-If "net.ipv6.conf.all.forwarding" is not set to "0", is missing or commented out, this is a finding.
+$ sysctl net.ipv6.conf.all.forwarding
+net.ipv6.conf.all.forwarding = 0
 
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-248884"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248884r991589_rule" weight="10.0" severity="medium"><version>OL08-00-040261</version><title>OL 8 must not accept router advertisements on all IPv6 interfaces.</title><description>&lt;VulnDiscussion&gt;Routing protocol daemons are typically used on routers to exchange network topology information with other routers. If this software is used when not required, system network information may be unnecessarily transmitted across the network. 
+If the IPv6 forwarding value is not "0" and is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-248884"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248884r1156637_rule" weight="10.0" severity="medium"><version>OL08-00-040261</version><title>OL 8 must not accept router advertisements on all IPv6 interfaces.</title><description>&lt;VulnDiscussion&gt;Routing protocol daemons are typically used on routers to exchange network topology information with other routers. If this software is used when not required, system network information may be unnecessarily transmitted across the network. 
  
 An illicit router advertisement message could result in a man-in-the-middle attack.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52272r858670_fix">Configure the system to not accept router advertisements on all IPv6 interfaces unless the system is a router with the following commands:
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52272r1155488_fix">Configure OL 8 to not accept router advertisements on all IPv6 interfaces unless the system is a router.
 
-$ sudo sysctl -w net.ipv6.conf.all.accept_ra=0
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
-Remove any configurations that conflict with the above from the following locations:
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+net.ipv6.conf.all.accept_ra = 0
 
-If "0" is not the system's default value, add or update the following lines in the appropriate file under "/etc/sysctl.d":
+Load settings from all system configuration files with the following command:
 
-net.ipv6.conf.all.accept_ra=0</fixtext><fix id="F-52272r858670_fix" /><check system="C-52318r833267_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 does not accept router advertisements on all IPv6 interfaces unless the system is a router.
+$ sudo sysctl --system</fixtext><fix id="F-52272r1155488_fix" /><check system="C-52318r1155487_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Note: If IPv6 is disabled on the system, this requirement is Not Applicable.
 
-Note: If IPv6 is disabled on the system, this requirement is not applicable.
+Verify OL 8 does not accept router advertisements on all IPv6 interfaces, unless the system is a router.
 
 Determine if router advertisements are not accepted by using the following command:
 
-$ sudo sysctl net.ipv6.conf.all.accept_ra
-
+$ sysctl net.ipv6.conf.all.accept_ra
 net.ipv6.conf.all.accept_ra = 0
 
-If the "accept_ra" value is not "0" and is not documented with the Information System Security Officer (ISSO) as an operational requirement, this is a finding.
-
-Check that the configuration files are present to enable this network parameter.
-
-$ sudo grep -r net.ipv6.conf.all.accept_ra /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf: net.ipv6.conf.all.accept_ra = 0
-
-If "net.ipv6.conf.all.accept_ra" is not set to "0", is missing or commented out, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-248885"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248885r991589_rule" weight="10.0" severity="medium"><version>OL08-00-040262</version><title>OL 8 must not accept router advertisements on all IPv6 interfaces by default.</title><description>&lt;VulnDiscussion&gt;Routing protocol daemons are typically used on routers to exchange network topology information with other routers. If this software is used when not required, system network information may be unnecessarily transmitted across the network. 
+If the "accept_ra" value is not "0" and is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-248885"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248885r1156638_rule" weight="10.0" severity="medium"><version>OL08-00-040262</version><title>OL 8 must not accept router advertisements on all IPv6 interfaces by default.</title><description>&lt;VulnDiscussion&gt;Routing protocol daemons are typically used on routers to exchange network topology information with other routers. If this software is used when not required, system network information may be unnecessarily transmitted across the network. 
  
 An illicit router advertisement message could result in a man-in-the-middle attack.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52273r858672_fix">Configure the system to not accept router advertisements on all IPv6 interfaces by default, unless the system is a router, with the following commands:
-
-$ sudo sysctl -w net.ipv6.conf.default.accept_ra=0
-
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
-
-If "0" is not the system's default value, add or update the following lines in the appropriate file under "/etc/sysctl.d":
-
-net.ipv6.conf.default.accept_ra=0</fixtext><fix id="F-52273r858672_fix" /><check system="C-52319r833269_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 does not accept router advertisements on all IPv6 interfaces by default, unless the system is a router.
-
-Note: If IPv6 is disabled on the system, this requirement is not applicable.
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52273r1155491_fix">Configure OL 8 to not accept router advertisements on all IPv6 interfaces by default unless the system is a router.
 
-Determine if router advertisements are not accepted by using the following command:
-
-$ sudo sysctl net.ipv6.conf.default.accept_ra
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
 net.ipv6.conf.default.accept_ra = 0
 
-If the "accept_ra" value is not "0" and is not documented with the Information System Security Officer (ISSO) as an operational requirement, this is a finding.
+Load settings from all system configuration files with the following command:
 
-Check that the configuration files are present to enable this network parameter.
+$ sudo sysctl --system</fixtext><fix id="F-52273r1155491_fix" /><check system="C-52319r1155490_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Note: If IPv6 is disabled on the system, this requirement is Not Applicable.
 
-$ sudo grep -r net.ipv6.conf.default.accept_ra /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
+Verify OL 8 does not accept router advertisements on all IPv6 interfaces by default unless the system is a router.
 
-/etc/sysctl.d/99-sysctl.conf: net.ipv6.conf.default.accept_ra = 0
+Determine if router advertisements are not accepted by default by using the following command:
 
-If "net.ipv6.conf.default.accept_ra" is not set to "0", is missing or commented out, this is a finding.
+$ sysctl net.ipv6.conf.default.accept_ra
+net.ipv6.conf.default.accept_ra = 0
 
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-248886"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248886r991589_rule" weight="10.0" severity="medium"><version>OL08-00-040270</version><title>OL 8 must not allow interfaces to perform Internet Control Message Protocol (ICMP) redirects by default.</title><description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages contain information from the system's route table, possibly revealing portions of the network topology.
+If the "accept_ra" value is not "0" and is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-248886"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248886r1156639_rule" weight="10.0" severity="medium"><version>OL08-00-040270</version><title>OL 8 must not allow interfaces to perform Internet Control Message Protocol (ICMP) redirects by default.</title><description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages contain information from the system's route table, possibly revealing portions of the network topology.
  
 There are notable differences between Internet Protocol version 4 (IPv4) and Internet Protocol version 6 (IPv6). There is only a directive to disable sending of IPv4 redirected packets. Refer to RFC4294 for an explanation of "IPv6 Node Requirements", which resulted in this difference between IPv4 and IPv6.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52274r858674_fix">Configure OL 8 to not allow interfaces to perform Internet Protocol version 4 (IPv4) ICMP redirects by default with the following command:
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52274r1155494_fix">Configure OL 8 to not allow interfaces to perform IPv4 ICMP redirects by default.
 
-$ sudo sysctl -w net.ipv4.conf.default.send_redirects=0
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+net.ipv4.conf.default.send_redirects = 0
 
-If "0" is not the system's default value, add or update the following line in "/etc/sysctl.conf" or in the appropriate file under "/etc/sysctl.d":
+Load settings from all system configuration files with the following command:
 
-net.ipv4.conf.default.send_redirects=0</fixtext><fix id="F-52274r858674_fix" /><check system="C-52320r833271_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 does not allow interfaces to perform Internet Protocol version 4 (IPv4) ICMP redirects by default.
+$ sudo sysctl --system</fixtext><fix id="F-52274r1155494_fix" /><check system="C-52320r1155493_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 does not allow interfaces to perform Internet Protocol version 4 (IPv4) ICMP redirects by default.
 
 Check the value of the "default send_redirects" variables with the following command:
 
-$ sudo sysctl net.ipv4.conf.default.send_redirects
-
+$ sysctl net.ipv4.conf.default.send_redirects
 net.ipv4.conf.default.send_redirects=0
 
-If the returned line does not have a value of "0" or a line is not returned, this is a finding.
+If "net.ipv4.conf.default.send_redirects" is not set to "0" and is not documented with the information system security officer (ISSO) as an operational requirement or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-248887"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248887r1156640_rule" weight="10.0" severity="medium"><version>OL08-00-040279</version><title>OL 8 must ignore IPv4 Internet Control Message Protocol (ICMP) redirect messages.</title><description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
 
-Check that the configuration files are present to enable this network parameter.
-
-$ sudo grep -r net.ipv4.conf.default.send_redirects /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf: net.ipv4.conf.default.send_redirects = 0
-
-If "net.ipv4.conf.default.send_redirects" is not set to "0", is missing or commented out, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-248887"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248887r991589_rule" weight="10.0" severity="medium"><version>OL08-00-040279</version><title>OL 8 must ignore IPv4 Internet Control Message Protocol (ICMP) redirect messages.</title><description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
-
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52275r858676_fix">Configure OL 8 to ignore IPv4 ICMP redirect messages with the following command:
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52275r1155497_fix">Configure OL 8 to ignore IPv4 ICMP redirect messages.
 
-$ sudo sysctl -w net.ipv4.conf.all.accept_redirects=0
-
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
-
-If "0" is not the system's default value then add or update the following line in the appropriate file under "/etc/sysctl.d":
-
-net.ipv4.conf.all.accept_redirects = 0</fixtext><fix id="F-52275r858676_fix" /><check system="C-52321r833273_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 ignores IPv4 ICMP redirect messages.
-
-Check the value of the "accept_redirects" variables with the following command:
-
-$ sudo sysctl net.ipv4.conf.all.accept_redirects
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
 net.ipv4.conf.all.accept_redirects = 0
 
-If the returned line does not have a value of "0", a line is not returned, or the line is commented out, this is a finding.
-
-Check that the configuration files are present to enable this network parameter.
+Load settings from all system configuration files with the following command:
 
-$ sudo grep -r net.ipv4.conf.all.accept_redirects /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
+$ sudo sysctl --system</fixtext><fix id="F-52275r1155497_fix" /><check system="C-52321r1155496_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 will not accept IPv4 ICMP redirect messages.
 
-/etc/sysctl.d/99-sysctl.conf: net.ipv4.conf.all.accept_redirects = 0
+Check the value of all "accept_redirects" variables with the following command:
 
-If "net.ipv4.conf.all.accept_redirects" is not set to "0", is missing or commented out, this is a finding.
+$ sysctl net.ipv4.conf.all.accept_redirects
+net.ipv4.conf.all.accept_redirects = 0
 
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-248888"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248888r991589_rule" weight="10.0" severity="medium"><version>OL08-00-040280</version><title>OL 8 must ignore IPv6 Internet Control Message Protocol (ICMP) redirect messages.</title><description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
+If the returned line does not have a value of "0", a line is not returned, or the line is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-248888"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248888r1156641_rule" weight="10.0" severity="medium"><version>OL08-00-040280</version><title>OL 8 must ignore IPv6 Internet Control Message Protocol (ICMP) redirect messages.</title><description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52276r858678_fix">Configure OL 8 to ignore IPv6 ICMP redirect messages with the following command:
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52276r1155500_fix">Configure OL 8 to ignore IPv6 ICMP redirect messages.
 
-$ sudo sysctl -w net.ipv6.conf.all.accept_redirects=0
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+net.ipv6.conf.all.accept_redirects = 0
 
-If "0" is not the system's default value then add or update the following line in the appropriate file under "/etc/sysctl.d":
+Load settings from all system configuration files with the following command:
 
-net.ipv6.conf.all.accept_redirects = 0</fixtext><fix id="F-52276r858678_fix" /><check system="C-52322r833275_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 ignores IPv6 ICMP redirect messages.
+$ sudo sysctl --system</fixtext><fix id="F-52276r1155500_fix" /><check system="C-52322r1155499_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Note: If IPv6 is disabled on the system, this requirement is Not Applicable.
 
-Note: If IPv6 is disabled on the system, this requirement is Not Applicable.
+Verify OL 8 ignores IPv6 ICMP redirect messages.
 
 Check the value of the "accept_redirects" variables with the following command:
 
-$ sudo sysctl net.ipv6.conf.all.accept_redirects
-
+$ sysctl net.ipv6.conf.all.accept_redirects
 net.ipv6.conf.all.accept_redirects = 0
 
-If the returned line does not have a value of "0", a line is not returned, or the line is commented out, this is a finding.
-
-Check that the configuration files are present to enable this network parameter.
-
-$ sudo grep -r net.ipv6.conf.all.accept_redirects /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
+If the returned line does not have a value of "0", a line is not returned, or the line is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-248889"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248889r1156644_rule" weight="10.0" severity="medium"><version>OL08-00-040281</version><title>OL 8 must disable access to the network "bpf" syscall from nonprivileged processes.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
-/etc/sysctl.d/99-sysctl.conf: net.ipv6.conf.all.accept_redirects = 0
-
-If "net.ipv6.conf.all.accept_redirects" is not set to "0", is missing or commented out, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-248889"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248889r991589_rule" weight="10.0" severity="medium"><version>OL08-00-040281</version><title>OL 8 must disable access to the network "bpf" syscall from unprivileged processes.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
-
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52277r858680_fix">Configure the system to prevent privilege escalation through the kernel by disabling access to the "bpf" syscall by adding the following line to a file in the "/etc/sysctl.d" directory:
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52277r1156643_fix">Configure OL 8 to prevent privilege escalation thru the kernel by disabling access to the bpf syscall by adding the following line to a file, in the "/etc/sysctl.d" directory:
 
-kernel.unprivileged_bpf_disabled = 1
-
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+kernel.nonprivileged_bpf_disabled = 1
 
 The system configuration files must be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
 
-$ sudo sysctl --system</fixtext><fix id="F-52277r858680_fix" /><check system="C-52323r833277_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 prevents privilege escalation through the kernel by disabling access to the "bpf" syscall with the following commands: 
- 
-$ sudo sysctl kernel.unprivileged_bpf_disabled 
- 
-kernel.unprivileged_bpf_disabled = 1 
- 
-If the returned line does not have a value of "1" or a line is not returned, this is a finding.
-
-Check that the configuration files are present to enable this network parameter.
-
-$ sudo grep -r kernel.unprivileged_bpf_disabled /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
+$ sudo sysctl --system</fixtext><fix id="F-52277r1156643_fix" /><check system="C-52323r1156642_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 prevents privilege escalation thru the kernel by disabling access to the bpf system call with the following commands:
 
-/etc/sysctl.d/99-sysctl.conf: kernel.unprivileged_bpf_disabled = 1
+$ sysctl kernel.nonprivileged_bpf_disabled
+kernel.nonprivileged_bpf_disabled = 1
 
-If "kernel.unprivileged_bpf_disabled" is not set to "1", is missing or commented out, this is a finding.
+If the returned line does not have a value of "1", or a line is not returned, this is a finding.</check-content></check></Rule></Group><Group id="V-248890"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248890r1156646_rule" weight="10.0" severity="medium"><version>OL08-00-040282</version><title>OL 8 must restrict the use of "ptrace" to descendant processes.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-248890"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248890r991589_rule" weight="10.0" severity="medium"><version>OL08-00-040282</version><title>OL 8 must restrict the use of "ptrace" to descendant processes.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
-
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52278r858682_fix">Configure the system to restrict the use of "ptrace" to descendant processes by adding the following line to a file in the "/etc/sysctl.d" directory:
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52278r1156645_fix">Configure OL 8 to restrict usage of ptrace to descendant processes by adding the following line to "/etc/sysctl.d/99-sysctl.conf":
 
 kernel.yama.ptrace_scope = 1
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
-
 The system configuration files must be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
 
-$ sudo sysctl --system</fixtext><fix id="F-52278r858682_fix" /><check system="C-52324r833279_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 restricts the use of "ptrace" to descendant processes with the following commands: 
- 
-$ sudo sysctl kernel.yama.ptrace_scope 
- 
-kernel.yama.ptrace_scope = 1 
- 
-If the returned line does not have a value of "1" or a line is not returned, this is a finding.
-
-Check that the configuration files are present to enable this network parameter.
+$ sudo sysctl --system</fixtext><fix id="F-52278r1156645_fix" /><check system="C-52324r1155505_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 restricts usage of ptrace to descendant processes with the following commands:
 
-$ sudo grep -r kernel.yama.ptrace_scope /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf: kernel.yama.ptrace_scope = 1
-
-If "kernel.yama.ptrace_scope" is not set to "1", is missing or commented out, this is a finding.
+$ sysctl kernel.yama.ptrace_scope
+kernel.yama.ptrace_scope = 1
 
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-248891"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248891r991589_rule" weight="10.0" severity="medium"><version>OL08-00-040283</version><title>OL 8 must restrict exposed kernel pointer addresses access.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+If the returned line does not have a value of "1", or a line is not returned, this is a finding.</check-content></check></Rule></Group><Group id="V-248891"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248891r1156648_rule" weight="10.0" severity="medium"><version>OL08-00-040283</version><title>OL 8 must restrict exposed kernel pointer addresses access.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52279r858684_fix">Configure the system to restrict exposed kernel pointer addresses access by adding the following line to a file in the "/etc/sysctl.d" directory:
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52279r1156647_fix">Configure OL 8 to prevent the leak of kernel pointers to nonprivileged users.
 
-kernel.kptr_restrict = 1
+Add or edit the following line in /etc/sysctl.d/99-sysctl.conf system configuration file:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
-
-The system configuration files must be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
-
-$ sudo sysctl --system</fixtext><fix id="F-52279r858684_fix" /><check system="C-52325r833281_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 restricts exposed kernel pointer addresses access with the following commands:
- 
-$ sudo sysctl kernel.kptr_restrict 
- 
-kernel.kptr_restrict = 1 
- 
-If the returned line does not have a value of "1" or "2" or a line is not returned, this is a finding.
-
-Check that the configuration files are present to enable this network parameter.
-
-$ sudo grep -r kernel.kptr_restrict /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
+kernel.kptr_restrict = 1
 
-/etc/sysctl.d/99-sysctl.conf: kernel.kptr_restrict = 1
+Reload settings from all system configuration files with the following command:
 
-If "kernel.kptr_restrict" is not set to "1" or "2", is missing or commented out, this is a finding.
+$ sudo sysctl --system</fixtext><fix id="F-52279r1156647_fix" /><check system="C-52325r1155508_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 restricts access to exposed kernel pointers with the following command:
 
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-248892"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248892r991589_rule" weight="10.0" severity="medium"><version>OL08-00-040284</version><title>OL 8 must disable the use of user namespaces.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors. 
+$ sysctl kernel.kptr_restrict 
+kernel.kptr_restrict = 1</check-content></check></Rule></Group><Group id="V-248892"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248892r1156650_rule" weight="10.0" severity="medium"><version>OL08-00-040284</version><title>OL 8 must disable the use of user namespaces.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors. 
 
-User namespaces are used primarily for Linux containers. "Rootful" containers run with root privileges on the host system and may pose a security risk if compromised. "Rootless" containers run without root privileges and allow for better isolation from the host system. The value "0" disallows the use of user namespaces. When containers are not in use, namespaces should be disallowed. When privileged user namespaces or "rootful" containers are in use, user namespaces should be disallowed. When unprivileged user namespaces or "rootless" containers are deployed on a system, the value should be set to a large non-zero value. The default value depends on the amount of memory in the system, approximately the total memory in kilobytes divided by 256.
+User namespaces are used primarily for Linux containers. "Rootful" containers run with root privileges on the host system and may pose a security risk if compromised. "Rootless" containers run without root privileges and allow for better isolation from the host system. The value "0" disallows the use of user namespaces. When containers are not in use, namespaces should be disallowed. When privileged user namespaces or "rootful" containers are in use, user namespaces should be disallowed. When nonprivileged user namespaces or "rootless" containers are deployed on a system, the value should be set to a large nonzero value. The default value depends on the amount of memory in the system, approximately the total memory in kilobytes divided by 256.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52280r928561_fix">Configure the system to disable the use of user namespaces by adding the following line to a file in the "/etc/sysctl.d" directory:
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52280r1156649_fix">Configure OL 8 to disable the use of user namespaces by adding the following line to a file, in the "/etc/sysctl.d" directory:
 
-     user.max_user_namespaces = 0
+Note: User namespaces are used primarily for Linux containers. If containers are in use, this requirement is Not Applicable. 
 
-Remove any configurations that conflict with the above from the following locations: 
-
-     /run/sysctl.d/*.conf
-     /usr/local/lib/sysctl.d/*.conf
-     /usr/lib/sysctl.d/*.conf
-     /lib/sysctl.d/*.conf
-     /etc/sysctl.conf
-     /etc/sysctl.d/*.conf
+user.max_user_namespaces = 0
 
 The system configuration files must be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
 
-     $ sudo sysctl --system</fixtext><fix id="F-52280r928561_fix" /><check system="C-52326r928560_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 disables the use of user namespaces with the following commands. 
- 
-Note: If unprivileged user namespaces or "rootless" containers are in use, this requirement is not applicable.
- 
-     $ sudo sysctl user.max_user_namespaces 
-     user.max_user_namespaces = 0 
- 
-If the returned line does not have a value of "0" or a line is not returned, this is a finding.
-
-Check that the configuration files are present to enable this network parameter.
+$ sudo sysctl --system</fixtext><fix id="F-52280r1156649_fix" /><check system="C-52326r1155511_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Note: User namespaces are used primarily for Linux containers. If containers are in use, this requirement is Not Applicable.
 
-     $ sudo grep -r user.max_user_namespaces /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-     /etc/sysctl.d/99-sysctl.conf: user.max_user_namespaces = 0
+Verify OL 8 disables the use of user namespaces with the following commands:
 
-If "user.max_user_namespaces" is not set to "0", is missing or commented out, this is a finding.
+$ sysctl user.max_user_namespaces
+user.max_user_namespaces = 0
 
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-248893"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248893r991589_rule" weight="10.0" severity="medium"><version>OL08-00-040285</version><title>OL 8 must use reverse path filtering on all IPv4 interfaces.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors. 
+If the returned line does not have a value of "0", or a line is not returned, this is a finding.</check-content></check></Rule></Group><Group id="V-248893"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248893r1156652_rule" weight="10.0" severity="medium"><version>OL08-00-040285</version><title>OL 8 must use reverse path filtering on all IPv4 interfaces.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors. 
  
 Enabling reverse path filtering drops packets with source addresses that are not routable. There is no equivalent filter for IPv6 traffic.
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52281r858688_fix">Configure the system to use reverse path filtering on all IPv4 interfaces by adding the following line to a file in the "/etc/sysctl.d" directory:
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52281r1156651_fix">Configure OL 8 to use reverse path filtering on all IPv4 interfaces. 
 
-net.ipv4.conf.all.rp_filter = 1
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+net.ipv4.conf.all.rp_filter = 1
 
 The system configuration files must be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
 
-$ sudo sysctl --system</fixtext><fix id="F-52281r858688_fix" /><check system="C-52327r833285_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 uses reverse path filtering on all IPv4 interfaces with the following commands: 
- 
-$ sudo sysctl net.ipv4.conf.all.rp_filter 
- 
-net.ipv4.conf.all.rp_filter = 1 
- 
-If the returned line does not have a value of "1" or "2" or a line is not returned, this is a finding.
-
-Check that the configuration files are present to enable this network parameter.
-
-$ sudo grep -r net.ipv4.conf.all.rp_filter /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf: net.ipv4.conf.all.rp_filter = 1
+$ sudo sysctl --system</fixtext><fix id="F-52281r1156651_fix" /><check system="C-52327r1155514_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 uses reverse path filtering on all IPv4 interfaces with the following commands:
 
-If "net.ipv4.conf.all.rp_filter" is not set to "1" or "2", is missing or commented out, this is a finding.
+$ sysctl net.ipv4.conf.all.rp_filter
+net.ipv4.conf.all.rp_filter = 1
 
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-248894"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248894r991589_rule" weight="10.0" severity="medium"><version>OL08-00-040286</version><title>OL 8 must enable hardening for the Berkeley Packet Filter Just-in-time compiler.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+If the returned line does not have a value of "1", or a line is not returned, this is a finding.</check-content></check></Rule></Group><Group id="V-248894"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248894r1156654_rule" weight="10.0" severity="medium"><version>OL08-00-040286</version><title>OL 8 must enable hardening for the Berkeley Packet Filter Just-in-time compiler.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
 Enabling hardening for the Berkeley Packet Filter (BPF) Just-in-time (JIT) compiler aids in mitigating JIT spraying attacks. Setting the value to "2" enables JIT hardening for all users.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52282r858690_fix">Configure OL 8 to enable hardening for the BPF JIT compiler by adding the following line to a file in the "/etc/sysctl.d" directory:
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52282r1156653_fix">Configure OL 8 to enable hardening for the BPF JIT compiler by adding the following line to a file, in the "/etc/sysctl.d" directory:
 
 net.core.bpf_jit_harden = 2
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
-
-The system configuration files need to be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
+The system configuration files must be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
 
-$ sudo sysctl --system</fixtext><fix id="F-52282r858690_fix" /><check system="C-52328r833287_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 enables hardening for the BPF JIT with the following commands:
+$ sudo sysctl --system</fixtext><fix id="F-52282r1156653_fix" /><check system="C-52328r1155517_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 enables hardening for the BPF JIT with the following commands:
 
 $ sudo sysctl net.core.bpf_jit_harden
-
 net.core.bpf_jit_harden = 2
 
-If the returned line does not have a value of "2", or a line is not returned, this is a finding.
-
-Check that the configuration files are present to enable this network parameter.
-
-$ sudo grep -r net.core.bpf_jit_harden /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf: net.core.bpf_jit_harden = 2
-
-If "net.core.bpf_jit_harden" is not set to "2", is missing or commented out, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-248895"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248895r991589_rule" weight="10.0" severity="medium"><version>OL08-00-040290</version><title>OL 8 must be configured to prevent unrestricted mail relaying.</title><description>&lt;VulnDiscussion&gt;If unrestricted mail relaying is permitted, unauthorized senders could use this host as a mail relay to send spam or for other unauthorized activity.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52283r780250_fix">If "postfix" is installed, modify the "/etc/postfix/main.cf" file to restrict client connections to the local network with the following command: 
+If the returned line does not have a value of "2", or a line is not returned, this is a finding.</check-content></check></Rule></Group><Group id="V-248895"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-248895r991589_rule" weight="10.0" severity="medium"><version>OL08-00-040290</version><title>OL 8 must be configured to prevent unrestricted mail relaying.</title><description>&lt;VulnDiscussion&gt;If unrestricted mail relaying is permitted, unauthorized senders could use this host as a mail relay to send spam or for other unauthorized activity.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-52283r780250_fix">If "postfix" is installed, modify the "/etc/postfix/main.cf" file to restrict client connections to the local network with the following command: 
  
 $ sudo postconf -e 'smtpd_client_restrictions = permit_mynetworks,reject'</fixtext><fix id="F-52283r780250_fix" /><check system="C-52329r780249_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify the system is configured to prevent unrestricted mail relaying. 
  
@@ -7559,49 +7098,30 @@ Check for the use of the "pwquality" retry option in the system-auth and passwor
 
 $ sudo grep pwquality /etc/pam.d/system-auth /etc/pam.d/password-auth | grep retry
 
-If the command returns any results, this is a finding.</check-content></check></Rule></Group><Group id="V-252662"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-252662r991589_rule" weight="10.0" severity="medium"><version>OL08-00-040259</version><title>OL 8 must not enable IPv4 packet forwarding unless the system is a router.</title><description>&lt;VulnDiscussion&gt;Routing protocol daemons are typically used on routers to exchange network topology information with other routers. If this software is used when not required, system network information may be unnecessarily transmitted across the network.
+If the command returns any results, this is a finding.</check-content></check></Rule></Group><Group id="V-252662"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-252662r1156635_rule" weight="10.0" severity="medium"><version>OL08-00-040259</version><title>OL 8 must not enable IPv4 packet forwarding unless the system is a router.</title><description>&lt;VulnDiscussion&gt;Routing protocol daemons are typically used on routers to exchange network topology information with other routers. If this software is used when not required, system network information may be unnecessarily transmitted across the network.
 
-The sysctl --system command will load settings from all system configuration files.  All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files.  All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-56068r858666_fix">Configure OL 8 to not allow IPv4 packet forwarding unless the system is a router.
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-56068r1155482_fix">Configure OL 8 to not allow IPv4 packet forwarding unless the system is a router.
 
-Add or edit the following line in a system configuration file, in the "/etc/sysctl.d/" directory:
-
-net.ipv4.conf.all.forwarding=0
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+net.ipv4.conf.all.forwarding = 0
 
 Load settings from all system configuration files with the following command:
 
-$ sudo sysctl --system</fixtext><fix id="F-56068r858666_fix" /><check system="C-56118r833263_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 is not performing IPv4 packet forwarding, unless the system is a router.
+$ sudo sysctl --system</fixtext><fix id="F-56068r1155482_fix" /><check system="C-56118r1155481_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 is not performing IPv4 packet forwarding, unless the system is a router.
 
 Check that IPv4 forwarding is disabled using the following command:
 
-$ sudo sysctl net.ipv4.conf.all.forwarding
-
+$ sysctl net.ipv4.conf.all.forwarding
 net.ipv4.conf.all.forwarding = 0
 
-If the IPv4 forwarding value is not "0" and is not documented with the Information System Security Officer (ISSO) as an operational requirement, this is a finding.
-
-Check that the configuration files are present to enable this network parameter:
-
-$ sudo grep -r net.ipv4.conf.all.forwarding /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf: net.ipv4.conf.all.forwarding = 0
-
-If "net.ipv4.conf.all.forwarding" is not set to "0", is missing or commented out, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-252663"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-252663r991589_rule" weight="10.0" severity="medium"><version>OL08-00-040321</version><title>The graphical display manager must not be the default target on OL 8 unless approved.</title><description>&lt;VulnDiscussion&gt;Internet services that are not required for system or application processes must not be active to decrease the attack surface of the system. Graphical display managers have a long history of security vulnerabilities and must not be used, unless approved and documented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-56069r818784_fix">Document the requirement for a graphical user interface with the ISSO or reinstall the operating system without the graphical user interface. If reinstallation is not feasible, then continue with the following procedure:
+If the IPv4 forwarding value is not "0" and is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-252663"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-252663r991589_rule" weight="10.0" severity="medium"><version>OL08-00-040321</version><title>The graphical display manager must not be the default target on OL 8 unless approved.</title><description>&lt;VulnDiscussion&gt;Internet services that are not required for system or application processes must not be active to decrease the attack surface of the system. Graphical display managers have a long history of security vulnerabilities and must not be used, unless approved and documented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-56069r818784_fix">Document the requirement for a graphical user interface with the ISSO or reinstall the operating system without the graphical user interface. If reinstallation is not feasible, then continue with the following procedure:
 
 Open an SSH session and enter the following commands:
 
@@ -7679,27 +7199,36 @@ Verify that the "mailx" package is installed on the system:
 
      mailx.x86_64     12.5-29.el8     @ol8_baseos_latest
 	 
-If "mailx" package is not installed, this is a finding.</check-content></check></Rule></Group><Group id="V-257259"><title>SRG-OS-000163-GPOS-00072</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257259r970703_rule" weight="10.0" severity="medium"><version>OL08-00-020035</version><title>OL 8 must terminate idle user sessions.</title><description>&lt;VulnDiscussion&gt;Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a management session enabled on the console or console port that has been left unattended.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001133</ident><fixtext fixref="F-60885r917918_fix">Configure OL 8 to log out idle sessions by editing the /etc/systemd/logind.conf file with the following line:
+If "mailx" package is not installed, this is a finding.</check-content></check></Rule></Group><Group id="V-257259"><title>SRG-OS-000163-GPOS-00072</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257259r1156674_rule" weight="10.0" severity="medium"><version>OL08-00-020035</version><title>OL 8 must terminate idle user sessions.</title><description>&lt;VulnDiscussion&gt;Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a management session enabled on the console or console port that has been left unattended.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001133</ident><fixtext fixref="F-60885r1155561_fix">Configure OL 8 to log out idle sessions.
 
-     StopIdleSessionSec=900
+Create the directory if necessary:
 
-The "logind" service must be restarted for the changes to take effect. To restart the "logind" service, run the following command:
+$ mkdir -p /etc/systemd/logind.conf.d/
 
-     $ sudo systemctl restart systemd-logind</fixtext><fix id="F-60885r917918_fix" /><check system="C-60943r917917_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify that OL 8 logs out sessions that are idle for 15 minutes with the following command:
+Create a *.conf file in /etc/systemd/logind.conf.d/ with the following content:
 
-     $ sudo grep -i ^StopIdleSessionSec /etc/systemd/logind.conf
+[Login]
+StopIdleSessionSec=600
+KillUserProcesses=no
 
-     StopIdleSessionSec=900
+Restart systemd-logind:
 
-If "StopIdleSessionSec" is not configured to 900 seconds, this is a finding.</check-content></check></Rule></Group><Group id="V-274876"><title>SRG-OS-000471-GPOS-00215</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-274876r1106141_rule" weight="10.0" severity="medium"><version>OL08-00-030645</version><title>OL 8  must audit any script or executable called by cron as root or by any privileged user.</title><description>&lt;VulnDiscussion&gt;Any script or executable called by cron as root or by any privileged user must be owned by that user and must have the permissions 755 or more restrictive and should have no extended rights that allow any nonprivileged user to modify the script or executable.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000172</ident><fixtext fixref="F-78882r1101882_fix">Configure OL 8 to audit the execution of any system call made by cron as root or as any privileged user.
+$ systemctl restart systemd-logind</fixtext><fix id="F-60885r1155561_fix" /><check system="C-60943r1155560_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 logs out sessions that are idle for 10 minutes with the following command:
+
+$ systemd-analyze cat-config systemd/logind.conf | grep StopIdleSessionSec
+
+#StopIdleSessionSec=infinity
+StopIdleSessionSec=600
+
+If "StopIdleSessionSec" is not configured to "600" seconds, this is a finding.</check-content></check></Rule></Group><Group id="V-274876"><title>SRG-OS-000471-GPOS-00215</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-274876r1156668_rule" weight="10.0" severity="medium"><version>OL08-00-030645</version><title>OL 8  must audit any script or executable called by cron as root or by any privileged user.</title><description>&lt;VulnDiscussion&gt;Any script or executable called by cron as root or by any privileged user must be owned by that user and must have the permissions 755 or more restrictive and should have no extended rights that allow any nonprivileged user to modify the script or executable.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000172</ident><fixtext fixref="F-78882r1155546_fix">Configure OL 8 to audit the execution of any system call made by cron as root or as any privileged user.
 
 Add or update the following file system rules to "/etc/audit/rules.d/audit.rules":
-auditctl -w /etc/cron.d/ -p wa -k cronjobs
-auditctl -w /var/spool/cron/ -p wa -k cronjobs
+-w /etc/cron.d/ -p wa -k cronjobs
+-w /var/spool/cron/ -p wa -k cronjobs
 
 To load the rules to the kernel immediately, use the following command:
 
-$ sudo augenrules --load</fixtext><fix id="F-78882r1101882_fix" /><check system="C-78977r1101881_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify that OL 8 is configured to audit the execution of any system call made by cron as root or as any privileged user.
+$ sudo augenrules --load</fixtext><fix id="F-78882r1155546_fix" /><check system="C-78977r1155545_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 is configured to audit the execution of any system call made by cron as root or as any privileged user.
 
 $ sudo auditctl -l | grep /etc/cron.d
 -w /etc/cron.d -p wa -k cronjobs
@@ -7707,4 +7236,18 @@ $ sudo auditctl -l | grep /etc/cron.d
 $ sudo auditctl -l | grep /var/spool/cron
 -w /var/spool/cron -p wa -k cronjobs
 
-If either of these commands do not return the expected output, or the lines are commented out, this is a finding.</check-content></check></Rule></Group></Benchmark>
\ No newline at end of file
+If either of these commands do not return the expected output, or the lines are commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-279934"><title>SRG-OS-000163-GPOS-00072</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-279934r1156355_rule" weight="10.0" severity="medium"><version>OL08-00-020040</version><title>OL 8 must automatically exit interactive command shell user sessions after 10 minutes of inactivity.</title><description>&lt;VulnDiscussion&gt;Terminating an idle interactive command shell user session within a short time period reduces the window of opportunity for unauthorized personnel to take control of it when left unattended in a virtual terminal or physical console.
+
+Satisfies: SRG-OS-000163-GPOS-00072, SRG-OS-000029-GPOS-00010&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 8</dc:subject><dc:identifier>5416</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001133</ident><fixtext fixref="F-84399r1156354_fix">Configure OL 8 to exit interactive command shell user sessions after 10 minutes of inactivity.
+
+Add or edit the following line in "/etc/profile.d/tmout.sh":
+
+#!/bin/bash
+
+declare -xr TMOUT=600</fixtext><fix id="F-84399r1156354_fix" /><check system="C-84494r1156353_chk"><check-content-ref href="Oracle_Linux_8_STIG.xml" name="M" /><check-content>Verify OL 8 is configured to exit interactive command shell user sessions after 10 minutes of inactivity or less with the following command:
+
+$ sudo grep -i tmout /etc/profile /etc/profile.d/*.sh
+
+/etc/profile.d/tmout.sh:declare -xr TMOUT=600
+
+If "TMOUT" is not set to "600" or less in a script located in the "/etc/'profile.d/ directory, is missing or is commented out, this is a finding.</check-content></check></Rule></Group></Benchmark>
\ No newline at end of file
diff --git a/shared/references/disa-stig-ol8-v2r6-xccdf-scap.xml b/shared/references/disa-stig-ol8-v2r7-xccdf-scap.xml
similarity index 93%
rename from shared/references/disa-stig-ol8-v2r6-xccdf-scap.xml
rename to shared/references/disa-stig-ol8-v2r7-xccdf-scap.xml
index 580258380465..830a6defd592 100644
--- a/shared/references/disa-stig-ol8-v2r6-xccdf-scap.xml
+++ b/shared/references/disa-stig-ol8-v2r7-xccdf-scap.xml
@@ -1,36 +1,36 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<data-stream-collection xmlns="http://scap.nist.gov/schema/scap/source/1.2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" id="scap_mil.disa.stig_collection_U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark" schematron-version="1.3" xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2 http://scap.nist.gov/schema/xccdf/1.2/xccdf_1.2.xsd http://cpe.mitre.org/dictionary/2.0 http://scap.nist.gov/schema/cpe/2.3/cpe-dictionary_2.3.xsd http://cpe.mitre.org/language/2.0 https://csrc.nist.gov/schema/cpe/2.3/cpe-language_2.3.xsd http://oval.mitre.org/XMLSchema/oval-common-5 https://github.com/OVALProject/Language/tree/5.11.2/schemas/oval-common-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5 https://github.com/OVALProject/Language/tree/5.11.2/schemas/oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#independent https://github.com/OVALProject/Language/tree/5.11.2/schemas/independent-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#linux https://github.com/OVALProject/Language/tree/5.11.2/schemas/linux-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#unix https://github.com/OVALProject/Language/tree/5.11.2/schemas/unix-definitions-schema.xsd http://scap.nist.gov/schema/scap/source/1.2 http://scap.nist.gov/schema/scap/1.3/scap-source-data-stream_1.3.xsd">
-  <data-stream id="scap_mil.disa.stig_datastream_U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark" use-case="CONFIGURATION" scap-version="1.3" timestamp="2025-09-25T11:52:43.824-04:00">
+<data-stream-collection xmlns="http://scap.nist.gov/schema/scap/source/1.2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" id="scap_mil.disa.stig_collection_U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark" schematron-version="1.3" xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2 http://scap.nist.gov/schema/xccdf/1.2/xccdf_1.2.xsd http://cpe.mitre.org/dictionary/2.0 http://scap.nist.gov/schema/cpe/2.3/cpe-dictionary_2.3.xsd http://cpe.mitre.org/language/2.0 https://csrc.nist.gov/schema/cpe/2.3/cpe-language_2.3.xsd http://oval.mitre.org/XMLSchema/oval-common-5 https://github.com/OVALProject/Language/tree/5.11.2/schemas/oval-common-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5 https://github.com/OVALProject/Language/tree/5.11.2/schemas/oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#independent https://github.com/OVALProject/Language/tree/5.11.2/schemas/independent-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#linux https://github.com/OVALProject/Language/tree/5.11.2/schemas/linux-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#unix https://github.com/OVALProject/Language/tree/5.11.2/schemas/unix-definitions-schema.xsd http://scap.nist.gov/schema/scap/source/1.2 http://scap.nist.gov/schema/scap/1.3/scap-source-data-stream_1.3.xsd">
+  <data-stream id="scap_mil.disa.stig_datastream_U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark" use-case="CONFIGURATION" scap-version="1.3" timestamp="2026-01-05T14:25:18.561-05:00">
     <dictionaries>
-      <component-ref xmlns:xlink="http://www.w3.org/1999/xlink" id="scap_mil.disa.stig_cref_U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-cpe-dictionary.xml" xlink:href="#scap_mil.disa.stig_comp_U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-cpe-dictionary.xml">
+      <component-ref xmlns:xlink="http://www.w3.org/1999/xlink" id="scap_mil.disa.stig_cref_U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-cpe-dictionary.xml" xlink:href="#scap_mil.disa.stig_comp_U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-cpe-dictionary.xml">
         <catalog xmlns="urn:oasis:names:tc:entity:xmlns:xml:catalog">
-          <uri name="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" uri="#scap_mil.disa.stig_cref_U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" />
+          <uri name="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" uri="#scap_mil.disa.stig_cref_U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" />
         </catalog>
       </component-ref>
     </dictionaries>
     <checklists>
-      <component-ref xmlns:xlink="http://www.w3.org/1999/xlink" id="scap_mil.disa.stig_cref_U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-xccdf.xml" xlink:href="#scap_mil.disa.stig_comp_U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-xccdf.xml">
+      <component-ref xmlns:xlink="http://www.w3.org/1999/xlink" id="scap_mil.disa.stig_cref_U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-xccdf.xml" xlink:href="#scap_mil.disa.stig_comp_U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-xccdf.xml">
         <catalog xmlns="urn:oasis:names:tc:entity:xmlns:xml:catalog">
-          <uri name="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" uri="#scap_mil.disa.stig_cref_U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" />
+          <uri name="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" uri="#scap_mil.disa.stig_cref_U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" />
         </catalog>
       </component-ref>
     </checklists>
     <checks>
-      <component-ref xmlns:xlink="http://www.w3.org/1999/xlink" id="scap_mil.disa.stig_cref_U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" xlink:href="#scap_mil.disa.stig_comp_U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" />
-      <component-ref xmlns:xlink="http://www.w3.org/1999/xlink" id="scap_mil.disa.stig_cref_U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" xlink:href="#scap_mil.disa.stig_comp_U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" />
+      <component-ref xmlns:xlink="http://www.w3.org/1999/xlink" id="scap_mil.disa.stig_cref_U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" xlink:href="#scap_mil.disa.stig_comp_U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" />
+      <component-ref xmlns:xlink="http://www.w3.org/1999/xlink" id="scap_mil.disa.stig_cref_U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" xlink:href="#scap_mil.disa.stig_comp_U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" />
     </checks>
   </data-stream>
-  <component id="scap_mil.disa.stig_comp_U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-cpe-dictionary.xml" timestamp="2025-09-25T11:52:43.824-04:00">
+  <component id="scap_mil.disa.stig_comp_U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-cpe-dictionary.xml" timestamp="2026-01-05T14:25:18.561-05:00">
     <cpe-list xmlns="http://cpe.mitre.org/dictionary/2.0">
       <cpe-item name="cpe:/o:oracle:linux:8">
         <title xml:lang="en-us">Oracle Linux 8</title>
-        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-cpe-oval.xml">oval:mil.disa.stig.ol8os:def:1</check>
+        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-cpe-oval.xml">oval:mil.disa.stig.ol8os:def:1</check>
       </cpe-item>
     </cpe-list>
   </component>
-  <component id="scap_mil.disa.stig_comp_U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-xccdf.xml" timestamp="2025-09-25T11:52:43.843-04:00">
+  <component id="scap_mil.disa.stig_comp_U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-xccdf.xml" timestamp="2026-01-05T14:25:18.581-05:00">
     <xccdf:Benchmark xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" id="xccdf_mil.disa.stig_benchmark_Oracle_Linux_8_STIG" style="SCAP_1.3" xml:lang="en">
-      <xccdf:status date="2025-08-19">accepted</xccdf:status>
+      <xccdf:status date="2025-12-08">accepted</xccdf:status>
       <xccdf:title>Oracle Linux 8 STIG SCAP Benchmark</xccdf:title>
       <xccdf:description>This Security Technical Implementation Guide is published as a tool to improve the security of Department of Defense (DOD) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.</xccdf:description>
       <xccdf:notice id="terms-of-use" xml:lang="en" />
@@ -40,97 +40,109 @@
         <dc:publisher>DISA</dc:publisher>
         <dc:source>STIG.DOD.MIL</dc:source>
       </xccdf:reference>
-      <xccdf:plain-text id="release-info">Benchmark Date: 01 Oct 2025</xccdf:plain-text>
-      <xccdf:plain-text id="generator">3.5.1</xccdf:plain-text>
+      <xccdf:plain-text id="release-info">Benchmark Date: 05 Jan 2026</xccdf:plain-text>
+      <xccdf:plain-text id="generator">3.5.2</xccdf:plain-text>
       <xccdf:plain-text id="conventionsVersion">1.10.0</xccdf:plain-text>
       <cpe:platform-specification>
         <cpe:platform id="xccdf_mil.disa.stig_platform_Linux_Not_krb5wks_1-17">
           <cpe:title>Linux krb5 workstation 1.17 or higher is not installed</cpe:title>
           <cpe:logical-test operator="AND" negate="true">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100015" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100015" />
           </cpe:logical-test>
         </cpe:platform>
         <cpe:platform id="xccdf_mil.disa.stig_platform_OL_8-3_or_Lower">
           <cpe:title>Oracle Linux 8.3 or Lower</cpe:title>
           <cpe:logical-test operator="AND" negate="false">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100010" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100010" />
           </cpe:logical-test>
         </cpe:platform>
         <cpe:platform id="xccdf_mil.disa.stig_platform_Linux_Not_krb5svr_1-17">
           <cpe:title>Linux krb5 server 1.17 or higher is not installed</cpe:title>
           <cpe:logical-test operator="AND" negate="true">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100014" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100014" />
           </cpe:logical-test>
         </cpe:platform>
         <cpe:platform id="xccdf_mil.disa.stig_platform_OL_8-2_or_Higher">
           <cpe:title>Oracle Linux 8.2 or Higher</cpe:title>
           <cpe:logical-test operator="AND" negate="false">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100004" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100004" />
+          </cpe:logical-test>
+        </cpe:platform>
+        <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxNFSMounts">
+          <cpe:title>Linux with NFS mounts configured</cpe:title>
+          <cpe:logical-test operator="AND" negate="false">
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25785400" />
           </cpe:logical-test>
         </cpe:platform>
         <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxIPv6enabled">
           <cpe:title>Linux IPv6 Enabled</cpe:title>
           <cpe:logical-test operator="AND" negate="true">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100012" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100012" />
           </cpe:logical-test>
         </cpe:platform>
         <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxBIOS">
           <cpe:title>Linux BIOS Boot</cpe:title>
           <cpe:logical-test operator="AND" negate="false">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100007" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100007" />
           </cpe:logical-test>
         </cpe:platform>
         <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxGnome">
           <cpe:title>Gnome-shell Package</cpe:title>
           <cpe:logical-test operator="AND" negate="false">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100005" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100005" />
+          </cpe:logical-test>
+        </cpe:platform>
+        <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxNoNFSMounts">
+          <cpe:title>Linux with no NFS mounts configured</cpe:title>
+          <cpe:logical-test operator="AND" negate="true">
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25785400" />
           </cpe:logical-test>
         </cpe:platform>
         <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxUEFI">
           <cpe:title>Linux UEFI Boot</cpe:title>
           <cpe:logical-test operator="AND" negate="false">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100006" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100006" />
           </cpe:logical-test>
         </cpe:platform>
         <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxTFTP">
           <cpe:title>Linux with TFTP installed</cpe:title>
           <cpe:logical-test operator="AND" negate="false">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25795200" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25795200" />
           </cpe:logical-test>
         </cpe:platform>
         <cpe:platform id="xccdf_mil.disa.stig_platform_OL_8-1_or_Lower">
           <cpe:title>Oracle Linux 8.1 or Lower</cpe:title>
           <cpe:logical-test operator="AND" negate="false">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100003" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100003" />
           </cpe:logical-test>
         </cpe:platform>
         <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxUEFIBootPartitionNotVfat">
           <cpe:title>Linux UEFI system with boot partition file type other than VFAT</cpe:title>
           <cpe:logical-test operator="AND" negate="false">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100016" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100016" />
           </cpe:logical-test>
         </cpe:platform>
         <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxKernelDumps">
           <cpe:title>Kernel dumps are enabled</cpe:title>
           <cpe:logical-test operator="AND" negate="true">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:230311" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:230311" />
           </cpe:logical-test>
         </cpe:platform>
         <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxPostfix">
           <cpe:title>Linux with postfix installed</cpe:title>
           <cpe:logical-test operator="AND" negate="false">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25795100" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25795100" />
           </cpe:logical-test>
         </cpe:platform>
         <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxAutofs">
           <cpe:title>Linux with autofs installed</cpe:title>
           <cpe:logical-test operator="AND" negate="false">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25784900" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25784900" />
           </cpe:logical-test>
         </cpe:platform>
       </cpe:platform-specification>
       <xccdf:platform idref="cpe:/o:oracle:linux:8" />
-      <xccdf:version>002.006</xccdf:version>
+      <xccdf:version>002.007</xccdf:version>
       <xccdf:metadata>
         <dc:creator>DISA</dc:creator>
         <dc:publisher>DISA</dc:publisher>
@@ -269,7 +281,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248714" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248715" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248716" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-248717" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248718" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248719" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248722" selected="true" />
@@ -558,7 +569,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248714" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248715" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248716" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-248717" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248718" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248719" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248722" selected="true" />
@@ -847,7 +857,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248714" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248715" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248716" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-248717" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248718" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248719" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248722" selected="true" />
@@ -1136,7 +1145,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248714" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248715" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248716" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-248717" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248718" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248719" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248722" selected="true" />
@@ -1425,7 +1433,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248714" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248715" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248716" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-248717" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248718" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248719" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248722" selected="true" />
@@ -1714,7 +1721,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248714" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248715" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248716" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-248717" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248718" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248719" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248722" selected="true" />
@@ -2003,7 +2009,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248714" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248715" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248716" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-248717" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248718" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248719" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248722" selected="true" />
@@ -2292,7 +2297,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248714" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248715" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248716" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-248717" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248718" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248719" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248722" selected="true" />
@@ -2581,7 +2585,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248714" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248715" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248716" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-248717" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248718" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248719" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-248722" selected="true" />
@@ -2759,20 +2762,21 @@
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248738r958434_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248830r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248865r958528_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248594r958928_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248904r1069143_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248831r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248533r1015028_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248579r1117267_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248718r991589_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248717r991589_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248884r1156637_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248625r1156665_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248732r958434_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248790r958412_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248724r958424_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248791r958412_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248725r958424_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248580r1156623_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248530r958406_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248726r1038966_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248578r1156621_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248764r958442_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248694r1015054_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248829r991589_rule" selected="false" />
@@ -2804,10 +2808,12 @@
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248807r991557_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248781r958412_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248710r958828_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248836r958498_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248876r1156628_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248882r1156634_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248609r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248691r1015051_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248607r991589_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248888r1156641_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248520r1015025_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248719r991590_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248608r991589_rule" selected="false" />
@@ -2816,8 +2822,12 @@
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248655r958388_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248605r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248656r958388_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248891r1156648_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248606r991589_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248632r1156671_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248541r1137691_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248657r958388_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248631r1156685_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248818r1106143_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248600r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-252663r991589_rule" selected="false" />
@@ -2826,46 +2836,44 @@
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248602r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248740r1015064_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248779r958412_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248891r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248895r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248773r958412_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248806r958444_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248684r958402_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248580r1117267_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248771r958412_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248595r958936_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248682r958402_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248652r958388_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248728r1038966_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248689r1015049_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248893r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248660r958388_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248555r958566_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248722r958730_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248706r958566_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248877r1156629_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248813r991589_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248888r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248899r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248832r958478_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248880r1156632_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248834r958478_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248630r1156670_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248825r958478_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248768r958412_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248619r1156678_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248747r958412_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248688r1015048_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248630r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248666r958398_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248858r958804_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248534r1015029_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248570r1101862_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248664r958388_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248854r958804_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248577r958702_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248662r958388_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248856r958804_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248617r991589_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248889r1156644_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248557r958566_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248615r991589_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248619r991589_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248594r1156624_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248701r958422_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248559r958566_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-252659r991589_rule" selected="false" />
@@ -2873,11 +2881,10 @@
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248638r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-252657r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248611r991589_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248632r991589_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248542r1117265_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248634r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248687r1015047_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248843r991569_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248875r1156627_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248754r958412_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248756r958412_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248872r991589_rule" selected="false" />
@@ -2886,11 +2893,9 @@
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248581r1101870_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248697r1038967_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248758r958412_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248876r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248569r991560_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248849r958804_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248759r958412_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248875r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248567r991560_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248848r958804_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248527r958390_rule" selected="false" />
@@ -2902,9 +2907,10 @@
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248906r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248844r958804_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248552r986329_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248836r1156663_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248905r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248845r958804_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248871r991589_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248879r1156631_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248850r958804_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248851r958804_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248853r958804_rule" selected="false" />
@@ -2915,19 +2921,12 @@
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248901r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248852r958804_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248900r991589_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248878r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248613r1015039_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248877r991589_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248879r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248746r1015070_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248881r991589_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248883r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-252653r991560_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248884r991589_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248880r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248762r958412_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248885r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248571r1101865_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248618r1156675_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-252651r991560_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-252652r991560_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248761r958412_rule" selected="false" />
@@ -2935,24 +2934,25 @@
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248866r958908_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248867r958908_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248696r1038967_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248886r991589_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248890r1156646_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248722r1156669_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248760r958412_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248887r1156640_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248585r1050789_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248705r958566_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248882r991589_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248893r1156652_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248648r991589_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248626r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248742r1015066_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248541r1117265_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248625r991589_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248629r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248547r971535_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248553r986330_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257259r1156674_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248690r1015050_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248881r1156633_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248679r1015046_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248709r1015063_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248883r1156636_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248892r1156650_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248543r971535_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248624r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248645r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248535r1044786_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248563r991593_rule" selected="false" />
@@ -2960,9 +2960,8 @@
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248544r971535_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248546r971535_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248545r971535_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248892r991589_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248890r991589_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248894r991589_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248629r1156626_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248579r1156622_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248772r958412_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-252656r1050789_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248584r991589_rule" selected="false" />
@@ -2975,17 +2974,19 @@
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248817r1069157_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248653r958388_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248743r1015067_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248633r1156672_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248556r958566_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248661r958388_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248565r991554_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248707r958566_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248554r958566_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248871r1156667_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248860r958804_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248889r991589_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248887r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248898r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248812r991589_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248894r1156654_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248833r958478_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248624r1156664_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248767r958412_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248824r958478_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248572r1101868_rule" selected="false" />
@@ -2993,15 +2994,17 @@
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248769r958412_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248748r958412_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248673r991589_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248578r958702_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248859r958804_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248744r1015068_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248857r958804_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248800r958412_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248577r1156620_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248885r1156638_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248626r1156666_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248855r958804_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248663r958388_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248878r1156630_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248802r958412_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248618r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248639r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248745r1015069_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248558r958566_rule" selected="false" />
@@ -3010,11 +3013,10 @@
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-252658r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248616r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248815r958754_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257259r970703_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248731r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248610r991589_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248631r991589_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248633r991589_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248542r1137691_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248886r1156639_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248612r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-248693r1015053_rule" selected="false" />
       </xccdf:Profile>
@@ -3070,7 +3072,7 @@ Install the audit service (if the audit service is not already installed) with t
 $ sudo yum install audit</xccdf:fixtext>
           <xccdf:fix id="F-51907r779122_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248519" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248519" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3127,19 +3129,25 @@ $ sudo systemctl enable auditd.service
 $ sudo systemctl start auditd.service</xccdf:fixtext>
           <xccdf:fix id="F-51908r779125_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248520" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248520" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248521">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248521r991589_rule" severity="high" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248521r1156679_rule" severity="high" weight="10.0">
           <xccdf:version>OL08-00-010000</xccdf:version>
           <xccdf:title>OL 8 must be a vendor-supported release.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Configuring the operating system to implement organization-wide security implementation guides and security checklists verifies compliance with federal standards and establishes a common security baseline across the DoD that reflects the most restrictive security posture consistent with operational requirements. 
+          <xccdf:description>&lt;VulnDiscussion&gt;Configuring the operating system to implement organization-wide security implementation guides and security checklists verifies compliance with federal standards and establishes a common security baseline across the DOD that reflects the most restrictive security posture consistent with operational requirements. 
  
-Configuration settings are the set of parameters that can be changed in hardware, software, or firmware components of the system that affect the security posture and/or functionality of the system. Security-related parameters are parameters impacting the security state of the system, including the parameters required to satisfy other security control requirements. Security-related parameters include, for example, registry settings; account, file, and directory permission settings; and settings for functions, ports, protocols, services, and remote connections.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+Configuration settings are the set of parameters that can be changed in hardware, software, or firmware components of the system that affect the security posture and/or functionality of the system. Security-related parameters are parameters impacting the security state of the system, including the parameters required to satisfy other security control requirements. Security-related parameters include, for example, registry settings; account, file, and directory permission settings; and settings for functions, ports, protocols, services, and remote connections.
+
+End Of Life dates for Oracle Linux 8 releases are as follows:
+Current end of Premier Support for Oracle Linux 8 is July 2029.
+Current end of Extended Support for Oracle Linux 8 is July 2032. 
+
+Each minor version reaches end of life when the new version is released.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
           <xccdf:reference>
             <dc:title>DPMS Target Oracle Linux 8</dc:title>
             <dc:publisher>DISA</dc:publisher>
@@ -3151,7 +3159,7 @@ Configuration settings are the set of parameters that can be changed in hardware
           <xccdf:fixtext fixref="F-51909r779128_fix">Upgrade to a supported version of the operating system.</xccdf:fixtext>
           <xccdf:fix id="F-51909r779128_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248521" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248521" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3192,7 +3200,7 @@ Enable FIPS mode after installation (not strict FIPS-compliant) with the followi
 Reboot the system for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-51912r928550_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248524" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248524" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3240,7 +3248,7 @@ Run the following command to update the database:
 $ sudo dconf update</xccdf:fixtext>
           <xccdf:fix id="F-51915r779146_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248527" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248527" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3276,7 +3284,7 @@ The "rsyslog" service must be restarted for the changes to take effect. To resta
 $ sudo systemctl restart rsyslog.service</xccdf:fixtext>
           <xccdf:fix id="F-51918r779155_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248530" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248530" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3307,7 +3315,7 @@ Edit/modify the following line in the "/etc/login.defs" file and set "[ENCRYPT_M
 ENCRYPT_METHOD SHA512</xccdf:fixtext>
           <xccdf:fix id="F-51921r986325_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248533" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248533" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3332,7 +3340,7 @@ Passwords need to be protected at all times, and encryption is the standard meth
           <xccdf:fixtext fixref="F-51922r779167_fix">Lock all interactive user accounts not using SHA-512 hashing until the passwords can be regenerated with SHA-512.</xccdf:fixtext>
           <xccdf:fix id="F-51922r779167_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248534" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248534" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3361,14 +3369,14 @@ Edit/modify the following line in the "/etc/login.defs" file and set "SHA_CRYPT_
 SHA_CRYPT_MIN_ROUNDS 100000</xccdf:fixtext>
           <xccdf:fix id="F-51923r1044785_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248535" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248535" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248537">
         <xccdf:title>SRG-OS-000080-GPOS-00048</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248537r1117265_rule" severity="high" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248537r1137691_rule" severity="high" weight="10.0">
           <xccdf:version>OL08-00-010140</xccdf:version>
           <xccdf:title>OL 8 operating systems booted with United Extensible Firmware Interface (UEFI) must require authentication upon booting into single-user mode and maintenance.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;If the system does not require valid authentication before it boots into single-user or maintenance mode, anyone who invokes single-user or maintenance mode is granted privileged access to all files on the system. GRUB 2 is the default boot loader for OL 8 and is designed to require a password to boot into single-user mode or modify the boot menu.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
@@ -3390,14 +3398,14 @@ Enter password:
 Confirm password:</xccdf:fixtext>
           <xccdf:fix id="F-51925r779176_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248537" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248537" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248540">
         <xccdf:title>SRG-OS-000080-GPOS-00048</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248540r1117265_rule" severity="high" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248540r1137691_rule" severity="high" weight="10.0">
           <xccdf:version>OL08-00-010150</xccdf:version>
           <xccdf:title>OL 8 operating systems booted with a BIOS must require authentication upon booting into single-user and maintenance modes.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;If the system does not require valid authentication before it boots into single-user or maintenance mode, anyone who invokes single-user or maintenance mode is granted privileged access to all files on the system. GRUB 2 is the default boot loader for OL 8 and is designed to require a password to boot into single-user mode or modify the boot menu.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
@@ -3419,14 +3427,14 @@ Enter password:
 Confirm password:</xccdf:fixtext>
           <xccdf:fix id="F-51928r779185_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248540" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248540" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248541">
         <xccdf:title>SRG-OS-000080-GPOS-00048</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248541r1117265_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248541r1137691_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-010151</xccdf:version>
           <xccdf:title>OL 8 operating systems must require authentication upon booting into rescue mode.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;If the system does not require valid root authentication before it boots into emergency or rescue mode, anyone who invokes emergency or rescue mode is granted privileged access to all files on the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
@@ -3443,14 +3451,14 @@ Confirm password:</xccdf:fixtext>
 ExecStart=-/usr/lib/systemd/systemd-sulogin-shell rescue</xccdf:fixtext>
           <xccdf:fix id="F-51929r779188_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248541" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248541" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248542">
         <xccdf:title>SRG-OS-000080-GPOS-00048</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248542r1117265_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248542r1137691_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-010152</xccdf:version>
           <xccdf:title>OL 8 operating systems must require authentication upon booting into emergency mode.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;If the system does not require valid root authentication before it boots into emergency or rescue mode, anyone who invokes emergency or rescue mode is granted privileged access to all files on the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
@@ -3467,7 +3475,7 @@ ExecStart=-/usr/lib/systemd/systemd-sulogin-shell rescue</xccdf:fixtext>
 ExecStart=-/usr/lib/systemd/systemd-sulogin-shell emergency</xccdf:fixtext>
           <xccdf:fix id="F-51930r779191_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248542" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248542" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3497,7 +3505,7 @@ Edit/modify the following line in the "/etc/pam.d/system-auth" file to include t
 password sufficient pam_unix.so sha512</xccdf:fixtext>
           <xccdf:fix id="F-51931r818607_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248543" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248543" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3527,7 +3535,7 @@ Edit/modify the following line in the "/etc/pam.d/password-auth" file to include
 password sufficient pam_unix.so sha512</xccdf:fixtext>
           <xccdf:fix id="F-51932r818610_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248544" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248544" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3559,7 +3567,7 @@ FIPS 140-2 is the current standard for validating that mechanisms used to access
 Remove any files with the .keytab extension from the operating system.</xccdf:fixtext>
           <xccdf:fix id="F-51933r779200_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248545" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248545" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3590,7 +3598,7 @@ FIPS 140-2 is the current standard for validating that mechanisms used to access
 $ sudo yum remove krb5-workstation</xccdf:fixtext>
           <xccdf:fix id="F-51934r779203_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248546" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248546" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3621,7 +3629,7 @@ FIPS 140-2 is the current standard for validating that mechanisms used to access
 $ sudo yum remove krb5-server</xccdf:fixtext>
           <xccdf:fix id="F-51935r779206_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248547" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248547" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3653,7 +3661,7 @@ SELINUX=enforcing
 A reboot is required for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-51936r779209_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248548" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248548" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3677,7 +3685,7 @@ A reboot is required for the changes to take effect.</xccdf:fixtext>
 $ sudo yum install policycoreutils</xccdf:fixtext>
           <xccdf:fix id="F-51937r779212_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248549" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248549" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3716,7 +3724,7 @@ For the changes to take effect, the SSH daemon must be restarted.
      $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-51940r917895_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248552" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248552" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3755,7 +3763,7 @@ The SSH daemon must be restarted for changes to take effect.
      $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-51941r917898_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248553" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248553" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3781,7 +3789,7 @@ The structure and content of error messages must be carefully considered by the
 $ sudo chmod 0640 /var/log/messages</xccdf:fixtext>
           <xccdf:fix id="F-51942r779227_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248554" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248554" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3807,7 +3815,7 @@ The structure and content of error messages must be carefully considered by the
 $ sudo chown root /var/log/messages</xccdf:fixtext>
           <xccdf:fix id="F-51943r779230_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248555" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248555" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3833,7 +3841,7 @@ The structure and content of error messages must be carefully considered by the
 $ sudo chgrp root /var/log/messages</xccdf:fixtext>
           <xccdf:fix id="F-51944r779233_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248556" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248556" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3859,7 +3867,7 @@ The structure and content of error messages must be carefully considered by the
 $ sudo chmod 0755 /var/log</xccdf:fixtext>
           <xccdf:fix id="F-51945r779236_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248557" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248557" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3885,7 +3893,7 @@ The structure and content of error messages must be carefully considered by the
 $ sudo chown root /var/log</xccdf:fixtext>
           <xccdf:fix id="F-51946r779239_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248558" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248558" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3911,7 +3919,7 @@ The structure and content of error messages must be carefully considered by the
 $ sudo chgrp root /var/log</xccdf:fixtext>
           <xccdf:fix id="F-51947r779242_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248559" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248559" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3941,7 +3949,7 @@ SSH_USE_STRONG_RNG=32
 The SSH service must be restarted for changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-51951r779254_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248563" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248563" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3981,7 +3989,7 @@ DTLS.MinProtocol = DTLSv1.2
 A reboot is required for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-51953r818616_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248565" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248565" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4009,7 +4017,7 @@ Run the following command, replacing "[FILE]" with any system command with a mod
 $ sudo chmod 755 [FILE]</xccdf:fixtext>
           <xccdf:fix id="F-51955r818621_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248567" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248567" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4037,7 +4045,7 @@ Run the following command, replacing "[FILE]" with any system command file not o
 $ sudo chown root [FILE]</xccdf:fixtext>
           <xccdf:fix id="F-51956r779269_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248568" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248568" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4065,7 +4073,7 @@ Run the following command, replacing "[FILE]" with any system command file not g
 $ sudo chgrp root [FILE]</xccdf:fixtext>
           <xccdf:fix id="F-51957r818624_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248569" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248569" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4091,7 +4099,7 @@ This requirement applies to OL 8 with software libraries that are accessible and
 $ sudo find /lib /lib64 /usr/lib /usr/lib64 -type f -name '*.so*' -perm /022 -exec chmod go-w {} +</xccdf:fixtext>
           <xccdf:fix id="F-51958r1101861_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248570" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248570" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4117,7 +4125,7 @@ This requirement applies to OL 8 with software libraries that are accessible and
 $ sudo find /lib /lib64 /usr/lib /usr/lib64 -type f -name '*.so*' ! -user root -exec chown root {} +</xccdf:fixtext>
           <xccdf:fix id="F-51959r1101864_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248571" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248571" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4143,7 +4151,7 @@ This requirement applies to OL 8 with software libraries that are accessible and
 $ sudo find /lib /lib64 /usr/lib /usr/lib64 -type f -name '*.so*' ! -group root -exec chown :root {} +</xccdf:fixtext>
           <xccdf:fix id="F-51960r1101867_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248572" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248572" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4172,7 +4180,7 @@ Verifying the authenticity of the software prior to installation validates the i
 gpgcheck=1</xccdf:fixtext>
           <xccdf:fix id="F-51962r779287_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248574" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248574" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4203,14 +4211,14 @@ Set the "localpkg_gpgcheck" option to "True" in the "/etc/dnf/dnf.conf" file:
 localpkg_gpgcheck=True</xccdf:fixtext>
           <xccdf:fix id="F-51963r779290_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248575" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248575" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248577">
         <xccdf:title>SRG-OS-000312-GPOS-00122</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248577r958702_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248577r1156620_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-010373</xccdf:version>
           <xccdf:title>OL 8 must enable kernel parameters to enforce Discretionary Access Control (DAC) on symlinks.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;DAC is based on the notion that individual users are "owners" of objects and therefore have discretion over who should be authorized to access the object and in which mode (e.g., read or write). Ownership is usually acquired as a consequence of creating the object or via specified ownership assignment. DAC allows the owner to determine who will have access to objects they control. An example of DAC includes user-controlled file permissions.
@@ -4219,7 +4227,7 @@ When DAC policies are implemented, subjects are not constrained as to what actio
 
 By enabling the "fs.protected_symlinks" kernel parameter, symbolic links are permitted to be followed only when outside a sticky world-writable directory, or when the UID of the link and follower match, or when the directory owner matches the symlink's owner. Disallowing such symlinks helps mitigate vulnerabilities based on insecure file system accessed by privileged programs, avoiding an exploitation vector exploiting unsafe use of open() or creat().
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
@@ -4234,33 +4242,25 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>5416</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-002165</xccdf:ident>
-          <xccdf:fixtext fixref="F-51965r858611_fix">Configure OL 8 to enable DAC on symlinks.
+          <xccdf:fixtext fixref="F-51965r1155440_fix">Configure OL 8 to enable DAC on symlinks with the following:
 
 Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
 
 fs.protected_symlinks = 1
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
-
 Load settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-51965r858611_fix" />
+          <xccdf:fix id="F-51965r1155440_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248577" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248577" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248578">
         <xccdf:title>SRG-OS-000312-GPOS-00122</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248578r958702_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248578r1156621_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-010374</xccdf:version>
           <xccdf:title>OL 8 must enable kernel parameters to enforce Discretionary Access Control (DAC) on hardlinks.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;DAC is based on the notion that individual users are "owners" of objects and therefore have discretion over who should be authorized to access the object and in which mode (e.g., read or write). Ownership is usually acquired as a consequence of creating the object or via specified ownership assignment. DAC allows the owner to determine who will have access to objects they control. An example of DAC includes user-controlled file permissions.
@@ -4269,7 +4269,7 @@ When DAC policies are implemented, subjects are not constrained as to what actio
 
 By enabling the "fs.protected_hardlinks" kernel parameter, users can no longer create soft or hard links to files they do not own. Disallowing such hardlinks mitigate vulnerabilities based on insecure file system accessed by privileged programs, avoiding an exploitation vector exploiting unsafe use of open() or creat().
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
@@ -4284,44 +4284,36 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>5416</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-002165</xccdf:ident>
-          <xccdf:fixtext fixref="F-51966r858614_fix">Configure OL 8 to enable DAC on hardlinks.
+          <xccdf:fixtext fixref="F-51966r1155443_fix">Configure OL 8 to enable DAC on hardlinks with the following:
 
 Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
 
 fs.protected_hardlinks = 1
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
-
 Load settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-51966r858614_fix" />
+          <xccdf:fix id="F-51966r1155443_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248578" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248578" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248579">
         <xccdf:title>SRG-OS-000138-GPOS-00069</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248579r1117267_rule" severity="low" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248579r1156622_rule" severity="low" weight="10.0">
           <xccdf:version>OL08-00-010375</xccdf:version>
           <xccdf:title>OL 8 must restrict access to the kernel message buffer.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
 
-This requirement generally applies to the design of an information technology product, but it can also apply to the configuration of particular information system components that are, or use, such products. This can be verified by acceptance/validation processes in DoD or other government agencies.
+This requirement generally applies to the design of an information technology product, but it can also apply to the configuration of particular information system components that are, or use, such products. This can be verified by acceptance/validation processes in DOD or other government agencies.
 
 There may be shared resources with configurable protections (e.g., files in storage) that may be assessed on specific information system components.
 
-Restricting access to the kernel message buffer limits access to only root. This prevents attackers from gaining additional system information as a non-privileged user.
+Restricting access to the kernel message buffer limits access to only root. This prevents attackers from gaining additional system information as a nonprivileged user.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
@@ -4336,44 +4328,36 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>5416</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-001090</xccdf:ident>
-          <xccdf:fixtext fixref="F-51967r858616_fix">Configure OL 8 to restrict access to the kernel message buffer.
+          <xccdf:fixtext fixref="F-51967r1155446_fix">Configure OL 8 to restrict access to the kernel message buffer.
 
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+Add or edit the following line in /etc/sysctl.d/99-sysctl.conf system configuration file:
 
 kernel.dmesg_restrict = 1
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
-
 Load settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-51967r858616_fix" />
+          <xccdf:fix id="F-51967r1155446_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248579" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248579" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248580">
         <xccdf:title>SRG-OS-000138-GPOS-00069</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248580r1117267_rule" severity="low" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248580r1156623_rule" severity="low" weight="10.0">
           <xccdf:version>OL08-00-010376</xccdf:version>
-          <xccdf:title>OL 8 must prevent kernel profiling by unprivileged users.</xccdf:title>
+          <xccdf:title>OL 8 must prevent kernel profiling by nonprivileged users.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection. 
  
-This requirement generally applies to the design of an information technology product, but it can also apply to the configuration of particular information system components that are, or use, such products. This can be verified by acceptance/validation processes in DoD or other government agencies. 
+This requirement generally applies to the design of an information technology product, but it can also apply to the configuration of particular information system components that are, or use, such products. This can be verified by acceptance/validation processes in DOD or other government agencies. 
  
 There may be shared resources with configurable protections (e.g., files in storage) that may be assessed on specific information system components.
  
-Setting the "kernel.perf_event_paranoid" kernel parameter to "2" prevents attackers from gaining additional system information as a non-privileged user.
+Setting the "kernel.perf_event_paranoid" kernel parameter to "2" prevents attackers from gaining additional system information as a nonprivileged user.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
@@ -4388,26 +4372,18 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>5416</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-001090</xccdf:ident>
-          <xccdf:fixtext fixref="F-51968r858618_fix">Configure OL 8 to prevent kernel profiling by unprivileged users.
+          <xccdf:fixtext fixref="F-51968r1155449_fix">Configure OL 8 to prevent kernel profiling by nonprivileged users.
 
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+Add or edit the following line in /etc/sysctl.d/99-sysctl.conf system configuration file:
 
 kernel.perf_event_paranoid = 2
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
-
 Load settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-51968r858618_fix" />
+          <xccdf:fix id="F-51968r1155449_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248580" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248580" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4444,7 +4420,7 @@ $ sudo grep -ir nopasswd /etc/sudoers.d
 Remove any occurrences of "NOPASSWD" tags in the file.</xccdf:fixtext>
           <xccdf:fix id="F-51969r860914_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248581" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248581" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4471,7 +4447,7 @@ Satisfies: SRG-OS-000373-GPOS-00156, SRG-OS-000373-GPOS-00157, SRG-OS-000373-GPO
           <xccdf:fixtext fixref="F-51970r779311_fix">Remove any occurrence of "!authenticate" found in the "/etc/sudoers" file or files in the "/etc/sudoers.d" directory.</xccdf:fixtext>
           <xccdf:fix id="F-51970r779311_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248582" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248582" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4495,7 +4471,7 @@ ALL     ALL=(ALL) ALL
 ALL     ALL=(ALL:ALL) ALL</xccdf:fixtext>
           <xccdf:fix id="F-51971r779314_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248583" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248583" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4525,7 +4501,7 @@ Remove any configurations that conflict with the above from the following locati
      /etc/sudoers.d/</xccdf:fixtext>
           <xccdf:fix id="F-51972r880553_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248584" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248584" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4564,7 +4540,7 @@ Note: The "[value]" must be a number that is greater than or equal to "0".
 Remove any duplicate or conflicting lines from /etc/sudoers and /etc/sudoers.d/ files.</xccdf:fixtext>
           <xccdf:fix id="F-51973r880556_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248585" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248585" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4598,21 +4574,21 @@ This requirement only applies to components where this is specific to the functi
 $ sudo yum install  openssl-pkcs11</xccdf:fixtext>
           <xccdf:fix id="F-51974r779323_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248586" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248586" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248594">
         <xccdf:title>SRG-OS-000433-GPOS-00193</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248594r958928_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248594r1156624_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-010430</xccdf:version>
           <xccdf:title>OL 8 must implement address space layout randomization (ASLR) to protect its memory from unauthorized code execution.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Some adversaries launch attacks with the intent of executing code in non-executable regions of memory or in memory locations that are prohibited. Security safeguards employed to protect memory include, for example, data execution prevention and address space layout randomization. Data execution prevention safeguards can be either hardware-enforced or software-enforced, with hardware providing the greater strength of mechanism. 
+          <xccdf:description>&lt;VulnDiscussion&gt;Some adversaries launch attacks with the intent of executing code in nonexecutable regions of memory or in memory locations that are prohibited. Security safeguards employed to protect memory include, for example, data execution prevention and address space layout randomization. Data execution prevention safeguards can be either hardware-enforced or software-enforced, with hardware providing the greater strength of mechanism. 
  
 Examples of attacks are buffer overflow attacks.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
@@ -4627,26 +4603,18 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>5416</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-002824</xccdf:ident>
-          <xccdf:fixtext fixref="F-51982r858626_fix">Configure OL 8 to implement virtual address space randomization. 
- 
-Set the system to the required kernel parameter by adding the following line to "/etc/sysctl.d/*.conf" (or modify the line to have the required value): 
- 
-kernel.randomize_va_space=2 
- 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+          <xccdf:fixtext fixref="F-51982r1155452_fix">Configure OL 8 to implement ASLR to protect its memory from unauthorized code execution.
+
+Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+
+kernel.randomize_va_space = 2
+
+Reload settings from all system configuration files with the following command:
 
-Issue the following command to make the changes take effect: 
- 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-51982r858626_fix" />
+          <xccdf:fix id="F-51982r1155452_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248594" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248594" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4672,7 +4640,7 @@ Set the "clean_requirements_on_remove" option to "True" in the "/etc/yum.conf" f
 clean_requirements_on_remove=True</xccdf:fixtext>
           <xccdf:fix id="F-51983r779350_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248595" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248595" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4702,7 +4670,7 @@ SELINUXTYPE=targeted
 A reboot is required for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-51984r779353_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248596" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248596" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4726,7 +4694,7 @@ A reboot is required for the changes to take effect.</xccdf:fixtext>
 $ sudo rm /etc/ssh/shosts.equiv</xccdf:fixtext>
           <xccdf:fix id="F-51985r779356_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248597" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248597" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4750,7 +4718,7 @@ $ sudo rm /etc/ssh/shosts.equiv</xccdf:fixtext>
 $ sudo rm /[path]/[to]/[file]/.shosts</xccdf:fixtext>
           <xccdf:fix id="F-51986r779359_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248598" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248598" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4776,7 +4744,7 @@ The rngd service feeds random data from hardware device to kernel random device.
 $ sudo yum install rng-tools</xccdf:fixtext>
           <xccdf:fix id="F-51988r779365_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248600" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248600" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4804,7 +4772,7 @@ The SSH daemon must be restarted for the changes to take effect. To restart the
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-51989r779368_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248601" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248601" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4832,7 +4800,7 @@ The SSH daemon must be restarted for the changes to take effect. To restart the
      $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-51990r880540_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248602" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248602" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4862,7 +4830,7 @@ The SSH daemon must be restarted for the changes to take effect. To restart the
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-51991r779374_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248603" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248603" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4881,7 +4849,7 @@ $ sudo systemctl restart sshd.service</xccdf:fixtext>
             <dc:identifier>5416</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-51993r779380_fix">Configure the SSH daemon to not allow authentication using known host’s authentication. 
+          <xccdf:fixtext fixref="F-51993r779380_fix">Configure the SSH daemon to not allow authentication using known host's authentication. 
  
 Add the following line in "/etc/ssh/sshd_config", or uncomment the line and set the value to "yes": 
  
@@ -4892,7 +4860,7 @@ The SSH daemon must be restarted for the changes to take effect. To restart the
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-51993r779380_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248605" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248605" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4922,7 +4890,7 @@ The SSH daemon must be restarted for the changes to take effect. To restart the
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-51994r779383_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248606" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248606" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4952,7 +4920,7 @@ The SSH daemon must be restarted for the changes to take effect. To restart the
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-51995r779386_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248607" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248607" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4974,7 +4942,7 @@ $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fixtext fixref="F-51996r779389_fix">Migrate the "/var" path onto a separate file system.</xccdf:fixtext>
           <xccdf:fix id="F-51996r779389_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248608" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248608" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4996,7 +4964,7 @@ $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fixtext fixref="F-51997r779392_fix">Migrate the "/var/log" path onto a separate file system.</xccdf:fixtext>
           <xccdf:fix id="F-51997r779392_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248609" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248609" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5018,7 +4986,7 @@ $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fixtext fixref="F-51998r779395_fix">Migrate the system audit data path onto a separate file system.</xccdf:fixtext>
           <xccdf:fix id="F-51998r779395_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248610" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248610" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5040,7 +5008,7 @@ $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fixtext fixref="F-51999r779398_fix">Migrate the "/tmp" directory onto a separate file system/partition.</xccdf:fixtext>
           <xccdf:fix id="F-51999r779398_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248611" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248611" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5062,7 +5030,7 @@ $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fixtext fixref="F-52000r779401_fix">Migrate the "/var/tmp" path onto a separate file system.</xccdf:fixtext>
           <xccdf:fix id="F-52000r779401_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248612" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248612" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5093,7 +5061,7 @@ The SSH daemon must be restarted for the changes to take effect. To restart the
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-52001r779404_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248613" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248613" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5121,7 +5089,7 @@ $ sudo systemctl start rsyslog.service
 $ sudo systemctl enable rsyslog.service</xccdf:fixtext>
           <xccdf:fix id="F-52003r779410_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248615" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248615" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5143,7 +5111,7 @@ $ sudo systemctl enable rsyslog.service</xccdf:fixtext>
           <xccdf:fixtext fixref="F-52004r779413_fix">Configure "/etc/fstab" to use the "nosuid" option on file systems that contain user home directories for interactive users.</xccdf:fixtext>
           <xccdf:fix id="F-52004r779413_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248616" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248616" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5166,17 +5134,17 @@ $ sudo systemctl enable rsyslog.service</xccdf:fixtext>
           <xccdf:fixtext fixref="F-52005r779416_fix">Configure the "/etc/fstab" to use the "nosuid" option on the /boot directory.</xccdf:fixtext>
           <xccdf:fix id="F-52005r779416_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248617" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248617" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248618">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248618r991589_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248618r1156675_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-010572</xccdf:version>
           <xccdf:title>OL 8 must prevent files with the setuid and setgid bit set from being executed on the /boot/efi directory.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system not to execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for unprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system not to execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
           <xccdf:reference>
             <dc:title>DPMS Target Oracle Linux 8</dc:title>
             <dc:publisher>DISA</dc:publisher>
@@ -5189,17 +5157,17 @@ $ sudo systemctl enable rsyslog.service</xccdf:fixtext>
           <xccdf:fixtext fixref="F-52006r779419_fix">Configure the "/etc/fstab" to use the "nosuid" option on the /boot/efi directory.</xccdf:fixtext>
           <xccdf:fix id="F-52006r779419_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248618" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248618" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248619">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248619r991589_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248619r1156678_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-010580</xccdf:version>
-          <xccdf:title>OL 8 must prevent special devices on non-root local partitions.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for unprivileged users to attain unauthorized administrative access. The only legitimate location for device files is the /dev directory located on the root partition.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:title>OL 8 must prevent special devices on nonroot local partitions.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access. The only legitimate location for device files is the /dev directory located on the root partition.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
           <xccdf:reference>
             <dc:title>DPMS Target Oracle Linux 8</dc:title>
             <dc:publisher>DISA</dc:publisher>
@@ -5208,20 +5176,20 @@ $ sudo systemctl enable rsyslog.service</xccdf:fixtext>
             <dc:identifier>5416</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-52007r779422_fix">Configure the "/etc/fstab" to use the "nodev" option on all non-root local partitions.</xccdf:fixtext>
-          <xccdf:fix id="F-52007r779422_fix" />
+          <xccdf:fixtext fixref="F-52007r1156677_fix">Configure the "/etc/fstab" to use the "nodev" option on all nonroot local partitions.</xccdf:fixtext>
+          <xccdf:fix id="F-52007r1156677_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248619" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248619" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248624">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248624r991589_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248624r1156664_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-010630</xccdf:version>
           <xccdf:title>OL 8 file systems must not execute binary files that are imported via Network File System (NFS).</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "noexec" mount option causes the system not to execute binary files. This option must be used for mounting any file system not containing approved binary as they may be incompatible. Executing files from untrusted file systems increases the opportunity for unprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "noexec" mount option causes the system not to execute binary files. This option must be used for mounting any file system not containing approved binary as they may be incompatible. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
           <xccdf:reference>
             <dc:title>DPMS Target Oracle Linux 8</dc:title>
             <dc:publisher>DISA</dc:publisher>
@@ -5229,21 +5197,22 @@ $ sudo systemctl enable rsyslog.service</xccdf:fixtext>
             <dc:subject>Oracle Linux 8</dc:subject>
             <dc:identifier>5416</dc:identifier>
           </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxNFSMounts" />
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
           <xccdf:fixtext fixref="F-52012r779437_fix">Configure the "/etc/fstab" to use the "noexec" option on file systems that are being imported via NFS.</xccdf:fixtext>
           <xccdf:fix id="F-52012r779437_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248624" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248624" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248625">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248625r991589_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248625r1156665_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-010640</xccdf:version>
-          <xccdf:title>OL 8 file systems must not interpret character or block special devices that are imported via NFS.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for unprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:title>OL 8 file systems must not interpret character or block special devices that are imported via Network File System (NFS).</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
           <xccdf:reference>
             <dc:title>DPMS Target Oracle Linux 8</dc:title>
             <dc:publisher>DISA</dc:publisher>
@@ -5251,21 +5220,22 @@ $ sudo systemctl enable rsyslog.service</xccdf:fixtext>
             <dc:subject>Oracle Linux 8</dc:subject>
             <dc:identifier>5416</dc:identifier>
           </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxNFSMounts" />
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
           <xccdf:fixtext fixref="F-52013r779440_fix">Configure the "/etc/fstab" to use the "nodev" option on file systems that are being imported via NFS.</xccdf:fixtext>
           <xccdf:fix id="F-52013r779440_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248625" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248625" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248626">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248626r991589_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248626r1156666_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-010650</xccdf:version>
           <xccdf:title>OL 8 must prevent files with the setuid and setgid bit set from being executed on file systems that are imported via Network File System (NFS).</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system not to execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for unprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system not to execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
           <xccdf:reference>
             <dc:title>DPMS Target Oracle Linux 8</dc:title>
             <dc:publisher>DISA</dc:publisher>
@@ -5273,23 +5243,24 @@ $ sudo systemctl enable rsyslog.service</xccdf:fixtext>
             <dc:subject>Oracle Linux 8</dc:subject>
             <dc:identifier>5416</dc:identifier>
           </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxNFSMounts" />
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
           <xccdf:fixtext fixref="F-52014r779443_fix">Configure the "/etc/fstab" to use the "nosuid" option on file systems that are being imported via NFS.</xccdf:fixtext>
           <xccdf:fix id="F-52014r779443_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248626" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248626" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248629">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248629r991589_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248629r1156626_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-010671</xccdf:version>
           <xccdf:title>OL 8 must disable the "kernel.core_pattern".</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
@@ -5304,38 +5275,32 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>5416</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-52017r858628_fix">Configure OL 8 to disable storing core dumps by adding the following line to a file in the "/etc/sysctl.d" directory:
+          <xccdf:fixtext fixref="F-52017r1156625_fix">Configure OL 8 to disable storing core dumps.
 
-kernel.core_pattern = |/bin/false
+Add or edit the following line in a system configuration file, in the "/etc/sysctl.d/" directory:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+kernel.core_pattern = |/bin/false
 
 The system configuration files must be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-52017r858628_fix" />
+          <xccdf:fix id="F-52017r1156625_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248629" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248629" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248630">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248630r991589_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248630r1156670_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-010672</xccdf:version>
           <xccdf:title>OL 8 must disable acquiring, saving, and processing core dumps.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors. 
  
 A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems. 
  
-When the kernel invokes "systemd-coredump" to handle a core dump, it runs in privileged mode and will connect to the socket created by the "systemd-coredump.socket" unit. This, in turn, will spawn an unprivileged "systemd-coredump@.service" instance to process the core dump.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+When the kernel invokes "systemd-coredump" to handle a core dump, it runs in privileged mode and will connect to the socket created by the "systemd-coredump.socket" unit. This, in turn, will spawn an nonprivileged "systemd-coredump@.service" instance to process the core dump.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
           <xccdf:reference>
             <dc:title>DPMS Target Oracle Linux 8</dc:title>
             <dc:publisher>DISA</dc:publisher>
@@ -5354,14 +5319,14 @@ $ sudo systemctl mask systemd-coredump.socket
 Created symlink /etc/systemd/system/systemd-coredump.socket -&gt; /dev/null</xccdf:fixtext>
           <xccdf:fix id="F-52018r779455_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248630" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248630" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248631">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248631r991589_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248631r1156685_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-010673</xccdf:version>
           <xccdf:title>OL 8 must disable core dumps for all users.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors. 
@@ -5376,21 +5341,23 @@ A core dump includes a memory image taken at the time the operating system termi
           </xccdf:reference>
           <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxKernelDumps" />
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-52019r779458_fix">Configure OL 8 to disable core dumps for all users. 
- 
-Add the following line to the top of "/etc/security/limits.conf" or in a ".conf" file defined in "/etc/security/limits.d/": 
- 
-* hard core 0</xccdf:fixtext>
-          <xccdf:fix id="F-52019r779458_fix" />
+          <xccdf:fixtext fixref="F-52019r1156684_fix">Configure OL 8 to disable core dumps for all users. 
+
+Add the following line to the top of the /etc/security/limits.conf or in a single ".conf" file defined in /etc/security/limits.d/:
+
+* hard core 0
+
+Remove or comment out any entries for users or groups with a value set to anything other than "0".</xccdf:fixtext>
+          <xccdf:fix id="F-52019r1156684_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248631" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248631" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248632">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248632r991589_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248632r1156671_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-010674</xccdf:version>
           <xccdf:title>OL 8 must disable storing core dumps.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors. 
@@ -5412,14 +5379,14 @@ Add or modify the following line in "/etc/systemd/coredump.conf":
 Storage=none</xccdf:fixtext>
           <xccdf:fix id="F-52020r779461_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248632" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248632" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248633">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248633r991589_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248633r1156672_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-010675</xccdf:version>
           <xccdf:title>OL 8 must disable core dump backtraces.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors. 
@@ -5441,7 +5408,7 @@ Add or modify the following line in "/etc/systemd/coredump.conf":
 ProcessSizeMax=0</xccdf:fixtext>
           <xccdf:fix id="F-52021r779464_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248633" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248633" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5471,7 +5438,7 @@ If local host resolution is being performed, the "/etc/resolv.conf" file must be
 $ sudo echo -n &gt; /etc/resolv.conf</xccdf:fixtext>
           <xccdf:fix id="F-52022r779467_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248634" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248634" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5493,7 +5460,7 @@ $ sudo echo -n &gt; /etc/resolv.conf</xccdf:fixtext>
           <xccdf:fixtext fixref="F-52026r779479_fix">Assign home directories to all local interactive users on OL 8 that currently do not have a home directory assigned.</xccdf:fixtext>
           <xccdf:fix id="F-52026r779479_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248638" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248638" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5519,7 +5486,7 @@ Note: The example will be for the user "smithj".
 $ sudo chmod 0750 /home/smithj</xccdf:fixtext>
           <xccdf:fix id="F-52027r779482_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248639" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248639" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5543,7 +5510,7 @@ $ sudo chmod 0750 /home/smithj</xccdf:fixtext>
 CREATE_HOME yes</xccdf:fixtext>
           <xccdf:fix id="F-52032r779497_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248644" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248644" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5569,7 +5536,7 @@ Note: The example will be for the smithj user, who has a home directory of "/hom
 $ sudo chmod 0740 /home/smithj/.&lt;INIT_FILE&gt;</xccdf:fixtext>
           <xccdf:fix id="F-52033r779500_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248645" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248645" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5591,7 +5558,7 @@ $ sudo chmod 0740 /home/smithj/.&lt;INIT_FILE&gt;</xccdf:fixtext>
           <xccdf:fixtext fixref="F-52036r902799_fix">Migrate the "/home" directory onto a separate file system.</xccdf:fixtext>
           <xccdf:fix id="F-52036r902799_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248648" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248648" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5619,7 +5586,7 @@ Add or edit the line for the "AutomaticLoginEnable" parameter in the [daemon] se
 AutomaticLoginEnable=false</xccdf:fixtext>
           <xccdf:fix id="F-52037r779512_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248649" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248649" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5649,7 +5616,7 @@ The SSH daemon must be restarted for the changes to take effect. To restart the
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-52038r779515_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248650" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248650" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5687,7 +5654,7 @@ The "sssd" service must be restarted for the changes to take effect. To restart
 $ sudo systemctl restart sssd.service</xccdf:fixtext>
           <xccdf:fix id="F-52040r779521_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248652" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248652" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5721,7 +5688,7 @@ Add/modify the "/etc/security/faillock.conf" file to match the following line:
 deny = 3</xccdf:fixtext>
           <xccdf:fix id="F-52041r779524_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248653" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248653" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5761,7 +5728,7 @@ The "sssd" service must be restarted for the changes to take effect. To restart
 $ sudo systemctl restart sssd.service</xccdf:fixtext>
           <xccdf:fix id="F-52042r779527_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248654" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248654" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5795,7 +5762,7 @@ Add/modify the "/etc/security/faillock.conf" file to match the following line:
 fail_interval = 900</xccdf:fixtext>
           <xccdf:fix id="F-52043r779530_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248655" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248655" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5835,7 +5802,7 @@ The "sssd" service must be restarted for the changes to take effect. To restart
 $ sudo systemctl restart sssd.service</xccdf:fixtext>
           <xccdf:fix id="F-52044r779533_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248656" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248656" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5869,7 +5836,7 @@ Add/modify the "/etc/security/faillock.conf" file to match the following line:
 unlock_time = 0</xccdf:fixtext>
           <xccdf:fix id="F-52045r779536_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248657" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248657" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5909,7 +5876,7 @@ The "sssd" service must be restarted for the changes to take effect. To restart
 $ sudo systemctl restart sssd.service</xccdf:fixtext>
           <xccdf:fix id="F-52048r779545_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248660" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248660" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5943,7 +5910,7 @@ Add/modify the "/etc/security/faillock.conf" file to match the following line:
 silent</xccdf:fixtext>
           <xccdf:fix id="F-52049r779548_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248661" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248661" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5983,7 +5950,7 @@ The "sssd" service must be restarted for the changes to take effect. To restart
 $ sudo systemctl restart sssd.service</xccdf:fixtext>
           <xccdf:fix id="F-52050r779551_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248662" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248662" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6017,7 +5984,7 @@ Add/modify the "/etc/security/faillock.conf" file to match the following line:
 audit</xccdf:fixtext>
           <xccdf:fix id="F-52051r779554_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248663" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248663" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6057,7 +6024,7 @@ The "sssd" service must be restarted for the changes to take effect. To restart
 $ sudo systemctl restart sssd.service</xccdf:fixtext>
           <xccdf:fix id="F-52052r779557_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248664" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248664" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6091,7 +6058,7 @@ Add/modify the "/etc/security/faillock.conf" file to match the following line:
 even_deny_root</xccdf:fixtext>
           <xccdf:fix id="F-52053r779560_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248665" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248665" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6119,7 +6086,7 @@ Add the following line to the top of "/etc/security/limits.conf" or in a ".conf"
 * hard maxlogins 10</xccdf:fixtext>
           <xccdf:fix id="F-52054r779563_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248666" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248666" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6153,7 +6120,7 @@ Update the system databases:
 $ sudo dconf update</xccdf:fixtext>
           <xccdf:fix id="F-52061r779584_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248673" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248673" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6200,7 +6167,7 @@ Update the system databases:
 $ sudo dconf update</xccdf:fixtext>
           <xccdf:fix id="F-52067r779602_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248679" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248679" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6242,7 +6209,7 @@ Add the following setting to prevent non-privileged users from modifying it:
 /org/gnome/desktop/screensaver/lock-delay</xccdf:fixtext>
           <xccdf:fix id="F-52070r779611_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248682" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248682" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6284,7 +6251,7 @@ Add the following setting to prevent non-privileged users from modifying it:
 /org/gnome/desktop/screensaver/lock-enabled</xccdf:fixtext>
           <xccdf:fix id="F-52072r779617_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248684" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248684" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6316,7 +6283,7 @@ Add the following line to the "/etc/pam.d/password-auth" file (or modify the lin
      password requisite pam_pwquality.so</xccdf:fixtext>
           <xccdf:fix id="F-52074r902808_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248686" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248686" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6352,7 +6319,7 @@ ucredit = -1
 Remove any configurations that conflict with the above value.</xccdf:fixtext>
           <xccdf:fix id="F-52075r858630_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248687" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248687" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6385,7 +6352,7 @@ lcredit = -1
 Remove any configurations that conflict with the above value.</xccdf:fixtext>
           <xccdf:fix id="F-52076r858632_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248688" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248688" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6418,7 +6385,7 @@ dcredit = -1
 Remove any configurations that conflict with the above value.</xccdf:fixtext>
           <xccdf:fix id="F-52077r858634_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248689" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248689" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6451,7 +6418,7 @@ maxclassrepeat = 4
 Remove any configurations that conflict with the above value.</xccdf:fixtext>
           <xccdf:fix id="F-52078r858636_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248690" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248690" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6484,7 +6451,7 @@ maxrepeat = 3
 Remove any configurations that conflict with the above value.</xccdf:fixtext>
           <xccdf:fix id="F-52079r858638_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248691" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248691" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6517,7 +6484,7 @@ minclass = 4
 Remove any configurations that conflict with the above value.</xccdf:fixtext>
           <xccdf:fix id="F-52080r858640_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248692" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248692" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6550,7 +6517,7 @@ difok = 8
 Remove any configurations that conflict with the above value.</xccdf:fixtext>
           <xccdf:fix id="F-52081r858642_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248693" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248693" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6575,7 +6542,7 @@ Remove any configurations that conflict with the above value.</xccdf:fixtext>
 $ sudo chage -m 1 [user]</xccdf:fixtext>
           <xccdf:fix id="F-52082r986358_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248694" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248694" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6602,7 +6569,7 @@ Add the following line in "/etc/login.defs" (or modify the line to have the requ
 PASS_MIN_DAYS 1</xccdf:fixtext>
           <xccdf:fix id="F-52083r986361_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248695" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248695" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6629,7 +6596,7 @@ Add or modify the following line in the "/etc/login.defs" file:
 PASS_MAX_DAYS 60</xccdf:fixtext>
           <xccdf:fix id="F-52084r779653_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248696" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248696" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6654,7 +6621,7 @@ PASS_MAX_DAYS 60</xccdf:fixtext>
 $ sudo chage -M 60 [user]</xccdf:fixtext>
           <xccdf:fix id="F-52085r779656_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248697" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248697" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6687,7 +6654,7 @@ minlen = 15
 Remove any configurations that conflict with the above value.</xccdf:fixtext>
           <xccdf:fix id="F-52087r858644_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248699" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248699" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6718,7 +6685,7 @@ Add or modify the following line in the "/etc/login.defs" file:
 PASS_MIN_LEN 15</xccdf:fixtext>
           <xccdf:fix id="F-52088r779665_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248700" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248700" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6750,7 +6717,7 @@ Satisfies: SRG-OS-000042-GPOS-00020, SRG-OS-000104-GPOS-00051, SRG-OS-000121-GPO
           <xccdf:fixtext fixref="F-52089r779668_fix">Edit the file "/etc/passwd" and provide each interactive user account that has a duplicate UID with a unique UID.</xccdf:fixtext>
           <xccdf:fix id="F-52089r779668_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248701" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248701" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6774,7 +6741,7 @@ Satisfies: SRG-OS-000042-GPOS-00020, SRG-OS-000104-GPOS-00051, SRG-OS-000121-GPO
 $ sudo chmod 0750 /usr/bin/lastlog</xccdf:fixtext>
           <xccdf:fix id="F-52093r779680_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248705" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248705" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6798,7 +6765,7 @@ $ sudo chmod 0750 /usr/bin/lastlog</xccdf:fixtext>
 $ sudo chown root /usr/bin/lastlog</xccdf:fixtext>
           <xccdf:fix id="F-52094r779683_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248706" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248706" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6822,7 +6789,7 @@ $ sudo chown root /usr/bin/lastlog</xccdf:fixtext>
 $ sudo chgrp root /usr/bin/lastlog</xccdf:fixtext>
           <xccdf:fix id="F-52095r779686_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248707" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248707" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6855,7 +6822,7 @@ ocredit = -1
 Remove any configurations that conflict with the above value.</xccdf:fixtext>
           <xccdf:fix id="F-52097r858646_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248709" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248709" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6883,7 +6850,7 @@ Add or change the following line in "/etc/sssd/sssd.conf" just below the line "[
      offline_credentials_expiration = 1</xccdf:fixtext>
           <xccdf:fix id="F-52098r943100_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248710" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248710" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6911,7 +6878,7 @@ dictcheck=1
 Remove any configurations that conflict with the above value.</xccdf:fixtext>
           <xccdf:fix id="F-52099r858648_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248711" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248711" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6939,7 +6906,7 @@ Modify the "/etc/login.defs" file to set the "FAIL_DELAY" parameter to "4" or gr
 FAIL_DELAY 4</xccdf:fixtext>
           <xccdf:fix id="F-52100r779701_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248712" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248712" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6967,7 +6934,7 @@ The SSH daemon must be restarted for the changes to take effect. To restart the
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-52102r779707_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248714" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248714" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6991,7 +6958,7 @@ $ sudo systemctl restart sshd.service</xccdf:fixtext>
 Note: Manual changes to the listed file may be overwritten by the "authselect" program.</xccdf:fixtext>
           <xccdf:fix id="F-52103r779710_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248715" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248715" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7015,33 +6982,7 @@ Note: Manual changes to the listed file may be overwritten by the "authselect" p
 Note: Manual changes to the listed file may be overwritten by the "authselect" program.</xccdf:fixtext>
           <xccdf:fix id="F-52104r779713_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248716" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-248717">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248717r991589_rule" severity="low" weight="10.0">
-          <xccdf:version>OL08-00-020340</xccdf:version>
-          <xccdf:title>OL 8 must display the date and time of the last successful account logon upon logon.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Providing users with feedback on when account accesses last occurred facilitates user recognition and reporting of unauthorized account use.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 8</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 8</dc:subject>
-            <dc:identifier>5416</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000052</xccdf:ident>
-          <xccdf:fixtext fixref="F-52105r779716_fix">Configure OL 8 to provide users with feedback on when account accesses last occurred by setting the required configuration options in "/etc/pam.d/postlogin". 
- 
-Add the following line to the top of "/etc/pam.d/postlogin": 
- 
-session required pam_lastlog.so showfailed</xccdf:fixtext>
-          <xccdf:fix id="F-52105r779716_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248717" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248716" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7069,7 +7010,7 @@ PrintLastLog yes
 The SSH service must be restarted for changes to "sshd_config" to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-52106r779719_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248718" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248718" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7095,14 +7036,14 @@ Edit the "UMASK" parameter in the "/etc/login.defs" file to match the example be
 UMASK 077</xccdf:fixtext>
           <xccdf:fix id="F-52107r779722_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248719" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248719" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248722">
         <xccdf:title>SRG-OS-000326-GPOS-00126</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248722r958730_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248722r1156669_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-030000</xccdf:version>
           <xccdf:title>The OL 8 audit system must be configured to audit the execution of privileged functions and prevent all software from executing at higher privilege levels than users executing the software.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Misuse of privileged functions, either intentionally or unintentionally by authorized users, or by unauthorized external entities that have compromised information system accounts, is a serious and ongoing concern and can have significant adverse impacts on organizations. Auditing the use of privileged functions is one way to detect such misuse and identify the risk from insider threats and the advanced persistent threat.
@@ -7117,22 +7058,22 @@ Satisfies: SRG-OS-000326-GPOS-00126, SRG-OS-000327-GPOS-00127&lt;/VulnDiscussion
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-002233</xccdf:ident>
           <xccdf:ident system="http://cyber.mil/cci">CCI-002234</xccdf:ident>
-          <xccdf:fixtext fixref="F-52110r779731_fix">Configure OL 8 to audit the execution of the "execve" system call. 
+          <xccdf:fixtext fixref="F-52110r1155549_fix">Configure OL 8 to audit the execution of the "execve" system call. 
  
 Add or update the following file system rules to "/etc/audit/rules.d/audit.rules": 
  
--a always,exit -F arch=b32 -S execve -C uid!=euid -F key=execpriv 
--a always,exit -F arch=b64 -S execve -C uid!=euid -F key=execpriv 
+-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 key=execpriv 
+-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 key=execpriv 
  
--a always,exit -F arch=b32 -S execve -C gid!=egid -F key=execpriv 
--a always,exit -F arch=b64 -S execve -C gid!=egid -F key=execpriv 
+-a always,exit -F arch=b32 -S execve -C gid!=egid -F euid=0 key=execpriv 
+-a always,exit -F arch=b64 -S execve -C gid!=egid -F euid=0 key=execpriv
  
 The audit daemon must be restarted for the changes to take effect. To restart the audit daemon, run the following command: 
  
 $ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-52110r779731_fix" />
+          <xccdf:fix id="F-52110r1155549_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248722" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248722" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7162,7 +7103,7 @@ Edit the following line in "/etc/audit/auditd.conf" to ensure that administrator
 action_mail_acct = root</xccdf:fixtext>
           <xccdf:fix id="F-52112r779737_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248724" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248724" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7192,7 +7133,7 @@ Add/update the following line in "/etc/aliases":
 postmaster: root</xccdf:fixtext>
           <xccdf:fix id="F-52113r779740_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248725" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248725" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7224,7 +7165,7 @@ disk_error_action = HALT
 If availability has been determined to be more important, and this decision is documented with the ISSO, configure OL 8 to notify system administration staff and ISSO staff in the event of an audit processing failure by setting the "disk_error_action" to "SYSLOG".</xccdf:fixtext>
           <xccdf:fix id="F-52114r779743_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248726" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248726" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7258,7 +7199,7 @@ disk_full_action = HALT
 If availability has been determined to be more important, and this decision is documented with the ISSO, configure OL 8 to notify system administration staff and ISSO staff in the event of an audit processing failure by setting the "disk_full_action" to "SYSLOG".</xccdf:fixtext>
           <xccdf:fix id="F-52116r779749_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248728" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248728" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7286,7 +7227,7 @@ Add or update the following line in "/etc/audit/auditd.conf" file:
 local_events = yes</xccdf:fixtext>
           <xccdf:fix id="F-52117r779752_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248729" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248729" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7318,7 +7259,7 @@ name_format = hostname
 The audit daemon must be restarted for changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-52118r779755_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248730" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248730" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7348,7 +7289,7 @@ log_format = ENRICHED
 The audit daemon must be restarted for changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-52119r779758_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248731" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248731" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7380,7 +7321,7 @@ $ sudo chmod 0600 [audit_log_file]
 Replace "[audit_log_file]" to the correct audit log path. By default, this location is "/var/log/audit/audit.log".</xccdf:fixtext>
           <xccdf:fix id="F-52120r779761_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248732" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248732" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7412,7 +7353,7 @@ $ sudo chown root [audit_log_file]
 Replace "[audit_log_file]" to the correct audit log path. By default, this location is "/var/log/audit/audit.log".</xccdf:fixtext>
           <xccdf:fix id="F-52121r779764_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248733" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248733" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7444,7 +7385,7 @@ $ sudo chgrp root [audit_log_file]
 Replace "[audit_log_file]" to the correct audit log path. By default, this location is "/var/log/audit/audit.log".</xccdf:fixtext>
           <xccdf:fix id="F-52122r779767_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248734" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248734" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7476,7 +7417,7 @@ $ sudo chown root [audit_log_directory]
 Replace "[audit_log_directory]" with the correct audit log directory path. By default, this location is usually "/var/log/audit".</xccdf:fixtext>
           <xccdf:fix id="F-52123r779770_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248735" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248735" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7508,7 +7449,7 @@ $ sudo chgrp root [audit_log_directory]
 Replace "[audit_log_directory]" with the correct audit log directory path. By default, this location is usually "/var/log/audit".</xccdf:fixtext>
           <xccdf:fix id="F-52124r779773_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248736" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248736" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7540,7 +7481,7 @@ $ sudo chmod 0700 [audit_log_directory]
 Replace "[audit_log_directory]" to the correct audit log directory path. By default, this location is "/var/log/audit".</xccdf:fixtext>
           <xccdf:fix id="F-52125r779776_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248737" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248737" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7574,7 +7515,7 @@ Satisfies: SRG-OS-000057-GPOS-00027, SRG-OS-000058-GPOS-00028, SRG-OS-000059-GPO
 Note: Once set, the system must be rebooted for auditing to be changed. It is recommended to add this option as the last step in securing the system.</xccdf:fixtext>
           <xccdf:fix id="F-52126r779779_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248738" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248738" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7606,7 +7547,7 @@ Satisfies: SRG-OS-000057-GPOS-00027, SRG-OS-000058-GPOS-00028, SRG-OS-000059-GPO
 --loginuid-immutable</xccdf:fixtext>
           <xccdf:fix id="F-52127r779782_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248739" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248739" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7650,7 +7591,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52128r779785_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248740" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248740" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7694,7 +7635,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52129r779788_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248741" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248741" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7738,7 +7679,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52130r779791_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248742" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248742" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7783,7 +7724,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52131r779794_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248743" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248743" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7827,7 +7768,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52132r779797_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248744" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248744" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7871,7 +7812,7 @@ The audit daemon must be restarted for the changes to take effect.
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52133r779800_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248745" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248745" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7915,7 +7856,7 @@ The audit daemon must be restarted for the changes to take effect.
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52134r779803_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248746" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248746" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7953,7 +7894,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52135r779806_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248747" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248747" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8003,7 +7944,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52136r818668_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248748" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248748" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8041,7 +7982,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52141r779824_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248753" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248753" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8079,7 +8020,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52142r779827_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248754" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248754" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8117,7 +8058,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52144r779833_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248756" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248756" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8155,7 +8096,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52145r779836_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248757" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248757" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8193,7 +8134,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52146r779839_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248758" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248758" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8231,7 +8172,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52147r779842_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248759" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248759" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8270,7 +8211,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52148r779845_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248760" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248760" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8308,7 +8249,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52149r779848_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248761" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248761" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8346,7 +8287,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52150r779851_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248762" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248762" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8384,7 +8325,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52151r779854_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248763" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248763" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8416,7 +8357,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52152r779857_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248764" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248764" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8448,7 +8389,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52153r779860_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248765" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248765" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8480,7 +8421,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52154r779863_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248766" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248766" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8518,7 +8459,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52155r779866_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248767" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248767" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8556,7 +8497,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52156r779869_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248768" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248768" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8594,7 +8535,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52157r779872_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248769" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248769" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8632,7 +8573,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52158r779875_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248770" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248770" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8670,7 +8611,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52159r779878_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248771" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248771" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8708,7 +8649,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52160r779881_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248772" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248772" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8749,7 +8690,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52161r818671_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248773" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248773" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8795,7 +8736,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52162r1069139_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248774" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248774" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8833,7 +8774,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52167r779902_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248779" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248779" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8872,7 +8813,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52169r779908_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248781" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248781" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8910,7 +8851,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52170r779911_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248782" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248782" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8948,7 +8889,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52171r779914_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248783" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248783" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8996,7 +8937,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52172r818677_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248784" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248784" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9041,7 +8982,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52178r818680_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248790" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248790" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9084,7 +9025,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52179r818683_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248791" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248791" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9122,7 +9063,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52185r779956_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248797" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248797" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9160,7 +9101,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52186r779959_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248798" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248798" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9198,7 +9139,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52187r779962_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248799" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248799" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9246,7 +9187,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52188r779965_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248800" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248800" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9294,7 +9235,7 @@ The audit daemon must be restarted for the changes to take effect. To restart th
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-52190r779971_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248802" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248802" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9319,7 +9260,7 @@ $ sudo chmod 0640 /etc/audit/rules.d/*.rules
 $ sudo chmod 0640 /etc/audit/auditd.conf</xccdf:fixtext>
           <xccdf:fix id="F-52194r951580_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248806" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248806" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9349,7 +9290,7 @@ $ sudo chmod 0755 [audit_tool]
 Replace "[audit_tool]" with the audit tool that does not have the correct permissive mode.</xccdf:fixtext>
           <xccdf:fix id="F-52195r779986_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248807" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248807" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9383,7 +9324,7 @@ $ sudo chown root [audit_tool]
 Replace "[audit_tool]" with each audit tool not owned by "root".</xccdf:fixtext>
           <xccdf:fix id="F-52196r779989_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248808" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248808" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9417,7 +9358,7 @@ $ sudo chgrp root [audit_tool]
 Replace "[audit_tool]" with each audit tool not group-owned by "root".</xccdf:fixtext>
           <xccdf:fix id="F-52197r779992_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248809" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248809" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9454,7 +9395,7 @@ Note that a port number was given as there is no standard port for RELP.&lt;/Vul
 $ sudo yum install rsyslog</xccdf:fixtext>
           <xccdf:fix id="F-52200r780001_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248812" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248812" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9491,7 +9432,7 @@ Note that a port number was given as there is no standard port for RELP.&lt;/Vul
 $ sudo yum install rsyslog-gnutls</xccdf:fixtext>
           <xccdf:fix id="F-52201r780004_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248813" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248813" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9523,7 +9464,7 @@ overflow_action = syslog
 The audit daemon must be restarted for changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-52203r780010_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248815" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248815" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9559,7 +9500,7 @@ Satisfies: SRG-OS-000342-GPOS-00133, SRG-OS-000479-GPOS-00224&lt;/VulnDiscussion
 $ActionSendStreamDriverAuthMode x509/name</xccdf:fixtext>
           <xccdf:fix id="F-52205r1069156_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248817" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248817" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9583,7 +9524,7 @@ $ActionSendStreamDriverAuthMode x509/name</xccdf:fixtext>
 space_left = 25%</xccdf:fixtext>
           <xccdf:fix id="F-52206r1101876_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248818" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248818" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9609,7 +9550,7 @@ space_left_action = email
 Note: Option names and values in the auditd.conf file are case insensitive.</xccdf:fixtext>
           <xccdf:fix id="F-52207r780022_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248819" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248819" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9637,7 +9578,7 @@ Note that USNO offers authenticated NTP service to DOD and U.S. Government agenc
      port 0</xccdf:fixtext>
           <xccdf:fix id="F-52209r928555_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248821" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248821" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9665,7 +9606,7 @@ Note that USNO offers authenticated NTP service to DOD and U.S. Government agenc
      cmdport 0</xccdf:fixtext>
           <xccdf:fix id="F-52210r928558_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248822" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248822" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9699,7 +9640,7 @@ If a privileged user were to log on using this service, the privileged user pass
 $ sudo yum remove telnet-server</xccdf:fixtext>
           <xccdf:fix id="F-52211r780034_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248823" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248823" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9729,7 +9670,7 @@ Verify the operating system is configured to disable non-essential capabilities.
 $ sudo yum remove abrt*</xccdf:fixtext>
           <xccdf:fix id="F-52212r780037_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248824" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248824" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9759,7 +9700,7 @@ Verify the operating system is configured to disable non-essential capabilities.
 $ sudo yum remove sendmail</xccdf:fixtext>
           <xccdf:fix id="F-52213r780040_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248825" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248825" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9798,7 +9739,7 @@ Add or update the line:
      blacklist atm</xccdf:fixtext>
           <xccdf:fix id="F-52217r943070_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248829" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248829" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9836,7 +9777,7 @@ Add or update the line:
      blacklist can</xccdf:fixtext>
           <xccdf:fix id="F-52218r943073_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248830" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248830" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9874,7 +9815,7 @@ Add or update the line:
      blacklist sctp</xccdf:fixtext>
           <xccdf:fix id="F-52219r943076_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248831" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248831" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9907,7 +9848,7 @@ Add or update the following lines in the file "/etc/modprobe.d/blacklist.conf":
 Reboot the system for the settings to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-52220r943079_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248832" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248832" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9940,7 +9881,7 @@ Add or update the following lines in the file "/etc/modprobe.d/blacklist.conf":
 Reboot the system for the settings to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-52221r943082_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248833" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248833" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9971,16 +9912,16 @@ Add or update the following lines in the file "/etc/modprobe.d/blacklist.conf":
 Reboot the system for the settings to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-52222r943085_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248834" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248834" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248836">
         <xccdf:title>SRG-OS-000114-GPOS-00059</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248836r958498_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248836r1156663_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-040070</xccdf:version>
-          <xccdf:title>The OL 8 file system automounter must be disabled unless required.</xccdf:title>
+          <xccdf:title>The OL 8 file system automounter must be disabled.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Verify the operating system disables the ability to automount devices. 
  
 Determine if automounter service is active with the following command: 
@@ -9991,7 +9932,7 @@ autofs.service - Automounts filesystems on demand
 Loaded: loaded (/usr/lib/systemd/system/autofs.service; disabled) 
 Active: inactive (dead) 
  
-If the "autofs" status is set to "active" and is not documented with the Information System Security Officer (ISSO) as an operational requirement, this is a finding.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+If the "autofs" status is set to "active" and is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
           <xccdf:reference>
             <dc:title>DPMS Target Oracle Linux 8</dc:title>
             <dc:publisher>DISA</dc:publisher>
@@ -10001,17 +9942,15 @@ If the "autofs" status is set to "active" and is not documented with the Informa
           </xccdf:reference>
           <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxAutofs" />
           <xccdf:ident system="http://cyber.mil/cci">CCI-000778</xccdf:ident>
-          <xccdf:fixtext fixref="F-52224r780073_fix">Configure OL 8 to disable the ability to automount devices. 
- 
-Turn off the automount service with the following commands: 
- 
-$ sudo systemctl stop autofs 
-$ sudo systemctl disable autofs 
- 
-If "autofs" is required for Network File System (NFS), it must be documented with the ISSO.</xccdf:fixtext>
-          <xccdf:fix id="F-52224r780073_fix" />
+          <xccdf:fixtext fixref="F-52224r1155534_fix">Configure OL 8 to disable the ability to automount devices.
+
+Turn off the automount service with the following commands:
+
+$ sudo systemctl stop autofs
+$ sudo systemctl disable autofs</xccdf:fixtext>
+          <xccdf:fix id="F-52224r1155534_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248836" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248836" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10043,7 +9982,7 @@ Add or update the lines:
 Reboot the system for the settings to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-52225r943088_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248837" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248837" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10073,7 +10012,7 @@ OL 8 functionality (e.g., RDP) must be capable of taking enforcement action if t
 $ sudo yum install firewalld.noarch</xccdf:fixtext>
           <xccdf:fix id="F-52228r780085_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248840" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248840" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10105,7 +10044,7 @@ $ sudo systemctl enable firewalld
 $ sudo systemctl start firewalld</xccdf:fixtext>
           <xccdf:fix id="F-52229r780088_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248841" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248841" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10147,7 +10086,7 @@ Add or update the line:
 Reboot the system for the settings to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-52231r943091_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248843" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248843" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10177,7 +10116,7 @@ The "nosuid" mount option causes the system to not execute "setuid" and "setgid"
 tmpfs /dev/shm tmpfs defaults,nodev,nosuid,noexec 0 0</xccdf:fixtext>
           <xccdf:fix id="F-52232r780097_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248844" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248844" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10207,7 +10146,7 @@ The "nosuid" mount option causes the system to not execute "setuid" and "setgid"
 tmpfs /dev/shm tmpfs defaults,nodev,nosuid,noexec 0 0</xccdf:fixtext>
           <xccdf:fix id="F-52233r780100_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248845" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248845" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10237,7 +10176,7 @@ The "nosuid" mount option causes the system to not execute "setuid" and "setgid"
 tmpfs /dev/shm tmpfs defaults,nodev,nosuid,noexec 0 0</xccdf:fixtext>
           <xccdf:fix id="F-52234r780103_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248846" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248846" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10267,7 +10206,7 @@ The "nosuid" mount option causes the system to not execute "setuid" and "setgid"
 /dev/mapper/ol-tmp /tmp xfs defaults,nodev,nosuid,noexec 0 0</xccdf:fixtext>
           <xccdf:fix id="F-52235r780106_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248847" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248847" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10297,7 +10236,7 @@ The "nosuid" mount option causes the system to not execute "setuid" and "setgid"
 /dev/mapper/ol-tmp /tmp xfs defaults,nodev,nosuid,noexec 0 0</xccdf:fixtext>
           <xccdf:fix id="F-52236r780109_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248848" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248848" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10327,7 +10266,7 @@ The "nosuid" mount option causes the system to not execute "setuid" and "setgid"
 /dev/mapper/ol-tmp /tmp xfs defaults,nodev,nosuid,noexec 0 0</xccdf:fixtext>
           <xccdf:fix id="F-52237r780112_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248849" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248849" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10357,7 +10296,7 @@ The "nosuid" mount option causes the system to not execute "setuid" and "setgid"
 /dev/mapper/ol-var_log /var/log xfs defaults,nodev,nosuid,noexec 0 0</xccdf:fixtext>
           <xccdf:fix id="F-52238r780115_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248850" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248850" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10387,7 +10326,7 @@ The "nosuid" mount option causes the system to not execute "setuid" and "setgid"
 /dev/mapper/ol-var_log /var/log xfs defaults,nodev,nosuid,noexec 0 0</xccdf:fixtext>
           <xccdf:fix id="F-52239r780118_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248851" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248851" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10417,7 +10356,7 @@ The "nosuid" mount option causes the system to not execute "setuid" and "setgid"
 /dev/mapper/ol-var_log /var/log xfs defaults,nodev,nosuid,noexec 0 0</xccdf:fixtext>
           <xccdf:fix id="F-52240r780121_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248852" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248852" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10447,7 +10386,7 @@ The "nosuid" mount option causes the system to not execute "setuid" and "setgid"
 /dev/mapper/ol-var_log_audit /var/log/audit xfs defaults,nodev,nosuid,noexec 0 0</xccdf:fixtext>
           <xccdf:fix id="F-52241r780124_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248853" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248853" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10477,7 +10416,7 @@ The "nosuid" mount option causes the system to not execute "setuid" and "setgid"
 /dev/mapper/ol-var_log_audit /var/log/audit xfs defaults,nodev,nosuid,noexec 0 0</xccdf:fixtext>
           <xccdf:fix id="F-52242r780127_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248854" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248854" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10507,7 +10446,7 @@ The "nosuid" mount option causes the system to not execute "setuid" and "setgid"
 /dev/mapper/ol-var_log_audit /var/log/audit xfs defaults,nodev,nosuid,noexec 0 0</xccdf:fixtext>
           <xccdf:fix id="F-52243r780130_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248855" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248855" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10537,7 +10476,7 @@ The "nosuid" mount option causes the system to not execute "setuid" and "setgid"
 /dev/mapper/ol-var_tmp /var/tmp xfs defaults,nodev,nosuid,noexec 0 0</xccdf:fixtext>
           <xccdf:fix id="F-52244r780133_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248856" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248856" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10567,7 +10506,7 @@ The "nosuid" mount option causes the system to not execute "setuid" and "setgid"
 /dev/mapper/ol-var_tmp /var/tmp xfs defaults,nodev,nosuid,noexec 0 0</xccdf:fixtext>
           <xccdf:fix id="F-52245r780136_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248857" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248857" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10597,7 +10536,7 @@ The "nosuid" mount option causes the system to not execute "setuid" and "setgid"
 /dev/mapper/ol-var_tmp /var/tmp xfs defaults,nodev,nosuid,noexec 0 0</xccdf:fixtext>
           <xccdf:fix id="F-52246r780139_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248858" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248858" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10632,7 +10571,7 @@ Satisfies: SRG-OS-000368-GPOS-00154, SRG-OS-000370-GPOS-00155&lt;/VulnDiscussion
 $ sudo yum install fapolicyd.x86_64</xccdf:fixtext>
           <xccdf:fix id="F-52247r780142_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248859" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248859" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10667,7 +10606,7 @@ Satisfies: SRG-OS-000368-GPOS-00154, SRG-OS-000370-GPOS-00155&lt;/VulnDiscussion
 $ sudo systemctl enable --now fapolicyd</xccdf:fixtext>
           <xccdf:fix id="F-52248r780145_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248860" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248860" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10698,7 +10637,7 @@ The system administrator (SA) must work with the site information system securit
 $ sudo yum install usbguard.x86_64</xccdf:fixtext>
           <xccdf:fix id="F-52250r780151_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248862" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248862" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10733,7 +10672,7 @@ $ sudo systemctl start usbguard.service
 Note: Enabling and starting usbguard without properly configuring it for an individual system will immediately prevent any access over a usb device such as a keyboard or mouse.</xccdf:fixtext>
           <xccdf:fix id="F-52252r780157_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248864" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248864" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10767,7 +10706,7 @@ FirewallBackend=nftables
 Establish rate-limiting rules based on organization-defined types of DoS attacks on impacted network interfaces.</xccdf:fixtext>
           <xccdf:fix id="F-52253r902787_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248865" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248865" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10800,7 +10739,7 @@ Satisfies: SRG-OS-000423-GPOS-00187, SRG-OS-000424-GPOS-00188, SRG-OS-000425-GPO
 $ sudo yum install openssh-server.x86_64</xccdf:fixtext>
           <xccdf:fix id="F-52254r780163_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248866" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248866" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10833,7 +10772,7 @@ Satisfies: SRG-OS-000423-GPOS-00187, SRG-OS-000424-GPOS-00188, SRG-OS-000425-GPO
 $ sudo systemctl enable sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-52255r780166_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248867" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248867" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10863,7 +10802,7 @@ The SSH daemon must be restarted for the settings to take effect.
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-52256r780169_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248868" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248868" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10895,7 +10834,7 @@ Reload the daemon to take effect:
 $ sudo systemctl daemon-reload</xccdf:fixtext>
           <xccdf:fix id="F-52257r833245_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248869" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248869" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10927,14 +10866,14 @@ Update the dconf settings:
 $ sudo dconf update</xccdf:fixtext>
           <xccdf:fix id="F-52258r780175_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248870" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248870" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248871">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248871r991589_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248871r1156667_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-040172</xccdf:version>
           <xccdf:title>OL 8 must disable the systemd Ctrl-Alt-Delete burst key sequence.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;A locally logged-on user who presses Ctrl-Alt-Delete when at the console can reboot the system. If accidentally pressed, as could happen in the case of a mixed OS environment, this can create the risk of short-term loss of availability of systems due to unintentional reboot. In a graphical user environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is reduced because the user will be prompted before any action is taken.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
@@ -10946,16 +10885,22 @@ $ sudo dconf update</xccdf:fixtext>
             <dc:identifier>5416</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-52259r780178_fix">Configure the system to disable the CtrlAltDelBurstAction by added or modifying the following line in the "/etc/systemd/system.conf" configuration file: 
- 
-CtrlAltDelBurstAction=none 
- 
-Reload the daemon for this change to take effect: 
- 
+          <xccdf:fixtext fixref="F-52259r1155543_fix">Configure OL 8 to disable the CtrlAltDelBurstAction by adding it to a drop file in a "/etc/systemd/system.conf.d/" configuration file:
+
+If no drop file exists, create one with the following command:
+
+$ sudo mkdir -p /etc/systemd/system.conf.d &amp;&amp; sudo vi /etc/systemd/system.conf.d/55-CtrlAltDel-BurstAction
+
+Edit the file to contain the setting by adding the following text:
+
+CtrlAltDelBurstAction=none
+
+Reload the daemon for this change to take effect.
+
 $ sudo systemctl daemon-reload</xccdf:fixtext>
-          <xccdf:fix id="F-52259r780178_fix" />
+          <xccdf:fix id="F-52259r1155543_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248871" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248871" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10985,7 +10930,7 @@ Reload the daemon to take effect:
 $ sudo systemctl daemon-reload</xccdf:fixtext>
           <xccdf:fix id="F-52260r780181_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248872" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248872" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11009,7 +10954,7 @@ $ sudo systemctl daemon-reload</xccdf:fixtext>
 $ sudo yum remove tftp-server</xccdf:fixtext>
           <xccdf:fix id="F-52261r780184_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248873" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248873" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11033,19 +10978,19 @@ $ sudo yum remove tftp-server</xccdf:fixtext>
 If the account is associated with system commands or applications, change the UID to one greater than "0" but less than "1000". Otherwise, assign a UID of greater than "1000" that has not already been assigned.</xccdf:fixtext>
           <xccdf:fix id="F-52262r780187_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248874" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248874" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248875">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248875r991589_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248875r1156627_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-040209</xccdf:version>
           <xccdf:title>OL 8 must prevent IPv4 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
@@ -11060,36 +11005,30 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>5416</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-52263r858650_fix">Configure OL 8 to prevent IPv4 ICMP redirect messages from being accepted with the following command:
+          <xccdf:fixtext fixref="F-52263r1155458_fix">Configure OL 8 to prevent IPv4 ICMP redirect messages from being accepted.
 
-$ sudo sysctl -w net.ipv4.conf.default.accept_redirects=0
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+net.ipv4.conf.default.accept_redirects = 0
 
-If "0" is not the system's default value then add or update the following line in the appropriate file under "/etc/sysctl.d":
+Load settings from all system configuration files with the following command:
 
-net.ipv4.conf.default.accept_redirects=0</xccdf:fixtext>
-          <xccdf:fix id="F-52263r858650_fix" />
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-52263r1155458_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248875" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248875" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248876">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248876r991589_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248876r1156628_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-040210</xccdf:version>
           <xccdf:title>OL 8 must prevent IPv6 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
@@ -11105,38 +11044,32 @@ The sysctl --system command will load settings from all system configuration fil
           </xccdf:reference>
           <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxIPv6enabled" />
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-52264r858652_fix">Configure OL 8 to prevent IPv6 ICMP redirect messages from being accepted with the following command:
+          <xccdf:fixtext fixref="F-52264r1155461_fix">Configure OL 8 to prevent IPv6 ICMP redirect messages from being accepted.
 
-$ sudo sysctl -w net.ipv6.conf.default.accept_redirects=0
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
-Remove any configurations that conflict with the above from the following locations:
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+net.ipv6.conf.default.accept_redirects = 0
 
-If "0" is not the system's default value, add or update the following line in "/etc/sysctl.conf" or in the appropriate file under "/etc/sysctl.d":
+Load settings from all system configuration files with the following command:
 
-net.ipv6.conf.default.accept_redirects=0</xccdf:fixtext>
-          <xccdf:fix id="F-52264r858652_fix" />
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-52264r1155461_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248876" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248876" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248877">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248877r991589_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248877r1156629_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-040220</xccdf:version>
           <xccdf:title>OL 8 must not send Internet Control Message Protocol (ICMP) redirects.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages contain information from the system's route table, possibly revealing portions of the network topology. 
  
 There are notable differences between Internet Protocol version 4 (IPv4) and Internet Protocol version 6 (IPv6). There is only a directive to disable sending of IPv4 redirected packets. Refer to RFC4294 for an explanation of "IPv6 Node Requirements", which resulted in this difference between IPv4 and IPv6.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
@@ -11151,38 +11084,32 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>5416</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-52265r858654_fix">Configure OL 8 to not allow interfaces to perform IPv4 ICMP redirects with the following command:
+          <xccdf:fixtext fixref="F-52265r1155464_fix">Configure OL 8 to not allow interfaces to perform IPv4 ICMP redirects.
 
-$ sudo sysctl -w net.ipv4.conf.all.send_redirects=0
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+net.ipv4.conf.all.send_redirects = 0
 
-If "0" is not the system's default value, add or update the following line in "/etc/sysctl.conf" or in the appropriate file under "/etc/sysctl.d":
+Load settings from all system configuration files with the following command:
 
-net.ipv4.conf.all.send_redirects=0</xccdf:fixtext>
-          <xccdf:fix id="F-52265r858654_fix" />
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-52265r1155464_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248877" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248877" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248878">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248878r991589_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248878r1156630_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-040230</xccdf:version>
           <xccdf:title>OL 8 must not respond to Internet Control Message Protocol (ICMP) echoes sent to a broadcast address.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Responding to broadcast ICMP echoes facilitates network mapping and provides a vector for amplification attacks. 
  
 There are notable differences between Internet Protocol version 4 (IPv4) and Internet Protocol version 6 (IPv6). IPv6 does not implement the same method of broadcast as IPv4. Instead, IPv6 uses multicast addressing to the all-hosts multicast group. Refer to RFC4294 for an explanation of "IPv6 Node Requirements", which resulted in this difference between IPv4 and IPv6.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
@@ -11197,36 +11124,30 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>5416</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-52266r858656_fix">Configure OL 8 to not respond to IPv4 ICMP echoes sent to a broadcast address with the following command:
+          <xccdf:fixtext fixref="F-52266r1155467_fix">Configure OL 8 to not respond to IPv4 ICMP echoes sent to a broadcast address.
 
-$ sudo sysctl -w net.ipv4.icmp_echo_ignore_broadcasts=1
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+net.ipv4.icmp_echo_ignore_broadcasts = 1
 
-If "1" is not the system's default value, add or update the following line in "/etc/sysctl.conf" or in the appropriate file under "/etc/sysctl.d":
+Load settings from all system configuration files with the following command:
 
-net.ipv4.icmp_echo_ignore_broadcasts=1</xccdf:fixtext>
-          <xccdf:fix id="F-52266r858656_fix" />
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-52266r1155467_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248878" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248878" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248879">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248879r991589_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248879r1156631_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-040239</xccdf:version>
           <xccdf:title>OL 8 must not forward IPv4 source-routed packets.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Source-routed packets allow the source of the packet to suggest that routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when forwarding is enabled and the system is functioning as a router.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
@@ -11241,36 +11162,30 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>5416</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-52267r858658_fix">Configure OL 8 to not forward IPv4 source-routed packets with the following command:
+          <xccdf:fixtext fixref="F-52267r1155470_fix">Configure OL 8 to ignore IPv4 source-routed packets.
 
-$ sudo sysctl -w net.ipv4.conf.all.accept_source_route=0
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+net.ipv4.conf.all.accept_source_route = 0
 
-If "0" is not the system's all value then add or update the following line in the appropriate file under "/etc/sysctl.d":
+Load settings from all system configuration files with the following command:
 
-net.ipv4.conf.all.accept_source_route=0</xccdf:fixtext>
-          <xccdf:fix id="F-52267r858658_fix" />
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-52267r1155470_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248879" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248879" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248880">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248880r991589_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248880r1156632_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-040240</xccdf:version>
           <xccdf:title>OL 8 must not forward IPv6 source-routed packets.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Source-routed packets allow the source of the packet to suggest that routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when forwarding is enabled and the system is functioning as a router.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
@@ -11286,36 +11201,30 @@ The sysctl --system command will load settings from all system configuration fil
           </xccdf:reference>
           <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxIPv6enabled" />
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-52268r858660_fix">Configure OL 8 to not forward IPv6 source-routed packets with the following command:
+          <xccdf:fixtext fixref="F-52268r1155473_fix">Configure OL 8 to not forward IPv6 source-routed packets.
 
-$ sudo sysctl -w net.ipv6.conf.all.accept_source_route=0
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+net.ipv6.conf.all.accept_source_route = 0
 
-If "0" is not the system's all value then add or update the following line in the appropriate file under "/etc/sysctl.d":
+Load settings from all system configuration files with the following command:
 
-net.ipv6.conf.all.accept_source_route=0</xccdf:fixtext>
-          <xccdf:fix id="F-52268r858660_fix" />
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-52268r1155473_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248880" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248880" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248881">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248881r991589_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248881r1156633_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-040249</xccdf:version>
           <xccdf:title>OL 8 must not forward IPv4 source-routed packets by default.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Source-routed packets allow the source of the packet to suggest that routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when forwarding is enabled and the system is functioning as a router.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
@@ -11330,36 +11239,30 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>5416</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-52269r858662_fix">Configure OL 8 to not forward IPv4 source-routed packets by default with the following command:
+          <xccdf:fixtext fixref="F-52269r1155476_fix">Configure OL 8 to not forward IPv4 source-routed packets by default.
 
-$ sudo sysctl -w net.ipv4.conf.default.accept_source_route=0
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+net.ipv4.conf.default.accept_source_route = 0
 
-If "0" is not the system's default value then add or update the following line in the appropriate file under "/etc/sysctl.d":
+Load settings from all system configuration files with the following command:
 
-net.ipv4.conf.default.accept_source_route=0</xccdf:fixtext>
-          <xccdf:fix id="F-52269r858662_fix" />
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-52269r1155476_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248881" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248881" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248882">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248882r991589_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248882r1156634_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-040250</xccdf:version>
           <xccdf:title>OL 8 must not forward IPv6 source-routed packets by default.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Source-routed packets allow the source of the packet to suggest that routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when forwarding is enabled and the system is functioning as a router.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
@@ -11375,36 +11278,30 @@ The sysctl --system command will load settings from all system configuration fil
           </xccdf:reference>
           <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxIPv6enabled" />
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-52270r858664_fix">Configure OL 8 to not forward IPv6 source-routed packets by default with the following command:
+          <xccdf:fixtext fixref="F-52270r1155479_fix">Configure OL 8 to not forward IPv6 source-routed packets by default.
 
-$ sudo sysctl -w net.ipv6.conf.default.accept_source_route=0
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+net.ipv6.conf.default.accept_source_route = 0
 
-If "0" is not the system's default value then add or update the following line in the appropriate file under "/etc/sysctl.d":
+Load settings from all system configuration files with the following command:
 
-net.ipv6.conf.default.accept_source_route=0</xccdf:fixtext>
-          <xccdf:fix id="F-52270r858664_fix" />
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-52270r1155479_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248882" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248882" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248883">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248883r991589_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248883r1156636_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-040260</xccdf:version>
           <xccdf:title>OL 8 must not enable IPv6 packet forwarding unless the system is a router.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Routing protocol daemons are typically used on routers to exchange network topology information with other routers. If this software is used when not required, system network information may be unnecessarily transmitted across the network.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
@@ -11420,38 +11317,32 @@ The sysctl --system command will load settings from all system configuration fil
           </xccdf:reference>
           <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxIPv6enabled" />
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-52271r858668_fix">Configure OL 8 to not allow IPv6 packet forwarding unless the system is a router with the following command:
+          <xccdf:fixtext fixref="F-52271r1155485_fix">Configure OL 8 to not allow IPv6 packet forwarding unless the system is a router.
 
-$ sudo sysctl -w net.ipv6.conf.all.forwarding=0
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+net.ipv6.conf.all.forwarding = 0
 
-If "0" is not the system's default value, add or update the following lines in "/etc/sysctl.conf" or in the appropriate file under "/etc/sysctl.d":
+Load settings from all system configuration files with the following command:
 
-net.ipv6.conf.all.forwarding=0</xccdf:fixtext>
-          <xccdf:fix id="F-52271r858668_fix" />
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-52271r1155485_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248883" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248883" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248884">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248884r991589_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248884r1156637_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-040261</xccdf:version>
           <xccdf:title>OL 8 must not accept router advertisements on all IPv6 interfaces.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Routing protocol daemons are typically used on routers to exchange network topology information with other routers. If this software is used when not required, system network information may be unnecessarily transmitted across the network. 
  
 An illicit router advertisement message could result in a man-in-the-middle attack.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
@@ -11467,38 +11358,32 @@ The sysctl --system command will load settings from all system configuration fil
           </xccdf:reference>
           <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxIPv6enabled" />
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-52272r858670_fix">Configure the system to not accept router advertisements on all IPv6 interfaces unless the system is a router with the following commands:
+          <xccdf:fixtext fixref="F-52272r1155488_fix">Configure OL 8 to not accept router advertisements on all IPv6 interfaces unless the system is a router.
 
-$ sudo sysctl -w net.ipv6.conf.all.accept_ra=0
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
-Remove any configurations that conflict with the above from the following locations:
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+net.ipv6.conf.all.accept_ra = 0
 
-If "0" is not the system's default value, add or update the following lines in the appropriate file under "/etc/sysctl.d":
+Load settings from all system configuration files with the following command:
 
-net.ipv6.conf.all.accept_ra=0</xccdf:fixtext>
-          <xccdf:fix id="F-52272r858670_fix" />
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-52272r1155488_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248884" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248884" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248885">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248885r991589_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248885r1156638_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-040262</xccdf:version>
           <xccdf:title>OL 8 must not accept router advertisements on all IPv6 interfaces by default.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Routing protocol daemons are typically used on routers to exchange network topology information with other routers. If this software is used when not required, system network information may be unnecessarily transmitted across the network. 
  
 An illicit router advertisement message could result in a man-in-the-middle attack.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
@@ -11514,38 +11399,32 @@ The sysctl --system command will load settings from all system configuration fil
           </xccdf:reference>
           <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxIPv6enabled" />
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-52273r858672_fix">Configure the system to not accept router advertisements on all IPv6 interfaces by default, unless the system is a router, with the following commands:
+          <xccdf:fixtext fixref="F-52273r1155491_fix">Configure OL 8 to not accept router advertisements on all IPv6 interfaces by default unless the system is a router.
 
-$ sudo sysctl -w net.ipv6.conf.default.accept_ra=0
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+net.ipv6.conf.default.accept_ra = 0
 
-If "0" is not the system's default value, add or update the following lines in the appropriate file under "/etc/sysctl.d":
+Load settings from all system configuration files with the following command:
 
-net.ipv6.conf.default.accept_ra=0</xccdf:fixtext>
-          <xccdf:fix id="F-52273r858672_fix" />
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-52273r1155491_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248885" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248885" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248886">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248886r991589_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248886r1156639_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-040270</xccdf:version>
           <xccdf:title>OL 8 must not allow interfaces to perform Internet Control Message Protocol (ICMP) redirects by default.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages contain information from the system's route table, possibly revealing portions of the network topology.
  
 There are notable differences between Internet Protocol version 4 (IPv4) and Internet Protocol version 6 (IPv6). There is only a directive to disable sending of IPv4 redirected packets. Refer to RFC4294 for an explanation of "IPv6 Node Requirements", which resulted in this difference between IPv4 and IPv6.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
@@ -11560,36 +11439,30 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>5416</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-52274r858674_fix">Configure OL 8 to not allow interfaces to perform Internet Protocol version 4 (IPv4) ICMP redirects by default with the following command:
+          <xccdf:fixtext fixref="F-52274r1155494_fix">Configure OL 8 to not allow interfaces to perform IPv4 ICMP redirects by default.
 
-$ sudo sysctl -w net.ipv4.conf.default.send_redirects=0
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+net.ipv4.conf.default.send_redirects = 0
 
-If "0" is not the system's default value, add or update the following line in "/etc/sysctl.conf" or in the appropriate file under "/etc/sysctl.d":
+Load settings from all system configuration files with the following command:
 
-net.ipv4.conf.default.send_redirects=0</xccdf:fixtext>
-          <xccdf:fix id="F-52274r858674_fix" />
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-52274r1155494_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248886" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248886" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248887">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248887r991589_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248887r1156640_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-040279</xccdf:version>
           <xccdf:title>OL 8 must ignore IPv4 Internet Control Message Protocol (ICMP) redirect messages.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
@@ -11604,36 +11477,30 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>5416</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-52275r858676_fix">Configure OL 8 to ignore IPv4 ICMP redirect messages with the following command:
+          <xccdf:fixtext fixref="F-52275r1155497_fix">Configure OL 8 to ignore IPv4 ICMP redirect messages.
 
-$ sudo sysctl -w net.ipv4.conf.all.accept_redirects=0
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+net.ipv4.conf.all.accept_redirects = 0
 
-If "0" is not the system's default value then add or update the following line in the appropriate file under "/etc/sysctl.d":
+Load settings from all system configuration files with the following command:
 
-net.ipv4.conf.all.accept_redirects = 0</xccdf:fixtext>
-          <xccdf:fix id="F-52275r858676_fix" />
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-52275r1155497_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248887" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248887" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248888">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248888r991589_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248888r1156641_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-040280</xccdf:version>
           <xccdf:title>OL 8 must ignore IPv6 Internet Control Message Protocol (ICMP) redirect messages.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
@@ -11649,36 +11516,30 @@ The sysctl --system command will load settings from all system configuration fil
           </xccdf:reference>
           <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxIPv6enabled" />
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-52276r858678_fix">Configure OL 8 to ignore IPv6 ICMP redirect messages with the following command:
+          <xccdf:fixtext fixref="F-52276r1155500_fix">Configure OL 8 to ignore IPv6 ICMP redirect messages.
 
-$ sudo sysctl -w net.ipv6.conf.all.accept_redirects=0
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+net.ipv6.conf.all.accept_redirects = 0
 
-If "0" is not the system's default value then add or update the following line in the appropriate file under "/etc/sysctl.d":
+Load settings from all system configuration files with the following command:
 
-net.ipv6.conf.all.accept_redirects = 0</xccdf:fixtext>
-          <xccdf:fix id="F-52276r858678_fix" />
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-52276r1155500_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248888" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248888" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248889">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248889r991589_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248889r1156644_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-040281</xccdf:version>
-          <xccdf:title>OL 8 must disable access to the network "bpf" syscall from unprivileged processes.</xccdf:title>
+          <xccdf:title>OL 8 must disable access to the network "bpf" syscall from nonprivileged processes.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
@@ -11693,36 +11554,28 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>5416</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-52277r858680_fix">Configure the system to prevent privilege escalation through the kernel by disabling access to the "bpf" syscall by adding the following line to a file in the "/etc/sysctl.d" directory:
-
-kernel.unprivileged_bpf_disabled = 1
+          <xccdf:fixtext fixref="F-52277r1156643_fix">Configure OL 8 to prevent privilege escalation thru the kernel by disabling access to the bpf syscall by adding the following line to a file, in the "/etc/sysctl.d" directory:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+kernel.nonprivileged_bpf_disabled = 1
 
 The system configuration files must be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-52277r858680_fix" />
+          <xccdf:fix id="F-52277r1156643_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248889" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248889" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248890">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248890r991589_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248890r1156646_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-040282</xccdf:version>
           <xccdf:title>OL 8 must restrict the use of "ptrace" to descendant processes.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
@@ -11737,36 +11590,28 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>5416</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-52278r858682_fix">Configure the system to restrict the use of "ptrace" to descendant processes by adding the following line to a file in the "/etc/sysctl.d" directory:
+          <xccdf:fixtext fixref="F-52278r1156645_fix">Configure OL 8 to restrict usage of ptrace to descendant processes by adding the following line to "/etc/sysctl.d/99-sysctl.conf":
 
 kernel.yama.ptrace_scope = 1
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
-
 The system configuration files must be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-52278r858682_fix" />
+          <xccdf:fix id="F-52278r1156645_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248890" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248890" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248891">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248891r991589_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248891r1156648_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-040283</xccdf:version>
           <xccdf:title>OL 8 must restrict exposed kernel pointer addresses access.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
@@ -11781,38 +11626,32 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>5416</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-52279r858684_fix">Configure the system to restrict exposed kernel pointer addresses access by adding the following line to a file in the "/etc/sysctl.d" directory:
+          <xccdf:fixtext fixref="F-52279r1156647_fix">Configure OL 8 to prevent the leak of kernel pointers to nonprivileged users.
+
+Add or edit the following line in /etc/sysctl.d/99-sysctl.conf system configuration file:
 
 kernel.kptr_restrict = 1
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
-
-The system configuration files must be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
+Reload settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-52279r858684_fix" />
+          <xccdf:fix id="F-52279r1156647_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248891" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248891" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248892">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248892r991589_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248892r1156650_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-040284</xccdf:version>
           <xccdf:title>OL 8 must disable the use of user namespaces.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors. 
 
-User namespaces are used primarily for Linux containers. "Rootful" containers run with root privileges on the host system and may pose a security risk if compromised. "Rootless" containers run without root privileges and allow for better isolation from the host system. The value "0" disallows the use of user namespaces. When containers are not in use, namespaces should be disallowed. When privileged user namespaces or "rootful" containers are in use, user namespaces should be disallowed. When unprivileged user namespaces or "rootless" containers are deployed on a system, the value should be set to a large non-zero value. The default value depends on the amount of memory in the system, approximately the total memory in kilobytes divided by 256.
+User namespaces are used primarily for Linux containers. "Rootful" containers run with root privileges on the host system and may pose a security risk if compromised. "Rootless" containers run without root privileges and allow for better isolation from the host system. The value "0" disallows the use of user namespaces. When containers are not in use, namespaces should be disallowed. When privileged user namespaces or "rootful" containers are in use, user namespaces should be disallowed. When nonprivileged user namespaces or "rootless" containers are deployed on a system, the value should be set to a large nonzero value. The default value depends on the amount of memory in the system, approximately the total memory in kilobytes divided by 256.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
@@ -11827,38 +11666,31 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>5416</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-52280r928561_fix">Configure the system to disable the use of user namespaces by adding the following line to a file in the "/etc/sysctl.d" directory:
-
-     user.max_user_namespaces = 0
+          <xccdf:fixtext fixref="F-52280r1156649_fix">Configure OL 8 to disable the use of user namespaces by adding the following line to a file, in the "/etc/sysctl.d" directory:
 
-Remove any configurations that conflict with the above from the following locations: 
+Note: User namespaces are used primarily for Linux containers. If containers are in use, this requirement is Not Applicable. 
 
-     /run/sysctl.d/*.conf
-     /usr/local/lib/sysctl.d/*.conf
-     /usr/lib/sysctl.d/*.conf
-     /lib/sysctl.d/*.conf
-     /etc/sysctl.conf
-     /etc/sysctl.d/*.conf
+user.max_user_namespaces = 0
 
 The system configuration files must be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
 
-     $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-52280r928561_fix" />
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-52280r1156649_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248892" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248892" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248893">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248893r991589_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248893r1156652_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-040285</xccdf:version>
           <xccdf:title>OL 8 must use reverse path filtering on all IPv4 interfaces.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors. 
  
 Enabling reverse path filtering drops packets with source addresses that are not routable. There is no equivalent filter for IPv6 traffic.
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
@@ -11873,38 +11705,32 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>5416</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-52281r858688_fix">Configure the system to use reverse path filtering on all IPv4 interfaces by adding the following line to a file in the "/etc/sysctl.d" directory:
+          <xccdf:fixtext fixref="F-52281r1156651_fix">Configure OL 8 to use reverse path filtering on all IPv4 interfaces. 
 
-net.ipv4.conf.all.rp_filter = 1
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+net.ipv4.conf.all.rp_filter = 1
 
 The system configuration files must be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-52281r858688_fix" />
+          <xccdf:fix id="F-52281r1156651_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248893" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248893" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-248894">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248894r991589_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-248894r1156654_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-040286</xccdf:version>
           <xccdf:title>OL 8 must enable hardening for the Berkeley Packet Filter Just-in-time compiler.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
 Enabling hardening for the Berkeley Packet Filter (BPF) Just-in-time (JIT) compiler aids in mitigating JIT spraying attacks. Setting the value to "2" enables JIT hardening for all users.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
@@ -11919,24 +11745,16 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>5416</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-52282r858690_fix">Configure OL 8 to enable hardening for the BPF JIT compiler by adding the following line to a file in the "/etc/sysctl.d" directory:
+          <xccdf:fixtext fixref="F-52282r1156653_fix">Configure OL 8 to enable hardening for the BPF JIT compiler by adding the following line to a file, in the "/etc/sysctl.d" directory:
 
 net.core.bpf_jit_harden = 2
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
-
-The system configuration files need to be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
+The system configuration files must be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-52282r858690_fix" />
+          <xccdf:fix id="F-52282r1156653_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248894" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248894" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11961,7 +11779,7 @@ $ sudo sysctl --system</xccdf:fixtext>
 $ sudo postconf -e 'smtpd_client_restrictions = permit_mynetworks,reject'</xccdf:fixtext>
           <xccdf:fix id="F-52283r780250_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248895" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248895" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11985,7 +11803,7 @@ $ sudo postconf -e 'smtpd_client_restrictions = permit_mynetworks,reject'</xccdf
 $ sudo rpm -e xorg-x11-server-common</xccdf:fixtext>
           <xccdf:fix id="F-52286r780259_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248898" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248898" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12013,7 +11831,7 @@ Set the promiscuous mode of an interface to "off" with the following command:
 $ sudo ip link set dev &lt;devicename&gt; multicast off promisc off</xccdf:fixtext>
           <xccdf:fix id="F-52287r780262_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248899" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248899" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12027,7 +11845,7 @@ $ sudo ip link set dev &lt;devicename&gt; multicast off promisc off</xccdf:fixte
  
 X11 forwarding should be enabled with caution. Users with the ability to bypass file permissions on the remote host (for the user's X11 authorization database) can access the local X11 display through the forwarded connection. An attacker may then be able to perform activities such as keystroke monitoring if the "ForwardX11Trusted" option is also enabled. 
  
-If X11 services are not required for the system's intended function, they should be disabled or restricted as appropriate to the system’s needs.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+If X11 services are not required for the system's intended function, they should be disabled or restricted as appropriate to the system's needs.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
           <xccdf:reference>
             <dc:title>DPMS Target Oracle Linux 8</dc:title>
             <dc:publisher>DISA</dc:publisher>
@@ -12045,7 +11863,7 @@ The SSH service must be restarted for changes to take effect:
 $ sudo systemctl restart sshd</xccdf:fixtext>
           <xccdf:fix id="F-52288r780265_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248900" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248900" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12071,7 +11889,7 @@ Edit the "/etc/ssh/sshd_config" file to uncomment or add the line for the "X11Us
 X11UseLocalhost yes</xccdf:fixtext>
           <xccdf:fix id="F-52289r780268_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248901" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248901" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12103,7 +11921,7 @@ $ sudo systemctl daemon-reload
 $ sudo systemctl restart tftp.service</xccdf:fixtext>
           <xccdf:fix id="F-52290r1106145_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248902" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248902" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12127,7 +11945,7 @@ $ sudo systemctl restart tftp.service</xccdf:fixtext>
 $ sudo yum remove vsftpd</xccdf:fixtext>
           <xccdf:fix id="F-52291r780274_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248903" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248903" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12147,13 +11965,14 @@ When an application uses Generic Security Services API (GSSAPI), typically it wi
             <dc:subject>Oracle Linux 8</dc:subject>
             <dc:identifier>5416</dc:identifier>
           </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxNoNFSMounts" />
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
           <xccdf:fixtext fixref="F-52292r1069142_fix">Configure OL 8 to disable nonessential capabilities by removing the "gssproxy" package from the system with the following command: 
  
 $ sudo yum remove gssproxy</xccdf:fixtext>
           <xccdf:fix id="F-52292r1069142_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248904" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248904" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12177,7 +11996,7 @@ $ sudo yum remove gssproxy</xccdf:fixtext>
 $ sudo yum remove iprutils</xccdf:fixtext>
           <xccdf:fix id="F-52293r780280_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248905" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248905" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12201,7 +12020,7 @@ $ sudo yum remove iprutils</xccdf:fixtext>
 $ sudo yum remove tuned</xccdf:fixtext>
           <xccdf:fix id="F-52294r780283_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248906" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:248906" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12228,7 +12047,7 @@ Lock an account:
 $ sudo passwd -l [username]</xccdf:fixtext>
           <xccdf:fix id="F-56056r818745_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:252650" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:252650" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12254,7 +12073,7 @@ This requirement applies to OL 8 with software libraries that are accessible and
 $ sudo chmod 755 [DIRECTORY]</xccdf:fixtext>
           <xccdf:fix id="F-56057r818748_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:252651" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:252651" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12282,7 +12101,7 @@ Run the following command, replacing "[DIRECTORY]" with any library directory no
 $ sudo chown root [DIRECTORY]</xccdf:fixtext>
           <xccdf:fix id="F-56058r818751_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:252652" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:252652" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12310,7 +12129,7 @@ Run the following command, replacing "[DIRECTORY]" with any library directory no
 $ sudo chgrp root [DIRECTORY]</xccdf:fixtext>
           <xccdf:fix id="F-56059r818754_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:252653" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:252653" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12342,7 +12161,7 @@ $ sudo vi /etc/pam.d/sudo
 Remove any occurrences of " pam_succeed_if " in the file.</xccdf:fixtext>
           <xccdf:fix id="F-56062r818763_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:252656" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:252656" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12372,7 +12191,7 @@ Add the following line to the "/etc/pam.d/system-auth" file (or modify the line
      password requisite pam_pwquality.so</xccdf:fixtext>
           <xccdf:fix id="F-56063r902811_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:252657" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:252657" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12404,7 +12223,7 @@ Add the following line to the "/etc/pam.d/system-auth" file (or modify the line
      password requisite pam_pwquality.so retry=3</xccdf:fixtext>
           <xccdf:fix id="F-56064r902814_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:252658" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:252658" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12436,7 +12255,7 @@ Add the following line to the "/etc/pam.d/password-auth" file (or modify the lin
      password requisite pam_pwquality.so retry=3</xccdf:fixtext>
           <xccdf:fix id="F-56065r902817_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:252659" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:252659" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12464,14 +12283,14 @@ $ sudo systemctl set-default multi-user.target
 A reboot is required for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-56069r818784_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:252663" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:252663" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257259">
         <xccdf:title>SRG-OS-000163-GPOS-00072</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257259r970703_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257259r1156674_rule" severity="medium" weight="10.0">
           <xccdf:version>OL08-00-020035</xccdf:version>
           <xccdf:title>OL 8 must terminate idle user sessions.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a management session enabled on the console or console port that has been left unattended.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
@@ -12483,27 +12302,35 @@ A reboot is required for the changes to take effect.</xccdf:fixtext>
             <dc:identifier>5416</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-001133</xccdf:ident>
-          <xccdf:fixtext fixref="F-60885r917918_fix">Configure OL 8 to log out idle sessions by editing the /etc/systemd/logind.conf file with the following line:
+          <xccdf:fixtext fixref="F-60885r1155561_fix">Configure OL 8 to log out idle sessions.
+
+Create the directory if necessary:
+
+$ mkdir -p /etc/systemd/logind.conf.d/
 
-     StopIdleSessionSec=900
+Create a *.conf file in /etc/systemd/logind.conf.d/ with the following content:
 
-The "logind" service must be restarted for the changes to take effect. To restart the "logind" service, run the following command:
+[Login]
+StopIdleSessionSec=600
+KillUserProcesses=no
 
-     $ sudo systemctl restart systemd-logind</xccdf:fixtext>
-          <xccdf:fix id="F-60885r917918_fix" />
+Restart systemd-logind:
+
+$ systemctl restart systemd-logind</xccdf:fixtext>
+          <xccdf:fix id="F-60885r1155561_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:257259" />
+            <xccdf:check-content-ref href="U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol8os:def:257259" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
     </xccdf:Benchmark>
   </component>
-  <component id="scap_mil.disa.stig_comp_U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" timestamp="2025-09-25T11:53:06.243-04:00">
+  <component id="scap_mil.disa.stig_comp_U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" timestamp="2026-01-05T14:25:45.793-05:00">
     <oval_definitions xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5">
       <generator>
-        <oval:product_name>Security Content Tool 1.6.0</oval:product_name>
+        <oval:product_name>Security Content Tool 1.7.0</oval:product_name>
         <oval:schema_version>5.11</oval:schema_version>
-        <oval:timestamp>2025-09-25T11:53:06</oval:timestamp>
+        <oval:timestamp>2026-01-05T02:25:45</oval:timestamp>
       </generator>
       <definitions>
         <definition id="oval:mil.disa.stig.defs:def:230223" version="1" class="compliance">
@@ -12788,46 +12615,6 @@ The "logind" service must be restarted for the changes to take effect. To restar
             <criterion test_ref="oval:mil.disa.stig.ind:tst:23026500" comment="/etc/dnf/dnf.conf: localpkg_gpgcheck is set to True, 1, or yes." />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230267" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must enable kernel parameters to enforce discretionary access control on symlinks.</title>
-            <description />
-          </metadata>
-          <criteria operator="AND">
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23026700" comment="fs.protected_symlinks setting in kernel is 1" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23026701" comment="fs.protected_symlinks setting in sysctl configuration files is set to 1, and nothing else, and there are no conflicting settings in other files" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230268" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must enable kernel parameters to enforce discretionary access control on hardlinks.</title>
-            <description />
-          </metadata>
-          <criteria operator="AND">
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23026800" comment="fs.protected_hardlinks setting in kernel is 1" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23026801" comment="fs.protected_hardlinks setting in sysctl configuration files is set to 1, and nothing else, and there are no conflicting settings in other files" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230269" version="3" class="compliance">
-          <metadata>
-            <title>The operating system must restrict access to the kernel message buffer.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23026900" comment="kernel.dmesg_restrict setting in kernel is 1" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23026900" comment="kernel.dmesg_restrict setting in sysctl configuration files is set to 1" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230270" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must prevent kernel profiling by unprivileged users.</title>
-            <description />
-          </metadata>
-          <criteria operator="AND">
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23027000" comment="kernel.perf_event_paranoid setting in kernel is 2" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23027001" comment="kernel.perf_event_paranoid setting in sysctl configuration files is set to 2, and nothing else, and there are no conflicting settings in other files" />
-          </criteria>
-        </definition>
         <definition id="oval:mil.disa.stig.defs:def:230271" version="1" class="compliance">
           <metadata>
             <title>The operating system must require users to provide a password for privilege escalation.</title>
@@ -12847,16 +12634,6 @@ The "logind" service must be restarted for the changes to take effect. To restar
             <criterion test_ref="oval:mil.disa.stig.linux:tst:23027300" comment="package openssl-pkcs11 is installed" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230280" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must implement address space layout randomization (ASLR) to protect its memory from unauthorized code execution.</title>
-            <description />
-          </metadata>
-          <criteria operator="AND">
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23028000" comment="kernel.randomize_va_space setting in kernel is 2" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23028000" comment="kernel.randomize_va_space setting in sysctl configuration files is set to 2" />
-          </criteria>
-        </definition>
         <definition id="oval:mil.disa.stig.defs:def:230281" version="1" class="compliance">
           <metadata>
             <title>YUM must remove all software components after updated versions have been installed on the operating system.</title>
@@ -12921,9 +12698,9 @@ The "logind" service must be restarted for the changes to take effect. To restar
             <criterion test_ref="oval:mil.disa.stig.ind:tst:23028800" comment="/etc/ssh/sshd_config or /etc/ssh/sshd_config.d/*:StrictModes == yes" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230290" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:230290" version="2" class="compliance">
           <metadata>
-            <title>The operating system SSH daemon must not allow authentication using known host’s authentication.</title>
+            <title>The operating system SSH daemon must not allow authentication using known host's authentication.</title>
             <description />
           </metadata>
           <criteria>
@@ -13037,14 +12814,13 @@ The "logind" service must be restarted for the changes to take effect. To restar
             <criterion test_ref="oval:mil.disa.stig.ind:tst:23030601" comment="actual nfs mounts have noexec" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230311" version="2" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:230311" version="3" class="compliance">
           <metadata>
             <title>The operating system must disable the kernel.core_pattern.</title>
             <description />
           </metadata>
           <criteria>
             <criterion test_ref="oval:mil.disa.stig.unix:tst:23031100" comment="kernel.core_pattern setting in kernel is |/bin/false" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23031100" comment="kernel.core_pattern setting in sysctl configuration files is set to |/bin/false" />
           </criteria>
         </definition>
         <definition id="oval:mil.disa.stig.defs:def:230312" version="1" class="compliance">
@@ -13445,16 +13221,6 @@ The "logind" service must be restarted for the changes to take effect. To restar
             <criterion test_ref="oval:mil.disa.stig.ind:tst:23038000" comment="The PermitEmptyPasswords option is not set to yes in /etc/ssh/sshd_config." />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230381" version="3" class="compliance">
-          <metadata>
-            <title>The operating system must display the date and time of the last successful account logon upon logon.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23038100" comment="pam_lastlog is configured to show last successful logon" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23038101" comment="pam_lastlog is not used with the silent option" />
-          </criteria>
-        </definition>
         <definition id="oval:mil.disa.stig.defs:def:230382" version="1" class="compliance">
           <metadata>
             <title>The operating system must display the date and time of the last successful account logon upon an SSH logon.</title>
@@ -14400,154 +14166,13 @@ The "logind" service must be restarted for the changes to take effect. To restar
             <criterion test_ref="oval:mil.disa.stig.unix:tst:23053400" comment="Only the root account has a UID of zero." />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230535" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must prevent IPv6 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23053500" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23053500" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230536" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must not send Internet Control Message Protocol (ICMP) redirects.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23053600" comment="net.ipv4.conf.all.send_redirects setting in kernel is 0" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23053600" comment="net.ipv4.conf.all.send_redirects setting in sysctl configuration files is set to 0" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230537" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must not respond to Internet Control Message Protocol (ICMP) echoes sent to a broadcast address.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23053700" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23053700" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230538" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must not forward IPv6 source-routed packets.</title>
-            <description />
-          </metadata>
-          <criteria operator="AND">
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23053800" comment="net.ipv6.conf.all.accept_source_route setting in kernel is 0" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23053801" comment="net.ipv6.conf.all.accept_source_route setting in sysctl configuration files is set to 0, and nothing else" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230539" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must not forward IPv6 source-routed packets by default.</title>
-            <description />
-          </metadata>
-          <criteria operator="AND">
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23053902" comment="net.ipv6.conf.default.accept_source_route setting in kernel is 0" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23053903" comment="net.ipv6.conf.default.accept_source_route setting in sysctl configuration files is set to 0, and nothing else" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230540" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must not enable IPv6 packet forwarding unless the system is a router.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23054000" comment="net.ipv6.conf.all.forwarding setting in sysctl configuration files is set to 0" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054000" comment="net.ipv6.conf.all.forwarding setting in kernel is 0" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230541" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must not accept router advertisements on all IPv6 interfaces.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054100" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23054100" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230542" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must not accept router advertisements on all IPv6 interfaces by default.</title>
-            <description />
-          </metadata>
-          <criteria operator="AND">
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25312000" comment="net.ipv6.conf.default.accept_ra setting in kernel is 0" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25312001" comment="net.ipv6.conf.default.accept_ra setting in sysctl configuration files is set to 0, and nothing else" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230543" version="3" class="compliance">
-          <metadata>
-            <title>The operating system must not allow interfaces to perform Internet Control Message Protocol (ICMP) redirects by default.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054300" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23054301" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230544" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must ignore IPv6 Internet Control Message Protocol (ICMP) redirect messages.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054400" comment="net.ipv6.conf.all.accept_redirects setting in kernel is 0" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23054401" comment="net.ipv6.conf.all.accept_redirects setting in sysctl configuration files is set to 0, and nothing else" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230545" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:230546" version="2" class="compliance">
           <metadata>
-            <title>The operating system must disable access to network bpf syscall from unprivileged processes.</title>
+            <title>The operating system must restrict usage of ptrace to descendant processes.</title>
             <description />
           </metadata>
           <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054500" comment="kernel.unprivileged_bpf_disabled setting in kernel is '1'." />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23054501" comment="kernel.unprivileged_bpf_disabled setting is set to '1' without conflicting settings in other files" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230546" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must restrict usage of ptrace to descendant  processes.</title>
-            <description />
-          </metadata>
-          <criteria operator="AND">
             <criterion test_ref="oval:mil.disa.stig.unix:tst:23054600" comment="kernel.yama.ptrace_scope setting in kernel is set to 1" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23054601" comment="kernel.yama.ptrace_scope in sysctl configuration files is set to 1, and nothing else, and there are no conflicting settings in other files" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230547" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must restrict exposed kernel pointer addresses access.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054700" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23054701" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230548" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must disable the use of user namespaces.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054800" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23054801" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230549" version="5" class="compliance">
-          <metadata>
-            <title>The operating system must use reverse path filtering on all IPv4 interfaces.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23054900" comment="net.ipv4.conf.all.rp_filter setting in sysctl configuration files is set to 1 or 2" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054900" comment="net.ipv4.conf.all.rp_filter setting in kernel is 1 or 2" />
           </criteria>
         </definition>
         <definition id="oval:mil.disa.stig.defs:def:230550" version="2" class="compliance">
@@ -14614,16 +14239,6 @@ The "logind" service must be restarted for the changes to take effect. To restar
             <criterion test_ref="oval:mil.disa.stig.linux:tst:23055800" comment="An FTP server package is not installed." />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230559" version="2" class="compliance">
-          <metadata>
-            <title>The gssproxy package must not be installed unless mission essential on the operating system.</title>
-            <description />
-          </metadata>
-          <criteria operator="OR">
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23055900" comment="gssproxy package is not installed" />
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:25785400" comment="nfs is in use" />
-          </criteria>
-        </definition>
         <definition id="oval:mil.disa.stig.defs:def:230560" version="1" class="compliance">
           <metadata>
             <title>The iprutils package must not be installed unless mission essential on the operating system.</title>
@@ -14811,63 +14426,49 @@ The "logind" service must be restarted for the changes to take effect. To restar
             <criterion test_ref="oval:mil.disa.stig.linux:tst:24454900" comment="SSH is installed" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:244550" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must prevent IPv4 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</title>
-            <description />
-          </metadata>
-          <criteria operator="AND">
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:24455000" comment="net.ipv4.conf.default.accept_redirects setting in kernel is 0" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:24455001" comment="net.ipv4.conf.default.accept_redirects setting in acceptable directory is set to 0, and nothing else, and it only appears once" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:244551" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:248521" version="1" class="compliance">
           <metadata>
-            <title>The operating system must not forward IPv4 source-routed packets.</title>
+            <title>The operating system must be a vendor-supported release.</title>
             <description />
           </metadata>
           <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:24455100" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:24455100" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:24852100" comment="The Oracle Linux 8 minor version is supported." />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:244552" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:248577" version="2" class="compliance">
           <metadata>
-            <title>The operating system must not forward IPv4 source-routed packets by default.</title>
+            <title>The operating system must enable kernel parameters to enforce discretionary access control on symlinks.</title>
             <description />
           </metadata>
-          <criteria operator="AND">
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:24455200" comment="net.ipv4.conf.default.accept_source_route setting in kernel is 0" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:24455201" comment="net.ipv4.conf.default.accept_source_route setting in acceptable directory is set to 0, and nothing else, and there are no conflicting settings in other files" />
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:24857700" comment="fs.protected_symlinks setting in kernel is 1" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:244553" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:248578" version="1" class="compliance">
           <metadata>
-            <title>The operating system must ignore IPv4 Internet Control Message Protocol (ICMP) redirect messages.</title>
+            <title>The operating system must enable kernel parameters to enforce discretionary access control on hardlinks.</title>
             <description />
           </metadata>
           <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:24455300" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:24455300" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:24857800" comment="fs.protected_hardlinks setting in kernel is 1" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:244554" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:248579" version="1" class="compliance">
           <metadata>
-            <title>The operating system must enable hardening for the Berkeley Packet Filter Just-in-time compiler.</title>
+            <title>The operating system must restrict access to the kernel message buffer.</title>
             <description />
           </metadata>
           <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:24455400" comment="net.core.bpf_jit_harden is set to 2 in kernel" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:24455401" comment="net.core.bpf_jit_harden is set to 2 in the sysctl configuration files." />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:24857900" comment="kernel.dmesg_restrict setting in kernel is 1" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:248521" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:248580" version="1" class="compliance">
           <metadata>
-            <title>The operating system must be a vendor-supported release.</title>
+            <title>The operating system must prevent kernel profiling by unprivileged users.</title>
             <description />
           </metadata>
           <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:24852100" comment="The Oracle Linux 8 minor version is supported." />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:24858000" comment="kernel.perf_event_paranoid setting in kernel is 2" />
           </criteria>
         </definition>
         <definition id="oval:mil.disa.stig.defs:def:248625" version="1" class="compliance">
@@ -15036,6 +14637,15 @@ The "logind" service must be restarted for the changes to take effect. To restar
             <criterion test_ref="oval:mil.disa.stig.ind:tst:24885800" />
           </criteria>
         </definition>
+        <definition id="oval:mil.disa.stig.defs:def:248882" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must not forward IPv6 source-routed packets by default.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:24888202" comment="net.ipv6.conf.default.accept_source_route setting in kernel is 0" />
+          </criteria>
+        </definition>
         <definition id="oval:mil.disa.stig.defs:def:251706" version="1" class="compliance">
           <metadata>
             <title>The operating system operating system must not have accounts configured with blank or null passwords.</title>
@@ -15208,6 +14818,33 @@ The "logind" service must be restarted for the changes to take effect. To restar
             <criterion test_ref="oval:mil.disa.stig.ind:tst:25303803" />
           </criteria>
         </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257258" version="1" class="compliance">
+          <metadata>
+            <title>The system must terminate idle user sessions.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25725800" comment="The system terminates idle user sessions." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257800" version="2" class="compliance">
+          <metadata>
+            <title>The operating system must restrict exposed kernel pointer addresses access.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25780000" comment="kernel.kptr_restrict is set to 1" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257832" version="1" class="compliance">
+          <metadata>
+            <title>The gssproxy package must not be installed unless mission essential on the operating system.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23055900" comment="gssproxy package is not installed" />
+          </criteria>
+        </definition>
         <definition id="oval:mil.disa.stig.defs:def:257890" version="1" class="compliance">
           <metadata>
             <title>All the operating system local interactive user home directories must have mode 0750 or less permissive.</title>
@@ -15291,15 +14928,6 @@ The "logind" service must be restarted for the changes to take effect. To restar
             <criterion test_ref="oval:mil.disa.stig.unix:tst:25805101" comment="Check /etc/passwd if root has a home directory defined" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258077" version="1" class="compliance">
-          <metadata>
-            <title>The system must terminate idle user sessions.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25807700" comment="The system terminates idle user sessions." />
-          </criteria>
-        </definition>
         <definition id="oval:mil.disa.stig.defs:def:258086" version="1" class="compliance">
           <metadata>
             <title>The operating system must require users to reauthenticate for privilege escalation.</title>
@@ -15383,32 +15011,194 @@ The "logind" service must be restarted for the changes to take effect. To restar
             <criterion test_ref="oval:mil.disa.stig.ind:tst:27172000" comment="Check to see if PermitUserEnvironment is set to no in /etc/ssh/sshd_config and /etc/ssh/sshd_config.d/*.conf" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:25784900" version="1" class="inventory">
+        <definition id="oval:mil.disa.stig.defs:def:271727" version="1" class="compliance">
           <metadata>
-            <title>The autofs package is installed.</title>
+            <title>The operating system must disable the use of user namespaces.</title>
             <description />
           </metadata>
           <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25784900" comment="The autofs package is installed." />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054800" comment="user.max_user_namespaces is set to 0" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:25785400" version="2" class="inventory">
+        <definition id="oval:mil.disa.stig.defs:def:271748" version="1" class="compliance">
           <metadata>
-            <title>The system has nfs entries in /etc/fstab</title>
+            <title>The operating system must disable access to network bpf system call from nonprivileged processes.</title>
             <description />
           </metadata>
           <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25785400" comment="nfs mounts" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054500" comment="kernel.unprivileged_bpf_disabled setting in kernel is '1'." />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:25795100" version="1" class="inventory">
+        <definition id="oval:mil.disa.stig.defs:def:271761" version="1" class="compliance">
           <metadata>
-            <title>The postifx package is installed.</title>
+            <title>The operating system must implement address space layout randomization (ASLR) to protect its memory from unauthorized code execution.</title>
             <description />
           </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23055000" comment="The postifx package is installed." />
-          </criteria>
+          <criteria operator="AND">
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23028000" comment="kernel.randomize_va_space setting in kernel is 2" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271768" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must enable hardening for the Berkeley Packet Filter Just-in-time compiler.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:24455400" comment="net.core.bpf_jit_harden is set to 2" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271864" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must ignore Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirect messages.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:24455300" comment="net.ipv4.conf.all.accept_redirects setting in kernel to 0" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271865" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must not forward IPv4 source-routed packets.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25795900" comment="net.ipv4.conf.all.accept_source_routesetting in kernel is set to 0" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271868" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must use reverse path filtering on all IPv4 interfaces.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:27186800" comment="net.ipv4.conf.all.rp_filter setting in kernel is 1" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271869" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must prevent IPv4 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</title>
+            <description />
+          </metadata>
+          <criteria operator="AND">
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:24455000" comment="net.ipv4.conf.default.accept_redirects setting in kernel is 0" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271870" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must not forward IPv4 source-routed packets by default.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:24455200" comment="net.ipv4.conf.default.accept_source_route setting in kernel is 0" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271873" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must not respond to Internet Control Message Protocol (ICMP) echoes sent to a broadcast address.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23053700" comment="net.ipv4.icmp_echo_ignore_broadcasts is set to 1 in kernel" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271875" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must not send Internet Control Message Protocol (ICMP) redirects.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23053600" comment="net.ipv4.conf.all.send_redirects setting in kernel is 0" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271876" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must not allow interfaces to perform Internet Control Message Protocol (ICMP) redirects by default.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054300" comment="net.ipv4.conf.default.send_redirects is set to 0 in kernel" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271877" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must not accept router advertisements on all IPv6 interfaces.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25797100" comment="net.ipv6.conf.all.accept_ra setting in kernel is set to 0" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271878" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must ignore IPv6 Internet Control Message Protocol (ICMP) redirect messages.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054400" comment="net.ipv6.conf.all.accept_redirects setting in kernel is 0" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271879" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must not forward IPv6 source-routed packets.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23053800" comment="net.ipv6.conf.all.accept_source_route setting in kernel is 0" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271880" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must not enable IPv6 packet forwarding unless the system is a router.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054000" comment="net.ipv6.conf.all.forwarding setting in kernel is 0" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271881" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must not accept router advertisements on all IPv6 interfaces by default.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25312000" comment="net.ipv6.conf.default.accept_ra setting in kernel is 0" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271882" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must prevent IPv6 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23053500" comment="net.ipv6.conf.default.accept_redirects is set to 0 in kernel" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:25784900" version="1" class="inventory">
+          <metadata>
+            <title>The autofs package is installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25784900" comment="The autofs package is installed." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:25785400" version="2" class="inventory">
+          <metadata>
+            <title>The system has nfs entries in /etc/fstab</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25785400" comment="nfs mounts" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:25795100" version="1" class="inventory">
+          <metadata>
+            <title>The postifx package is installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23055000" comment="The postifx package is installed." />
+          </criteria>
         </definition>
         <definition id="oval:mil.disa.stig.defs:def:25795200" version="1" class="compliance">
           <metadata>
@@ -16136,7 +15926,7 @@ Verifying the authenticity of the software prior to installation validates the i
             <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230265" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.ol8os:def:248577" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.ol8os:def:248577" version="2" class="compliance">
           <metadata>
             <title>OL08-00-010373 - OL 8 must enable kernel parameters to enforce Discretionary Access Control (DAC) on symlinks.</title>
             <affected family="unix">
@@ -16157,10 +15947,10 @@ The sysctl --system command will load settings from all system configuration fil
 /etc/sysctl.conf</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230267" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:248577" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.ol8os:def:248578" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.ol8os:def:248578" version="2" class="compliance">
           <metadata>
             <title>OL08-00-010374 - OL 8 must enable kernel parameters to enforce Discretionary Access Control (DAC) on hardlinks.</title>
             <affected family="unix">
@@ -16181,10 +15971,10 @@ The sysctl --system command will load settings from all system configuration fil
 /etc/sysctl.conf</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230268" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:248578" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.ol8os:def:248579" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.ol8os:def:248579" version="2" class="compliance">
           <metadata>
             <title>OL08-00-010375 - OL 8 must restrict access to the kernel message buffer.</title>
             <affected family="unix">
@@ -16207,10 +15997,10 @@ The sysctl --system command will load settings from all system configuration fil
 /etc/sysctl.conf</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230269" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:248579" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.ol8os:def:248580" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.ol8os:def:248580" version="2" class="compliance">
           <metadata>
             <title>OL08-00-010376 - OL 8 must prevent kernel profiling by unprivileged users.</title>
             <affected family="unix">
@@ -16233,7 +16023,7 @@ The sysctl --system command will load settings from all system configuration fil
 /etc/sysctl.conf</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230270" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:248580" />
           </criteria>
         </definition>
         <definition id="oval:mil.disa.stig.ol8os:def:248581" version="1" class="compliance">
@@ -16331,7 +16121,7 @@ This requirement only applies to components where this is specific to the functi
             <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230273" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.ol8os:def:248594" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.ol8os:def:248594" version="2" class="compliance">
           <metadata>
             <title>OL08-00-010430 - OL 8 must implement address space layout randomization (ASLR) to protect its memory from unauthorized code execution.</title>
             <affected family="unix">
@@ -16350,7 +16140,7 @@ The sysctl --system command will load settings from all system configuration fil
 /etc/sysctl.conf</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230280" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271761" />
           </criteria>
         </definition>
         <definition id="oval:mil.disa.stig.ol8os:def:248595" version="1" class="compliance">
@@ -17495,18 +17285,6 @@ Configuration settings are the set of parameters that can be changed in hardware
             <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244541" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.ol8os:def:248717" version="1" class="compliance">
-          <metadata>
-            <title>OL08-00-020340 - OL 8 must display the date and time of the last successful account logon upon logon.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 8</platform>
-            </affected>
-            <description>Providing users with feedback on when account accesses last occurred facilitates user recognition and reporting of unauthorized account use.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230381" />
-          </criteria>
-        </definition>
         <definition id="oval:mil.disa.stig.ol8os:def:248718" version="1" class="compliance">
           <metadata>
             <title>OL08-00-020350 - OL 8 must display the date and time of the last successful account logon upon an SSH logon.</title>
@@ -19511,7 +19289,7 @@ Session key regeneration limits the chances of a session key becoming compromise
             <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230534" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.ol8os:def:248875" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.ol8os:def:248875" version="2" class="compliance">
           <metadata>
             <title>OL08-00-040209 - OL 8 must prevent IPv4 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</title>
             <affected family="unix">
@@ -19528,10 +19306,10 @@ The sysctl --system command will load settings from all system configuration fil
 /etc/sysctl.conf</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244550" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271869" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.ol8os:def:248876" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.ol8os:def:248876" version="2" class="compliance">
           <metadata>
             <title>OL08-00-040210 - OL 8 must prevent IPv6 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</title>
             <affected family="unix">
@@ -19548,10 +19326,10 @@ The sysctl --system command will load settings from all system configuration fil
 /etc/sysctl.conf</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230535" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271882" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.ol8os:def:248877" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.ol8os:def:248877" version="2" class="compliance">
           <metadata>
             <title>OL08-00-040220 - OL 8 must not send Internet Control Message Protocol (ICMP) redirects.</title>
             <affected family="unix">
@@ -19570,10 +19348,10 @@ The sysctl --system command will load settings from all system configuration fil
 /etc/sysctl.conf</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230536" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271875" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.ol8os:def:248878" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.ol8os:def:248878" version="2" class="compliance">
           <metadata>
             <title>OL08-00-040230 - OL 8 must not respond to Internet Control Message Protocol (ICMP) echoes sent to a broadcast address.</title>
             <affected family="unix">
@@ -19592,10 +19370,10 @@ The sysctl --system command will load settings from all system configuration fil
 /etc/sysctl.conf</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230537" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271873" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.ol8os:def:248879" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.ol8os:def:248879" version="2" class="compliance">
           <metadata>
             <title>OL08-00-040239 - OL 8 must not forward IPv4 source-routed packets.</title>
             <affected family="unix">
@@ -19612,10 +19390,10 @@ The sysctl --system command will load settings from all system configuration fil
 /etc/sysctl.conf</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244551" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271865" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.ol8os:def:248880" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.ol8os:def:248880" version="2" class="compliance">
           <metadata>
             <title>OL08-00-040240 - OL 8 must not forward IPv6 source-routed packets.</title>
             <affected family="unix">
@@ -19632,10 +19410,10 @@ The sysctl --system command will load settings from all system configuration fil
 /etc/sysctl.conf</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230538" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271879" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.ol8os:def:248881" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.ol8os:def:248881" version="3" class="compliance">
           <metadata>
             <title>OL08-00-040249 - OL 8 must not forward IPv4 source-routed packets by default.</title>
             <affected family="unix">
@@ -19652,10 +19430,10 @@ The sysctl --system command will load settings from all system configuration fil
 /etc/sysctl.conf</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244552" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271870" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.ol8os:def:248882" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.ol8os:def:248882" version="2" class="compliance">
           <metadata>
             <title>OL08-00-040250 - OL 8 must not forward IPv6 source-routed packets by default.</title>
             <affected family="unix">
@@ -19672,10 +19450,10 @@ The sysctl --system command will load settings from all system configuration fil
 /etc/sysctl.conf</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230539" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:248882" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.ol8os:def:248883" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.ol8os:def:248883" version="3" class="compliance">
           <metadata>
             <title>OL08-00-040260 - OL 8 must not enable IPv6 packet forwarding unless the system is a router.</title>
             <affected family="unix">
@@ -19692,10 +19470,10 @@ The sysctl --system command will load settings from all system configuration fil
 /etc/sysctl.conf</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230540" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271880" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.ol8os:def:248884" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.ol8os:def:248884" version="2" class="compliance">
           <metadata>
             <title>OL08-00-040261 - OL 8 must not accept router advertisements on all IPv6 interfaces.</title>
             <affected family="unix">
@@ -19714,10 +19492,10 @@ The sysctl --system command will load settings from all system configuration fil
 /etc/sysctl.conf</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230541" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271877" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.ol8os:def:248885" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.ol8os:def:248885" version="2" class="compliance">
           <metadata>
             <title>OL08-00-040262 - OL 8 must not accept router advertisements on all IPv6 interfaces by default.</title>
             <affected family="unix">
@@ -19736,10 +19514,10 @@ The sysctl --system command will load settings from all system configuration fil
 /etc/sysctl.conf</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230542" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271881" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.ol8os:def:248886" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.ol8os:def:248886" version="2" class="compliance">
           <metadata>
             <title>OL08-00-040270 - OL 8 must not allow interfaces to perform Internet Control Message Protocol (ICMP) redirects by default.</title>
             <affected family="unix">
@@ -19758,10 +19536,10 @@ The sysctl --system command will load settings from all system configuration fil
 /etc/sysctl.conf</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230543" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271876" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.ol8os:def:248887" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.ol8os:def:248887" version="2" class="compliance">
           <metadata>
             <title>OL08-00-040279 - OL 8 must ignore IPv4 Internet Control Message Protocol (ICMP) redirect messages.</title>
             <affected family="unix">
@@ -19778,10 +19556,10 @@ The sysctl --system command will load settings from all system configuration fil
 /etc/sysctl.conf</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244553" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271864" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.ol8os:def:248888" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.ol8os:def:248888" version="2" class="compliance">
           <metadata>
             <title>OL08-00-040280 - OL 8 must ignore IPv6 Internet Control Message Protocol (ICMP) redirect messages.</title>
             <affected family="unix">
@@ -19798,10 +19576,10 @@ The sysctl --system command will load settings from all system configuration fil
 /etc/sysctl.conf</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230544" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271878" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.ol8os:def:248889" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.ol8os:def:248889" version="2" class="compliance">
           <metadata>
             <title>OL08-00-040281 - OL 8 must disable access to the network "bpf" syscall from unprivileged processes.</title>
             <affected family="unix">
@@ -19818,7 +19596,7 @@ The sysctl --system command will load settings from all system configuration fil
 /etc/sysctl.conf</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230545" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271748" />
           </criteria>
         </definition>
         <definition id="oval:mil.disa.stig.ol8os:def:248890" version="1" class="compliance">
@@ -19841,7 +19619,7 @@ The sysctl --system command will load settings from all system configuration fil
             <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230546" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.ol8os:def:248891" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.ol8os:def:248891" version="2" class="compliance">
           <metadata>
             <title>OL08-00-040283 - OL 8 must restrict exposed kernel pointer addresses access.</title>
             <affected family="unix">
@@ -19858,10 +19636,10 @@ The sysctl --system command will load settings from all system configuration fil
 /etc/sysctl.conf</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230547" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257800" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.ol8os:def:248892" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.ol8os:def:248892" version="2" class="compliance">
           <metadata>
             <title>OL08-00-040284 - OL 8 must disable the use of user namespaces.</title>
             <affected family="unix">
@@ -19880,10 +19658,10 @@ The sysctl --system command will load settings from all system configuration fil
 /etc/sysctl.conf</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230548" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271727" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.ol8os:def:248893" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.ol8os:def:248893" version="2" class="compliance">
           <metadata>
             <title>OL08-00-040285 - OL 8 must use reverse path filtering on all IPv4 interfaces.</title>
             <affected family="unix">
@@ -19901,10 +19679,10 @@ The sysctl --system command will load settings from all system configuration fil
 /etc/sysctl.conf</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230549" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271868" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.ol8os:def:248894" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.ol8os:def:248894" version="2" class="compliance">
           <metadata>
             <title>OL08-00-040286 - OL 8 must enable hardening for the Berkeley Packet Filter Just-in-time compiler.</title>
             <affected family="unix">
@@ -19923,7 +19701,7 @@ The sysctl --system command will load settings from all system configuration fil
 /etc/sysctl.conf</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244554" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271768" />
           </criteria>
         </definition>
         <definition id="oval:mil.disa.stig.ol8os:def:248895" version="1" class="compliance">
@@ -19964,7 +19742,7 @@ If the system is being used to perform a network troubleshooting function, the u
             <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230554" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.ol8os:def:248900" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.ol8os:def:248900" version="2" class="compliance">
           <metadata>
             <title>OL08-00-040340 - OL 8 remote X connections for interactive users must be disabled unless to fulfill documented and validated mission requirements.</title>
             <affected family="unix">
@@ -19974,7 +19752,7 @@ If the system is being used to perform a network troubleshooting function, the u
  
 X11 forwarding should be enabled with caution. Users with the ability to bypass file permissions on the remote host (for the user's X11 authorization database) can access the local X11 display through the forwarded connection. An attacker may then be able to perform activities such as keystroke monitoring if the "ForwardX11Trusted" option is also enabled. 
  
-If X11 services are not required for the system's intended function, they should be disabled or restricted as appropriate to the system’s needs.</description>
+If X11 services are not required for the system's intended function, they should be disabled or restricted as appropriate to the system's needs.</description>
           </metadata>
           <criteria>
             <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230555" />
@@ -20016,7 +19794,7 @@ If X11 services are not required for the system's intended function, they should
             <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230558" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.ol8os:def:248904" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.ol8os:def:248904" version="2" class="compliance">
           <metadata>
             <title>OL08-00-040370 - OL 8 must not have the "gssproxy" package installed if not required for operational support.</title>
             <affected family="unix">
@@ -20027,7 +19805,7 @@ If X11 services are not required for the system's intended function, they should
 When an application uses Generic Security Services API (GSSAPI), typically it will have direct access to its security credentials, and all cryptographic operations are performed in the application's process. This is undesirable, but "gssproxy" can help in almost all use cases. It provides privilege separation to applications using the GSSAPI: The gssproxy daemon runs on the system, holds the application's credentials, and performs operations on behalf of the application.</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230559" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257832" />
           </criteria>
         </definition>
         <definition id="oval:mil.disa.stig.ol8os:def:248905" version="1" class="compliance">
@@ -20186,7 +19964,7 @@ By limiting the number of attempts to meet the pwquality module complexity requi
             <extend_definition definition_ref="oval:mil.disa.stig.defs:def:251718" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.ol8os:def:257259" version="2" class="compliance">
+        <definition id="oval:mil.disa.stig.ol8os:def:257259" version="3" class="compliance">
           <metadata>
             <title>OL08-00-020035 - OL 8 must terminate idle user sessions.</title>
             <affected family="unix">
@@ -20195,7 +19973,7 @@ By limiting the number of attempts to meet the pwquality module complexity requi
             <description>Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a management session enabled on the console or console port that has been left unattended.</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258077" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257258" />
           </criteria>
         </definition>
       </definitions>
@@ -20313,32 +20091,12 @@ By limiting the number of attempts to meet the pwquality module complexity requi
           <object object_ref="oval:mil.disa.stig.ind:obj:23026500" />
           <state state_ref="oval:mil.disa.stig.ind:ste:20000021" />
         </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23026701" version="1" check_existence="at_least_one_exists" check="all" comment="fs.protected_symlinks setting in sysctl configuration files is set to 1, and nothing else, and there are no conflicting settings in other files">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23026703" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23026801" version="3" check_existence="at_least_one_exists" check="all" comment="fs.protected_hardlinks setting in /etc/sysctl.d/99-sysctl.conf is set to 1, and nothing else, and there are no conflicting settings in other files">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23026803" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23026801" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23026900" version="3" check_existence="at_least_one_exists" check="all" comment="kernel.dmesg_restrict setting in system sysctl configuration files is set to 1">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23026902" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23027001" version="1" check_existence="at_least_one_exists" check="all" comment="kernel.perf_event_paranoid setting in /etc/sysctl.d/99-*.conf is set to 2, and nothing else, and there are no conflicting settings in other files">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23027003" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000004" />
-        </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23027100" version="1" check_existence="none_exist" check="all" comment="'NOPASSWD' does not exist in /etc/sudoers">
           <object object_ref="oval:mil.disa.stig.ind:obj:23027100" />
         </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23027101" version="1" check_existence="none_exist" check="all" comment="'NOPASSWD' does not exist in /etc/sudoers.d">
           <object object_ref="oval:mil.disa.stig.ind:obj:23027101" />
         </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23028000" version="2" check_existence="at_least_one_exists" check="all" comment="kernel.randomize_va_space setting in admin sysctl configuration files is set to 2">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23028002" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000004" />
-        </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23028100" version="1" check="all" comment="/etc/dnf/dnf.conf: clean_requirements_on_remove is set to True, 1 or yes">
           <object object_ref="oval:mil.disa.stig.ind:obj:23028100" />
         </textfilecontent54_test>
@@ -20378,7 +20136,7 @@ By limiting the number of attempts to meet the pwquality module complexity requi
           <object object_ref="oval:mil.disa.stig.ind:obj:23030001" />
           <state state_ref="oval:mil.disa.stig.ind:ste:2303001" />
         </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23030101" version="1" check_existence="any_exist" check="all" comment="Device files are configured in /etc/fstab to use the nodev option.  Mounts on '/' are ignored.">
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23030101" version="2" check_existence="any_exist" check="all" comment="Device files are configured in /etc/fstab to use the nodev option.  Mounts on '/', and vfat mounts, are ignored.">
           <object object_ref="oval:mil.disa.stig.ind:obj:23030101" />
           <state state_ref="oval:mil.disa.stig.ind:ste:23030100" />
         </textfilecontent54_test>
@@ -20390,10 +20148,6 @@ By limiting the number of attempts to meet the pwquality module complexity requi
           <object object_ref="oval:mil.disa.stig.ind:obj:23030601" />
           <state state_ref="oval:mil.disa.stig.ind:ste:23030600" />
         </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23031100" version="2" check_existence="at_least_one_exists" check="all" comment="kernel.core_pattern setting in sysctl configuration files is set to |/bin/false">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23031102" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23031100" />
-        </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23031300" version="2" check="all" comment="For the global domain, core is set to 0.">
           <object object_ref="oval:mil.disa.stig.ind:obj:23031300" />
           <state state_ref="oval:mil.disa.stig.ind:ste:23031300" />
@@ -20591,12 +20345,6 @@ By limiting the number of attempts to meet the pwquality module complexity requi
           <object object_ref="oval:mil.disa.stig.ind:obj:23038000" />
           <state state_ref="oval:mil.disa.stig.ind:ste:20000016" />
         </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23038100" version="1" check="all" comment="pam_lastlog is configured to show last successful logon">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23038100" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23038101" version="7" check_existence="none_exist" check="none satisfy" comment="pam_lastlog is not used with the silent option">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23038101" />
-        </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23038200" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/ssh/sshd_config:PrintLastLog == yes">
           <object object_ref="oval:mil.disa.stig.ind:obj:23038200" />
           <state state_ref="oval:mil.disa.stig.ind:ste:20000016" />
@@ -21016,64 +20764,6 @@ By limiting the number of attempts to meet the pwquality module complexity requi
           <object object_ref="oval:mil.disa.stig.ind:obj:23053000" />
           <state state_ref="oval:mil.disa.stig.ind:ste:23053000" />
         </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23053500" version="1" check="all" comment="net.ipv6.conf.default.accept_redirects is set to 0 in the sysctl configuration files.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23053502" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23053600" version="2" check_existence="at_least_one_exists" check="all" comment="net.ipv4.conf.all.send_redirects setting in sysctl configuration files is set to 0">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23053602" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23053700" version="1" check="all" comment="net.ipv4.icmp_echo_ignore_broadcasts is set to 1 in the sysctl configuration files.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23053702" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23053801" version="1" check_existence="at_least_one_exists" check="all" comment="net.ipv6.conf.all.accept_source_route setting in /etc/sysctl.d/99-sysctl.conf is set to 0, and nothing else">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23053801" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23053903" version="3" check_existence="at_least_one_exists" check="all" comment="net.ipv6.conf.default.accept_source_route setting in /etc/sysctl.d/99-sysctl.conf is set to 0, and nothing else">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23053903" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23054000" version="4" check_existence="at_least_one_exists" check="all" comment="net.ipv6.conf.all.forwarding setting in sysctl configuration files is set to 0">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23054002" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23054100" version="1" check="all" comment="net.ipv6.conf.all.accept_ra is set to 0 in the sysctl configuration files.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23054102" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23054301" version="2" check="all" comment="net.ipv4.conf.default.send_redirects is set to 0 in the sysctl configuration files.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23054303" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23054401" version="1" check_existence="at_least_one_exists" check="all" comment="net.ipv6.conf.all.accept_redirects setting in sysctl configuration files is set to 0, and nothing else">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23054403" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23054501" version="1" check="all" comment="kernel.unprivileged_bpf_disabled is set to 1, and nothing else, and there are no conflicting settings in other files">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23054501" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23054601" version="1" check="all" comment="kernel.yama.ptrace_scope in sysctl configuration files is set to 1, and nothing else, and there are no conflicting settings in other files">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23054603" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23054701" version="8" check_existence="at_least_one_exists" check="all" state_operator="OR" comment="kernel.kptr_restrict is set to 1 or 2 in the sysctl configuration files, and no conflicting configs exist.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23054703" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23054701" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23054703" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23054801" version="1" check="all" comment="user.max_user_namespaces is set to 0 in the sysctl configuration files.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23054803" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23054900" version="3" check_existence="at_least_one_exists" check="all" state_operator="OR" comment="net.ipv4.conf.all.rp_filter setting in sysctl configuration files is set to 1 or 2">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23054900" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000004" />
-        </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23055001" version="1" check="all" comment="/etc/postfix/main.cf: smtpd_client_restrictions = permit_mynetworks,reject">
           <object object_ref="oval:mil.disa.stig.ind:obj:23055001" />
         </textfilecontent54_test>
@@ -21154,26 +20844,6 @@ By limiting the number of attempts to meet the pwquality module complexity requi
           <object object_ref="oval:mil.disa.stig.ind:obj:24454300" />
           <state state_ref="oval:mil.disa.stig.ind:ste:24454300" />
         </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24455001" version="1" check_existence="at_least_one_exists" check="all" comment="net.ipv4.conf.default.accept_redirects setting in a configuration file in an acceptable directory is set to 0, and nothing else, and no conflicting configurations are in the files">
-          <object object_ref="oval:mil.disa.stig.ind:obj:24455003" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24455100" version="1" check="all" comment="net.ipv4.conf.all.accept_source_route is set to 0 in the sysctl configuration files.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:24455102" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24455201" version="1" check_existence="at_least_one_exists" check="all" comment="net.ipv4.conf.default.accept_source_route setting in acceptable directory is set to 0, and nothing else, and there are no conflicting settings in other files">
-          <object object_ref="oval:mil.disa.stig.ind:obj:24455203" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24455300" version="1" check="all" comment="net.ipv4.conf.all.accept_redirects is set to 0 in the sysctl configuration files.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:24455302" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24455401" version="1" check="all" comment="net.core.bpf_jit_harden is set to 2 in the sysctl configuration files.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:24455401" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000004" />
-        </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24852100" version="1" check_existence="at_least_one_exists" check="all" comment="The OL 8 minor version is supported.">
           <object object_ref="oval:mil.disa.stig.ind:obj:24852100" />
           <state state_ref="oval:mil.disa.stig.ind:ste:20000019" />
@@ -21342,9 +21012,9 @@ By limiting the number of attempts to meet the pwquality module complexity requi
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303803" version="1" check="all" comment="Audit 64-bit invocations of the removexattr system call by root user.">
           <object object_ref="oval:mil.disa.stig.ind:obj:25303803" />
         </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25312001" version="1" check_existence="at_least_one_exists" check="all" comment="net.ipv6.conf.default.accept_ra setting in the sysctl configuration files is set to 0, and nothing else">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25312003" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25725800" version="1" check="all" comment="The system terminates idle user sessions.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25725800" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25725800" />
         </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25785400" version="1" check_existence="at_least_one_exists" check="all" comment="NFS mounts are present">
           <object object_ref="oval:mil.disa.stig.ind:obj:25785400" />
@@ -21375,10 +21045,6 @@ By limiting the number of attempts to meet the pwquality module complexity requi
           <object object_ref="oval:mil.disa.stig.ind:obj:25804501" />
           <state state_ref="oval:mil.disa.stig.ind:ste:25804500" />
         </variable_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25807700" version="1" check="all" comment="The system terminates idle user sessions.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25807700" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25807700" />
-        </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25808600" version="1" check_existence="none_exist" check="all" comment="'!authenticate' does not exist in /etc/sudoers">
           <object object_ref="oval:mil.disa.stig.ind:obj:25808600" />
         </textfilecontent54_test>
@@ -21484,7 +21150,7 @@ By limiting the number of attempts to meet the pwquality module complexity requi
           <object object_ref="oval:mil.disa.stig.linux:obj:23030000" />
           <state state_ref="oval:mil.disa.stig.linux:ste:20000002" />
         </partition_test>
-        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23030100" version="1" check_existence="any_exist" check="all" comment="Device files are mounted with the nodev option.  Mounts on '/' are ignored.">
+        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23030100" version="2" check_existence="any_exist" check="all" comment="Device files are mounted with the nodev option.  Mounts on '/', and vfat mounts, are ignored.">
           <object object_ref="oval:mil.disa.stig.linux:obj:23030100" />
           <state state_ref="oval:mil.disa.stig.linux:ste:20000001" />
         </partition_test>
@@ -21719,22 +21385,6 @@ By limiting the number of attempts to meet the pwquality module complexity requi
         <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23026200" version="2" check_existence="none_exist" check="all" comment="The operating system library files are group owned by root">
           <object object_ref="oval:mil.disa.stig.unix:obj:23026200" />
         </file_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23026700" version="1" check_existence="all_exist" check="all" comment="fs.protected_symlinks setting in kernel is set to 1">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23026700" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
-        </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23026800" version="1" check_existence="all_exist" check="all" comment="fs.protected_hardlinks setting in kernel is set to 1">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23026800" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:23026800" />
-        </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23026900" version="2" check_existence="all_exist" check="all" comment="kernel.dmesg_restrict setting in kernel is set to 1">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23026900" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
-        </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23027000" version="1" check_existence="all_exist" check="all" comment="kernel.perf_event_paranoid setting in kernel is set to 2">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23027000" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000011" />
-        </sysctl_test>
         <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23028000" version="2" check_existence="all_exist" check="all" comment="kernel.randomize_va_space setting in kernel is set to 2">
           <object object_ref="oval:mil.disa.stig.unix:obj:23028000" />
           <state state_ref="oval:mil.disa.stig.unix:ste:20000011" />
@@ -21853,18 +21503,10 @@ By limiting the number of attempts to meet the pwquality module complexity requi
           <object object_ref="oval:mil.disa.stig.unix:obj:23053800" />
           <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
         </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23053902" version="1" check_existence="all_exist" check="all" comment="net.ipv6.conf.default.accept_source_route setting in kernel is set to 0">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23053904" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
-        </sysctl_test>
         <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23054000" version="1" check_existence="all_exist" check="all" comment="net.ipv6.conf.all.forwarding setting in kernel is set to 0">
           <object object_ref="oval:mil.disa.stig.unix:obj:23054000" />
           <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
         </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23054100" version="1" check="all" comment="net.ipv6.conf.all.accept_ra is set to 0 in kernel">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23054100" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
-        </sysctl_test>
         <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23054300" version="2" check="all" comment="net.ipv4.conf.default.send_redirects is set to 0 in kernel">
           <object object_ref="oval:mil.disa.stig.unix:obj:23054300" />
           <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
@@ -21881,20 +21523,10 @@ By limiting the number of attempts to meet the pwquality module complexity requi
           <object object_ref="oval:mil.disa.stig.unix:obj:23054600" />
           <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
         </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23054700" version="5" check="all" state_operator="OR" comment="kernel.kptr_restrict is set to 1 or 2 in kernel">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23054700" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:23054700" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:23054702" />
-        </sysctl_test>
         <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23054800" version="1" check="all" comment="user.max_user_namespaces is set to 0 in kernel">
           <object object_ref="oval:mil.disa.stig.unix:obj:23054800" />
           <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
         </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23054900" version="3" check_existence="all_exist" check="all" state_operator="OR" comment="net.ipv4.conf.all.rp_filter setting in kernel is set to 1 or 2">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23054900" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000011" />
-        </sysctl_test>
         <interface_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23055400" version="1" check_existence="any_exist" check="all" comment="no network interfaces are in promiscuous mode">
           <object object_ref="oval:mil.disa.stig.unix:obj:23055400" />
           <state state_ref="oval:mil.disa.stig.unix:ste:23055400" />
@@ -21903,10 +21535,6 @@ By limiting the number of attempts to meet the pwquality module complexity requi
           <object object_ref="oval:mil.disa.stig.unix:obj:24455000" />
           <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
         </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:24455100" version="1" check="all" comment="net.ipv4.conf.all.accept_source_route is set to 0 in kernel">
-          <object object_ref="oval:mil.disa.stig.unix:obj:24455100" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
-        </sysctl_test>
         <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:24455200" version="1" check_existence="all_exist" check="all" comment="net.ipv4.conf.default.accept_source_route setting in kernel is set to 0">
           <object object_ref="oval:mil.disa.stig.unix:obj:24455200" />
           <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
@@ -21919,6 +21547,22 @@ By limiting the number of attempts to meet the pwquality module complexity requi
           <object object_ref="oval:mil.disa.stig.unix:obj:24455400" />
           <state state_ref="oval:mil.disa.stig.unix:ste:20000011" />
         </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:24857700" version="1" check_existence="all_exist" check="all" comment="fs.protected_symlinks setting in kernel is set to 1">
+          <object object_ref="oval:mil.disa.stig.unix:obj:24857700" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
+        </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:24857800" version="2" check_existence="all_exist" check="all" comment="fs.protected_hardlinks setting in kernel is set to 1">
+          <object object_ref="oval:mil.disa.stig.unix:obj:24857800" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
+        </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:24857900" version="1" check_existence="all_exist" check="all" comment="kernel.dmesg_restrict setting in kernel is set to 1">
+          <object object_ref="oval:mil.disa.stig.unix:obj:24857900" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
+        </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:24858000" version="1" check_existence="all_exist" check="all" comment="kernel.perf_event_paranoid setting in kernel is set to 2">
+          <object object_ref="oval:mil.disa.stig.unix:obj:24858000" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000011" />
+        </sysctl_test>
         <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:24870500" version="2" check="all" comment="/usr/bin/lastlog has mode 0750 or less permissive.">
           <object object_ref="oval:mil.disa.stig.unix:obj:24870500" />
           <state state_ref="oval:mil.disa.stig.unix:ste:20000022" />
@@ -21931,6 +21575,10 @@ By limiting the number of attempts to meet the pwquality module complexity requi
           <object object_ref="oval:mil.disa.stig.unix:obj:24870500" />
           <state state_ref="oval:mil.disa.stig.unix:ste:20000006" />
         </file_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:24888202" version="1" check_existence="all_exist" check="all" comment="net.ipv6.conf.default.accept_source_route setting in kernel is set to 0">
+          <object object_ref="oval:mil.disa.stig.unix:obj:24888204" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
+        </sysctl_test>
         <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25170700" version="3" check="all" comment="Library directories have mode 755 or less permissive.">
           <object object_ref="oval:mil.disa.stig.unix:obj:25170800" />
           <state state_ref="oval:mil.disa.stig.unix:ste:20000003" />
@@ -21951,10 +21599,22 @@ By limiting the number of attempts to meet the pwquality module complexity requi
           <object object_ref="oval:mil.disa.stig.unix:obj:25312000" />
           <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
         </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25780000" version="2" check="all" comment="kernel.kptr_restrict is set to 1">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23054700" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
+        </sysctl_test>
         <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25789000" version="2" check_existence="any_exist" check="all" comment="All local interactive user home directories are 0750 or less">
           <object object_ref="oval:mil.disa.stig.unix:obj:25789001" />
           <state state_ref="oval:mil.disa.stig.unix:ste:20000022" />
         </file_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25795900" version="2" check_existence="all_exist" check="all" comment="net.ipv4.conf.all.accept_source_routesetting in kernel is set to 0">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25795900" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
+        </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25797100" version="2" check_existence="all_exist" check="all" comment="net.ipv6.conf.all.accept_ra setting in kernel is set to 0">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25797100" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
+        </sysctl_test>
         <password_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25805100" version="1" check_existence="all_exist" check="all" comment="check for users without a home directory not defined">
           <object object_ref="oval:mil.disa.stig.unix:obj:20000017" />
           <state state_ref="oval:mil.disa.stig.unix:ste:20000016" />
@@ -21978,6 +21638,10 @@ By limiting the number of attempts to meet the pwquality module complexity requi
         <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:26048704" version="1" check_existence="none_exist" check="all" comment="no operating system library regular files are world-writable">
           <object object_ref="oval:mil.disa.stig.unix:obj:26048704" />
         </file_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:27186800" version="1" check_existence="all_exist" check="all" comment="net.ipv4.conf.all.rp_filter setting in kernel is set to 1">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23054900" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
+        </sysctl_test>
       </tests>
       <objects>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:230345" version="1">
@@ -22221,107 +21885,22 @@ By limiting the number of attempts to meet the pwquality module complexity requi
           <pattern operation="pattern match">^\s*localpkg_gpgcheck\s*=\s*(\w+)\b$</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026701" version="1" comment="other sysctl configuration files">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*fs\.protected_symlinks\s*=\s*(\d+)\s*$</pattern>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23027100" version="1">
+          <behaviors ignore_case="true" />
+          <filepath>/etc/sudoers</filepath>
+          <pattern operation="pattern match">^(?!#).*\s+NOPASSWD.*$</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026702" version="1" comment="/etc/sysctl.conf">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*fs\.protected_symlinks\s*=\s*(\d+)\s*$</pattern>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23027101" version="1">
+          <behaviors ignore_case="true" recurse_direction="down" />
+          <path>/etc/sudoers.d</path>
+          <filename operation="pattern match">^.*$</filename>
+          <pattern operation="pattern match">^(?!#).*\s+NOPASSWD.*$</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026703" version="1" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23026701</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23026702</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026801" version="3" comment="/etc/sysctl.d/99-sysctl.conf">
-          <path var_ref="oval:mil.disa.stig.ind:var:23026800" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*fs\.protected_hardlinks\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026802" version="2" comment="/etc/sysctl.conf">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*fs\.protected_hardlinks\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026803" version="1" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23026801</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23026802</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026900" version="3">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*kernel\.dmesg_restrict\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026901" version="4">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^\s*kernel\.dmesg_restrict\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026902" version="1" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23026900</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23026901</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23027001" version="1" comment="other sysctl configuration files">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*kernel\.perf_event_paranoid\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23027002" version="1" comment="/etc/sysctl.conf">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*kernel\.perf_event_paranoid\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23027003" version="1" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23027001</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23027002</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23027100" version="1">
-          <behaviors ignore_case="true" />
-          <filepath>/etc/sudoers</filepath>
-          <pattern operation="pattern match">^(?!#).*\s+NOPASSWD.*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23027101" version="1">
-          <behaviors ignore_case="true" recurse_direction="down" />
-          <path>/etc/sudoers.d</path>
-          <filename operation="pattern match">^.*$</filename>
-          <pattern operation="pattern match">^(?!#).*\s+NOPASSWD.*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23028000" version="2">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*kernel\.randomize_va_space\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23028001" version="4" comment="system sysctl configuration files - kernel.randomize_va_space">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^\s*kernel\.randomize_va_space\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23028002" version="1" comment="all sysctl configuration files - kernel.randomize_va_space">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23028000</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23028001</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23028100" version="1">
-          <filepath>/etc/dnf/dnf.conf</filepath>
-          <pattern operation="pattern match">^[ \t]*clean_requirements_on_remove[ \t]*=[ \t]*(?:True|1|yes)[ \t]*$</pattern>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23028100" version="1">
+          <filepath>/etc/dnf/dnf.conf</filepath>
+          <pattern operation="pattern match">^[ \t]*clean_requirements_on_remove[ \t]*=[ \t]*(?:True|1|yes)[ \t]*$</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23028200" version="1">
@@ -22404,9 +21983,9 @@ By limiting the number of attempts to meet the pwquality module complexity requi
           <pattern operation="pattern match">^\s*[^#\s]+\s+/boot\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
           <instance datatype="int">1</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23030101" version="1">
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23030101" version="2">
           <filepath>/etc/fstab</filepath>
-          <pattern operation="pattern match">^\s*/dev\S*\s+/\S+\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
+          <pattern operation="pattern match">^\s*/dev\S*\s+/\S+\s+(?!vfat\s+)\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23030600" version="1">
@@ -22419,23 +21998,6 @@ By limiting the number of attempts to meet the pwquality module complexity requi
           <pattern operation="pattern match">^\s*\[?[\.\w:-]+\]?:[/\w-]+\s+[/\w-]+\s+nfs[4]?\s+(.*)$</pattern>
           <instance datatype="int" operation="not equal">0</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031100" version="2">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*kernel\.core_pattern\s*=\s*(.+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031101" version="4">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^\s*kernel\.core_pattern\s*=\s*(.+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031102" version="1" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23031100</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23031101</object_reference>
-          </set>
-        </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031300" version="1">
           <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
             <object_reference>oval:mil.disa.stig.ind:obj:23031302</object_reference>
@@ -22899,16 +22461,6 @@ By limiting the number of attempts to meet the pwquality module complexity requi
           <pattern operation="pattern match">^(?i)\s*PermitEmptyPasswords\s+(\w+)$</pattern>
           <instance datatype="int">1</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23038100" version="3">
-          <filepath datatype="string">/etc/pam.d/postlogin</filepath>
-          <pattern operation="pattern match">^\s*session\s+.+\s+pam_lastlog\.so\s+(?:\w+\s+)*showfailed\b\s*(?:\w+\b\s*)*\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23038101" version="5">
-          <filepath datatype="string">/etc/pam.d/postlogin</filepath>
-          <pattern operation="pattern match">^\s*session\s+.+\s+pam_lastlog\.so\s+(?:\w+\s+)*silent\b\s*(?:\w+\b\s*)*\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23038200" version="1">
           <filepath>/etc/ssh/sshd_config</filepath>
           <pattern operation="pattern match">^\s*(?i)PrintLastLog(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
@@ -23591,244 +23143,6 @@ By limiting the number of attempts to meet the pwquality module complexity requi
           <pattern operation="pattern match">^\s*\[org/gnome/settings-daemon/plugins/media-keys\]\s+[^\[\]]*^\s*logout=(\S+)\s*$</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23053500" version="1" comment="Setting for net.ipv6.conf.default.accept_redirects in sysctl.d directories.">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">^\s*net.ipv6.conf.default.accept_redirects\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23053501" version="1" comment="Setting for net.ipv6.conf.default.accept_redirects in /etc/sysctl.conf.">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*net.ipv6.conf.default.accept_redirects\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23053502" version="1" comment="Setting for net.ipv6.conf.default.accept_redirects in all sysctl configuration files.">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <object_reference>oval:mil.disa.stig.ind:obj:23053500</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23053501</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23053600" version="2">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*net\.ipv4\.conf\.all\.send_redirects\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23053601" version="3">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^\s*net\.ipv4\.conf\.all\.send_redirects\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23053602" version="1" comment="all sysctl configuration files - net.ipv4.conf.all.send_redirects ">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23053600</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23053601</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23053700" version="1" comment="Setting for net.ipv4.icmp_echo_ignore_broadcasts in sysctl.d directories.">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">^\s*net\.ipv4\.icmp_echo_ignore_broadcasts\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23053701" version="1" comment="Setting for net.ipv4.icmp_echo_ignore_broadcasts in /etc/sysctl.conf.">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*net\.ipv4\.icmp_echo_ignore_broadcasts\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23053702" version="1" comment="Setting for net.ipv4.icmp_echo_ignore_broadcasts in all sysctl configuration files.">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <object_reference>oval:mil.disa.stig.ind:obj:23053700</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23053701</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23053801" version="2" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23053802</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23053803</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23053802" version="1" comment="other sysctl configuration files">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">(?:^|.*\n)\s*net.ipv6.conf.all.accept_source_route\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23053803" version="1" comment="/etc/sysctl.conf">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">(?:^|.*\n)\s*net.ipv6.conf.all.accept_source_route\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23053902" version="2" comment="/etc/sysctl.conf">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">(?:^|.*\n)\s*net\.ipv6\.conf\.default\.accept_source_route\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23053903" version="2" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23053902</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23053905</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23053905" version="3" comment="Check the sysctl configuration files for net.ipv6.conf.default.accept_source_route">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">(?:^|.*\n)\s*net\.ipv6\.conf\.default\.accept_source_route\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054000" version="2">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*net\.ipv6\.conf\.all\.forwarding\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054001" version="2">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^\s*net\.ipv6\.conf\.all\.forwarding\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054002" version="1" comment="all sysctl configuration files - net.ipv6.conf.all.forwarding ">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23054000</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23054001</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054100" version="1" comment="Setting for net.ipv6.conf.all.accept_ra in sysctl.d directories.">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">^\s*net\.ipv6\.conf\.all\.accept_ra\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054101" version="1" comment="Setting for net.ipv6.conf.all.accept_ra in /etc/sysctl.conf.">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*net\.ipv6\.conf\.all\.accept_ra\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054102" version="1" comment="Setting for net.ipv6.conf.all.accept_ra in all sysctl configuration files.">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <object_reference>oval:mil.disa.stig.ind:obj:23054100</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23054101</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054301" version="3">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="only one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">^\s*net\.ipv4\.conf\.default\.send_redirects\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054302" version="2">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*net\.ipv4\.conf\.default\.send_redirects\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054303" version="2">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23054301</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23054302</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054401" version="1" comment="Search other sysctl configuration files for net.ipv6.conf.all.accept_redirects">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf</filename>
-          <pattern operation="pattern match">(?:^|.*\n)\s*net\.ipv6\.conf\.all\.accept_redirects\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054402" version="1" comment="/etc/sysctl.conf">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">(?:^|.*\n)\s*net\.ipv6\.conf\.all\.accept_redirects\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054403" version="1" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23054401</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23054402</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054501" version="1" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23054502</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23054503</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054502" version="1">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*kernel\.unprivileged_bpf_disabled\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054503" version="1">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*kernel\.unprivileged_bpf_disabled\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054601" version="11">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*kernel\.yama\.ptrace_scope\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054602" version="1" comment="other sysctl configuration files">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*kernel\.yama\.ptrace_scope\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054603" version="1" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23054601</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23054602</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054701" version="7">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="only one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">^\s*kernel\.kptr_restrict\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054702" version="2">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*kernel\.kptr_restrict\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054703" version="2">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23054701</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23054702</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054801" version="1">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="only one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">^\s*user\.max_user_namespaces\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054802" version="1">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*user\.max_user_namespaces\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054803" version="1">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23054801</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23054802</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054900" version="3" comment="system sysctl configuration files - net.ipv4.conf.all.rp_filter">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23054901</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23054902</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054901" version="4">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^\s*net\.ipv4\.conf\.all\.rp_filter\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054902" version="2">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*net\.ipv4\.conf\.all\.rp_filter\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23055001" version="1">
           <filepath>/etc/postfix/main.cf</filepath>
           <pattern operation="pattern match">^smtpd_client_restrictions[ \t]*=[ \t]*permit_mynetworks[, \t]+reject[ \t]*$</pattern>
@@ -24001,91 +23315,6 @@ By limiting the number of attempts to meet the pwquality module complexity requi
           <pattern operation="pattern match">(?i)^\s*space_left_action\s*=\s*(\w+)\s*(?:#.*)?$</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24455001" version="1" comment="other sysctl configuration files">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*net\.ipv4\.conf\.default\.accept_redirects\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24455002" version="1" comment="/etc/sysctl.conf">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*net\.ipv4\.conf\.default\.accept_redirects\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24455003" version="1" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:24455001</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:24455002</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24455100" version="1" comment="Setting for net.ipv4.conf.all.accept_source_route in sysctl.d directories.">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">^\s*net\.ipv4\.conf\.all\.accept_source_route\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24455101" version="1" comment="Setting for net.ipv4.conf.all.accept_source_route in /etc/sysctl.conf.">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*net\.ipv4\.conf\.all\.accept_source_route\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24455102" version="1" comment="Setting for net.ipv4.conf.all.accept_source_route in all sysctl configuration files.">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <object_reference>oval:mil.disa.stig.ind:obj:24455100</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:24455101</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24455201" version="1" comment="other sysctl configuration files">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*net\.ipv4\.conf\.default\.accept_source_route\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24455202" version="1" comment="/etc/sysctl.conf">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">(?:^|.*\n)\s*net\.ipv4\.conf\.default\.accept_source_route\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24455203" version="1" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:24455201</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:24455202</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24455300" version="1" comment="Setting for net.ipv4.conf.all.accept_redirects in sysctl.d directories.">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">^\s*net\.ipv4\.conf\.all\.accept_redirects\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24455301" version="1" comment="Setting for net.ipv4.conf.all.accept_redirects in /etc/sysctl.conf.">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*net\.ipv4\.conf\.all\.accept_redirects\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24455302" version="1" comment="Setting for net.ipv4.conf.all.accept_redirects in all sysctl configuration files.">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <object_reference>oval:mil.disa.stig.ind:obj:24455300</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:24455301</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24455401" version="1">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:24455402</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:24455403</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24455402" version="1">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="only one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">^\s*net\.core\.bpf_jit_harden\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24455403" version="1">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*net\.core\.bpf_jit_harden\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24852100" version="1">
           <path>/etc</path>
           <filename>oracle-release</filename>
@@ -24268,23 +23497,11 @@ By limiting the number of attempts to meet the pwquality module complexity requi
           <pattern operation="pattern match" var_ref="oval:mil.disa.stig.defs:var:25303803" />
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25312001" version="1" comment="other sysctl configuration files">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*net\.ipv6\.conf\.default\.accept_ra\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25312002" version="1" comment="/etc/sysctl.conf">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*net\.ipv6\.conf\.default\.accept_ra\s*=\s*(\d+)\s*$</pattern>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25725800" version="3">
+          <filepath>/etc/systemd/logind.conf</filepath>
+          <pattern operation="pattern match">^\s*StopIdleSessionSec\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25312003" version="1" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:25312001</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:25312002</object_reference>
-          </set>
-        </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25785400" version="2" comment="/etc/fstab, uncommented, nfs, capturing options">
           <filepath>/etc/fstab</filepath>
           <pattern operation="pattern match">^\s*[^#\s][^\s]*\s+[^\s]+\s+nfs[^\s]*\s+([^\s]+)</pattern>
@@ -24338,11 +23555,6 @@ By limiting the number of attempts to meet the pwquality module complexity requi
         <variable_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25804501" version="1" comment="count of passwd entries">
           <var_ref>oval:mil.disa.stig.defs:var:25804500</var_ref>
         </variable_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25807700" version="3">
-          <filepath>/etc/systemd/logind.conf</filepath>
-          <pattern operation="pattern match">^\s*StopIdleSessionSec\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25808600" version="4">
           <behaviors ignore_case="true" />
           <filepath>/etc/sudoers</filepath>
@@ -24456,8 +23668,9 @@ By limiting the number of attempts to meet the pwquality module complexity requi
         <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23030000" version="1">
           <mount_point>/boot</mount_point>
         </partition_object>
-        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23030100" version="1">
+        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23030100" version="2">
           <mount_point operation="pattern match">^/\S+$</mount_point>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="exclude">oval:mil.disa.stig.linux:ste:23030103</filter>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.linux:ste:23030102</filter>
         </partition_object>
         <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23031200" version="1" comment="systemd-coredump.socket LoadState">
@@ -24660,32 +23873,20 @@ By limiting the number of attempts to meet the pwquality module complexity requi
             <filter>oval:mil.disa.stig.unix:ste:23025800</filter>
           </set>
         </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23026100" version="4">
-          <behaviors recurse="directories" recurse_direction="down" />
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23026100" version="5">
+          <behaviors recurse_direction="down" />
           <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
-          <filename operation="pattern match">\.so(\.\d+)*$</filename>
+          <filename operation="pattern match">\.so(\S+)*$</filename>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.stig.unix:ste:20000005</filter>
         </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23026200" version="2">
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23026200" version="3">
           <behaviors recurse_direction="down" />
           <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
-          <filename operation="pattern match">\.so(\.\d+)*$</filename>
+          <filename operation="pattern match">(\.so\S*)$</filename>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.stig.unix:ste:20000006</filter>
         </file_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23026700" version="1">
-          <name>fs.protected_symlinks</name>
-        </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23026800" version="1">
-          <name>fs.protected_hardlinks</name>
-        </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23026900" version="1">
-          <name>kernel.dmesg_restrict</name>
-        </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23027000" version="1">
-          <name>kernel.perf_event_paranoid</name>
-        </sysctl_object>
         <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23028000" version="1">
           <name>kernel.randomize_va_space</name>
         </sysctl_object>
@@ -24800,15 +24001,9 @@ By limiting the number of attempts to meet the pwquality module complexity requi
         <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23053800" version="1">
           <name>net.ipv6.conf.all.accept_source_route</name>
         </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23053904" version="1">
-          <name>net.ipv6.conf.default.accept_source_route</name>
-        </sysctl_object>
         <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23054000" version="1">
           <name>net.ipv6.conf.all.forwarding</name>
         </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23054100" version="1">
-          <name>net.ipv6.conf.all.accept_ra</name>
-        </sysctl_object>
         <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23054300" version="2">
           <name>net.ipv4.conf.default.send_redirects</name>
         </sysctl_object>
@@ -24840,9 +24035,6 @@ By limiting the number of attempts to meet the pwquality module complexity requi
         <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:24455000" version="1">
           <name>net.ipv4.conf.default.accept_redirects</name>
         </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:24455100" version="1">
-          <name>net.ipv4.conf.all.accept_source_route</name>
-        </sysctl_object>
         <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:24455200" version="1">
           <name>net.ipv4.conf.default.accept_source_route</name>
         </sysctl_object>
@@ -24852,9 +24044,24 @@ By limiting the number of attempts to meet the pwquality module complexity requi
         <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:24455400" version="1">
           <name>net.core.bpf_jit_harden</name>
         </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:24857700" version="1">
+          <name>fs.protected_symlinks</name>
+        </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:24857800" version="1">
+          <name>fs.protected_hardlinks</name>
+        </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:24857900" version="1">
+          <name>kernel.dmesg_restrict</name>
+        </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:24858000" version="1">
+          <name>kernel.perf_event_paranoid</name>
+        </sysctl_object>
         <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:24870500" version="1">
           <filepath>/usr/bin/lastlog</filepath>
         </file_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:24888204" version="1">
+          <name>net.ipv6.conf.default.accept_source_route</name>
+        </sysctl_object>
         <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25170800" version="3" comment="All system-wide library directories">
           <behaviors recurse_direction="down" />
           <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
@@ -24883,42 +24090,48 @@ By limiting the number of attempts to meet the pwquality module complexity requi
           <path var_ref="oval:mil.disa.stig.defs:var:25789000" var_check="at least one" />
           <filename xsi:nil="true" />
         </file_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25795900" version="1">
+          <name>net.ipv4.conf.all.accept_source_route</name>
+        </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25797100" version="1">
+          <name>net.ipv6.conf.all.accept_ra</name>
+        </sysctl_object>
         <password_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25804500" version="1" comment="Interactive Users">
           <username operation="pattern match">.*</username>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:25804500</filter>
         </password_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048700" version="2">
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048700" version="3">
           <behaviors recurse_direction="down" />
           <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
-          <filename operation="pattern match">\.so</filename>
+          <filename operation="pattern match">\.so\S*$</filename>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:26048700</filter>
         </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048701" version="2">
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048701" version="3">
           <behaviors recurse_direction="down" />
           <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
-          <filename operation="pattern match">\.so</filename>
+          <filename operation="pattern match">\.so\S*$</filename>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:26048701</filter>
         </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048702" version="2">
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048702" version="3">
           <behaviors recurse_direction="down" />
           <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
-          <filename operation="pattern match">\.so</filename>
+          <filename operation="pattern match">\.so\S*$</filename>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:26048702</filter>
         </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048703" version="2">
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048703" version="3">
           <behaviors recurse_direction="down" />
           <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
-          <filename operation="pattern match">\.so</filename>
+          <filename operation="pattern match">\.so\S*$</filename>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:26048703</filter>
         </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048704" version="2">
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048704" version="3">
           <behaviors recurse_direction="down" />
           <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
-          <filename operation="pattern match">\.so</filename>
+          <filename operation="pattern match">\.so\S*$</filename>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:26048704</filter>
         </file_object>
@@ -24945,9 +24158,6 @@ By limiting the number of attempts to meet the pwquality module complexity requi
         <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000003" version="1">
           <subexpression datatype="int" operation="equals">1</subexpression>
         </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000004" version="1">
-          <subexpression datatype="int" operation="equals">2</subexpression>
-        </textfilecontent54_state>
         <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000014" version="1">
           <subexpression datatype="string" operation="equals">none</subexpression>
         </textfilecontent54_state>
@@ -25017,9 +24227,6 @@ By limiting the number of attempts to meet the pwquality module complexity requi
         <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23026401" version="1">
           <text datatype="string" operation="pattern match">\n\s*gpgcheck\s*=\s*(False|0|no)\s*(\n|$)</text>
         </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23026801" version="1">
-          <subexpression datatype="int" operation="equals">1</subexpression>
-        </textfilecontent54_state>
         <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23028200" version="1">
           <subexpression>targeted</subexpression>
         </textfilecontent54_state>
@@ -25029,9 +24236,6 @@ By limiting the number of attempts to meet the pwquality module complexity requi
         <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23030600" version="1">
           <subexpression operation="pattern match">^.*noexec.*$</subexpression>
         </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23031100" version="1">
-          <subexpression datatype="string" operation="equals">|/bin/false</subexpression>
-        </textfilecontent54_state>
         <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23031300" version="1">
           <subexpression datatype="int">0</subexpression>
         </textfilecontent54_state>
@@ -25146,12 +24350,6 @@ By limiting the number of attempts to meet the pwquality module complexity requi
         <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23053000" version="1">
           <subexpression>''</subexpression>
         </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23054701" version="2">
-          <subexpression datatype="int">1</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23054703" version="1">
-          <subexpression datatype="int">2</subexpression>
-        </textfilecontent54_state>
         <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23764200" version="1">
           <subexpression datatype="string" operation="equals">/etc/sudoers.d</subexpression>
         </textfilecontent54_state>
@@ -25164,6 +24362,9 @@ By limiting the number of attempts to meet the pwquality module complexity requi
         <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25171300" version="1">
           <subexpression datatype="string" operation="pattern match">^pam_pwquality.so(\s|$)</subexpression>
         </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25725800" version="2">
+          <subexpression datatype="int">600</subexpression>
+        </textfilecontent54_state>
         <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25798801" version="1">
           <subexpression datatype="string" operation="equals">/etc/ssh/sshd_config.d/*.conf</subexpression>
         </textfilecontent54_state>
@@ -25176,9 +24377,6 @@ By limiting the number of attempts to meet the pwquality module complexity requi
         <variable_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25804500" version="1" comment="count of passwd UIDs">
           <value datatype="int" var_ref="oval:mil.disa.stig.defs:var:25804501" />
         </variable_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25807700" version="1">
-          <subexpression datatype="int">900</subexpression>
-        </textfilecontent54_state>
         <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25814600" version="1">
           <subexpression datatype="string" operation="equals">x509/name</subexpression>
         </textfilecontent54_state>
@@ -25243,6 +24441,9 @@ By limiting the number of attempts to meet the pwquality module complexity requi
         <partition_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:23030102" version="1">
           <device operation="pattern match">^/dev\S*$</device>
         </partition_state>
+        <partition_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:23030103" version="1">
+          <fs_type>vfat</fs_type>
+        </partition_state>
         <partition_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:23050900" version="1">
           <mount_options entity_check="at least one">nosuid</mount_options>
         </partition_state>
@@ -25354,9 +24555,6 @@ By limiting the number of attempts to meet the pwquality module complexity requi
         <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23025900" version="1">
           <group_id datatype="int" operation="less than">1000</group_id>
         </file_state>
-        <sysctl_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23026800" version="1">
-          <value datatype="int" operation="equals">1</value>
-        </sysctl_state>
         <sysctl_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23031100" version="1">
           <value datatype="string" operation="equals">|/bin/false</value>
         </sysctl_state>
@@ -25401,12 +24599,6 @@ By limiting the number of attempts to meet the pwquality module complexity requi
         <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23053400" version="1">
           <user_id datatype="int" operation="not equal">0</user_id>
         </password_state>
-        <sysctl_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23054700" version="2">
-          <value datatype="int">1</value>
-        </sysctl_state>
-        <sysctl_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23054702" version="1">
-          <value datatype="int">2</value>
-        </sysctl_state>
         <interface_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23055400" version="1" comment="Interface is not in PROMISC mode">
           <flag entity_check="none satisfy" operation="pattern match">(^|\s)PROMISC(\s|$)</flag>
         </interface_state>
@@ -25675,13 +24867,6 @@ By limiting the number of attempts to meet the pwquality module complexity requi
             </unique>
           </count>
         </local_variable>
-        <constant_variable id="oval:mil.disa.stig.ind:var:23026800" version="1" datatype="string" comment="other sysctl configuration file locations">
-          <value>/etc/sysctl.d</value>
-          <value>/run/sysctl.d</value>
-          <value>/lib/sysctl.d</value>
-          <value>/usr/lib/sysctl.d</value>
-          <value>/usr/local/lib/sysctl.d</value>
-        </constant_variable>
         <local_variable id="oval:mil.disa.stig.ind:var:23031600" version="1" datatype="int" comment="count of unique name servers">
           <count>
             <unique>
@@ -25692,12 +24877,12 @@ By limiting the number of attempts to meet the pwquality module complexity requi
       </variables>
     </oval_definitions>
   </component>
-  <component id="scap_mil.disa.stig_comp_U_Oracle_Linux_8_V2R6_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" timestamp="2025-09-25T11:53:18.738-04:00">
+  <component id="scap_mil.disa.stig_comp_U_Oracle_Linux_8_V2R7_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" timestamp="2026-01-05T14:25:57.773-05:00">
     <oval_definitions xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5">
       <generator>
-        <oval:product_name>Security Content Tool 1.6.0</oval:product_name>
+        <oval:product_name>Security Content Tool 1.7.0</oval:product_name>
         <oval:schema_version>5.11</oval:schema_version>
-        <oval:timestamp>2025-09-25T11:53:18</oval:timestamp>
+        <oval:timestamp>2026-01-05T02:25:57</oval:timestamp>
       </generator>
       <definitions>
         <definition id="oval:mil.disa.stig.ol8os:def:1" version="1" class="inventory">
diff --git a/shared/references/disa-stig-ol9-v1r1-xccdf-scap.xml b/shared/references/disa-stig-ol9-v1r2-xccdf-scap.xml
similarity index 95%
rename from shared/references/disa-stig-ol9-v1r1-xccdf-scap.xml
rename to shared/references/disa-stig-ol9-v1r2-xccdf-scap.xml
index 98cca171fba1..b703b4830c72 100644
--- a/shared/references/disa-stig-ol9-v1r1-xccdf-scap.xml
+++ b/shared/references/disa-stig-ol9-v1r2-xccdf-scap.xml
@@ -1,32977 +1,32606 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<data-stream-collection xmlns="http://scap.nist.gov/schema/scap/source/1.2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" id="scap_mil.disa.stig_collection_U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark" schematron-version="1.3" xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2 http://scap.nist.gov/schema/xccdf/1.2/xccdf_1.2.xsd http://cpe.mitre.org/dictionary/2.0 http://scap.nist.gov/schema/cpe/2.3/cpe-dictionary_2.3.xsd http://cpe.mitre.org/language/2.0 https://csrc.nist.gov/schema/cpe/2.3/cpe-language_2.3.xsd http://oval.mitre.org/XMLSchema/oval-common-5 https://github.com/OVALProject/Language/tree/5.11.2/schemas/oval-common-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5 https://github.com/OVALProject/Language/tree/5.11.2/schemas/oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#independent https://github.com/OVALProject/Language/tree/5.11.2/schemas/independent-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#linux https://github.com/OVALProject/Language/tree/5.11.2/schemas/linux-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#unix https://github.com/OVALProject/Language/tree/5.11.2/schemas/unix-definitions-schema.xsd http://scap.nist.gov/schema/scap/source/1.2 http://scap.nist.gov/schema/scap/1.3/scap-source-data-stream_1.3.xsd">
-  <data-stream id="scap_mil.disa.stig_datastream_U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark" use-case="CONFIGURATION" scap-version="1.3" timestamp="2025-10-14T13:53:02.174-04:00">
-    <dictionaries>
-      <component-ref xmlns:xlink="http://www.w3.org/1999/xlink" id="scap_mil.disa.stig_cref_U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-cpe-dictionary.xml" xlink:href="#scap_mil.disa.stig_comp_U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-cpe-dictionary.xml">
-        <catalog xmlns="urn:oasis:names:tc:entity:xmlns:xml:catalog">
-          <uri name="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" uri="#scap_mil.disa.stig_cref_U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" />
-        </catalog>
-      </component-ref>
-    </dictionaries>
-    <checklists>
-      <component-ref xmlns:xlink="http://www.w3.org/1999/xlink" id="scap_mil.disa.stig_cref_U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-xccdf.xml" xlink:href="#scap_mil.disa.stig_comp_U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-xccdf.xml">
-        <catalog xmlns="urn:oasis:names:tc:entity:xmlns:xml:catalog">
-          <uri name="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" uri="#scap_mil.disa.stig_cref_U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" />
-        </catalog>
-      </component-ref>
-    </checklists>
-    <checks>
-      <component-ref xmlns:xlink="http://www.w3.org/1999/xlink" id="scap_mil.disa.stig_cref_U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" xlink:href="#scap_mil.disa.stig_comp_U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" />
-      <component-ref xmlns:xlink="http://www.w3.org/1999/xlink" id="scap_mil.disa.stig_cref_U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" xlink:href="#scap_mil.disa.stig_comp_U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" />
-    </checks>
-  </data-stream>
-  <component id="scap_mil.disa.stig_comp_U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-cpe-dictionary.xml" timestamp="2025-10-14T13:53:02.176-04:00">
-    <cpe-list xmlns="http://cpe.mitre.org/dictionary/2.0">
-      <cpe-item name="cpe:/o:oracle:linux:9:-">
-        <title xml:lang="en-us">Oracle Linux 9</title>
-        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-cpe-oval.xml">oval:mil.disa.stig.ol9os:def:1</check>
-      </cpe-item>
-    </cpe-list>
-  </component>
-  <component id="scap_mil.disa.stig_comp_U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-xccdf.xml" timestamp="2025-10-14T13:53:02.219-04:00">
-    <xccdf:Benchmark xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" id="xccdf_mil.disa.stig_benchmark_Oracle_Linux_9_STIG" style="SCAP_1.3" xml:lang="en">
-      <xccdf:status date="2025-08-27">accepted</xccdf:status>
-      <xccdf:title>Oracle Linux 9 STIG SCAP Benchmark</xccdf:title>
-      <xccdf:description>This Security Technical Implementation Guide is published as a tool to improve the security of Department of Defense (DOD) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.</xccdf:description>
-      <xccdf:notice id="terms-of-use" xml:lang="en" />
-      <xccdf:front-matter xml:lang="en" />
-      <xccdf:rear-matter xml:lang="en" />
-      <xccdf:reference href="https://cyber.mil">
-        <dc:publisher>DISA</dc:publisher>
-        <dc:source>STIG.DOD.MIL</dc:source>
-      </xccdf:reference>
-      <xccdf:plain-text id="release-info">Benchmark Date: 29 Oct 2025</xccdf:plain-text>
-      <xccdf:plain-text id="generator">3.5.1</xccdf:plain-text>
-      <xccdf:plain-text id="conventionsVersion">1.10.0</xccdf:plain-text>
-      <cpe:platform-specification>
-        <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxBIND">
-          <cpe:title>Linux with BIND installed</cpe:title>
-          <cpe:logical-test operator="AND" negate="false">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25824200" />
-          </cpe:logical-test>
-        </cpe:platform>
-        <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxGnome">
-          <cpe:title>Gnome-shell Package</cpe:title>
-          <cpe:logical-test operator="AND" negate="false">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100005" />
-          </cpe:logical-test>
-        </cpe:platform>
-        <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxUEFI">
-          <cpe:title>Linux UEFI Boot</cpe:title>
-          <cpe:logical-test operator="AND" negate="false">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100006" />
-          </cpe:logical-test>
-        </cpe:platform>
-        <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxNFSMounts">
-          <cpe:title>Linux with NFS mounts configured</cpe:title>
-          <cpe:logical-test operator="AND" negate="false">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25785400" />
-          </cpe:logical-test>
-        </cpe:platform>
-        <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxLibreswan">
-          <cpe:title>Linux with Libreswan installed</cpe:title>
-          <cpe:logical-test operator="AND" negate="false">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25823200" />
-          </cpe:logical-test>
-        </cpe:platform>
-        <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxIPv6enabled">
-          <cpe:title>Linux IPv6 Enabled</cpe:title>
-          <cpe:logical-test operator="AND" negate="true">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100012" />
-          </cpe:logical-test>
-        </cpe:platform>
-        <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxPostfix">
-          <cpe:title>Linux with postfix installed</cpe:title>
-          <cpe:logical-test operator="AND" negate="false">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25795100" />
-          </cpe:logical-test>
-        </cpe:platform>
-        <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxAutofs">
-          <cpe:title>Linux with autofs installed</cpe:title>
-          <cpe:logical-test operator="AND" negate="false">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25784900" />
-          </cpe:logical-test>
-        </cpe:platform>
-      </cpe:platform-specification>
-      <xccdf:platform idref="cpe:/o:oracle:linux:9:-" />
-      <xccdf:version>001.001</xccdf:version>
-      <xccdf:metadata>
-        <dc:creator>DISA</dc:creator>
-        <dc:publisher>DISA</dc:publisher>
-        <dc:contributor>DISA</dc:contributor>
-        <dc:source>STIG.DOD.MIL</dc:source>
-      </xccdf:metadata>
-      <xccdf:Profile id="xccdf_mil.disa.stig_profile_MAC-1_Classified">
-        <xccdf:title>I - Mission Critical Classified</xccdf:title>
-        <xccdf:description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</xccdf:description>
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271432" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271433" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271434" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271435" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271436" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271437" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271438" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271440" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271441" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271442" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271443" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271444" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271445" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271446" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271447" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271448" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271449" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271450" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271452" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271453" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271454" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271456" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271458" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271459" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271460" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271461" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271462" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271463" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271464" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271465" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271466" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271467" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271468" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271469" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271470" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271474" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271475" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271476" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271477" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271482" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271483" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271484" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271485" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271486" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271487" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271488" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271489" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271490" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271491" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271493" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271494" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271495" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271496" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271501" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271502" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271503" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271504" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271505" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271506" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271507" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271508" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271509" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271510" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271511" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271512" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271513" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271514" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271515" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271516" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271517" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271518" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271519" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271520" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271521" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271522" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271523" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271524" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271525" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271527" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271528" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271529" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271530" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271531" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271532" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271533" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271534" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271535" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271536" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271537" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271538" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271539" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271540" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271541" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271542" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271543" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271544" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271545" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271546" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271547" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271548" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271549" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271550" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271551" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271552" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271553" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271554" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271555" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271556" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271557" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271558" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271559" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271560" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271561" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271562" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271563" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271564" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271565" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271566" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271567" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271568" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271569" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271570" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271571" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271572" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271573" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271574" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271575" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271576" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271577" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271578" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271579" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271580" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271581" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271582" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271583" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271584" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271585" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271586" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271587" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271588" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271589" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271590" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271591" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271592" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271593" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271594" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271595" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271596" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271597" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271598" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271599" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271600" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271601" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271602" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271603" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271607" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271608" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271609" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271610" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271611" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271612" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271613" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271614" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271615" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271616" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271617" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271618" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271619" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271620" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271621" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271622" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271623" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271624" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271625" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271626" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271627" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271628" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271629" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271630" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271631" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271632" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271633" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271634" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271635" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271636" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271637" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271638" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271639" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271640" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271641" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271642" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271643" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271647" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271648" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271649" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271650" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271651" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271652" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271653" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271654" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271655" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271656" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271657" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271658" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271659" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271660" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271661" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271662" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271663" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271664" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271665" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271666" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271667" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271668" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271669" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271670" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271678" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271679" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271680" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271681" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271682" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271683" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271684" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271685" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271686" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271687" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271688" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271690" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271691" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271693" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271694" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271695" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271696" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271697" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271698" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271700" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271703" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271704" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271705" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271706" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271707" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271708" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271709" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271710" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271711" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271712" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271713" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271714" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271715" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271716" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271717" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271718" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271719" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271720" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271721" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271722" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271723" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271724" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271725" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271726" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271727" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271728" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271729" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271730" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271731" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271732" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271733" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271734" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271735" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271736" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271737" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271738" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271739" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271740" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271741" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271742" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271743" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271745" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271746" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271747" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271748" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271749" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271750" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271751" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271752" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271753" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271754" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271755" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271757" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271758" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271759" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271761" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271762" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271763" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271765" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271766" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271768" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271771" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271772" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271773" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271774" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271775" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271776" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271777" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271778" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271782" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271784" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271786" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271787" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271788" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271789" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271790" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271791" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271792" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271793" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271794" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271795" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271796" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271797" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271798" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271799" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271800" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271801" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271802" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271803" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271804" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271805" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271806" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271807" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271808" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271809" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271810" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271811" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271812" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271813" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271814" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271815" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271816" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271817" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271818" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271819" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271820" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271821" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271822" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271823" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271824" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271825" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271826" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271827" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271828" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271829" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271830" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271831" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271832" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271833" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271834" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271835" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271836" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271839" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271840" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271841" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271842" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271845" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271846" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271849" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271850" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271851" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271852" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271854" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271855" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271856" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271857" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271858" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271860" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271861" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271862" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271864" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271865" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271866" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271867" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271868" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271869" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271870" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271871" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271872" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271873" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271874" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271875" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271876" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271877" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271878" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271879" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271880" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271881" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271882" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271883" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271884" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271885" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271886" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-278952" selected="true" />
-      </xccdf:Profile>
-      <xccdf:Profile id="xccdf_mil.disa.stig_profile_MAC-1_Public">
-        <xccdf:title>I - Mission Critical Public</xccdf:title>
-        <xccdf:description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</xccdf:description>
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271432" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271433" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271434" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271435" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271436" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271437" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271438" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271440" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271441" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271442" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271443" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271444" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271445" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271446" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271447" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271448" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271449" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271450" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271452" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271453" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271454" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271456" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271458" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271459" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271460" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271461" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271462" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271463" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271464" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271465" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271466" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271467" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271468" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271469" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271470" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271474" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271475" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271476" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271477" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271482" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271483" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271484" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271485" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271486" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271487" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271488" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271489" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271490" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271491" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271493" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271494" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271495" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271496" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271501" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271502" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271503" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271504" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271505" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271506" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271507" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271508" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271509" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271510" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271511" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271512" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271513" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271514" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271515" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271516" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271517" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271518" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271519" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271520" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271521" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271522" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271523" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271524" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271525" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271527" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271528" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271529" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271530" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271531" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271532" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271533" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271534" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271535" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271536" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271537" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271538" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271539" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271540" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271541" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271542" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271543" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271544" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271545" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271546" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271547" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271548" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271549" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271550" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271551" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271552" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271553" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271554" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271555" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271556" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271557" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271558" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271559" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271560" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271561" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271562" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271563" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271564" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271565" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271566" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271567" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271568" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271569" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271570" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271571" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271572" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271573" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271574" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271575" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271576" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271577" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271578" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271579" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271580" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271581" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271582" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271583" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271584" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271585" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271586" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271587" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271588" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271589" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271590" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271591" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271592" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271593" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271594" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271595" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271596" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271597" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271598" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271599" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271600" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271601" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271602" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271603" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271607" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271608" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271609" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271610" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271611" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271612" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271613" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271614" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271615" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271616" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271617" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271618" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271619" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271620" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271621" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271622" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271623" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271624" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271625" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271626" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271627" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271628" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271629" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271630" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271631" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271632" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271633" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271634" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271635" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271636" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271637" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271638" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271639" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271640" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271641" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271642" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271643" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271647" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271648" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271649" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271650" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271651" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271652" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271653" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271654" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271655" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271656" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271657" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271658" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271659" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271660" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271661" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271662" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271663" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271664" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271665" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271666" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271667" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271668" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271669" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271670" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271678" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271679" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271680" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271681" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271682" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271683" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271684" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271685" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271686" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271687" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271688" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271690" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271691" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271693" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271694" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271695" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271696" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271697" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271698" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271700" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271703" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271704" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271705" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271706" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271707" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271708" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271709" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271710" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271711" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271712" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271713" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271714" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271715" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271716" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271717" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271718" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271719" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271720" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271721" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271722" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271723" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271724" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271725" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271726" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271727" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271728" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271729" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271730" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271731" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271732" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271733" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271734" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271735" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271736" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271737" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271738" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271739" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271740" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271741" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271742" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271743" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271745" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271746" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271747" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271748" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271749" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271750" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271751" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271752" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271753" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271754" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271755" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271757" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271758" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271759" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271761" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271762" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271763" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271765" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271766" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271768" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271771" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271772" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271773" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271774" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271775" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271776" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271777" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271778" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271782" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271784" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271786" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271787" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271788" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271789" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271790" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271791" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271792" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271793" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271794" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271795" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271796" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271797" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271798" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271799" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271800" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271801" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271802" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271803" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271804" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271805" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271806" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271807" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271808" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271809" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271810" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271811" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271812" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271813" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271814" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271815" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271816" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271817" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271818" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271819" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271820" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271821" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271822" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271823" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271824" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271825" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271826" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271827" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271828" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271829" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271830" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271831" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271832" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271833" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271834" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271835" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271836" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271839" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271840" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271841" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271842" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271845" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271846" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271849" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271850" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271851" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271852" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271854" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271855" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271856" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271857" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271858" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271860" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271861" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271862" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271864" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271865" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271866" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271867" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271868" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271869" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271870" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271871" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271872" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271873" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271874" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271875" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271876" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271877" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271878" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271879" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271880" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271881" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271882" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271883" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271884" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271885" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271886" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-278952" selected="true" />
-      </xccdf:Profile>
-      <xccdf:Profile id="xccdf_mil.disa.stig_profile_MAC-1_Sensitive">
-        <xccdf:title>I - Mission Critical Sensitive</xccdf:title>
-        <xccdf:description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</xccdf:description>
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271432" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271433" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271434" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271435" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271436" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271437" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271438" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271440" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271441" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271442" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271443" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271444" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271445" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271446" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271447" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271448" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271449" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271450" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271452" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271453" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271454" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271456" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271458" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271459" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271460" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271461" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271462" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271463" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271464" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271465" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271466" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271467" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271468" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271469" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271470" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271474" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271475" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271476" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271477" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271482" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271483" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271484" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271485" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271486" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271487" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271488" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271489" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271490" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271491" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271493" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271494" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271495" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271496" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271501" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271502" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271503" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271504" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271505" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271506" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271507" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271508" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271509" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271510" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271511" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271512" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271513" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271514" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271515" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271516" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271517" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271518" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271519" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271520" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271521" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271522" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271523" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271524" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271525" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271527" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271528" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271529" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271530" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271531" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271532" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271533" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271534" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271535" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271536" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271537" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271538" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271539" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271540" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271541" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271542" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271543" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271544" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271545" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271546" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271547" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271548" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271549" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271550" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271551" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271552" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271553" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271554" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271555" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271556" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271557" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271558" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271559" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271560" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271561" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271562" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271563" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271564" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271565" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271566" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271567" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271568" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271569" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271570" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271571" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271572" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271573" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271574" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271575" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271576" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271577" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271578" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271579" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271580" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271581" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271582" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271583" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271584" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271585" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271586" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271587" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271588" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271589" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271590" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271591" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271592" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271593" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271594" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271595" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271596" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271597" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271598" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271599" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271600" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271601" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271602" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271603" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271607" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271608" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271609" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271610" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271611" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271612" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271613" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271614" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271615" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271616" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271617" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271618" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271619" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271620" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271621" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271622" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271623" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271624" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271625" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271626" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271627" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271628" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271629" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271630" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271631" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271632" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271633" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271634" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271635" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271636" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271637" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271638" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271639" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271640" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271641" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271642" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271643" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271647" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271648" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271649" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271650" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271651" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271652" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271653" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271654" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271655" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271656" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271657" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271658" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271659" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271660" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271661" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271662" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271663" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271664" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271665" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271666" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271667" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271668" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271669" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271670" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271678" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271679" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271680" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271681" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271682" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271683" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271684" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271685" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271686" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271687" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271688" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271690" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271691" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271693" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271694" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271695" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271696" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271697" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271698" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271700" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271703" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271704" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271705" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271706" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271707" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271708" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271709" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271710" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271711" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271712" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271713" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271714" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271715" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271716" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271717" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271718" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271719" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271720" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271721" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271722" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271723" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271724" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271725" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271726" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271727" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271728" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271729" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271730" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271731" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271732" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271733" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271734" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271735" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271736" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271737" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271738" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271739" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271740" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271741" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271742" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271743" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271745" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271746" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271747" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271748" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271749" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271750" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271751" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271752" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271753" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271754" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271755" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271757" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271758" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271759" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271761" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271762" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271763" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271765" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271766" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271768" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271771" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271772" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271773" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271774" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271775" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271776" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271777" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271778" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271782" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271784" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271786" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271787" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271788" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271789" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271790" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271791" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271792" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271793" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271794" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271795" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271796" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271797" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271798" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271799" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271800" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271801" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271802" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271803" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271804" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271805" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271806" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271807" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271808" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271809" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271810" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271811" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271812" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271813" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271814" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271815" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271816" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271817" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271818" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271819" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271820" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271821" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271822" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271823" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271824" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271825" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271826" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271827" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271828" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271829" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271830" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271831" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271832" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271833" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271834" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271835" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271836" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271839" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271840" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271841" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271842" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271845" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271846" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271849" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271850" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271851" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271852" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271854" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271855" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271856" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271857" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271858" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271860" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271861" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271862" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271864" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271865" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271866" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271867" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271868" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271869" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271870" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271871" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271872" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271873" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271874" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271875" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271876" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271877" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271878" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271879" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271880" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271881" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271882" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271883" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271884" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271885" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271886" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-278952" selected="true" />
-      </xccdf:Profile>
-      <xccdf:Profile id="xccdf_mil.disa.stig_profile_MAC-2_Classified">
-        <xccdf:title>II - Mission Support Classified</xccdf:title>
-        <xccdf:description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</xccdf:description>
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271432" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271433" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271434" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271435" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271436" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271437" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271438" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271440" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271441" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271442" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271443" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271444" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271445" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271446" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271447" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271448" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271449" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271450" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271452" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271453" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271454" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271456" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271458" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271459" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271460" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271461" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271462" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271463" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271464" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271465" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271466" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271467" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271468" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271469" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271470" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271474" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271475" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271476" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271477" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271482" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271483" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271484" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271485" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271486" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271487" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271488" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271489" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271490" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271491" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271493" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271494" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271495" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271496" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271501" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271502" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271503" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271504" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271505" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271506" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271507" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271508" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271509" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271510" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271511" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271512" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271513" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271514" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271515" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271516" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271517" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271518" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271519" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271520" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271521" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271522" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271523" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271524" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271525" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271527" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271528" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271529" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271530" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271531" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271532" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271533" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271534" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271535" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271536" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271537" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271538" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271539" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271540" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271541" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271542" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271543" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271544" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271545" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271546" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271547" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271548" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271549" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271550" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271551" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271552" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271553" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271554" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271555" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271556" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271557" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271558" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271559" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271560" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271561" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271562" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271563" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271564" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271565" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271566" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271567" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271568" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271569" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271570" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271571" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271572" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271573" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271574" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271575" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271576" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271577" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271578" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271579" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271580" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271581" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271582" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271583" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271584" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271585" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271586" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271587" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271588" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271589" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271590" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271591" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271592" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271593" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271594" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271595" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271596" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271597" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271598" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271599" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271600" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271601" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271602" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271603" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271607" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271608" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271609" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271610" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271611" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271612" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271613" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271614" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271615" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271616" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271617" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271618" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271619" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271620" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271621" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271622" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271623" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271624" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271625" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271626" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271627" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271628" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271629" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271630" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271631" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271632" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271633" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271634" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271635" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271636" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271637" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271638" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271639" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271640" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271641" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271642" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271643" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271647" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271648" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271649" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271650" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271651" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271652" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271653" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271654" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271655" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271656" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271657" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271658" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271659" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271660" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271661" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271662" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271663" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271664" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271665" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271666" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271667" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271668" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271669" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271670" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271678" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271679" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271680" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271681" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271682" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271683" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271684" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271685" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271686" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271687" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271688" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271690" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271691" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271693" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271694" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271695" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271696" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271697" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271698" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271700" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271703" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271704" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271705" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271706" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271707" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271708" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271709" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271710" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271711" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271712" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271713" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271714" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271715" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271716" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271717" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271718" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271719" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271720" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271721" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271722" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271723" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271724" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271725" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271726" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271727" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271728" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271729" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271730" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271731" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271732" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271733" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271734" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271735" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271736" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271737" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271738" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271739" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271740" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271741" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271742" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271743" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271745" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271746" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271747" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271748" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271749" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271750" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271751" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271752" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271753" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271754" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271755" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271757" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271758" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271759" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271761" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271762" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271763" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271765" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271766" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271768" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271771" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271772" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271773" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271774" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271775" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271776" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271777" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271778" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271782" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271784" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271786" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271787" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271788" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271789" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271790" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271791" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271792" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271793" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271794" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271795" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271796" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271797" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271798" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271799" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271800" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271801" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271802" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271803" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271804" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271805" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271806" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271807" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271808" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271809" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271810" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271811" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271812" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271813" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271814" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271815" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271816" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271817" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271818" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271819" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271820" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271821" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271822" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271823" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271824" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271825" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271826" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271827" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271828" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271829" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271830" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271831" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271832" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271833" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271834" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271835" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271836" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271839" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271840" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271841" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271842" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271845" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271846" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271849" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271850" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271851" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271852" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271854" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271855" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271856" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271857" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271858" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271860" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271861" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271862" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271864" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271865" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271866" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271867" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271868" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271869" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271870" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271871" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271872" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271873" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271874" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271875" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271876" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271877" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271878" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271879" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271880" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271881" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271882" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271883" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271884" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271885" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271886" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-278952" selected="true" />
-      </xccdf:Profile>
-      <xccdf:Profile id="xccdf_mil.disa.stig_profile_MAC-2_Public">
-        <xccdf:title>II - Mission Support Public</xccdf:title>
-        <xccdf:description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</xccdf:description>
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271432" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271433" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271434" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271435" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271436" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271437" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271438" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271440" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271441" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271442" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271443" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271444" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271445" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271446" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271447" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271448" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271449" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271450" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271452" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271453" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271454" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271456" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271458" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271459" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271460" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271461" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271462" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271463" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271464" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271465" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271466" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271467" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271468" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271469" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271470" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271474" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271475" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271476" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271477" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271482" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271483" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271484" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271485" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271486" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271487" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271488" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271489" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271490" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271491" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271493" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271494" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271495" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271496" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271501" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271502" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271503" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271504" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271505" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271506" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271507" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271508" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271509" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271510" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271511" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271512" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271513" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271514" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271515" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271516" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271517" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271518" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271519" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271520" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271521" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271522" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271523" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271524" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271525" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271527" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271528" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271529" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271530" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271531" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271532" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271533" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271534" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271535" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271536" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271537" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271538" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271539" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271540" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271541" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271542" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271543" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271544" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271545" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271546" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271547" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271548" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271549" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271550" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271551" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271552" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271553" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271554" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271555" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271556" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271557" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271558" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271559" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271560" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271561" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271562" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271563" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271564" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271565" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271566" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271567" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271568" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271569" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271570" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271571" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271572" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271573" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271574" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271575" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271576" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271577" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271578" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271579" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271580" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271581" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271582" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271583" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271584" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271585" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271586" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271587" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271588" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271589" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271590" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271591" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271592" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271593" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271594" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271595" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271596" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271597" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271598" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271599" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271600" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271601" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271602" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271603" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271607" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271608" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271609" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271610" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271611" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271612" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271613" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271614" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271615" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271616" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271617" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271618" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271619" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271620" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271621" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271622" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271623" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271624" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271625" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271626" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271627" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271628" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271629" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271630" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271631" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271632" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271633" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271634" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271635" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271636" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271637" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271638" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271639" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271640" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271641" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271642" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271643" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271647" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271648" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271649" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271650" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271651" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271652" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271653" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271654" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271655" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271656" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271657" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271658" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271659" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271660" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271661" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271662" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271663" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271664" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271665" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271666" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271667" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271668" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271669" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271670" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271678" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271679" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271680" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271681" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271682" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271683" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271684" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271685" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271686" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271687" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271688" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271690" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271691" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271693" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271694" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271695" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271696" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271697" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271698" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271700" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271703" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271704" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271705" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271706" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271707" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271708" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271709" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271710" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271711" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271712" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271713" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271714" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271715" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271716" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271717" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271718" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271719" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271720" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271721" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271722" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271723" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271724" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271725" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271726" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271727" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271728" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271729" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271730" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271731" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271732" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271733" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271734" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271735" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271736" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271737" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271738" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271739" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271740" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271741" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271742" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271743" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271745" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271746" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271747" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271748" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271749" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271750" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271751" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271752" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271753" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271754" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271755" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271757" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271758" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271759" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271761" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271762" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271763" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271765" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271766" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271768" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271771" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271772" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271773" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271774" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271775" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271776" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271777" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271778" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271782" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271784" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271786" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271787" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271788" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271789" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271790" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271791" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271792" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271793" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271794" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271795" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271796" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271797" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271798" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271799" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271800" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271801" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271802" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271803" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271804" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271805" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271806" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271807" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271808" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271809" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271810" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271811" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271812" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271813" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271814" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271815" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271816" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271817" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271818" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271819" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271820" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271821" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271822" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271823" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271824" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271825" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271826" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271827" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271828" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271829" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271830" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271831" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271832" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271833" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271834" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271835" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271836" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271839" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271840" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271841" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271842" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271845" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271846" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271849" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271850" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271851" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271852" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271854" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271855" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271856" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271857" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271858" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271860" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271861" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271862" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271864" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271865" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271866" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271867" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271868" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271869" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271870" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271871" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271872" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271873" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271874" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271875" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271876" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271877" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271878" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271879" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271880" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271881" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271882" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271883" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271884" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271885" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271886" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-278952" selected="true" />
-      </xccdf:Profile>
-      <xccdf:Profile id="xccdf_mil.disa.stig_profile_MAC-2_Sensitive">
-        <xccdf:title>II - Mission Support Sensitive</xccdf:title>
-        <xccdf:description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</xccdf:description>
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271432" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271433" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271434" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271435" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271436" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271437" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271438" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271440" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271441" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271442" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271443" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271444" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271445" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271446" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271447" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271448" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271449" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271450" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271452" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271453" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271454" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271456" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271458" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271459" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271460" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271461" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271462" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271463" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271464" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271465" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271466" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271467" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271468" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271469" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271470" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271474" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271475" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271476" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271477" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271482" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271483" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271484" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271485" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271486" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271487" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271488" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271489" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271490" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271491" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271493" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271494" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271495" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271496" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271501" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271502" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271503" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271504" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271505" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271506" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271507" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271508" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271509" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271510" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271511" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271512" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271513" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271514" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271515" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271516" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271517" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271518" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271519" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271520" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271521" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271522" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271523" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271524" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271525" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271527" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271528" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271529" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271530" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271531" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271532" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271533" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271534" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271535" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271536" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271537" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271538" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271539" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271540" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271541" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271542" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271543" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271544" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271545" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271546" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271547" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271548" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271549" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271550" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271551" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271552" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271553" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271554" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271555" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271556" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271557" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271558" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271559" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271560" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271561" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271562" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271563" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271564" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271565" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271566" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271567" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271568" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271569" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271570" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271571" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271572" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271573" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271574" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271575" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271576" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271577" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271578" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271579" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271580" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271581" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271582" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271583" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271584" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271585" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271586" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271587" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271588" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271589" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271590" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271591" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271592" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271593" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271594" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271595" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271596" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271597" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271598" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271599" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271600" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271601" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271602" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271603" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271607" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271608" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271609" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271610" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271611" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271612" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271613" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271614" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271615" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271616" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271617" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271618" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271619" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271620" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271621" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271622" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271623" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271624" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271625" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271626" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271627" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271628" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271629" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271630" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271631" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271632" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271633" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271634" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271635" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271636" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271637" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271638" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271639" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271640" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271641" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271642" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271643" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271647" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271648" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271649" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271650" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271651" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271652" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271653" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271654" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271655" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271656" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271657" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271658" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271659" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271660" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271661" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271662" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271663" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271664" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271665" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271666" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271667" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271668" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271669" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271670" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271678" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271679" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271680" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271681" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271682" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271683" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271684" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271685" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271686" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271687" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271688" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271690" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271691" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271693" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271694" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271695" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271696" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271697" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271698" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271700" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271703" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271704" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271705" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271706" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271707" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271708" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271709" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271710" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271711" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271712" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271713" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271714" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271715" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271716" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271717" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271718" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271719" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271720" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271721" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271722" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271723" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271724" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271725" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271726" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271727" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271728" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271729" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271730" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271731" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271732" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271733" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271734" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271735" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271736" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271737" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271738" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271739" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271740" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271741" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271742" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271743" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271745" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271746" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271747" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271748" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271749" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271750" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271751" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271752" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271753" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271754" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271755" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271757" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271758" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271759" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271761" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271762" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271763" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271765" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271766" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271768" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271771" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271772" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271773" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271774" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271775" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271776" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271777" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271778" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271782" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271784" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271786" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271787" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271788" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271789" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271790" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271791" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271792" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271793" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271794" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271795" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271796" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271797" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271798" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271799" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271800" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271801" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271802" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271803" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271804" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271805" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271806" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271807" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271808" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271809" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271810" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271811" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271812" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271813" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271814" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271815" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271816" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271817" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271818" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271819" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271820" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271821" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271822" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271823" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271824" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271825" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271826" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271827" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271828" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271829" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271830" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271831" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271832" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271833" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271834" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271835" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271836" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271839" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271840" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271841" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271842" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271845" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271846" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271849" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271850" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271851" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271852" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271854" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271855" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271856" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271857" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271858" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271860" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271861" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271862" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271864" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271865" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271866" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271867" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271868" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271869" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271870" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271871" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271872" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271873" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271874" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271875" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271876" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271877" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271878" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271879" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271880" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271881" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271882" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271883" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271884" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271885" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271886" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-278952" selected="true" />
-      </xccdf:Profile>
-      <xccdf:Profile id="xccdf_mil.disa.stig_profile_MAC-3_Classified">
-        <xccdf:title>III - Administrative Classified</xccdf:title>
-        <xccdf:description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</xccdf:description>
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271432" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271433" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271434" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271435" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271436" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271437" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271438" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271440" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271441" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271442" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271443" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271444" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271445" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271446" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271447" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271448" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271449" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271450" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271452" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271453" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271454" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271456" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271458" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271459" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271460" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271461" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271462" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271463" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271464" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271465" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271466" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271467" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271468" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271469" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271470" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271474" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271475" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271476" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271477" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271482" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271483" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271484" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271485" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271486" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271487" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271488" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271489" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271490" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271491" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271493" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271494" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271495" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271496" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271501" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271502" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271503" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271504" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271505" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271506" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271507" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271508" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271509" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271510" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271511" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271512" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271513" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271514" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271515" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271516" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271517" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271518" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271519" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271520" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271521" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271522" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271523" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271524" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271525" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271527" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271528" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271529" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271530" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271531" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271532" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271533" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271534" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271535" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271536" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271537" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271538" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271539" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271540" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271541" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271542" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271543" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271544" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271545" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271546" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271547" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271548" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271549" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271550" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271551" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271552" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271553" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271554" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271555" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271556" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271557" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271558" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271559" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271560" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271561" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271562" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271563" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271564" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271565" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271566" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271567" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271568" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271569" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271570" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271571" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271572" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271573" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271574" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271575" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271576" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271577" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271578" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271579" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271580" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271581" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271582" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271583" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271584" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271585" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271586" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271587" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271588" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271589" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271590" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271591" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271592" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271593" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271594" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271595" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271596" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271597" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271598" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271599" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271600" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271601" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271602" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271603" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271607" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271608" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271609" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271610" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271611" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271612" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271613" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271614" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271615" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271616" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271617" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271618" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271619" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271620" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271621" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271622" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271623" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271624" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271625" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271626" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271627" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271628" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271629" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271630" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271631" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271632" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271633" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271634" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271635" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271636" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271637" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271638" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271639" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271640" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271641" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271642" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271643" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271647" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271648" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271649" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271650" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271651" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271652" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271653" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271654" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271655" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271656" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271657" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271658" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271659" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271660" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271661" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271662" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271663" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271664" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271665" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271666" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271667" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271668" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271669" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271670" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271678" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271679" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271680" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271681" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271682" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271683" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271684" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271685" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271686" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271687" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271688" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271690" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271691" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271693" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271694" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271695" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271696" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271697" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271698" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271700" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271703" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271704" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271705" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271706" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271707" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271708" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271709" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271710" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271711" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271712" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271713" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271714" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271715" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271716" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271717" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271718" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271719" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271720" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271721" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271722" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271723" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271724" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271725" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271726" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271727" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271728" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271729" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271730" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271731" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271732" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271733" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271734" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271735" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271736" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271737" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271738" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271739" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271740" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271741" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271742" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271743" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271745" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271746" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271747" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271748" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271749" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271750" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271751" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271752" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271753" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271754" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271755" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271757" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271758" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271759" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271761" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271762" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271763" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271765" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271766" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271768" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271771" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271772" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271773" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271774" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271775" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271776" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271777" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271778" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271782" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271784" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271786" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271787" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271788" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271789" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271790" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271791" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271792" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271793" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271794" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271795" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271796" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271797" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271798" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271799" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271800" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271801" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271802" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271803" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271804" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271805" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271806" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271807" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271808" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271809" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271810" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271811" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271812" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271813" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271814" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271815" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271816" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271817" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271818" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271819" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271820" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271821" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271822" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271823" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271824" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271825" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271826" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271827" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271828" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271829" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271830" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271831" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271832" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271833" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271834" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271835" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271836" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271839" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271840" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271841" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271842" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271845" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271846" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271849" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271850" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271851" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271852" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271854" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271855" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271856" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271857" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271858" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271860" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271861" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271862" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271864" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271865" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271866" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271867" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271868" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271869" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271870" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271871" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271872" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271873" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271874" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271875" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271876" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271877" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271878" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271879" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271880" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271881" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271882" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271883" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271884" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271885" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271886" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-278952" selected="true" />
-      </xccdf:Profile>
-      <xccdf:Profile id="xccdf_mil.disa.stig_profile_MAC-3_Public">
-        <xccdf:title>III - Administrative Public</xccdf:title>
-        <xccdf:description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</xccdf:description>
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271432" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271433" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271434" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271435" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271436" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271437" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271438" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271440" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271441" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271442" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271443" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271444" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271445" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271446" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271447" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271448" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271449" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271450" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271452" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271453" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271454" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271456" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271458" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271459" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271460" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271461" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271462" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271463" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271464" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271465" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271466" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271467" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271468" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271469" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271470" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271474" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271475" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271476" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271477" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271482" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271483" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271484" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271485" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271486" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271487" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271488" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271489" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271490" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271491" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271493" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271494" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271495" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271496" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271501" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271502" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271503" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271504" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271505" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271506" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271507" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271508" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271509" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271510" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271511" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271512" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271513" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271514" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271515" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271516" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271517" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271518" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271519" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271520" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271521" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271522" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271523" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271524" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271525" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271527" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271528" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271529" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271530" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271531" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271532" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271533" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271534" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271535" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271536" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271537" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271538" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271539" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271540" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271541" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271542" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271543" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271544" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271545" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271546" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271547" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271548" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271549" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271550" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271551" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271552" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271553" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271554" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271555" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271556" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271557" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271558" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271559" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271560" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271561" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271562" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271563" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271564" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271565" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271566" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271567" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271568" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271569" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271570" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271571" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271572" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271573" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271574" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271575" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271576" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271577" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271578" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271579" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271580" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271581" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271582" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271583" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271584" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271585" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271586" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271587" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271588" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271589" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271590" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271591" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271592" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271593" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271594" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271595" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271596" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271597" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271598" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271599" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271600" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271601" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271602" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271603" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271607" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271608" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271609" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271610" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271611" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271612" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271613" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271614" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271615" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271616" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271617" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271618" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271619" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271620" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271621" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271622" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271623" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271624" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271625" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271626" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271627" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271628" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271629" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271630" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271631" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271632" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271633" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271634" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271635" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271636" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271637" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271638" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271639" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271640" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271641" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271642" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271643" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271647" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271648" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271649" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271650" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271651" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271652" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271653" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271654" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271655" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271656" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271657" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271658" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271659" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271660" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271661" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271662" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271663" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271664" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271665" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271666" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271667" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271668" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271669" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271670" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271678" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271679" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271680" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271681" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271682" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271683" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271684" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271685" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271686" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271687" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271688" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271690" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271691" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271693" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271694" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271695" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271696" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271697" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271698" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271700" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271703" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271704" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271705" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271706" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271707" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271708" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271709" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271710" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271711" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271712" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271713" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271714" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271715" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271716" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271717" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271718" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271719" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271720" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271721" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271722" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271723" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271724" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271725" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271726" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271727" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271728" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271729" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271730" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271731" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271732" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271733" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271734" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271735" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271736" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271737" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271738" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271739" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271740" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271741" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271742" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271743" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271745" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271746" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271747" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271748" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271749" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271750" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271751" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271752" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271753" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271754" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271755" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271757" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271758" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271759" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271761" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271762" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271763" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271765" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271766" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271768" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271771" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271772" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271773" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271774" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271775" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271776" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271777" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271778" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271782" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271784" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271786" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271787" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271788" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271789" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271790" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271791" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271792" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271793" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271794" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271795" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271796" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271797" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271798" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271799" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271800" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271801" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271802" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271803" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271804" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271805" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271806" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271807" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271808" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271809" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271810" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271811" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271812" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271813" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271814" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271815" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271816" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271817" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271818" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271819" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271820" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271821" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271822" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271823" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271824" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271825" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271826" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271827" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271828" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271829" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271830" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271831" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271832" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271833" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271834" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271835" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271836" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271839" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271840" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271841" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271842" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271845" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271846" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271849" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271850" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271851" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271852" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271854" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271855" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271856" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271857" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271858" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271860" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271861" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271862" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271864" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271865" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271866" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271867" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271868" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271869" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271870" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271871" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271872" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271873" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271874" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271875" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271876" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271877" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271878" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271879" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271880" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271881" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271882" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271883" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271884" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271885" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271886" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-278952" selected="true" />
-      </xccdf:Profile>
-      <xccdf:Profile id="xccdf_mil.disa.stig_profile_MAC-3_Sensitive">
-        <xccdf:title>III - Administrative Sensitive</xccdf:title>
-        <xccdf:description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</xccdf:description>
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271432" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271433" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271434" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271435" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271436" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271437" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271438" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271440" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271441" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271442" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271443" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271444" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271445" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271446" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271447" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271448" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271449" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271450" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271452" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271453" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271454" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271456" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271458" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271459" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271460" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271461" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271462" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271463" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271464" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271465" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271466" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271467" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271468" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271469" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271470" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271474" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271475" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271476" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271477" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271482" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271483" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271484" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271485" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271486" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271487" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271488" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271489" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271490" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271491" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271493" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271494" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271495" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271496" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271501" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271502" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271503" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271504" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271505" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271506" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271507" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271508" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271509" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271510" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271511" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271512" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271513" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271514" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271515" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271516" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271517" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271518" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271519" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271520" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271521" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271522" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271523" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271524" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271525" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271527" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271528" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271529" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271530" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271531" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271532" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271533" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271534" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271535" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271536" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271537" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271538" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271539" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271540" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271541" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271542" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271543" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271544" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271545" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271546" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271547" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271548" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271549" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271550" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271551" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271552" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271553" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271554" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271555" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271556" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271557" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271558" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271559" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271560" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271561" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271562" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271563" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271564" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271565" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271566" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271567" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271568" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271569" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271570" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271571" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271572" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271573" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271574" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271575" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271576" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271577" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271578" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271579" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271580" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271581" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271582" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271583" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271584" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271585" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271586" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271587" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271588" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271589" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271590" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271591" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271592" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271593" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271594" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271595" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271596" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271597" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271598" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271599" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271600" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271601" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271602" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271603" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271607" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271608" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271609" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271610" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271611" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271612" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271613" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271614" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271615" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271616" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271617" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271618" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271619" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271620" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271621" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271622" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271623" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271624" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271625" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271626" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271627" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271628" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271629" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271630" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271631" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271632" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271633" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271634" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271635" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271636" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271637" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271638" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271639" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271640" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271641" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271642" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271643" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271647" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271648" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271649" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271650" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271651" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271652" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271653" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271654" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271655" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271656" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271657" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271658" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271659" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271660" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271661" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271662" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271663" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271664" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271665" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271666" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271667" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271668" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271669" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271670" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271678" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271679" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271680" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271681" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271682" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271683" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271684" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271685" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271686" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271687" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271688" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271690" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271691" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271693" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271694" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271695" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271696" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271697" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271698" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271700" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271703" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271704" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271705" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271706" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271707" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271708" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271709" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271710" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271711" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271712" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271713" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271714" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271715" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271716" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271717" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271718" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271719" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271720" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271721" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271722" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271723" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271724" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271725" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271726" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271727" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271728" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271729" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271730" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271731" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271732" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271733" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271734" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271735" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271736" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271737" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271738" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271739" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271740" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271741" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271742" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271743" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271745" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271746" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271747" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271748" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271749" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271750" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271751" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271752" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271753" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271754" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271755" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271757" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271758" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271759" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271761" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271762" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271763" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271765" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271766" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271768" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271771" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271772" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271773" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271774" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271775" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271776" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271777" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271778" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271782" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271784" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271786" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271787" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271788" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271789" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271790" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271791" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271792" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271793" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271794" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271795" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271796" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271797" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271798" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271799" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271800" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271801" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271802" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271803" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271804" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271805" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271806" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271807" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271808" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271809" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271810" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271811" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271812" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271813" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271814" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271815" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271816" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271817" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271818" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271819" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271820" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271821" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271822" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271823" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271824" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271825" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271826" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271827" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271828" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271829" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271830" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271831" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271832" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271833" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271834" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271835" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271836" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271839" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271840" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271841" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271842" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271845" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271846" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271849" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271850" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271851" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271852" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271854" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271855" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271856" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271857" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271858" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271860" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271861" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271862" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271864" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271865" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271866" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271867" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271868" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271869" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271870" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271871" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271872" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271873" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271874" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271875" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271876" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271877" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271878" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271879" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271880" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271881" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271882" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271883" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271884" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271885" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271886" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-278952" selected="true" />
-      </xccdf:Profile>
-      <xccdf:Profile id="xccdf_mil.disa.stig_profile_Disable_Slow_Rules">
-        <xccdf:title>Disable Slow Rules</xccdf:title>
-        <xccdf:description>This profile disables rules known to have poor performance in some environments, such as systems with large numbers of user accounts.</xccdf:description>
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271827r1092193_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271789r1134863_rule" selected="false" />
-      </xccdf:Profile>
-      <xccdf:Profile id="xccdf_mil.disa.stig_profile_CAT_I_Only">
-        <xccdf:title>CAT I Only</xccdf:title>
-        <xccdf:description>This profile only includes rules that are Severity Category I.</xccdf:description>
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271679r1091749_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271598r1092588_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271739r1091929_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271750r1091962_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271857r1092283_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271583r1091461_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271469r1091119_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271814r1092154_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271748r1117266_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271703r1091821_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271825r1092187_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271798r1092106_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271476r1091140_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271533r1092486_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271668r1091716_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271573r1092564_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271846r1092250_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271487r1091173_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271555r1092530_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271880r1092352_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271491r1091185_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271552r1092524_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271593r1092580_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271773r1092031_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271528r1092476_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271570r1092558_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271803r1092121_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271446r1091050_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271521r1091275_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271716r1091860_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271698r1091806_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271768r1092016_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271784r1092064_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271461r1091095_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271624r1091584_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271547r1092514_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271850r1092262_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271586r1092576_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271613r1091551_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271710r1092596_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271444r1091044_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271506r1091230_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271727r1091893_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271510r1091242_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271589r1091479_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271861r1092295_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271795r1092097_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271827r1092193_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271720r1091872_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271654r1091674_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271772r1092028_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271560r1092540_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271643r1091641_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271761r1091995_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271433r1091011_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271576r1092570_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271816r1092160_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271875r1092337_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271568r1092556_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271474r1091134_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271432r1091008_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271808r1092136_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271577r1091443_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271737r1094967_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271581r1091455_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271708r1092594_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271864r1092304_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271876r1092641_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271684r1091764_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271734r1091914_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271626r1091590_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271812r1092148_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271631r1091605_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271855r1092277_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271548r1092516_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271660r1091692_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271493r1091191_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271540r1092500_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271743r1092635_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271819r1092169_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271638r1091626_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271709r1091839_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271733r1092598_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271520r1091272_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271529r1092478_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271877r1092343_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271441r1117265_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271608r1091536_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271842r1092238_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271656r1091680_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271791r1134971_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271485r1092625_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271774r1092034_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271649r1091659_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271874r1092612_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271556r1092532_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271574r1092566_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271715r1091857_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271801r1092115_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271881r1092355_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271597r1092586_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271763r1092001_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271612r1091548_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271866r1092310_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271870r1092322_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271619r1091569_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271686r1091770_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271536r1092492_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271732r1091908_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271678r1091746_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271468r1091116_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271856r1092280_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271551r1092522_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271594r1092582_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271572r1092562_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271601r1091515_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271872r1092328_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271450r1092466_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271799r1092109_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271490r1092628_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271742r1091938_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271813r1092151_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271642r1092593_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271518r1091266_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271537r1092494_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271543r1092506_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271804r1092124_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271447r1092464_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271458r1091086_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271704r1091824_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271596r1091500_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271561r1092542_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271682r1091758_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271851r1092265_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271522r1091278_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271470r1092618_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271697r1091803_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271509r1091239_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271534r1092488_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271845r1092247_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271625r1091587_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271719r1091869_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271860r1092292_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271794r1092094_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271653r1091671_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271771r1092025_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271669r1091719_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271728r1091896_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271790r1134866_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271820r1092172_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271434r1091014_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271530r1092480_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271553r1092526_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271828r1092196_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271475r1091137_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271685r1091767_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271569r1091419_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271566r1092552_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271641r1091635_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271637r1091623_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271735r1091917_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271747r1117266_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271865r1092307_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271693r1091791_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271539r1092498_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271590r1091482_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271632r1091608_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271811r1092145_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271496r1091200_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271690r1092634_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271854r1092274_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271483r1091161_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271558r1092536_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271567r1092554_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271807r1092133_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271627r1091593_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271442r1117265_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271449r1091059_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271515r1091257_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271609r1091539_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271559r1092538_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271531r1092482_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271802r1092118_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271599r1134856_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271663r1091701_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271595r1092584_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271436r1091020_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271532r1092484_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271836r1092637_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271830r1092202_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271477r1091143_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271544r1092508_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271871r1092325_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271618r1091566_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271622r1091578_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271753r1091971_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271789r1134863_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271687r1091773_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271584r1091464_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271650r1091662_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271867r1092313_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271659r1091689_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271839r1092229_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271725r1091887_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271482r1091158_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271467r1091113_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271489r1092627_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271585r1091467_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271688r1091776_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271805r1092127_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271542r1092504_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271505r1092629_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271852r1092608_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271788r1092076_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271738r1092600_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271741r1091935_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271681r1091755_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271670r1091722_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271459r1091089_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271571r1092560_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271652r1094966_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271705r1091827_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271833r1092607_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271777r1092043_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271666r1091710_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271718r1091866_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271696r1091800_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271766r1092010_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271538r1092496_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271884r1092364_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271635r1117265_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271517r1101885_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271565r1092550_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271550r1092520_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271873r1092331_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271759r1091989_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271587r1091473_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271519r1091269_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271582r1092574_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271501r1091215_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271435r1091017_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271722r1091878_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271829r1092199_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271600r1134858_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271694r1091794_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271796r1092100_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271615r1091557_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271602r1092590_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271508r1091236_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271729r1091899_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271512r1091248_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271835r1092217_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271554r1092528_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271575r1092568_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271651r1091665_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271806r1092130_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271579r1091449_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271636r1091620_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271557r1092534_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271563r1092546_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271821r1092175_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271711r1091845_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271817r1092163_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271793r1092605_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271549r1092518_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271640r1091632_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271486r1092626_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271495r1091197_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271628r1091596_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271810r1092142_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271465r1091107_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271578r1092572_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271700r1091812_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271883r1092361_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271448r1091056_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271879r1092349_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271514r1091254_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271658r1091686_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271840r1092232_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271724r1091884_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271776r1092040_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271617r1091563_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271664r1091704_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271443r1092463_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271541r1092502_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271621r1091575_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271730r1091902_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271662r1091698_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271787r1092073_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271610r1091542_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271647r1091653_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271765r1092007_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271562r1092544_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271754r1091974_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271437r1091023_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271868r1092316_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271503r1091221_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-278952r1135407_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271823r1092181_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271713r1091851_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271466r1091110_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271736r1091920_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271858r1092286_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271440r1092462_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271484r1092624_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271633r1091611_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271762r1091998_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271746r1117266_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271849r1092259_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271680r1091752_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271862r1092298_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271516r1091260_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271726r1091890_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271667r1091713_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271546r1092512_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271535r1092490_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271740r1091932_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271815r1092157_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271623r1091581_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271717r1091863_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271507r1091233_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271834r1092214_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271778r1092046_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271782r1092058_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271886r1092370_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271456r1091080_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271460r1091092_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271564r1092548_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271885r1092367_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271588r1091476_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271826r1092190_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271655r1091677_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271527r1092474_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271511r1091245_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271445r1091047_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271580r1091452_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271695r1091797_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271797r1092103_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271614r1091554_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271592r1091488_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271721r1091875_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271809r1092139_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271683r1091761_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271749r1117266_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271822r1092178_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271818r1092166_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271502r1091218_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271755r1091977_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271629r1091599_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271630r1091602_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271603r1092592_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271792r1094968_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271745r1117266_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271464r1092459_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271639r1091629_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271712r1091848_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271591r1092578_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271494r1091194_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271878r1092346_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271513r1091251_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271607r1091533_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271800r1092112_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271453r1091071_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271488r1091176_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271616r1091560_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271620r1091572_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271841r1092235_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271657r1091683_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271775r1092037_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271723r1091881_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271869r1092319_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271661r1091695_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271786r1092070_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271611r1091545_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271832r1092208_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271648r1091656_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271714r1091854_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271665r1091707_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271882r1092358_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271731r1091905_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271824r1092184_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271545r1092510_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271504r1091224_rule" selected="false" />
-      </xccdf:Profile>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271432">
-        <xccdf:title>SRG-OS-000341-GPOS-00132</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271432r1091008_rule" severity="low" weight="10.0">
-          <xccdf:version>OL09-00-000002</xccdf:version>
-          <xccdf:title>OL 9 must use a separate file system for the system audit data path.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Placing "/var/log/audit" in its own partition enables better separation between audit files and other system files and helps ensure that auditing cannot be halted due to the partition running out of space.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001849</xccdf:ident>
-          <xccdf:fixtext fixref="F-75389r1091007_fix">Migrate the system audit data path onto a separate file system.</xccdf:fixtext>
-          <xccdf:fix id="F-75389r1091007_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271432" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271433">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271433r1091011_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000003</xccdf:version>
-          <xccdf:title>OL 9 must be configured so that a separate file system must be used for user home directories (such as /home or an equivalent).</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Ensuring that "/home" is mounted on its own partition enables the setting of more restrictive mount options, and also helps ensure that users cannot trivially fill partitions used for log or audit data storage.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75390r1091010_fix">Migrate the "/home" directory onto a separate file system/partition.</xccdf:fixtext>
-          <xccdf:fix id="F-75390r1091010_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271433" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271434">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271434r1091014_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000004</xccdf:version>
-          <xccdf:title>OL 9 must use a separate file system for /tmp.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "/tmp" partition is used as temporary storage by many programs. Placing "/tmp" in its own partition enables the setting of more restrictive mount options, which can help protect programs that use it.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75391r1091013_fix">Migrate the "/tmp" path onto a separate file system.</xccdf:fixtext>
-          <xccdf:fix id="F-75391r1091013_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271434" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271435">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271435r1091017_rule" severity="low" weight="10.0">
-          <xccdf:version>OL09-00-000005</xccdf:version>
-          <xccdf:title>OL 9 must use a separate file system for /var.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Ensuring that "/var" is mounted on its own partition enables the setting of more restrictive mount options. This helps protect system services such as daemons or other programs which use it. It is not uncommon for the "/var" directory to contain world-writable directories installed by other software packages.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75392r1091016_fix">Migrate the "/var" path onto a separate file system.</xccdf:fixtext>
-          <xccdf:fix id="F-75392r1091016_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271435" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271436">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271436r1091020_rule" severity="low" weight="10.0">
-          <xccdf:version>OL09-00-000006</xccdf:version>
-          <xccdf:title>OL 9 must use a separate file system for /var/log.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Placing "/var/log" in its own partition enables better separation between log files and other files in "/var/".&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75393r1091019_fix">Migrate the "/var/log" path onto a separate file system.</xccdf:fixtext>
-          <xccdf:fix id="F-75393r1091019_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271436" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271437">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271437r1091023_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000007</xccdf:version>
-          <xccdf:title>OL 9 must use a separate file system for /var/tmp.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "/var/tmp" partition is used as temporary storage by many programs. Placing "/var/tmp" in its own partition enables the setting of more restrictive mount options, which can help protect programs that use it.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75394r1091022_fix">Migrate the "/var/tmp" path onto a separate file system.</xccdf:fixtext>
-          <xccdf:fix id="F-75394r1091022_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271437" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271438">
-        <xccdf:title>SRG-OS-000439-GPOS-00195</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271438r1117152_rule" severity="high" weight="10.0">
-          <xccdf:version>OL09-00-000010</xccdf:version>
-          <xccdf:title>OL 9 must be a vendor supported release.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;An operating system release is considered "supported" if the vendor continues to provide security patches for the product. With an unsupported release, it will not be possible to resolve security issues discovered in the system software.
-
-Oracle offers Oracle Linux Premier Support, for a fee, for those customers who wish to standardize on a specific minor release for an extended period.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002605</xccdf:ident>
-          <xccdf:fixtext fixref="F-75395r1091025_fix">Upgrade OL 9 to a supported version.</xccdf:fixtext>
-          <xccdf:fix id="F-75395r1091025_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271438" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271440">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271440r1092462_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000020</xccdf:version>
-          <xccdf:title>OL 9 must be configured so that the graphical display manager is not the default target unless approved.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Unnecessary service packages must not be installed to decrease the attack surface of the system. Graphical display managers have a long history of security vulnerabilities and must not be used unless approved and documented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75397r1091031_fix">Configure OL 9 to boot to the command line.
-
-Set the default target to multi-user with the following command:
-$ sudo systemctl set-default multi-user.target
-
-If there is an operational requirement for a graphical user interface, document it with the ISSO.</xccdf:fixtext>
-          <xccdf:fix id="F-75397r1091031_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271440" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271441">
-        <xccdf:title>SRG-OS-000080-GPOS-00048</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271441r1117265_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000025</xccdf:version>
-          <xccdf:title>OL 9 must require authentication to access emergency mode.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DOD-approved PKIs, all DOD systems (e.g., web servers and web portals) must be properly configured to incorporate access control methods that do not rely solely on the possession of a certificate for access. Successful authentication must not automatically give an entity access to an asset or security boundary. Authorization procedures and controls must be implemented to ensure each authenticated entity also has a validated and current authorization. Authorization is the process of determining whether an entity, once authenticated, is permitted to access a specific asset. Information systems use access control policies and enforcement mechanisms to implement this requirement.
-
-This requirement prevents attackers with physical access from trivially bypassing security on the machine and gaining root access. Such accesses are further prevented by configuring the bootloader password.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000213</xccdf:ident>
-          <xccdf:fixtext fixref="F-75398r1091034_fix">Configure OL 9 to require authentication for emergency mode.
-
-Add or modify the following line in the "/usr/lib/systemd/system/emergency.service" file:
-
-ExecStart=-/usr/lib/systemd/systemd-sulogin-shell emergency</xccdf:fixtext>
-          <xccdf:fix id="F-75398r1091034_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271441" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271442">
-        <xccdf:title>SRG-OS-000080-GPOS-00048</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271442r1117265_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000030</xccdf:version>
-          <xccdf:title>OL 9 must require authentication to access single-user mode.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DOD-approved PKIs, all DOD systems (e.g., web servers and web portals) must be properly configured to incorporate access control methods that do not rely solely on the possession of a certificate for access. Successful authentication must not automatically give an entity access to an asset or security boundary. Authorization procedures and controls must be implemented to ensure each authenticated entity also has a validated and current authorization. Authorization is the process of determining whether an entity, once authenticated, is permitted to access a specific asset. Information systems use access control policies and enforcement mechanisms to implement this requirement.
-
-This requirement prevents attackers with physical access from trivially bypassing security on the machine and gaining root access. Such accesses are further prevented by configuring the bootloader password.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000213</xccdf:ident>
-          <xccdf:fixtext fixref="F-75399r1091037_fix">Configure OL 9 to require authentication for single-user mode.
-
-Add or modify the following line in the "/usr/lib/systemd/system/rescue.service" file:
-
-ExecStart=-/usr/lib/systemd/systemd-sulogin-shell rescue</xccdf:fixtext>
-          <xccdf:fix id="F-75399r1091037_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271442" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271443">
-        <xccdf:title>SRG-OS-000095-GPOS-00049</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271443r1092463_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000040</xccdf:version>
-          <xccdf:title>OL 9 must be configured to disable the Asynchronous Transfer Mode (ATM) kernel module.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Disabling ATM protects the system against exploitation of any flaws in its implementation.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
-          <xccdf:fixtext fixref="F-75400r1091040_fix">Configure OL 9 to prevent the atm kernel module from being loaded.
-
-Add the following line to the file /etc/modprobe.d/atm.conf (or create atm.conf if it does not exist):
-
-install atm /bin/false
-blacklist atm</xccdf:fixtext>
-          <xccdf:fix id="F-75400r1091040_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271443" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271444">
-        <xccdf:title>SRG-OS-000095-GPOS-00049</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271444r1091044_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000041</xccdf:version>
-          <xccdf:title>OL 9 must be configured to disable the Controller Area Network (CAN) kernel module.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Disabling CAN protects the system against exploitation of any flaws in its implementation.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
-          <xccdf:fixtext fixref="F-75401r1091043_fix">Configure OL 9 to prevent the can kernel module from being loaded.
-
-Add the following line to the file /etc/modprobe.d/can.conf (or create atm.conf if it does not exist):
-
-install can /bin/false
-blacklist can</xccdf:fixtext>
-          <xccdf:fix id="F-75401r1091043_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271444" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271445">
-        <xccdf:title>SRG-OS-000095-GPOS-00049</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271445r1091047_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000042</xccdf:version>
-          <xccdf:title>OL 9 must be configured to disable the FireWire kernel module.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Disabling firewire protects the system against exploitation of any flaws in its implementation.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
-          <xccdf:fixtext fixref="F-75402r1091046_fix">Configure OL 9 to prevent the firewire-core kernel module from being loaded.
-
-Add the following line to the file /etc/modprobe.d/firewire-core.conf (or create firewire-core.conf if it does not exist):
-
-install firewire-core /bin/true
-blacklist firewire-core</xccdf:fixtext>
-          <xccdf:fix id="F-75402r1091046_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271445" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271446">
-        <xccdf:title>SRG-OS-000095-GPOS-00049</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271446r1091050_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000043</xccdf:version>
-          <xccdf:title>OL 9 must disable the Stream Control Transmission Protocol (SCTP) kernel module.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
-
-Failing to disconnect unused protocols can result in a system compromise.
-
-The SCTP is a transport layer protocol, designed to support the idea of message-oriented communication, with several streams of messages within one connection. Disabling SCTP protects the system against exploitation of any flaws in its implementation.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
-          <xccdf:fixtext fixref="F-75403r1091049_fix">Configure OL 9 to prevent the sctp kernel module from being loaded.
-
-Add the following line to the file /etc/modprobe.d/sctp.conf (or create sctp.conf if it does not exist):
-
-install sctp/bin/false
-blacklist sctp</xccdf:fixtext>
-          <xccdf:fix id="F-75403r1091049_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271446" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271447">
-        <xccdf:title>SRG-OS-000095-GPOS-00049</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271447r1092464_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000044</xccdf:version>
-          <xccdf:title>OL 9 must disable the Transparent Inter Process Communication (TIPC) kernel module.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
-
-Failing to disconnect unused protocols can result in a system compromise.
-
-The TIPC is a protocol that is specially designed for intra-cluster communication. It can be configured to transmit messages either on UDP or directly across Ethernet. Message delivery is sequence guaranteed, loss free, and flow controlled. Disabling TIPC protects the system against exploitation of any flaws in its implementation.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
-          <xccdf:fixtext fixref="F-75404r1091052_fix">Configure OL 9 to prevent the tipc kernel module from being loaded.
-
-Add the following line to the file /etc/modprobe.d/tipc.conf (or create tipc.conf if it does not exist):
-
-install tipc /bin/false
-blacklist tipc</xccdf:fixtext>
-          <xccdf:fix id="F-75404r1091052_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271447" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271448">
-        <xccdf:title>SRG-OS-000095-GPOS-00049</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271448r1091056_rule" severity="low" weight="10.0">
-          <xccdf:version>OL09-00-000045</xccdf:version>
-          <xccdf:title>OL 9 must disable mounting of cramfs.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
-
-Removing support for unneeded filesystem types reduces the local attack surface of the server.
-
-Compressed ROM/RAM file system (or cramfs) is a read-only file system designed for simplicity and space-efficiency. It is mainly used in embedded and small-footprint systems.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
-          <xccdf:fixtext fixref="F-75405r1091055_fix">Configure OL 9 to prevent the cramfs kernel module from being loaded. 
-
-Add the following line to the file /etc/modprobe.d/cramfs.conf (or create blacklist.conf if it does not exist):
-
-install cramfs /bin/false
-blacklist cramfs
-
-Reboot the system for the settings to take effect.</xccdf:fixtext>
-          <xccdf:fix id="F-75405r1091055_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271448" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271449">
-        <xccdf:title>SRG-OS-000095-GPOS-00049</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271449r1091059_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000046</xccdf:version>
-          <xccdf:title>OL 9 Bluetooth must be disabled.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;This requirement applies to wireless peripheral technologies (e.g., wireless mice, keyboards, displays, etc.) used with OL 9 systems. Wireless peripherals (e.g., Wi-Fi/Bluetooth/IR keyboards, mice and pointing devices, and near field communications [NFC]) present a unique challenge by creating an open, unsecured port on a computer. Wireless peripherals must meet DOD requirements for wireless data transmission and be approved for use by the authorizing official (AO). Even though some wireless peripherals, such as mice and pointing devices, do not ordinarily carry information that need to be protected, modification of communications with these wireless peripherals may be used to compromise the OL 9 operating system.
-
-Satisfies: SRG-OS-000095-GPOS-00049, SRG-OS-000300-GPOS-00118&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001443</xccdf:ident>
-          <xccdf:fixtext fixref="F-75406r1091058_fix">Configure OL 9 to disable the Bluetooth adapter when not in use.
-
-Create or modify the "/etc/modprobe.d/bluetooth.conf" file with the following line:
-
-install bluetooth /bin/false
-blacklist bluetooth
-
-Reboot the system for the settings to take effect.</xccdf:fixtext>
-          <xccdf:fix id="F-75406r1091058_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271449" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271450">
-        <xccdf:title>SRG-OS-000114-GPOS-00059</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271450r1092466_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000047</xccdf:version>
-          <xccdf:title>OL 9 must be configured to disable USB mass storage.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;USB mass storage permits easy introduction of unknown devices, thereby facilitating malicious activity.
-
-Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000778</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001958</xccdf:ident>
-          <xccdf:fixtext fixref="F-75407r1092465_fix">Configure OL 9 to prevent the usb-storage kernel module from being loaded.
-
-Add the following line to the file /etc/modprobe.d/usb-storage.conf (or create usb-storage.conf if it does not exist):
-
-install usb-storage /bin/false
-blacklist usb-storage</xccdf:fixtext>
-          <xccdf:fix id="F-75407r1092465_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271450" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271452">
-        <xccdf:title>SRG-OS-000445-GPOS-00199</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271452r1091068_rule" severity="high" weight="10.0">
-          <xccdf:version>OL09-00-000060</xccdf:version>
-          <xccdf:title>OL 9 must use a Linux Security Module configured to enforce limits on system services.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without verification of the security functions, security functions may not operate correctly and the failure may go unnoticed. Security function is defined as the hardware, software, and/or firmware of the information system responsible for enforcing the system security policy and supporting the isolation of code and data on which the protection is based. Security functionality includes, but is not limited to, establishing system accounts, configuring access authorizations (i.e., permissions, privileges), setting events to be audited, and setting intrusion detection parameters.
-
-This requirement applies to operating systems performing security function verification/testing and/or systems and environments that require this functionality.
-
-Satisfies: SRG-OS-000445-GPOS-00199, SRG-OS-000134-GPOS-00068&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002696</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001084</xccdf:ident>
-          <xccdf:fixtext fixref="F-75409r1091067_fix">Configure OL 9 to verify correct operation of security functions.
-
-Edit the file "/etc/selinux/config" and add or modify the following line:
-
- SELINUX=enforcing 
-
-A reboot is required for the changes to take effect.</xccdf:fixtext>
-          <xccdf:fix id="F-75409r1091067_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271452" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271453">
-        <xccdf:title>SRG-OS-000445-GPOS-00199</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271453r1091071_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000065</xccdf:version>
-          <xccdf:title>OL 9 must enable the SELinux targeted policy.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Setting the SELinux policy to "targeted" or a more specialized policy ensures the system will confine processes that are likely to be targeted for exploitation, such as network or system services.
-
-Note: During the development or debugging of SELinux modules, it is common to temporarily place nonproduction systems in "permissive" mode. In such temporary cases, SELinux policies should be developed, and once work is completed, the system should be reconfigured to "targeted".&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002696</xccdf:ident>
-          <xccdf:fixtext fixref="F-75410r1091070_fix">Configure OL 9 to use the targetd SELINUX policy.
-
-Edit the file "/etc/selinux/config" and add or modify the following line:
-
- SELINUXTYPE=targeted 
-
-A reboot is required for the changes to take effect.</xccdf:fixtext>
-          <xccdf:fix id="F-75410r1091070_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271453" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271454">
-        <xccdf:title>SRG-OS-000033-GPOS-00014</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271454r1092458_rule" severity="high" weight="10.0">
-          <xccdf:version>OL09-00-000070</xccdf:version>
-          <xccdf:title>OL 9 must enable FIPS mode.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Use of weak or untested encryption algorithms undermines the purposes of using encryption to protect data. The operating system must implement cryptographic modules adhering to the higher standards approved by the federal government since this provides assurance they have been tested and validated. This includes NIST FIPS-validated cryptography for the following: Provisioning digital signatures, generating cryptographic hashes, and to protect data requiring data-at-rest protections in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, and standards.
-
-Satisfies: SRG-OS-000033-GPOS-00014, SRG-OS-000125-GPOS-00065, SRG-OS-000396-GPOS-00176, SRG-OS-000423-GPOS-00187, SRG-OS-000478-GPOS-00223&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000068</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000877</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002450</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002418</xccdf:ident>
-          <xccdf:fixtext fixref="F-75411r1092458_fix">Configure OL 9 to implement FIPS mode with the following command:
-
-$ sudo fips-mode-setup --enable
-
-Reboot the system for the changes to take effect.</xccdf:fixtext>
-          <xccdf:fix id="F-75411r1092458_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271454" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271456">
-        <xccdf:title>SRG-OS-000095-GPOS-00049</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271456r1091080_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000100</xccdf:version>
-          <xccdf:title>OL 9 must not have the nfs-utils package installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;"nfs-utils" provides a daemon for the kernel NFS server and related tools. This package also contains the "showmount" program. "showmount" queries the mount daemon on a remote host for information about the Network File System (NFS) server on the remote host. For example, "showmount" can display the clients that are mounted on that host.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
-          <xccdf:fixtext fixref="F-75413r1091079_fix">Remove the nfs-utils package with the following command:
-
-$ sudo dnf remove nfs-utils</xccdf:fixtext>
-          <xccdf:fix id="F-75413r1091079_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271456" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271458">
-        <xccdf:title>SRG-OS-000095-GPOS-00049</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271458r1091086_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000110</xccdf:version>
-          <xccdf:title>OL 9 must not have the telnet-server package installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities are often overlooked and therefore, may remain unsecure. They increase the risk to the platform by providing additional attack vectors.
-
-The telnet service provides an unencrypted remote access service, which does not provide for the confidentiality and integrity of user passwords or the remote session. If a privileged user were to login using this service, the privileged user password could be compromised.
-
-Removing the "telnet-server" package decreases the risk of accidental (or intentional) activation of the telnet service.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
-          <xccdf:fixtext fixref="F-75415r1091085_fix">Remove the telnet-server package with the following command:
-
-$ sudo dnf remove telnet-server</xccdf:fixtext>
-          <xccdf:fix id="F-75415r1091085_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271458" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271459">
-        <xccdf:title>SRG-OS-000095-GPOS-00049</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271459r1091089_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000115</xccdf:version>
-          <xccdf:title>OL 9 must not have the gssproxy package installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore, may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
-
-Operating systems are capable of providing a wide variety of functions and services. Some of the functions and services provided by default may not be necessary to support essential organizational operations (e.g., key missions, functions).
-
-The gssproxy package is a proxy for GSS API credential handling and could expose secrets on some networks. It is not needed for normal function of the OS.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
-          <xccdf:fixtext fixref="F-75416r1091088_fix">Remove the gssproxy package with the following command:
-
-$ sudo dnf remove gssproxy</xccdf:fixtext>
-          <xccdf:fix id="F-75416r1091088_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271459" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271460">
-        <xccdf:title>SRG-OS-000095-GPOS-00049</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271460r1091092_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000120</xccdf:version>
-          <xccdf:title>OL 9 must not have the iprutils package installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
-
-Operating systems are capable of providing a wide variety of functions and services. Some of the functions and services, provided by default, may not be necessary to support essential organizational operations (e.g., key missions, functions).
-
-The iprutils package provides a suite of utilities to manage and configure SCSI devices supported by the ipr SCSI storage device driver.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
-          <xccdf:fixtext fixref="F-75417r1091091_fix">Remove the iprutils package with the following command:
-
-$ sudo dnf remove iprutils</xccdf:fixtext>
-          <xccdf:fix id="F-75417r1091091_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271460" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271461">
-        <xccdf:title>SRG-OS-000095-GPOS-00049</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271461r1091095_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000125</xccdf:version>
-          <xccdf:title>OL 9 must not have the tuned package installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
-
-Operating systems are capable of providing a wide variety of functions and services. Some of the functions and services, provided by default, may not be necessary to support essential organizational operations (e.g., key missions, functions).
-
-The tuned package contains a daemon that tunes the system settings dynamically. It does so by monitoring the usage of several system components periodically. Based on that information, components will then be put into lower or higher power savings modes to adapt to the current usage. The tuned package is not needed for normal OS operations.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
-          <xccdf:fixtext fixref="F-75418r1091094_fix">Remove the tuned package with the following command:
-
-$ sudo dnf remove tuned</xccdf:fixtext>
-          <xccdf:fix id="F-75418r1091094_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271461" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271462">
-        <xccdf:title>SRG-OS-000074-GPOS-00042</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271462r1091098_rule" severity="high" weight="10.0">
-          <xccdf:version>OL09-00-000130</xccdf:version>
-          <xccdf:title>OL 9 must not have a File Transfer Protocol (FTP) server package installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The FTP service provides an unencrypted remote access that does not provide for the confidentiality and integrity of user passwords or the remote session. If a privileged user were to log on using this service, the privileged user password could be compromised. SSH or other encrypted file transfer methods must be used in place of this service.
-
-Removing the "vsftpd" package decreases the risk of accidental activation.
-
-Satisfies: SRG-OS-000074-GPOS-00042, SRG-OS-000095-GPOS-00049&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000197</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
-          <xccdf:fixtext fixref="F-75419r1091097_fix">Remove the ftp package can be removed with the following command (using vsftpd as an example):
-
-$ sudo dnf remove vsftpd</xccdf:fixtext>
-          <xccdf:fix id="F-75419r1091097_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271462" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271463">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271463r1091101_rule" severity="high" weight="10.0">
-          <xccdf:version>OL09-00-000135</xccdf:version>
-          <xccdf:title>OL 9 must not have a Trivial File Transfer Protocol (TFTP) server package installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Removing the "tftp-server" package decreases the risk of the accidental (or intentional) activation of tftp services.
-
-If TFTP is required for operational support (such as transmission of router configurations), its use must be documented with the information systems security manager (ISSM), restricted to only authorized personnel, and have access control rules established.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75420r1091100_fix">Remove the tftp package can be removed with the following command:
-
-$ sudo dnf remove tftp</xccdf:fixtext>
-          <xccdf:fix id="F-75420r1091100_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271463" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271464">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271464r1092459_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000140</xccdf:version>
-          <xccdf:title>OL 9 must not have the quagga package installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Quagga is a network routing software suite providing implementations of Open Shortest Path First (OSPF), Routing Information Protocol (RIP), Border Gateway Protocol (BGP) for Unix and Linux platforms.
-
-If there is no need to make the router software available, removing it provides a safeguard against its activation.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75421r1091103_fix">Remove the quagga package with the following command:
-
-$ sudo dnf remove quagga</xccdf:fixtext>
-          <xccdf:fix id="F-75421r1091103_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271464" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271465">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271465r1091107_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000145</xccdf:version>
-          <xccdf:title>OL 9 must not have a graphical display manager installed unless approved.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Unnecessary service packages must not be installed to decrease the attack surface of the system. Graphical display managers have a long history of security vulnerabilities and must not be used, unless approved and documented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000382</xccdf:ident>
-          <xccdf:fixtext fixref="F-75422r1091106_fix">Remove all xorg packages with the following command:
-
-Warning: If accessing the system through the graphical user interface, change to the multi-user.target with the following command:
-
-$ sudo systemctl isolate multi-user.target
-
-Warning: Removal of the graphical user interface will immediately render it useless. The following commands must not be run from a virtual terminal emulator in the graphical interface.
-
-$ sudo dnf remove "xorg*"
-$ sudo systemctl set-default multi-user.target
-
-If there is an operational requirement for a graphical user interface it must be documented with the ISSO.</xccdf:fixtext>
-          <xccdf:fix id="F-75422r1091106_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271465" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271466">
-        <xccdf:title>SRG-OS-000095-GPOS-00049</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271466r1091110_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000150</xccdf:version>
-          <xccdf:title>OL 9 must not have the sendmail package installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The sendmail software was not developed with security in mind, and its design prevents it from being effectively contained by SELinux. Postfix must be used instead.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
-          <xccdf:fixtext fixref="F-75423r1091109_fix">Remove the sendmail package with the following command:
-
-$ sudo dnf remove sendmail</xccdf:fixtext>
-          <xccdf:fix id="F-75423r1091109_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271466" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271467">
-        <xccdf:title>SRG-OS-000134-GPOS-00068</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271467r1091113_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000200</xccdf:version>
-          <xccdf:title>OL 9 must have policycoreutils package installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without verification of the security functions, security functions may not operate correctly and the failure may go unnoticed. Security function is defined as the hardware, software, and/or firmware of the information system responsible for enforcing the system security policy and supporting the isolation of code and data on which the protection is based. Security functionality includes, but is not limited to, establishing system accounts, configuring access authorizations (i.e., permissions, privileges), setting events to be audited, and setting intrusion detection parameters.
-
-Policycoreutils contains the policy core utilities that are required for basic operation of an SELinux-enabled system. These utilities include load_policy to load SELinux policies, setfile to label filesystems, newrole to switch roles, and run_init to run /etc/init.d scripts in the proper context.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001084</xccdf:ident>
-          <xccdf:fixtext fixref="F-75424r1091112_fix">Install the policycoreutils package with the following command:
- 
-$ sudo dnf install -y policycoreutils</xccdf:fixtext>
-          <xccdf:fix id="F-75424r1091112_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271467" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271468">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271468r1091116_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000210</xccdf:version>
-          <xccdf:title>OL 9 policycoreutils-python-utils package must be installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The policycoreutils-python-utils package is required to operate and manage an SELinux environment and its policies. It provides utilities such as semanage, audit2allow, audit2why, chcat, and sandbox.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75425r1091115_fix">Install the policycoreutils-python-utils service package (if the policycoreutils-python-utils service is not already installed) with the following command:
-
-$ sudo dnf install -y policycoreutils-python-utils</xccdf:fixtext>
-          <xccdf:fix id="F-75425r1091115_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271468" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271469">
-        <xccdf:title>SRG-OS-000096-GPOS-00050</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271469r1091119_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000220</xccdf:version>
-          <xccdf:title>OL 9 must have the firewalld package installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Firewalld provides an easy and effective way to block/limit remote access to the system via ports, services, and protocols.
-
-Remote access services, such as those providing remote access to network devices and information systems, which lack automated control capabilities, increase risk and make remote user access management difficult at best.
-
-Remote access is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
-
-OL 9 functionality (e.g., SSH) must be capable of taking enforcement action if the audit reveals unauthorized activity. Automated control of remote access sessions allows organizations to ensure ongoing compliance with remote access policies by enforcing connection rules of remote access applications on a variety of information system components (e.g., servers, workstations, notebook computers, smartphones, and tablets).
-
-Satisfies: SRG-OS-000096-GPOS-00050, SRG-OS-000297-GPOS-00115, SRG-OS-000298-GPOS-00116, SRG-OS-000480-GPOS-00232&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000382</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002314</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002322</xccdf:ident>
-          <xccdf:fixtext fixref="F-75426r1091118_fix">Install the firewalld package with the following command:
-
-$ sudo dnf install -y firewalld</xccdf:fixtext>
-          <xccdf:fix id="F-75426r1091118_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271469" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271470">
-        <xccdf:title>SRG-OS-000096-GPOS-00050</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271470r1092618_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000221</xccdf:version>
-          <xccdf:title>OL 9 must be configured so that the firewalld service is active.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Firewalld provides an easy and effective way to block/limit remote access to the system via ports, services, and protocols.
-
-Remote access services, such as those providing remote access to network devices and information systems, which lack automated control capabilities, increase risk and make remote user access management difficult at best.
-
-Remote access is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
-
-OL 9 functionality (e.g., RDP) must be capable of taking enforcement action if the audit reveals unauthorized activity. Automated control of remote access sessions allows organizations to ensure ongoing compliance with remote access policies by enforcing connection rules of remote access applications on a variety of information system components (e.g., servers, workstations, notebook computers, smartphones, and tablets).
-
-Satisfies: SRG-OS-000096-GPOS-00050, SRG-OS-000297-GPOS-00115&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000382</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002314</xccdf:ident>
-          <xccdf:fixtext fixref="F-75427r1092617_fix">Enable the firewalld service with the following command:
-
-$ sudo systemctl enable --now firewalld
-
-Note: If firewalld is masked, run following command:
-
-sudo systemctl unmask firewalld</xccdf:fixtext>
-          <xccdf:fix id="F-75427r1092617_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271470" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271474">
-        <xccdf:title>SRG-OS-000324-GPOS-00125</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271474r1091134_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000230</xccdf:version>
-          <xccdf:title>OL 9 must have the sudo package installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;sudo is a program designed to allow a system administrator to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow system users to complete their work.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002235</xccdf:ident>
-          <xccdf:fixtext fixref="F-75431r1091133_fix">The sudo package can be installed with the following command:
-
-# dnf install -y sudo</xccdf:fixtext>
-          <xccdf:fix id="F-75431r1091133_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271474" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271475">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271475r1091137_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000231</xccdf:version>
-          <xccdf:title>OL 9 must use the invoking user's password for privilege escalation when using sudo.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;If the rootpw, targetpw, or runaspw flags are defined and not disabled, by default the operating system will prompt the invoking user for the "root" user password.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75432r1091136_fix">Configure OL 9 to use the invoking user's password for privilege escalation when using sudo. 
-
-Define the following in the Defaults section of the /etc/sudoers file or a single configuration file in the /etc/sudoers.d/ directory:
-
-Defaults !targetpw
-Defaults !rootpw
-Defaults !runaspw</xccdf:fixtext>
-          <xccdf:fix id="F-75432r1091136_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271475" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271476">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271476r1091140_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000232</xccdf:version>
-          <xccdf:title>OL 9 must restrict privilege elevation to authorized personnel.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;If the sudoers file is not configured correctly, any user defined on the system can initiate privileged actions on the target system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75433r1091139_fix">Remove the following entries from the /etc/sudoers file or configuration file under /etc/sudoers.d/:
-
-ALL     ALL=(ALL) ALL
-ALL     ALL=(ALL:ALL) ALL</xccdf:fixtext>
-          <xccdf:fix id="F-75433r1091139_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271476" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271477">
-        <xccdf:title>SRG-OS-000396-GPOS-00176</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271477r1091143_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000240</xccdf:version>
-          <xccdf:title>OL 9 must have the crypto-policies package installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Centralized cryptographic policies simplify applying secure ciphers across an operating system and the applications that run on that operating system. Use of weak or untested encryption algorithms undermines the purposes of using encryption to protect data.
-
-Satisfies: SRG-OS-000396-GPOS-00176, SRG-OS-000393-GPOS-00173, SRG-OS-000394-GPOS-00174&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002450</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002890</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-003123</xccdf:ident>
-          <xccdf:fixtext fixref="F-75434r1091142_fix">Install the crypto-policies package (if not already installed) with the following command:
-
-$ sudo dnf install -y crypto-policies</xccdf:fixtext>
-          <xccdf:fix id="F-75434r1091142_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271477" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271482">
-        <xccdf:title>SRG-OS-000423-GPOS-00187</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271482r1091158_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000250</xccdf:version>
-          <xccdf:title>OL 9 networked systems must have SSH installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without protection of the transmitted information, confidentiality and integrity may be compromised because unprotected communications can be intercepted and either read or altered. 
-
-This requirement applies to both internal and external networks and all types of information system components from which information can be transmitted (e.g., servers, mobile devices, notebook computers, printers, copiers, scanners, and facsimile machines). Communication paths outside the physical protection of a controlled boundary are exposed to the possibility of interception and modification. 
-
-Protecting the confidentiality and integrity of organizational information can be accomplished by physical means (e.g., employing physical distribution systems) or by logical means (e.g., employing cryptographic techniques). If physical means of protection are employed, then logical means (cryptography) do not have to be employed, and vice versa.
-
-Satisfies: SRG-OS-000423-GPOS-00187, SRG-OS-000424-GPOS-00188, SRG-OS-000425-GPOS-00189, SRG-OS-000426-GPOS-00190&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002418</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002421</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002420</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002422</xccdf:ident>
-          <xccdf:fixtext fixref="F-75439r1091157_fix">The openssh-server package can be installed with the following command:
- 
-$ sudo dnf install -y openssh-server</xccdf:fixtext>
-          <xccdf:fix id="F-75439r1091157_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271482" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271483">
-        <xccdf:title>SRG-OS-000423-GPOS-00187</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271483r1091161_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000251</xccdf:version>
-          <xccdf:title>OL 9 networked systems must have and implement SSH to protect the confidentiality and integrity of transmitted and received information, as well as information during preparation for transmission.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without protection of the transmitted information, confidentiality and integrity may be compromised because unprotected communications can be intercepted and either read or altered. 
-
-This requirement applies to both internal and external networks and all types of information system components from which information can be transmitted (e.g., servers, mobile devices, notebook computers, printers, copiers, scanners, and facsimile machines). Communication paths outside the physical protection of a controlled boundary are exposed to the possibility of interception and modification. 
-
-Protecting the confidentiality and integrity of organizational information can be accomplished by physical means (e.g., employing physical distribution systems) or by logical means (e.g., employing cryptographic techniques). If physical means of protection are employed, then logical means (cryptography) do not have to be employed, and vice versa.
-
-Satisfies: SRG-OS-000423-GPOS-00187, SRG-OS-000424-GPOS-00188, SRG-OS-000425-GPOS-00189, SRG-OS-000426-GPOS-00190&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002418</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002421</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002420</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002422</xccdf:ident>
-          <xccdf:fixtext fixref="F-75440r1091160_fix">Enable the sshd service with the following command:
-
-$ systemctl enable --now sshd</xccdf:fixtext>
-          <xccdf:fix id="F-75440r1091160_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271483" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271484">
-        <xccdf:title>SRG-OS-000250-GPOS-00093</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271484r1092624_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000252</xccdf:version>
-          <xccdf:title>The OL 9 SSH daemon must be configured to use systemwide cryptographic policies.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
-
-Remote access (e.g., RDP) is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
-
-Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
-
-OL 9 incorporates systemwide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the /etc/sysconfig/sshd file. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/ directory.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001453</xccdf:ident>
-          <xccdf:fixtext fixref="F-75441r1092623_fix">Configure the OL 9 SSH daemon to use systemwide cryptographic policies by running the following commands:
-
-$ sudo dnf reinstall -y openssh-server</xccdf:fixtext>
-          <xccdf:fix id="F-75441r1092623_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271484" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271485">
-        <xccdf:title>SRG-OS-000250-GPOS-00093</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271485r1092625_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000254</xccdf:version>
-          <xccdf:title>OL 9 SSH server must be configured to use only ciphers employing FIPS 140-3 validated cryptographic hash algorithms to protect the confidentiality of SSH server connections.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
-
-Remote access (e.g., RDP) is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
-
-Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
-
-OL 9 incorporates systemwide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the /etc/sysconfig/sshd file. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/opensshserver.config file.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001453</xccdf:ident>
-          <xccdf:fixtext fixref="F-75442r1091166_fix">Configure the OL 9 SSH server to use only ciphers employing FIPS 140-3 approved algorithms.
-
-Reinstall crypto-policies with the following command:
-
-$ sudo dnf -y reinstall crypto-policies
-
-Set the crypto-policy to FIPS with the following command:
-
-$ sudo update-crypto-policies --set FIPS
-
-Setting system policy to FIPS
-
-Note: Systemwide crypto policies are applied on application startup. It is recommended to restart the system for the change of policies to fully take place.</xccdf:fixtext>
-          <xccdf:fix id="F-75442r1091166_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271485" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271486">
-        <xccdf:title>SRG-OS-000250-GPOS-00093</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271486r1092626_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000255</xccdf:version>
-          <xccdf:title>OL 9 SSH server must be configured to use only Message Authentication Codes (MACs) employing FIPS 140-3 validated cryptographic hash algorithms to protect the confidentiality of SSH server connections.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
-
-Remote access (e.g., RDP) is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
-
-Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
-
-OL 9 incorporates systemwide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the /etc/sysconfig/sshd file. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/opensshserver.config file.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001453</xccdf:ident>
-          <xccdf:fixtext fixref="F-75443r1091169_fix">Configure the OL 9 SSH server to use only MACs employing FIPS 140-3 approved algorithms.
-
-Reinstall crypto-policies with the following command:
-
-$ sudo dnf -y reinstall crypto-policies
-
-Set the crypto-policy to FIPS with the following command:
-
-$ sudo update-crypto-policies --set FIPS
-
-Setting system policy to FIPS
-
-Note: Systemwide crypto policies are applied on application startup. It is recommended to restart the system for the change of policies to fully take place.</xccdf:fixtext>
-          <xccdf:fix id="F-75443r1091169_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271486" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271487">
-        <xccdf:title>SRG-OS-000023-GPOS-00006</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271487r1091173_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000256</xccdf:version>
-          <xccdf:title>OL 9 must display the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system via a SSH logon.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The warning message reinforces policy awareness during the logon process and facilitates possible legal action against attackers. Alternatively, systems whose ownership should not be obvious should ensure usage of a banner that does not provide easy attribution.
-
-Satisfies: SRG-OS-000023-GPOS-00006, SRG-OS-000228-GPOS-00088&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000048</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001384</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001385</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001386</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001387</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001388</xccdf:ident>
-          <xccdf:fixtext fixref="F-75444r1091172_fix">Configure OL 9 to display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system via ssh.
-
-Edit the "etc/ssh/sshd_config" file or a file in "/etc/ssh/sshd_config.d" to uncomment the banner keyword and configure it to point to a file that will contain the logon banner (this file may be named differently or be in a different location if using a version of SSH that is provided by a third-party vendor).
-
-An example configuration line is:
-
-Banner /etc/issue</xccdf:fixtext>
-          <xccdf:fix id="F-75444r1091172_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271487" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271488">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271488r1091176_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000260</xccdf:version>
-          <xccdf:title>OL 9 must have the openssh-clients package installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;This package includes utilities to make encrypted connections and transfer files securely to SSH servers.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75445r1091175_fix">Install the openssh-clients package with the following command:
- 
-$ sudo dnf install -y openssh-clients</xccdf:fixtext>
-          <xccdf:fix id="F-75445r1091175_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271488" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271489">
-        <xccdf:title>SRG-OS-000250-GPOS-00093</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271489r1092627_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000261</xccdf:version>
-          <xccdf:title>OL 9 SSH client must be configured to use only DOD-approved encryption ciphers employing FIPS 140-3 validated cryptographic hash algorithms to protect the confidentiality of SSH client connections.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
-
-Remote access (e.g., RDP) is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
-
-Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
-
-OL 9 incorporates systemwide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the /etc/sysconfig/sshd file. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/opensshserver.config file.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001453</xccdf:ident>
-          <xccdf:fixtext fixref="F-75446r1091178_fix">Configure the SSH client to use only ciphers employing FIPS 140-3 approved algorithms.
-
-Reinstall crypto-policies with the following command:
-
-$ sudo dnf -y reinstall crypto-policies
-
-Set the crypto-policy to FIPS with the following command:
-
-$ sudo update-crypto-policies --set FIPS
-
-Setting system policy to FIPS
-
-Note: Systemwide crypto policies are applied on application startup. It is recommended to restart the system for the change of policies to fully take place.</xccdf:fixtext>
-          <xccdf:fix id="F-75446r1091178_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271489" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271490">
-        <xccdf:title>SRG-OS-000250-GPOS-00093</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271490r1092628_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000262</xccdf:version>
-          <xccdf:title>OL 9 SSH client must be configured to use only DOD-approved Message Authentication Codes (MACs) employing FIPS 140-3 validated cryptographic hash algorithms to protect the confidentiality of SSH client connections.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
-
-Remote access (e.g., RDP) is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
-
-Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
-
-OL 9 incorporates systemwide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the /etc/sysconfig/sshd file. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/opensshserver.config file.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001453</xccdf:ident>
-          <xccdf:fixtext fixref="F-75447r1091181_fix">Configure the SSH client to use only MACs employing FIPS 140-3 approved algorithms.
-
-Reinstall crypto-policies with the following command:
-
-$ sudo dnf -y reinstall crypto-policies
-
-Set the crypto-policy to FIPS with the following command:
-
-$ sudo update-crypto-policies --set FIPS
-
-Setting system policy to FIPS
-
-Note: Systemwide crypto policies are applied on application startup. It is recommended to restart the system for the change of policies to fully take place.</xccdf:fixtext>
-          <xccdf:fix id="F-75447r1091181_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271490" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271491">
-        <xccdf:title>SRG-OS-000105-GPOS-00052</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271491r1091185_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000270</xccdf:version>
-          <xccdf:title>OL 9 must have the openssl-pkcs11 package installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without the use of multifactor authentication, the ease of access to privileged functions is greatly increased. Multifactor authentication requires using two or more factors to achieve authentication. A privileged account is defined as an information system account with authorizations of a privileged user. The DOD CAC with DOD-approved PKI is an example of multifactor authentication.
-
-Satisfies: SRG-OS-000105-GPOS-00052, SRG-OS-000375-GPOS-00160, SRG-OS-000376-GPOS-00161, SRG-OS-000377-GPOS-00162&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000765</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004046</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001953</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001954</xccdf:ident>
-          <xccdf:fixtext fixref="F-75448r1091184_fix">Install the openssl-pkcs11 package with the following command:
- 
-$ sudo dnf install -y openssl-pkcs11</xccdf:fixtext>
-          <xccdf:fix id="F-75448r1091184_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271491" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271493">
-        <xccdf:title>SRG-OS-000705-GPOS-00150</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271493r1091191_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000285</xccdf:version>
-          <xccdf:title>OL 9 must have the SSSD package installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Using an authentication device, such as a CAC or token that is separate from the information system, ensures that even if the information system is compromised, that compromise will not affect credentials stored on the authentication device. 
- 
-Multifactor solutions that require devices separate from information systems gaining access include, for example, hardware tokens providing time-based or challenge-response authenticators and smart cards such as the U.S. Government Personal Identity Verification card and the DOD Common Access Card. 
- 
-A privileged account is defined as an information system account with authorizations of a privileged user. 
- 
-Remote access is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless. 
- 
-This requirement only applies to components where this is specific to the function of the device or has the concept of an organizational user (e.g., VPN, proxy capability). This does not apply to authentication for the purpose of configuring the device itself (management).
-
-Satisfies: SRG-OS-000705-GPOS-00150, SRG-OS-000105-GPOS-00052, SRG-OS-000106-GPOS-00053, SRG-OS-000107-GPOS-00054, SRG-OS-000108-GPOS-00055, SRG-OS-000375-GPOS-00160&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004046</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004047</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000765</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000766</xccdf:ident>
-          <xccdf:fixtext fixref="F-75450r1091190_fix">Install the SSSD package with the following command:
-
-$ sudo dnf install -y sssd</xccdf:fixtext>
-          <xccdf:fix id="F-75450r1091190_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271493" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271494">
-        <xccdf:title>SRG-OS-000705-GPOS-00150</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271494r1091194_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000286</xccdf:version>
-          <xccdf:title>OL 9 must use the SSSD package for multifactor authentication services.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Using an authentication device, such as a CAC or token that is separate from the information system, ensures that even if the information system is compromised, that compromise will not affect credentials stored on the authentication device. 
- 
-Multifactor solutions that require devices separate from information systems gaining access include, for example, hardware tokens providing time-based or challenge-response authenticators and smart cards such as the U.S. Government Personal Identity Verification card and the DOD Common Access Card. 
- 
-A privileged account is defined as an information system account with authorizations of a privileged user. 
- 
-Without the use of multifactor authentication, the ease of access to privileged functions is greatly increased. 
- 
-Multifactor authentication requires using two or more factors to achieve authentication. 
- 
-Factors include:  
-1) Something a user knows (e.g., password/PIN); 
-2) Something a user has (e.g., cryptographic identification device, token); and 
-3) Something a user is (e.g., biometric). 
- 
-A privileged account is defined as an information system account with authorizations of a privileged user. 
- 
-Network access is defined as access to an information system by a user (or a process acting on behalf of a user) communicating through a network (e.g., local area network, wide area network, or the internet). 
- 
-The DOD common access card (CAC) with DOD-approved PKI is an example of multifactor authentication.
-
-Satisfies: SRG-OS-000705-GPOS-00150, SRG-OS-000105-GPOS-00052, SRG-OS-000106-GPOS-00053, SRG-OS-000107-GPOS-00054, SRG-OS-000108-GPOS-00055, SRG-OS-000375-GPOS-00161&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004046</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004047</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000765</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000767</xccdf:ident>
-          <xccdf:fixtext fixref="F-75451r1091193_fix">Configure the sssd.service to start automatically on reboot with the following command: 
- 
-$ sudo systemctl enable sssd.service 
- 
-Ensure the sssd service is running: 
- 
-$ sudo systemctl start sssd.service</xccdf:fixtext>
-          <xccdf:fix id="F-75451r1091193_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271494" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271495">
-        <xccdf:title>SRG-OS-000363-GPOS-00150</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271495r1091197_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000290</xccdf:version>
-          <xccdf:title>OL 9 must have the s-nail package installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The s-nail package provides the mail command required to allow sending email notifications of unauthorized configuration changes to designated personnel.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001744</xccdf:ident>
-          <xccdf:fixtext fixref="F-75452r1091196_fix">Install the s-nail package with the following command:
-
-$ sudo dnf install -y s-nail</xccdf:fixtext>
-          <xccdf:fix id="F-75452r1091196_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271495" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271496">
-        <xccdf:title>SRG-OS-000363-GPOS-00150</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271496r1091200_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000300</xccdf:version>
-          <xccdf:title>OL 9 must have the Advanced Intrusion Detection Environment (AIDE) package installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without verification of the security functions, security functions may not operate correctly, and the failure may go unnoticed. Security function is defined as the hardware, software, and/or firmware of the information system responsible for enforcing the system security policy and supporting the isolation of code and data on which the protection is based. Security functionality includes, but is not limited to, establishing system accounts, configuring access authorizations (i.e., permissions, privileges), setting events to be audited, and setting intrusion detection parameters.
-
-Satisfies: SRG-OS-000363-GPOS-00150, SRG-OS-000445-GPOS-00199&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001744</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002696</xccdf:ident>
-          <xccdf:fixtext fixref="F-75453r1091199_fix">Install AIDE, initialize it, and perform a manual check.
-
-Install AIDE:
-
-$ sudo dnf install -y aide
-
-Initialize AIDE:
-     
-$ sudo /usr/sbin/aide --init
-
-Example output:
-
-Start timestamp: 2023-06-05 10:09:04 -0600 (AIDE 0.16)
-AIDE initialized database at /var/lib/aide/aide.db.new.gz
-
-Number of entries:      86833
-
----------------------------------------------------
-The attributes of the (uncompressed) database(s):
----------------------------------------------------
-
-/var/lib/aide/aide.db.new.gz
-  MD5      : coZUtPHhoFoeD7+k54fUvQ==
-  SHA1     : DVpOEMWJwo0uPgrKZAygIUgSxeM=
-  SHA256   : EQiZH0XNEk001tcDmJa+5STFEjDb4MPE
-             TGdBJ/uvZKc=
-  SHA512   : 86KUqw++PZhoPK0SZvT3zuFq9yu9nnPP
-             toei0nENVELJ1LPurjoMlRig6q69VR8l
-             +44EwO9eYyy9nnbzQsfG1g==
-
-End timestamp: 2023-06-05 10:09:57 -0600 (run time: 0m 53s)
-
-The new database will need to be renamed to be read by AIDE:
-
-$ sudo mv /var/lib/aide/aide.db.new.gz /var/lib/aide/aide.db.gz
-
-Perform a manual check:
-
-$ sudo /usr/sbin/aide --check
-
-Example output:
-
-2023-06-05 10:16:08 -0600 (AIDE 0.16)
-AIDE found NO differences between database and filesystem. Looks okay!!</xccdf:fixtext>
-          <xccdf:fix id="F-75453r1091199_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271496" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271501">
-        <xccdf:title>SRG-OS-000355-GPOS-00143</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271501r1091215_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000310</xccdf:version>
-          <xccdf:title>OL 9 must have the chrony package installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Inaccurate time stamps make it more difficult to correlate events and can lead to an inaccurate analysis. Determining the correct time a particular event occurred on a system is critical when conducting forensic analysis and investigating system events. Sources outside the configured acceptable allowance (drift) may be inaccurate.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004923</xccdf:ident>
-          <xccdf:fixtext fixref="F-75458r1091214_fix">Install the chrony package with the following command:
- 
-$ sudo dnf install -y chrony</xccdf:fixtext>
-          <xccdf:fix id="F-75458r1091214_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271501" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271502">
-        <xccdf:title>SRG-OS-000355-GPOS-00143</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271502r1091218_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000311</xccdf:version>
-          <xccdf:title>OL 9 must enable the chronyd service.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Inaccurate time stamps make it more difficult to correlate events and can lead to an inaccurate analysis. Determining the correct time a particular event occurred on a system is critical when conducting forensic analysis and investigating system events. Sources outside the configured acceptable allowance (drift) may be inaccurate.
-
-Synchronizing internal information system clocks provides uniformity of time stamps for information systems with multiple system clocks and systems connected over a network.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004923</xccdf:ident>
-          <xccdf:fixtext fixref="F-75459r1091217_fix">Enable the chronyd service with the following command:
-
-$ sudo systemctl enable --now chronyd</xccdf:fixtext>
-          <xccdf:fix id="F-75459r1091217_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271502" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271503">
-        <xccdf:title>SRG-OS-000378-GPOS-00163</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271503r1091221_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000320</xccdf:version>
-          <xccdf:title>OL 9 must have the USBGuard package installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The USBguard-daemon is the main component of the USBGuard software framework. It runs as a service in the background and enforces the USB device authorization policy for all USB devices. The policy is defined by a set of rules using a rule language described in the usbguard-rules.conf file. The policy and the authorization state of USB devices can be modified during runtime using the usbguard tool.
-
-The system administrator (SA) must work with the site information system security officer (ISSO) to determine a list of authorized peripherals and establish rules within the USBGuard software framework to allow only authorized devices.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001958</xccdf:ident>
-          <xccdf:fixtext fixref="F-75460r1091220_fix">Install the usbguard package with the following command:
-
-$ sudo dnf install -y usbguard</xccdf:fixtext>
-          <xccdf:fix id="F-75460r1091220_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271503" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271504">
-        <xccdf:title>SRG-OS-000378-GPOS-00163</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271504r1091224_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000321</xccdf:version>
-          <xccdf:title>OL 9 must enable the USBGuard package.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The USBguard-daemon is the main component of the USBGuard software framework. It runs as a service in the background and enforces the USB device authorization policy for all USB devices. The policy is defined by a set of rules using a rule language described in the usbguard-rules.conf file. The policy and the authorization state of USB devices can be modified during runtime using the usbguard tool.
-
-The system administrator (SA) must work with the site information system security officer (ISSO) to determine a list of authorized peripherals and establish rules within the USBGuard software framework to allow only authorized devices.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001958</xccdf:ident>
-          <xccdf:fixtext fixref="F-75461r1091223_fix">Enable the USBGuard service with the following command:
-
-$ sudo systemctl enable --now usbguard</xccdf:fixtext>
-          <xccdf:fix id="F-75461r1091223_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271504" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271505">
-        <xccdf:title>SRG-OS-000366-GPOS-00153</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271505r1092629_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000330</xccdf:version>
-          <xccdf:title>OL 9 must have the subscription-manager package installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Oracle Linux Manager, based on the Spacewalk open source software, helps automate Oracle Linux systems management. This enables users to control the system software life cycle from initial installation through maintenance, software configuration, upgrades, and eventual decommissioning. Oracle Linux Manager also helps automate a kickstart installation, system configuration, and maintenance tasks, which enables rapid deployment of proven and consistent software configurations for Oracle Linux systems.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-003992</xccdf:ident>
-          <xccdf:fixtext fixref="F-75462r1091226_fix">Install the oracle-linux-manager package with the following command:
- 
-$ sudo dnf install -y oracle-linux-manager-client-release-el9</xccdf:fixtext>
-          <xccdf:fix id="F-75462r1091226_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271505" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271506">
-        <xccdf:title>SRG-OS-000370-GPOS-00155</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271506r1091230_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000340</xccdf:version>
-          <xccdf:title>OL 9 must have the fapolicy module installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The organization must identify authorized software programs and permit execution of authorized software. The process used to identify software programs that are authorized to execute on organizational information systems is commonly referred to as allowlisting.
-
-Using an allowlist provides a configuration management method for allowing the execution of only authorized software. Using only authorized software decreases risk by limiting the number of potential vulnerabilities. Verification of allowlisted software occurs prior to execution or at system startup.
-
-User home directories/folders may contain information of a sensitive nature. Nonprivileged users should coordinate any sharing of information with a system administrator (SA) through shared resources.
-
-OL 9 ships with many optional packages. One such package is a file access policy daemon called "fapolicyd". "fapolicyd" is a userspace daemon that determines access rights to files based on attributes of the process and file. It can be used to either blocklist or allowlist processes or file access.
-
-Proceed with caution with enforcing the use of this daemon. Improper configuration may render the system nonfunctional. The "fapolicyd" API is not namespace aware and can cause issues when launching or running containers.
-
-Satisfies: SRG-OS-000370-GPOS-00155, SRG-OS-000368-GPOS-00154&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001774</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
-          <xccdf:fixtext fixref="F-75463r1091229_fix">Install the fapolicyd package with the following command:
- 
-$ sudo dnf install -y fapolicyd</xccdf:fixtext>
-          <xccdf:fix id="F-75463r1091229_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271506" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271507">
-        <xccdf:title>SRG-OS-000370-GPOS-00155</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271507r1091233_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000341</xccdf:version>
-          <xccdf:title>OL 9 must enable the fapolicy module.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The organization must identify authorized software programs and permit execution of authorized software. The process used to identify software programs that are authorized to execute on organizational information systems is commonly referred to as allowlisting.
-
-Using an allowlist provides a configuration management method for allowing the execution of only authorized software. Using only authorized software decreases risk by limiting the number of potential vulnerabilities. Verification of allowlisted software occurs prior to execution or at system startup.
-
-User home directories/folders may contain information of a sensitive nature. Nonprivileged users should coordinate any sharing of information with a system administrator (SA) through shared resources.
-
-OL 9 ships with many optional packages. One such package is a file access policy daemon called "fapolicyd". "fapolicyd" is a userspace daemon that determines access rights to files based on attributes of the process and file. It can be used to either blocklist or allowlist processes or file access.
-
-Proceed with caution with enforcing the use of this daemon. Improper configuration may render the system nonfunctional. The "fapolicyd" API is not namespace aware and can cause issues when launching or running containers.
-
-Satisfies: SRG-OS-000370-GPOS-00155, SRG-OS-000368-GPOS-00154&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001774</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
-          <xccdf:fixtext fixref="F-75464r1091232_fix">Enable the fapolicyd service with the following command:
-
-$ sudo systemctl enable --now fapolicyd</xccdf:fixtext>
-          <xccdf:fix id="F-75464r1091232_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271507" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271508">
-        <xccdf:title>SRG-OS-000479-GPOS-00224</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271508r1091236_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000350</xccdf:version>
-          <xccdf:title>OL 9 must have the rsyslog package installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;rsyslogd is a system utility providing support for message logging. Support for both internet and Unix domain sockets enables this utility to support both local and remote logging. Couple this utility with "gnutls" (which is a secure communications library implementing the SSL, TLS, and DTLS protocols), to create a method to securely encrypt and offload auditing.
-
-Satisfies: SRG-OS-000479-GPOS-00224, SRG-OS-000051-GPOS-00024&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001851</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000154</xccdf:ident>
-          <xccdf:fixtext fixref="F-75465r1091235_fix">The rsyslogd package can be installed with the following command:
- 
-$ sudo dnf install -y rsyslogd</xccdf:fixtext>
-          <xccdf:fix id="F-75465r1091235_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271508" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271509">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271509r1091239_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000351</xccdf:version>
-          <xccdf:title>OL 9 must be configured so that the rsyslog service is active.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The rsyslog service must be running to provide logging services, which are essential to system administration.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75466r1091238_fix">Enable the rsyslog service with the following command:
-
-$ sudo systemctl enable --now rsyslog</xccdf:fixtext>
-          <xccdf:fix id="F-75466r1091238_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271509" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271510">
-        <xccdf:title>SRG-OS-000120-GPOS-00061</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271510r1091242_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000355</xccdf:version>
-          <xccdf:title>OL 9 must have the packages required for encrypting offloaded audit logs installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The rsyslog-gnutls package provides Transport Layer Security (TLS) support for the rsyslog daemon, which enables secure remote logging.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000803</xccdf:ident>
-          <xccdf:fixtext fixref="F-75467r1091241_fix">Install the rsyslog-gnutls package with the following command:
- 
-$ sudo dnf install -y rsyslog-gnutls</xccdf:fixtext>
-          <xccdf:fix id="F-75467r1091241_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271510" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271511">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271511r1091245_rule" severity="low" weight="10.0">
-          <xccdf:version>OL09-00-000360</xccdf:version>
-          <xccdf:title>OL 9 must enable the hardware random number generator entropy gatherer service.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The most important characteristic of a random number generator is its randomness, namely its ability to deliver random numbers that are impossible to predict. Entropy in computer security is associated with the unpredictability of a source of randomness. The random source with high entropy tends to achieve a uniform distribution of random values. Random number generators are one of the most important building blocks of cryptosystems.
-
-The rngd service feeds random data from hardware device to kernel random device. Quality (nonpredictable) random number generation is important for several security functions (i.e., ciphers).&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75468r1091244_fix">Install the rng-tools package with the following command:
-
-$ sudo dnf install -y rng-tools
-
-Enable the rngd service run the following command:
-
-$ sudo systemctl enable --now rngd</xccdf:fixtext>
-          <xccdf:fix id="F-75468r1091244_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271511" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271512">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271512r1091248_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000370</xccdf:version>
-          <xccdf:title>OL 9 must have the rng-tools package installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;rng-tools provides hardware random number generator tools, such as those used in the formation of x509/PKI certificates.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75469r1091247_fix">Install the rng-tools package with the following command:
- 
-$ sudo dnf install -y rng-tools</xccdf:fixtext>
-          <xccdf:fix id="F-75469r1091247_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271512" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271513">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271513r1091251_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000380</xccdf:version>
-          <xccdf:title>OL 9 must have the nss-tools package installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Install the "nss-tools" package to install command-line tools to manipulate the NSS certificate and key database.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75470r1091250_fix">Install the nss-tools package with the following command:
- 
-$ sudo dnf install -y nss-tools</xccdf:fixtext>
-          <xccdf:fix id="F-75470r1091250_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271513" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271514">
-        <xccdf:title>SRG-OS-000375-GPOS-00160</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271514r1091254_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000390</xccdf:version>
-          <xccdf:title>OL 9 must have the pcsc-lite package installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The pcsc-lite package must be installed if it is to be available for multifactor authentication using smart cards.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004046</xccdf:ident>
-          <xccdf:fixtext fixref="F-75471r1091253_fix">Install the pcsc-lite package with the following command:
- 
-$ sudo dnf install -y pcsc-lite</xccdf:fixtext>
-          <xccdf:fix id="F-75471r1091253_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271514" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271515">
-        <xccdf:title>SRG-OS-000375-GPOS-00160</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271515r1091257_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000400</xccdf:version>
-          <xccdf:title>OL 9 must have the opensc package installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The use of PIV credentials facilitates standardization and reduces the risk of unauthorized access.
-
-The DOD has mandated the use of the Common Access Card (CAC) to support identity management and personal authentication for systems covered under Homeland Security Presidential Directive (HSPD) 12, as well as making the CAC a primary component of layered protection for national security systems.
-
-Satisfies: SRG-OS-000375-GPOS-00160, SRG-OS-000376-GPOS-00161&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004046</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001953</xccdf:ident>
-          <xccdf:fixtext fixref="F-75472r1091256_fix">Install the opensc package with the following command:
- 
-$ sudo dnf install -y opensc</xccdf:fixtext>
-          <xccdf:fix id="F-75472r1091256_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271515" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271516">
-        <xccdf:title>SRG-OS-000375-GPOS-00160</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271516r1091260_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000401</xccdf:version>
-          <xccdf:title>OL 9 must be configured so that the pcscd service is active.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The information system ensures that even if the information system is compromised, that compromise will not affect credentials stored on the authentication device.
-
-The daemon program for pcsc-lite and the MuscleCard framework is pcscd. It is a resource manager that coordinates communications with smart card readers and smart cards and cryptographic tokens that are connected to the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004046</xccdf:ident>
-          <xccdf:fixtext fixref="F-75473r1091259_fix">Enable the pcscd service with the following command:
-
-$ sudo systemctl enable --now pcscd</xccdf:fixtext>
-          <xccdf:fix id="F-75473r1091259_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271516" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271517">
-        <xccdf:title>SRG-OS-000120-GPOS-00061</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271517r1101885_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000410</xccdf:version>
-          <xccdf:title>OL 9 must have the libreswan package installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Providing the ability for remote users or systems to initiate a secure VPN connection protects information when it is transmitted over a wide area network.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000803</xccdf:ident>
-          <xccdf:fixtext fixref="F-75474r1091262_fix">Install the libreswan service (if it is not already installed) with the following command:
-
-$ sudo dnf install -y libreswan</xccdf:fixtext>
-          <xccdf:fix id="F-75474r1091262_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271517" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271518">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271518r1091266_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000430</xccdf:version>
-          <xccdf:title>OL 9 must have the gnutls-utils package installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;GnuTLS is a secure communications library implementing the SSL, TLS, and DTLS protocols and technologies around them. It provides a simple C language application programming interface (API) to access the secure communications protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP and other required structures. This package contains command line TLS client and server and certificate manipulation tools.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75475r1091265_fix">Install the gnutls-utils package with the following command:
- 
-$ sudo dnf install -y gnutls-utils</xccdf:fixtext>
-          <xccdf:fix id="F-75475r1091265_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271518" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271519">
-        <xccdf:title>SRG-OS-000062-GPOS-00031</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271519r1091269_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000440</xccdf:version>
-          <xccdf:title>OL 9 must have the audit package installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without establishing what type of events occurred, the source of events, where events occurred, and the outcome of events, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.
-
-Audit record content that may be necessary to satisfy this requirement includes, for example, time stamps, source and destination addresses, user/process identifiers, event descriptions, success/fail indications, filenames involved, and access control or flow control rules invoked.
-
-Associating event types with detected events in audit logs provides a means of investigating an attack, recognizing resource utilization or capacity thresholds, or identifying an improperly configured OL 9 system.
-
-Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000038-GPOS-00016, SRG-OS-000039-GPOS-00017, SRG-OS-000040-GPOS-00018, SRG-OS-000041-GPOS-00019, SRG-OS-000042-GPOS-00021, SRG-OS-000051-GPOS-00024, SRG-OS-000054-GPOS-00025, SRG-OS-000122-GPOS-00063, SRG-OS-000254-GPOS-00095, SRG-OS-000255-GPOS-00096, SRG-OS-000337-GPOS-00129, SRG-OS-000348-GPOS-00136, SRG-OS-000349-GPOS-00137, SRG-OS-000350-GPOS-00138, SRG-OS-000351-GPOS-00139, SRG-OS-000352-GPOS-00140, SRG-OS-000353-GPOS-00141, SRG-OS-000354-GPOS-00142, SRG-OS-000358-GPOS-00145, SRG-OS-000365-GPOS-00152, SRG-OS-000392-GPOS-00172, SRG-OS-000475-GPOS-00220, SRG-OS-000055-GPOS-00026&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000131</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000132</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000133</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000134</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000154</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000158</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001876</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001464</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001487</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001914</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001875</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001877</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001878</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001879</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001880</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001881</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001882</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001889</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-003938</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000159</xccdf:ident>
-          <xccdf:fixtext fixref="F-75476r1091268_fix">Install the audit service package (if the audit service is not already installed) with the following command:
-
-$ sudo dnf install -y audit</xccdf:fixtext>
-          <xccdf:fix id="F-75476r1091268_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271519" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271520">
-        <xccdf:title>SRG-OS-000062-GPOS-00031</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271520r1091272_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000441</xccdf:version>
-          <xccdf:title>OL 9 audit service must be enabled.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without establishing what type of events occurred, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack. Ensuring the "auditd" service is active ensures audit records generated by the kernel are appropriately recorded.
-
-Additionally, a properly configured audit subsystem ensures that actions of individual system users can be uniquely traced to those users so they can be held accountable for their actions.
-
-Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000038-GPOS-00016, SRG-OS-000039-GPOS-00017, SRG-OS-000040-GPOS-00018, SRG-OS-000041-GPOS-00019, SRG-OS-000042-GPOS-00021, SRG-OS-000051-GPOS-00024, SRG-OS-000054-GPOS-00025, SRG-OS-000122-GPOS-00063, SRG-OS-000254-GPOS-00095, SRG-OS-000255-GPOS-00096, SRG-OS-000337-GPOS-00129, SRG-OS-000348-GPOS-00136, SRG-OS-000349-GPOS-00137, SRG-OS-000350-GPOS-00138, SRG-OS-000351-GPOS-00139, SRG-OS-000352-GPOS-00140, SRG-OS-000353-GPOS-00141, SRG-OS-000354-GPOS-00142, SRG-OS-000358-GPOS-00145, SRG-OS-000365-GPOS-00152, SRG-OS-000392-GPOS-00172, SRG-OS-000475-GPOS-00220&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000131</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000132</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000133</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000134</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000154</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000158</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001876</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001464</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001487</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001914</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001875</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001877</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001878</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001879</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001880</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001881</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001882</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001889</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-003938</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75477r1091271_fix">Enable the auditd service with the following command:
-
-$ sudo systemctl enable --now auditd</xccdf:fixtext>
-          <xccdf:fix id="F-75477r1091271_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271520" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271521">
-        <xccdf:title>SRG-OS-000342-GPOS-00133</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271521r1091275_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000450</xccdf:version>
-          <xccdf:title>OL 9 must have the audispd-plugins package installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;audispd-plugins provides plug-ins for the real-time interface to the audit subsystem, audispd. These plug-ins can do things like relay events to remote machines or analyze events for suspicious behavior.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001851</xccdf:ident>
-          <xccdf:fixtext fixref="F-75478r1091274_fix">The audispd-plugins package can be installed with the following command:
- 
-$ sudo dnf install -y audispd-plugins</xccdf:fixtext>
-          <xccdf:fix id="F-75478r1091274_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271521" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271522">
-        <xccdf:title>SRG-OS-000437-GPOS-00194</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271522r1091278_rule" severity="low" weight="10.0">
-          <xccdf:version>OL09-00-000495</xccdf:version>
-          <xccdf:title>OL 9 must remove all software components after updated versions have been installed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Previous versions of software components that are not removed from the information system after updates have been installed may be exploited by some adversaries.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002617</xccdf:ident>
-          <xccdf:fixtext fixref="F-75479r1091277_fix">Configure OL 9 to remove all software components after updated versions have been installed.
-
-Edit the file /etc/dnf/dnf.conf by adding or editing the following line:
-
- clean_requirements_on_remove=1</xccdf:fixtext>
-          <xccdf:fix id="F-75479r1091277_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271522" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271523">
-        <xccdf:title>SRG-OS-000366-GPOS-00153</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271523r1091281_rule" severity="high" weight="10.0">
-          <xccdf:version>OL09-00-000496</xccdf:version>
-          <xccdf:title>OL 9 must check the GPG signature of locally installed software packages before installation.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Changes to any software components can have significant effects on the overall security of the operating system. This requirement ensures the software has not been tampered with and that it has been provided by a trusted vendor.
-
-All software packages must be signed with a cryptographic key recognized and approved by the organization.
-
-Verifying the authenticity of software prior to installation validates the integrity of the software package received from a vendor. This verifies the software has not been tampered with and that it has been provided by a trusted vendor.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-003992</xccdf:ident>
-          <xccdf:fixtext fixref="F-75480r1091280_fix">Configure dnf to always check the GPG signature of local software packages before installation.
-
-Add or update the following line in the [main] section of the /etc/dnf/dnf.conf file:
-
-localpkg_gpgcheck=1</xccdf:fixtext>
-          <xccdf:fix id="F-75480r1091280_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271523" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271524">
-        <xccdf:title>SRG-OS-000366-GPOS-00153</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271524r1091284_rule" severity="high" weight="10.0">
-          <xccdf:version>OL09-00-000497</xccdf:version>
-          <xccdf:title>OL 9 must check the GPG signature of software packages originating from external software repositories before installation.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Changes to any software components can have significant effects on the overall security of the operating system. This requirement ensures the software has not been tampered with and that it has been provided by a trusted vendor.
-
-All software packages must be signed with a cryptographic key recognized and approved by the organization.
-
-Verifying the authenticity of software prior to installation validates the integrity of the software package received from a vendor. This verifies the software has not been tampered with and that it has been provided by a trusted vendor.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-003992</xccdf:ident>
-          <xccdf:fixtext fixref="F-75481r1091283_fix">Configure dnf to always check the GPG signature of software packages originating from external software repositories before installation.
-
-Add or update the following line in the [main] section of the /etc/dnf/dnf.conf file:
-
-gpgcheck=1</xccdf:fixtext>
-          <xccdf:fix id="F-75481r1091283_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271524" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271525">
-        <xccdf:title>SRG-OS-000366-GPOS-00153</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271525r1091287_rule" severity="high" weight="10.0">
-          <xccdf:version>OL09-00-000498</xccdf:version>
-          <xccdf:title>OL 9 must have GPG signature verification enabled for all software repositories.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Changes to any software components can have significant effects on the overall security of the operating system. This requirement ensures the software has not been tampered with and that it has been provided by a trusted vendor.
-
-All software packages must be signed with a cryptographic key recognized and approved by the organization.
-
-Verifying the authenticity of software prior to installation validates the integrity of the software package received from a vendor. This verifies the software has not been tampered with and that it has been provided by a trusted vendor.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-003992</xccdf:ident>
-          <xccdf:fixtext fixref="F-75482r1091286_fix">Configure all software repositories defined in "/etc/yum.repos.d/" to have "gpgcheck" enabled:
-
-$ sudo sed -i 's/gpgcheck\s*=.*/gpgcheck=1/g' /etc/yum.repos.d/*</xccdf:fixtext>
-          <xccdf:fix id="F-75482r1091286_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271525" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271527">
-        <xccdf:title>SRG-OS-000004-GPOS-00004</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271527r1092474_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000500</xccdf:version>
-          <xccdf:title>OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/sudoers.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The actions taken by system administrators must be audited to keep a record of what was executed on the system, as well as for accountability purposes. Editing the sudoers file may be sign of an attacker trying to establish persistent methods to a system, auditing the editing of the sudoers files mitigates this risk.
-
-Satisfies: SRG-OS-000004-GPOS-00004, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000304-GPOS-00121, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000470-GPOS-00214, SRG-OS-000471-GPOS-00215, SRG-OS-000239-GPOS-00089, SRG-OS-000240-GPOS-00090, SRG-OS-000241-GPOS-00091, SRG-OS-000303-GPOS-00120, SRG-OS-000466-GPOS-00210, SRG-OS-000476-GPOS-00221&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000018</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000015</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001403</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001404</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001405</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002130</xccdf:ident>
-          <xccdf:fixtext fixref="F-75484r1092473_fix">Configure OL 9 to generate audit records for all account creations, modifications, disabling, and termination events that affect "/etc/sudoers".
-
-Add or update the following file system rule to "/etc/audit/rules.d/audit.rules":
-
--w /etc/sudoers -p wa -k identity
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75484r1092473_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271527" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271528">
-        <xccdf:title>SRG-OS-000004-GPOS-00004</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271528r1092476_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000505</xccdf:version>
-          <xccdf:title>OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/sudoers.d/ directory.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The actions taken by system administrators must be audited to keep a record of what was executed on the system, as well as for accountability purposes. Editing the sudoers file may be sign of an attacker trying to establish persistent methods to a system, auditing the editing of the sudoers files mitigates this risk.
-
-Satisfies: SRG-OS-000004-GPOS-00004, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000304-GPOS-00121, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000470-GPOS-00214, SRG-OS-000471-GPOS-00215, SRG-OS-000239-GPOS-00089, SRG-OS-000240-GPOS-00090, SRG-OS-000241-GPOS-00091, SRG-OS-000303-GPOS-00120, SRG-OS-000466-GPOS-00210, SRG-OS-000476-GPOS-00221&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000018</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000015</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001403</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001404</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001405</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002130</xccdf:ident>
-          <xccdf:fixtext fixref="F-75485r1092475_fix">Configure OL 9 to generate audit records for all account creations, modifications, disabling, and termination events that affect "/etc/sudoers.d/".
-
-Add or update the following file system rule to "/etc/audit/rules.d/audit.rules":
-
--w /etc/sudoers.d/ -p wa -k identity
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75485r1092475_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271528" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271529">
-        <xccdf:title>SRG-OS-000004-GPOS-00004</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271529r1092478_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000510</xccdf:version>
-          <xccdf:title>OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/group.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;In addition to auditing new user and group accounts, these watches will alert the system administrator(s) to any modifications. Any unexpected users, groups, or modifications must be investigated for legitimacy.
-
-Satisfies: SRG-OS-000004-GPOS-00004, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000304-GPOS-00121, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000470-GPOS-00214, SRG-OS-000471-GPOS-00215, SRG-OS-000239-GPOS-00089, SRG-OS-000240-GPOS-00090, SRG-OS-000241-GPOS-00091, SRG-OS-000303-GPOS-00120, SRG-OS-000466-GPOS-00210, SRG-OS-000476-GPOS-00221&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000018</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000015</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001403</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001404</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001405</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002130</xccdf:ident>
-          <xccdf:fixtext fixref="F-75486r1092477_fix">Configure OL 9 to generate audit records for all account creations, modifications, disabling, and termination events that affect "/etc/group".
-
-Add or update the following file system rule to "/etc/audit/rules.d/audit.rules":
-
--w /etc/group -p wa -k identity
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75486r1092477_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271529" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271530">
-        <xccdf:title>SRG-OS-000004-GPOS-00004</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271530r1092480_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000515</xccdf:version>
-          <xccdf:title>OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/gshadow.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;In addition to auditing new user and group accounts, these watches will alert the system administrator(s) to any modifications. Any unexpected users, groups, or modifications should be investigated for legitimacy.
-
-Satisfies: SRG-OS-000004-GPOS-00004, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000304-GPOS-00121, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000470-GPOS-00214, SRG-OS-000471-GPOS-00215, SRG-OS-000239-GPOS-00089, SRG-OS-000240-GPOS-00090, SRG-OS-000241-GPOS-00091, SRG-OS-000303-GPOS-00120, SRG-OS-000466-GPOS-00210, SRG-OS-000476-GPOS-00221&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000018</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000015</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001403</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001404</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001405</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002130</xccdf:ident>
-          <xccdf:fixtext fixref="F-75487r1092479_fix">Configure OL 9 to generate audit records for all account creations, modifications, disabling, and termination events that affect "/etc/gshadow".
-
-Add or update the following file system rule to "/etc/audit/rules.d/audit.rules":
-
--w /etc/gshadow -p wa -k identity
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75487r1092479_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271530" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271531">
-        <xccdf:title>SRG-OS-000004-GPOS-00004</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271531r1092482_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000520</xccdf:version>
-          <xccdf:title>OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/opasswd.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;In addition to auditing new user and group accounts, these watches will alert the system administrator(s) to any modifications. Any unexpected users, groups, or modifications should be investigated for legitimacy.
-
-Satisfies: SRG-OS-000004-GPOS-00004, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000304-GPOS-00121, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000470-GPOS-00214, SRG-OS-000471-GPOS-00215, SRG-OS-000239-GPOS-00089, SRG-OS-000240-GPOS-00090, SRG-OS-000241-GPOS-00091, SRG-OS-000303-GPOS-00120, SRG-OS-000466-GPOS-00210, SRG-OS-000476-GPOS-00221&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000018</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000015</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001403</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001404</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001405</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002130</xccdf:ident>
-          <xccdf:fixtext fixref="F-75488r1092481_fix">Configure OL 9 to generate audit records for all account creations, modifications, disabling, and termination events that affect "/etc/security/opasswd".
-
-Add or update the following file system rule to "/etc/audit/rules.d/audit.rules":
-
--w /etc/security/opasswd -p wa -k identity
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75488r1092481_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271531" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271532">
-        <xccdf:title>SRG-OS-000004-GPOS-00004</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271532r1092484_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000525</xccdf:version>
-          <xccdf:title>OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/passwd.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;In addition to auditing new user and group accounts, these watches will alert the system administrator(s) to any modifications. Any unexpected users, groups, or modifications should be investigated for legitimacy.
-
-Satisfies: SRG-OS-000004-GPOS-00004, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000304-GPOS-00121, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000470-GPOS-00214, SRG-OS-000471-GPOS-00215, SRG-OS-000239-GPOS-00089, SRG-OS-000240-GPOS-00090, SRG-OS-000241-GPOS-00091, SRG-OS-000303-GPOS-00120, SRG-OS-000466-GPOS-00210, SRG-OS-000476-GPOS-00221, SRG-OS-000274-GPOS-00104, SRG-OS-000275-GPOS-00105, SRG-OS-000276-GPOS-00106, SRG-OS-000277-GPOS-00107&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000018</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000015</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001403</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001404</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001405</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002130</xccdf:ident>
-          <xccdf:fixtext fixref="F-75489r1092483_fix">Configure OL 9 to generate audit records for all account creations, modifications, disabling, and termination events that affect "/etc/passwd".
-
-Add or update the following file system rule to "/etc/audit/rules.d/audit.rules":
-
--w /etc/passwd -p wa -k identity
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75489r1092483_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271532" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271533">
-        <xccdf:title>SRG-OS-000004-GPOS-00004</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271533r1092486_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000530</xccdf:version>
-          <xccdf:title>OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/shadow.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;In addition to auditing new user and group accounts, these watches will alert the system administrator(s) to any modifications. Any unexpected users, groups, or modifications should be investigated for legitimacy.
-
-Satisfies: SRG-OS-000004-GPOS-00004, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000304-GPOS-00121, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000470-GPOS-00214, SRG-OS-000471-GPOS-00215, SRG-OS-000239-GPOS-00089, SRG-OS-000240-GPOS-00090, SRG-OS-000241-GPOS-00091, SRG-OS-000303-GPOS-00120, SRG-OS-000466-GPOS-00210, SRG-OS-000476-GPOS-00221&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000018</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000015</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001403</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001404</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001405</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002130</xccdf:ident>
-          <xccdf:fixtext fixref="F-75490r1092485_fix">Configure OL 9 to generate audit records for all account creations, modifications, disabling, and termination events that affect "/etc/shadow".
-
-Add or update the following file system rule to "/etc/audit/rules.d/audit.rules":
-
--w /etc/shadow -p wa -k identity
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75490r1092485_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271533" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271534">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271534r1092488_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000535</xccdf:version>
-          <xccdf:title>OL 9 must audit all uses of the unix_update command.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000064-GPOS-00033, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:fixtext fixref="F-75491r1092487_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the "unix_update" command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
-
--a always,exit -F path=/usr/sbin/unix_update -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-unix-update
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75491r1092487_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271534" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271535">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271535r1092490_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000540</xccdf:version>
-          <xccdf:title>OL 9 must audit all uses of the su command.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000064-GPOS-00033, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000466-GPOS-00210&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:fixtext fixref="F-75492r1092489_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the su command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
-
--a always,exit -F path=/usr/bin/su -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-priv_change
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75492r1092489_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271535" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271536">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271536r1092492_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000545</xccdf:version>
-          <xccdf:title>OL 9 must audit all uses of the setxattr, fsetxattr, lsetxattr, removexattr, fremovexattr, and lremovexattr system calls.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000458-GPOS-00203, SRG-OS-000462-GPOS-00206, SRG-OS-000463-GPOS-00207, SRG-OS-000471-GPOS-00215, SRG-OS-000474-GPOS-00219, SRG-OS-000466-GPOS-00210, SRG-OS-000064-GPOS-00033&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75493r1092491_fix">Configure OL 9 to audit the execution of the setxattr, fsetxattr, lsetxattr, removexattr, fremovexattr, and lremovexattr system calls by adding or updating the following lines to "/etc/audit/rules.d/audit.rules":
-
--a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid&gt;=1000 -F auid!=unset -k perm_mod
--a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid&gt;=1000 -F auid!=unset -k perm_mod
-
--a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid=0 -k perm_mod
--a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid=0 -k perm_mod
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75493r1092491_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271536" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271537">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271537r1092494_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000550</xccdf:version>
-          <xccdf:title>OL 9 must audit all uses of the chage command.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000468-GPOS-00212, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75494r1092493_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the chage command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
-
--a always,exit -F path=/usr/bin/chage -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-chage
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75494r1092493_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271537" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271538">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271538r1092496_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000555</xccdf:version>
-          <xccdf:title>OL 9 must audit all uses of the chcon command.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-When a user logs on, the auid is set to the uid of the account that is being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000468-GPOS-00212, SRG-OS-000471-GPOS-00215, SRG-OS-000463-GPOS-00207, SRG-OS-000465-GPOS-00209&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75495r1092495_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the chcon command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
-
--a always,exit -F path=/usr/bin/chcon -F perm=x -F auid&gt;=1000 -F auid!=unset -k perm_mod
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75495r1092495_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271538" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271539">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271539r1092498_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000560</xccdf:version>
-          <xccdf:title>OL 9 must audit all uses of the setfacl command.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75496r1092497_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the setfacl command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
-
--a always,exit -F path=/usr/bin/setfacl -F perm=x -F auid&gt;=1000 -F auid!=unset -k perm_mod
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75496r1092497_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271539" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271540">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271540r1092500_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000565</xccdf:version>
-          <xccdf:title>OL 9 must audit all uses of the chsh command.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75497r1092499_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the chsh command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
-
--a always,exit -F path=/usr/bin/chsh -F perm=x -F auid&gt;=1000 -F auid!=unset -k priv_cmd
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75497r1092499_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271540" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271541">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271541r1092502_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000570</xccdf:version>
-          <xccdf:title>OL 9 must audit all uses of the crontab command.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75498r1092501_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the crontab command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
-
--a always,exit -F path=/usr/bin/crontab -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-crontab
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75498r1092501_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271541" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271542">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271542r1092504_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000575</xccdf:version>
-          <xccdf:title>OL 9 must audit all uses of the gpasswd command.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75499r1092503_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the gpasswd command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
-
--a always,exit -F path=/usr/bin/gpasswd -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-gpasswd
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75499r1092503_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271542" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271543">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271543r1092506_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000580</xccdf:version>
-          <xccdf:title>OL 9 must audit all uses of the newgrp command.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-When a user logs on, the auid is set to the uid of the account that is being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75500r1092505_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the newgrp command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
-
--a always,exit -F path=/usr/bin/newgrp -F perm=x -F auid&gt;=1000 -F auid!=unset -k priv_cmd
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75500r1092505_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271543" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271544">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271544r1092508_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000585</xccdf:version>
-          <xccdf:title>OL 9 must audit all uses of the pam_timestamp_check command.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75501r1092507_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the pam_timestamp_check command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
-
--a always,exit -F path=/usr/sbin/pam_timestamp_check -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-pam_timestamp_check
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75501r1092507_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271544" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271545">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271545r1092510_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000590</xccdf:version>
-          <xccdf:title>OL 9 must audit all uses of the passwd command.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75502r1092509_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the passwd command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
-
--a always,exit -F path=/usr/bin/passwd -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-passwd
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75502r1092509_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271545" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271546">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271546r1092512_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000595</xccdf:version>
-          <xccdf:title>OL 9 must audit all uses of the postdrop command.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped however, by combining system calls into one rule whenever possible.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75503r1092511_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the postdrop command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
-
--a always,exit -F path=/usr/sbin/postdrop -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-unix-update
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75503r1092511_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271546" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271547">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271547r1092514_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000600</xccdf:version>
-          <xccdf:title>OL 9 must audit all uses of the postqueue command.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75504r1092513_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the postqueue command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
-
--a always,exit -F path=/usr/sbin/postqueue -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-unix-update
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75504r1092513_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271547" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271548">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271548r1092516_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000605</xccdf:version>
-          <xccdf:title>OL 9 must audit all uses of the ssh-agent command.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75505r1092515_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the ssh-agent command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
-
--a always,exit -F path=/usr/bin/ssh-agent -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-ssh
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75505r1092515_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271548" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271549">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271549r1092518_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000610</xccdf:version>
-          <xccdf:title>OL 9 must audit all uses of the ssh-keysign command.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75506r1092517_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the ssh-keysign command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
-
--a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-ssh
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75506r1092517_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271549" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271550">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271550r1092520_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000615</xccdf:version>
-          <xccdf:title>OL 9 must audit all uses of the sudoedit command.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75507r1092519_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the sudoedit command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
-
--a always,exit -F path=/usr/bin/sudoedit -F perm=x -F auid&gt;=1000 -F auid!=unset -k priv_cmd
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75507r1092519_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271550" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271551">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271551r1092522_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000620</xccdf:version>
-          <xccdf:title>OL 9 must audit all uses of the unix_chkpwd command.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75508r1092521_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the unix_chkpwd command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
-
--a always,exit -F path=/usr/sbin/unix_chkpwd -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-unix-update
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75508r1092521_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271551" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271552">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271552r1092524_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000625</xccdf:version>
-          <xccdf:title>OL 9 must audit all uses of the userhelper command.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75509r1092523_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the userhelper command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
-
--a always,exit -F path=/usr/sbin/userhelper -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-unix-update
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75509r1092523_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271552" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271553">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271553r1092526_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000630</xccdf:version>
-          <xccdf:title>OL 9 must audit all uses of the mount command.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-When a user logs on, the auid is set to the uid of the account that is being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75510r1092525_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the mount command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
-
--a always,exit -F path=/usr/bin/mount -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-mount
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75510r1092525_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271553" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271554">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271554r1092528_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000635</xccdf:version>
-          <xccdf:title>OL 9 must audit all uses of the truncate, ftruncate, creat, open, openat, and open_by_handle_at system calls.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000064-GPOS-00033, SRG-OS-000458-GPOS-00203, SRG-OS-000461-GPOS-00205&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75511r1092527_fix">Configure OL 9 to generate an audit event for any successful/unsuccessful use of the truncate, ftruncate, creat, open, openat, and open_by_handle_at system calls by adding or updating the following rules in the "/etc/audit/rules.d/audit.rules" file:
-
--a always,exit -F arch=b32 -S truncate,ftruncate,creat,open,openat,open_by_handle_at -F exit=-EPERM -F auid&gt;=1000 -F auid!=unset -k perm_access
--a always,exit -F arch=b64 -S truncate,ftruncate,creat,open,openat,open_by_handle_at -F exit=-EPERM -F auid&gt;=1000 -F auid!=unset -k perm_access
-
--a always,exit -F arch=b32 -S truncate,ftruncate,creat,open,openat,open_by_handle_at -F exit=-EACCES -F auid&gt;=1000 -F auid!=unset -k perm_access
--a always,exit -F arch=b64 -S truncate,ftruncate,creat,open,openat,open_by_handle_at -F exit=-EACCES -F auid&gt;=1000 -F auid!=unset -k perm_access
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75511r1092527_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271554" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271555">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271555r1092530_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000640</xccdf:version>
-          <xccdf:title>OL 9 must audit all uses of the chmod, fchmod, and fchmodat system calls.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000064-GPOS-00033, SRG-OS-000466-GPOS-00210, SRG-OS-000458-GPOS-00203&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75512r1092529_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the chmod, fchmod, and fchmodat system calls.
-
-Add or update the following rules in "/etc/audit/rules.d/audit.rules":
-
--a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid&gt;=1000 -F auid!=unset -k perm_mod
-
--a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid&gt;=1000 -F auid!=unset -k perm_mod
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75512r1092529_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271555" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271556">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271556r1092532_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000645</xccdf:version>
-          <xccdf:title>OL 9 must audit all uses of the chown, fchown, fchownat, and lchown system calls.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000064-GPOS-00033, SRG-OS-000466-GPOS-00210, SRG-OS-000458-GPOS-00203, SRG-OS-000474-GPOS-00219&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75513r1092531_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the chown, fchown, fchownat, and lchown system calls.
-
-Add or update the following rules in "/etc/audit/rules.d/audit.rules":
-
--a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid&gt;=1000 -F auid!=unset -k perm_mod
--a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid&gt;=1000 -F auid!=unset -k perm_mod
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75513r1092531_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271556" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271557">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271557r1092534_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000650</xccdf:version>
-          <xccdf:title>OL 9 must audit all uses of the semanage command.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000463-GPOS-00207, SRG-OS-000465-GPOS-00209&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75514r1092533_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the semanage command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
-
--a always,exit -F path=/usr/sbin/semanage -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-unix-update
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75514r1092533_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271557" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271558">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271558r1092536_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000655</xccdf:version>
-          <xccdf:title>OL 9 must audit all uses of the setfiles command.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000463-GPOS-00207, SRG-OS-000465-GPOS-00209&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75515r1092535_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the setfiles command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
-
--a always,exit -F path=/usr/sbin/setfiles -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-unix-update
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75515r1092535_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271558" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271559">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271559r1092538_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000660</xccdf:version>
-          <xccdf:title>OL 9 must audit all uses of the setsebool command.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000463-GPOS-00207, SRG-OS-000465-GPOS-00209&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75516r1092537_fix">Configure OL 9 to generate an audit event for any successful/unsuccessful use of the setsebool command by adding or updating the following rules in the "/etc/audit/rules.d/audit.rules" file:
-
--a always,exit -F path=/usr/sbin/setsebool -F perm=x -F auid&gt;=1000 -F auid!=unset -F key=privileged 
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75516r1092537_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271559" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271560">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271560r1092540_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000665</xccdf:version>
-          <xccdf:title>OL 9 must audit all uses of the chacl command.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000466-GPOS-00210&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75517r1092539_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the chacl command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
-
--a always,exit -F path=/usr/bin/chacl -F perm=x -F auid&gt;=1000 -F auid!=unset -k perm_mod
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75517r1092539_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271560" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271561">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271561r1092542_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000670</xccdf:version>
-          <xccdf:title>OL 9 must audit all uses of the sudo command.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000466-GPOS-00210&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75518r1092541_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the sudo command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
-
--a always,exit -F path=/usr/bin/sudo -F perm=x -F auid&gt;=1000 -F auid!=unset -k priv_cmd
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75518r1092541_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271561" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271562">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271562r1092544_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000675</xccdf:version>
-          <xccdf:title>OL 9 must audit all uses of the usermod command.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000466-GPOS-00210&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75519r1092543_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the usermod command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
-
--a always,exit -F path=/usr/sbin/usermod -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-usermod
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75519r1092543_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271562" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271563">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271563r1092546_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000680</xccdf:version>
-          <xccdf:title>OL 9 must audit all uses of the rename, unlink, rmdir, renameat, and unlinkat system calls.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000466-GPOS-00210, SRG-OS-000467-GPOS-00211, SRG-OS-000468-GPOS-00212&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75520r1092545_fix">Configure OL 9 to generate an audit event for any successful/unsuccessful use of the rename, unlink, rmdir, renameat, and unlinkat system calls by adding or updating the following rules in the "/etc/audit/rules.d/audit.rules" file:
-
--a always,exit -F arch=b32 -S rename,unlink,rmdir,renameat,unlinkat -F auid&gt;=1000 -F auid!=unset -k delete
--a always,exit -F arch=b64 -S rename,unlink,rmdir,renameat,unlinkat -F auid&gt;=1000 -F auid!=unset -k delete
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75520r1092545_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271563" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271564">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271564r1092548_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000685</xccdf:version>
-          <xccdf:title>OL 9 must audit all uses of the delete_module system call.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000471-GPOS-00216, SRG-OS-000477-GPOS-00222&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75521r1092547_fix">Configure OL 9 to generate an audit event for any successful/unsuccessful use of the delete_module system call by adding or updating the following rules in the "/etc/audit/rules.d/audit.rules" file:
-
--a always,exit -F arch=b32 -S delete_module -F auid&gt;=1000 -F auid!=unset -k module_chng
--a always,exit -F arch=b64 -S delete_module -F auid&gt;=1000 -F auid!=unset -k module_chng
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75521r1092547_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271564" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271565">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271565r1092550_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000690</xccdf:version>
-          <xccdf:title>OL 9 must audit all uses of the init_module and finit_module system calls.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000471-GPOS-00216, SRG-OS-000477-GPOS-00222&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75522r1092549_fix">Configure OL 9 to generate an audit event for any successful/unsuccessful use of the init_module and finit_module system calls by adding or updating the following rules in the "/etc/audit/rules.d/audit.rules" file:
-
--a always,exit -F arch=b32 -S init_module,finit_module -F auid&gt;=1000 -F auid!=unset -k module_chng
--a always,exit -F arch=b64 -S init_module,finit_module -F auid&gt;=1000 -F auid!=unset -k module_chng
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75522r1092549_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271565" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271566">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271566r1092552_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000695</xccdf:version>
-          <xccdf:title>OL 9 must audit all uses of the kmod command.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000471-GPOS-00216, SRG-OS-000477-GPOS-00222&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75523r1092551_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the kmod command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
-
--a always,exit -F path=/usr/bin/kmod -F perm=x -F auid&gt;=1000 -F auid!=unset -k modules
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75523r1092551_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271566" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271567">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271567r1092554_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000700</xccdf:version>
-          <xccdf:title>OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /var/log/lastlog.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000473-GPOS-00218, SRG-OS-000470-GPOS-00214&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75524r1092553_fix">Configure OL 9 to generate audit records for all account creations, modifications, disabling, and termination events that affect /var/log/lastlog.
-
-Add or update the following file system rule to "/etc/audit/rules.d/audit.rules":
-
--w /var/log/lastlog -p wa -k logins
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75524r1092553_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271567" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271568">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271568r1092556_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000705</xccdf:version>
-          <xccdf:title>OL 9 must audit all uses of umount system calls.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75525r1092555_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the umount command by adding or updating the following rules in "/etc/audit/rules.d/audit.rules":
-
--a always,exit -F path=/usr/bin/umount -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-mount
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75525r1092555_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271568" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271569">
-        <xccdf:title>SRG-OS-000256-GPOS-00097</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271569r1091419_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000710</xccdf:version>
-          <xccdf:title>OL 9 must use cryptographic mechanisms to protect the integrity of audit tools.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Protecting the integrity of the tools used for auditing purposes is a critical step toward ensuring the integrity of audit information. Audit information includes all information (e.g., audit records, audit settings, and audit reports) needed to successfully audit information system activity.
-
-Audit tools include, but are not limited to, vendor-provided and open-source audit tools needed to successfully view and manipulate audit information system activity and records. Audit tools include custom queries and report generators.
-
-It is not uncommon for attackers to replace the audit tools or inject code into the existing tools to provide the capability to hide or erase system activity from the audit logs.
-
-To address this risk, audit tools must be cryptographically signed to provide the capability to identify when the audit tools have been modified, manipulated, or replaced. An example is a checksum hash of the file or files.
-
-Satisfies: SRG-OS-000256-GPOS-00097, SRG-OS-000257-GPOS-00098, SRG-OS-000258-GPOS-00099, SRG-OS-000278-GPOS-00108&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001493</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001494</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001495</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001496</xccdf:ident>
-          <xccdf:fixtext fixref="F-75526r1091418_fix">Configure OL 9 to protect the integrity of the audit tools.
-
-Add or update the following lines to /etc/aide.conf:
- 
-/usr/sbin/auditctl p+i+n+u+g+s+b+acl+xattrs+sha512
-/usr/sbin/auditd p+i+n+u+g+s+b+acl+xattrs+sha512
-/usr/sbin/ausearch p+i+n+u+g+s+b+acl+xattrs+sha512
-/usr/sbin/aureport p+i+n+u+g+s+b+acl+xattrs+sha512
-/usr/sbin/autrace p+i+n+u+g+s+b+acl+xattrs+sha512
-/usr/sbin/autrace p+i+n+u+g+s+b+acl+xattrs+sha512
-/usr/sbin/augenrules p+i+n+u+g+s+b+acl+xattrs+sha512</xccdf:fixtext>
-          <xccdf:fix id="F-75526r1091418_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271569" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271570">
-        <xccdf:title>SRG-OS-000326-GPOS-00126</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271570r1092558_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000715</xccdf:version>
-          <xccdf:title>OL 9 must audit uses of the execve system call.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Misuse of privileged functions, either intentionally or unintentionally by authorized users, or by unauthorized external entities that have compromised information system accounts, is a serious and ongoing concern and can have significant adverse impacts on organizations. Auditing the use of privileged functions is one way to detect such misuse and identify the risk from insider threats and the advanced persistent threat.
-
-Satisfies: SRG-OS-000326-GPOS-00126, SRG-OS-000327-GPOS-00127, SRG-OS-000755-GPOS-00220&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002233</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002234</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004188</xccdf:ident>
-          <xccdf:fixtext fixref="F-75527r1092557_fix">Configure OL 9 to audit the execution of the execve system call.
-
-Add or update the following file system rules to "/etc/audit/rules.d/audit.rules":
-
--a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k execpriv 
--a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k execpriv
--a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k execpriv 
--a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k execpriv 
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart
-
-Note: Users must reboot to view above results with command "auditctl -l | grep execve".</xccdf:fixtext>
-          <xccdf:fix id="F-75527r1092557_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271570" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271571">
-        <xccdf:title>SRG-OS-000392-GPOS-00172</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271571r1092560_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000720</xccdf:version>
-          <xccdf:title>OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /var/log/faillock.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Satisfies: SRG-OS-000392-GPOS-00172, SRG-OS-000470-GPOS-00214, SRG-OS-000473-GPOS-00218&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75528r1092559_fix">Configure OL 9 to generate audit records for all account creations, modifications, disabling, and termination events that affect /var/log/faillock.
-
-Add or update the following file system rule to "/etc/audit/rules.d/audit.rules":
-
--w /var/log/faillock -p wa -k logins
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75528r1092559_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271571" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271572">
-        <xccdf:title>SRG-OS-000392-GPOS-00172</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271572r1092562_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000725</xccdf:version>
-          <xccdf:title>OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /var/log/tallylog.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-Satisfies: SRG-OS-000392-GPOS-00172, SRG-OS-000470-GPOS-00214, SRG-OS-000473-GPOS-00218&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75529r1092561_fix">Configure OL 9 to generate audit records for all account creations, modifications, disabling, and termination events that affect /var/log/tallylog.
-
-Add or update the following file system rule to "/etc/audit/rules.d/audit.rules":
-
--w /var/log/tallylog -p wa -k logins
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75529r1092561_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271572" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271573">
-        <xccdf:title>SRG-OS-000477-GPOS-00222</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271573r1092564_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000730</xccdf:version>
-          <xccdf:title>OL 9 must be configured so that successful/unsuccessful uses of the init command generate an audit record.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Misuse of the init command may cause availability issues for the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75530r1092563_fix">Configure the audit system to generate an audit event for any successful/unsuccessful uses of the init command by adding or updating the following rule in the "/etc/audit/rules.d/audit.rules" file:
-
--a always,exit -F path=/usr/sbin/init -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-init
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75530r1092563_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271573" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271574">
-        <xccdf:title>SRG-OS-000477-GPOS-00222</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271574r1092566_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000735</xccdf:version>
-          <xccdf:title>OL 9 must be configured so that successful/unsuccessful uses of the poweroff command generate an audit record.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Misuse of the poweroff command may cause availability issues for the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75531r1092565_fix">Configure the audit system to generate an audit event for any successful/unsuccessful uses of the poweroff command by adding or updating the following rule in the "/etc/audit/rules.d/audit.rules" file:
-
--a always,exit -F path=/usr/sbin/poweroff -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-poweroff
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75531r1092565_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271574" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271575">
-        <xccdf:title>SRG-OS-000477-GPOS-00222</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271575r1092568_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000740</xccdf:version>
-          <xccdf:title>OL 9 must be configured so that successful/unsuccessful uses of the reboot command generate an audit record.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Misuse of the reboot command may cause availability issues for the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75532r1092567_fix">Configure the audit system to generate an audit event for any successful/unsuccessful uses of the reboot command by adding or updating the following rule in the "/etc/audit/rules.d/audit.rules" file:
-
--a always,exit -F path=/usr/sbin/reboot -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-reboot
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75532r1092567_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271575" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271576">
-        <xccdf:title>SRG-OS-000477-GPOS-00222</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271576r1092570_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000745</xccdf:version>
-          <xccdf:title>OL 9 must be configured so that successful/unsuccessful uses of the shutdown command generate an audit record.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Misuse of the shutdown command may cause availability issues for the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75533r1092569_fix">Configure the audit system to generate an audit event for any successful/unsuccessful uses of the shutdown command by adding or updating the following rule in the "/etc/audit/rules.d/audit.rules" file:
-
--a always,exit -F path=/usr/sbin/shutdown -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-shutdown
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75533r1092569_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271576" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271577">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271577r1091443_rule" severity="low" weight="10.0">
-          <xccdf:version>OL09-00-000750</xccdf:version>
-          <xccdf:title>OL 9 must enable auditing of processes that start prior to the audit daemon.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without the capability to generate audit records, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-If auditing is enabled late in the startup process, the actions of some startup processes may not be audited. Some audit systems also maintain state information only available if auditing is enabled before a given process is created.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000473-GPOS-00218, SRG-OS-000254-GPOS-00095&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001464</xccdf:ident>
-          <xccdf:fixtext fixref="F-75534r1091442_fix">Enable auditing of processes that start prior to the audit daemon with the following command:
-
-$ sudo grubby --update-kernel=ALL --args="audit=1"
-
-Add or modify the following line in "/etc/default/grub" to ensure the configuration survives kernel updates:
-
-GRUB_CMDLINE_LINUX="audit=1"</xccdf:fixtext>
-          <xccdf:fix id="F-75534r1091442_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271577" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271578">
-        <xccdf:title>SRG-OS-000039-GPOS-00017</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271578r1092572_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000755</xccdf:version>
-          <xccdf:title>OL 9 must label all offloaded audit logs before sending them to the central log server.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Enriched logging is needed to determine who, what, and when events occur on a system. Without this, determining root cause of an event will be much more difficult.
-
-When audit logs are not labeled before they are sent to a central log server, the audit data will not be able to be analyzed and tied back to the correct system.
-
-Satisfies: SRG-OS-000039-GPOS-00017, SRG-OS-000342-GPOS-00133, SRG-OS-000479-GPOS-00224&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000132</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001851</xccdf:ident>
-          <xccdf:fixtext fixref="F-75535r1092571_fix">Configure OL 9 to label all offloaded audit logs before sending them to the central log server.
-
-Edit the /etc/audit/auditd.conf file and add or update the "name_format" option:
-
-name_format = hostname
-
-The audit daemon must be restarted for changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75535r1092571_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271578" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271579">
-        <xccdf:title>SRG-OS-000062-GPOS-00031</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271579r1091449_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000760</xccdf:version>
-          <xccdf:title>OL 9 audit system must take appropriate action when an error writing to the audit storage volume occurs.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;It is critical that when the operating system is at risk of failing to process audit logs as required, it takes action to mitigate the failure. Audit processing failures include software/hardware errors; failures in the audit capturing mechanisms; and audit storage capacity being reached or exceeded. Responses to audit failure depend upon the nature of the failure mode.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:fixtext fixref="F-75536r1091448_fix">Configure OL 9 to shut down by default upon audit failure (unless availability is an overriding concern).
-
-Add or update the following line (depending on configuration "disk_error_action" can be set to "SYSLOG" or "SINGLE" depending on configuration) in "/etc/audit/auditd.conf" file:
-
-disk_error_action = HALT
-
-If availability has been determined to be more important, and this decision is documented with the information system security officer (ISSO), configure the operating system to notify SA staff and ISSO staff in the event of an audit processing failure by setting the "disk_error_action" to "SYSLOG".</xccdf:fixtext>
-          <xccdf:fix id="F-75536r1091448_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271579" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271580">
-        <xccdf:title>SRG-OS-000062-GPOS-00031</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271580r1091452_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000765</xccdf:version>
-          <xccdf:title>OL 9 audit system must take appropriate action when the audit storage volume is full.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;It is critical that when the operating system is at risk of failing to process audit logs as required, it takes action to mitigate the failure. Audit processing failures include software/hardware errors; failures in the audit capturing mechanisms; and audit storage capacity being reached or exceeded. Responses to audit failure depend upon the nature of the failure mode.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:fixtext fixref="F-75537r1091451_fix">Configure OL 9 to shut down by default upon audit failure (unless availability is an overriding concern).
-
-Add or update the following line (depending on configuration "disk_full_action" can be set to "SYSLOG" or "SINGLE" depending on configuration) in "/etc/audit/auditd.conf" file:
-
-disk_full_action = HALT
-
-If availability has been determined to be more important, and this decision is documented with the information system security officer (ISSO), configure the operating system to notify SA staff and ISSO staff in the event of an audit processing failure by setting the "disk_full_action" to "SYSLOG".</xccdf:fixtext>
-          <xccdf:fix id="F-75537r1091451_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271580" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271581">
-        <xccdf:title>SRG-OS-000062-GPOS-00031</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271581r1091455_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000770</xccdf:version>
-          <xccdf:title>OL 9 audit system must take appropriate action when the audit files have reached maximum size.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;It is critical that when the operating system is at risk of failing to process audit logs as required, it takes action to mitigate the failure. Audit processing failures include software/hardware errors; failures in the audit capturing mechanisms; and audit storage capacity being reached or exceeded. Responses to audit failure depend upon the nature of the failure mode.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:fixtext fixref="F-75538r1091454_fix">Configure OL 9 to rotate the audit log when it reaches maximum size.
-
-Add or update the following line in "/etc/audit/auditd.conf" file:
-
-max_log_file_action = ROTATE</xccdf:fixtext>
-          <xccdf:fix id="F-75538r1091454_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271581" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271582">
-        <xccdf:title>SRG-OS-000051-GPOS-00024</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271582r1092574_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000775</xccdf:version>
-          <xccdf:title>OL 9 must periodically flush audit records to disk to prevent the loss of audit records.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;If option "freq" is not set to a value that requires audit records being written to disk after a threshold number is reached, then audit records may be lost.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000154</xccdf:ident>
-          <xccdf:fixtext fixref="F-75539r1092573_fix">Configure OL 9 to flush audit to disk by adding or updating the following configuration in "/etc/audit/auditd.conf":
-
-freq = 100
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75539r1092573_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271582" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271583">
-        <xccdf:title>SRG-OS-000057-GPOS-00027</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271583r1091461_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000785</xccdf:version>
-          <xccdf:title>OL 9 audit logs must be group-owned by root or by a restricted logging group to prevent unauthorized read access.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Unauthorized disclosure of audit records can reveal system and configuration data to attackers, thus compromising its confidentiality.
-
-Satisfies: SRG-OS-000057-GPOS-00027, SRG-OS-000058-GPOS-00028, SRG-OS-000059-GPOS-00029, SRG-OS-000206-GPOS-00084&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000162</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000163</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000164</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001314</xccdf:ident>
-          <xccdf:fixtext fixref="F-75540r1091460_fix">Configure OL 9 audit logs to be group-owned by "root" or a restricted logging group.
-
-Change the group of the directory of "/var/log/audit" to be owned by a correct group.
-
-Identify the group that is configured to own audit log:
-
-$ sudo grep -P '^[ ]*log_group[ ]+=.*$' /etc/audit/auditd.conf
-
-Change the ownership to that group:
-
-$ sudo chgrp ${GROUP} /var/log/audit</xccdf:fixtext>
-          <xccdf:fix id="F-75540r1091460_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271583" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271584">
-        <xccdf:title>SRG-OS-000057-GPOS-00027</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271584r1091464_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000790</xccdf:version>
-          <xccdf:title>OL 9 audit log directory must be owned by root to prevent unauthorized read access.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Unauthorized disclosure of audit records can reveal system and configuration data to attackers, thus compromising its confidentiality.
-
-Satisfies: SRG-OS-000057-GPOS-00027, SRG-OS-000058-GPOS-00028, SRG-OS-000059-GPOS-00029, SRG-OS-000206-GPOS-00084&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000162</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000163</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000164</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001314</xccdf:ident>
-          <xccdf:fixtext fixref="F-75541r1091463_fix">Configure OL 9 to protect the audit log from unauthorized read access by setting the correct owner as "root" with the following command:
-
-$ sudo chown root /var/log/audit</xccdf:fixtext>
-          <xccdf:fix id="F-75541r1091463_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271584" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271585">
-        <xccdf:title>SRG-OS-000057-GPOS-00027</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271585r1091467_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000795</xccdf:version>
-          <xccdf:title>OL 9 audit logs file must have mode 0600 or less permissive to prevent unauthorized access to the audit log.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state or can identify the OL 9 system or platform. Additionally, Personally Identifiable Information (PII) and operational information must not be revealed through error messages to unauthorized personnel or their designated representatives.
-
-The structure and content of error messages must be carefully considered by the organization and development team. The extent to which the information system is able to identify and handle error conditions is guided by organizational policy and operational requirements.
-
-Satisfies: SRG-OS-000057-GPOS-00027, SRG-OS-000058-GPOS-00028, SRG-OS-000059-GPOS-00029, SRG-OS-000206-GPOS-00084&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000162</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000163</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000164</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001314</xccdf:ident>
-          <xccdf:fixtext fixref="F-75542r1091466_fix">Configure the audit logs to have a mode of "0600" with the following command:
-
-Replace "[audit_log_file]" to the correct audit log path, by default this location is "/var/log/audit/audit.log".
-
-$ sudo chmod 0600 /var/log/audit/[audit_log_file]
-
-Check the group that owns the system audit logs:
-
-$ sudo grep -m 1 -q ^log_group /etc/audit/auditd.conf
-
-If the log_group is not defined or it is set to root, configure the permissions the following way:
-
-$ sudo chmod 0640 $log_file
-$ sudo chmod 0440 $log_file.*
-
-Otherwise, configure the permissions the following way:
-
-$ sudo chmod 0600 $log_file
-$ sudo chmod 0400 $log_file.*</xccdf:fixtext>
-          <xccdf:fix id="F-75542r1091466_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271585" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271586">
-        <xccdf:title>SRG-OS-000062-GPOS-00031</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271586r1092576_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000800</xccdf:version>
-          <xccdf:title>OL 9 audit system must audit local events.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without establishing what type of events occurred, the source of events, where events occurred, and the outcome of events, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.
-
-If option "local_events" isn't set to "yes" only events from network will be aggregated.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:fixtext fixref="F-75543r1092575_fix">Configure OL 9 to generate audit records for local events by adding or updating the following line in "/etc/audit/auditd.conf":
-
-local_events = yes 
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75543r1092575_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271586" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271587">
-        <xccdf:title>SRG-OS-000063-GPOS-00032</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271587r1091473_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000805</xccdf:version>
-          <xccdf:title>OL 9 must allow only the information system security manager (ISSM) (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without the capability to restrict the roles and individuals that can select which events are audited, unauthorized personnel may be able to prevent the auditing of critical events. Misconfigured audits may degrade the system's performance by overwhelming the audit log. Misconfigured audits may also make it more difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000171</xccdf:ident>
-          <xccdf:fixtext fixref="F-75544r1091472_fix">Configure the files in directory "/etc/audit/rules.d/" and the "/etc/audit/auditd.conf" file to have a mode of "0640" with the following commands:
-
-$ sudo chmod 0640 /etc/audit/rules.d/audit.rules
-$ sudo chmod 0640 /etc/audit/rules.d/[customrulesfile].rules
-$ sudo chmod 0640 /etc/audit/auditd.conf</xccdf:fixtext>
-          <xccdf:fix id="F-75544r1091472_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271587" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271588">
-        <xccdf:title>SRG-OS-000063-GPOS-00032</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271588r1091476_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000810</xccdf:version>
-          <xccdf:title>OL 9 /etc/audit/auditd.conf file must have 0640 or less permissive to prevent unauthorized access.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without the capability to restrict the roles and individuals that can select which events are audited, unauthorized personnel may be able to prevent the auditing of critical events. Misconfigured audits may degrade the system's performance by overwhelming the audit log. Misconfigured audits may also make it more difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000171</xccdf:ident>
-          <xccdf:fixtext fixref="F-75545r1091475_fix">Configure the /etc/audit/auditd.conf file to have a mode of 0640 with the command:
-
-$ sudo chmod 0640 /etc/audit/auditd.conf</xccdf:fixtext>
-          <xccdf:fix id="F-75545r1091475_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271588" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271589">
-        <xccdf:title>SRG-OS-000046-GPOS-00022</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271589r1091479_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000815</xccdf:version>
-          <xccdf:title>OL 9 must forward mail from postmaster to the root account using a postfix alias.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;It is critical for the appropriate personnel to be aware if a system is at risk of failing to process audit logs as required. Without this notification, the security personnel may be unaware of an impending failure of the audit capability, and system operation may be adversely affected.
-
-Audit processing failures include software/hardware errors, failures in the audit capturing mechanisms, and audit storage capacity being reached or exceeded.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000139</xccdf:ident>
-          <xccdf:fixtext fixref="F-75546r1091478_fix">Configure a valid email address as an alias for the root account.
-
-Append the following line to "/etc/aliases":
-
-postmaster: root
-
-Then, run the following command:
-
-$ sudo newaliases</xccdf:fixtext>
-          <xccdf:fix id="F-75546r1091478_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271589" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271590">
-        <xccdf:title>SRG-OS-000046-GPOS-00022</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271590r1091482_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000820</xccdf:version>
-          <xccdf:title>OL 9 must take appropriate action when a critical audit processing failure occurs.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;It is critical for the appropriate personnel to be aware if a system is at risk of failing to process audit logs as required. Without this notification, the security personnel may be unaware of an impending failure of the audit capability, and system operation may be adversely affected.
-
-Audit processing failures include software/hardware errors, failures in the audit capturing mechanisms, and audit storage capacity being reached or exceeded.
-
-Satisfies: SRG-OS-000046-GPOS-00022, SRG-OS-000343-GPOS-00135&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000139</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000140</xccdf:ident>
-          <xccdf:fixtext fixref="F-75547r1091481_fix">Configure OL 9 to shut down when auditing failures occur.
-
-Add the following line to the bottom of the /etc/audit/audit.rules file:
-
--f 2</xccdf:fixtext>
-          <xccdf:fix id="F-75547r1091481_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271590" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271591">
-        <xccdf:title>SRG-OS-000046-GPOS-00022</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271591r1092578_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000825</xccdf:version>
-          <xccdf:title>The OL 9 system administrator (SA) and/or information system security officer (ISSO) (at a minimum) must be alerted of an audit processing failure event.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;It is critical for the appropriate personnel to be aware if a system is at risk of failing to process audit logs as required. Without this notification, the security personnel may be unaware of an impending failure of the audit capability, and system operation may be adversely affected.
-
-Audit processing failures include software/hardware errors, failures in the audit capturing mechanisms, and audit storage capacity being reached or exceeded.
-
-This requirement applies to each audit data storage repository (i.e., distinct information system component where audit records are stored), the centralized audit storage capacity of organizations (i.e., all audit data storage repositories combined), or both.
-
-Satisfies: SRG-OS-000046-GPOS-00022, SRG-OS-000343-GPOS-00134&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000139</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001855</xccdf:ident>
-          <xccdf:fixtext fixref="F-75548r1092577_fix">Configure the auditd service to notify the SA and ISSO in the event of an audit processing failure.
-
-Edit the following line in "/etc/audit/auditd.conf" to ensure that administrators are notified via email for those situations:
-
-action_mail_acct = root
-
-The audit daemon must be restarted for changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75548r1092577_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271591" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271592">
-        <xccdf:title>SRG-OS-000254-GPOS-00095</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271592r1091488_rule" severity="low" weight="10.0">
-          <xccdf:version>OL09-00-000830</xccdf:version>
-          <xccdf:title>OL 9 must allocate an audit_backlog_limit of sufficient size to capture processes that start prior to the audit daemon.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without the capability to generate audit records, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-If auditing is enabled late in the startup process, the actions of some startup processes may not be audited. Some audit systems also maintain state information only available if auditing is enabled before a given process is created.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-Allocating an audit_backlog_limit of sufficient size is critical in maintaining a stable boot process. With an insufficient limit allocated, the system is susceptible to boot failures and crashes.
-
-Satisfies: SRG-OS-000254-GPOS-00095, SRG-OS-000341-GPOS-00132&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001464</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001849</xccdf:ident>
-          <xccdf:fixtext fixref="F-75549r1091487_fix">Configure OL 9 to allocate sufficient audit_backlog_limit to capture processes that start prior to the audit daemon with the following command:
-
-$ sudo grubby --update-kernel=ALL --args=audit_backlog_limit=8192</xccdf:fixtext>
-          <xccdf:fix id="F-75549r1091487_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271592" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271593">
-        <xccdf:title>SRG-OS-000255-GPOS-00096</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271593r1092580_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000835</xccdf:version>
-          <xccdf:title>OL 9 must produce audit records containing information to establish the identity of any individual or process associated with the event.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without establishing what type of events occurred, the source of events, where events occurred, and the outcome of events, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.
-
-Audit record content that may be necessary to satisfy this requirement includes, for example, time stamps, source and destination addresses, user/process identifiers, event descriptions, success/fail indications, filenames involved, and access control or flow control rules invoked.
-
-Enriched logging aids in making sense of who, what, and when events occur on a system. Without this, determining root cause of an event will be much more difficult.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001487</xccdf:ident>
-          <xccdf:fixtext fixref="F-75550r1092579_fix">Configure OL 9 to produce audit records containing information to establish the identity of any individual or process associated with the event.
-
-Edit the /etc/audit/auditd.conf file and add or update the "log_format" option:
-
-log_format = ENRICHED
-
-The audit daemon must be restarted for changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75550r1092579_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271593" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271594">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271594r1092582_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000840</xccdf:version>
-          <xccdf:title>OL 9 must be configured so that successful/unsuccessful uses of the umount system call generate an audit record.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The changing of file permissions could indicate that a user is attempting to gain access to information that would otherwise be disallowed. Auditing DAC modifications can facilitate the identification of patterns of abuse among both authorized and unauthorized users.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75551r1092581_fix">Configure the audit system to generate an audit event for any successful/unsuccessful use of the umount system call by adding or updating the following rules in "/etc/audit/audit.rules" and adding the following rules to "/etc/audit/rules.d/perm_mod.rules" or updating the existing rules in files in the "/etc/audit/rules.d/" directory:
-
--a always,exit -F arch=b32 -S umount -F auid&gt;=1000 -F auid!=unset -k perm_mod -a always,exit -F arch=b64 -S umount -F auid&gt;=1000 -F auid!=unset -k perm_mod
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75551r1092581_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271594" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271595">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271595r1092584_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000845</xccdf:version>
-          <xccdf:title>OL 9 must be configured so that successful/unsuccessful uses of the umount2 system call generate an audit record.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The changing of file permissions could indicate that a user is attempting to gain access to information that would otherwise be disallowed. Auditing discretionary access control (DAC) modifications can facilitate the identification of patterns of abuse among both authorized and unauthorized users.
-
-Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:fixtext fixref="F-75552r1092583_fix">Configure the audit system to generate an audit event for any successful/unsuccessful use of the umount2 system call by adding the following rules to a rules file in /etc/audit/rules.d/ directory: (Example /etc/audit/rules.d/audit.rules)
-
--a always,exit -F arch=b32 -S umount2 -F auid&gt;=1000 -F auid!=unset -k perm_mod
--a always,exit -F arch=b64 -S umount2 -F auid&gt;=1000 -F auid!=unset -k perm_mod
-
-The audit daemon must be restarted for the changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75552r1092583_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271595" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271596">
-        <xccdf:title>SRG-OS-000341-GPOS-00132</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271596r1091500_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000850</xccdf:version>
-          <xccdf:title>OL 9 must allocate audit record storage capacity to store at least one week's worth of audit records.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;To ensure OL 9 systems have a sufficient storage capacity in which to write the audit logs, OL 9 needs to be able to allocate audit record storage capacity.
-
-The task of allocating audit record storage capacity is usually performed during initial installation of OL 9.
-
-Satisfies: SRG-OS-000341-GPOS-00132, SRG-OS-000342-GPOS-00133&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001849</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001851</xccdf:ident>
-          <xccdf:fixtext fixref="F-75553r1091499_fix">Allocate enough storage capacity for at least one week of audit records when audit records are not immediately sent to a central audit record storage facility.
-
-If audit records are stored on a partition made specifically for audit records, resize the partition with sufficient space to contain one week of audit records.
-
-If audit records are not stored on a partition made specifically for audit records, a new partition with sufficient space will need be to be created.</xccdf:fixtext>
-          <xccdf:fix id="F-75553r1091499_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271596" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271597">
-        <xccdf:title>SRG-OS-000342-GPOS-00133</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271597r1092586_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000855</xccdf:version>
-          <xccdf:title>OL 9 must be configured to offload audit records onto a different system from the system being audited via syslog.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The auditd service does not include the ability to send audit records to a centralized server for management directly. However, it can use a plug-in for audit event multiplexor (audispd) to pass audit records to the local syslog server.
-
-Satisfies: SRG-OS-000342-GPOS-00133, SRG-OS-000479-GPOS-00224&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001851</xccdf:ident>
-          <xccdf:fixtext fixref="F-75554r1092585_fix">Configure OL 9 to offload audit records onto a different system from the system being audited via syslog.
-
-Edit the /etc/audit/plugins.d/syslog.conf file and add or update the "active" option:
-
-active = yes
-
-The audit daemon must be restarted for changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75554r1092585_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271597" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271598">
-        <xccdf:title>SRG-OS-000342-GPOS-00133</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271598r1092588_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000860</xccdf:version>
-          <xccdf:title>OL 9 must take appropriate action when the internal event queue is full.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The audit system should have an action setup in the event the internal event queue becomes full so that no data is lost. Information stored in one location is vulnerable to accidental or incidental deletion or alteration.
-
-Offloading is a common process in information systems with limited audit storage capacity.
-
-Satisfies: SRG-OS-000342-GPOS-00133, SRG-OS-000479-GPOS-00224&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001851</xccdf:ident>
-          <xccdf:fixtext fixref="F-75555r1092587_fix">Configure OL 9 to take appropriate action when the internal event queue is full.
-
-Edit the /etc/audit/auditd.conf file and add or update the "overflow_action" option:
-
-overflow_action = syslog
-
-The audit daemon must be restarted for changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75555r1092587_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271598" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271599">
-        <xccdf:title>SRG-OS-000343-GPOS-00134</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271599r1134856_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000865</xccdf:version>
-          <xccdf:title>OL 9 must take action when allocated audit record storage volume reaches 75 percent of the repository maximum audit record storage capacity.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;If security personnel are not notified immediately when storage volume reaches a maximum of 75 percent utilization, they are unable to plan for audit record storage capacity expansion. The notification can be set to trigger at lower utilization thresholds at the ISSO's discretion.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001855</xccdf:ident>
-          <xccdf:fixtext fixref="F-75556r1134855_fix">Configure OL 9 to initiate an action to notify the SA and ISSO (at a minimum) when allocated audit record storage volume reaches (at most) 75 percent of the repository maximum audit record storage capacity by adding/modifying the following line in the /etc/audit/auditd.conf file:
-
-space_left  = 25%</xccdf:fixtext>
-          <xccdf:fix id="F-75556r1134855_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271599" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271600">
-        <xccdf:title>SRG-OS-000343-GPOS-00134</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271600r1134858_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000870</xccdf:version>
-          <xccdf:title>OL 9 must notify the system administrator (SA) and information system security officer (ISSO) (at a minimum) when allocated audit record storage volume reaches 75 percent utilization.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;If security personnel are not notified immediately when storage volume reaches a maximum of 75 percent utilization, they are unable to plan for audit record storage capacity expansion. The notification can be set to trigger at lower utilization thresholds at the ISSO's discretion.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001855</xccdf:ident>
-          <xccdf:fixtext fixref="F-75557r1134857_fix">Configure OL 9 to initiate an action to notify the SA and ISSO (at a minimum) when allocated audit record storage volume reaches (at most) 75 percent of the repository maximum audit record storage capacity by adding/modifying the following line in the /etc/audit/auditd.conf file:
-
-space_left_action = email</xccdf:fixtext>
-          <xccdf:fix id="F-75557r1134857_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271600" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271601">
-        <xccdf:title>SRG-OS-000343-GPOS-00134</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271601r1091515_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000875</xccdf:version>
-          <xccdf:title>OL 9 must take action when allocated audit record storage volume reaches 95 percent of the audit record storage capacity.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;If action is not taken when storage volume reaches 95 percent utilization, the auditing system may fail when the storage volume reaches capacity.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001855</xccdf:ident>
-          <xccdf:fixtext fixref="F-75558r1091514_fix">Configure OL 9 to initiate an action when allocated audit record storage volume reaches 95 percent of the repository maximum audit record storage capacity by adding/modifying the following line in the /etc/audit/auditd.conf file.
-
-admin_space_left  = 5%</xccdf:fixtext>
-          <xccdf:fix id="F-75558r1091514_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271601" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271602">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271602r1092590_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000880</xccdf:version>
-          <xccdf:title>OL 9 must write audit records to disk.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Audit data should be synchronously written to disk to ensure log integrity. This setting ensures that all audit event data is written disk.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75559r1092589_fix">Configure the audit system to write log files to the disk.
-
-Edit the /etc/audit/auditd.conf file and add or update the "write_logs" option to "yes":
-
-write_logs = yes 
-
-The audit daemon must be restarted for changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75559r1092589_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271602" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271603">
-        <xccdf:title>SRG-OS-000343-GPOS-00134</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271603r1092592_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000885</xccdf:version>
-          <xccdf:title>OL 9 must act when allocated audit record storage volume reaches 95 percent of the repository maximum audit record storage capacity.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;If action is not taken when storage volume reaches 95 percent utilization, the auditing system may fail when the storage volume reaches capacity.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001855</xccdf:ident>
-          <xccdf:fixtext fixref="F-75560r1092591_fix">Configure the auditd service to take action in the event of allocated audit record storage volume reaches 95 percent of the repository maximum audit record storage capacity.
-
-Edit the following line in "/etc/audit/auditd.conf" to ensure that the system is forced into single user mode in the event the audit record storage volume is about to reach maximum capacity:
-
-admin_space_left_action = single 
-
-The audit daemon must be restarted for changes to take effect.
-
-Restart auditd:
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75560r1092591_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271603" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271607">
-        <xccdf:title>SRG-OS-000375-GPOS-00160</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271607r1091533_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000925</xccdf:version>
-          <xccdf:title>OL 9 must enable certificate-based smart card authentication.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without the use of multifactor authentication (MFA), the ease of access to privileged functions is greatly increased. Multifactor authentication requires using two or more factors to achieve authentication. A privileged account is defined as an information system account with authorizations of a privileged user. The DOD Common Access Card (CAC) with DOD-approved PKI is an example of multifactor authentication.
-
-Satisfies: SRG-OS-000375-GPOS-00160, SRG-OS-000105-GPOS-00052&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004046</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000765</xccdf:ident>
-          <xccdf:fixtext fixref="F-75564r1091532_fix">Configure OL 9 to enable certificate-based smart card authentication.
-
-Edit the file "/etc/sssd/sssd.conf" and add or edit the following line:
-
-pam_cert_auth = True</xccdf:fixtext>
-          <xccdf:fix id="F-75564r1091532_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271607" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271608">
-        <xccdf:title>SRG-OS-000375-GPOS-00160</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271608r1091536_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000930</xccdf:version>
-          <xccdf:title>OL 9 must implement certificate status checking for multifactor authentication (MFA).</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Using an authentication device, such as a DOD Common Access Card (CAC) or token that is separate from the information system, ensures that even if the information system is compromised, credentials stored on the authentication device will not be affected.
-
-Multifactor solutions that require devices separate from information systems gaining access include, for example, hardware tokens providing time-based or challenge-response authenticators and smart cards such as the U.S. Government Personal Identity Verification (PIV) card and the DOD CAC.
-
-OL 9 includes multiple options for configuring certificate status checking, but for this requirement focuses on the System Security Services Daemon (SSSD). By default, SSSD performs Online Certificate Status Protocol (OCSP) checking and certificate verification using a sha256 digest function.
-
-Satisfies: SRG-OS-000375-GPOS-00160, SRG-OS-000377-GPOS-00162&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004046</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001954</xccdf:ident>
-          <xccdf:fixtext fixref="F-75565r1091535_fix">Configure OL 9 to implement certificate status checking for MFA.
-
-Review the "/etc/sssd/conf.d/certificate_verification.conf" file to determine if the system is configured to prevent OCSP or certificate verification.
-
-Add the following line to the "/etc/sssd/conf.d/certificate_verification.conf" file:
-
-certificate_verification = ocsp_dgst=sha512
-
-Set the correct ownership and permissions on the "/etc/sssd/conf.d/certificate_verification.conf" file by running these commands:
-
-$ sudo chown root:root "/etc/sssd/conf.d/certificate_verification.conf"
-$ sudo chmod 600 "/etc/sssd/conf.d/certificate_verification.conf"
-
-The "sssd" service must be restarted for the changes to take effect. To restart the "sssd" service, run the following command:
-
-$ sudo systemctl restart sssd.service</xccdf:fixtext>
-          <xccdf:fix id="F-75565r1091535_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271608" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271609">
-        <xccdf:title>SRG-OS-000383-GPOS-00166</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271609r1091539_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000935</xccdf:version>
-          <xccdf:title>OL 9 must prohibit the use of cached authenticators after one day.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;If cached authentication information is out-of-date, the validity of the authentication information may be questionable.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002007</xccdf:ident>
-          <xccdf:fixtext fixref="F-75566r1091538_fix">Configure the SSSD to prohibit the use of cached authentications after one day.
-
-Add or change the following line in "/etc/sssd/sssd.conf" just below the line [pam]:
-
-offline_credentials_expiration = 1</xccdf:fixtext>
-          <xccdf:fix id="F-75566r1091538_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271609" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271610">
-        <xccdf:title>SRG-OS-000104-GPOS-00051</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271610r1091542_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-000940</xccdf:version>
-          <xccdf:title>OL 9 must use the CAC smart card driver.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Smart card login provides two-factor authentication stronger than that provided by a username and password combination. Smart cards leverage public key infrastructure to provide and verify credentials. Configuring the smart card driver in use by the organization helps to prevent users from using unauthorized smart cards.
-
-Satisfies: SRG-OS-000104-GPOS-00051, SRG-OS-000106-GPOS-00053, SRG-OS-000107-GPOS-00054, SRG-OS-000109-GPOS-00056, SRG-OS-000108-GPOS-00055, SRG-OS-000112-GPOS-00057, SRG-OS-000113-GPOS-00058&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000764</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000766</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000765</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004045</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001941</xccdf:ident>
-          <xccdf:fixtext fixref="F-75567r1091541_fix">Configure OL 9 to load the CAC driver.
-
-Add or modify the following line in the "/etc/opensc.conf" file:
-
-card_drivers = cac;</xccdf:fixtext>
-          <xccdf:fix id="F-75567r1091541_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271610" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271611">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271611r1091545_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-001000</xccdf:version>
-          <xccdf:title>OL 9 must ensure the password complexity module is enabled in the system-auth file.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Enabling PAM password complexity permits enforcement of strong passwords and consequently makes the system less prone to dictionary attacks.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75568r1091544_fix">Configure OL 9 to use "pwquality" to enforce password complexity rules.
-
-Add the following line to the "/etc/pam.d/system-auth" file(or modify the line to have the required value):
-
-password required pam_pwquality.so</xccdf:fixtext>
-          <xccdf:fix id="F-75568r1091544_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271611" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271612">
-        <xccdf:title>SRG-OS-000069-GPOS-00037</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271612r1091548_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-001001</xccdf:version>
-          <xccdf:title>OL 9 must ensure the password complexity module in the system-auth file is configured for three retries or less.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. "pwquality" enforces complex password construction configuration and has the ability to limit brute-force attacks on the system.
-
-OL 9 uses "pwquality" as a mechanism to enforce password complexity. This is set in both:
-/etc/pam.d/password-auth
-/etc/pam.d/system-auth
-
-By limiting the number of attempts to meet the pwquality module complexity requirements before returning with an error, the system will audit abnormal attempts at password changes.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004066</xccdf:ident>
-          <xccdf:fixtext fixref="F-75569r1091547_fix">Configure OL 9 to limit the "pwquality" retry option to "3".
-
-Add the following line to the "/etc/pam.d/system-auth" file (or modify the line to have the required value):
-
-password required pam_pwquality.so retry=3</xccdf:fixtext>
-          <xccdf:fix id="F-75569r1091547_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271612" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271613">
-        <xccdf:title>SRG-OS-000069-GPOS-00037</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271613r1091551_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-001005</xccdf:version>
-          <xccdf:title>OL 9 must enforce password complexity by requiring that at least one uppercase character be used.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. Password complexity is one factor of several that determines how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised. Requiring a minimum number of uppercase characters makes password guessing attacks more difficult by ensuring a larger search space.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004066</xccdf:ident>
-          <xccdf:fixtext fixref="F-75570r1091550_fix">Configure OL 9 to enforce password complexity by requiring that at least one uppercase character is used by setting the "ucredit" option.
-
-Add the following line to /etc/security/pwquality.conf (or modify the line to have the required value):
-
-ucredit = -1</xccdf:fixtext>
-          <xccdf:fix id="F-75570r1091550_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271613" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271614">
-        <xccdf:title>SRG-OS-000069-GPOS-00037</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271614r1091554_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-001010</xccdf:version>
-          <xccdf:title>OL 9 must ensure the password complexity module is enabled in the password-auth file.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Enabling PAM password complexity permits enforcement of strong passwords and consequently makes the system less prone to dictionary attacks.
-
-Satisfies: SRG-OS-000069-GPOS-00037, SRG-OS-000070-GPOS-00038&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004066</xccdf:ident>
-          <xccdf:fixtext fixref="F-75571r1091553_fix">Configure OL 9 to use "pwquality" to enforce password complexity rules.
-
-Add the following line to the "/etc/pam.d/password-auth" file (or modify the line to have the required value):
-
-password required pam_pwquality.so</xccdf:fixtext>
-          <xccdf:fix id="F-75571r1091553_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271614" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271615">
-        <xccdf:title>SRG-OS-000070-GPOS-00038</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271615r1091557_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-001015</xccdf:version>
-          <xccdf:title>OL 9 must enforce password complexity by requiring that at least one lowercase character be used.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. 
-
-Password complexity is one factor of several that determines how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised. Requiring a minimum number of lowercase characters makes password guessing attacks more difficult by ensuring a larger search space.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004066</xccdf:ident>
-          <xccdf:fixtext fixref="F-75572r1091556_fix">Configure OL 9 to enforce password complexity by requiring at least one lowercase character is used by setting the "lcredit" option.
-
-Add the following line to "/etc/security/pwquality.conf" (or modify the line to have the required value):
-
-lcredit = -1</xccdf:fixtext>
-          <xccdf:fix id="F-75572r1091556_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271615" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271616">
-        <xccdf:title>SRG-OS-000071-GPOS-00039</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271616r1091560_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-001020</xccdf:version>
-          <xccdf:title>OL 9 must enforce password complexity by requiring that at least one numeric character be used.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
-
-Password complexity is one factor of several that determines how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised. Requiring digits makes password guessing attacks more difficult by ensuring a larger search space.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004066</xccdf:ident>
-          <xccdf:fixtext fixref="F-75573r1091559_fix">Configure OL 9 to enforce password complexity by requiring at least one numeric character is used by setting the "dcredit" option.
-
-Add the following line to "/etc/security/pwquality.conf" (or modify the line to have the required value):
-
-dcredit = -1</xccdf:fixtext>
-          <xccdf:fix id="F-75573r1091559_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271616" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271617">
-        <xccdf:title>SRG-OS-000072-GPOS-00040</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271617r1091563_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-001025</xccdf:version>
-          <xccdf:title>OL 9 must require the change of at least eight characters when passwords are changed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. 
-
-Password complexity is one factor of several that determines how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised. Requiring a minimum number of different characters during password changes ensures that newly changed passwords will not resemble previously compromised ones. Note that passwords changed on compromised systems will still be compromised.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004066</xccdf:ident>
-          <xccdf:fixtext fixref="F-75574r1091562_fix">Configure OL 9 to require the change of at least eight of the total number of characters when passwords are changed by setting the "difok" option.
-
-Add the following line to "/etc/security/pwquality.conf" (or modify the line to have the required value):
-
-difok = 8</xccdf:fixtext>
-          <xccdf:fix id="F-75574r1091562_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271617" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271618">
-        <xccdf:title>SRG-OS-000072-GPOS-00040</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271618r1091566_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-001030</xccdf:version>
-          <xccdf:title>OL 9 must require the maximum number of repeating characters of the same character class be limited to four when passwords are changed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
-
-Password complexity is one factor of several that determines how long it takes to crack a password. The more complex a password, the greater the number of possible combinations that need to be tested before the password is compromised.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004066</xccdf:ident>
-          <xccdf:fixtext fixref="F-75575r1091565_fix">Configure OL 9 to require the change of the number of repeating characters of the same character class when passwords are changed by setting the "maxclassrepeat" option.
-
-Add the following line to "/etc/security/pwquality.conf" conf (or modify the line to have the required value):
-
-maxclassrepeat = 4</xccdf:fixtext>
-          <xccdf:fix id="F-75575r1091565_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271618" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271619">
-        <xccdf:title>SRG-OS-000072-GPOS-00040</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271619r1091569_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-001035</xccdf:version>
-          <xccdf:title>OL 9 must require the maximum number of repeating characters be limited to three when passwords are changed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
-
-Password complexity is one factor of several that determines how long it takes to crack a password. The more complex a password, the greater the number of possible combinations that need to be tested before the password is compromised.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004066</xccdf:ident>
-          <xccdf:fixtext fixref="F-75576r1091568_fix">Configure OL 9 to require the change of the number of repeating consecutive characters when passwords are changed by setting the "maxrepeat" option.
-
-Add the following line to "/etc/security/pwquality.conf" (or modify the line to have the required value):
-
-maxrepeat = 3</xccdf:fixtext>
-          <xccdf:fix id="F-75576r1091568_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271619" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271620">
-        <xccdf:title>SRG-OS-000072-GPOS-00040</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271620r1091572_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-001040</xccdf:version>
-          <xccdf:title>OL 9 must require the change of at least four character classes when passwords are changed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
-
-Password complexity is one factor of several that determines how long it takes to crack a password. The more complex a password, the greater the number of possible combinations that need to be tested before the password is compromised.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004066</xccdf:ident>
-          <xccdf:fixtext fixref="F-75577r1091571_fix">Configure OL 9 to require the change of at least four character classes when passwords are changed by setting the "minclass" option.
-
-Add the following line to "/etc/security/pwquality.conf" (or modify the line to have the required value):
-
-minclass = 4</xccdf:fixtext>
-          <xccdf:fix id="F-75577r1091571_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271620" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271621">
-        <xccdf:title>SRG-OS-000072-GPOS-00040</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271621r1091575_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-001045</xccdf:version>
-          <xccdf:title>OL 9 must enforce password complexity rules for the root account.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
-
-Password complexity is one factor of several that determines how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised.
-
-Satisfies: SRG-OS-000072-GPOS-00040, SRG-OS-000071-GPOS-00039, SRG-OS-000070-GPOS-00038, SRG-OS-000266-GPOS-00101, SRG-OS-000078-GPOS-00046, SRG-OS-000480-GPOS-00225, SRG-OS-000069-GPOS-00037&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004066</xccdf:ident>
-          <xccdf:fixtext fixref="F-75578r1091574_fix">Configure OL 9 to enforce password complexity on the root account.
-
-Add or update the following line in /etc/security/pwquality.conf:
-
-enforce_for_root</xccdf:fixtext>
-          <xccdf:fix id="F-75578r1091574_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271621" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271622">
-        <xccdf:title>SRG-OS-000073-GPOS-00041</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271622r1091578_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-001050</xccdf:version>
-          <xccdf:title>OL 9 must be configured so that user and group account administration utilities are configured to store only encrypted representations of passwords.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Passwords need to be protected at all times, and encryption is the standard method for protecting passwords. If passwords are not encrypted, they can be plainly read (i.e., clear text) and easily compromised. Passwords that are encrypted with a weak algorithm are no more protected than if they are kept in plain text.
-
-This setting ensures user and group account administration utilities are configured to store only encrypted representations of passwords. Additionally, the "crypt_style" configuration option ensures the use of a strong hashing algorithm that makes password cracking attacks more difficult.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004062</xccdf:ident>
-          <xccdf:fixtext fixref="F-75579r1091577_fix">Configure OL 9 to use the SHA-512 algorithm for password hashing.
-
-Add or change the following line in the "[default]" section of "/etc/libuser.conf" file:
-
-crypt_style = sha512</xccdf:fixtext>
-          <xccdf:fix id="F-75579r1091577_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271622" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271623">
-        <xccdf:title>SRG-OS-000073-GPOS-00041</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271623r1091581_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-001055</xccdf:version>
-          <xccdf:title>OL 9 must be configured to use the shadow file to store only encrypted representations of passwords.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Passwords need to be protected at all times, and encryption is the standard method for protecting passwords. If passwords are not encrypted, they can be plainly read (i.e., clear text) and easily compromised. Passwords that are encrypted with a weak algorithm are no more protected than if they are kept in plain text.
-
-This setting ensures user and group account administration utilities are configured to store only encrypted representations of passwords. Additionally, the "crypt_style" configuration option ensures the use of a strong hashing algorithm that makes password cracking attacks more difficult.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004062</xccdf:ident>
-          <xccdf:fixtext fixref="F-75580r1091580_fix">Configure OL 9 to store only SHA-512 encrypted representations of passwords.
-
-Add or update the following line in the "/etc/login.defs" file:
-
-ENCRYPT_METHOD SHA512</xccdf:fixtext>
-          <xccdf:fix id="F-75580r1091580_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271623" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271624">
-        <xccdf:title>SRG-OS-000073-GPOS-00041</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271624r1091584_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-001060</xccdf:version>
-          <xccdf:title>OL 9 pam_unix.so module must be configured in the password-auth file to use a FIPS 140-3 approved cryptographic hashing algorithm for system authentication.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Unapproved mechanisms that are used for authentication to the cryptographic module are not verified and therefore, cannot be relied upon to provide confidentiality or integrity, and DOD data may be compromised.
-
-OL 9 systems using encryption are required to use FIPS-compliant mechanisms for authenticating to cryptographic modules. 
-
-FIPS 140-3 is the current standard for validating that mechanisms used to access cryptographic modules use authentication that meets DOD requirements. This allows for Security Levels 1, 2, 3, or 4 for use on a general-purpose computing system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004062</xccdf:ident>
-          <xccdf:fixtext fixref="F-75581r1091583_fix">Configure OL 9 to use a FIPS 140-3 approved cryptographic hashing algorithm for system authentication.
-
-Edit/modify the following line in the "/etc/pam.d/password-auth" file to include the sha512 option for pam_unix.so:
-
-password sufficient pam_unix.so sha512</xccdf:fixtext>
-          <xccdf:fix id="F-75581r1091583_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271624" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271625">
-        <xccdf:title>SRG-OS-000073-GPOS-00041</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271625r1091587_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-001065</xccdf:version>
-          <xccdf:title>OL 9 password-auth must be configured to use a sufficient number of hashing rounds.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Passwords need to be protected at all times, and encryption is the standard method for protecting passwords. If passwords are not encrypted, they can be plainly read (i.e., clear text) and easily compromised. Passwords that are encrypted with a weak algorithm are no more protected than if they are kept in plain text.
-
-Using more hashing rounds makes password cracking attacks more difficult.
-
-Satisfies: SRG-OS-000073-GPOS-00041, SRG-OS-000120-GPOS-00061&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004062</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000803</xccdf:ident>
-          <xccdf:fixtext fixref="F-75582r1091586_fix">Configure Oracle Linux 9 to use 100000 hashing rounds for hashing passwords.
-
-Add or modify the following line in "/etc/pam.d/password-auth" and set "rounds" to "100000".
-
-password sufficient pam_unix.so sha512 rounds=100000</xccdf:fixtext>
-          <xccdf:fix id="F-75582r1091586_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271625" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271626">
-        <xccdf:title>SRG-OS-000073-GPOS-00041</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271626r1091590_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-001070</xccdf:version>
-          <xccdf:title>OL 9 system-auth must be configured to use a sufficient number of hashing rounds.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Passwords need to be protected at all times, and encryption is the standard method for protecting passwords. If passwords are not encrypted, they can be plainly read (i.e., clear text) and easily compromised. Passwords that are encrypted with a weak algorithm are no more protected than if they are kept in plain text.
-
-Using more hashing rounds makes password cracking attacks more difficult.
-
-Satisfies: SRG-OS-000073-GPOS-00041, SRG-OS-000120-GPOS-00061&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004062</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000803</xccdf:ident>
-          <xccdf:fixtext fixref="F-75583r1091589_fix">Configure Oracle Linux 9 to use 100000 hashing rounds for hashing passwords.
-
-Add or modify the following line in "/etc/pam.d/system-auth" and set "rounds" to 100000.
-
-password sufficient pam_unix.so sha512 rounds=100000'</xccdf:fixtext>
-          <xccdf:fix id="F-75583r1091589_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271626" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271627">
-        <xccdf:title>SRG-OS-000073-GPOS-00041</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271627r1091593_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-001075</xccdf:version>
-          <xccdf:title>OL 9 shadow password suite must be configured to use a sufficient number of hashing rounds.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Passwords need to be protected at all times, and encryption is the standard method for protecting passwords. If passwords are not encrypted, they can be plainly read (i.e., clear text) and easily compromised. Passwords that are encrypted with a weak algorithm are no more protected than if they are kept in plain text.
-
-Using more hashing rounds makes password cracking attacks more difficult.
-
-Satisfies: SRG-OS-000073-GPOS-00041, SRG-OS-000120-GPOS-00061&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004062</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000803</xccdf:ident>
-          <xccdf:fixtext fixref="F-75584r1091592_fix">Configure OL 9 to encrypt all stored passwords with a strong cryptographic hash.
-
-Edit/modify the following line in the "/etc/login.defs" file and set "SHA_CRYPT_MIN_ROUNDS" to a value no lower than "100000":
-
-SHA_CRYPT_MIN_ROUNDS 100000
-SHA_CRYPT_MAX_ROUNDS 100000</xccdf:fixtext>
-          <xccdf:fix id="F-75584r1091592_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271627" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271628">
-        <xccdf:title>SRG-OS-000073-GPOS-00041</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271628r1091596_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-001080</xccdf:version>
-          <xccdf:title>OL 9 must employ FIPS 140-3 approved cryptographic hashing algorithms for all stored passwords.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The system must use a strong hashing algorithm to store the password.
-
-Passwords need to be protected at all times, and encryption is the standard method for protecting passwords. If passwords are not encrypted, they can be plainly read (i.e., clear text) and easily compromised.
-
-Satisfies: SRG-OS-000073-GPOS-00041, SRG-OS-000120-GPOS-00061&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004062</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000803</xccdf:ident>
-          <xccdf:fixtext fixref="F-75585r1091595_fix">Lock all interactive user accounts not using SHA-512 hashing until the passwords can be regenerated with SHA-512.
-
-To lock an account:
-
-$ sudo passwd -l [username]</xccdf:fixtext>
-          <xccdf:fix id="F-75585r1091595_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271628" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271629">
-        <xccdf:title>SRG-OS-000075-GPOS-00043</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271629r1091599_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-001085</xccdf:version>
-          <xccdf:title>OL 9 passwords for new users or password changes must have a 24-hour minimum password lifetime restriction in /etc/login.defs.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Enforcing a minimum password lifetime helps to prevent repeated password changes to defeat the password reuse or history enforcement requirement. If users are allowed to immediately and continually change their password, then the password could be repeatedly changed in a short period of time to defeat the organization's policy regarding password reuse.
-
-Setting the minimum password age protects against users cycling back to a favorite password after satisfying the password reuse requirement.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004066</xccdf:ident>
-          <xccdf:fixtext fixref="F-75586r1091598_fix">Configure OL 9 to enforce 24 hours as the minimum password lifetime.
-
-Add the following line in "/etc/login.defs" (or modify the line to have the required value):
-
-PASS_MIN_DAYS 1</xccdf:fixtext>
-          <xccdf:fix id="F-75586r1091598_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271629" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271630">
-        <xccdf:title>SRG-OS-000075-GPOS-00043</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271630r1091602_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-001090</xccdf:version>
-          <xccdf:title>OL 9 passwords must have a 24-hour minimum password lifetime restriction in /etc/shadow.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Enforcing a minimum password lifetime helps to prevent repeated password changes to defeat the password reuse or history enforcement requirement. If users are allowed to immediately and continually change their password, the password could be repeatedly changed in a short period of time to defeat the organization's policy regarding password reuse.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004066</xccdf:ident>
-          <xccdf:fixtext fixref="F-75587r1091601_fix">Configure noncompliant accounts to enforce a 24-hour minimum password lifetime:
-
-$ sudo passwd -n 1 [user]</xccdf:fixtext>
-          <xccdf:fix id="F-75587r1091601_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271630" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271631">
-        <xccdf:title>SRG-OS-000076-GPOS-00044</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271631r1091605_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-001095</xccdf:version>
-          <xccdf:title>OL 9 user account passwords for new users or password changes must have a 60-day maximum password lifetime restriction in /etc/login.defs.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Any password, no matter how complex, can eventually be cracked; therefore, passwords need to be changed periodically. If the operating system does not limit the lifetime of passwords and force users to change their passwords, there is the risk that the operating system passwords could be compromised.
-
-Setting the password maximum age ensures users are required to periodically change their passwords. Requiring shorter password lifetimes increases the risk of users writing down the password in a convenient location subject to physical compromise.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004066</xccdf:ident>
-          <xccdf:fixtext fixref="F-75588r1091604_fix">Configure OL 9 to enforce a 60-day maximum password lifetime.
-
-Add or modify the following line in the "/etc/login.defs" file:
-
-PASS_MAX_DAYS 60</xccdf:fixtext>
-          <xccdf:fix id="F-75588r1091604_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271631" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271632">
-        <xccdf:title>SRG-OS-000076-GPOS-00044</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271632r1091608_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-001100</xccdf:version>
-          <xccdf:title>OL 9 user account passwords must have a 60-day maximum password lifetime restriction.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Any password, no matter how complex, can eventually be cracked; therefore, passwords need to be changed periodically. If OL 9 does not limit the lifetime of passwords and force users to change their passwords, there is the risk that OL 9 passwords could be compromised.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004066</xccdf:ident>
-          <xccdf:fixtext fixref="F-75589r1091607_fix">Configure noncompliant accounts to enforce a 60-day maximum password lifetime restriction.
-
-passwd -x 60 [user]</xccdf:fixtext>
-          <xccdf:fix id="F-75589r1091607_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271632" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271633">
-        <xccdf:title>SRG-OS-000078-GPOS-00046</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271633r1091611_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-001105</xccdf:version>
-          <xccdf:title>OL 9 passwords must be created with a minimum of 15 characters.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The shorter the password, the lower the number of possible combinations that need to be tested before the password is compromised.
-
-Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. Password length is one factor of several that helps to determine strength and how long it takes to crack a password. Use of more characters in a password helps to increase exponentially the time and/or resources required to compromise the password.
-
-OL 9 uses "pwquality" as a mechanism to enforce password complexity. Configurations are set in the "etc/security/pwquality.conf" file.
-
-The "minlen", sometimes noted as minimum length, acts as a "score" of complexity based on the credit components of the "pwquality" module. By setting the credit components to a negative value, not only will those components be required, but they will not count toward the total "score" of "minlen". This will enable "minlen" to require a 15-character minimum.
-
-The DOD minimum password requirement is 15 characters.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004066</xccdf:ident>
-          <xccdf:fixtext fixref="F-75590r1091610_fix">Configure OL 9 to enforce a minimum 15-character password length.
-
-Add the following line to "/etc/security/pwquality.conf" (or modify the line to have the required value):
-
-minlen = 15</xccdf:fixtext>
-          <xccdf:fix id="F-75590r1091610_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271633" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271634">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271634r1091614_rule" severity="high" weight="10.0">
-          <xccdf:version>OL09-00-001110</xccdf:version>
-          <xccdf:title>OL 9 must not allow blank or null passwords.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;If an account has an empty password, anyone could log in and run commands with the privileges of that account. Accounts with empty passwords should never be used in operational environments.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75591r1091613_fix">Remove any instances of the "nullok" option in the "/etc/pam.d/password-auth" and "/etc/pam.d/system-auth" files to prevent logons with empty passwords.
-
-Note: Manual changes to the listed file may be overwritten by the "authselect" program.</xccdf:fixtext>
-          <xccdf:fix id="F-75591r1091613_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271634" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271635">
-        <xccdf:title>SRG-OS-000080-GPOS-00048</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271635r1117265_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-001115</xccdf:version>
-          <xccdf:title>OL 9 must require a boot loader superuser password.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DOD-approved PKIs, all DOD systems (e.g., web servers and web portals) must be properly configured to incorporate access control methods that do not rely solely on the possession of a certificate for access. Successful authentication must not automatically give an entity access to an asset or security boundary. Authorization procedures and controls must be implemented to ensure each authenticated entity also has a validated and current authorization. Authorization is the process of determining whether an entity, once authenticated, is permitted to access a specific asset. Information systems use access control policies and enforcement mechanisms to implement this requirement.
-
-Password protection on the boot loader configuration ensures users with physical access cannot trivially alter important bootloader settings. These include which kernel to use, and whether to enter single-user mode.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000213</xccdf:ident>
-          <xccdf:fixtext fixref="F-75592r1091616_fix">Configure OL 9 to require a grub bootloader password for the grub superuser account.
-
-Generate an encrypted grub2 password for the grub superuser account with the following command:
-
-$ sudo grub2-setpassword
-Enter password:
-Confirm password:</xccdf:fixtext>
-          <xccdf:fix id="F-75592r1091616_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271635" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271636">
-        <xccdf:title>SRG-OS-000266-GPOS-00101</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271636r1091620_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-001120</xccdf:version>
-          <xccdf:title>OL 9 must enforce password complexity by requiring that at least one special character be used.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. Password complexity is one factor of several that determines how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised. OL 9 uses "pwquality" as a mechanism to enforce password complexity. Note that to require special characters without degrading the "minlen" value, the credit value must be expressed as a negative number in "/etc/security/pwquality.conf".&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004066</xccdf:ident>
-          <xccdf:fixtext fixref="F-75593r1091619_fix">Configure OL 9 to enforce password complexity by requiring at least one special character be used by setting the "ocredit" option.
-
-Add the following line to "/etc/security/pwquality.conf" (or modify the line to have the required value):
-
-ocredit = -1</xccdf:fixtext>
-          <xccdf:fix id="F-75593r1091619_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271636" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271637">
-        <xccdf:title>SRG-OS-000480-GPOS-00225</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271637r1091623_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-001125</xccdf:version>
-          <xccdf:title>OL 9 must prevent the use of dictionary words for passwords.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. If OL 9 allows the user to select passwords based on dictionary words, this increases the chances of password compromise by increasing the opportunity for successful guesses, and brute-force attacks.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75594r1091622_fix">Configure OL 9 to prevent the use of dictionary words for passwords.
-
-Add or update the following line in the "/etc/security/pwquality.conf" file or a configuration file in the /etc/pwquality.conf.d/ directory to contain the "dictcheck" parameter:
-
-dictcheck=1</xccdf:fixtext>
-          <xccdf:fix id="F-75594r1091622_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271637" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271638">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271638r1091626_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-001130</xccdf:version>
-          <xccdf:title>OL 9 must not have accounts configured with blank or null passwords.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;If an account has an empty password, anyone could log in and run commands with the privileges of that account. Accounts with empty passwords should never be used in operational environments.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75595r1091625_fix">Configure OL 9 so that all accounts have a password or lock the account with the following commands:
-
-Perform a password reset:
-
-$ sudo passwd [username] 
-
-To lock an account:
-
-$ sudo passwd -l [username]</xccdf:fixtext>
-          <xccdf:fix id="F-75595r1091625_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271638" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271639">
-        <xccdf:title>SRG-OS-000114-GPOS-00059</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271639r1091629_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002000</xccdf:version>
-          <xccdf:title>OL 9 file system automount function must be disabled unless required.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;An authentication process resists replay attacks if it is impractical to achieve a successful authentication by recording and replaying a previous authentication message.
-
-Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxAutofs" />
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000778</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001958</xccdf:ident>
-          <xccdf:fixtext fixref="F-75596r1091628_fix">Configure OL 9 to disable and mask the ability to automount devices.
-
-The autofs service can be disabled and masked with the following command:
-
-$ sudo systemctl mask --now autofs.service</xccdf:fixtext>
-          <xccdf:fix id="F-75596r1091628_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271639" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271640">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271640r1091632_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002010</xccdf:version>
-          <xccdf:title>OL 9 must be configured so that the Network File System (NFS) is configured to use RPCSEC_GSS.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;When an NFS server is configured to use RPCSEC_SYS, a selected userid and groupid are used to handle requests from the remote user. The userid and groupid could mistakenly or maliciously be set incorrectly. The RPCSEC_GSS method of authentication uses certificates on the server and client systems to authenticate the remote mount request more securely.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxNFSMounts" />
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75597r1091631_fix">Update the "/etc/fstab" file so the option "sec" is defined for each NFS mounted file system and the "sec" option does not have the "sys" setting. 
-
-Ensure the "sec" option is defined as "krb5p:krb5i:krb5".</xccdf:fixtext>
-          <xccdf:fix id="F-75597r1091631_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271640" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271641">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271641r1091635_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002011</xccdf:version>
-          <xccdf:title>OL 9 must prevent special devices on file systems that are imported via Network File System (NFS).</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxNFSMounts" />
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75598r1091634_fix">Update each NFS mounted file system to use the "nodev" option on file systems that are being imported via NFS.</xccdf:fixtext>
-          <xccdf:fix id="F-75598r1091634_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271641" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271642">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271642r1092593_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002012</xccdf:version>
-          <xccdf:title>OL 9 must prevent code from being executed on file systems that are imported via Network File System (NFS).</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "noexec" mount option causes the system not to execute binary files. This option must be used for mounting any file system not containing approved binary as they may be incompatible. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxNFSMounts" />
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75599r1091637_fix">Update each NFS mounted file system to use the "noexec" option on file systems that are being imported via NFS.</xccdf:fixtext>
-          <xccdf:fix id="F-75599r1091637_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271642" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271643">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271643r1091641_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002013</xccdf:version>
-          <xccdf:title>OL 9 must prevent files with the setuid and setgid bit set from being executed on file systems that are imported via Network File System (NFS).</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system not to execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxNFSMounts" />
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75600r1091640_fix">Update each NFS mounted file system to use the "nosuid" option on file systems that are being imported via NFS.</xccdf:fixtext>
-          <xccdf:fix id="F-75600r1091640_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271643" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271647">
-        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271647r1091653_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002030</xccdf:version>
-          <xccdf:title>OL 9 must mount /boot with the nodev option.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The only legitimate location for device files is the "/dev" directory located on the root partition. The only exception to this is chroot jails.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
-          <xccdf:fixtext fixref="F-75604r1091652_fix">Configure OL 9 to mount /boot with the nodev option.
-
-Modify "/etc/fstab" to use the "nodev" option on the "/boot" directory.</xccdf:fixtext>
-          <xccdf:fix id="F-75604r1091652_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271647" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271648">
-        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271648r1091656_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002031</xccdf:version>
-          <xccdf:title>OL 9 must prevent files with the setuid and setgid bit set from being executed on the /boot directory.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system not to execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
-          <xccdf:fixtext fixref="F-75605r1091655_fix">Configure OL 9 to prevent files with the setuid and setgid bit set from being executed on the /boot directory.
-
-Modify "/etc/fstab" to use the "nosuid" option on the "/boot" directory.</xccdf:fixtext>
-          <xccdf:fix id="F-75605r1091655_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271648" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271649">
-        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271649r1091659_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002032</xccdf:version>
-          <xccdf:title>OL 9 must prevent files with the setuid and setgid bit set from being executed on the /boot/efi directory.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system not to execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxUEFI" />
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
-          <xccdf:fixtext fixref="F-75606r1091658_fix">Configure OL 9 to prevent files with the setuid and setgid bit set from being executed on the /boot/efi directory.
-
-Modify "/etc/fstab" to use the "nosuid" option on the "/boot/efi" directory.</xccdf:fixtext>
-          <xccdf:fix id="F-75606r1091658_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271649" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271650">
-        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271650r1091662_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002040</xccdf:version>
-          <xccdf:title>OL 9 must mount /dev/shm with the nodev option.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The nodev mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
-
-The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
-          <xccdf:fixtext fixref="F-75607r1091661_fix">Configure OL 9 to mount /dev/shm with the nodev option.
-
-Modify "/etc/fstab" to use the "nodev" option on the "/dev/shm" file system.</xccdf:fixtext>
-          <xccdf:fix id="F-75607r1091661_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271650" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271651">
-        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271651r1091665_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002041</xccdf:version>
-          <xccdf:title>OL 9 must mount /dev/shm with the noexec option.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The noexec mount option causes the system to not execute binary files. This option must be used for mounting any file system not containing approved binary files, as they may be incompatible. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
-          <xccdf:fixtext fixref="F-75608r1091664_fix">Configure OL 9 to mount /dev/shm with the noexec option.
-
-Modify "/etc/fstab" to use the "noexec" option on the "/dev/shm" file system.</xccdf:fixtext>
-          <xccdf:fix id="F-75608r1091664_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271651" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271652">
-        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271652r1094966_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002042</xccdf:version>
-          <xccdf:title>OL 9 must mount /dev/shm with the nosuid option.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system to not execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
-          <xccdf:fixtext fixref="F-75609r1091667_fix">Configure OL 9 to mount /dev/shm with the nosuid option.
-
-Modify "/etc/fstab" to use the "nosuid" option on the "/dev/shm" file system.</xccdf:fixtext>
-          <xccdf:fix id="F-75609r1091667_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271652" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271653">
-        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271653r1091671_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002050</xccdf:version>
-          <xccdf:title>OL 9 must mount /tmp with the nodev option.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
-
-The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
-          <xccdf:fixtext fixref="F-75610r1091670_fix">Configure OL 9 to mount /tmp with the nodev option.
-
-Modify "/etc/fstab" to use the "nodev" option on the "/tmp" directory.</xccdf:fixtext>
-          <xccdf:fix id="F-75610r1091670_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271653" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271654">
-        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271654r1091674_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002051</xccdf:version>
-          <xccdf:title>OL 9 must mount /tmp with the noexec option.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "noexec" mount option causes the system to not execute binary files. This option must be used for mounting any file system not containing approved binary files, as they may be incompatible. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
-          <xccdf:fixtext fixref="F-75611r1091673_fix">Configure OL 9 to mount /tmp with the noexec option.
-
-Modify "/etc/fstab" to use the "noexec" option on the "/tmp" directory.</xccdf:fixtext>
-          <xccdf:fix id="F-75611r1091673_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271654" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271655">
-        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271655r1091677_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002052</xccdf:version>
-          <xccdf:title>OL 9 must mount /tmp with the nosuid option.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system to not execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
-          <xccdf:fixtext fixref="F-75612r1091676_fix">Configure OL 9 to mount /tmp with the nosuid option.
-
-Modify "/etc/fstab" to use the "nosuid" option on the "/tmp" directory.</xccdf:fixtext>
-          <xccdf:fix id="F-75612r1091676_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271655" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271656">
-        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271656r1091680_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002060</xccdf:version>
-          <xccdf:title>OL 9 must mount /var with the nodev option.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
-
-The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
-          <xccdf:fixtext fixref="F-75613r1091679_fix">Configure OL 9 to mount /var with the nodev option.
-
-Modify "/etc/fstab" to use the "nodev" option on the "/var" directory.</xccdf:fixtext>
-          <xccdf:fix id="F-75613r1091679_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271656" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271657">
-        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271657r1091683_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002061</xccdf:version>
-          <xccdf:title>OL 9 must mount /var/log with the nodev option.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
-
-The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
-          <xccdf:fixtext fixref="F-75614r1091682_fix">Configure OL 9 to mount /var/log with the nodev option.
-
-Modify "/etc/fstab" to use the "nodev" option on the "/var/log" directory.</xccdf:fixtext>
-          <xccdf:fix id="F-75614r1091682_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271657" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271658">
-        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271658r1091686_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002062</xccdf:version>
-          <xccdf:title>OL 9 must mount /var/log with the noexec option.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "noexec" mount option causes the system to not execute binary files. This option must be used for mounting any file system not containing approved binary files, as they may be incompatible. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
-          <xccdf:fixtext fixref="F-75615r1091685_fix">Configure OL 9 to mount /var/log with the noexec option.
-
-Modify "/etc/fstab" to use the "noexec" option on the "/var/log" directory.</xccdf:fixtext>
-          <xccdf:fix id="F-75615r1091685_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271658" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271659">
-        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271659r1091689_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002063</xccdf:version>
-          <xccdf:title>OL 9 must mount /var/log with the nosuid option.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system to not execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
-          <xccdf:fixtext fixref="F-75616r1091688_fix">Configure OL 9 to mount /var/log with the nosuid option.
-
-Modify "/etc/fstab" to use the "nosuid" option on the "/var/log" directory.</xccdf:fixtext>
-          <xccdf:fix id="F-75616r1091688_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271659" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271660">
-        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271660r1091692_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002064</xccdf:version>
-          <xccdf:title>OL 9 must mount /var/log/audit with the nodev option.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
-
-The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
-          <xccdf:fixtext fixref="F-75617r1091691_fix">Configure OL 9 to mount /var/log/audit with the nodev option.
-
-Modify "/etc/fstab" to use the "nodev" option on the "/var/log/audit" directory.</xccdf:fixtext>
-          <xccdf:fix id="F-75617r1091691_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271660" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271661">
-        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271661r1091695_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002065</xccdf:version>
-          <xccdf:title>OL 9 must mount /var/log/audit with the noexec option.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "noexec" mount option causes the system to not execute binary files. This option must be used for mounting any file system not containing approved binary files, as they may be incompatible. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
-          <xccdf:fixtext fixref="F-75618r1091694_fix">Configure OL 9 to mount /var/log/audit with the noexec option.
-
-Modify "/etc/fstab" to use the "noexec" option on the "/var/log/audit" directory.</xccdf:fixtext>
-          <xccdf:fix id="F-75618r1091694_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271661" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271662">
-        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271662r1091698_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002066</xccdf:version>
-          <xccdf:title>OL 9 must mount /var/log/audit with the nosuid option.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system to not execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
-          <xccdf:fixtext fixref="F-75619r1091697_fix">Configure OL 9 to mount /var/log/audit with the nosuid option.
-
-Modify "/etc/fstab" to use the "nosuid" option on the "/var/log/audit" directory.</xccdf:fixtext>
-          <xccdf:fix id="F-75619r1091697_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271662" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271663">
-        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271663r1091701_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002067</xccdf:version>
-          <xccdf:title>OL 9 must mount /var/tmp with the nodev option.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
-
-The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
-          <xccdf:fixtext fixref="F-75620r1091700_fix">Configure OL 9 to mount /var/tmp with the nodev option.
-
-Modify "/etc/fstab" to use the "nodev" option on the "/var/tmp" directory.</xccdf:fixtext>
-          <xccdf:fix id="F-75620r1091700_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271663" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271664">
-        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271664r1091704_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002068</xccdf:version>
-          <xccdf:title>OL 9 must mount /var/tmp with the noexec option.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "noexec" mount option causes the system to not execute binary files. This option must be used for mounting any file system not containing approved binary files, as they may be incompatible. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
-          <xccdf:fixtext fixref="F-75621r1091703_fix">Configure OL 9 to mount /var/tmp with the noexec option.
-
-Modify "/etc/fstab" to use the "noexec" option on the "/var/tmp" directory.</xccdf:fixtext>
-          <xccdf:fix id="F-75621r1091703_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271664" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271665">
-        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271665r1091707_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002069</xccdf:version>
-          <xccdf:title>OL 9 must mount /var/tmp with the nosuid option.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system to not execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
-          <xccdf:fixtext fixref="F-75622r1091706_fix">Configure OL 9 to mount /var/tmp with the nosuid option.
-
-Modify "/etc/fstab" to use the "nosuid" option on the "/var/tmp" directory.</xccdf:fixtext>
-          <xccdf:fix id="F-75622r1091706_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271665" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271666">
-        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271666r1091710_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002070</xccdf:version>
-          <xccdf:title>OL 9 must prevent device files from being interpreted on file systems that contain user home directories.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
-
-The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
-          <xccdf:fixtext fixref="F-75623r1091709_fix">Configure OL 9 to prevent device files from being interpreted on file systems that contain user home directories.
-
-Modify "/etc/fstab" to use the "nodev" option on the "/home" directory.</xccdf:fixtext>
-          <xccdf:fix id="F-75623r1091709_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271666" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271667">
-        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271667r1091713_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002071</xccdf:version>
-          <xccdf:title>OL 9 must prevent files with the setuid and setgid bit set from being executed on file systems that contain user home directories.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system to not execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
-          <xccdf:fixtext fixref="F-75624r1091712_fix">Configure OL 9 to prevent files with the setuid and setgid bit set from being executed on file systems that contain user home directories.
-
-Modify "/etc/fstab" to use the "nosuid" option on the "/home" directory.</xccdf:fixtext>
-          <xccdf:fix id="F-75624r1091712_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271667" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271668">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271668r1091716_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002072</xccdf:version>
-          <xccdf:title>OL 9 must prevent code from being executed on file systems that contain user home directories.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The noexec mount option causes the system to not execute binary files. This option must be used for mounting any file system not containing approved binary files, as they may be incompatible. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75625r1091715_fix">Configure OL 9 to prevent code from being executed on file systems that contain user home directories.
-
-Modify "/etc/fstab" to use the "noexec" option on the "/home" directory.</xccdf:fixtext>
-          <xccdf:fix id="F-75625r1091715_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271668" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271669">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271669r1091719_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002080</xccdf:version>
-          <xccdf:title>OL 9 must prevent special devices on nonroot local partitions.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
-
-The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75626r1091718_fix">Configure the "/etc/fstab" to use the "nodev" option on all nonroot local partitions.</xccdf:fixtext>
-          <xccdf:fix id="F-75626r1091718_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271669" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271670">
-        <xccdf:title>SRG-OS-000114-GPOS-00059</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271670r1091722_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002100</xccdf:version>
-          <xccdf:title>OL 9 must disable the graphical user interface automount function unless required.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Automatically mounting file systems permits easy introduction of unknown devices, thereby facilitating malicious activity.
-
-Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxGnome" />
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000778</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001958</xccdf:ident>
-          <xccdf:fixtext fixref="F-75627r1091721_fix">Configure the GNOME desktop to disable automated mounting of removable media.
-
-The dconf settings can be edited in the /etc/dconf/db/* location.
-
-Update the [org/gnome/desktop/media-handling] section of the "/etc/dconf/db/local.d/00-security-settings" database file and add or update the following lines:
-
-[org/gnome/desktop/media-handling]
-automount-open=false
-
-Update the dconf system databases:
-
-$ sudo dconf update</xccdf:fixtext>
-          <xccdf:fix id="F-75627r1091721_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271670" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271678">
-        <xccdf:title>SRG-OS-000114-GPOS-00059</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271678r1091746_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002120</xccdf:version>
-          <xccdf:title>OL 9 must prevent a user from overriding the disabling of the graphical user interface automount function.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;A nonprivileged account is any operating system account with authorizations of a nonprivileged user.
-
-Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxGnome" />
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000778</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001958</xccdf:ident>
-          <xccdf:fixtext fixref="F-75635r1091745_fix">Configure the GNOME desktop to not allow a user to change the setting that disables automated mounting of removable media.
-
-Add the following line to "/etc/dconf/db/local.d/locks/00-security-settings-lock" to prevent user modification:
-
-/org/gnome/desktop/media-handling/automount-open
-
-Update the dconf system databases:
-
-$ sudo dconf update</xccdf:fixtext>
-          <xccdf:fix id="F-75635r1091745_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271678" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271679">
-        <xccdf:title>SRG-OS-000114-GPOS-00059</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271679r1091749_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002121</xccdf:version>
-          <xccdf:title>OL 9 must prevent a user from overriding the disabling of the graphical user interface autorun function.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Techniques used to address this include protocols using nonces (e.g., numbers generated for a specific one-time use) or challenges (e.g., TLS, WS_Security). Additional techniques include time-synchronous or challenge-response one-time authenticators.
-
-Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxGnome" />
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000778</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001958</xccdf:ident>
-          <xccdf:fixtext fixref="F-75636r1091748_fix">Configure the GNOME desktop to not allow a user to change the setting that disables autorun on removable media.
-
-Add the following line to "/etc/dconf/db/local.d/locks/00-security-settings-lock" to prevent user modification:
-
-/org/gnome/desktop/media-handling/autorun-never
-
-Update the dconf system databases:
-
-$ sudo dconf update</xccdf:fixtext>
-          <xccdf:fix id="F-75636r1091748_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271679" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271680">
-        <xccdf:title>SRG-OS-000023-GPOS-00006</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271680r1091752_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002122</xccdf:version>
-          <xccdf:title>OL 9 must prevent a user from overriding the banner-message-enable setting for the graphical user interface.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Display of a standardized and approved use notification before granting access to the operating system ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
-
-For U.S. government systems, system use notifications are required only for access via login interfaces with human users and are not required when such human interfaces do not exist.
-
-Satisfies: SRG-OS-000023-GPOS-00006, SRG-OS-000228-GPOS-00088&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxGnome" />
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000048</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001384</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001385</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001386</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001387</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001388</xccdf:ident>
-          <xccdf:fixtext fixref="F-75637r1091751_fix">Configure OL 9 to prevent a user from overriding the banner setting for graphical user interfaces. 
-
-Create a database to contain the system-wide graphical user logon settings (if it does not already exist) with the following command:
-
-$ sudo touch /etc/dconf/db/local.d/locks/session
-
-Add the following setting to prevent nonprivileged users from modifying it:
-
-/org/gnome/login-screen/banner-message-enable
-
-Run the following command to update the database:
-
-$ sudo dconf update</xccdf:fixtext>
-          <xccdf:fix id="F-75637r1091751_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271680" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271681">
-        <xccdf:title>SRG-OS-000028-GPOS-00009</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271681r1091755_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002123</xccdf:version>
-          <xccdf:title>OL 9 must prevent a user from overriding the screensaver lock-enabled setting for the graphical user interface.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;A session time-out lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not log out because of the temporary nature of the absence. Rather than relying on the user to manually lock their operating system session prior to vacating the vicinity, operating systems need to be able to identify when a user's session has idled and take action to initiate the session lock.
-
-The session lock is implemented at the point where session activity can be determined and/or controlled.
-
-Implementing session settings will have little value if a user is able to manipulate these settings from the defaults prescribed in the other requirements of this implementation guide.
-
-Satisfies: SRG-OS-000028-GPOS-00009, SRG-OS-000030-GPOS-00011&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxGnome" />
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000056</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000057</xccdf:ident>
-          <xccdf:fixtext fixref="F-75638r1091754_fix">Configure OL 9 to prevent a user from overriding settings for graphical user interfaces.
-
-Create a database to contain the system-wide screensaver settings (if it does not already exist) with the following command: 
-
-Note: The example below is using the database "local" for the system, so if the system is using another database in "/etc/dconf/profile/user", the file should be created under the appropriate subdirectory.
-
-$ sudo touch /etc/dconf/db/local.d/locks/session
-
-Add the following setting to prevent nonprivileged users from modifying it:
-
-/org/gnome/desktop/screensaver/lock-enabled
-
-Update the system databases:
-
-$ sudo dconf update</xccdf:fixtext>
-          <xccdf:fix id="F-75638r1091754_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271681" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271682">
-        <xccdf:title>SRG-OS-000029-GPOS-00010</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271682r1091758_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002124</xccdf:version>
-          <xccdf:title>OL 9 must prevent a user from overriding the session idle-delay setting for the graphical user interface.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;A session time-out lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not logout because of the temporary nature of the absence. Rather than relying on the user to manually lock their operating system session prior to vacating the vicinity, the GNOME desktop can be configured to identify when a user's session has idled and take action to initiate the session lock. As such, users should not be allowed to change session settings.
-
-Satisfies: SRG-OS-000029-GPOS-00010, SRG-OS-000031-GPOS-00012&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxGnome" />
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000057</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000060</xccdf:ident>
-          <xccdf:fixtext fixref="F-75639r1091757_fix">Configure OL 9 to prevent a user from overriding settings for graphical user interfaces.
-
-Create a database to contain the system-wide screensaver settings (if it does not already exist) with the following command: 
-
-Note: The example below is using the database "local" for the system, so if the system is using another database in "/etc/dconf/profile/user", the file should be created under the appropriate subdirectory.
-
-$ sudo touch /etc/dconf/db/local.d/locks/session
-
-Add the following setting to prevent nonprivileged users from modifying it:
-
-/org/gnome/desktop/session/idle-delay
-
-Update the system databases:
-
-$ sudo dconf update</xccdf:fixtext>
-          <xccdf:fix id="F-75639r1091757_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271682" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271683">
-        <xccdf:title>SRG-OS-000029-GPOS-00010</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271683r1091761_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002125</xccdf:version>
-          <xccdf:title>OL 9 must prevent a user from overriding the session lock-delay setting for the graphical user interface.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;A session time-out lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not logout because of the temporary nature of the absence. Rather than relying on the user to manually lock their operating system session prior to vacating the vicinity, the GNOME desktop can be configured to identify when a user's session has idled and take action to initiate the session lock. As such, users should not be allowed to change session settings.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxGnome" />
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000057</xccdf:ident>
-          <xccdf:fixtext fixref="F-75640r1091760_fix">Configure OL 9 to prevent a user from overriding settings for graphical user interfaces.
-
-Create a database to contain the system-wide screensaver settings (if it does not already exist) with the following command: 
-
-Note: The example below is using the database "local" for the system, so if the system is using another database in "/etc/dconf/profile/user", the file should be created under the appropriate subdirectory.
-
-$ sudo touch /etc/dconf/db/local.d/locks/session
-
-Add the following setting to prevent nonprivileged users from modifying it:
-
-/org/gnome/desktop/screensaver/lock-delay
-
-Update the system databases:
-
-$ sudo dconf update</xccdf:fixtext>
-          <xccdf:fix id="F-75640r1091760_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271683" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271684">
-        <xccdf:title>SRG-OS-000028-GPOS-00009</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271684r1091764_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002126</xccdf:version>
-          <xccdf:title>OL 9 must prevent a user from overriding the disabling of the graphical user smart card removal action.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;A session lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not want to log out because of the temporary nature of the absence.
-
-The session lock is implemented at the point where session activity can be determined. Rather than be forced to wait for a period of time to expire before the user session can be locked, OL 9 must provide users with the ability to manually invoke a session lock so users can secure their session if it is necessary to temporarily vacate the immediate physical vicinity.
-
-Satisfies: SRG-OS-000028-GPOS-00009, SRG-OS-000030-GPOS-00011&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxGnome" />
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000056</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000057</xccdf:ident>
-          <xccdf:fixtext fixref="F-75641r1091763_fix">Configure OL 9 must prevent a user from overriding the disabling of the graphical user smart card removal action.
-
-Add the following line to "/etc/dconf/db/local.d/locks/00-security-settings-lock":
-
-/org/gnome/settings-daemon/peripherals/smartcard/removal-action
-
-Update the dconf system databases:
-
-$ sudo dconf update</xccdf:fixtext>
-          <xccdf:fix id="F-75641r1091763_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271684" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271685">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271685r1091767_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002127</xccdf:version>
-          <xccdf:title>OL 9 must disable the ability of a user to restart the system from the login screen.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;A user who is at the console can reboot the system at the login screen. If restart or shutdown buttons are pressed at the login screen, this can create the risk of short-term loss of availability of systems due to reboot.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxGnome" />
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75642r1091766_fix">Configure OL 9 to disable a user's ability to restart the system.
-
-Add or update the [org/gnome/settings-daemon/] section of the /etc/dconf/db/local.d/00-security-settings" database file and add or update the following lines:
-
-[org/gnome/settings-daemon/peripherals/smartcard]
-disable-restart-buttons='true'
-
-Then update the dconf system databases:
-
-$ sudo dconf update</xccdf:fixtext>
-          <xccdf:fix id="F-75642r1091766_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271685" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271686">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271686r1091770_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002128</xccdf:version>
-          <xccdf:title>OL 9 must prevent a user from overriding the disable-restart-buttons setting for the graphical user interface.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;A user who is at the console can reboot the system at the login screen. If restart or shutdown buttons are pressed at the login screen, this can create the risk of short-term loss of availability of systems due to reboot.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxGnome" />
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75643r1091769_fix">Configure OL 9 to prevent a user from overriding the disable-restart-buttons setting for graphical user interfaces. 
-
-Create a database to contain the system-wide graphical user logon settings (if it does not already exist) with the following command:
-
-$ sudo touch /etc/dconf/db/local.d/locks/session
-
-Add the following line to prevent nonprivileged users from modifying it:
-
-/org/gnome/login-screen/disable-restart-buttons
-
-Run the following command to update the database:
-
-$ sudo dconf update</xccdf:fixtext>
-          <xccdf:fix id="F-75643r1091769_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271686" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271687">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271687r1091773_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002129</xccdf:version>
-          <xccdf:title>OL 9 must prevent a user from overriding the Ctrl-Alt-Del sequence settings for the graphical user interface.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;A locally logged-in user who presses Ctrl-Alt-Del, when at the console, can reboot the system. If accidentally pressed, as could happen in the case of mixed OS environment, this can create the risk of short-term loss of availability of systems due to unintentional reboot.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxGnome" />
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75644r1091772_fix">Configure OL 9 to disallow the user changing the Ctrl-Alt-Del sequence in the GNOME desktop.
-
-Create a database to container system-wide graphical user logon settings (if it does not already exist) with the following command:
-
-$ sudo touch /etc/dconf/db/local.d/locks/session
-
-Add the following line to the session locks file to prevent nonprivileged users from modifying the Ctrl-Alt-Del setting:
-
-/org/gnome/settings-daemon/plugins/media-keys/logout
-
-Run the following command to update the database:
-
-$ sudo dconf update</xccdf:fixtext>
-          <xccdf:fix id="F-75644r1091772_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271687" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271688">
-        <xccdf:title>SRG-OS-000023-GPOS-00006</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271688r1091776_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002150</xccdf:version>
-          <xccdf:title>OL 9 must be configured to enable the display of the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system via a graphical user logon.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Display of a standardized and approved use notification before granting access to the operating system ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
-
-For U.S. government systems, system use notifications are required only for access via login interfaces with human users and are not required when such human interfaces do not exist.
-
-Satisfies: SRG-OS-000023-GPOS-00006, SRG-OS-000228-GPOS-00088&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxGnome" />
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000048</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001384</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001385</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001386</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001387</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001388</xccdf:ident>
-          <xccdf:fixtext fixref="F-75645r1091775_fix">Configure OL 9 to display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system via a graphical user logon.
-
-Create a database to contain the system-wide graphical user logon settings (if it does not already exist) with the following command:
-
-$ sudo touch /etc/dconf/db/local.d/01-banner-message
-
-Add the following lines to the [org/gnome/login-screen] section of the "/etc/dconf/db/local.d/01-banner-message":
-
-[org/gnome/login-screen]
-
-banner-message-enable=true
-
-Run the following command to update the database:
-
-$ sudo dconf update</xccdf:fixtext>
-          <xccdf:fix id="F-75645r1091775_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271688" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271690">
-        <xccdf:title>SRG-OS-000028-GPOS-00009</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271690r1092634_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002160</xccdf:version>
-          <xccdf:title>OL 9 must be able to directly initiate a session lock for all connection types using smart card when the smart card is removed.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;A session lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not want to log out because of the temporary nature of the absence.
-
-The session lock is implemented at the point where session activity can be determined. Rather than be forced to wait for a period of time to expire before the user session can be locked, OL 9 needs to provide users with the ability to manually invoke a session lock so users can secure their session if it is necessary to temporarily vacate the immediate physical vicinity.
-
-Satisfies: SRG-OS-000028-GPOS-00009, SRG-OS-000030-GPOS-00011&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxGnome" />
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000056</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000057</xccdf:ident>
-          <xccdf:fixtext fixref="F-75647r1092633_fix">Configure OL 9 to enable a user's session lock until that user reestablishes access using established identification and authentication procedures.
-
-Select or create an authselect profile and incorporate the "with-smartcard-lock-on-removal" feature with the following example:
-
-$ sudo authselect select sssd with-smartcard with-smartcard-lock-on-removal
-
-Alternatively, the dconf settings can be edited in the /etc/dconf/db/* location.
-
-Add or update the [org/gnome/settings-daemon/peripherals/smartcard] section of the /etc/dconf/db/local.d/00-security-settings" database file and add or update the following lines:
-
-[org/gnome/settings-daemon/peripherals/smartcard]
-removal-action='lock-screen'
-
-Update the dconf system databases:
-
-$ sudo dconf update</xccdf:fixtext>
-          <xccdf:fix id="F-75647r1092633_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271690" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271691">
-        <xccdf:title>SRG-OS-000480-GPOS-00229</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271691r1091785_rule" severity="high" weight="10.0">
-          <xccdf:version>OL09-00-002161</xccdf:version>
-          <xccdf:title>OL 9 must not allow unattended or automatic logon via the graphical user interface.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Failure to restrict system access to authenticated users negatively impacts operating system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxGnome" />
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75648r1091784_fix">Configure the GNOME desktop display manager to disable automatic login.
-
-Set AutomaticLoginEnable to false in the [daemon] section in /etc/gdm/custom.conf. For example:
-
-[daemon]
-AutomaticLoginEnable=false</xccdf:fixtext>
-          <xccdf:fix id="F-75648r1091784_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271691" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271693">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271693r1091791_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002301</xccdf:version>
-          <xccdf:title>OL 9 must define default permissions for the bash shell.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The umask controls the default access mode assigned to newly created files. A umask of 077 limits new files to mode 600 or less permissive. Although umask can be represented as a four-digit number, the first digit representing special access modes is typically ignored or required to be "0". This requirement applies to the globally configured system defaults and the local interactive user defaults for each account on the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75650r1091790_fix">Configure OL 9 to define default permissions for all authenticated users using the bash shell.
-
-Add or edit the lines for the "umask" parameter in the "/etc/bashrc" file to "077":
-
-umask 077</xccdf:fixtext>
-          <xccdf:fix id="F-75650r1091790_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271693" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271694">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271694r1091794_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002302</xccdf:version>
-          <xccdf:title>OL 9 must define default permissions for the c shell.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The umask controls the default access mode assigned to newly created files. A umask of 077 limits new files to mode 600 or less permissive. Although umask can be represented as a four-digit number, the first digit representing special access modes is typically ignored or required to be "0". This requirement applies to the globally configured system defaults and the local interactive user defaults for each account on the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75651r1091793_fix">Configure OL 9 to define default permissions for all authenticated users using the c shell.
-
-Add or edit the lines for the "umask" parameter in the "/etc/csh.cshrc" file to "077":
-
-umask 077</xccdf:fixtext>
-          <xccdf:fix id="F-75651r1091793_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271694" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271695">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271695r1091797_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002303</xccdf:version>
-          <xccdf:title>OL 9 must define default permissions for the system default profile.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The umask controls the default access mode assigned to newly created files. A umask of 077 limits new files to mode 600 or less permissive. Although umask can be represented as a four-digit number, the first digit representing special access modes is typically ignored or required to be "0". This requirement applies to the globally configured system defaults and the local interactive user defaults for each account on the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75652r1091796_fix">Configure OL 9 to define default permissions for all authenticated users in such a way that the user can only read and modify their own files.
-
-Add or edit the lines for the "umask" parameter in the "/etc/profile" file to "077":
-
-umask 077</xccdf:fixtext>
-          <xccdf:fix id="F-75652r1091796_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271695" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271696">
-        <xccdf:title>SRG-OS-000480-GPOS-00228</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271696r1091800_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002304</xccdf:version>
-          <xccdf:title>OL 9 must define default permissions for all authenticated users in such a way that the user can only read and modify their own files.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Setting the most restrictive default permissions ensures that when new accounts are created, they do not have unnecessary access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75653r1091799_fix">Configure OL 9 to define default permissions for all authenticated users in such a way that the user can only read and modify their own files.
-
-Add or edit the lines for the "UMASK" parameter in the "/etc/login.defs" file to "077":
-
-UMASK 077</xccdf:fixtext>
-          <xccdf:fix id="F-75653r1091799_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271696" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271697">
-        <xccdf:title>SRG-OS-000096-GPOS-00050</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271697r1091803_rule" severity="low" weight="10.0">
-          <xccdf:version>OL09-00-002320</xccdf:version>
-          <xccdf:title>OL 9 must disable the chrony daemon from acting as a server.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Minimizing the exposure of the server functionality of the chrony daemon diminishes the attack surface.
-
-Satisfies: SRG-OS-000096-GPOS-00050, SRG-OS-000095-GPOS-00049&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000382</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
-          <xccdf:fixtext fixref="F-75654r1091802_fix">Configure OL 9 to disable the chrony daemon from acting as a server by adding/modifying the following line in the /etc/chrony.conf file:
-
-port 0</xccdf:fixtext>
-          <xccdf:fix id="F-75654r1091802_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271697" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271698">
-        <xccdf:title>SRG-OS-000096-GPOS-00050</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271698r1091806_rule" severity="low" weight="10.0">
-          <xccdf:version>OL09-00-002321</xccdf:version>
-          <xccdf:title>OL 9 must disable network management of the chrony daemon.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Not exposing the management interface of the chrony daemon on the network diminishes the attack space.
-
-Satisfies: SRG-OS-000096-GPOS-00050, SRG-OS-000095-GPOS-00049&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000382</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
-          <xccdf:fixtext fixref="F-75655r1091805_fix">Configure OL 9 to disable network management of the chrony daemon by adding/modifying the following line in the /etc/chrony.conf file:
-
-cmdport 0</xccdf:fixtext>
-          <xccdf:fix id="F-75655r1091805_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271698" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271700">
-        <xccdf:title>SRG-OS-000062-GPOS-00031</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271700r1091812_rule" severity="low" weight="10.0">
-          <xccdf:version>OL09-00-002330</xccdf:version>
-          <xccdf:title>OL 9 must enable Linux audit logging for the USBGuard daemon.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without the capability to generate audit records, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-If auditing is enabled late in the startup process, the actions of some startup processes may not be audited. Some audit systems also maintain state information only available if auditing is enabled before a given process is created.
-
-Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-The list of audited events is the set of events for which audits are to be generated. This set of events is typically a subset of the list of all events for which the system is capable of generating audit records.
-
-DOD has defined the list of events for which OL 9 will provide an audit record generation capability as the following:
-
-1. Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, security levels, or categories of information (e.g., classification levels);
-
-2. Access actions, such as successful and unsuccessful logon attempts, privileged activities or other system-level access, starting and ending time for user access to the system, concurrent logons from different workstations, successful and unsuccessful accesses to objects, all program initiations, and all direct access to the information system;
-
-3. All account creations, modifications, disabling, and terminations; and 
-
-4. All kernel module load, unload, and restart actions.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:fixtext fixref="F-75657r1091811_fix">Configure OL 9 USBGuard AuditBackend to use the audit system.
-
-Add or edit the following line in /etc/usbguard/usbguard-daemon.conf 
-
-AuditBackend=LinuxAudit</xccdf:fixtext>
-          <xccdf:fix id="F-75657r1091811_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271700" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271703">
-        <xccdf:title>SRG-OS-000032-GPOS-00013</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271703r1091821_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002340</xccdf:version>
-          <xccdf:title>OL 9 must log SSH connection attempts and failures to the server.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;SSH provides several logging levels with varying amounts of verbosity. "DEBUG" is specifically not recommended other than strictly for debugging SSH communications since it provides so much data that it is difficult to identify important security information. "INFO" or "VERBOSE" level is the basic level that only records login activity of SSH users. In many situations, such as Incident Response, it is important to determine when a particular user was active on a system. The logout record can eliminate those users who disconnected, which helps narrow the field.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000067</xccdf:ident>
-          <xccdf:fixtext fixref="F-75660r1091820_fix">Configure OL 9 to log connection attempts add or modify the following line in "/etc/ssh/sshd_config" or in a file in "/etc/ssh/sshd_config.d".
-
-LogLevel VERBOSE
-
-Restart the SSH daemon for the settings to take effect:
-
-$ sudo systemctl restart sshd.service</xccdf:fixtext>
-          <xccdf:fix id="F-75660r1091820_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271703" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271704">
-        <xccdf:title>SRG-OS-000364-GPOS-00151</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271704r1091824_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002341</xccdf:version>
-          <xccdf:title>OL 9 SSH daemon must not allow Generic Security Service Application Program Interface (GSSAPI) authentication.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;GSSAPI authentication is used to provide additional authentication mechanisms to applications. Allowing GSSAPI authentication through SSH exposes the system's GSSAPI to remote hosts, increasing the attack surface of the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001813</xccdf:ident>
-          <xccdf:fixtext fixref="F-75661r1091823_fix">Configure the SSH daemon to not allow GSSAPI authentication.
-
-Add or uncomment the following line to "/etc/ssh/sshd_config" or to a file in "/etc/ssh/sshd_config.d" and set the value to "no":
-
-GSSAPIAuthentication no
-
-The SSH service must be restarted for changes to take effect:
-
-$ sudo systemctl restart sshd.service</xccdf:fixtext>
-          <xccdf:fix id="F-75661r1091823_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271704" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271705">
-        <xccdf:title>SRG-OS-000423-GPOS-00187</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271705r1091827_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002342</xccdf:version>
-          <xccdf:title>OL 9 must force a frequent session key renegotiation for SSH connections to the server.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without protection of the transmitted information, confidentiality and integrity may be compromised because unprotected communications can be intercepted and either read or altered. 
-
-This requirement applies to both internal and external networks and all types of information system components from which information can be transmitted (e.g., servers, mobile devices, notebook computers, printers, copiers, scanners, and facsimile machines). Communication paths outside the physical protection of a controlled boundary are exposed to the possibility of interception and modification. 
-
-Protecting the confidentiality and integrity of organizational information can be accomplished by physical means (e.g., employing physical distribution systems) or by logical means (e.g., employing cryptographic techniques). If physical means of protection are employed, then logical means (cryptography) do not have to be employed, and vice versa.
-
-Session key regeneration limits the chances of a session key becoming compromised.
-
-Satisfies: SRG-OS-000423-GPOS-00187, SRG-OS-000033-GPOS-00014, SRG-OS-000424-GPOS-00188&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002418</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000068</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002421</xccdf:ident>
-          <xccdf:fixtext fixref="F-75662r1091826_fix">Configure OL 9 to force a frequent session key renegotiation for SSH connections to the server by adding or modifying the following line in the "/etc/ssh/sshd_config" or in a file in "/etc/ssh/sshd_config.d":
-
-RekeyLimit 1G 1h
-
-Restart the SSH daemon for the settings to take effect.
-
-$ sudo systemctl restart sshd.service</xccdf:fixtext>
-          <xccdf:fix id="F-75662r1091826_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271705" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271706">
-        <xccdf:title>SRG-OS-000106-GPOS-00053</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271706r1091830_rule" severity="high" weight="10.0">
-          <xccdf:version>OL09-00-002343</xccdf:version>
-          <xccdf:title>OL 9 SSHD must not allow blank passwords.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;If an account has an empty password, anyone could log on and run commands with the privileges of that account. Accounts with empty passwords should never be used in operational environments.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000766</xccdf:ident>
-          <xccdf:fixtext fixref="F-75663r1091829_fix">Configure OL 9 to prevent SSH users from logging on with blank passwords by editing the following line in "/etc/ssh/sshd_config" or in a file in "/etc/ssh/sshd_config.d":
-
-PermitEmptyPasswords no
-
-Restart the SSH daemon for the settings to take effect:
-
-$ sudo systemctl restart sshd.service</xccdf:fixtext>
-          <xccdf:fix id="F-75663r1091829_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271706" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271707">
-        <xccdf:title>SRG-OS-000125-GPOS-00065</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271707r1091833_rule" severity="high" weight="10.0">
-          <xccdf:version>OL09-00-002344</xccdf:version>
-          <xccdf:title>OL 9 must enable the Pluggable Authentication Module (PAM) interface for SSHD.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;When UsePAM is set to "yes", PAM runs through account and session types properly. This is important when restricted access to services based off of IP, time, or other factors of the account is needed. Additionally, this ensures users can inherit certain environment variables on login or disallow access to the server.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000877</xccdf:ident>
-          <xccdf:fixtext fixref="F-75664r1091832_fix">Configure the OL 9 SSHD to use the UsePAM interface by adding or modifying the following line in "/etc/ssh/sshd_config" or in a file in "/etc/ssh/sshd_config.d".
-
-UsePAM yes
-
-Restart the SSH daemon for the settings to take effect:
-
-$ sudo systemctl restart sshd.service</xccdf:fixtext>
-          <xccdf:fix id="F-75664r1091832_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271707" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271708">
-        <xccdf:title>SRG-OS-000109-GPOS-00056</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271708r1092594_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002345</xccdf:version>
-          <xccdf:title>OL 9 must not permit direct logons to the root account using remote access via SSH.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Even though the communications channel may be encrypted, an additional layer of security is gained by extending the policy of not logging directly on as root. In addition, logging in with a user-specific account provides individual accountability of actions performed on the system and also helps to minimize direct attack attempts on root's password.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-004045</xccdf:ident>
-          <xccdf:fixtext fixref="F-75665r1091835_fix">Configure OL 9 to prevent SSH users from logging on directly as root by adding or modifying the following line in "/etc/ssh/sshd_config" or in a file in "/etc/ssh/sshd_config.d".
-
-PermitRootLogin no
-
-Restart the SSH daemon for the settings to take effect:
-
-$ sudo systemctl restart sshd.service</xccdf:fixtext>
-          <xccdf:fix id="F-75665r1091835_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271708" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271709">
-        <xccdf:title>SRG-OS-000163-GPOS-00072</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271709r1091839_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002346</xccdf:version>
-          <xccdf:title>OL 9 must be configured so that all network connections associated with SSH traffic terminate after becoming unresponsive.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Terminating an unresponsive SSH session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a management session enabled on the console or console port that has been left unattended. In addition, quickly terminating an idle SSH session will also free up resources committed by the managed network element.
-
-Terminating network connections associated with communications sessions includes, for example, deallocating associated TCP/IP address/port pairs at the operating system level and deallocating networking assignments at the application level if multiple application sessions are using a single operating system-level network connection. This does not mean the operating system terminates all sessions or network access; it only ends the unresponsive session and releases the resources associated with that session.
-
-OL 9 uses /etc/ssh/sshd_config for configurations of OpenSSH. Within the sshd_config, the product of the values of "ClientAliveInterval" and "ClientAliveCountMax" are used to establish the inactivity threshold. The "ClientAliveInterval" is a timeout interval in seconds, after which if no data has been received from the client, SSHD will send a message through the encrypted channel to request a response from the client. The "ClientAliveCountMax" is the number of client alive messages that may be sent without SSHD receiving any messages back from the client. If this threshold is met, sshd will disconnect the client. For more information on these settings and others, refer to the sshd_config man pages.
-
-Satisfies: SRG-OS-000163-GPOS-00072, SRG-OS-000279-GPOS-00109&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001133</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002361</xccdf:ident>
-          <xccdf:fixtext fixref="F-75666r1091838_fix">Note: This setting must be applied in conjunction with ClientAliveInterval to function correctly.
-
-Configure the SSH server to terminate a user session automatically after the SSH client has become unresponsive.
-
-Modify or append the following lines in the "/etc/ssh/sshd_config" or in a file in "/etc/ssh/sshd_config.d":
-
-ClientAliveCountMax 1
-
-In order for the changes to take effect, the SSH daemon must be restarted.
-
-$ sudo systemctl restart sshd.service</xccdf:fixtext>
-          <xccdf:fix id="F-75666r1091838_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271709" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271710">
-        <xccdf:title>SRG-OS-000163-GPOS-00072</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271710r1092596_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002347</xccdf:version>
-          <xccdf:title>OL 9 must be configured so that all network connections associated with SSH traffic are terminated after 10 minutes of becoming unresponsive.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Terminating an unresponsive SSH session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a management session enabled on the console or console port that has been left unattended. In addition, quickly terminating an idle SSH session will also free up resources committed by the managed network element.
-
-Terminating network connections associated with communications sessions includes, for example, deallocating associated TCP/IP address/port pairs at the operating system level and deallocating networking assignments at the application level if multiple application sessions are using a single operating system-level network connection. This does not mean the operating system terminates all sessions or network access; it only ends the unresponsive session and releases the resources associated with that session.
-
-OL 9 uses /etc/ssh/sshd_config for configurations of OpenSSH. Within the sshd_config, the product of the values of "ClientAliveInterval" and "ClientAliveCountMax" are used to establish the inactivity threshold. The "ClientAliveInterval" is a timeout interval in seconds, after which if no data has been received from the client, SSHD will send a message through the encrypted channel to request a response from the client. The "ClientAliveCountMax" is the number of client alive messages that may be sent without SSHD receiving any messages back from the client. If this threshold is met, SSHD will disconnect the client. For more information on these settings and others, refer to the sshd_config man pages.
-
-Satisfies: SRG-OS-000163-GPOS-00072, SRG-OS-000279-GPOS-00109, SRG-OS-000395-GPOS-00175&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001133</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002361</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002891</xccdf:ident>
-          <xccdf:fixtext fixref="F-75667r1092595_fix">Note: This setting must be applied in conjunction with ClientAliveCountMax" setting to function correctly.
-
-Configure the SSH server to terminate a user session automatically after the SSH client has been unresponsive for 10 minutes.
-
-Modify or append the following lines in the "/etc/ssh/sshd_config" or in a file in "/etc/ssh/sshd_config.d":
-
-ClientAliveInterval 600
-
-In order for the changes to take effect, the SSH daemon must be restarted.
-
-$ sudo systemctl restart sshd.service</xccdf:fixtext>
-          <xccdf:fix id="F-75667r1092595_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271710" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271711">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271711r1091845_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002348</xccdf:version>
-          <xccdf:title>OL 9 SSH daemon must not allow rhosts authentication.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;SSH trust relationships mean a compromise on one host can allow an attacker to move trivially to other hosts.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75668r1091844_fix">Configure the SSH daemon to not allow rhosts authentication.
-
-Add the following line to "/etc/ssh/sshd_config" or to a file in "/etc/ssh/sshd_config.d" or uncomment the line and set the value to "yes":
-
-IgnoreRhosts yes
-
-The SSH service must be restarted for changes to take effect:
-
-$ sudo systemctl restart sshd.service</xccdf:fixtext>
-          <xccdf:fix id="F-75668r1091844_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271711" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271712">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271712r1091848_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002349</xccdf:version>
-          <xccdf:title>OL 9 SSH daemon must not allow known hosts authentication.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Configuring the IgnoreUserKnownHosts setting for the SSH daemon provides additional assurance that remote login via SSH will require a password, even in the event of misconfiguration elsewhere.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75669r1091847_fix">Configure the SSH daemon to not allow known hosts authentication.
-
-Add the following line to "/etc/ssh/sshd_config" or to a file in "/etc/ssh/sshd_config.d" or uncomment the line and set the value to "yes":
-
-IgnoreUserKnownHosts yes
-
-The SSH service must be restarted for changes to take effect:
-
-$ sudo systemctl restart sshd.service</xccdf:fixtext>
-          <xccdf:fix id="F-75669r1091847_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271712" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271713">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271713r1091851_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002350</xccdf:version>
-          <xccdf:title>OL 9 SSH daemon must disable remote X connections for interactive users.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;When X11 forwarding is enabled, there may be additional exposure to the server and client displays if the SSHD proxy display is configured to listen on the wildcard address. By default, SSHD binds the forwarding server to the loopback address and sets the hostname part of the DISPLAY environment variable to localhost. This prevents remote hosts from connecting to the proxy display.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75670r1091850_fix">Configure the SSH daemon to not allow X11 forwarding.
-
-Add the following line to "/etc/ssh/sshd_config" or to a file in "/etc/ssh/sshd_config.d" or uncomment the line and set the value to "no":
-
-X11Forwarding no
-
-The SSH service must be restarted for changes to take effect:
-
-$ sudo systemctl restart sshd.service</xccdf:fixtext>
-          <xccdf:fix id="F-75670r1091850_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271713" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271714">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271714r1091854_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002351</xccdf:version>
-          <xccdf:title>OL 9 SSH daemon must perform strict mode checking of home directory configuration files.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;If other users have access to modify user-specific SSH configuration files, they may be able to log into the system as another user.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75671r1091853_fix">Configure the SSH daemon to perform strict mode checking of home directory configuration files.
-
-Add the following line to "/etc/ssh/sshd_config" or to a file in "/etc/ssh/sshd_config.d" or uncomment the line and set the value to "yes":
-
-StrictModes yes
-
-The SSH service must be restarted for changes to take effect:
-
-$ sudo systemctl restart sshd.service</xccdf:fixtext>
-          <xccdf:fix id="F-75671r1091853_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271714" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271715">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271715r1091857_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002352</xccdf:version>
-          <xccdf:title>OL 9 SSH daemon must display the date and time of the last successful account logon upon an SSH logon.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Providing users feedback on when account accesses last occurred facilitates user recognition and reporting of unauthorized account use.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75672r1091856_fix">Configure the SSH daemon to provide users with feedback on when account accesses last occurred.
-
-Add the following line to "/etc/ssh/sshd_config" or to a file in "/etc/ssh/sshd_config.d" or uncomment the line and set the value to "yes":
-
-PrintLastLog yes
-
-The SSH service must be restarted for changes to take effect:
-
-$ sudo systemctl restart sshd.service</xccdf:fixtext>
-          <xccdf:fix id="F-75672r1091856_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271715" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271716">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271716r1091860_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002354</xccdf:version>
-          <xccdf:title>OL 9 SSH daemon must prevent remote hosts from connecting to the proxy display.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;When X11 forwarding is enabled, there may be additional exposure to the server and client displays if the SSHD proxy display is configured to listen on the wildcard address. By default, SSHD binds the forwarding server to the loopback address and sets the hostname part of the "DISPLAY" environment variable to localhost. This prevents remote hosts from connecting to the proxy display.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75673r1091859_fix">Configure the SSH daemon to prevent remote hosts from connecting to the proxy display.
-
-Add the following line to "/etc/ssh/sshd_config" or to a file in "/etc/ssh/sshd_config.d" or uncomment the line and set the value to "yes":
-
-X11UseLocalhost yes
-
-The SSH service must be restarted for changes to take effect:
-
-$ sudo systemctl restart sshd.service</xccdf:fixtext>
-          <xccdf:fix id="F-75673r1091859_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271716" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271717">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271717r1091863_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002355</xccdf:version>
-          <xccdf:title>OL 9 SSH daemon must not allow compression or must only allow compression after successful authentication.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;If compression is allowed in an SSH connection prior to authentication, vulnerabilities in the compression software could result in compromise of the system from an unauthenticated connection, potentially with root privileges.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75674r1091862_fix">Configure the SSH daemon to not allow compression.
-
-Add the following line to "/etc/ssh/sshd_config" or to a file in "/etc/ssh/sshd_config.d" or uncomment the line and set the value to "delayed" or "no":
-
-Compression no
-
-The SSH service must be restarted for changes to take effect:
-
-$ sudo systemctl restart sshd.service</xccdf:fixtext>
-          <xccdf:fix id="F-75674r1091862_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271717" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271718">
-        <xccdf:title>SRG-OS-000364-GPOS-00151</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271718r1091866_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002356</xccdf:version>
-          <xccdf:title>OL 9 SSH daemon must not allow Kerberos authentication.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Kerberos authentication for SSH is often implemented using Generic Security Service Application Program Interface (GSSAPI). If Kerberos is enabled through SSH, the SSH daemon provides a means of access to the system's Kerberos implementation. Vulnerabilities in the system's Kerberos implementations may be subject to exploitation.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001813</xccdf:ident>
-          <xccdf:fixtext fixref="F-75675r1091865_fix">Configure the SSH daemon to not allow Kerberos authentication.
-
-Add the following line in "/etc/ssh/sshd_config" or to a file in "/etc/ssh/sshd_config.d" or uncomment the line and set the value to "no":
-
-KerberosAuthentication no
-
-The SSH service must be restarted for changes to take effect:
-
-$ sudo systemctl restart sshd.service</xccdf:fixtext>
-          <xccdf:fix id="F-75675r1091865_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271718" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271719">
-        <xccdf:title>SRG-OS-000480-GPOS-00229</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271719r1091869_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002357</xccdf:version>
-          <xccdf:title>OL 9 must not allow a noncertificate trusted host SSH logon to the system.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;SSH trust relationships mean a compromise on one host can allow an attacker to move trivially to other hosts.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75676r1091868_fix">Configure OL 9 to not allow a noncertificate trusted host SSH logon to access the system.
-
-Add or modify the following line in "/etc/ssh/sshd_config" or in a file in "/etc/ssh/sshd_config.d".
-
-HostbasedAuthentication no
-
-Restart the SSH daemon for the settings to take effect:
-
-$ sudo systemctl restart sshd.service</xccdf:fixtext>
-          <xccdf:fix id="F-75676r1091868_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271719" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271720">
-        <xccdf:title>SRG-OS-000480-GPOS-00229</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271720r1091872_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002358</xccdf:version>
-          <xccdf:title>OL 9 must not allow users to override SSH environment variables.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;SSH environment options potentially allow users to bypass access restriction in some configurations.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75677r1091871_fix">Configure the OL 9 SSH daemon to not allow unattended or automatic logon to the system.
-
-Add or edit the following line in the "/etc/ssh/sshd_config" or in a file in "/etc/ssh/sshd_config.d":
-
-PermitUserEnvironment no
-
-Restart the SSH daemon for the setting to take effect:
-
-$ sudo systemctl restart sshd.service</xccdf:fixtext>
-          <xccdf:fix id="F-75677r1091871_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271720" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271721">
-        <xccdf:title>SRG-OS-000105-GPOS-00052</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271721r1091875_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002359</xccdf:version>
-          <xccdf:title>OL 9 SSHD must accept public key authentication.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without the use of multifactor authentication, the ease of access to privileged functions is greatly increased. Multifactor authentication requires using two or more factors to achieve authentication. A privileged account is defined as an information system account with authorizations of a privileged user. A DOD CAC with DOD-approved PKI is an example of multifactor authentication.
-
-Satisfies: SRG-OS-000105-GPOS-00052, SRG-OS-000106-GPOS-00053, SRG-OS-000107-GPOS-00054, SRG-OS-000108-GPOS-00055&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000765</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000766</xccdf:ident>
-          <xccdf:fixtext fixref="F-75678r1091874_fix">Configure OL 9 to accept public key authentication by adding or modifying the following line in "/etc/ssh/sshd_config".
-
-PubkeyAuthentication yes
-
-Restart the SSH daemon for the settings to take effect:
-
-$ sudo systemctl restart sshd.service</xccdf:fixtext>
-          <xccdf:fix id="F-75678r1091874_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271721" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271722">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271722r1091878_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002360</xccdf:version>
-          <xccdf:title>OL 9 must require reauthentication when using the "sudo" command.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without reauthentication, users may access resources or perform tasks for which they do not have authorization. 
-
-When operating systems provide the capability to escalate a functional capability, it is critical the organization requires the user to reauthenticate when using the "sudo" command.
-
-If the value is set to an integer less than "0", the user's time stamp will not expire and the user will not have to reauthenticate for privileged actions until the user's session is terminated.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75679r1091877_fix">Configure OL 9 to reauthenticate "sudo" commands after the specified timeout:
-
-Add the following line to "/etc/sudoers":
-
-Defaults timestamp_timeout=0</xccdf:fixtext>
-          <xccdf:fix id="F-75679r1091877_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271722" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271723">
-        <xccdf:title>SRG-OS-000312-GPOS-00123</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271723r1091881_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002361</xccdf:version>
-          <xccdf:title>OL 9 must restrict the use of the su command.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The su program allows to run commands with a substitute user and group ID. It is commonly used to run commands as the root user. Limiting access to such commands is considered a good security practice.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002165</xccdf:ident>
-          <xccdf:fixtext fixref="F-75680r1091880_fix">Configure OL 9 to require users to be in the "wheel" group to run su command.
-
-In file "/etc/pam.d/su", uncomment the following line:
-
-"#auth    required    pam_wheel.so use_uid"
-
-Or use the following command to update /etc/pam.d/su 
-
-$ sed '/^[[:space:]]*#[[:space:]]*auth[[:space:]]\+required[[:space:]]\+pam_wheel\.so[[:space:]]\+use_uid$/s/^[[:space:]]*#//' -i /etc/pam.d/su
-
-If necessary, create a "wheel" group and add administrative users to the group.
-
-$ grep wheel /etc/group</xccdf:fixtext>
-          <xccdf:fix id="F-75680r1091880_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271723" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271724">
-        <xccdf:title>SRG-OS-000327-GPOS-00127</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271724r1091884_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002362</xccdf:version>
-          <xccdf:title>OL 9 must require users to reauthenticate for privilege escalation.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without reauthentication, users may access resources or perform tasks for which they do not have authorization.
-
-When operating systems provide the capability to escalate a functional capability, it is critical that the user reauthenticate.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002234</xccdf:ident>
-          <xccdf:fixtext fixref="F-75681r1091883_fix">Configure OL 9 to not allow users to execute privileged actions without authenticating.
-
-Remove any occurrence of "!authenticate" found in "/etc/sudoers" file or files in the "/etc/sudoers.d" directory.
-
-$ sudo sed -i '/\!authenticate/ s/^/# /g' /etc/sudoers /etc/sudoers.d/*</xccdf:fixtext>
-          <xccdf:fix id="F-75681r1091883_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271724" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271725">
-        <xccdf:title>SRG-OS-000327-GPOS-00127</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271725r1091887_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002363</xccdf:version>
-          <xccdf:title>OL 9 must require users to provide a password for privilege escalation.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without reauthentication, users may access resources or perform tasks for which they do not have authorization.
-
-When operating systems provide the capability to escalate a functional capability, it is critical that the user reauthenticate.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002234</xccdf:ident>
-          <xccdf:fixtext fixref="F-75682r1091886_fix">Configure OL 9 to not allow users to execute privileged actions without authenticating with a password.
-
-Remove any occurrence of "NOPASSWD" found in "/etc/sudoers" file or files in the "/etc/sudoers.d" directory.
-
-$ sudo sed -i '/NOPASSWD/ s/^/# /g' /etc/sudoers /etc/sudoers.d/*</xccdf:fixtext>
-          <xccdf:fix id="F-75682r1091886_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271725" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271726">
-        <xccdf:title>SRG-OS-000327-GPOS-00127</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271726r1091890_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002364</xccdf:version>
-          <xccdf:title>OL 9 must not be configured to bypass password requirements for privilege escalation.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without reauthentication, users may access resources or perform tasks for which they do not have authorization. When operating systems provide the capability to escalate a functional capability, it is critical the user reauthenticate.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002234</xccdf:ident>
-          <xccdf:fixtext fixref="F-75683r1091889_fix">Configure the operating system to require users to supply a password for privilege escalation.
-
-Remove any occurrences of " pam_succeed_if " in the  "/etc/pam.d/sudo" file.</xccdf:fixtext>
-          <xccdf:fix id="F-75683r1091889_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271726" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271727">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271727r1091893_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002370</xccdf:version>
-          <xccdf:title>OL 9 must disable the use of user namespaces.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;User namespaces are used primarily for Linux containers. The value "0" disallows the use of user namespaces.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75684r1091892_fix">Configure OL 9 to disable the use of user namespaces by adding the following line to a file, in the "/etc/sysctl.d" directory:
-
-Note: User namespaces are used primarily for Linux containers. If containers are in use, this requirement is Not Applicable. 
-
-user.max_user_namespaces = 0
-
-The system configuration files need to be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
-
-$ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-75684r1091892_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271727" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271728">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271728r1091896_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002380</xccdf:version>
-          <xccdf:title>OL 9 must disable the kernel.core_pattern.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75685r1091895_fix">Configure OL 9 to disable storing core dumps.
-
-Add or edit the following line in a system configuration file, in the "/etc/sysctl.d/" directory:
-
-kernel.core_pattern = |/bin/false
-
-The system configuration files need to be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
-
-$ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-75685r1091895_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271728" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271729">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271729r1091899_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002381</xccdf:version>
-          <xccdf:title>OL 9 must disable core dump backtraces.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers or system operators trying to debug problems.
-
-Enabling core dumps on production systems is not recommended; however, there may be overriding operational requirements to enable advanced debugging. Permitting temporary enablement of core dumps during such situations must be reviewed through local needs and policy.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75686r1091898_fix">Configure the operating system to disable core dump backtraces.
-
-Add or modify the following line in /etc/systemd/coredump.conf:
-
-ProcessSizeMax=0</xccdf:fixtext>
-          <xccdf:fix id="F-75686r1091898_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271729" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271730">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271730r1091902_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002382</xccdf:version>
-          <xccdf:title>OL 9 must disable storing core dumps.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers or system operators trying to debug problems. Enabling core dumps on production systems is not recommended; however, there may be overriding operational requirements to enable advanced debugging. Permitting temporary enablement of core dumps during such situations must be reviewed through local needs and policy.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75687r1091901_fix">Configure the operating system to disable storing core dumps for all users.
-
-Add or modify the following line in /etc/systemd/coredump.conf:
-
-Storage=none</xccdf:fixtext>
-          <xccdf:fix id="F-75687r1091901_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271730" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271731">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271731r1091905_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002383</xccdf:version>
-          <xccdf:title>OL 9 must disable core dumps for all users.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75688r1091904_fix">Configure the operating system to disable core dumps for all users.
-
-Add the following line to the top of the /etc/security/limits.conf or in a single ".conf" file defined in /etc/security/limits.d/:
-
-* hard core 0</xccdf:fixtext>
-          <xccdf:fix id="F-75688r1091904_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271731" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271732">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271732r1091908_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002384</xccdf:version>
-          <xccdf:title>OL 9 must disable acquiring, saving, and processing core dumps.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75689r1091907_fix">Configure the system to disable the systemd-coredump.socket with the following command:
-
-$ sudo systemctl mask --now systemd-coredump.socket
-
-Created symlink /etc/systemd/system/systemd-coredump.socket -&gt; /dev/null
-
-Reload the daemon for this change to take effect.
-
-$ sudo systemctl daemon-reload</xccdf:fixtext>
-          <xccdf:fix id="F-75689r1091907_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271732" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271733">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271733r1092598_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002385</xccdf:version>
-          <xccdf:title>OL 9 must be configured so that the kdump service is disabled.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Kernel core dumps may contain the full contents of system memory at the time of the crash. Kernel core dumps consume a considerable amount of disk space and may result in denial of service by exhausting the available space on the target file system partition. Unless the system is used for kernel development or testing, there is little need to run the kdump service.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75690r1092597_fix">Configure OL 9 to disable and mask the kdump service.
-
-To disable the kdump service, run the following command:
-
-$ sudo systemctl disable --now kdump
-
-To mask the kdump service, run the following command:
-
-$ sudo systemctl mask --now kdump</xccdf:fixtext>
-          <xccdf:fix id="F-75690r1092597_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271733" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271734">
-        <xccdf:title>SRG-OS-000433-GPOS-00192</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271734r1091914_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002390</xccdf:version>
-          <xccdf:title>OL 9 must clear SLUB/SLAB objects to prevent use-after-free attacks.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Some adversaries launch attacks with the intent of executing code in nonexecutable regions of memory or in memory locations that are prohibited. Security safeguards employed to protect memory include, for example, data execution prevention and address space layout randomization. Data execution prevention safeguards can be either hardware-enforced or software-enforced with hardware providing the greater strength of mechanism.
-
-Poisoning writes an arbitrary value to freed pages, so any modification or reference to that page after being freed or before being initialized will be detected and prevented. This prevents many types of use-after-free vulnerabilities at little performance cost. Also prevents leak of data and detection of corrupted memory.
-
-SLAB objects are blocks of physically contiguous memory. SLUB is the unqueued SLAB allocator.
-
-Satisfies: SRG-OS-000433-GPOS-00192, SRG-OS-000134-GPOS-00068&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002824</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001084</xccdf:ident>
-          <xccdf:fixtext fixref="F-75691r1091913_fix">Configure OL 9 to enable poisoning of SLUB/SLAB objects with the following commands:
-
-$ sudo grubby --update-kernel=ALL --args="slub_debug=P"
-
-Add or modify the following line in "/etc/default/grub" to ensure the configuration survives kernel updates:
-
-GRUB_CMDLINE_LINUX="slub_debug=P"</xccdf:fixtext>
-          <xccdf:fix id="F-75691r1091913_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271734" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271735">
-        <xccdf:title>SRG-OS-000433-GPOS-00193</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271735r1091917_rule" severity="low" weight="10.0">
-          <xccdf:version>OL09-00-002391</xccdf:version>
-          <xccdf:title>OL 9 must enable mitigations against processor-based vulnerabilities.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Kernel page-table isolation is a kernel feature that mitigates the Meltdown security vulnerability and hardens the kernel against attempts to bypass kernel address space layout randomization (KASLR).
-
-Satisfies: SRG-OS-000433-GPOS-00193, SRG-OS-000095-GPOS-00049&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002824</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
-          <xccdf:fixtext fixref="F-75692r1091916_fix">Configure OL 9 to enable kernel page-table isolation with the following command:
-
-$ sudo grubby --update-kernel=ALL --args="pti=on"
-
-Add or modify the following line in "/etc/default/grub" to ensure the configuration survives kernel updates:
-
-GRUB_CMDLINE_LINUX="pti=on"</xccdf:fixtext>
-          <xccdf:fix id="F-75692r1091916_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271735" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271736">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271736r1091920_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002392</xccdf:version>
-          <xccdf:title>OL 9 must disable the ability of systemd to spawn an interactive boot process.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Using interactive or recovery boot, the console user could disable auditing, firewalls, or other services, weakening system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75693r1091919_fix">Configure OL 9 to allocate sufficient audit_backlog_limit to disable the ability of systemd to spawn an interactive boot process with the following command:
-
-$ sudo grubby --update-kernel=ALL --remove-args="systemd.confirm_spawn"</xccdf:fixtext>
-          <xccdf:fix id="F-75693r1091919_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271736" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271737">
-        <xccdf:title>SRG-OS-000134-GPOS-00068</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271737r1094967_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002393</xccdf:version>
-          <xccdf:title>OL 9 must disable virtual system calls.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;System calls are special routines in the Linux kernel, which userspace applications ask to do privileged tasks. Invoking a system call is an expensive operation because the processor must interrupt the currently executing task and switch context to kernel mode and then back to userspace after the system call completes. Virtual system calls map into user space a page that contains some variables and the implementation of some system calls. This allows the system calls to be executed in userspace to alleviate the context switching expense.
-
-Virtual system calls provide an opportunity of attack for a user who has control of the return instruction pointer. Disabling virtual system calls help to prevent return-oriented programming (ROP) attacks via buffer overflows and overruns. If the system intends to run containers based on OL 6 components, virtual system calls will have to be enabled so the components function properly.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001084</xccdf:ident>
-          <xccdf:fixtext fixref="F-75694r1091922_fix">Document the use of virtual system calls with the ISSO as an operational requirement or disable them with the following command:
-
-$ sudo grubby --update-kernel=ALL --args="vsyscall=none"
-
-Add or modify the following line in "/etc/default/grub" to ensure the configuration survives kernel updates:
-
-GRUB_CMDLINE_LINUX="vsyscall=none"</xccdf:fixtext>
-          <xccdf:fix id="F-75694r1091922_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271737" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271738">
-        <xccdf:title>SRG-OS-000134-GPOS-00068</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271738r1092600_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002394</xccdf:version>
-          <xccdf:title>OL 9 must clear the page allocator to prevent use-after-free attacks.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Poisoning writes an arbitrary value to freed pages, so any modification or reference to that page after being freed or before being initialized will be detected and prevented. This prevents many types of use-after-free vulnerabilities at little performance cost. Also prevents leak of data and detection of corrupted memory.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001084</xccdf:ident>
-          <xccdf:fixtext fixref="F-75695r1091925_fix">Configure OL 9 to enable page poisoning with the following commands:
-
-$ sudo grubby --update-kernel=ALL --args="page_poison=1"
-
-Add or modify the following line in "/etc/default/grub" to ensure the configuration survives kernel updates:
-
-GRUB_CMDLINE_LINUX="page_poison=1"</xccdf:fixtext>
-          <xccdf:fix id="F-75695r1091925_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271738" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271739">
-        <xccdf:title>SRG-OS-000269-GPOS-00103</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271739r1091929_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002400</xccdf:version>
-          <xccdf:title>OL 9 systemd-journald service must be enabled.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;In the event of a system failure, OL 9 must preserve any information necessary to determine cause of failure and any information necessary to return to operations with least disruption to system processes.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001665</xccdf:ident>
-          <xccdf:fixtext fixref="F-75696r1091928_fix">Configure OL 9 to enable the systemd-journald service with the following command:
-
-$ sudo systemctl enable --now systemd-journald</xccdf:fixtext>
-          <xccdf:fix id="F-75696r1091928_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271739" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271740">
-        <xccdf:title>SRG-OS-000312-GPOS-00123</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271740r1091932_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002401</xccdf:version>
-          <xccdf:title>OL 9 must enable kernel parameters to enforce discretionary access control on hardlinks.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;By enabling the fs.protected_hardlinks kernel parameter, users can no longer create soft or hard links to files they do not own. Disallowing such hardlinks mitigates vulnerabilities based on insecure file system accessed by privileged programs, avoiding an exploitation vector exploiting unsafe use of open() or creat().
-
-Satisfies: SRG-OS-000312-GPOS-00123, SRG-OS-000324-GPOS-00125&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002165</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002235</xccdf:ident>
-          <xccdf:fixtext fixref="F-75697r1091931_fix">Configure OL 9 to enable DAC on hardlinks with the following:
-
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
-
-fs.protected_hardlinks = 1
-
-Load settings from all system configuration files with the following command:
-
-$ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-75697r1091931_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271740" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271741">
-        <xccdf:title>SRG-OS-000312-GPOS-00123</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271741r1091935_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002402</xccdf:version>
-          <xccdf:title>OL 9 must enable kernel parameters to enforce discretionary access control on symlinks.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;By enabling the fs.protected_symlinks kernel parameter, symbolic links are permitted to be followed only when outside a sticky world-writable directory, or when the user identifier (UID) of the link and follower match, or when the directory owner matches the symlink's owner. Disallowing such symlinks helps mitigate vulnerabilities based on insecure file system accessed by privileged programs, avoiding an exploitation vector exploiting unsafe use of open() or creat().
-
-Satisfies: SRG-OS-000312-GPOS-00123, SRG-OS-000324-GPOS-00125&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002165</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002235</xccdf:ident>
-          <xccdf:fixtext fixref="F-75698r1091934_fix">Configure OL 9 to enable DAC on symlinks with the following:
-
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
-
-fs.protected_symlinks = 1
-
-Load settings from all system configuration files with the following command:
-
-$ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-75698r1091934_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271741" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271742">
-        <xccdf:title>SRG-OS-000324-GPOS-00125</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271742r1091938_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002403</xccdf:version>
-          <xccdf:title>OL 9 debug-shell systemd service must be disabled.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The debug-shell requires no authentication and provides root privileges to anyone who has physical access to the machine. While this feature is disabled by default, masking it adds an additional layer of assurance that it will not be enabled via a dependency in systemd. This also prevents attackers with physical access from trivially bypassing security on the machine through valid troubleshooting configurations and gaining root access when the system is rebooted.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002235</xccdf:ident>
-          <xccdf:fixtext fixref="F-75699r1091937_fix">Configure OL 9 to mask the debug-shell systemd service with the following command:
-
-$ sudo systemctl disable --now debug-shell.service
-$ sudo systemctl mask --now debug-shell.service</xccdf:fixtext>
-          <xccdf:fix id="F-75699r1091937_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271742" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271743">
-        <xccdf:title>SRG-OS-000033-GPOS-00014</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271743r1092635_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002404</xccdf:version>
-          <xccdf:title>OL 9 IP tunnels must use 140-3 approved cryptographic algorithms.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Overriding the system crypto policy makes the behavior of the Libreswan service violate expectations and makes system configuration more fragmented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxLibreswan" />
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000068</xccdf:ident>
-          <xccdf:fixtext fixref="F-75700r1092602_fix">Configure IPsec to use the systemwide cryptographic policy.
-
-Add the following line to "/etc/ipsec.conf":
-
-include /etc/crypto-policies/back-ends/libreswan.config</xccdf:fixtext>
-          <xccdf:fix id="F-75700r1092602_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271743" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271745">
-        <xccdf:title>SRG-OS-000132-GPOS-00067</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271745r1117266_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002406</xccdf:version>
-          <xccdf:title>OL 9 must restrict access to the kernel message buffer.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
-
-This requirement generally applies to the design of an information technology product, but it can also apply to the configuration of particular information system components that are, or use, such products. This can be verified by acceptance/validation processes in DOD or other government agencies.
-
-There may be shared resources with configurable protections (e.g., files in storage) that may be assessed on specific information system components.
-
-Restricting access to the kernel message buffer limits access to only root. This prevents attackers from gaining additional system information as a nonprivileged user.
-
-Satisfies: SRG-OS-000132-GPOS-00067, SRG-OS-000138-GPOS-00069&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001082</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001090</xccdf:ident>
-          <xccdf:fixtext fixref="F-75702r1091946_fix">Configure OL 9 to restrict access to the kernel message buffer.
-
-Add or edit the following line in /etc/sysctl.d/99-sysctl.conf system configuration file:
-
-kernel.dmesg_restrict = 1
-
-Load settings from all system configuration files with the following command:
-
-$ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-75702r1091946_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271745" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271746">
-        <xccdf:title>SRG-OS-000132-GPOS-00067</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271746r1117266_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002407</xccdf:version>
-          <xccdf:title>OL 9 must prevent kernel profiling by nonprivileged users.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
-
-This requirement generally applies to the design of an information technology product, but it can also apply to the configuration of particular information system components that are, or use, such products. This can be verified by acceptance/validation processes in DOD or other government agencies.
-
-There may be shared resources with configurable protections (e.g., files in storage) that may be assessed on specific information system components.
-
-Setting the kernel.perf_event_paranoid kernel parameter to "2" prevents attackers from gaining additional system information as a nonprivileged user.
-
-Satisfies: SRG-OS-000132-GPOS-00067, SRG-OS-000138-GPOS-00069&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001082</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001090</xccdf:ident>
-          <xccdf:fixtext fixref="F-75703r1091949_fix">Configure OL 9 to prevent kernel profiling by nonprivileged users.
-
-Add or edit the following line in /etc/sysctl.d/99-sysctl.conf system configuration file:
-
-kernel.perf_event_paranoid = 2
-
-Load settings from all system configuration files with the following command:
-
-$ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-75703r1091949_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271746" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271747">
-        <xccdf:title>SRG-OS-000132-GPOS-00067</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271747r1117266_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002408</xccdf:version>
-          <xccdf:title>OL 9 must restrict exposed kernel pointer addresses access.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Exposing kernel pointers (through procfs or "seq_printf()") exposes kernel writeable structures, which may contain functions pointers. If a write vulnerability occurs in the kernel, allowing write access to any of this structure, the kernel can be compromised. This option disallows any program without the CAP_SYSLOG capability to get the addresses of kernel pointers by replacing them with "0".
-
-Satisfies: SRG-OS-000132-GPOS-00067, SRG-OS-000433-GPOS-00192&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001082</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002824</xccdf:ident>
-          <xccdf:fixtext fixref="F-75704r1091952_fix">Configure OL 9 to prevent the leak of kernel pointers to unprivileged users.
-
-Add or edit the following line in /etc/sysctl.d/99-sysctl.conf system configuration file:
-
-kernel.kptr_restrict = 1
-
-Reload settings from all system configuration files with the following command:
-
-$ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-75704r1091952_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271747" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271748">
-        <xccdf:title>SRG-OS-000132-GPOS-00067</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271748r1117266_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002409</xccdf:version>
-          <xccdf:title>OL 9 must disable access to network bpf system call from nonprivileged processes.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Loading and accessing the packet filters programs and maps using the bpf() system call has the potential of revealing sensitive information about the kernel state.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001082</xccdf:ident>
-          <xccdf:fixtext fixref="F-75705r1091955_fix">Configure OL 9 to prevent privilege escalation thru the kernel by disabling access to the bpf syscall by adding the following line to a file, in the "/etc/sysctl.d" directory:
-
-kernel.unprivileged_bpf_disabled = 1
-
-The system configuration files need to be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
-
-$ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-75705r1091955_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271748" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271749">
-        <xccdf:title>SRG-OS-000132-GPOS-00067</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271749r1117266_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002410</xccdf:version>
-          <xccdf:title>OL 9 must restrict usage of ptrace to descendant processes.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Unrestricted usage of ptrace allows compromised binaries to run ptrace on other processes of the user. Like this, the attacker can steal sensitive information from the target processes (e.g., SSH sessions, web browser, etc.) without any additional assistance from the user (i.e., without resorting to phishing).&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001082</xccdf:ident>
-          <xccdf:fixtext fixref="F-75706r1091958_fix">Configure OL 9 to restrict usage of ptrace to descendant processes by adding the following line to "/etc/sysctl.d/99-sysctl.conf":
-
-kernel.yama.ptrace_scope = 1
-
-The system configuration files need to be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
-
-$ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-75706r1091958_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271749" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271750">
-        <xccdf:title>SRG-OS-000163-GPOS-00072</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271750r1091962_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002411</xccdf:version>
-          <xccdf:title>OL 9 must automatically exit interactive command shell user sessions after 15 minutes of inactivity.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Terminating an idle interactive command shell user session within a short time period reduces the window of opportunity for unauthorized personnel to take control of it when left unattended in a virtual terminal or physical console.
-
-Satisfies: SRG-OS-000163-GPOS-00072, SRG-OS-000029-GPOS-00010&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001133</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000057</xccdf:ident>
-          <xccdf:fixtext fixref="F-75707r1091961_fix">Configure OL 9 to exit interactive command shell user sessions after 15 minutes of inactivity.
-
-Add or edit the following line in "/etc/profile.d/tmout.sh":
-
-#!/bin/bash
-
-declare -xr TMOUT=900</xccdf:fixtext>
-          <xccdf:fix id="F-75707r1091961_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271750" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271751">
-        <xccdf:title>SRG-OS-000324-GPOS-00125</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271751r1091965_rule" severity="high" weight="10.0">
-          <xccdf:version>OL09-00-002412</xccdf:version>
-          <xccdf:title>OL 9 must be configured so that the systemd Ctrl-Alt-Delete burst key sequence is disabled.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;A locally logged-on user who presses Ctrl-Alt-Delete when at the console can reboot the system. If accidentally pressed, as could happen in the case of a mixed OS environment, this can create the risk of short-term loss of availability of systems due to unintentional reboot. In a graphical user environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is reduced because the user will be prompted before any action is taken.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002235</xccdf:ident>
-          <xccdf:fixtext fixref="F-75708r1091964_fix">Configure the system to disable the CtrlAltDelBurstAction by added or modifying the following line in the "/etc/systemd/system.conf" configuration file:
-
-CtrlAltDelBurstAction=none
-
-Reload the daemon for this change to take effect.
-
-$ sudo systemctl daemon-reload</xccdf:fixtext>
-          <xccdf:fix id="F-75708r1091964_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271751" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271752">
-        <xccdf:title>SRG-OS-000324-GPOS-00125</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271752r1091968_rule" severity="high" weight="10.0">
-          <xccdf:version>OL09-00-002413</xccdf:version>
-          <xccdf:title>OL 9 must be configured so that the x86 Ctrl-Alt-Delete key sequence is disabled.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;A locally logged-on user who presses Ctrl-Alt-Delete when at the console can reboot the system. If accidentally pressed, as could happen in the case of a mixed OS environment, this can create the risk of short-term loss of availability of systems due to unintentional reboot. In a graphical user environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is reduced because the user will be prompted before any action is taken.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002235</xccdf:ident>
-          <xccdf:fixtext fixref="F-75709r1091967_fix">Configure OL 9 to disable the ctrl-alt-del.target with the following command:
-
-$ sudo systemctl disable --now ctrl-alt-del.target
-$ sudo systemctl mask --now ctrl-alt-del.target</xccdf:fixtext>
-          <xccdf:fix id="F-75709r1091967_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271752" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271753">
-        <xccdf:title>SRG-OS-000027-GPOS-00008</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271753r1091971_rule" severity="low" weight="10.0">
-          <xccdf:version>OL09-00-002415</xccdf:version>
-          <xccdf:title>OL 9 must limit the number of concurrent sessions to ten for all accounts and/or account types.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Operating system management includes the ability to control the number of users and user sessions that use an operating system. Limiting the number of allowed users and sessions per user is helpful in reducing the risks related to denial-of-service (DoS) attacks.
-
-This requirement addresses concurrent sessions for information system accounts and does not address concurrent sessions by single users via multiple system accounts. The maximum number of concurrent sessions must be defined based on mission needs and the operational environment for each system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000054</xccdf:ident>
-          <xccdf:fixtext fixref="F-75710r1091970_fix">Configure OL 9 to limit the number of concurrent sessions to "10" for all accounts and/or account types.
-
-Add the following line to the /etc/security/limits.conf or in a ".conf" file defined in /etc/security/limits.d/:
-
-* hard maxlogins 10</xccdf:fixtext>
-          <xccdf:fix id="F-75710r1091970_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271753" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271754">
-        <xccdf:title>SRG-OS-000329-GPOS-00128</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271754r1091974_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002416</xccdf:version>
-          <xccdf:title>OL 9 must automatically lock an account when three unsuccessful logon attempts occur during a 15-minute time period.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;By limiting the number of failed logon attempts the risk of unauthorized system access via user password guessing, otherwise known as brute-forcing, is reduced. Limits are imposed by locking the account.
-
-Satisfies: SRG-OS-000329-GPOS-00128, SRG-OS-000021-GPOS-00005&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002238</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000044</xccdf:ident>
-          <xccdf:fixtext fixref="F-75711r1091973_fix">Configure OL 9 to lock out the "root" account after a number of incorrect login attempts within 15 minutes using "pam_faillock.so" by enabling the feature using the following command:
- 
-$ sudo authselect enable-feature with-faillock  
-
-Then edit the "/etc/security/faillock.conf" file as follows:
-
-fail_interval = 900</xccdf:fixtext>
-          <xccdf:fix id="F-75711r1091973_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271754" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271755">
-        <xccdf:title>SRG-OS-000329-GPOS-00128</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271755r1091977_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002417</xccdf:version>
-          <xccdf:title>OL 9 must maintain an account lock until the locked account is released by an administrator.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;By limiting the number of failed logon attempts the risk of unauthorized system access via user password guessing, otherwise known as brute-forcing, is reduced. Limits are imposed by locking the account.
-
-Satisfies: SRG-OS-000329-GPOS-00128, SRG-OS-000021-GPOS-00005&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002238</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000044</xccdf:ident>
-          <xccdf:fixtext fixref="F-75712r1091976_fix">Configure OL 9 to lock an account until released by an administrator after three unsuccessful logon attempts with the command:
- 
-$ sudo authselect enable-feature with-faillock  
-
-Then edit the "/etc/security/faillock.conf" file as follows:
-
-unlock_time = 0</xccdf:fixtext>
-          <xccdf:fix id="F-75712r1091976_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271755" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271757">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271757r1092604_rule" severity="high" weight="10.0">
-          <xccdf:version>OL09-00-002419</xccdf:version>
-          <xccdf:title>OL 9 file systems must not contain shosts.equiv files.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The shosts.equiv files are used to configure host-based authentication for the system via SSH. Host-based authentication is not sufficient for preventing unauthorized access to the system, as it does not require interactive identification and authentication of a connection request, or for the use of two-factor authentication.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75714r1091982_fix">Remove any found "shosts.equiv" files from the system.
-
-$ sudo rm /[path]/[to]/[file]/shosts.equiv</xccdf:fixtext>
-          <xccdf:fix id="F-75714r1091982_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271757" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271758">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271758r1091986_rule" severity="high" weight="10.0">
-          <xccdf:version>OL09-00-002420</xccdf:version>
-          <xccdf:title>OL 9 file systems must not contain .shosts files.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The .shosts files are used to configure host-based authentication for individual users or the system via SSH. Host-based authentication is not sufficient for preventing unauthorized access to the system, as it does not require interactive identification and authentication of a connection request, or for the use of two-factor authentication.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75715r1091985_fix">Remove any found ".shosts" files from the system.
-
-$ sudo rm /[path]/[to]/[file]/.shosts</xccdf:fixtext>
-          <xccdf:fix id="F-75715r1091985_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271758" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271759">
-        <xccdf:title>SRG-OS-000423-GPOS-00187</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271759r1091989_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002421</xccdf:version>
-          <xccdf:title>OL 9 must implement DOD-approved encryption in the bind package.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
-
-Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
-
-OL 9 incorporates system-wide crypto policies by default. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/ directory.
-
-Satisfies: SRG-OS-000423-GPOS-00187, SRG-OS-000426-GPOS-00190&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxBIND" />
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002418</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002422</xccdf:ident>
-          <xccdf:fixtext fixref="F-75716r1091988_fix">Configure BIND to use the system crypto policy.
-
-Add the following line to the "options" section in "/etc/named.conf":
-
-include "/etc/crypto-policies/back-ends/bind.config";</xccdf:fixtext>
-          <xccdf:fix id="F-75716r1091988_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271759" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271761">
-        <xccdf:title>SRG-OS-000433-GPOS-00193</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271761r1091995_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002423</xccdf:version>
-          <xccdf:title>OL 9 must implement address space layout randomization (ASLR) to protect its memory from unauthorized code execution.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;ASLR makes it more difficult for an attacker to predict the location of attack code they have introduced into a process' address space during an attempt at exploitation. Additionally, ASLR makes it more difficult for an attacker to know the location of existing code to repurpose it using return-oriented programming (ROP) techniques.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002824</xccdf:ident>
-          <xccdf:fixtext fixref="F-75718r1091994_fix">Configure OL 9 to implement address space layout randomization (ASLR) to protect its memory from unauthorized code execution.
-
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
-
-kernel.randomize_va_space = 2
-
-Reload settings from all system configuration files with the following command:
-
-$ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-75718r1091994_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271761" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271762">
-        <xccdf:title>SRG-OS-000120-GPOS-00061</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271762r1091998_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002424</xccdf:version>
-          <xccdf:title>OL 9 must use mechanisms meeting the requirements of applicable federal laws, executive orders, directives, policies, regulations, standards, and guidance for authentication to a cryptographic module.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Overriding the system crypto policy makes the behavior of Kerberos violate expectations and makes system configuration more fragmented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000803</xccdf:ident>
-          <xccdf:fixtext fixref="F-75719r1091997_fix">Configure Kerberos to use system crypto policy.
-
-Remove incorrect symlink if it exists using the following command:
-
-$ sudo rm /etc/crypto-policies/back-ends/krb5.config
-
-Create a symlink pointing to system crypto policy in the Kerberos configuration using the following command:
-
-$ sudo ln -s /usr/share/crypto-policies/FIPS/krb5.txt /etc/crypto-policies/back-ends/krb5.config</xccdf:fixtext>
-          <xccdf:fix id="F-75719r1091997_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271762" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271763">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271763r1092001_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002425</xccdf:version>
-          <xccdf:title>OL 9 must be configured to prevent unrestricted mail relaying.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;If unrestricted mail relaying is permitted, unauthorized senders could use this host as a mail relay for the purpose of sending spam or other unauthorized activity.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxPostfix" />
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75720r1092000_fix">Modify the postfix configuration file to restrict client connections to the local network with the following command:
-
-$ sudo postconf -e 'smtpd_client_restrictions = permit_mynetworks,reject'</xccdf:fixtext>
-          <xccdf:fix id="F-75720r1092000_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271763" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271765">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271765r1092007_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002427</xccdf:version>
-          <xccdf:title>OL 9 must be configured so that local initialization files do not execute world-writable programs.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;If user start-up files execute world-writable programs, especially in unprotected directories, they could be maliciously modified to destroy user files or otherwise compromise the system at the user level. If the system is compromised at the user level, it is easier to elevate privileges to eventually compromise the system at the root and network level.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75722r1092006_fix">Configure OL 9 so that local initialization files do not execute world-writable programs.
-
-Set the mode on files being executed by the local initialization files with the following command:
-
-$ sudo chmod 0755 &lt;file&gt;</xccdf:fixtext>
-          <xccdf:fix id="F-75722r1092006_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271765" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271766">
-        <xccdf:title>SRG-OS-000366-GPOS-00153</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271766r1092010_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002428</xccdf:version>
-          <xccdf:title>OL 9 must prevent the loading of a new kernel for later execution.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Changes to any software components can have significant effects on the overall security of the operating system. This requirement ensures the software has not been tampered with and that it has been provided by a trusted vendor.
-
-Disabling kexec_load prevents an unsigned kernel image (that could be a windows kernel or modified vulnerable kernel) from being loaded. Kexec can be used subvert the entire secureboot process and should be avoided at all costs especially since it can load unsigned kernel images.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-003992</xccdf:ident>
-          <xccdf:fixtext fixref="F-75723r1092009_fix">Configure OL 9 to prevent the loading of a new kernel for later execution.
-
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
-
-kernel.kexec_load_disabled = 1
-
-Load settings from all system configuration files with the following command:
-
-$ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-75723r1092009_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271766" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271768">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271768r1092016_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002430</xccdf:version>
-          <xccdf:title>OL 9 must enable hardening for the Berkeley Packet Filter (BPF) just-in-time compiler.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;When hardened, the extended BPF just-in-time (JIT) compiler will randomize any kernel addresses in the BPF programs and maps and will not expose the JIT addresses in "/proc/kallsyms".&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75725r1092015_fix">Configure OL 9 to enable hardening for the BPF JIT compiler by adding the following line to a file, in the "/etc/sysctl.d" directory:
-
-net.core.bpf_jit_harden = 2
-
-The system configuration files need to be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
-
-$ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-75725r1092015_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271768" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271771">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271771r1092025_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002502</xccdf:version>
-          <xccdf:title>OL 9 SSH private host key files must have mode 0640 or less permissive.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;If an unauthorized user obtains the private SSH host key file, the host could be impersonated.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75728r1092024_fix">Configure the mode of SSH private host key files under "/etc/ssh" to "0640" with the following command:
-
-$ sudo chmod 0640 /etc/ssh/ssh_host*key
-
-Restart the SSH daemon for the changes to take effect:
-
-$ sudo systemctl restart sshd.service</xccdf:fixtext>
-          <xccdf:fix id="F-75728r1092024_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271771" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271772">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271772r1092028_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002503</xccdf:version>
-          <xccdf:title>OL 9 SSH public host key files must have mode 0644 or less permissive.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;If a public host key file is modified by an unauthorized user, the SSH service may be compromised.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75729r1092027_fix">Change the mode of public host key files under "/etc/ssh" to "0644" with the following command:
-
-$ sudo chmod 0644 /etc/ssh/*key.pub
-
-Restart the SSH daemon for the changes to take effect:
-
-$ sudo systemctl restart sshd.service</xccdf:fixtext>
-          <xccdf:fix id="F-75729r1092027_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271772" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271773">
-        <xccdf:title>SRG-OS-000259-GPOS-00100</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271773r1092031_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002504</xccdf:version>
-          <xccdf:title>OL 9 system commands must be group-owned by root or a system account.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
-
-This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001499</xccdf:ident>
-          <xccdf:fixtext fixref="F-75730r1092030_fix">Configure the system commands to be protected from unauthorized access.
-
-Run the following command, replacing "[FILE]" with any system command file not group-owned by "root" or a required system account.
-
-$ sudo chgrp root [FILE]</xccdf:fixtext>
-          <xccdf:fix id="F-75730r1092030_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271773" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271774">
-        <xccdf:title>SRG-OS-000259-GPOS-00100</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271774r1092034_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002505</xccdf:version>
-          <xccdf:title>OL 9 system commands must be owned by root.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
-
-This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001499</xccdf:ident>
-          <xccdf:fixtext fixref="F-75731r1092033_fix">Configure the system commands to be protected from unauthorized access.
-
-Run the following command, replacing "[FILE]" with any system command file not owned by "root".
-
-$ sudo chown root [FILE]</xccdf:fixtext>
-          <xccdf:fix id="F-75731r1092033_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271774" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271775">
-        <xccdf:title>SRG-OS-000259-GPOS-00100</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271775r1092037_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002506</xccdf:version>
-          <xccdf:title>OL 9 system commands must have mode 755 or less permissive.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
-
-This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001499</xccdf:ident>
-          <xccdf:fixtext fixref="F-75732r1092036_fix">Configure the system commands to be protected from unauthorized access.
-
-Run the following command, replacing "[FILE]" with any system command with a mode more permissive than "755".
-
-$ sudo chmod 755 [FILE]</xccdf:fixtext>
-          <xccdf:fix id="F-75732r1092036_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271775" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271776">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271776r1092040_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002507</xccdf:version>
-          <xccdf:title>OL 9 SSH server configuration file must be group-owned by root.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Service configuration files enable or disable features of their respective services, which if configured incorrectly, can lead to insecure and vulnerable configurations. Therefore, service configuration files must be owned by the correct group to prevent unauthorized changes.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75733r1092039_fix">Configure the "/etc/ssh/sshd_config" file to be group-owned by root with the following command:
-
-$ sudo chgrp root /etc/ssh/sshd_config</xccdf:fixtext>
-          <xccdf:fix id="F-75733r1092039_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271776" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271777">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271777r1092043_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002508</xccdf:version>
-          <xccdf:title>OL 9 SSH server configuration file must be owned by root.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Service configuration files enable or disable features of their respective services, which if configured incorrectly, can lead to insecure and vulnerable configurations. Therefore, service configuration files must be owned by the correct group to prevent unauthorized changes.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75734r1092042_fix">Configure the "/etc/ssh/sshd_config" file to be owned by root with the following command:
-
-$ sudo chown root /etc/ssh/sshd_config</xccdf:fixtext>
-          <xccdf:fix id="F-75734r1092042_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271777" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271778">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271778r1092046_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002509</xccdf:version>
-          <xccdf:title>OL 9 SSH server configuration file must have mode 0600 or less permissive.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Service configuration files enable or disable features of their respective services that if configured incorrectly can lead to insecure and vulnerable configurations. Therefore, service configuration files should be owned by the correct group to prevent unauthorized changes.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75735r1092045_fix">Configure the "/etc/ssh/sshd_config" permissions to be "0600" with the following command:
-
-$ sudo chmod 0600 /etc/ssh/sshd_config</xccdf:fixtext>
-          <xccdf:fix id="F-75735r1092045_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271778" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271782">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271782r1092058_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002513</xccdf:version>
-          <xccdf:title>OL 9 local initialization files must have mode 0740 or less permissive.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Local initialization files are used to configure the user's shell environment upon logon. Malicious modification of these files could compromise accounts upon logon.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75739r1092057_fix">Set the mode of the local initialization files to "0740" with the following command:
-
-Note: The example will be for the wadea user, who has a home directory of "/home/wadea".
-
-$ sudo chmod 0740 /home/wadea/.&lt;INIT_FILE&gt;</xccdf:fixtext>
-          <xccdf:fix id="F-75739r1092057_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271782" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271784">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271784r1092064_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002515</xccdf:version>
-          <xccdf:title>OL 9 local interactive user home directories must have mode 0750 or less permissive.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Excessive permissions on local interactive user home directories may allow unauthorized access to user files by other users.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75741r1092063_fix">Change the mode of interactive user's home directories to "0750". To change the mode of a local interactive user's home directory, use the following command:
-
-Note: The example will be for the user "wadea".
-
-$ sudo chmod 0750 /home/wadea</xccdf:fixtext>
-          <xccdf:fix id="F-75741r1092063_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271784" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271786">
-        <xccdf:title>SRG-OS-000259-GPOS-00100</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271786r1092070_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002520</xccdf:version>
-          <xccdf:title>OL 9 library directories must be group-owned by root or a system account.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
-
-This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001499</xccdf:ident>
-          <xccdf:fixtext fixref="F-75743r1092069_fix">Configure the system-wide shared library directories (/lib, /lib64, /usr/lib and /usr/lib64) to be protected from unauthorized access.
-
-Run the following command, replacing "[DIRECTORY]" with any library directory not group-owned by "root".
-
-$ sudo chgrp root [DIRECTORY]</xccdf:fixtext>
-          <xccdf:fix id="F-75743r1092069_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271786" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271787">
-        <xccdf:title>SRG-OS-000259-GPOS-00100</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271787r1092073_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002521</xccdf:version>
-          <xccdf:title>OL 9 library directories must be owned by root.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
-
-This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001499</xccdf:ident>
-          <xccdf:fixtext fixref="F-75744r1092072_fix">Configure the system-wide shared library directories within (/lib, /lib64, /usr/lib and /usr/lib64) to be protected from unauthorized access.
-
-Run the following command, replacing "[DIRECTORY]" with any library directory not owned by "root".
-
-$ sudo chown root [DIRECTORY]</xccdf:fixtext>
-          <xccdf:fix id="F-75744r1092072_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271787" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271788">
-        <xccdf:title>SRG-OS-000259-GPOS-00100</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271788r1092076_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002522</xccdf:version>
-          <xccdf:title>OL 9 library directories must have mode 755 or less permissive.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
-
-This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001499</xccdf:ident>
-          <xccdf:fixtext fixref="F-75745r1092075_fix">Configure the system-wide shared library directories (/lib, /lib64, /usr/lib and /usr/lib64) to be protected from unauthorized access. 
-
-Run the following command, replacing "[DIRECTORY]" with any library directory with a mode more permissive than 755.
-
-$ sudo chmod 755 [DIRECTORY]</xccdf:fixtext>
-          <xccdf:fix id="F-75745r1092075_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271788" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271789">
-        <xccdf:title>SRG-OS-000259-GPOS-00100</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271789r1134863_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002523</xccdf:version>
-          <xccdf:title>OL 9 library files must be group owned by root or a system account.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
-
-This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001499</xccdf:ident>
-          <xccdf:fixtext fixref="F-75746r1134862_fix">Configure the OL 9 systemwide shared library files contained in the directories "/lib", "/lib64", "/usr/lib", and "/usr/lib64" to be group owned by root with the following command:
-
-$ sudo find /lib /lib64 /usr/lib /usr/lib64 -type f -name '*.so*' ! -group root -exec chown :root {} +</xccdf:fixtext>
-          <xccdf:fix id="F-75746r1134862_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271789" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271790">
-        <xccdf:title>SRG-OS-000259-GPOS-00100</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271790r1134866_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002524</xccdf:version>
-          <xccdf:title>OL 9 library files must be owned by root.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
-
-This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001499</xccdf:ident>
-          <xccdf:fixtext fixref="F-75747r1134865_fix">Configure the systemwide shared library files contained in the directories "/lib", "/lib64", "/usr/lib", and "/usr/lib64" to be owned by root with the following command:
-
-$ sudo find /lib /lib64 /usr/lib /usr/lib64 -type f -name '*.so*' ! -user root -exec chown root {} +</xccdf:fixtext>
-          <xccdf:fix id="F-75747r1134865_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271790" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271791">
-        <xccdf:title>SRG-OS-000259-GPOS-00100</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271791r1134971_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002525</xccdf:version>
-          <xccdf:title>OL 9 library files must have mode 0755 or less permissive.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
-
-This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001499</xccdf:ident>
-          <xccdf:fixtext fixref="F-75748r1134868_fix">Configure the systemwide shared library files contained in the directories "/lib", "/lib64", "/usr/lib", and "/usr/lib64" to have mode 0755 or less permissive with the following command:
-
-$ sudo find /lib /lib64 /usr/lib /usr/lib64 -type f -name '*.so*' -perm /022 -exec chmod go-w {} +</xccdf:fixtext>
-          <xccdf:fix id="F-75748r1134868_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271791" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271792">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271792r1094968_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002530</xccdf:version>
-          <xccdf:title>OL 9 /boot/grub2/grub.cfg file must be group-owned by root.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "root" group is a highly privileged group. The group-owner of this file should not have any access privileges.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75749r1092087_fix">Change the group of the file /boot/grub2/grub.cfg to root by running the following command:
-
-$ sudo chgrp root /boot/grub2/grub.cfg</xccdf:fixtext>
-          <xccdf:fix id="F-75749r1092087_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271792" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271793">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271793r1092605_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002531</xccdf:version>
-          <xccdf:title>OL 9 /boot/grub2/grub.cfg file must be owned by root.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "/boot/grub2/grub.cfg" file stores sensitive system configuration. Protection of this file is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75750r1092090_fix">Change the owner of the file /boot/grub2/grub.cfg to root by running the following command:
-
-$ sudo chown root /boot/grub2/grub.cfg</xccdf:fixtext>
-          <xccdf:fix id="F-75750r1092090_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271793" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271794">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271794r1092094_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002532</xccdf:version>
-          <xccdf:title>OL 9 /etc/group file must be group-owned by root.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/group" file contains information regarding groups that are configured on the system. Protection of this file is important for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75751r1092093_fix">Change the group of the file /etc/group to root by running the following command:
-
-$ sudo chgrp root /etc/group</xccdf:fixtext>
-          <xccdf:fix id="F-75751r1092093_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271794" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271795">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271795r1092097_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002533</xccdf:version>
-          <xccdf:title>OL 9 /etc/group- file must be group-owned by root.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/group-" file is a backup file of "/etc/group", and as such, contains information regarding groups that are configured on the system. Protection of this file is important for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75752r1092096_fix">Change the group of the file /etc/group- to root by running the following command:
-
-$ sudo chgrp root /etc/group-</xccdf:fixtext>
-          <xccdf:fix id="F-75752r1092096_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271795" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271796">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271796r1092100_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002534</xccdf:version>
-          <xccdf:title>OL 9 /etc/group file must be owned by root.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/group" file contains information regarding groups that are configured on the system. Protection of this file is important for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75753r1092099_fix">Change the owner of the file /etc/group to root by running the following command:
-
-$ sudo chown root /etc/group</xccdf:fixtext>
-          <xccdf:fix id="F-75753r1092099_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271796" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271797">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271797r1092103_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002535</xccdf:version>
-          <xccdf:title>OL 9 /etc/group- file must be owned by root.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/group-" file is a backup file of "/etc/group", and as such, contains information regarding groups that are configured on the system. Protection of this file is important for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75754r1092102_fix">Change the owner of the file /etc/group- to root by running the following command:
-
-$ sudo chown root /etc/group-</xccdf:fixtext>
-          <xccdf:fix id="F-75754r1092102_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271797" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271798">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271798r1092106_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002536</xccdf:version>
-          <xccdf:title>OL 9 /etc/group file must have mode 0644 or less permissive to prevent unauthorized access.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/group" file contains information regarding groups that are configured on the system. Protection of this file is important for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75755r1092105_fix">Change the mode of the file "/etc/group" to "0644" by running the following command:
-
-$ sudo chmod 0644 /etc/group</xccdf:fixtext>
-          <xccdf:fix id="F-75755r1092105_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271798" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271799">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271799r1092109_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002537</xccdf:version>
-          <xccdf:title>OL 9 /etc/group- file must have mode 0644 or less permissive to prevent unauthorized access.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/group-" file is a backup file of "/etc/group", and as such, contains information regarding groups that are configured on the system. Protection of this file is important for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75756r1092108_fix">Change the mode of the file "/etc/group-" to "0644" by running the following command:
-
-$ sudo chmod 0644 /etc/group-</xccdf:fixtext>
-          <xccdf:fix id="F-75756r1092108_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271799" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271800">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271800r1092112_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002538</xccdf:version>
-          <xccdf:title>OL 9 /etc/gshadow file must be group-owned by root.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/gshadow" file contains group password hashes. Protection of this file is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75757r1092111_fix">Change the group of the file /etc/gshadow to root by running the following command:
-
-$ sudo chgrp root /etc/gshadow</xccdf:fixtext>
-          <xccdf:fix id="F-75757r1092111_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271800" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271801">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271801r1092115_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002539</xccdf:version>
-          <xccdf:title>OL 9 /etc/gshadow- file must be group-owned by root.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/gshadow-" file is a backup of "/etc/gshadow", and as such, contains group password hashes. Protection of this file is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75758r1092114_fix">Change the group of the file /etc/gshadow- to root by running the following command:
-
-$ sudo chgrp root /etc/gshadow-</xccdf:fixtext>
-          <xccdf:fix id="F-75758r1092114_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271801" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271802">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271802r1092118_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002540</xccdf:version>
-          <xccdf:title>OL 9 /etc/gshadow file must be owned by root.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/gshadow" file contains group password hashes. Protection of this file is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75759r1092117_fix">Change the owner of the file /etc/gshadow to root by running the following command:
-
-$ sudo chown root /etc/gshadow</xccdf:fixtext>
-          <xccdf:fix id="F-75759r1092117_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271802" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271803">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271803r1092121_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002541</xccdf:version>
-          <xccdf:title>OL 9 /etc/gshadow- file must be owned by root.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/gshadow-" file is a backup of "/etc/gshadow", and as such, contains group password hashes. Protection of this file is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75760r1092120_fix">Change the owner of the file /etc/gshadow- to root by running the following command:
-
-$ sudo chown root /etc/gshadow-</xccdf:fixtext>
-          <xccdf:fix id="F-75760r1092120_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271803" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271804">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271804r1092124_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002542</xccdf:version>
-          <xccdf:title>OL 9 /etc/gshadow file must have mode 0000 or less permissive to prevent unauthorized access.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/gshadow" file contains group password hashes. Protection of this file is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75761r1092123_fix">Change the mode of the file "/etc/gshadow" to "0000" by running the following command:
-
-$ sudo chmod 0000 /etc/gshadow</xccdf:fixtext>
-          <xccdf:fix id="F-75761r1092123_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271804" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271805">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271805r1092127_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002543</xccdf:version>
-          <xccdf:title>OL 9 /etc/gshadow- file must have mode 0000 or less permissive to prevent unauthorized access.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/gshadow-" file is a backup of "/etc/gshadow", and as such, contains group password hashes. Protection of this file is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75762r1092126_fix">Change the mode of the file "/etc/gshadow-" to "0000" by running the following command:
-
-$ sudo chmod 0000 /etc/gshadow-</xccdf:fixtext>
-          <xccdf:fix id="F-75762r1092126_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271805" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271806">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271806r1092130_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002544</xccdf:version>
-          <xccdf:title>OL 9 /etc/passwd file must be group-owned by root.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/passwd" file contains information about the users that are configured on the system. Protection of this file is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75763r1092129_fix">Change the group of the file /etc/passwd to root by running the following command:
-
-$ sudo chgrp root /etc/passwd</xccdf:fixtext>
-          <xccdf:fix id="F-75763r1092129_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271806" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271807">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271807r1092133_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002545</xccdf:version>
-          <xccdf:title>OL 9 /etc/passwd- file must be group-owned by root.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/passwd-" file is a backup file of "/etc/passwd", and as such, contains information about the users that are configured on the system. Protection of this file is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75764r1092132_fix">Change the group of the file /etc/passwd- to root by running the following command:
-
-$ sudo chgrp root /etc/passwd-</xccdf:fixtext>
-          <xccdf:fix id="F-75764r1092132_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271807" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271808">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271808r1092136_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002546</xccdf:version>
-          <xccdf:title>OL 9 /etc/passwd file must be owned by root.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/passwd" file contains information about the users that are configured on the system. Protection of this file is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75765r1092135_fix">Change the owner of the file /etc/passwd to root by running the following command:
-
-$ sudo chown root /etc/passwd</xccdf:fixtext>
-          <xccdf:fix id="F-75765r1092135_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271808" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271809">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271809r1092139_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002547</xccdf:version>
-          <xccdf:title>OL 9 /etc/passwd- file must be owned by root.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/passwd-" file is a backup file of "/etc/passwd", and as such, contains information about the users that are configured on the system. Protection of this file is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75766r1092138_fix">Change the owner of the file /etc/passwd- to root by running the following command:
-
-$ sudo chown root /etc/passwd-</xccdf:fixtext>
-          <xccdf:fix id="F-75766r1092138_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271809" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271810">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271810r1092142_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002548</xccdf:version>
-          <xccdf:title>OL 9 /etc/passwd file must have mode 0644 or less permissive to prevent unauthorized access.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;If the "/etc/passwd" file is writable by a group-owner or the world the risk of its compromise is increased. The file contains the list of accounts on the system and associated information, and protection of this file is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75767r1092141_fix">Change the mode of the file "/etc/passwd" to "0644" by running the following command:
-
-$ sudo chmod 0644 /etc/passwd</xccdf:fixtext>
-          <xccdf:fix id="F-75767r1092141_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271810" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271811">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271811r1092145_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002549</xccdf:version>
-          <xccdf:title>OL 9 /etc/passwd- file must have mode 0644 or less permissive to prevent unauthorized access.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/passwd-" file is a backup file of "/etc/passwd", and as such, contains information about the users that are configured on the system. Protection of this file is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75768r1092144_fix">Change the mode of the file "/etc/passwd-" to "0644" by running the following command:
-
-$ sudo chmod 0644 /etc/passwd-</xccdf:fixtext>
-          <xccdf:fix id="F-75768r1092144_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271811" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271812">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271812r1092148_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002550</xccdf:version>
-          <xccdf:title>OL 9 /etc/shadow file must be group-owned by root.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/shadow" file stores password hashes. Protection of this file is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75769r1092147_fix">Change the group of the file /etc/shadow to root by running the following command:
-
-$ sudo chgrp root /etc/shadow</xccdf:fixtext>
-          <xccdf:fix id="F-75769r1092147_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271812" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271813">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271813r1092151_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002551</xccdf:version>
-          <xccdf:title>OL 9 /etc/shadow- file must be group-owned by root.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/shadow-" file is a backup file of "/etc/shadow", and as such, contains the list of local system accounts and password hashes. Protection of this file is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75770r1092150_fix">Change the group of the file /etc/shadow- to root by running the following command:
-
-$ sudo chgrp root /etc/shadow-</xccdf:fixtext>
-          <xccdf:fix id="F-75770r1092150_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271813" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271814">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271814r1092154_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002552</xccdf:version>
-          <xccdf:title>OL 9 /etc/shadow file must be owned by root.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/shadow" file contains the list of local system accounts and stores password hashes. Protection of this file is critical for system security. Failure to give ownership of this file to root provides the designated owner with access to sensitive information, which could weaken the system security posture.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75771r1092153_fix">Change the owner of the file /etc/shadow to root by running the following command:
-
-$ sudo chown root /etc/shadow</xccdf:fixtext>
-          <xccdf:fix id="F-75771r1092153_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271814" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271815">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271815r1092157_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002553</xccdf:version>
-          <xccdf:title>OL 9 /etc/shadow- file must be owned by root.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/shadow-" file is a backup file of "/etc/shadow", and as such, contains the list of local system accounts and password hashes. Protection of this file is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75772r1092156_fix">Change the owner of the file /etc/shadow- to root by running the following command:
-
-$ sudo chown root /etc/shadow-</xccdf:fixtext>
-          <xccdf:fix id="F-75772r1092156_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271815" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271816">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271816r1092160_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002554</xccdf:version>
-          <xccdf:title>OL 9 /etc/shadow- file must have mode 0000 or less permissive to prevent unauthorized access.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/shadow-" file is a backup file of "/etc/shadow", and as such, contains the list of local system accounts and password hashes. Protection of this file is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75773r1092159_fix">Change the mode of the file "/etc/shadow-" to "0000" by running the following command:
-
-$ sudo chmod 0000 /etc/shadow-</xccdf:fixtext>
-          <xccdf:fix id="F-75773r1092159_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271816" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271817">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271817r1092163_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002555</xccdf:version>
-          <xccdf:title>OL 9 /etc/shadow file must have mode 0000 to prevent unauthorized access.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/shadow" file contains the list of local system accounts and stores password hashes. Protection of this file is critical for system security. Failure to give ownership of this file to root provides the designated owner with access to sensitive information, which could weaken the system security posture.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75774r1092162_fix">Change the mode of the file "/etc/shadow" to "0000" by running the following command:
-
-$ sudo chmod 0000 /etc/shadow</xccdf:fixtext>
-          <xccdf:fix id="F-75774r1092162_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271817" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271818">
-        <xccdf:title>SRG-OS-000206-GPOS-00084</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271818r1092166_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002560</xccdf:version>
-          <xccdf:title>OL 9 /var/log directory must be group-owned by root.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state or can identify the OL 9 system or platform. Additionally, personally identifiable information (PII) and operational information must not be revealed through error messages to unauthorized personnel or their designated representatives.
-
-The structure and content of error messages must be carefully considered by the organization and development team. The extent to which the information system is able to identify and handle error conditions is guided by organizational policy and operational requirements.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001314</xccdf:ident>
-          <xccdf:fixtext fixref="F-75775r1092165_fix">Configure the group owner of the directory "/var/log" to "root" by running the following command:
-
-$ sudo chgrp root /var/log</xccdf:fixtext>
-          <xccdf:fix id="F-75775r1092165_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271818" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271819">
-        <xccdf:title>SRG-OS-000206-GPOS-00084</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271819r1092169_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002561</xccdf:version>
-          <xccdf:title>OL 9 /var/log directory must be owned by root.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state or can identify the OL 9 system or platform. Additionally, personally identifiable information (PII) and operational information must not be revealed through error messages to unauthorized personnel or their designated representatives.
-
-The structure and content of error messages must be carefully considered by the organization and development team. The extent to which the information system is able to identify and handle error conditions is guided by organizational policy and operational requirements.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001314</xccdf:ident>
-          <xccdf:fixtext fixref="F-75776r1092168_fix">Configure the owner of the directory "/var/log" to "root" by running the following command:
-
-$ sudo chown root /var/log</xccdf:fixtext>
-          <xccdf:fix id="F-75776r1092168_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271819" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271820">
-        <xccdf:title>SRG-OS-000206-GPOS-00084</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271820r1092172_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002562</xccdf:version>
-          <xccdf:title>OL 9 /var/log directory must have mode 0755 or less permissive.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state or can identify the OL 9 system or platform. Additionally, personally identifiable information (PII) and operational information must not be revealed through error messages to unauthorized personnel or their designated representatives.
-
-The structure and content of error messages must be carefully considered by the organization and development team. The extent to which the information system is able to identify and handle error conditions is guided by organizational policy and operational requirements.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001314</xccdf:ident>
-          <xccdf:fixtext fixref="F-75777r1092171_fix">Configure the "/var/log" directory to a mode of "0755" by running the following command:
-
-$ sudo chmod 0755 /var/log</xccdf:fixtext>
-          <xccdf:fix id="F-75777r1092171_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271820" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271821">
-        <xccdf:title>SRG-OS-000206-GPOS-00084</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271821r1092175_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002563</xccdf:version>
-          <xccdf:title>OL 9 /var/log/messages file must be group-owned by root.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state or can identify the OL 9 system or platform. Additionally, personally identifiable information (PII) and operational information must not be revealed through error messages to unauthorized personnel or their designated representatives.
-
-The structure and content of error messages must be carefully considered by the organization and development team. The extent to which the information system is able to identify and handle error conditions is guided by organizational policy and operational requirements.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001314</xccdf:ident>
-          <xccdf:fixtext fixref="F-75778r1092174_fix">Change the group owner of the "/var/log/messages" file to "root" by running the following command:
-
-$ sudo chgrp root /var/log/messages</xccdf:fixtext>
-          <xccdf:fix id="F-75778r1092174_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271821" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271822">
-        <xccdf:title>SRG-OS-000206-GPOS-00084</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271822r1092178_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002564</xccdf:version>
-          <xccdf:title>OL 9 /var/log/messages file must be owned by root.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state or can identify the OL 9 system or platform. Additionally, personally identifiable information (PII) and operational information must not be revealed through error messages to unauthorized personnel or their designated representatives.
-
-The structure and content of error messages must be carefully considered by the organization and development team. The extent to which the information system is able to identify and handle error conditions is guided by organizational policy and operational requirements.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001314</xccdf:ident>
-          <xccdf:fixtext fixref="F-75779r1092177_fix">Change the owner of the "/var/log/messages" file to "root" by running the following command:
-
-$ sudo chown root /var/log/messages</xccdf:fixtext>
-          <xccdf:fix id="F-75779r1092177_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271822" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271823">
-        <xccdf:title>SRG-OS-000206-GPOS-00084</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271823r1092181_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002565</xccdf:version>
-          <xccdf:title>OL 9 /var/log/messages file must have mode 0640 or less permissive.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state or can identify the OL 9 system or platform. Additionally, personally identifiable information (PII) and operational information must not be revealed through error messages to unauthorized personnel or their designated representatives.
-
-The structure and content of error messages must be carefully considered by the organization and development team. The extent to which the information system is able to identify and handle error conditions is guided by organizational policy and operational requirements.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001314</xccdf:ident>
-          <xccdf:fixtext fixref="F-75780r1092180_fix">Configure the "/var/log/messages" file to have a mode of "0640" by running the following command:
-
-$ sudo chmod 0640 /var/log/messages</xccdf:fixtext>
-          <xccdf:fix id="F-75780r1092180_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271823" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271824">
-        <xccdf:title>SRG-OS-000256-GPOS-00097</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271824r1092184_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002570</xccdf:version>
-          <xccdf:title>OL 9 audit tools must be group-owned by root.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Protecting audit information also includes identifying and protecting the tools used to view and manipulate log data; therefore, protecting audit tools is necessary to prevent unauthorized operation on audit information.
-
-OL 9 systems providing tools to interface with audit information will leverage user permissions and roles identifying the user accessing the tools, and the corresponding rights the user enjoys, to make access decisions regarding the access to audit tools.
-
-Audit tools include, but are not limited to, vendor-provided and open source audit tools needed to successfully view and manipulate audit information system activity and records. Audit tools include custom queries and report generators.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001493</xccdf:ident>
-          <xccdf:fixtext fixref="F-75781r1092183_fix">Configure the audit tools to be group-owned by "root" by running the following command:
-
-$ sudo chgrp root [audit_tool]
-
-Replace "[audit_tool]" with each audit tool not group-owned by "root".</xccdf:fixtext>
-          <xccdf:fix id="F-75781r1092183_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271824" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271825">
-        <xccdf:title>SRG-OS-000256-GPOS-00097</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271825r1092187_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002571</xccdf:version>
-          <xccdf:title>OL 9 audit tools must be owned by root.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Protecting audit information also includes identifying and protecting the tools used to view and manipulate log data. Therefore, protecting audit tools is necessary to prevent unauthorized operation on audit information.
-
-OL 9 systems providing tools to interface with audit information will leverage user permissions and roles identifying the user accessing the tools, and the corresponding rights the user enjoys, to make access decisions regarding the access to audit tools.
-
-Audit tools include, but are not limited to, vendor-provided and open source audit tools needed to successfully view and manipulate audit information system activity and records. Audit tools include custom queries and report generators.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001493</xccdf:ident>
-          <xccdf:fixtext fixref="F-75782r1092186_fix">Configure the audit tools to be owned by "root" by running the following command:
-
-$ sudo chown root [audit_tool]
-
-Replace "[audit_tool]" with each audit tool not owned by "root".</xccdf:fixtext>
-          <xccdf:fix id="F-75782r1092186_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271825" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271826">
-        <xccdf:title>SRG-OS-000256-GPOS-00097</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271826r1092190_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002572</xccdf:version>
-          <xccdf:title>OL 9 audit tools must have a mode of 0755 or less permissive.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Protecting audit information also includes identifying and protecting the tools used to view and manipulate log data. Therefore, protecting audit tools is necessary to prevent unauthorized operation on audit information.
-
-OL 9 systems providing tools to interface with audit information will leverage user permissions and roles identifying the user accessing the tools, and the corresponding rights the user enjoys, to make access decisions regarding the access to audit tools.
-
-Audit tools include, but are not limited to, vendor-provided and open source audit tools needed to successfully view and manipulate audit information system activity and records. Audit tools include custom queries and report generators.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001493</xccdf:ident>
-          <xccdf:fixtext fixref="F-75783r1092189_fix">Configure the audit tools to have a mode of "0755" by running the following command:
-
-$ sudo chmod 0755 [audit_tool]
-
-Replace "[audit_tool]" with each audit tool that has a more permissive mode than 0755.</xccdf:fixtext>
-          <xccdf:fix id="F-75783r1092189_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271826" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271827">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271827r1092193_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002580</xccdf:version>
-          <xccdf:title>OL 9 cron configuration directories must have a mode of 0700 or less permissive.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Service configuration files enable or disable features of their respective services that if configured incorrectly can lead to insecure and vulnerable configurations. Therefore, service configuration files should have the correct access rights to prevent unauthorized changes.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75784r1092192_fix">Configure any OL 9 cron configuration directory with a mode more permissive than "0700" as follows:
-
-$ sudo chmod 0700 [cron configuration directory]</xccdf:fixtext>
-          <xccdf:fix id="F-75784r1092192_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271827" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271828">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271828r1092196_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002581</xccdf:version>
-          <xccdf:title>OL 9 cron configuration files directory must be group-owned by root.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Service configuration files enable or disable features of their respective services that if configured incorrectly can lead to insecure and vulnerable configurations; therefore, service configuration files should be owned by the correct group to prevent unauthorized changes.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75785r1092195_fix">Configure any cron configuration not group-owned by root with the following command:
-
-$ sudo chgrp root [cron config file]</xccdf:fixtext>
-          <xccdf:fix id="F-75785r1092195_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271828" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271829">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271829r1092199_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002582</xccdf:version>
-          <xccdf:title>OL 9 cron configuration files directory must be owned by root.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Service configuration files enable or disable features of their respective services that if configured incorrectly can lead to insecure and vulnerable configurations; therefore, service configuration files must be owned by the correct group to prevent unauthorized changes.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75786r1092198_fix">Configure any cron configuration not owned by root with the following command:
-
-$ sudo chown root [cron config file]</xccdf:fixtext>
-          <xccdf:fix id="F-75786r1092198_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271829" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271830">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271830r1092202_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002583</xccdf:version>
-          <xccdf:title>OL 9 /etc/crontab file must have mode 0600.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Service configuration files enable or disable features of their respective services that if configured incorrectly can lead to insecure and vulnerable configurations; therefore, service configuration files must have the correct access rights to prevent unauthorized changes.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75787r1092201_fix">Configure the OL 9 file /etc/crontab with mode 600.
-
-$ sudo chmod 0600 /etc/crontab</xccdf:fixtext>
-          <xccdf:fix id="F-75787r1092201_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271830" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271831">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271831r1092205_rule" severity="high" weight="10.0">
-          <xccdf:version>OL09-00-003000</xccdf:version>
-          <xccdf:title>OL 9 must be configured so that the root account is the only account having unrestricted access to the system.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;An account has root authority if it has a user identifier (UID) of "0". Multiple accounts with a UID of "0" afford more opportunity for potential intruders to guess a password for a privileged account. Proper configuration of sudo is recommended to afford multiple system administrators access to root privileges in an accountable manner.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75788r1092204_fix">Change the UID of any account on the system, other than root, that has a UID of "0". 
-
-If the account is associated with system commands or applications, the UID should be changed to one greater than "0" but less than "1000". Otherwise, assign a UID of greater than "1000" that has not already been assigned.</xccdf:fixtext>
-          <xccdf:fix id="F-75788r1092204_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271831" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271832">
-        <xccdf:title>SRG-OS-000104-GPOS-00051</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271832r1092208_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-003001</xccdf:version>
-          <xccdf:title>OL 9 duplicate User IDs (UIDs) must not exist for interactive users.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;To ensure accountability and prevent unauthenticated access, interactive users must be identified and authenticated to prevent potential misuse and compromise of the system.
-
-Satisfies: SRG-OS-000104-GPOS-00051, SRG-OS-000121-GPOS-00062, SRG-OS-000042-GPOS-00020&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000764</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000804</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:fixtext fixref="F-75789r1092207_fix">Edit the file "/etc/passwd" and provide each interactive user account that has a duplicate UID with a unique UID.</xccdf:fixtext>
-          <xccdf:fix id="F-75789r1092207_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271832" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271833">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271833r1092607_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-003002</xccdf:version>
-          <xccdf:title>OL 9 local interactive users must have a home directory assigned in the /etc/passwd file.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;If local interactive users are not assigned a valid home directory, there is no place for the storage and control of files they should own.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75790r1092210_fix">Create and assign home directories to all local interactive users on OL 9 that currently do not have a home directory assigned.</xccdf:fixtext>
-          <xccdf:fix id="F-75790r1092210_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271833" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271834">
-        <xccdf:title>SRG-OS-000104-GPOS-00051</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271834r1092214_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-003005</xccdf:version>
-          <xccdf:title>OL 9 interactive users must have a primary group that exists.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;If a user is assigned the Group Identifier (GID) of a group that does not exist on the system, and a group with the GID is subsequently created, the user may have unintended rights to any files associated with the group.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000764</xccdf:ident>
-          <xccdf:fixtext fixref="F-75791r1092213_fix">Configure the system so that all GIDs are referenced in "/etc/passwd" are defined in "/etc/group".
-
-Edit the file "/etc/passwd" and ensure that every user's GID is a valid GID.</xccdf:fixtext>
-          <xccdf:fix id="F-75791r1092213_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271834" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271835">
-        <xccdf:title>SRG-OS-000104-GPOS-00051</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271835r1092217_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-003006</xccdf:version>
-          <xccdf:title>OL 9 groups must have unique Group ID (GID).</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;To ensure accountability and prevent unauthenticated access, groups must be identified uniquely to prevent potential misuse and compromise of the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000764</xccdf:ident>
-          <xccdf:fixtext fixref="F-75792r1092216_fix">Edit the file "/etc/group" and provide each group that has a duplicate GID with a unique GID.</xccdf:fixtext>
-          <xccdf:fix id="F-75792r1092216_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271835" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271836">
-        <xccdf:title>SRG-OS-000021-GPOS-00005</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271836r1092637_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-003010</xccdf:version>
-          <xccdf:title>OL 9 must configure SELinux context type to allow the use of a nondefault faillock tally directory.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Not having the correct SELinux context on the faillock directory may lead to unauthorized access to the directory.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000044</xccdf:ident>
-          <xccdf:fixtext fixref="F-75793r1092219_fix">Configure OL 9 to allow the use of a nondefault faillock tally directory while SELinux enforces a targeted policy.
-
-Create a nondefault faillock tally directory (if it does not already exist) with the following example:
-
-$ sudo mkdir /var/log/faillock
-
-Update the /etc/selinux/targeted/contexts/files/file_contexts.local with "faillog_t" context type for the nondefault faillock tally directory with the following command:
-
-$ sudo semanage fcontext -a -t faillog_t "/var/log/faillock(/.*)?"
-
-Update the context type of the nondefault faillock directory/subdirectories and files with the following command:
-
-$ sudo restorecon -R -v /var/log/faillock</xccdf:fixtext>
-          <xccdf:fix id="F-75793r1092219_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271836" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271839">
-        <xccdf:title>SRG-OS-000329-GPOS-00128</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271839r1092229_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-003020</xccdf:version>
-          <xccdf:title>OL 9 must automatically lock an account when three unsuccessful logon attempts occur.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;By limiting the number of failed logon attempts, the risk of unauthorized system access via user password guessing, otherwise known as brute-force attacks, is reduced. Limits are imposed by locking the account.
-
-Satisfies: SRG-OS-000329-GPOS-00128, SRG-OS-000021-GPOS-00005&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002238</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000044</xccdf:ident>
-          <xccdf:fixtext fixref="F-75796r1092228_fix">Configure OL 9 to lock an account when three unsuccessful logon attempts occur.
-
-Add/modify the "/etc/security/faillock.conf" file to match the following line:
-
-deny = 3</xccdf:fixtext>
-          <xccdf:fix id="F-75796r1092228_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271839" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271840">
-        <xccdf:title>SRG-OS-000329-GPOS-00128</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271840r1092232_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-003021</xccdf:version>
-          <xccdf:title>OL 9 must automatically lock the root account until the root account is released by an administrator when three unsuccessful logon attempts occur during a 15-minute time period.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;By limiting the number of failed logon attempts, the risk of unauthorized system access via user password guessing, also known as brute-forcing, is reduced. Limits are imposed by locking the account.
-
-Satisfies: SRG-OS-000329-GPOS-00128, SRG-OS-000021-GPOS-00005&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002238</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000044</xccdf:ident>
-          <xccdf:fixtext fixref="F-75797r1092231_fix">Configure OL 9 to lock out the "root" account after a number of incorrect login attempts using "pam_faillock.so", first enable the feature using the following command:
- 
-$ sudo authselect enable-feature with-faillock  
-
-Then edit the "/etc/security/faillock.conf" file as follows:
- 
-  add or uncomment the following line:
- even_deny_root</xccdf:fixtext>
-          <xccdf:fix id="F-75797r1092231_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271840" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271841">
-        <xccdf:title>SRG-OS-000021-GPOS-00005</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271841r1092235_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-003022</xccdf:version>
-          <xccdf:title>OL 9 must log username information when unsuccessful logon attempts occur.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without auditing of these events, it may be harder or impossible to identify what an attacker did after an attack.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000044</xccdf:ident>
-          <xccdf:fixtext fixref="F-75798r1092234_fix">Configure OL 9 to log username information when unsuccessful logon attempts occur.
-
-Add/modify the "/etc/security/faillock.conf" file to match the following line:
-
-audit</xccdf:fixtext>
-          <xccdf:fix id="F-75798r1092234_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271841" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271842">
-        <xccdf:title>SRG-OS-000021-GPOS-00005</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271842r1092238_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-003023</xccdf:version>
-          <xccdf:title>OL 9 must ensure account lockouts persist.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Having lockouts persist across reboots ensures that account is only unlocked by an administrator. If the lockouts did not persist across reboots, an attacker could simply reboot the system to continue brute force attacks against the accounts on the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000044</xccdf:ident>
-          <xccdf:fixtext fixref="F-75799r1092237_fix">Configure OL 9 maintain the contents of the faillock directory after a reboot.
-
-Add/modify the "/etc/security/faillock.conf" file to match the following line:
-
-dir = /var/log/faillock</xccdf:fixtext>
-          <xccdf:fix id="F-75799r1092237_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271842" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271845">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271845r1092247_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-003051</xccdf:version>
-          <xccdf:title>OL 9 system accounts must not have an interactive login shell.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Ensuring shells are not given to system accounts upon login makes it more difficult for attackers to make use of system accounts.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75802r1092246_fix">Configure OL 9 so that all noninteractive accounts on the system do not have an interactive shell assigned to them.
-
-If the system account needs a shell assigned for mission operations, document the need with the ISSO.
-
-Run the following command to disable the interactive shell for a specific noninteractive user account:
-
-Replace &lt;user&gt; with the user that has a login shell.
-
-$ sudo usermod --shell /sbin/nologin &lt;user&gt;
-
-Do not perform the steps in this section on the root account. Doing so will cause the system to become inaccessible.</xccdf:fixtext>
-          <xccdf:fix id="F-75802r1092246_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271845" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271846">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271846r1092250_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-003052</xccdf:version>
-          <xccdf:title>OL 9 local interactive user accounts must be assigned a home directory upon creation.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;If local interactive users are not assigned a valid home directory, there is no place for the storage and control of files they should own.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75803r1092249_fix">Configure OL 9 to assign home directories to all new local interactive users by setting the "CREATE_HOME" parameter in "/etc/login.defs" to "yes" as follows.
-
-CREATE_HOME yes</xccdf:fixtext>
-          <xccdf:fix id="F-75803r1092249_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271846" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271849">
-        <xccdf:title>SRG-OS-000118-GPOS-00060</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271849r1092259_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-003065</xccdf:version>
-          <xccdf:title>OL 9 must disable account identifiers (individuals, groups, roles, and devices) after 35 days of inactivity.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Inactive identifiers pose a risk to systems and applications because attackers may exploit an inactive identifier and potentially obtain undetected access to the system.
-
-Disabling inactive accounts ensures that accounts which may not have been responsibly removed are not available to attackers who may have compromised their credentials.
-
-Owners of inactive accounts will not notice if unauthorized access to their user account has been obtained.
-
-Satisfies: SRG-OS-000118-GPOS-00060, SRG-OS-000590-GPOS-00110&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-003627</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-003628</xccdf:ident>
-          <xccdf:fixtext fixref="F-75806r1092258_fix">Configure OL 9 to disable account identifiers after 35 days of inactivity after the password expiration. 
-
-Run the following command to change the configuration for useradd:
-
-$ sudo useradd -D -f 35
-
-The recommendation is 35 days, but a lower value is acceptable.</xccdf:fixtext>
-          <xccdf:fix id="F-75806r1092258_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271849" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271850">
-        <xccdf:title>SRG-OS-000480-GPOS-00226</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271850r1092262_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-003070</xccdf:version>
-          <xccdf:title>OL 9 must enforce a delay of at least four seconds between logon prompts following a failed logon attempt.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Increasing the time between a failed authentication attempt and reprompting to enter credentials helps to slow a single-threaded brute force attack.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75807r1092261_fix">Configure the OL 9 to enforce a delay of at least four seconds between logon prompts following a failed console logon attempt.
-
-Modify the "/etc/login.defs" file to set the "FAIL_DELAY" parameter to 4 or greater:
-
-FAIL_DELAY 4</xccdf:fixtext>
-          <xccdf:fix id="F-75807r1092261_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271850" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271851">
-        <xccdf:title>SRG-OS-000032-GPOS-00013</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271851r1092265_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-005000</xccdf:version>
-          <xccdf:title>OL 9 remote access methods must be monitored.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Logging remote access methods can be used to trace the decrease in the risks associated with remote user access management. It can also be used to spot cyberattacks and ensure ongoing compliance with organizational policies surrounding the use of remote access methods.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000067</xccdf:ident>
-          <xccdf:fixtext fixref="F-75808r1092264_fix">Configure OL 9 remote access methods to be monitored.
-
-Add or update the following lines to the "/etc/rsyslog.conf" file:
-
-auth.*;authpriv.*;daemon.* /var/log/secure
-
-The "rsyslog" service must be restarted for the changes to take effect with the following command:
-
-$ sudo systemctl restart rsyslog.service</xccdf:fixtext>
-          <xccdf:fix id="F-75808r1092264_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271851" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271852">
-        <xccdf:title>SRG-OS-000479-GPOS-00224</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271852r1092608_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-005005</xccdf:version>
-          <xccdf:title>OL 9 must be configured to forward audit records via TCP to a different system or media from the system being audited via rsyslog.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Information stored in one location is vulnerable to accidental or incidental deletion or alteration.
-
-Offloading is a common process in information systems with limited audit storage capacity.
-
-OL 9 installation media provides "rsyslogd", a system utility providing support for message logging. Support for both internet and Unix domain sockets enables this utility to support both local and remote logging. Coupling this utility with "gnutls" (a secure communications library implementing the SSL, TLS, and DTLS protocols) creates a method to securely encrypt and offload auditing.
-
-Rsyslog provides three ways to forward message: the traditional UDP transport, which is extremely lossy but standard; the plain TCP based transport, which loses messages only during certain situations but is widely available; and the RELP transport, which does not lose messages but is currently available only as part of the rsyslogd 3.15.0 and above.
-
-Examples of each configuration:
-UDP *.* @remotesystemname
-TCP *.* @@remotesystemname
-RELP *.* :omrelp:remotesystemname:2514
-Note that a port number was given as there is no standard port for RELP.
-
-Satisfies: SRG-OS-000479-GPOS-00224, SRG-OS-000342-GPOS-00133&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001851</xccdf:ident>
-          <xccdf:fixtext fixref="F-75809r1092267_fix">Configure OL 9 to offload audit records onto a different system or media from the system being audited via TCP using rsyslog by specifying the remote logging server in "/etc/rsyslog.conf"" or "/etc/rsyslog.d/[customfile].conf" with the name or IP address of the log aggregation server.
-
-*.* @@[remoteloggingserver]:[port]"</xccdf:fixtext>
-          <xccdf:fix id="F-75809r1092267_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271852" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271854">
-        <xccdf:title>SRG-OS-000342-GPOS-00133</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271854r1092274_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-005015</xccdf:version>
-          <xccdf:title>OL 9 must authenticate the remote logging server for offloading audit logs via rsyslog.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Information stored in one location is vulnerable to accidental or incidental deletion or alteration.
-
-Offloading is a common process in information systems with limited audit storage capacity.
-
-OL 9 installation media provides "rsyslogd", a system utility providing support for message logging. Support for both internet and Unix domain sockets enables this utility to support both local and remote logging. Coupling this utility with "gnutls" (a secure communications library implementing the SSL, TLS, and DTLS protocols) creates a method to securely encrypt and offload auditing.
-
-"Rsyslog" supported authentication modes include:
-anon - anonymous authentication
-x509/fingerprint - certificate fingerprint authentication
-x509/certvalid - certificate validation only
-x509/name - certificate validation and subject name authentication
-
-Satisfies: SRG-OS-000342-GPOS-00133, SRG-OS-000479-GPOS-00224&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001851</xccdf:ident>
-          <xccdf:fixtext fixref="F-75811r1092273_fix">Configure OL 9 to authenticate the remote logging server for off-loading audit logs by setting the following option in "/etc/rsyslog.conf" or "/etc/rsyslog.d/[customfile].conf":
-
-$ActionSendStreamDriverAuthMode x509/name</xccdf:fixtext>
-          <xccdf:fix id="F-75811r1092273_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271854" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271855">
-        <xccdf:title>SRG-OS-000342-GPOS-00133</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271855r1092277_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-005020</xccdf:version>
-          <xccdf:title>OL 9 must encrypt the transfer of audit records offloaded onto a different system or media from the system being audited via rsyslog.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Information stored in one location is vulnerable to accidental or incidental deletion or alteration.
-
-Offloading is a common process in information systems with limited audit storage capacity.
-
-OL 9 installation media provides "rsyslogd", a system utility providing support for message logging. Support for both internet and Unix domain sockets enables this utility to support both local and remote logging. Coupling this utility with "gnutls" (a secure communications library implementing the SSL, TLS, and DTLS protocols) creates a method to securely encrypt and offload auditing.
-
-"Rsyslog" supported authentication modes include:
-anon - anonymous authentication
-x509/fingerprint - certificate fingerprint authentication
-x509/certvalid - certificate validation only
-x509/name - certificate validation and subject name authentication
-
-Satisfies: SRG-OS-000342-GPOS-00133, SRG-OS-000479-GPOS-00224&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001851</xccdf:ident>
-          <xccdf:fixtext fixref="F-75812r1092276_fix">Configure OL 9 to encrypt offloaded audit records via rsyslog by setting the following options in "/etc/rsyslog.conf" or "/etc/rsyslog.d/[customfile].conf":
-
-$ActionSendStreamDriverMode 1</xccdf:fixtext>
-          <xccdf:fix id="F-75812r1092276_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271855" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271856">
-        <xccdf:title>SRG-OS-000342-GPOS-00133</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271856r1092280_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-005025</xccdf:version>
-          <xccdf:title>OL 9 must encrypt via the gtls driver the transfer of audit records offloaded onto a different system or media from the system being audited via rsyslog.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Information stored in one location is vulnerable to accidental or incidental deletion or alteration.
-
-Offloading is a common process in information systems with limited audit storage capacity.
-
-OL 9 installation media provides "rsyslogd", a system utility providing support for message logging. Support for both internet and Unix domain sockets enables this utility to support both local and remote logging. Coupling this utility with "gnutls" (a secure communications library implementing the SSL, TLS, and DTLS protocols) creates a method to securely encrypt and offload auditing.
-
-Satisfies: SRG-OS-000342-GPOS-00133, SRG-OS-000479-GPOS-00224&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001851</xccdf:ident>
-          <xccdf:fixtext fixref="F-75813r1092279_fix">Configure OL 9 to use the gtls driver to encrypt offloaded audit records by setting the following options in "/etc/rsyslog.conf" or "/etc/rsyslog.d/[customfile].conf":
-
-$DefaultNetstreamDriver gtls</xccdf:fixtext>
-          <xccdf:fix id="F-75813r1092279_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271856" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271857">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271857r1092283_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-005030</xccdf:version>
-          <xccdf:title>OL 9 must be configured so that the rsyslog daemon does not accept log messages from other servers unless the server is being used for log aggregation.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Unintentionally running a rsyslog server accepting remote messages puts the system at increased risk. Malicious rsyslog messages sent to the server could exploit vulnerabilities in the server software itself, could introduce misleading information into the system's logs, or could fill the system's storage leading to a denial of service.
-
-If the system is intended to be a log aggregation server, its use must be documented with the information system security officer (ISSO).&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75814r1092282_fix">Configure OL 9 to not receive remote logs using rsyslog.
-
-Remove the lines in /etc/rsyslog.conf and any files in the /etc/rsyslog.d directory that match any of the following:
-
-$ModLoad imtcp
-$ModLoad imudp
-$ModLoad imrelp
-$InputTCPServerRun [0-9]*
-$UDPServerRun [0-9]*
-$InputRELPServerRun [0-9]*
-
-The rsyslog daemon must be restarted for the changes to take effect:
-
-$ sudo systemctl restart rsyslog.service</xccdf:fixtext>
-          <xccdf:fix id="F-75814r1092282_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271857" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271858">
-        <xccdf:title>SRG-OS-000420-GPOS-00186</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271858r1092286_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-006000</xccdf:version>
-          <xccdf:title>OL 9 must protect against or limit the effects of denial-of-service (DoS) attacks by ensuring rate-limiting measures on impacted network interfaces are implemented.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;DoS is a condition when a resource is not available for legitimate users. When this occurs, the organization either cannot accomplish its mission or must operate at degraded capacity.
-
-This requirement addresses the configuration of OL 9 to mitigate the impact of DoS attacks that have occurred or are ongoing on system availability. For each system, known and potential DoS attacks must be identified and solutions for each type implemented. A variety of technologies exists to limit or, in some cases, eliminate the effects of DoS attacks (e.g., limiting processes or establishing memory partitions). Employing increased capacity and bandwidth, combined with service redundancy, may reduce the susceptibility to some DoS attacks.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002385</xccdf:ident>
-          <xccdf:fixtext fixref="F-75815r1092285_fix">Configure "nftables" to be the default "firewallbackend" for "firewalld" by adding or editing the following line in "/etc/firewalld/firewalld.conf":
-
-FirewallBackend=nftables
-
-Establish rate-limiting rules based on organization-defined types of DoS attacks on impacted network interfaces.</xccdf:fixtext>
-          <xccdf:fix id="F-75815r1092285_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271858" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271860">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271860r1092292_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-006002</xccdf:version>
-          <xccdf:title>OL 9 must configure a DNS processing mode set be Network Manager.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;To ensure that DNS resolver settings are respected, a DNS mode in Network Manager must be configured.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75817r1092291_fix">Configure NetworkManager in OL 9 to use a DNS mode.
-
-In "/etc/NetworkManager/NetworkManager.conf" add the following line in the "[main]" section:
-
-dns = none
-
-NetworkManager must be reloaded for the change to take effect.
-
-$ sudo systemctl reload NetworkManager</xccdf:fixtext>
-          <xccdf:fix id="F-75817r1092291_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271860" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271861">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271861r1092295_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-006003</xccdf:version>
-          <xccdf:title>OL 9 systems using Domain Name Servers (DNS) resolution must have at least two name servers configured.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;To provide availability for name resolution services, multiple redundant name servers are mandated. A failure in name resolution could lead to the failure of security functions requiring name resolution, which may include time synchronization, centralized authentication, and remote system logging.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75818r1092294_fix">Configure the operating system to use two or more name servers for DNS resolution based on the DNS mode of the system.
-
-If the NetworkManager DNS mode is set to "none", then add the following lines to "/etc/resolv.conf":
-
-nameserver [name server 1]
-nameserver [name server 2]
-
-Replace [name server 1] and [name server 2] with the IPs of two different DNS resolvers.
-
-If the NetworkManager DNS mode is set to "default" then add two DNS servers to a NetworkManager connection. Using the following commands:
-
-$ sudo nmcli connection modify [connection name] ipv4.dns [name server 1]
-$ sudo nmcli connection modify [connection name] ipv4.dns [name server 2]
-
-Replace [name server 1] and [name server 2] with the IPs of two different DNS resolvers. Replace [connection name] with a valid NetworkManager connection name on the system. Replace ipv4 with ipv6 if IPv6 DNS servers are used.</xccdf:fixtext>
-          <xccdf:fix id="F-75818r1092294_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271861" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271862">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271862r1092298_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-006004</xccdf:version>
-          <xccdf:title>OL 9 network interfaces must not be in promiscuous mode.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Network interfaces in promiscuous mode allow for the capture of all network traffic visible to the system. If unauthorized individuals can access these applications, it may allow them to collect information such as logon IDs, passwords, and key exchanges between systems.
-
-If the system is being used to perform a network troubleshooting function, the use of these tools must be documented with the information systems security officer (ISSO) and restricted to only authorized personnel.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75819r1092297_fix">Configure network interfaces to turn off promiscuous mode unless approved by the ISSO and documented.
-
-Set the promiscuous mode of an interface to off with the following command:
-
-$ sudo ip link set dev &lt;devicename&gt; multicast off promisc off</xccdf:fixtext>
-          <xccdf:fix id="F-75819r1092297_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271862" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271864">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271864r1092304_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-006020</xccdf:version>
-          <xccdf:title>OL 9 must ignore Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirect messages.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
-
-This feature of the IPv4 protocol has few legitimate uses. It should be disabled unless absolutely required.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75821r1092303_fix">Configure OL 9 to ignore IPv4 ICMP redirect messages.
-
-Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
-
-net.ipv4.conf.all.accept_redirects = 0
-
-Load settings from all system configuration files with the following command:
-
-$ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-75821r1092303_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271864" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271865">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271865r1092307_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-006021</xccdf:version>
-          <xccdf:title>OL 9 must not forward Internet Protocol version 4 (IPv4) source-routed packets.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Source-routed packets allow the source of the packet to suggest routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when IPv4 forwarding is enabled and the system is functioning as a router.
-
-Accepting source-routed packets in the IPv4 protocol has few legitimate uses. It must be disabled unless it is absolutely required.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75822r1092306_fix">Configure OL 9 to ignore IPv4 source-routed packets.
-
-Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
-
-net.ipv4.conf.all.accept_source_route = 0
-
-Load settings from all system configuration files with the following command:
-
-$ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-75822r1092306_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271865" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271866">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271866r1092310_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-006022</xccdf:version>
-          <xccdf:title>OL 9 must log IPv4 packets with impossible addresses.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The presence of "martian" packets (which have impossible addresses) as well as spoofed packets, source-routed packets, and redirects could be a sign of nefarious network activity. Logging these packets enables this activity to be detected.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75823r1092309_fix">Configure OL 9 to log martian packets on IPv4 interfaces.
-
-Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
-
-net.ipv4.conf.all.log_martians=1
-
-Load settings from all system configuration files with the following command:
-
-$ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-75823r1092309_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271866" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271867">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271867r1092313_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-006023</xccdf:version>
-          <xccdf:title>OL 9 must log IPv4 packets with impossible addresses by default.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The presence of "martian" packets (which have impossible addresses) as well as spoofed packets, source-routed packets, and redirects could be a sign of nefarious network activity. Logging these packets enables this activity to be detected.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75824r1092312_fix">Configure OL 9 to log martian packets on IPv4 interfaces by default.
-
-Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
-
-net.ipv4.conf.default.log_martians=1
-
-Load settings from all system configuration files with the following command:
-
-$ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-75824r1092312_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271867" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271868">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271868r1092316_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-006024</xccdf:version>
-          <xccdf:title>OL 9 must use reverse path filtering on all IPv4 interfaces.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Enabling reverse path filtering drops packets with source addresses that should not have been able to be received on the interface on which they were received. It must not be used on systems that are routers for complicated networks but is helpful for end hosts and routers serving small networks.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75825r1092315_fix">Configure OL 9 to use reverse path filtering on all IPv4 interfaces. 
-
-Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
-
-net.ipv4.conf.all.rp_filter = 1
-
-The system configuration files need to be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
-
-$ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-75825r1092315_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271868" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271869">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271869r1092319_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-006025</xccdf:version>
-          <xccdf:title>OL 9 must prevent IPv4 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
-
-This feature of the IPv4 protocol has few legitimate uses. It must be disabled unless absolutely required.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75826r1092318_fix">Configure OL 9 to prevent IPv4 ICMP redirect messages from being accepted.
-
-Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
-
-net.ipv4.conf.default.accept_redirects = 0
-
-Load settings from all system configuration files with the following command:
-
-$ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-75826r1092318_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271869" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271870">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271870r1092322_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-006026</xccdf:version>
-          <xccdf:title>OL 9 must not forward IPv4 source-routed packets by default.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Source-routed packets allow the source of the packet to suggest routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures.
-
-Accepting source-routed packets in the IPv4 protocol has few legitimate uses. It must be disabled unless it is absolutely required, such as when IPv4 forwarding is enabled and the system is legitimately functioning as a router.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75827r1092321_fix">Configure OL 9 to not forward IPv4 source-routed packets by default.
-
-Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
-
-net.ipv4.conf.default.accept_source_route = 0
-
-Load settings from all system configuration files with the following command:
-
-$ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-75827r1092321_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271870" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271871">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271871r1092325_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-006027</xccdf:version>
-          <xccdf:title>OL 9 must use a reverse-path filter for IPv4 network traffic, when possible, by default.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Enabling reverse path filtering drops packets with source addresses that should not have been able to be received on the interface on which they were received. It must not be used on systems that are routers for complicated networks but is helpful for end hosts and routers serving small networks.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75828r1092324_fix">Configure OL 9 to use reverse path filtering on IPv4 interfaces by default.
-
-Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
-
-net.ipv4.conf.default.rp_filter = 1
-
-Load settings from all system configuration files with the following command:
-
-$ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-75828r1092324_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271871" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271872">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271872r1092328_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-006028</xccdf:version>
-          <xccdf:title>OL 9 must not enable IPv4 packet forwarding unless the system is a router.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Routing protocol daemons are typically used on routers to exchange network topology information with other routers. If this capability is used when not required, system network information may be unnecessarily transmitted across the network.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75829r1092327_fix">Configure OL 9 to not allow IPv4 packet forwarding unless the system is a router.
-
-Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
-
-net.ipv4.conf.all.forwarding = 0
-
-Load settings from all system configuration files with the following command:
-
-$ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-75829r1092327_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271872" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271873">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271873r1092331_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-006030</xccdf:version>
-          <xccdf:title>OL 9 must not respond to Internet Control Message Protocol (ICMP) echoes sent to a broadcast address.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Responding to broadcast (ICMP) echoes facilitates network mapping and provides a vector for amplification attacks.
-
-Ignoring ICMP echo requests (pings) sent to broadcast or multicast addresses makes the system slightly more difficult to enumerate on the network.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75830r1092330_fix">Configure OL 9 to not respond to IPv4 ICMP echoes sent to a broadcast address.
-
-Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
-
-net.ipv4.icmp_echo_ignore_broadcasts = 1
-
-Load settings from all system configuration files with the following command:
-
-$ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-75830r1092330_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271873" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271874">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271874r1092612_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-006031</xccdf:version>
-          <xccdf:title>OL 9 must limit the number of bogus Internet Control Message Protocol (ICMP) response errors logs.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Some routers will send responses to broadcast frames that violate RFC-1122, which fills up a log file system with many useless error messages. An attacker may take advantage of this and attempt to flood the logs with bogus error logs. Ignoring bogus ICMP error responses reduces log size, although some activity would not be logged.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75831r1092333_fix">Configure OL 9 to not log bogus ICMP errors: 
-
-Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
-
-net.ipv4.icmp_ignore_bogus_error_responses = 1
-
-Load settings from all system configuration files with the following command:
-
-$ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-75831r1092333_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271874" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271875">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271875r1092337_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-006032</xccdf:version>
-          <xccdf:title>OL 9 must not send Internet Control Message Protocol (ICMP) redirects.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages contain information from the system's route table possibly revealing portions of the network topology.
-
-The ability to send ICMP redirects is only appropriate for systems acting as routers.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75832r1092336_fix">Configure OL 9 to not allow interfaces to perform IPv4 ICMP redirects.
-
-Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
-
-net.ipv4.conf.all.send_redirects = 0
-
-Load settings from all system configuration files with the following command:
-
-$ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-75832r1092336_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271875" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271876">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271876r1092641_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-006033</xccdf:version>
-          <xccdf:title>OL 9 must not allow interfaces to perform Internet Control Message Protocol (ICMP) redirects by default.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages contain information from the system's route table possibly revealing portions of the network topology.
-
-The ability to send ICMP redirects is only appropriate for systems acting as routers.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75833r1092640_fix">Configure OL 9 to not allow interfaces to perform IPv4 ICMP redirects by default.
-
-Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
-
-net.ipv4.conf.default.send_redirects = 0
-
-Load settings from all system configuration files with the following command:
-
-$ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-75833r1092640_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271876" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271877">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271877r1092343_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-006040</xccdf:version>
-          <xccdf:title>OL 9 must not accept router advertisements on all IPv6 interfaces.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;An illicit router advertisement message could result in a man-in-the-middle attack.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxIPv6enabled" />
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75834r1092342_fix">Configure OL 9 to not accept router advertisements on all IPv6 interfaces unless the system is a router.
-
-Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
-
-net.ipv6.conf.all.accept_ra = 0
-
-Load settings from all system configuration files with the following command:
-
-$ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-75834r1092342_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271877" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271878">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271878r1092346_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-006041</xccdf:version>
-          <xccdf:title>OL 9 must ignore IPv6 Internet Control Message Protocol (ICMP) redirect messages.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;An illicit ICMP redirect message could result in a man-in-the-middle attack.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxIPv6enabled" />
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75835r1092345_fix">Configure OL 9 to ignore IPv6 ICMP redirect messages.
-
-Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
-
-net.ipv6.conf.all.accept_redirects = 0
-
-Load settings from all system configuration files with the following command:
-
-$ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-75835r1092345_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271878" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271879">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271879r1092349_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-006042</xccdf:version>
-          <xccdf:title>OL 9 must not forward IPv6 source-routed packets.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Source-routed packets allow the source of the packet to suggest that routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when forwarding is enabled and the system is functioning as a router.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxIPv6enabled" />
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75836r1092348_fix">Configure OL 9 to not forward IPv6 source-routed packets.
-
-Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
-
-net.ipv6.conf.all.accept_source_route = 0
-
-Load settings from all system configuration files with the following command:
-
-$ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-75836r1092348_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271879" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271880">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271880r1092352_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-006043</xccdf:version>
-          <xccdf:title>OL 9 must not enable IPv6 packet forwarding unless the system is a router.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;IP forwarding permits the kernel to forward packets from one network interface to another. The ability to forward packets between two networks is only appropriate for systems acting as routers.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxIPv6enabled" />
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75837r1092351_fix">Configure OL 9 to not allow IPv6 packet forwarding unless the system is a router.
-
-Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
-
-net.ipv6.conf.all.forwarding = 0
-
-Load settings from all system configuration files with the following command:
-
-$ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-75837r1092351_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271880" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271881">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271881r1092355_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-006044</xccdf:version>
-          <xccdf:title>OL 9 must not accept router advertisements on all IPv6 interfaces by default.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;An illicit router advertisement message could result in a man-in-the-middle attack.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxIPv6enabled" />
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75838r1092354_fix">Configure OL 9 to not accept router advertisements on all IPv6 interfaces by default unless the system is a router.
-
-Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
-
-net.ipv6.conf.default.accept_ra = 0
-
-Load settings from all system configuration files with the following command:
-
-$ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-75838r1092354_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271881" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271882">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271882r1092358_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-006045</xccdf:version>
-          <xccdf:title>OL 9 must prevent IPv6 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxIPv6enabled" />
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75839r1092357_fix">Configure OL 9 to prevent IPv6 ICMP redirect messages from being accepted.
-
-Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
-
-net.ipv6.conf.default.accept_redirects = 0
-
-Load settings from all system configuration files with the following command:
-
-$ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-75839r1092357_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271882" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271883">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271883r1092361_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-006046</xccdf:version>
-          <xccdf:title>OL 9 must not forward IPv6 source-routed packets by default.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Source-routed packets allow the source of the packet to suggest that routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when forwarding is enabled and the system is functioning as a router.
-
-Accepting source-routed packets in the IPv6 protocol has few legitimate uses. It must be disabled unless it is absolutely required.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxIPv6enabled" />
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-75840r1092360_fix">Configure OL 9 to not forward IPv6 source-routed packets by default.
-
-Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
-
-net.ipv6.conf.default.accept_source_route = 0
-
-Load settings from all system configuration files with the following command:
-
-$ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-75840r1092360_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271883" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271884">
-        <xccdf:title>SRG-OS-000420-GPOS-00186</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271884r1092364_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-006050</xccdf:version>
-          <xccdf:title>OL 9 must be configured to use TCP syncookies.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Denial of service (DoS) is a condition when a resource is not available for legitimate users. When this occurs, the organization either cannot accomplish its mission or must operate at degraded capacity. 
-
-Managing excess capacity ensures that sufficient capacity is available to counter flooding attacks. Employing increased capacity and service redundancy may reduce the susceptibility to some DoS attacks. Managing excess capacity may include, for example, establishing selected usage priorities, quotas, or partitioning.
-
-Satisfies: SRG-OS-000420-GPOS-00186, SRG-OS-000142-GPOS-00071&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002385</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001095</xccdf:ident>
-          <xccdf:fixtext fixref="F-75841r1092363_fix">Configure OL 9 to use TCP syncookies.
-
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
-
- net.ipv4.tcp_syncookies = 1
-
-Load settings from all system configuration files with the following command:
-
-$ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-75841r1092363_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271884" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271885">
-        <xccdf:title>SRG-OS-000462-GPOS-00206</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271885r1092367_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-008000</xccdf:version>
-          <xccdf:title>OL 9 audit system must protect logon UIDs from unauthorized change.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;If modification of login user identifiers (UIDs) is not prevented, they can be changed by nonprivileged users and make auditing complicated or impossible.
-
-Satisfies: SRG-OS-000462-GPOS-00206, SRG-OS-000475-GPOS-00220, SRG-OS-000057-GPOS-00027, SRG-OS-000058-GPOS-00028, SRG-OS-000059-GPOS-00029&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000162</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000163</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000164</xccdf:ident>
-          <xccdf:fixtext fixref="F-75842r1092366_fix">Configure OL 9 auditing to prevent modification of login UIDs once they are set by adding the following line to /etc/audit/rules.d/audit.rules:
-
---loginuid-immutable
-
-The audit daemon must be restarted for the changes to take effect.
-
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75842r1092366_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271885" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271886">
-        <xccdf:title>SRG-OS-000057-GPOS-00027</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271886r1092370_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-008005</xccdf:version>
-          <xccdf:title>OL 9 audit system must protect auditing rules from unauthorized change.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Unauthorized disclosure of audit records can reveal system and configuration data to attackers, thus compromising its confidentiality.
-
-Audit information includes all information (e.g., audit records, audit settings, audit reports) needed to successfully audit OL 9 system activity.
-
-In immutable mode, unauthorized users cannot execute changes to the audit system to potentially hide malicious activity and then put the audit rules back. A system reboot would be noticeable, and a system administrator could then investigate the unauthorized changes.
-
-Satisfies: SRG-OS-000057-GPOS-00027, SRG-OS-000058-GPOS-00028, SRG-OS-000059-GPOS-00029&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000162</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000163</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000164</xccdf:ident>
-          <xccdf:fixtext fixref="F-75843r1092369_fix">Configure the audit system to set the audit rules to be immutable by adding the following line to end of "/etc/audit/rules.d/audit.rules"
-
--e 2
-
-The audit daemon must be restarted for the changes to take effect.
-
-$ sudo service auditd restart</xccdf:fixtext>
-          <xccdf:fix id="F-75843r1092369_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271886" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-278952">
-        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-278952r1135407_rule" severity="medium" weight="10.0">
-          <xccdf:version>OL09-00-002584</xccdf:version>
-          <xccdf:title>OL 9 must audit any script or executable called by cron as root or by any privileged user.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Any script or executable called by cron as root or by any privileged user must be owned by that user, must have the permissions 0755 or more restrictive, and should have no extended rights that allow any nonprivileged user to modify the script or executable.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Oracle Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Oracle Linux 9</dc:subject>
-            <dc:identifier>5680</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
-          <xccdf:fixtext fixref="F-83391r1135405_fix">Configure OL 9 to audit the execution of any system call made by cron as root or as any privileged user.
-
-Add or update the following file system rules to "/etc/audit/rules.d/audit.rules":
-
-auditctl -w /etc/cron.d/ -p wa -k cronjobs
-auditctl -w /var/spool/cron/ -p wa -k cronjobs
-
-To load the rules to the kernel immediately, use the following command:
-
-$ sudo augenrules --load</xccdf:fixtext>
-          <xccdf:fix id="F-83391r1135405_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:278952" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-    </xccdf:Benchmark>
-  </component>
-  <component id="scap_mil.disa.stig_comp_U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-oval.xml" timestamp="2025-10-14T13:53:34.874-04:00">
-    <oval_definitions xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5">
-      <generator>
-        <oval:product_name>Security Content Tool 1.6.0</oval:product_name>
-        <oval:schema_version>5.11</oval:schema_version>
-        <oval:timestamp>2025-10-14T01:53:34</oval:timestamp>
-      </generator>
-      <definitions>
-        <definition id="oval:mil.disa.stig.defs:def:204417" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must be configured so that user and group account administration utilities are configured to store only encrypted representations of passwords.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:20441700" comment="libuser.conf, defaults/crypt_style exists" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:20441701" comment="libuser.conf, crypt_style = sha512" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:204626" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must be configured so that the Network File System (NFS) is configured to use RPCSEC_GSS.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25785300" comment="NFS mounts have the sec option" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25785301" comment="NFS mounts have one or more sec=krb5p:krb5i:krb5 options" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25785302" comment="NFS mounts do not have the sec=sys option" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230231" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must encrypt all stored passwords with a FIPS 140-2 approved cryptographic hashing algorithm.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23023100" comment="/etc/login.defs:ENCRYPT_METHOD &gt;= SHA512" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230232" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must employ FIPS 140-2 approved cryptographic hashing algorithms for all stored passwords.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23023200" comment="No active password hash in /etc/shadow has a prefix other than '$6$'." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230233" version="4" class="compliance">
-          <metadata>
-            <title>The operating system shadow password suite must be configured to use a sufficient number of hashing rounds.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23023300" comment="/etc/login.defs: SHA_CRYPT_MIN_ROUNDS, if set, is set to 100000 or greater" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23023301" comment="/etc/login.defs: SHA_CRYPT_MAX_ROUNDS, if set, is set to 100000 or greater" />
-            <criteria operator="OR">
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:23023302" comment="/etc/login.defs: SHA_CRYPT_MIN_ROUNDS is set" />
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:23023303" comment="/etc/login.defs: SHA_CRYPT_MAX_ROUNDS is set" />
-            </criteria>
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230237" version="1" class="compliance">
-          <metadata>
-            <title>The operating system pam_unix.so module must be configured in the password-auth file to use a FIPS 140-2 approved cryptographic hashing algorithm for system authentication.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23023700" comment="/etc/pam.d/password-auth:password includes pam_unix.so sha512" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230240" version="3" class="compliance">
-          <metadata>
-            <title>The operating system must use a Linux Security Module configured to enforce limits on system services.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23024000" comment="selinux is active" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23024000" comment="selinux is enforcing" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23024001" comment="/etc/selinux/config:SELINUX=enforcing" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230241" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must have policycoreutils package installed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23024100" comment="package policycoreutils is installed" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230245" version="1" class="compliance">
-          <metadata>
-            <title>The operating system /var/log/messages file must have mode 0640 or less permissive.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23024500" comment="/var/log/messages file has mode 0640 or less permissive" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230246" version="1" class="compliance">
-          <metadata>
-            <title>The operating system /var/log/messages file must be owned by root.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23024600" comment="/var/log/messages file is owned by root" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230247" version="1" class="compliance">
-          <metadata>
-            <title>The operating system /var/log/messages file must be group-owned by root.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23024700" comment="/var/log/messages file is owned by root" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230248" version="1" class="compliance">
-          <metadata>
-            <title>The operating system /var/log directory must have mode 0755 or less permissive.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23024800" comment="/var/log directory has mode 0755 or less permissive." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230249" version="1" class="compliance">
-          <metadata>
-            <title>The operating system /var/log directory must be owned by root.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23024900" comment="/var/log directory is owned by root" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230250" version="1" class="compliance">
-          <metadata>
-            <title>The operating system /var/log directory must be group-owned by root.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23025000" comment="/var/log directory is group-owned by root." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230261" version="1" class="compliance">
-          <metadata>
-            <title>The operating system library files must be owned by root.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23026100" comment="The operating system library files are owned by root" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230262" version="2" class="compliance">
-          <metadata>
-            <title>The operating system library files must be group-owned by root or a system account.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23026200" comment="All system-wide library files must be group-owned by root" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230264" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must prevent the installation of software, patches, service packs, device drivers, or operating system components from a repository without verification they have been digitally signed using a certificate that is issued by a Certificate Authority (CA) that is recognized and approved by the organization.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23026400" comment="Every /etc/yum.repos.d/*.repo:[{reponame}] has a gpgcheck entry set to 1." />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23026401" comment="No /etc/yum.repos.d/*.repo:[{reponame}] has a gpgcheck entry set to 0." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230265" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must prevent the installation of software, patches, service packs, device drivers, or operating system components of local packages without verification they have been digitally signed using a certificate that is issued by a Certificate Authority (CA) that is recognized and approved by the organization.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23026500" comment="/etc/dnf/dnf.conf: localpkg_gpgcheck is set to True, 1, or yes." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230266" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must prevent the loading of a new kernel for later execution.</title>
-            <description />
-          </metadata>
-          <criteria operator="AND">
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23026600" comment="kernel.kexec_load_disabled setting in kernel is 1" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23026601" comment="kernel.kexec_load_disabled setting in sysctl configuration files is set to 1, and nothing else" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230268" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must enable kernel parameters to enforce discretionary access control on hardlinks.</title>
-            <description />
-          </metadata>
-          <criteria operator="AND">
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23026800" comment="fs.protected_hardlinks setting in kernel is 1" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23026801" comment="fs.protected_hardlinks setting in sysctl configuration files is set to 1, and nothing else, and there are no conflicting settings in other files" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230269" version="3" class="compliance">
-          <metadata>
-            <title>The operating system must restrict access to the kernel message buffer.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23026900" comment="kernel.dmesg_restrict setting in kernel is 1" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23026900" comment="kernel.dmesg_restrict setting in sysctl configuration files is set to 1" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230270" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must prevent kernel profiling by unprivileged users.</title>
-            <description />
-          </metadata>
-          <criteria operator="AND">
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23027000" comment="kernel.perf_event_paranoid setting in kernel is 2" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23027001" comment="kernel.perf_event_paranoid setting in sysctl configuration files is set to 2, and nothing else, and there are no conflicting settings in other files" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230271" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must require users to provide a password for privilege escalation.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23027100" comment="'NOPASSWD' does not exist in /etc/sudoers" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23027101" comment="'NOPASSWD' does not exist in /etc/sudoers.d" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230273" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must have the packages required for multifactor authentication installed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23027300" comment="package openssl-pkcs11 is installed" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230277" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must clear the page allocator to prevent use-after-free attacks.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25779300" comment="BLS options contain page_poison=1" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25779301" comment="/etc/default/grub page_poison=1" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230278" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must disable virtual syscalls.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23027800" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23027801" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230280" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must implement address space layout randomization (ASLR) to protect its memory from unauthorized code execution.</title>
-            <description />
-          </metadata>
-          <criteria operator="AND">
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23028000" comment="kernel.randomize_va_space setting in kernel is 2" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23028000" comment="kernel.randomize_va_space setting in sysctl configuration files is set to 2" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230281" version="1" class="compliance">
-          <metadata>
-            <title>YUM must remove all software components after updated versions have been installed on the operating system.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23028100" comment="/etc/dnf/dnf.conf: clean_requirements_on_remove is set to True, 1 or yes" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230282" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must enable the SELinux targeted policy.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23024000" comment="selinux is active" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23028200" comment="/etc/selinux/config: SELINUXTYPE=targeted" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230283" version="1" class="compliance">
-          <metadata>
-            <title>There must be no shosts.equiv files on the operating system operating system.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23028300" comment="There must be no shosts.equiv files on the system." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230284" version="1" class="compliance">
-          <metadata>
-            <title>There must be no .shosts files on the operating system operating system.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23028400" comment="There are no .shosts files on the system." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230286" version="1" class="compliance">
-          <metadata>
-            <title>The operating system SSH public host key files must have mode 0644 or less permissive.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23028600" comment="The SSH daemon public host key files have mode 0644 or less permissive" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230287" version="1" class="compliance">
-          <metadata>
-            <title>The operating system SSH private host key files must have mode 0640 or less permissive.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23028700" comment="SSH private key files mode 640 or less permissive" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230288" version="2" class="compliance">
-          <metadata>
-            <title>The operating system SSH daemon must perform strict mode checking of home directory configuration files.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23028800" comment="/etc/ssh/sshd_config or /etc/ssh/sshd_config.d/*:StrictModes == yes" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230292" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must use a separate file system for /var.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23029200" comment="There is a separate file system for /var" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23029201" comment="There is a separate file system configured for /var" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230294" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must use a separate file system for the system audit data path.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23029400" comment="There is a separate file system for audit data directory." />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23029401" comment="There is a separate file system configured for audit data directory." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230295" version="2" class="compliance">
-          <metadata>
-            <title>A separate the operating system filesystem must be used for the /tmp directory.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23029500" comment="There is a separate file system for /tmp." />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23029500" comment="There is a separate file system configured for /tmp." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230296" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must not permit direct logons to the root account using remote access via SSH.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23029600" comment="/etc/ssh/sshd_config:PermitRootLogin == no" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230299" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must prevent files with the setuid and setgid bit set from being executed on file systems that contain user home directories.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23029900" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230300" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must prevent files with the setuid and setgid bit set from being executed on the /boot directory.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23030000" comment="/boot is mounted an configured with the nosuid option." />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23030001" comment="If /boot is configured in /etc/fstab it is with the nosuid option." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230301" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must prevent special devices on non-root local partitions.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23030100" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23030101" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230306" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must prevent code from being executed on file systems that are imported via Network File System (NFS).</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23030600" comment="remote nfs filesystems in /etc/fstab have noexec" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23030601" comment="actual nfs mounts have noexec" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230307" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must prevent special devices on file systems that are imported via Network File System (NFS).</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25785401" comment="nfs mounts have nodev option" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230308" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must prevent files with the setuid and setgid bit set from being executed on file systems that are imported via Network File System (NFS).</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23030800" comment="remote nfs filesystems in /etc/fstab have nosuid" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230310" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must disable kernel dumps unless needed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23031000" />
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23031001" />
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23031002" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230311" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must disable the kernel.core_pattern.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23031100" comment="kernel.core_pattern setting in kernel is |/bin/false" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23031100" comment="kernel.core_pattern setting in sysctl configuration files is set to |/bin/false" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230312" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must disable acquiring, saving, and processing core dumps.</title>
-            <description />
-          </metadata>
-          <criteria operator="AND">
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23031200" comment="systemd-coredump.socket LoadState is masked if exists" />
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23031201" comment="systemd-coredump.socket UnitFileState is masked if exists" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230313" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must disable core dumps for all users.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23031300" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23031301" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230314" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must disable storing core dumps.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23031400" comment="/usr/systemd/coredump.conf:Storage is set to none." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230315" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must disable core dump backtraces.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23031500" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230316" version="2" class="compliance">
-          <metadata>
-            <title>For Systems using Domain Name Servers (DNS) resolution, at least two name servers must be configured.</title>
-            <description />
-          </metadata>
-          <criteria operator="OR">
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23031600" negate="true" comment="The system is not using DNS" />
-            <criteria operator="AND">
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:23031600" comment="The system is using DNS" />
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:23031602" comment="/etc/resolv.conf contains at least one nameserver entry" />
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:23031601" comment="/etc/resolv.conf is configured with at least two name servers" />
-            </criteria>
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230324" version="1" class="compliance">
-          <metadata>
-            <title>All the operating system local interactive user accounts must be assigned a home directory upon creation.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23032400" comment="All local interactive user accounts are assigned a home directory upon creation" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230325" version="1" class="compliance">
-          <metadata>
-            <title>All the operating system local initialization files must have mode 0740 or less permissive.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23032500" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23032501" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230328" version="1" class="compliance">
-          <metadata>
-            <title>A separate operating system filesystem must be used for user home directories (such as /home or an equivalent).</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23032800" comment="A separate operating system filesystem is used for user home directories" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230329" version="1" class="compliance">
-          <metadata>
-            <title>Unattended or automatic logon via the operating system graphical user interface must not be allowed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23032900" comment="AutomaticLoginEnable is set to false" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230333" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must automatically lock an account when three unsuccessful logon attempts occur.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23033300" comment="deny is set to 3 or less but not 0 in /etc/security/faillock.conf" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230335" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must automatically lock an account when three unsuccessful logon attempts occur during a 15-minute time period.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23033500" comment="/etc/security/faillock.conf:fail_interval &lt;=900 and !=0" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230337" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must automatically lock an account until the locked account is released by an administrator when three unsuccessful logon attempts occur during a 15-minute time period.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23033700" comment="unlock_time is set to 0 in /etc/security/faillock.conf" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230339" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must ensure account lockouts persist</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23033900" comment="/etc/security/faillock.conf: dir = var/log/faillock" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230343" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must log user name information when unsuccessful logon attempts occur.</title>
-            <description />
-          </metadata>
-          <criteria comment="/etc/security/faillock.conf has audit configured">
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23034300" comment="audit is set in /etc/security/faillock.conf" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230345" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must include root when automatically locking an account until the locked account is released by an administrator when three unsuccessful logon attempts occur during a 15-minute time period.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:230345" comment="check /etc/security/faillock.conf for the even_deny_root setting" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230346" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must limit the number of concurrent sessions to ten for all accounts and/or account types.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23034600" comment="limits.conf and limits.d/*.conf:maxlogins is set to 10 or less by default" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23034601" comment="limits.conf and limits.d/*.conf:maxlogins is set to 10 or less for non-default domains" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230351" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must be able to initiate directly a session lock for all connection types using smartcard when the smartcard is removed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23035100" comment="/proc/sys/crypto/fips_enabled is set to 1" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230356" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must ensure the password complexity module is enabled in the password-auth file.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23035600" comment="The pam_pwquality module is included in password-auth." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230357" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must enforce password complexity by requiring that at least one uppercase character be used.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23035700" comment="at least one uppercase character is required" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230358" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must enforce password complexity by requiring that at least one lower-case character be used.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23035800" comment="at least one lowercase character is required" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230359" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must enforce password complexity by requiring that at least one numeric character be used.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23035900" comment="at least one numeric character is required" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230360" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must require the maximum number of repeating characters of the same character class be limited to four when passwords are changed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23036000" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230361" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must require the maximum number of repeating characters be limited to three when passwords are changed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23036100" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230362" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must require the change of at least four character classes when passwords are changed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23036200" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230363" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must require the change of at least 8 characters when passwords are changed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23036300" comment="at least 8 characters must change when passwords are changed" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230364" version="1" class="compliance">
-          <metadata>
-            <title>The operating system passwords must have a 24 hours/1 day minimum password lifetime restriction in /etc/shadow.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23036400" comment="Root does not have a minimum password age of 0 or blank" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23036401" comment="Non-system users do not have a minimum password age of 0 or blank" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230365" version="1" class="compliance">
-          <metadata>
-            <title>The operating system passwords for new users or password changes must have a 24 hours/1 day minimum password lifetime restriction in /etc/login.defs.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23036500" comment="/etc/login.defs:PASS_MIN_DAYS &gt;= 1" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230367" version="1" class="compliance">
-          <metadata>
-            <title>The operating system user account passwords must be configured so that existing passwords are restricted to a 60-day maximum lifetime.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23036700" comment="No password in /etc/shadow has a maximum password age of 0 or greater than 60" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23036701" comment="Root password in /etc/shadow does not have a maximum password age of 0 or greater than 60" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230369" version="1" class="compliance">
-          <metadata>
-            <title>The operating system passwords must have a minimum of 15 characters.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23036900" comment="passwords must have a minimum of 15 characters" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230373" version="1" class="compliance">
-          <metadata>
-            <title>The operating system account identifiers (individuals, groups, roles, and devices) must be disabled after 35 days of inactivity.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23037300" comment="/etc/default/useradd: INACTIVE is set to 35 or less, but not -1" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230375" version="1" class="compliance">
-          <metadata>
-            <title>All the operating system passwords must contain at least one special character.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23037500" comment="Passwords contain at least one special character" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230376" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must prohibit the use of cached authentications after one day.</title>
-            <description />
-          </metadata>
-          <criteria operator="OR">
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23037600" comment="/etc/sssd/sssd.conf:cache_credentials = true does not exist" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23037602" comment="/etc/sssd/sssd.conf:offline_credentials_expiration = 1" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230377" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must prevent the use of dictionary words for passwords.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23037700" comment="passwords must not be dictionary words" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230378" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must enforce a delay of at least four seconds between logon prompts following a failed logon attempt.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23037800" comment="/etc/login.defs: FAIL_DELAY = 4 or greater" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230383" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must define default permissions for all authenticated users in such a way that the user can only read and modify their own files.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23038300" comment="/etc/login.defs:UMASK == 077" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230386" version="1" class="compliance">
-          <metadata>
-            <title>The operating system audit system must be configured to audit the execution of privileged functions and prevent all software from executing at higher privilege levels than users executing the software.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23038600" comment="Audit 32-bit invocations of execve syscall comparing uids" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23038601" comment="Audit 64-bit invocations of execve syscall comparing uids" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23038602" comment="Audit 32-bit invocations of execve syscall comparing gids" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23038603" comment="Audit 64-bit invocations of execve syscall comparing gids" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230388" version="1" class="compliance">
-          <metadata>
-            <title>The operating system System Administrator (SA) and Information System Security Officer (ISSO) (at a minimum) must be alerted of an audit processing failure event.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23038800" comment="/etc/audit/auditd.conf: action_mail_acct = root" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230389" version="1" class="compliance">
-          <metadata>
-            <title>The operating system Information System Security Officer (ISSO) and System Administrator (SA) (at a minimum) must have mail aliases to be notified of an audit processing failure.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23038900" comment="/etc/aliases contains 'postmaster: root'" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230390" version="1" class="compliance">
-          <metadata>
-            <title>The operating system System must take appropriate action when an audit processing failure occurs.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23039000" comment="/etc/audit/auditd.conf: disk_error_action = SYSLOG, SINGLE, or HALT" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230392" version="1" class="compliance">
-          <metadata>
-            <title>The operating system audit system must take appropriate action when the audit storage volume is full.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23039200" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230393" version="1" class="compliance">
-          <metadata>
-            <title>The operating system audit system must audit local events.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23039300" comment="/etc/audit/auditd.conf: local_events = yes" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230394" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must label all off-loaded audit logs before sending them to the central log server.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23039400" comment="/etc/audit/auditd.conf: name_format = hostname, fqd or numeric" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230395" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must resolve audit information before writing to disk.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23039500" comment="/etc/audit/auditd.conf: log_format = enriched" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230396" version="1" class="compliance">
-          <metadata>
-            <title>The operating system audit logs must have a mode of 0600 or less permissive to prevent unauthorized read access.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23039600" comment="Audit log is mode 0600 or less permissive" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230398" version="1" class="compliance">
-          <metadata>
-            <title>The operating system audit logs must be group-owned by root to prevent unauthorized read access.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23039800" comment="audit logs are group-owned by root" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230399" version="1" class="compliance">
-          <metadata>
-            <title>The operating system audit log directory must be owned by root to prevent unauthorized read access.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23039900" comment="audit log directories are owned by root" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230402" version="1" class="compliance">
-          <metadata>
-            <title>The operating system audit system must protect auditing rules from unauthorized change.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23040200" comment="/etc/audit/audit.rules: -e 2 option is present and is the last line in the file" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230403" version="1" class="compliance">
-          <metadata>
-            <title>The operating system audit system must protect logon UIDs from unauthorized change.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23040300" comment="/etc/audit/audit.rules: --loginuid-immutable option is present" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230404" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/shadow.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23040400" comment="Events resulting in modifications to /etc/shadow are audited" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230405" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/security/opasswd.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23040500" comment="Audit modifications to /etc/security/opasswd" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230406" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/passwd.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23040600" comment="Audit modifications to /etc/passwd" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230407" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/gshadow.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23040700" comment="Audit modifications to /etc/gshadow" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230408" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/group.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23040800" comment="Audit modifications to /etc/group" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230409" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/sudoers.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23040900" comment="Audit modifications to /etc/sudoers" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230410" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/sudoers.d/.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23041000" comment="Audit modifications to /etc/sudoers.d/" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230411" version="1" class="compliance">
-          <metadata>
-            <title>The operating system audit package must be installed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23041100" comment="package audit is installed" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230412" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the su command in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23041200" comment="Audit invocations of /usr/bin/su" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230413" version="1" class="compliance">
-          <metadata>
-            <title>The operating system audit system must be configured to audit any usage of the setxattr, fsetxattr, lsetxattr, removexattr, fremovexattr, and lremovexattr system calls.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:253034" comment="Audit fsetxattr" />
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:253035" comment="Audit lsetxattr" />
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:253036" comment="Audit fremovexattr" />
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:253037" comment="Audit lremovexattr" />
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:253038" comment="Audit removexattr" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23041300" comment="Audit 32-bit invocations of setxattr syscall (auid&gt;=1000)" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23041301" comment="Audit 64-bit invocations of setxattr syscall (auid&gt;=1000)" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23041302" comment="Audit 32-bit invocations of setxattr syscall (auid=0)" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23041303" comment="Audit 64-bit invocations of setxattr syscall (auid=0)" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230418" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the chage command in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23041800" comment="Audit invocations of /usr/bin/chage" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230419" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the chcon command in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23041900" comment="Audit invocations of /usr/bin/chcon" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230421" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the ssh-agent in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23042100" comment="Audit invocations of /usr/bin/ssh-agent" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230422" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the passwd command in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23042200" comment="Audit invocations of /usr/bin/passwd" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230423" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the mount command in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23042300" comment="Audit executions of /usr/bin/mount" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230424" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the umount command in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23042400" comment="Audit invocations of /usr/bin/umount" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230426" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the unix_update in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23042600" comment="Audit invocations of /usr/sbin/unix_update" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230427" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of postdrop in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23042700" comment="Audit invocations of /usr/sbin/postdrop" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230428" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of postqueue in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23042800" comment="Audit invocations of /usr/sbin/postqueue" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230429" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of semanage in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23042900" comment="Audit invocations of /usr/sbin/semanage" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230430" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of setfiles in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23043000" comment="Audit invocations of /usr/sbin/setfiles" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230431" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of userhelper in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23043100" comment="Audit invocations of /usr/sbin/userhelper" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230432" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of setsebool in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23043200" comment="Audit invocations of /usr/sbin/setsebool" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230433" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of unix_chkpwd in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23043300" comment="Audit invocations of /usr/sbin/unix_chkpwd" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230434" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the ssh-keysign in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23043400" comment="Audit invocations of /usr/libexec/openssh/ssh-keysign" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230435" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the setfacl command in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23043500" comment="Audit invocations of /usr/bin/setfacl" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230436" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the pam_timestamp_check command in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23043600" comment="Audit invocations of /usr/sbin/pam_timestamp_check" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230437" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the newgrp command in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23043700" comment="Audit invocations of /usr/bin/newgrp" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230438" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the init_module and finit_module system calls in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23043800" comment="Audit 32-bit invocations of init_module syscall" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23043801" comment="Audit 64-bit invocations of init_module syscall" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23043802" comment="Audit 32-bit invocations of finit_module syscall" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23043803" comment="Audit 64-bit invocations of finit_module syscall" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230439" version="2" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the rename, unlink, rmdir, renameat, and unlinkat system calls in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:252997" />
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:252998" />
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:248774" />
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:253000" />
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:253001" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230444" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the gpasswd command in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044400" comment="Audit invocations of /usr/bin/gpasswd" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230446" version="2" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the delete_module command in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044600" comment="Audit 32-bit invocations of delete_module syscall" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044601" comment="Audit 64-bit invocations of delete_module syscall" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230447" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the crontab command in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044700" comment="Audit invocations of /usr/bin/crontab" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230448" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the chsh command in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044800" comment="Audit invocations of /usr/bin/chsh" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230449" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the truncate, ftruncate, creat, open, openat, and open_by_handle_at system calls in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044900" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044901" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044902" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044903" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044904" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044905" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044906" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044907" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044908" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044909" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044910" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044911" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044912" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044913" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044914" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044915" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044916" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044917" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044918" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044919" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044920" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044921" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044922" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044923" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230455" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the chown, fchown, fchownat, and lchown system calls in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23045500" comment="Audit 32-bit invocations of chown syscall" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23045501" comment="Audit 64-bit invocations of chown syscall" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23045502" comment="Audit 32-bit invocations of lchown syscall" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23045503" comment="Audit 64-bit invocations of lchown syscall" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23045504" comment="Audit 32-bit invocations of fchownat syscall" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23045505" comment="Audit 64-bit invocations of fchownat syscall" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23045506" comment="Audit 32-bit invocations of fchown syscall" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23045507" comment="Audit 64-bit invocations of fchown syscall" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230456" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the chmod, fchmod, and fchmodat system calls in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23045600" comment="Audit 32-bit invocations of chmod syscall" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23045601" comment="Audit 64-bit invocations of chmod syscall" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23045602" comment="Audit 32-bit invocations of fchmod syscall" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23045603" comment="Audit 64-bit invocations of fchmod syscall" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23045604" comment="Audit 32-bit invocations of fchmodat syscall" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23045605" comment="Audit 64-bit invocations of fchmodat syscall" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230462" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the sudo command in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23046200" comment="Invocations of /usr/bin/sudo are audited" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230463" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the usermod command in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23046300" comment="Audit invocations of /usr/sbin/usermod" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230464" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the chacl command in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23046400" comment="Audit invocations of /usr/bin/chacl" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230465" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the kmod command in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23046500" comment="Audit invocations of /usr/bin/kmod" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230467" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful modifications to the lastlog file in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23046700" comment="Audit modifications to /var/log/lastlog" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230468" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must enable auditing of processes that start prior to the audit daemon.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23046800" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23046801" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230469" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must allocate an audit_backlog_limit of sufficient size to capture processes that start prior to the audit daemon.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23046900" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23046901" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230470" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must enable Linux audit logging for the USBGuard daemon.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23047000" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230471" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must allow only the Information System Security Manager (ISSM) (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23047100" comment="/etc/audit/auditd.conf has mode 0640 or less permissive" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23047101" comment=".rules files in /etc/audit/rules.d have mode 0640 or less permissive" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230472" version="1" class="compliance">
-          <metadata>
-            <title>The operating system audit tools must have a mode of 0755 or less permissive.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23047200" comment="audit tools have a mode of 0755 or less permissive." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230473" version="1" class="compliance">
-          <metadata>
-            <title>The operating system audit tools must be owned by root.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23047300" comment="audit tools are owned by root" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230474" version="1" class="compliance">
-          <metadata>
-            <title>The operating system audit tools must be group-owned by root.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23047400" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230475" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must use cryptographic mechanisms to protect the integrity of audit tools.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23047500" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23047501" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23047502" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23047503" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23047504" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23047505" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230477" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must have the packages required for offloading audit logs installed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23047700" comment="The rsyslog package is installed." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230478" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must have the packages required for encrypting offloaded audit logs installed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23047800" comment="package rsyslog-gnutls is installed" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230480" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must take appropriate action when the internal event queue is full.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23048000" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230483" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must take action when allocated audit record storage volume reaches 75 percent of the repository maximum audit record storage capacity.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23048300" comment="/etc/audit/auditd.conf: space_left greater than or equal to 25%" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23048301" comment="/etc/audit/auditd.conf: space_left less than 100%" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230485" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must disable the chrony daemon from acting as a server.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23048500" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230486" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must disable network management of the chrony daemon.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23048600" comment="/etc/chrony.conf: cmdport option is set to 0" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230487" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must not have the telnet-server package installed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23048700" comment="package telnet-server is not installed" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230489" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must not have the sendmail package installed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23048900" comment="package sendmail is not installed" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230491" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must enable mitigations against processor-based vulnerabilities.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23049100" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23049101" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230497" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must disable the transparent inter-process communication (TIPC) protocol.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23049700" comment="/etc/modprobe.d contains a file that contains 'install tipc /bin/false'" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23049701" comment="/etc/modprobe.d contains a file that contains 'blacklist tipc'" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230498" version="3" class="compliance">
-          <metadata>
-            <title>The operating system must disable mounting of cramfs.</title>
-            <description />
-          </metadata>
-          <criteria operator="OR">
-            <criteria>
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:23049800" comment="/etc/modprobe.d contains a file that contains 'install cramfs /bin/false'" />
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:23049801" comment="/etc/modprobe.d contains a file that contains 'blacklist cramfs'" />
-            </criteria>
-            <criteria>
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:23049802" comment="/etc/modprobe.conf contains 'install cramfs /bin/false'" />
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:23049803" comment="/etc/modprobe.conf contains 'blacklist cramfs'" />
-            </criteria>
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230502" version="2" class="compliance">
-          <metadata>
-            <title>The operating system file system automounter must be disabled unless required.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23050200" comment="The autofs.service is inactive if it exists." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230503" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must be configured to disable USB mass storage.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23050300" comment="/etc/modprobe.d contains a file that contains 'install usb-storage /bin/false'" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23050301" comment="/etc/modprobe.d contains a file that contains 'blacklist usb-storage'" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230505" version="1" class="compliance">
-          <metadata>
-            <title>A firewall must be installed on the operating system.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23050500" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230507" version="1" class="compliance">
-          <metadata>
-            <title>The operating system Bluetooth must be disabled.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23050700" comment="/etc/modprobe.d contains a file that contains 'install bluetooth /bin/false'" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23050701" comment="/etc/modprobe.d contains a file that contains 'blacklist bluetooth'" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230508" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must mount /dev/shm with the nodev option.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23050800" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23050800" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230509" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must mount /dev/shm with the nosuid option.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23050900" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23050900" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230510" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must mount /dev/shm with the noexec option.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23051000" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23051001" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230511" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must mount /tmp with the nodev option.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23051100" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23051101" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23051102" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230512" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must mount /tmp with the nosuid option.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23051200" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23051201" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230514" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must mount /var/log with the nodev option.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23051400" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23051401" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23051402" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230515" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must mount /var/log with the nosuid option.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23051500" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23051501" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23051502" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230516" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must mount /var/log with the noexec option.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23051600" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23051600" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23051601" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230517" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must mount /var/log/audit with the nodev option.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23051700" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23051701" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23051702" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230518" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must mount /var/log/audit with the nosuid option.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23051800" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23051800" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230519" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must mount /var/log/audit with the noexec option.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23051900" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23051901" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230520" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must mount /var/tmp with the nodev option.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23052000" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23052001" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230521" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must mount /var/tmp with the nosuid option.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23052100" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23052101" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230522" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must mount /var/tmp with the noexec option.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23052200" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230525" version="1" class="compliance">
-          <metadata>
-            <title>A firewall must be able to protect against or limit the effects of Denial of Service (DoS) attacks by ensuring the operating system can implement rate-limiting measures on impacted network interfaces.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23052500" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230527" version="3" class="compliance">
-          <metadata>
-            <title>The operating system must force a frequent session key renegotiation for SSH connections to the server.</title>
-            <description />
-          </metadata>
-          <criteria operator="OR">
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23052700" comment="/etc/ssh/sshd_config:RekeyLimit maximum data and time are greater than zero." />
-            <criteria operator="AND">
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:25798801" comment="sshd_config includes sshd_config.d" />
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:23052701" comment="/etc/ssh/sshd_config.d:RekeyLimit maximum data and time are greater than zero." />
-            </criteria>
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230529" version="1" class="compliance">
-          <metadata>
-            <title>The x86 Ctrl-Alt-Delete key sequence must be disabled on the operating system.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23052900" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230531" version="2" class="compliance">
-          <metadata>
-            <title>The systemd Ctrl-Alt-Delete burst key sequence in the operating system must be disabled.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23053100" comment="/etc/systemd/system.conf:CtrlAltDelBurstAction is set to none." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230532" version="5" class="compliance">
-          <metadata>
-            <title>The debug-shell systemd service must be disabled on the operating system.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23053200" comment="debug-shell.service is masked" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230533" version="1" class="compliance">
-          <metadata>
-            <title>The Trivial File Transfer Protocol (TFTP) server package must not be installed if not required for the operating system operational support.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23053300" comment="The tftp-server package is absent." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230534" version="1" class="compliance">
-          <metadata>
-            <title>The root account must be the only account having unrestricted access to the operating system system.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23053400" comment="Only the root account has a UID of zero." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230539" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must not forward IPv6 source-routed packets by default.</title>
-            <description />
-          </metadata>
-          <criteria operator="AND">
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23053902" comment="net.ipv6.conf.default.accept_source_route setting in kernel is 0" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23053903" comment="net.ipv6.conf.default.accept_source_route setting in sysctl configuration files is set to 0, and nothing else" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230545" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must disable access to network bpf syscall from unprivileged processes.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054500" comment="kernel.unprivileged_bpf_disabled setting in kernel is '1'." />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23054501" comment="kernel.unprivileged_bpf_disabled setting is set to '1' without conflicting settings in other files" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230546" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must restrict usage of ptrace to descendant  processes.</title>
-            <description />
-          </metadata>
-          <criteria operator="AND">
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054600" comment="kernel.yama.ptrace_scope setting in kernel is set to 1" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23054601" comment="kernel.yama.ptrace_scope in sysctl configuration files is set to 1, and nothing else, and there are no conflicting settings in other files" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230548" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must disable the use of user namespaces.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054800" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23054801" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230550" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must be configured to prevent unrestricted mail relaying.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23055001" comment="/etc/postfix/main.cf: smtpd_client_restrictions = permit_mynetworks,reject" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230553" version="1" class="compliance">
-          <metadata>
-            <title>The graphical display manager must not be installed on the operating system unless approved.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23055300" comment="The graphical display manager is absent." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230554" version="1" class="compliance">
-          <metadata>
-            <title>The operating system network interfaces must not be in promiscuous mode.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23055400" comment="no network interfaces are in promiscuous mode" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230555" version="2" class="compliance">
-          <metadata>
-            <title>The operating system remote X connections for interactive users must be disabled unless to fulfill documented and validated mission requirements.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23055500" comment="/etc/ssh/sshd_config or /etc/ssh/sshd_config.d/*:X11Forwarding == no" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230556" version="1" class="compliance">
-          <metadata>
-            <title>The operating system SSH daemon must prevent remote hosts from connecting to the proxy display.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23055600" comment="sshd_config X11UseLocalhost is set to 'yes'." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230560" version="1" class="compliance">
-          <metadata>
-            <title>The iprutils package must not be installed unless mission essential on the operating system.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23056000" comment="package iprutils is not installed" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230561" version="1" class="compliance">
-          <metadata>
-            <title>The tuned package must not be installed unless mission essential on the operating system.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23056100" negate="true" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:234815" version="1" class="compliance">
-          <metadata>
-            <title>The operating system operating system must log SSH connection attempts and failures to the server.</title>
-            <description />
-          </metadata>
-          <criteria comment="SSH LogLevel == VERBOSE">
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23481500" comment="/etc/ssh/sshd_config:LogLevel == VERBOSE" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:237642" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must use the invoking user's password for privilege escalation when using "sudo".</title>
-            <description />
-          </metadata>
-          <criteria operator="OR">
-            <criteria operator="AND" comment="All config in sudoers">
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:23764200" comment="Defaults !targetpw in /etc/sudoers" />
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:23764203" comment="Defaults !rootpw in /etc/sudoers" />
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:23764205" comment="Defaults !runaspw in /etc/sudoers" />
-            </criteria>
-            <criteria operator="AND" comment="All config in sudoers.d">
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:23764201" comment="/etc/sudoers.d included in /etc/sudoers" />
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:23764202" comment="Defaults !targetpw in /etc/sudoers.d" />
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:23764204" comment="Defaults !rootpw in /etc/sudoers.d" />
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:23764206" comment="Defaults !runaspw in /etc/sudoers.d" />
-            </criteria>
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:237643" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must require re-authentication when using the "sudo" command.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23764300" comment="Defaults timestamp_timeout is to a positive number in /etc/sudoers and /etc/sudoers.d." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:238278" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must generate audit records for successful/unsuccessful uses of the sudoedit command.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23827800" comment="Audit invocations of /usr/bin/sudoedit" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:238285" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must generate audit records for the use and modification of the tallylog file.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23828500" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:244519" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must display a banner before granting local or remote access to the system via a graphical user logon.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:24451900" comment="/etc/dconf/db/local.d/* has banner-message-enable set to true" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:244523" version="1" class="compliance">
-          <metadata>
-            <title>The operating system operating systems must require authentication upon booting into emergency mode.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:24452300" comment="emergency.service config correct" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:244526" version="1" class="compliance">
-          <metadata>
-            <title>The operating system SSH daemon must be configured to use system-wide crypto policies.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.rhel9os:def:257988" comment="The Content Checks are the Same for Rule 257988" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:244527" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must have the packages required to use the hardware random number generator entropy gatherer service.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:24452700" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:244528" version="1" class="compliance">
-          <metadata>
-            <title>The operating system SSH daemon must not allow GSSAPI authentication, except to fulfill documented and validated mission requirements.</title>
-            <description />
-          </metadata>
-          <criteria operator="OR">
-            <criteria>
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:25798801" comment="sshd_config includes sshd_config.d" />
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:24452800" comment="/etc/ssh/sshd_config.d: GSSAPIAuthentication is set to no" />
-            </criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:24452801" comment="/etc/ssh/sshd_config: GSSAPIAuthentication is set to no" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:244529" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must use a separate file system for /var/tmp.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:24452900" comment="/var/tmp is mounted" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:244530" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must prevent files with the setuid and setgid bit set from being executed on the /boot/efi directory.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:24453000" comment="/boot/efi is mounted an configured with the nosuid option." />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:24453001" comment="If /boot/efi is configured in /etc/fstab it is with the nosuid option." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:244538" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must prevent a user from overriding the session idle-delay setting for the graphical user interface.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25801700" comment="check that /etc/dconf/profile/user:system-db is at minimum set to local" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:24453801" comment="Check that the automount setting is locked from nonprivileged user modification" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:244539" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must prevent a user from overriding the screensaver lock-enabled setting for the graphical user interface.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25801700" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:24453900" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:244540" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must not allow blank or null passwords in the system-auth file.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:24454000" comment="There are no instances of nullok in /etc/pam.d/system-auth." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:244541" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must not allow blank or null passwords in the password-auth file.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:24454100" comment="There are no instances of nullok in /etc/pam.d/password-auth." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:244543" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must notify the System Administrator (SA) and Information System Security Officer (ISSO) (at a minimum) when allocated audit record storage volume 75 percent utilization.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:24454300" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:244545" version="1" class="compliance">
-          <metadata>
-            <title>The operating system fapolicy module must be enabled.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:24454500" comment="fapolicyd is active" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:244549" version="1" class="compliance">
-          <metadata>
-            <title>All the operating system networked systems must have openssh-server package installed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:24454900" comment="SSH is installed" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:244554" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must enable hardening for the Berkeley Packet Filter Just-in-time compiler.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:24455400" comment="net.core.bpf_jit_harden is set to 2 in kernel" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:24455401" comment="net.core.bpf_jit_harden is set to 2 in the sysctl configuration files." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:248774" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the "rmdir" command in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:24877400" comment="Audit 32-bit invocations of rmdir" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:24877401" comment="Audit 64-bit invocations of rmdir" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:251706" version="1" class="compliance">
-          <metadata>
-            <title>The operating system operating system must not have accounts configured with blank or null passwords.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25170600" comment="There are no accounts in /etc/shadow that have blank password fields." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:251713" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must ensure the password complexity module is enabled in the system-auth file.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25171300" comment="system-auth pam_pwquality" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:251714" version="1" class="compliance">
-          <metadata>
-            <title>Systems below version 8.4 must ensure the password complexity module in the system-auth file is configured for three retries or less.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25171400" comment="/etc/pam.d/system-auth:retry not greater than 3 and not 0" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:251718" version="1" class="compliance">
-          <metadata>
-            <title>The graphical display manager must not be the default target on the operating system unless approved.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25171800" comment="default.target is symlinked to multi-user.target" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:252997" version="5" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the "rename" command in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25299700" comment="Audit 32-bit invocations of rename" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25299701" comment="Audit 64-bit invocations of rename" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:252998" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the "renameat" command in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25299800" comment="Audit 32-bit invocations of renameat" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25299801" comment="Audit 64-bit invocations of renameat" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:253000" version="5" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the "unlink" command in the operating system must generate an audit record</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25300000" comment="Audit 32-bit invocations of unlink" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25300001" comment="Audit 64-bit invocations of unlink" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:253001" version="2" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the "unlinkat" command in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25300100" comment="Audit 32-bit invocations of unlinkat" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25300101" comment="Audit 64-bit invocations of unlinkat" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:253034" version="2" class="compliance">
-          <metadata>
-            <title>The operating system audit system must be configured to audit any usage of the "fsetxattr" system call.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303400" comment="Audit 32-bit invocations of fsetxattr syscall (auid&gt;=1000)" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303401" comment="Audit 64-bit invocations of fsetxattr syscall (auid&gt;=1000)" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303402" comment="Audit 32-bit invocations of fsetxattr syscall (auid=0)" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303403" comment="Audit 64-bit invocations of fsetxattr syscall (auid=0)" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:253035" version="1" class="compliance">
-          <metadata>
-            <title>The operating system audit system must be configured to audit any usage of the "lsetxattr" system call.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303500" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303501" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303502" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303503" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:253036" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the fremovexattr system call in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303600" comment="Audit 32-bit invocations of fremovexattr syscall" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303601" comment="Audit 64-bit invocations of fremovexattr syscall" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303602" comment="Audit 32-bit invocations of fremovexattr syscall by root" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303603" comment="Audit 64-bit invocations of fremovexattr syscall by root" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:253037" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the "lremovexattr" system call in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303700" comment="Audit 32-bit invocations of lremovexattr syscall" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303701" comment="Audit 64-bit invocations of lremovexattr syscall" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303702" comment="Audit 32-bit invocations of lremovexattr syscall by root" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303703" comment="Audit 64-bit invocations of lremovexattr syscall by root" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:253038" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the "removexattr" system call in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303800" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303801" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303802" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303803" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257782" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must enable the hardware random number generator entropy gatherer service.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23028501" comment="rngd.service is active" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257783" version="1" class="compliance">
-          <metadata>
-            <title>The operating system systemd-journald service must be enabled.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25778300" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257787" version="3" class="compliance">
-          <metadata>
-            <title>The operating system must require a boot loader superuser password.</title>
-            <description />
-          </metadata>
-          <criteria comment="Verify a BIOS GRUB superuser password is configured.">
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25778700" comment="/etc/grub2.cfg:superusers exists and has a name." />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25778701" comment="/boot/grub2/user.cfg:GRUB2_PASSWORD exists and has a PBKDF2/SHA512 password assigned." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257788" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must disable the ability of systemd to spawn an interactive boot process.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25778800" negate="true" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25778801" negate="true" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257790" version="2" class="compliance">
-          <metadata>
-            <title>The operating system /boot/grub2/grub.cfg file must be group-owned by root.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25779000" comment="/boot/grub2/grub.cfg file is group-owned by root" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257791" version="1" class="compliance">
-          <metadata>
-            <title>The operating system /boot/grub2/grub.cfg file must be owned by root.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25779100" comment="/boot/grub2/grub.cfg is owned by root." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257800" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must restrict exposed kernel pointer addresses access.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25780000" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25780001" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257802" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must enable kernel parameters to enforce discretionary access control on symlinks.</title>
-            <description />
-          </metadata>
-          <criteria operator="AND">
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23026700" comment="fs.protected_symlinks setting in kernel is 1" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23026701" comment="fs.protected_symlinks setting in sysctl configuration files is set to 1, and nothing else, and there are no conflicting settings in other files" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257804" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must disable the asynchronous transfer mode (ATM) protocol.</title>
-            <description />
-          </metadata>
-          <criteria operator="OR">
-            <criteria>
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:23049400" comment="/etc/modprobe.d contains a file that contains 'install atm /bin/false'" />
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:23049401" comment="/etc/modprobe.d contains a file that contains 'blacklist atm'" />
-            </criteria>
-            <criteria>
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:25780400" comment="/etc/modprobe.conf contains a file that contains 'install atm /bin/false'" />
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:25780401" comment="/etc/modprobe.conf contains a file that contains 'blacklist atm'" />
-            </criteria>
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257805" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must disable the controller area network (CAN) protocol.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23049501" comment="/etc/modprobe.d contains a file that contains 'blacklist can'" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257806" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must disable IEEE 1394 (FireWire) Support.</title>
-            <description />
-          </metadata>
-          <criteria operator="OR">
-            <criteria>
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:23049900" comment="/etc/modprobe.d contains a file that contains 'install firewire-core /bin/false'" />
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:23049901" comment="/etc/modprobe.d contains a file that contains 'blacklist firewire-core'" />
-            </criteria>
-            <criteria>
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:25780600" comment="/etc/modprobe.conf contains 'install firewire-core /bin/false'" />
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:25780601" comment="/etc/modprobe.conf contains 'blacklist firewire-core'" />
-            </criteria>
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257807" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must disable the stream control transmission protocol (SCTP).</title>
-            <description />
-          </metadata>
-          <criteria operator="OR">
-            <criteria>
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:23049600" comment="/etc/modprobe.d contains a file that contains 'install sctp /bin/false'" />
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:23049601" comment="/etc/modprobe.d contains a file that contains 'blacklist sctp'" />
-            </criteria>
-            <criteria>
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:25780700" comment="/etc/modprobe.conf contains 'install sctp /bin/false'" />
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:25780701" comment="/etc/modprobe.conf contains 'blacklist sctp'" />
-            </criteria>
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257820" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must check the GPG signature of software packages originating from external software repositories before installation.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25782000" comment="/etc/dnf/dnf.conf gpgcheck=1" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257826" version="2" class="compliance">
-          <metadata>
-            <title>A File Transfer Protocol (FTP) server package must not be installed unless mission essential on the operating system.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25782600" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257828" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must not have the nfs-utils package installed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25782800" negate="true" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257832" version="1" class="compliance">
-          <metadata>
-            <title>The gssproxy package must not be installed unless mission essential on the operating system.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23055900" comment="gssproxy package is not installed" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257836" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must not have the quagga package installed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25783600" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257839" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must have the gnutls-utils package installed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25783900" comment="gnutls-utils package is installed" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257840" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must have the nss-tools package installed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25784000" comment="package nss-tools is installed" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257842" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must have the s-nail package installed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25784200" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257846" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must use a separate file system for /var/log.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23029300" comment="There is a separate file system for /var/log." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257850" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must prevent device files from being interpreted on file systems that contain user home directories.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25785000" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257852" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must prevent code from being executed on file systems that contain user home directories.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25785200" comment="/home has noexec option" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257860" version="3" class="compliance">
-          <metadata>
-            <title>The operating system must mount /boot with the nodev option.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25786000" comment="/boot has nodev option" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257867" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must mount /tmp with the noexec option.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23051300" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257869" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must mount /var with the nodev option.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25786900" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25786900" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257888" version="1" class="compliance">
-          <metadata>
-            <title>The operating system cron configuration directories must have a mode of 0700 or less permissive.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25788800" comment="cron configuration directories have a mode of 0755 or less permissive." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257890" version="1" class="compliance">
-          <metadata>
-            <title>All the operating system local interactive user home directories must have mode 0750 or less permissive.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25789000" comment="All local interactive user home directories are 0750 or less" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257891" version="1" class="compliance">
-          <metadata>
-            <title>The operating system /etc/group file must have mode 0644 or less permissive to prevent unauthorized access.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25789100" comment="The /etc/group file has mode 0644 or less permissive" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257892" version="1" class="compliance">
-          <metadata>
-            <title>The operating system /etc/group- file must have mode 0644 or less permissive to prevent unauthorized access.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25789200" comment="The /etc/group- file has mode 0644 or less permissive" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257893" version="1" class="compliance">
-          <metadata>
-            <title>The operating system /etc/gshadow file must have mode 0000 or less permissive to prevent unauthorized access.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25789300" comment="The /etc/gshadow file has mode 0000 or less permissive" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257894" version="1" class="compliance">
-          <metadata>
-            <title>The operating system /etc/gshadow- file must have mode 0000 or less permissive to prevent unauthorized access.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25789400" comment="The /etc/gshadow- file has mode 0000 or less permissive" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257895" version="1" class="compliance">
-          <metadata>
-            <title>The operating system /etc/passwd file must have mode 0644 or less permissive to prevent unauthorized access.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25789500" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257896" version="1" class="compliance">
-          <metadata>
-            <title>The operating system /etc/passwd- file must have mode 0644 or less permissive to prevent unauthorized access.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25789600" comment="The /etc/passwd- file has mode 0644 or less permissive" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257897" version="1" class="compliance">
-          <metadata>
-            <title>The operating system /etc/shadow- file must have mode 0000 or less permissive to prevent unauthorized access.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25789700" comment="The /etc/shadow- file has mode 0000 or less permissive" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257898" version="1" class="compliance">
-          <metadata>
-            <title>The operating system /etc/group file must be owned by root.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25789800" comment="/etc/group file is owned by root" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257899" version="1" class="compliance">
-          <metadata>
-            <title>The operating system /etc/group file must be group-owned by root.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25789900" comment="/etc/group file is owned by root" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257900" version="1" class="compliance">
-          <metadata>
-            <title>The operating system /etc/group- file must be owned by root.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25790000" comment="/etc/group- file is owned by root" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257901" version="1" class="compliance">
-          <metadata>
-            <title>The operating system /etc/group- file must be group-owned by root.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25790100" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257902" version="1" class="compliance">
-          <metadata>
-            <title>The operating system /etc/gshadow file must be owned by root.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25790200" comment="/etc/group file is owned by root" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257903" version="1" class="compliance">
-          <metadata>
-            <title>The operating system /etc/gshadow file must be group-owned by root.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25790300" comment="/etc/gshadow file is owned by root" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257904" version="1" class="compliance">
-          <metadata>
-            <title>The operating system /etc/gshadow- file must be owned by root.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25790400" comment="/etc/gshadow- file is owned by root" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257905" version="1" class="compliance">
-          <metadata>
-            <title>The operating system /etc/gshadow- file must be group-owned by root.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25790500" comment="/etc/gshadow- file is owned by root" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257906" version="1" class="compliance">
-          <metadata>
-            <title>The operating system /etc/passwd file must be owned by root.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25790600" comment="/etc/passwd file is owned by root" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257907" version="1" class="compliance">
-          <metadata>
-            <title>The operating system /etc/passwd file must be group-owned by root.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25790700" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257908" version="1" class="compliance">
-          <metadata>
-            <title>The operating system /etc/passwd- file must be owned by root.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25790800" comment="/etc/passwd- file is owned by root" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257909" version="2" class="compliance">
-          <metadata>
-            <title>The operating system /etc/passwd- file must be group-owned by root.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25790900" comment="/etc/passwd- file is group-owned by root" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257910" version="1" class="compliance">
-          <metadata>
-            <title>The operating system /etc/shadow file must be owned by root.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25791000" comment="/etc/shadow file is owned by root." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257911" version="1" class="compliance">
-          <metadata>
-            <title>The operating system /etc/shadow file must be group-owned by root.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25791100" comment="/etc/shadow file is owned by root" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257912" version="1" class="compliance">
-          <metadata>
-            <title>The operating system /etc/shadow- file must be owned by root.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25791200" comment="/etc/shadow- file is owned by root." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257913" version="1" class="compliance">
-          <metadata>
-            <title>The operating system /etc/shadow- file must be group-owned by root.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25791300" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257926" version="1" class="compliance">
-          <metadata>
-            <title>The operating system cron configuration files directory must be owned by root.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25792600" comment="/etc/cron* files owned by root" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25792601" comment="/etc/cron* directories owned by root" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257927" version="1" class="compliance">
-          <metadata>
-            <title>The operating system cron configuration files directory must be group-owned by root.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25792700" comment="cron configuration files are group-owned by root" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257933" version="2" class="compliance">
-          <metadata>
-            <title>The operating system /etc/crontab file must have mode 0600.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25793300" comment="The /etc/crontab file has mode 0600" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257934" version="2" class="compliance">
-          <metadata>
-            <title>The operating system /etc/shadow file must have mode 0000 to prevent unauthorized access.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25793400" comment="The /etc/shadow file has mode 0000 or less permissive" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257936" version="1" class="compliance">
-          <metadata>
-            <title>A firewall must be active on the operating system.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25793600" comment="The firewall daemon is active" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257943" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must have the chrony package installed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25794300" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257944" version="1" class="compliance">
-          <metadata>
-            <title>The operating system chronyd service must be enabled.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25794400" comment="chronyd service is active" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257949" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must configure a DNS processing mode set be Network Manager.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25794900" comment="DNS setting exists in NetworkManager.conf and is default or none" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25794901" comment="DNS setting exists in NetworkManager.conf main section" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257954" version="1" class="compliance">
-          <metadata>
-            <title>The operating system libreswan package must be installed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25795400" comment="libreswan package is installed" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257979" version="2" class="compliance">
-          <metadata>
-            <title>All the operating system networked systems must have and implement SSH to protect the confidentiality and integrity of transmitted and received information, as well as information during preparation for transmission.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25797900" comment="The SSH daemon is active" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257980" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must have the openssh-clients package installed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25798000" comment="openssh-clients package is installed" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257981" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system via a ssh logon.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25798100" comment="/etc/ssh/sshd_config:banner == /filepath" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25798101" comment="/etc/ssh/sshd_config:banner != none" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257983" version="1" class="compliance">
-          <metadata>
-            <title>The operating system SSHD must accept public key authentication.</title>
-            <description />
-          </metadata>
-          <criteria operator="OR">
-            <criteria>
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:25798801" comment="sshd_config includes sshd_config.d" />
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:25798300" comment="/etc/ssh/sshd_config.d: PubkeyAuthentication is set to yes" />
-            </criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25798301" comment="/etc/ssh/sshd_config: PubkeyAuthentication is set to yes" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257984" version="4" class="compliance">
-          <metadata>
-            <title>The operating system SSHD must not allow blank passwords.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25798400" comment="/etc/ssh/sshd_config or /etc/ssh/sshd_config.d/*:PermitEmptyPasswords == no" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257986" version="4" class="compliance">
-          <metadata>
-            <title>The operating system must enable the Pluggable Authentication Module (PAM) interface for SSHD.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25798600" comment="/etc/ssh/sshd_config or /etc/ssh/sshd_config.d/*:UsePAM == yes" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257988" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must implement DOD-approved encryption ciphers to protect the confidentiality of SSH client connections.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criteria operator="OR">
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:25798800" comment="sshd_config includes crypto-polices" />
-              <criteria operator="AND">
-                <criterion test_ref="oval:mil.disa.stig.ind:tst:25798801" comment="sshd_config includes sshd_config.d" />
-                <criterion test_ref="oval:mil.disa.stig.ind:tst:25798802" comment="sshd_config.d includes crypto-policies" />
-              </criteria>
-            </criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25798800" comment="50-redhat.conf exists" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257989" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must implement DOD-approved encryption ciphers to protect the confidentiality of SSH server connections.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25798900" comment="openssh.config ciphers correct" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257991" version="1" class="compliance">
-          <metadata>
-            <title>The operating system SSH server must be configured to use only Message Authentication Codes (MACs) employing FIPS 140-3 validated cryptographic hash algorithms.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25799100" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257992" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must not allow a noncertificate trusted host SSH logon to the system.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25799200" comment="HostbasedAuthentication is set to no in /etc/ssh/sshd_config and /etc/ssh/sshd_config.d/*.conf" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257996" version="1" class="compliance">
-          <metadata>
-            <title>The operating system SSH daemon must be configured with a timeout interval.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25799600" comment="/etc/ssh/sshd_config or /etc/ssh/sshd_config.d/.* :ClientAliveInterval == 600" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257997" version="3" class="compliance">
-          <metadata>
-            <title>The operating system SSH server configuration file must be group-owned by root.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25799700" comment="The /etc/ssh/sshd_config file is group-owned by root." />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25799701" comment="The /etc/ssh/sshd_config.d directory and sub-directories are group-owned by root." />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25799702" comment="The /etc/ssh/sshd_config.d files are group-owned by root." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257998" version="3" class="compliance">
-          <metadata>
-            <title>The operating system SSH server configuration file must be owned by root.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25799800" comment="The /etc/ssh/sshd_config file is owned by root." />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25799801" comment="The /etc/ssh/sshd_config.d directory and sub-directories are owned by root." />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25799802" comment="The /etc/ssh/sshd_config.d files are owned by root." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257999" version="4" class="compliance">
-          <metadata>
-            <title>The operating system SSH server configuration file must have mode 0600 or less permissive.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25799900" comment="The /etc/ssh/sshd_config file has mode 0600 or less permissive" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25799901" comment="The /etc/ssh/sshd_config.d directory and sub-directories has mode 0600 or less permissive" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25799902" comment="The /etc/ssh/sshd_config.d files have mode 0600 or less permissive" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258002" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must be configured so that the SSH daemon does not allow compression or only allows compression after successful authentication.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25800200" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258004" version="5" class="compliance">
-          <metadata>
-            <title>The operating system SSH daemon must not allow Kerberos authentication, except to fulfill documented and validated mission requirements.</title>
-            <description />
-          </metadata>
-          <criteria operator="OR">
-            <criteria>
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:25800401" comment="/etc/ssh/sshd_config:KerberosAuthentication == no" />
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:25798801" negate="true" comment="/etc/ssh/sshd_config does not include sshd_config.d" />
-            </criteria>
-            <criteria>
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:25798801" comment="/etc/ssh/sshd_config includes sshd_config.d" />
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:25800400" comment="/etc/ssh/sshd_config + sshd_config.d:KerberosAuthentication == no" />
-            </criteria>
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258005" version="1" class="compliance">
-          <metadata>
-            <title>The operating system SSH daemon must not allow rhosts authentication.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25800500" comment="/etc/ssh/sshd_config and /etc/ssh/sshd_config.d/*:IgnoreRhosts == yes" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258006" version="2" class="compliance">
-          <metadata>
-            <title>The operating system SSH daemon must not allow authentication using known host's authentication.</title>
-            <description />
-          </metadata>
-          <criteria operator="OR">
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25800600" comment="/etc/ssh/sshd_config:IgnoreUserKnownHosts == yes" />
-            <criteria operator="AND">
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:25798801" comment="/etc/ssh/sshd_config includes sshd_config.d" />
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:25800601" comment="/etc/ssh/sshd_config.d:IgnoreUserKnownHosts == yes" />
-            </criteria>
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258009" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must display the date and time of the last successful account logon upon an SSH logon.</title>
-            <description />
-          </metadata>
-          <criteria operator="OR">
-            <criteria>
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:25798801" comment="sshd_config includes sshd_config.d" />
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:25800900" comment="/etc/ssh/sshd_config.d: PrintLastLog is set to yes" />
-            </criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23038200" comment="/etc/ssh/sshd_config: PrintLastLog is set to yes" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258013" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must prevent a user from overriding the banner-message-enable setting for the graphical user interface.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25802600" comment="dconf user database(s) exist" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25801300" comment="/org/gnome/login-screen/banner-message-enable in dconf user database locks directories exists" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258014" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must disable the graphical user interface automount function unless required.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25801400" comment="The operating system disables the GUI automount feature." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258015" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must prevent a user from overriding the disabling of the graphical user interface automount function.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25801700" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25801500" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258017" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must prevent a user from overriding the disabling of the graphical user interface autorun function.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25801700" comment="check that /etc/dconf/profile/user:system-db is at minimum set to local" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25801701" comment="Check that the automount setting is locked from nonprivileged user modification" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258020" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must prevent a user from overriding the disabling of the graphical user smart card removal action.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25802600" comment="dconf user database(s) exist" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25802000" comment="/org/gnome/settings-daemon/peripherals/smartcard/removal-action in dconf user database locks directories exists" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258026" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must prevent a user from overriding the session lock-delay setting for the graphical user interface.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25802600" comment="dconf user database(s) exist" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25802601" comment="/org/gnome/desktop/screensaver/lock-delay in dconf user database locks directories exists" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258029" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must disable the ability of a user to restart the system from the login screen.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25802900" comment="dconf disable-restart-buttons true" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258030" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must prevent a user from overriding the disable-restart-buttons setting for the graphical user interface.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25801700" comment="check that /etc/dconf/profile/user:system-db is at minimum set to local" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25803000" comment="Check that the disable-restart-button setting is locked from nonprivileged user modification" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258032" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must prevent a user from overriding the Ctrl-Alt-Del sequence settings for the graphical user interface.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25803200" comment="/org/gnome/settings-daemon/plugins/media-keys/logout is locked in /etc/dconf/db/local.d/locks/*" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258035" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must have the USBGuard installed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25803500" comment="usbguard package is installed" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258036" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must have the USBGuard package enabled.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25803600" comment="usbguard is active" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258041" version="1" class="compliance">
-          <metadata>
-            <title>The operating system user account passwords for new users or password changes must have a 60-day maximum password lifetime restriction in /etc/login.defs.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25804100" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258045" version="1" class="compliance">
-          <metadata>
-            <title>The operating system duplicate User IDs (UIDs) must not exist for interactive users.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25804500" comment="GIDs are unique" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258046" version="1" class="compliance">
-          <metadata>
-            <title>The operating system system accounts must not have an interactive login shell.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25804600" comment="The system accounts other than root have the login shell configured to /sbin/nologin." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258048" version="1" class="compliance">
-          <metadata>
-            <title>All the operating system interactive users must have a primary group that exists.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25804800" comment="All local users have valid GID" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258051" version="1" class="compliance">
-          <metadata>
-            <title>All the operating system local interactive users must have a home directory assigned in the /etc/passwd file.</title>
-            <description />
-          </metadata>
-          <criteria operator="AND">
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25805100" comment="Check for local non-system users in /etc/passwd without a home directory defined" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25805101" comment="Check /etc/passwd if root has a home directory defined" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258061" version="1" class="compliance">
-          <metadata>
-            <title>The operating system groups must have unique Group ID (GID).</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25806100" comment="GIDs are unique" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258072" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must define default permissions for the bash shell.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25807200" comment="UMASK is set to 077 in /etc/bashrc" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258073" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must define default permissions for the c shell.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23038501" comment="UMASK is set to only 077 in /etc/csh.cshrc" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258075" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must define default permissions for the system default profile.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25807500" comment="/etc/profile:umask == 077" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258080" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must configure SELinux context type to allow the use of a nondefault faillock tally directory.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25808000" comment="configured faillock directory has correct selinux context" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25808000" comment="/etc/security/faillock.conf dir option exists" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258082" version="1" class="compliance">
-          <metadata>
-            <title>The operating system policycoreutils-python-utils package must be installed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25808200" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258083" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must have the sudo package installed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25808300" comment="sudo package is installed" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258086" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must require users to reauthenticate for privilege escalation.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25808600" comment="'!authenticate' does not exist in /etc/sudoers" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25808601" comment="'!authenticate' does not exist in /etc/sudoers.d" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258087" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must restrict privilege elevation to authorized personnel.</title>
-            <description />
-          </metadata>
-          <criteria operator="AND">
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25808700" comment="ALL is not configured in /etc/sudoers" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25808701" comment="ALL is not configured in /etc/sudoers.d" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258088" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must restrict the use of the "su" command.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25808800" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258089" version="2" class="compliance">
-          <metadata>
-            <title>The operating system fapolicy module must be installed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25808900" comment="fapolicyd package is installed" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258099" version="2" class="compliance">
-          <metadata>
-            <title>The operating system password-auth must be configured to use a sufficient number of hashing rounds.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25809900" comment="The pam_unix module is included in password-auth and configured for 100000 or more rounds." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258100" version="2" class="compliance">
-          <metadata>
-            <title>The operating system system-auth must be configured to use a sufficient number of hashing rounds.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25810000" comment="The pam_unix module is included in system-auth and configured for 100000 or more rounds." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258101" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must enforce password complexity rules for the root account.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25810100" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258118" version="2" class="compliance">
-          <metadata>
-            <title>The operating system operating system must not be configured to bypass password requirements for privilege escalation.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25811800" comment="pam_succeed_if is not present in /etc/pam.d/sudo" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258121" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must use the CAC smart card driver.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25812100" comment="/etc/opensc.conf: card_drivers = cac" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258122" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must enable certificate based smart card authentication.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25812200" comment="sssd.conf: pam_cert_auth = True" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258123" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must implement certificate status checking for multifactor authentication.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25812300" comment="sssd config: certificate_verification: ocsp_dgst=sha512" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258124" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must have the pcsc-lite package installed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25812400" comment="package pcsc-lite is installed" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258125" version="1" class="compliance">
-          <metadata>
-            <title>The pcscd service on the operating system must be active.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25812500" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258126" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must have the opensc package installed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25812600" comment="opensc package is installed" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258129" version="1" class="compliance">
-          <metadata>
-            <title>The operating system operating systems must require authentication upon booting into rescue mode.</title>
-            <description />
-          </metadata>
-          <criteria operator="OR">
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25812900" comment="/usr/lib/systemd/system/rescue.service:ExecStart is set to -/usr/lib/systemd/systemd-sulogin-shell rescue" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25812901" comment="/etc/systemd/system/rescue.service.d/*.conf:ExecStart is set to -/usr/lib/systemd/systemd-sulogin-shell rescue" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258134" version="2" class="compliance">
-          <metadata>
-            <title>The operating system operating system must use a file integrity tool to verify correct operation of all security functions.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:28513400" comment="aide package is installed" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:28513401" comment="/var/lib/aide/aide.db.gz exists and is not empty" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258142" version="1" class="compliance">
-          <metadata>
-            <title>The rsyslog service must be running in the operating system.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25814200" comment="rsyslog is active" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258144" version="1" class="compliance">
-          <metadata>
-            <title>All the operating system remote access methods must be monitored.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25814400" comment="rsyslog: auth.* is configured to be logged" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25814401" comment="rsyslog: authpriv.* is configured to be logged" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25814402" comment="rsyslog: daemon.* is configured to be logged" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258145" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must be configured to offload audit records onto a different system from the system being audited via syslog.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25814500" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258149" version="2" class="compliance">
-          <metadata>
-            <title>The operating system audit records must be off-loaded onto a different system or storage media from the system being audited.</title>
-            <description />
-          </metadata>
-          <criteria operator="OR">
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25814900" comment="remote TCP logging (basic syntax)" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25814901" comment="remote TCP logging (advanced syntax)" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258152" version="1" class="compliance">
-          <metadata>
-            <title>The operating system audit service must be enabled.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25815200" comment="auditd is active" />
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25815201" comment="auditd is running" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258155" version="3" class="compliance">
-          <metadata>
-            <title>The operating system must allocate audit record storage capacity to store at least one week of audit records, when audit records are not immediately sent to a central audit record storage facility.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23029400" comment="Audit file system exists" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25815500" comment="Audit file system total space &gt;= 10GiB" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258158" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must take action when allocated audit record storage volume reaches 95 percent of the audit record storage capacity.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25815800" comment="/etc/audit/auditd.conf: admin_space_left = 5%" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258159" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must take action when allocated audit record storage volume reaches 95 percent of the repository maximum audit record storage capacity.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25815900" comment="/etc/audit/auditd.conf: admin_space_left_action = SINGLE" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258160" version="1" class="compliance">
-          <metadata>
-            <title>The operating system audit system must take appropriate action when the audit files have reached maximum size.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25816000" comment="/etc/audit/auditd.conf: max_log_file_action is ROTATE or SINGLE" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258168" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must periodically flush audit records to disk to prevent the loss of audit records.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25816800" comment="/etc/audit/auditd.conf: freq = 1-100" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258170" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must write audit records to disk.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25817000" comment="/etc/audit/auditd.conf: write_logs = yes" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258172" version="2" class="compliance">
-          <metadata>
-            <title>The operating system /etc/audit/auditd.conf file must have 0640 or less permissive to prevent unauthorized access.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25817200" comment="auditd.conf 0640 or less" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258175" version="1" class="compliance">
-          <metadata>
-            <title>The operating system audispd-plugins package must be installed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25817500" comment="audispd-plugins package is installed" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258211" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the init command in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25821100" comment="Audit invocations of /usr/sbin/init" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258212" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the poweroff command in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25821200" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258213" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the reboot command in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25821300" comment="Audit invocations of /usr/sbin/reboot" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258214" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the shutdown command in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25821400" comment="Audit invocations of /usr/sbin/shutdown" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258215" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the umount system call in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25821500" comment="Audit 32-bit invocations of umount syscall" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258216" version="1" class="compliance">
-          <metadata>
-            <title>Successful/unsuccessful uses of the umount2 system call in the operating system must generate an audit record.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25821600" comment="Audit 32-bit invocations of umount2 syscall" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25821601" comment="Audit 64-bit invocations of umount2 syscall" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258224" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /var/log/faillock.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25822400" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258227" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must take appropriate action when a critical audit processing failure occurs.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25822700" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258230" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must enable FIPS mode.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25823000" comment="/proc/sys/crypto/fips_enabled is set to 1" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258232" version="1" class="compliance">
-          <metadata>
-            <title>The operating system IP tunnels must use FIPS 140-2/140-3 approved cryptographic algorithms.</title>
-            <description />
-          </metadata>
-          <criteria operator="OR">
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25823200" comment="ipsec.conf includes crypto-policy" />
-            <criteria>
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:25823201" comment="ipsec.conf includes /etc/ipsec.d/*.conf" />
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:25823202" comment="/etc/ipsec.d/*.conf includes crypto-policy" />
-            </criteria>
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258234" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must have the crypto-policies package installed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25823400" comment="crypto-policies package is installed" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258237" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must use mechanisms meeting the requirements of applicable federal laws, executive orders, directives, policies, regulations, standards, and guidance for authentication to a cryptographic module.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25823604" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258242" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must implement DOD-approved encryption in the bind package.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25824201" comment="named.conf includes crypto-policy" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:260487" version="1" class="compliance">
-          <metadata>
-            <title>The operating system library directories must have mode 0755 or less permissive.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:26048700" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:26048701" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:26048702" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:26048703" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:26048704" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:270177" version="1" class="compliance">
-          <metadata>
-            <title>The operating system SSH client must be configured to use only DOD-approved encryption ciphers employing FIPS 140-3 validated cryptographic hash algorithms to protect the confidentiality of SSH client connections.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:27017700" comment="openssh.config ciphers correct" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:270178" version="1" class="compliance">
-          <metadata>
-            <title>The operating system SSH client must be configured to use only DOD-approved Message Authentication Codes (MACs) employing FIPS 140-3 validated cryptographic hash algorithms to protect the confidentiality of SSH client connections.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:27017800" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271438" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must be a vendor supported release.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:27143800" comment="The Oracle Linux 9 minor version is supported." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271493" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must have the SSSD package installed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:27149300" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271494" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must use the SSSD package for multifactor authentication services.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:27149400" comment="sssd.service is active" />
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:27149401" comment="sssd.service is enabled" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271505" version="2" class="compliance">
-          <metadata>
-            <title>The operating system oracle-linux-manager package must be installed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:27150500" comment="oracle-linux-manager-client package is installed" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271709" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must be configured so that all network connections associated with SSH traffic are terminated at the end of the session or after 10 minutes of inactivity, except to fulfill documented and validated mission requirements.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:27170900" comment="/etc/ssh/sshd_config:ClientAliveCountMax = 1" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271720" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must not allow users to override SSH environment variables.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:27172000" comment="Check to see if PermitUserEnvironment is set to no in /etc/ssh/sshd_config and /etc/ssh/sshd_config.d/*.conf" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271734" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must clear SLUB/SLAB objects to prevent use-after-free attacks.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:27173400" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:27173401" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271750" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must automatically exit interactive command shell user sessions after 15 minutes of inactivity.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:27175000" comment="TMOUT is set to 900 or less in /etc/profile and /etc/profile.d/*.sh" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271765" version="1" class="compliance">
-          <metadata>
-            <title>Local the operating system initialization files must not execute world-writable programs.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:27176500" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:27176501" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271773" version="1" class="compliance">
-          <metadata>
-            <title>The operating system system commands must be group-owned by root or a system account.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:27177300" comment="System commands are group-owned by root or a system account" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271774" version="1" class="compliance">
-          <metadata>
-            <title>The operating system system commands must be owned by root.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:27177400" comment="System command files are owned by root" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271775" version="1" class="compliance">
-          <metadata>
-            <title>The operating system system commands must have mode 755 or less permissive.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:27177500" comment="There are no group-writable system command files" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:27177501" comment="There are no world-writable system command files" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271786" version="1" class="compliance">
-          <metadata>
-            <title>The operating system library directories must be group-owned by root or a system account.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:27178600" comment="No system-wide library directories exist except for those group-owned by root" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271787" version="1" class="compliance">
-          <metadata>
-            <title>The operating system library directories must be owned by root.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:27178700" comment="All system-wide library directories must be owned by root" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271788" version="1" class="compliance">
-          <metadata>
-            <title>The operating system library directories must have mode 755 or less permissive.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:27178800" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:27178801" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271854" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must authenticate the remote logging server for offloading audit logs via rsyslog.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25814600" comment="ActionSendStreamDriverAuthMode is set to x509/name" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271855" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must encrypt the transfer of audit records offloaded onto a different system or media from the system being audited via rsyslog.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23048100" comment="ActionSendStreamDriverMode == 1" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271856" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must encrypt via the gtls driver the transfer of audit records offloaded onto a different system or media from the system being audited via rsyslog.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25814800" comment="DefaultNetstreamDriver == gtls" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271857" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must be configured so that the rsyslog daemon does not accept log messages from other servers unless the server is being used for log aggregation.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:27185700" comment="no remote log acceptance" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271864" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must ignore Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirect messages.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:24455300" comment="net.ipv4.conf.all.accept_redirects setting in kernel to 0" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271865" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must not forward IPv4 source-routed packets.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25795900" comment="net.ipv4.conf.all.accept_source_routesetting in kernel is set to 0" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271866" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must log IPv4 packets with impossible addresses.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25796000" comment="net.ipv4.conf.all.log_martians setting in kernel set to 1" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271867" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must log IPv4 packets with impossible addresses by default.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25796100" comment="net.ipv4.conf.default.log_martians setting in kernel is 1" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271868" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must use reverse path filtering on all IPv4 interfaces.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:27186800" comment="net.ipv4.conf.all.rp_filter setting in kernel is 1" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271869" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must prevent IPv4 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</title>
-            <description />
-          </metadata>
-          <criteria operator="AND">
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:24455000" comment="net.ipv4.conf.default.accept_redirects setting in kernel is 0" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271870" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must not forward IPv4 source-routed packets by default.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:24455200" comment="net.ipv4.conf.default.accept_source_route setting in kernel is 0" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271871" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must use a reverse-path filter for IPv4 network traffic, when possible, by default.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:20461100" comment="net.ipv4.conf.default.rp_filter setting in kernel is set to 1" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271872" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must not enable IPv4 packet forwarding unless the system is a router.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25797000" comment="net.ipv4.conf.all.forwarding setting in kernel is 0" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271873" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must not respond to Internet Control Message Protocol (ICMP) echoes sent to a broadcast address.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23053700" comment="net.ipv4.icmp_echo_ignore_broadcasts is set to 1 in kernel" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271874" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must limit the number of bogus Internet Control Message Protocol (ICMP) response errors logs.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25796700" comment="net.ipv4.icmp_ignore_bogus_error_responses setting in kernel is 1" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271875" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must not send Internet Control Message Protocol (ICMP) redirects.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23053600" comment="net.ipv4.conf.all.send_redirects setting in kernel is 0" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271876" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must not allow interfaces to perform Internet Control Message Protocol (ICMP) redirects by default.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054300" comment="net.ipv4.conf.default.send_redirects is set to 0 in kernel" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271877" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must not accept router advertisements on all IPv6 interfaces.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25797100" comment="net.ipv6.conf.all.accept_ra setting in kernel is set to 0" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271878" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must ignore IPv6 Internet Control Message Protocol (ICMP) redirect messages.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054400" comment="net.ipv6.conf.all.accept_redirects setting in kernel is 0" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271879" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must not forward IPv6 source-routed packets.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23053800" comment="net.ipv6.conf.all.accept_source_route setting in kernel is 0" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271880" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must not enable IPv6 packet forwarding unless the system is a router.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054000" comment="net.ipv6.conf.all.forwarding setting in kernel is 0" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271881" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must not accept router advertisements on all IPv6 interfaces by default.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25312000" comment="net.ipv6.conf.default.accept_ra setting in kernel is 0" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271882" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must prevent IPv6 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23053500" comment="net.ipv6.conf.default.accept_redirects is set to 0 in kernel" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271884" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must be configured to use TCP syncookies.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23833300" comment="net.ipv4.tcp_syncookies setting in kernel to 1" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:274870" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must audit any script or executable called by cron as root or by any privileged user.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:27487000" comment="Audit modifications to /etc/cron.d" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:27487001" comment="Audit modifications to /var/spool/cron" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:25784900" version="1" class="inventory">
-          <metadata>
-            <title>The autofs package is installed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25784900" comment="The autofs package is installed." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:25785400" version="2" class="inventory">
-          <metadata>
-            <title>The system has nfs entries in /etc/fstab</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25785400" comment="nfs mounts" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:25795100" version="1" class="inventory">
-          <metadata>
-            <title>The postifx package is installed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23055000" comment="The postifx package is installed." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:25795200" version="1" class="compliance">
-          <metadata>
-            <title>The Trivial File Transfer Protocol (TFTP) server package is installed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25795201" comment="The tftp-server package is installed." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:25823200" version="1" class="inventory">
-          <metadata>
-            <title>The libreswan package is installed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:2582320000" comment="The libreswan package is installed." />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:25824200" version="1" class="inventory">
-          <metadata>
-            <title>The system has BIND installed.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25824200" comment="BIND installed" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.linux:def:100005" version="2" class="inventory">
-          <metadata>
-            <title>Gnome is installed</title>
-            <affected family="unix">
-              <platform>Linux Systems</platform>
-            </affected>
-            <description />
-          </metadata>
-          <criteria operator="OR">
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:10000500" comment="The Gnome-shell package is installed (RPM)" />
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:10000501" comment="The Gnome-shell package is installed (DEB)" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.linux:def:100006" version="6" class="inventory">
-          <metadata>
-            <title>Linux United Extensible Firmware Interface (UEFI)</title>
-            <affected family="unix">
-              <platform>Linux Systems</platform>
-            </affected>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:10000602" comment="/sys/firmware/efi exists" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.linux:def:100012" version="1" class="inventory">
-          <metadata>
-            <title>IPv6 is disabled in the kernel.</title>
-            <affected family="unix">
-              <platform>Linux Systems</platform>
-            </affected>
-            <description>IPv6 is disabled in the kernel, either via a kernel cmdline option or sysctl.</description>
-          </metadata>
-          <criteria operator="OR">
-            <criteria operator="AND" comment="IPv6 is disabled via sysctl">
-              <criterion test_ref="oval:mil.disa.stig.unix:tst:10001200" comment="net.ipv6.conf.all.disable_ipv6 setting in kernel is 1" />
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:10001201" comment="net.ipv6.conf.all.disable_ipv6 setting in sysctl configuration files is set to 1, and nothing else" />
-            </criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:10001202" comment="ipv6.disable=1 in the kernel cmdline" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271432" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000002 - OL 9 must use a separate file system for the system audit data path.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Placing "/var/log/audit" in its own partition enables better separation between audit files and other system files and helps ensure that auditing cannot be halted due to the partition running out of space.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230294" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271433" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000003 - OL 9 must be configured so that a separate file system must be used for user home directories (such as /home or an equivalent).</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Ensuring that "/home" is mounted on its own partition enables the setting of more restrictive mount options, and also helps ensure that users cannot trivially fill partitions used for log or audit data storage.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230328" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271434" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000004 - OL 9 must use a separate file system for /tmp.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "/tmp" partition is used as temporary storage by many programs. Placing "/tmp" in its own partition enables the setting of more restrictive mount options, which can help protect programs that use it.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230295" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271435" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000005 - OL 9 must use a separate file system for /var.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Ensuring that "/var" is mounted on its own partition enables the setting of more restrictive mount options. This helps protect system services such as daemons or other programs which use it. It is not uncommon for the "/var" directory to contain world-writable directories installed by other software packages.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230292" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271436" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000006 - OL 9 must use a separate file system for /var/log.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Placing "/var/log" in its own partition enables better separation between log files and other files in "/var/".</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257846" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271437" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000007 - OL 9 must use a separate file system for /var/tmp.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "/var/tmp" partition is used as temporary storage by many programs. Placing "/var/tmp" in its own partition enables the setting of more restrictive mount options, which can help protect programs that use it.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244529" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271438" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000010 - OL 9 must be a vendor supported release.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>An operating system release is considered "supported" if the vendor continues to provide security patches for the product. With an unsupported release, it will not be possible to resolve security issues discovered in the system software.
-
-	Oracle offers Oracle Linux Premier Support, for a fee, for those customers who wish to standardize on a specific minor release for an extended period.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271438" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271440" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000020 - OL 9 must be configured so that the graphical display manager is not the default target unless approved.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Unnecessary service packages must not be installed to decrease the attack surface of the system. Graphical display managers have a long history of security vulnerabilities and must not be used unless approved and documented.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:251718" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271441" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000025 - OL 9 must require authentication to access emergency mode.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DOD-approved PKIs, all DOD systems (e.g., web servers and web portals) must be properly configured to incorporate access control methods that do not rely solely on the possession of a certificate for access. Successful authentication must not automatically give an entity access to an asset or security boundary. Authorization procedures and controls must be implemented to ensure each authenticated entity also has a validated and current authorization. Authorization is the process of determining whether an entity, once authenticated, is permitted to access a specific asset. Information systems use access control policies and enforcement mechanisms to implement this requirement.
-
-	This requirement prevents attackers with physical access from trivially bypassing security on the machine and gaining root access. Such accesses are further prevented by configuring the bootloader password.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244523" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271442" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-000030 - OL 9 must require authentication to access single-user mode.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DOD-approved PKIs, all DOD systems (e.g., web servers and web portals) must be properly configured to incorporate access control methods that do not rely solely on the possession of a certificate for access. Successful authentication must not automatically give an entity access to an asset or security boundary. Authorization procedures and controls must be implemented to ensure each authenticated entity also has a validated and current authorization. Authorization is the process of determining whether an entity, once authenticated, is permitted to access a specific asset. Information systems use access control policies and enforcement mechanisms to implement this requirement.
-
-	This requirement prevents attackers with physical access from trivially bypassing security on the machine and gaining root access. Such accesses are further prevented by configuring the bootloader password.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258129" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271443" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000040 - OL 9 must be configured to disable the Asynchronous Transfer Mode (ATM) kernel module.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Disabling ATM protects the system against exploitation of any flaws in its implementation.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257804" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271444" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000041 - OL 9 must be configured to disable the Controller Area Network (CAN) kernel module.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Disabling CAN protects the system against exploitation of any flaws in its implementation.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257805" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271445" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000042 - OL 9 must be configured to disable the FireWire kernel module.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Disabling firewire protects the system against exploitation of any flaws in its implementation.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257806" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271446" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000043 - OL 9 must disable the Stream Control Transmission Protocol (SCTP) kernel module.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
-
-	Failing to disconnect unused protocols can result in a system compromise.
-
-	The SCTP is a transport layer protocol, designed to support the idea of message-oriented communication, with several streams of messages within one connection. Disabling SCTP protects the system against exploitation of any flaws in its implementation.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257807" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271447" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000044 - OL 9 must disable the Transparent Inter Process Communication (TIPC) kernel module.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
-
-	Failing to disconnect unused protocols can result in a system compromise.
-
-	The TIPC is a protocol that is specially designed for intra-cluster communication. It can be configured to transmit messages either on UDP or directly across Ethernet. Message delivery is sequence guaranteed, loss free, and flow controlled. Disabling TIPC protects the system against exploitation of any flaws in its implementation.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230497" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271448" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000045 - OL 9 must disable mounting of cramfs.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
-
-	Removing support for unneeded filesystem types reduces the local attack surface of the server.
-
-	Compressed ROM/RAM file system (or cramfs) is a read-only file system designed for simplicity and space-efficiency. It is mainly used in embedded and small-footprint systems.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230498" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271449" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000046 - OL 9 Bluetooth must be disabled.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>This requirement applies to wireless peripheral technologies (e.g., wireless mice, keyboards, displays, etc.) used with OL 9 systems. Wireless peripherals (e.g., Wi-Fi/Bluetooth/IR keyboards, mice and pointing devices, and near field communications [NFC]) present a unique challenge by creating an open, unsecured port on a computer. Wireless peripherals must meet DOD requirements for wireless data transmission and be approved for use by the authorizing official (AO). Even though some wireless peripherals, such as mice and pointing devices, do not ordinarily carry information that need to be protected, modification of communications with these wireless peripherals may be used to compromise the OL 9 operating system.
-
-	Satisfies: SRG-OS-000095-GPOS-00049, SRG-OS-000300-GPOS-00118</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230507" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271450" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000047 - OL 9 must be configured to disable USB mass storage.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>USB mass storage permits easy introduction of unknown devices, thereby facilitating malicious activity.
-
-	Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230503" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271452" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000060 - OL 9 must use a Linux Security Module configured to enforce limits on system services.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without verification of the security functions, security functions may not operate correctly and the failure may go unnoticed. Security function is defined as the hardware, software, and/or firmware of the information system responsible for enforcing the system security policy and supporting the isolation of code and data on which the protection is based. Security functionality includes, but is not limited to, establishing system accounts, configuring access authorizations (i.e., permissions, privileges), setting events to be audited, and setting intrusion detection parameters.
-
-	This requirement applies to operating systems performing security function verification/testing and/or systems and environments that require this functionality.
-
-	Satisfies: SRG-OS-000445-GPOS-00199, SRG-OS-000134-GPOS-00068</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230240" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271453" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000065 - OL 9 must enable the SELinux targeted policy.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Setting the SELinux policy to "targeted" or a more specialized policy ensures the system will confine processes that are likely to be targeted for exploitation, such as network or system services.
-
-	Note: During the development or debugging of SELinux modules, it is common to temporarily place nonproduction systems in "permissive" mode. In such temporary cases, SELinux policies should be developed, and once work is completed, the system should be reconfigured to "targeted".</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230282" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271454" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000070 - OL 9 must enable FIPS mode.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Use of weak or untested encryption algorithms undermines the purposes of using encryption to protect data. The operating system must implement cryptographic modules adhering to the higher standards approved by the federal government since this provides assurance they have been tested and validated. This includes NIST FIPS-validated cryptography for the following: Provisioning digital signatures, generating cryptographic hashes, and to protect data requiring data-at-rest protections in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, and standards.
-
-	Satisfies: SRG-OS-000033-GPOS-00014, SRG-OS-000125-GPOS-00065, SRG-OS-000396-GPOS-00176, SRG-OS-000423-GPOS-00187, SRG-OS-000478-GPOS-00223</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258230" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271456" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000100 - OL 9 must not have the nfs-utils package installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>"nfs-utils" provides a daemon for the kernel NFS server and related tools. This package also contains the "showmount" program. "showmount" queries the mount daemon on a remote host for information about the Network File System (NFS) server on the remote host. For example, "showmount" can display the clients that are mounted on that host.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257828" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271458" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000110 - OL 9 must not have the telnet-server package installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities are often overlooked and therefore, may remain unsecure. They increase the risk to the platform by providing additional attack vectors.
-
-	The telnet service provides an unencrypted remote access service, which does not provide for the confidentiality and integrity of user passwords or the remote session. If a privileged user were to login using this service, the privileged user password could be compromised.
-
-	Removing the "telnet-server" package decreases the risk of accidental (or intentional) activation of the telnet service.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230487" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271459" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000115 - OL 9 must not have the gssproxy package installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore, may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
-
-	Operating systems are capable of providing a wide variety of functions and services. Some of the functions and services provided by default may not be necessary to support essential organizational operations (e.g., key missions, functions).
-
-	The gssproxy package is a proxy for GSS API credential handling and could expose secrets on some networks. It is not needed for normal function of the OS.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257832" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271460" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000120 - OL 9 must not have the iprutils package installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
-
-	Operating systems are capable of providing a wide variety of functions and services. Some of the functions and services, provided by default, may not be necessary to support essential organizational operations (e.g., key missions, functions).
-
-	The iprutils package provides a suite of utilities to manage and configure SCSI devices supported by the ipr SCSI storage device driver.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230560" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271461" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000125 - OL 9 must not have the tuned package installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
-
-	Operating systems are capable of providing a wide variety of functions and services. Some of the functions and services, provided by default, may not be necessary to support essential organizational operations (e.g., key missions, functions).
-
-	The tuned package contains a daemon that tunes the system settings dynamically. It does so by monitoring the usage of several system components periodically. Based on that information, components will then be put into lower or higher power savings modes to adapt to the current usage. The tuned package is not needed for normal OS operations.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230561" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271462" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000130 - OL 9 must not have a File Transfer Protocol (FTP) server package installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The FTP service provides an unencrypted remote access that does not provide for the confidentiality and integrity of user passwords or the remote session. If a privileged user were to log on using this service, the privileged user password could be compromised. SSH or other encrypted file transfer methods must be used in place of this service.
-
-	Removing the "vsftpd" package decreases the risk of accidental activation.
-
-	Satisfies: SRG-OS-000074-GPOS-00042, SRG-OS-000095-GPOS-00049</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257826" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271463" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000135 - OL 9 must not have a Trivial File Transfer Protocol (TFTP) server package installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Removing the "tftp-server" package decreases the risk of the accidental (or intentional) activation of tftp services.
-
-	If TFTP is required for operational support (such as transmission of router configurations), its use must be documented with the information systems security manager (ISSM), restricted to only authorized personnel, and have access control rules established.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230533" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271464" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000140 - OL 9 must not have the quagga package installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Quagga is a network routing software suite providing implementations of Open Shortest Path First (OSPF), Routing Information Protocol (RIP), Border Gateway Protocol (BGP) for Unix and Linux platforms.
-
-	If there is no need to make the router software available, removing it provides a safeguard against its activation.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257836" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271465" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000145 - OL 9 must not have a graphical display manager installed unless approved.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Unnecessary service packages must not be installed to decrease the attack surface of the system. Graphical display managers have a long history of security vulnerabilities and must not be used, unless approved and documented.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230553" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271466" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000150 - OL 9 must not have the sendmail package installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The sendmail software was not developed with security in mind, and its design prevents it from being effectively contained by SELinux. Postfix must be used instead.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230489" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271467" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000200 - OL 9 must have policycoreutils package installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without verification of the security functions, security functions may not operate correctly and the failure may go unnoticed. Security function is defined as the hardware, software, and/or firmware of the information system responsible for enforcing the system security policy and supporting the isolation of code and data on which the protection is based. Security functionality includes, but is not limited to, establishing system accounts, configuring access authorizations (i.e., permissions, privileges), setting events to be audited, and setting intrusion detection parameters.
-
-	Policycoreutils contains the policy core utilities that are required for basic operation of an SELinux-enabled system. These utilities include load_policy to load SELinux policies, setfile to label filesystems, newrole to switch roles, and run_init to run /etc/init.d scripts in the proper context.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230241" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271468" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000210 - OL 9 policycoreutils-python-utils package must be installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The policycoreutils-python-utils package is required to operate and manage an SELinux environment and its policies. It provides utilities such as semanage, audit2allow, audit2why, chcat, and sandbox.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258082" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271469" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000220 - OL 9 must have the firewalld package installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Firewalld provides an easy and effective way to block/limit remote access to the system via ports, services, and protocols.
-
-	Remote access services, such as those providing remote access to network devices and information systems, which lack automated control capabilities, increase risk and make remote user access management difficult at best.
-
-	Remote access is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
-
-	OL 9 functionality (e.g., SSH) must be capable of taking enforcement action if the audit reveals unauthorized activity. Automated control of remote access sessions allows organizations to ensure ongoing compliance with remote access policies by enforcing connection rules of remote access applications on a variety of information system components (e.g., servers, workstations, notebook computers, smartphones, and tablets).
-
-	Satisfies: SRG-OS-000096-GPOS-00050, SRG-OS-000297-GPOS-00115, SRG-OS-000298-GPOS-00116, SRG-OS-000480-GPOS-00232</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230505" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271470" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000221 - OL 9 must be configured so that the firewalld service is active.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Firewalld provides an easy and effective way to block/limit remote access to the system via ports, services, and protocols.
-
-	Remote access services, such as those providing remote access to network devices and information systems, which lack automated control capabilities, increase risk and make remote user access management difficult at best.
-
-	Remote access is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
-
-	OL 9 functionality (e.g., RDP) must be capable of taking enforcement action if the audit reveals unauthorized activity. Automated control of remote access sessions allows organizations to ensure ongoing compliance with remote access policies by enforcing connection rules of remote access applications on a variety of information system components (e.g., servers, workstations, notebook computers, smartphones, and tablets).
-
-	Satisfies: SRG-OS-000096-GPOS-00050, SRG-OS-000297-GPOS-00115</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257936" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271474" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000230 - OL 9 must have the sudo package installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>sudo is a program designed to allow a system administrator to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow system users to complete their work.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258083" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271475" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000231 - OL 9 must use the invoking user's password for privilege escalation when using sudo.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>If the rootpw, targetpw, or runaspw flags are defined and not disabled, by default the operating system will prompt the invoking user for the "root" user password.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:237642" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271476" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000232 - OL 9 must restrict privilege elevation to authorized personnel.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>If the sudoers file is not configured correctly, any user defined on the system can initiate privileged actions on the target system.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258087" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271477" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000240 - OL 9 must have the crypto-policies package installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Centralized cryptographic policies simplify applying secure ciphers across an operating system and the applications that run on that operating system. Use of weak or untested encryption algorithms undermines the purposes of using encryption to protect data.
-
-	Satisfies: SRG-OS-000396-GPOS-00176, SRG-OS-000393-GPOS-00173, SRG-OS-000394-GPOS-00174</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258234" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271482" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000250 - OL 9 networked systems must have SSH installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without protection of the transmitted information, confidentiality and integrity may be compromised because unprotected communications can be intercepted and either read or altered. 
-
-	This requirement applies to both internal and external networks and all types of information system components from which information can be transmitted (e.g., servers, mobile devices, notebook computers, printers, copiers, scanners, and facsimile machines). Communication paths outside the physical protection of a controlled boundary are exposed to the possibility of interception and modification. 
-
-	Protecting the confidentiality and integrity of organizational information can be accomplished by physical means (e.g., employing physical distribution systems) or by logical means (e.g., employing cryptographic techniques). If physical means of protection are employed, then logical means (cryptography) do not have to be employed, and vice versa.
-
-	Satisfies: SRG-OS-000423-GPOS-00187, SRG-OS-000424-GPOS-00188, SRG-OS-000425-GPOS-00189, SRG-OS-000426-GPOS-00190</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244549" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271483" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000251 - OL 9 networked systems must have and implement SSH to protect the confidentiality and integrity of transmitted and received information, as well as information during preparation for transmission.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without protection of the transmitted information, confidentiality and integrity may be compromised because unprotected communications can be intercepted and either read or altered. 
-
-	This requirement applies to both internal and external networks and all types of information system components from which information can be transmitted (e.g., servers, mobile devices, notebook computers, printers, copiers, scanners, and facsimile machines). Communication paths outside the physical protection of a controlled boundary are exposed to the possibility of interception and modification. 
-
-	Protecting the confidentiality and integrity of organizational information can be accomplished by physical means (e.g., employing physical distribution systems) or by logical means (e.g., employing cryptographic techniques). If physical means of protection are employed, then logical means (cryptography) do not have to be employed, and vice versa.
-
-	Satisfies: SRG-OS-000423-GPOS-00187, SRG-OS-000424-GPOS-00188, SRG-OS-000425-GPOS-00189, SRG-OS-000426-GPOS-00190</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257979" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271484" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000252 - The OL 9 SSH daemon must be configured to use systemwide cryptographic policies.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
-
-	Remote access (e.g., RDP) is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
-
-	Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
-
-	OL 9 incorporates systemwide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the /etc/sysconfig/sshd file. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/ directory.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244526" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271485" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000254 - OL 9 SSH server must be configured to use only ciphers employing FIPS 140-3 validated cryptographic hash algorithms to protect the confidentiality of SSH server connections.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
-
-	Remote access (e.g., RDP) is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
-
-	Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
-
-	OL 9 incorporates systemwide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the /etc/sysconfig/sshd file. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/opensshserver.config file.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257989" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271486" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000255 - OL 9 SSH server must be configured to use only Message Authentication Codes (MACs) employing FIPS 140-3 validated cryptographic hash algorithms to protect the confidentiality of SSH server connections.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
-
-	Remote access (e.g., RDP) is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
-
-	Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
-
-	OL 9 incorporates systemwide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the /etc/sysconfig/sshd file. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/opensshserver.config file.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257991" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271487" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000256 - OL 9 must display the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system via a SSH logon.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The warning message reinforces policy awareness during the logon process and facilitates possible legal action against attackers. Alternatively, systems whose ownership should not be obvious should ensure usage of a banner that does not provide easy attribution.
-
-	Satisfies: SRG-OS-000023-GPOS-00006, SRG-OS-000228-GPOS-00088</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257981" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271488" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000260 - OL 9 must have the openssh-clients package installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>This package includes utilities to make encrypted connections and transfer files securely to SSH servers.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257980" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271489" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000261 - OL 9 SSH client must be configured to use only DOD-approved encryption ciphers employing FIPS 140-3 validated cryptographic hash algorithms to protect the confidentiality of SSH client connections.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
-
-	Remote access (e.g., RDP) is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
-
-	Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
-
-	OL 9 incorporates systemwide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the /etc/sysconfig/sshd file. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/opensshserver.config file.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:270177" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271490" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000262 - OL 9 SSH client must be configured to use only DOD-approved Message Authentication Codes (MACs) employing FIPS 140-3 validated cryptographic hash algorithms to protect the confidentiality of SSH client connections.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
-
-	Remote access (e.g., RDP) is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
-
-	Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
-
-	OL 9 incorporates systemwide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the /etc/sysconfig/sshd file. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/opensshserver.config file.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:270178" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271491" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000270 - OL 9 must have the openssl-pkcs11 package installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without the use of multifactor authentication, the ease of access to privileged functions is greatly increased. Multifactor authentication requires using two or more factors to achieve authentication. A privileged account is defined as an information system account with authorizations of a privileged user. The DOD CAC with DOD-approved PKI is an example of multifactor authentication.
-
-	Satisfies: SRG-OS-000105-GPOS-00052, SRG-OS-000375-GPOS-00160, SRG-OS-000376-GPOS-00161, SRG-OS-000377-GPOS-00162</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230273" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271493" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000285 - OL 9 must have the SSSD package installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Using an authentication device, such as a CAC or token that is separate from the information system, ensures that even if the information system is compromised, that compromise will not affect credentials stored on the authentication device. 
-	 
-	Multifactor solutions that require devices separate from information systems gaining access include, for example, hardware tokens providing time-based or challenge-response authenticators and smart cards such as the U.S. Government Personal Identity Verification card and the DOD Common Access Card. 
-	 
-	A privileged account is defined as an information system account with authorizations of a privileged user. 
-	 
-	Remote access is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless. 
-	 
-	This requirement only applies to components where this is specific to the function of the device or has the concept of an organizational user (e.g., VPN, proxy capability). This does not apply to authentication for the purpose of configuring the device itself (management).
-
-	Satisfies: SRG-OS-000705-GPOS-00150, SRG-OS-000105-GPOS-00052, SRG-OS-000106-GPOS-00053, SRG-OS-000107-GPOS-00054, SRG-OS-000108-GPOS-00055, SRG-OS-000375-GPOS-00160</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271493" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271494" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000286 - OL 9 must use the SSSD package for multifactor authentication services.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Using an authentication device, such as a CAC or token that is separate from the information system, ensures that even if the information system is compromised, that compromise will not affect credentials stored on the authentication device. 
-	 
-	Multifactor solutions that require devices separate from information systems gaining access include, for example, hardware tokens providing time-based or challenge-response authenticators and smart cards such as the U.S. Government Personal Identity Verification card and the DOD Common Access Card. 
-	 
-	A privileged account is defined as an information system account with authorizations of a privileged user. 
-	 
-	Without the use of multifactor authentication, the ease of access to privileged functions is greatly increased. 
-	 
-	Multifactor authentication requires using two or more factors to achieve authentication. 
-	 
-	Factors include:  
-	1) Something a user knows (e.g., password/PIN); 
-	2) Something a user has (e.g., cryptographic identification device, token); and 
-	3) Something a user is (e.g., biometric). 
-	 
-	A privileged account is defined as an information system account with authorizations of a privileged user. 
-	 
-	Network access is defined as access to an information system by a user (or a process acting on behalf of a user) communicating through a network (e.g., local area network, wide area network, or the internet). 
-	 
-	The DOD common access card (CAC) with DOD-approved PKI is an example of multifactor authentication.
-
-	Satisfies: SRG-OS-000705-GPOS-00150, SRG-OS-000105-GPOS-00052, SRG-OS-000106-GPOS-00053, SRG-OS-000107-GPOS-00054, SRG-OS-000108-GPOS-00055, SRG-OS-000375-GPOS-00161</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271494" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271495" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000290 - OL 9 must have the s-nail package installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The s-nail package provides the mail command required to allow sending email notifications of unauthorized configuration changes to designated personnel.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257842" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271496" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000300 - OL 9 must have the Advanced Intrusion Detection Environment (AIDE) package installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without verification of the security functions, security functions may not operate correctly, and the failure may go unnoticed. Security function is defined as the hardware, software, and/or firmware of the information system responsible for enforcing the system security policy and supporting the isolation of code and data on which the protection is based. Security functionality includes, but is not limited to, establishing system accounts, configuring access authorizations (i.e., permissions, privileges), setting events to be audited, and setting intrusion detection parameters.
-
-	Satisfies: SRG-OS-000363-GPOS-00150, SRG-OS-000445-GPOS-00199</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258134" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271501" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000310 - OL 9 must have the chrony package installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Inaccurate time stamps make it more difficult to correlate events and can lead to an inaccurate analysis. Determining the correct time a particular event occurred on a system is critical when conducting forensic analysis and investigating system events. Sources outside the configured acceptable allowance (drift) may be inaccurate.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257943" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271502" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000311 - OL 9 must enable the chronyd service.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Inaccurate time stamps make it more difficult to correlate events and can lead to an inaccurate analysis. Determining the correct time a particular event occurred on a system is critical when conducting forensic analysis and investigating system events. Sources outside the configured acceptable allowance (drift) may be inaccurate.
-
-	Synchronizing internal information system clocks provides uniformity of time stamps for information systems with multiple system clocks and systems connected over a network.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257944" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271503" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000320 - OL 9 must have the USBGuard package installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The USBguard-daemon is the main component of the USBGuard software framework. It runs as a service in the background and enforces the USB device authorization policy for all USB devices. The policy is defined by a set of rules using a rule language described in the usbguard-rules.conf file. The policy and the authorization state of USB devices can be modified during runtime using the usbguard tool.
-
-	The system administrator (SA) must work with the site information system security officer (ISSO) to determine a list of authorized peripherals and establish rules within the USBGuard software framework to allow only authorized devices.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258035" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271504" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000321 - OL 9 must enable the USBGuard package.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The USBguard-daemon is the main component of the USBGuard software framework. It runs as a service in the background and enforces the USB device authorization policy for all USB devices. The policy is defined by a set of rules using a rule language described in the usbguard-rules.conf file. The policy and the authorization state of USB devices can be modified during runtime using the usbguard tool.
-
-	The system administrator (SA) must work with the site information system security officer (ISSO) to determine a list of authorized peripherals and establish rules within the USBGuard software framework to allow only authorized devices.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258036" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271505" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-000330 - OL 9 must have the oracle-linux-manager package installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Oracle Linux Manager, based on the Spacewalk open source software, helps automate Oracle Linux systems management. This enables users to control the system software life cycle from initial installation through maintenance, software configuration, upgrades, and eventual decommissioning. Oracle Linux Manager also helps automate a kickstart installation, system configuration, and maintenance tasks, which enables rapid deployment of proven and consistent software configurations for Oracle Linux systems.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271505" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271506" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000340 - OL 9 must have the fapolicy module installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The organization must identify authorized software programs and permit execution of authorized software. The process used to identify software programs that are authorized to execute on organizational information systems is commonly referred to as allowlisting.
-
-	Using an allowlist provides a configuration management method for allowing the execution of only authorized software. Using only authorized software decreases risk by limiting the number of potential vulnerabilities. Verification of allowlisted software occurs prior to execution or at system startup.
-
-	User home directories/folders may contain information of a sensitive nature. Nonprivileged users should coordinate any sharing of information with a system administrator (SA) through shared resources.
-
-	OL 9 ships with many optional packages. One such package is a file access policy daemon called "fapolicyd". "fapolicyd" is a userspace daemon that determines access rights to files based on attributes of the process and file. It can be used to either blocklist or allowlist processes or file access.
-
-	Proceed with caution with enforcing the use of this daemon. Improper configuration may render the system nonfunctional. The "fapolicyd" API is not namespace aware and can cause issues when launching or running containers.
-
-	Satisfies: SRG-OS-000370-GPOS-00155, SRG-OS-000368-GPOS-00154</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258089" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271507" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000341 - OL 9 must enable the fapolicy module.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The organization must identify authorized software programs and permit execution of authorized software. The process used to identify software programs that are authorized to execute on organizational information systems is commonly referred to as allowlisting.
-
-	Using an allowlist provides a configuration management method for allowing the execution of only authorized software. Using only authorized software decreases risk by limiting the number of potential vulnerabilities. Verification of allowlisted software occurs prior to execution or at system startup.
-
-	User home directories/folders may contain information of a sensitive nature. Nonprivileged users should coordinate any sharing of information with a system administrator (SA) through shared resources.
-
-	OL 9 ships with many optional packages. One such package is a file access policy daemon called "fapolicyd". "fapolicyd" is a userspace daemon that determines access rights to files based on attributes of the process and file. It can be used to either blocklist or allowlist processes or file access.
-
-	Proceed with caution with enforcing the use of this daemon. Improper configuration may render the system nonfunctional. The "fapolicyd" API is not namespace aware and can cause issues when launching or running containers.
-
-	Satisfies: SRG-OS-000370-GPOS-00155, SRG-OS-000368-GPOS-00154</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244545" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271508" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000350 - OL 9 must have the rsyslog package installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>rsyslogd is a system utility providing support for message logging. Support for both internet and Unix domain sockets enables this utility to support both local and remote logging. Couple this utility with "gnutls" (which is a secure communications library implementing the SSL, TLS, and DTLS protocols), to create a method to securely encrypt and offload auditing.
-
-	Satisfies: SRG-OS-000479-GPOS-00224, SRG-OS-000051-GPOS-00024</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230477" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271509" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000351 - OL 9 must be configured so that the rsyslog service is active.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The rsyslog service must be running to provide logging services, which are essential to system administration.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258142" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271510" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000355 - OL 9 must have the packages required for encrypting offloaded audit logs installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The rsyslog-gnutls package provides Transport Layer Security (TLS) support for the rsyslog daemon, which enables secure remote logging.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230478" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271511" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000360 - OL 9 must enable the hardware random number generator entropy gatherer service.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The most important characteristic of a random number generator is its randomness, namely its ability to deliver random numbers that are impossible to predict. Entropy in computer security is associated with the unpredictability of a source of randomness. The random source with high entropy tends to achieve a uniform distribution of random values. Random number generators are one of the most important building blocks of cryptosystems.
-
-	The rngd service feeds random data from hardware device to kernel random device. Quality (nonpredictable) random number generation is important for several security functions (i.e., ciphers).</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257782" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271512" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000370 - OL 9 must have the rng-tools package installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>rng-tools provides hardware random number generator tools, such as those used in the formation of x509/PKI certificates.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244527" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271513" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000380 - OL 9 must have the nss-tools package installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Install the "nss-tools" package to install command-line tools to manipulate the NSS certificate and key database.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257840" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271514" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000390 - OL 9 must have the pcsc-lite package installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The pcsc-lite package must be installed if it is to be available for multifactor authentication using smart cards.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258124" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271515" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000400 - OL 9 must have the opensc package installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The use of PIV credentials facilitates standardization and reduces the risk of unauthorized access.
-
-	The DOD has mandated the use of the Common Access Card (CAC) to support identity management and personal authentication for systems covered under Homeland Security Presidential Directive (HSPD) 12, as well as making the CAC a primary component of layered protection for national security systems.
-
-	Satisfies: SRG-OS-000375-GPOS-00160, SRG-OS-000376-GPOS-00161</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258126" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271516" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000401 - OL 9 must be configured so that the pcscd service is active.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The information system ensures that even if the information system is compromised, that compromise will not affect credentials stored on the authentication device.
-
-	The daemon program for pcsc-lite and the MuscleCard framework is pcscd. It is a resource manager that coordinates communications with smart card readers and smart cards and cryptographic tokens that are connected to the system.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258125" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271517" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000410 - OL 9 must have the libreswan package installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Providing the ability for remote users or systems to initiate a secure VPN connection protects information when it is transmitted over a wide area network.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257954" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271518" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000430 - OL 9 must have the gnutls-utils package installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>GnuTLS is a secure communications library implementing the SSL, TLS, and DTLS protocols and technologies around them. It provides a simple C language application programming interface (API) to access the secure communications protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP and other required structures. This package contains command line TLS client and server and certificate manipulation tools.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257839" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271519" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000440 - OL 9 must have the audit package installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without establishing what type of events occurred, the source of events, where events occurred, and the outcome of events, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.
-
-	Audit record content that may be necessary to satisfy this requirement includes, for example, time stamps, source and destination addresses, user/process identifiers, event descriptions, success/fail indications, filenames involved, and access control or flow control rules invoked.
-
-	Associating event types with detected events in audit logs provides a means of investigating an attack, recognizing resource utilization or capacity thresholds, or identifying an improperly configured OL 9 system.
-
-	Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000038-GPOS-00016, SRG-OS-000039-GPOS-00017, SRG-OS-000040-GPOS-00018, SRG-OS-000041-GPOS-00019, SRG-OS-000042-GPOS-00021, SRG-OS-000051-GPOS-00024, SRG-OS-000054-GPOS-00025, SRG-OS-000122-GPOS-00063, SRG-OS-000254-GPOS-00095, SRG-OS-000255-GPOS-00096, SRG-OS-000337-GPOS-00129, SRG-OS-000348-GPOS-00136, SRG-OS-000349-GPOS-00137, SRG-OS-000350-GPOS-00138, SRG-OS-000351-GPOS-00139, SRG-OS-000352-GPOS-00140, SRG-OS-000353-GPOS-00141, SRG-OS-000354-GPOS-00142, SRG-OS-000358-GPOS-00145, SRG-OS-000365-GPOS-00152, SRG-OS-000392-GPOS-00172, SRG-OS-000475-GPOS-00220, SRG-OS-000055-GPOS-00026</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230411" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271520" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000441 - OL 9 audit service must be enabled.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without establishing what type of events occurred, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack. Ensuring the "auditd" service is active ensures audit records generated by the kernel are appropriately recorded.
-
-	Additionally, a properly configured audit subsystem ensures that actions of individual system users can be uniquely traced to those users so they can be held accountable for their actions.
-
-	Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000038-GPOS-00016, SRG-OS-000039-GPOS-00017, SRG-OS-000040-GPOS-00018, SRG-OS-000041-GPOS-00019, SRG-OS-000042-GPOS-00021, SRG-OS-000051-GPOS-00024, SRG-OS-000054-GPOS-00025, SRG-OS-000122-GPOS-00063, SRG-OS-000254-GPOS-00095, SRG-OS-000255-GPOS-00096, SRG-OS-000337-GPOS-00129, SRG-OS-000348-GPOS-00136, SRG-OS-000349-GPOS-00137, SRG-OS-000350-GPOS-00138, SRG-OS-000351-GPOS-00139, SRG-OS-000352-GPOS-00140, SRG-OS-000353-GPOS-00141, SRG-OS-000354-GPOS-00142, SRG-OS-000358-GPOS-00145, SRG-OS-000365-GPOS-00152, SRG-OS-000392-GPOS-00172, SRG-OS-000475-GPOS-00220</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258152" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271521" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000450 - OL 9 must have the audispd-plugins package installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>audispd-plugins provides plug-ins for the real-time interface to the audit subsystem, audispd. These plug-ins can do things like relay events to remote machines or analyze events for suspicious behavior.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258175" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271522" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000495 - OL 9 must remove all software components after updated versions have been installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Previous versions of software components that are not removed from the information system after updates have been installed may be exploited by some adversaries.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230281" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271523" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000496 - OL 9 must check the GPG signature of locally installed software packages before installation.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Changes to any software components can have significant effects on the overall security of the operating system. This requirement ensures the software has not been tampered with and that it has been provided by a trusted vendor.
-
-	All software packages must be signed with a cryptographic key recognized and approved by the organization.
-
-	Verifying the authenticity of software prior to installation validates the integrity of the software package received from a vendor. This verifies the software has not been tampered with and that it has been provided by a trusted vendor.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230265" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271524" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000497 - OL 9 must check the GPG signature of software packages originating from external software repositories before installation.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Changes to any software components can have significant effects on the overall security of the operating system. This requirement ensures the software has not been tampered with and that it has been provided by a trusted vendor.
-
-	All software packages must be signed with a cryptographic key recognized and approved by the organization.
-
-	Verifying the authenticity of software prior to installation validates the integrity of the software package received from a vendor. This verifies the software has not been tampered with and that it has been provided by a trusted vendor.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257820" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271525" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000498 - OL 9 must have GPG signature verification enabled for all software repositories.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Changes to any software components can have significant effects on the overall security of the operating system. This requirement ensures the software has not been tampered with and that it has been provided by a trusted vendor.
-
-	All software packages must be signed with a cryptographic key recognized and approved by the organization.
-
-	Verifying the authenticity of software prior to installation validates the integrity of the software package received from a vendor. This verifies the software has not been tampered with and that it has been provided by a trusted vendor.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230264" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271527" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000500 - OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/sudoers.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The actions taken by system administrators must be audited to keep a record of what was executed on the system, as well as for accountability purposes. Editing the sudoers file may be sign of an attacker trying to establish persistent methods to a system, auditing the editing of the sudoers files mitigates this risk.
-
-	Satisfies: SRG-OS-000004-GPOS-00004, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000304-GPOS-00121, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000470-GPOS-00214, SRG-OS-000471-GPOS-00215, SRG-OS-000239-GPOS-00089, SRG-OS-000240-GPOS-00090, SRG-OS-000241-GPOS-00091, SRG-OS-000303-GPOS-00120, SRG-OS-000466-GPOS-00210, SRG-OS-000476-GPOS-00221</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230409" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271528" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000505 - OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/sudoers.d/ directory.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The actions taken by system administrators must be audited to keep a record of what was executed on the system, as well as for accountability purposes. Editing the sudoers file may be sign of an attacker trying to establish persistent methods to a system, auditing the editing of the sudoers files mitigates this risk.
-
-	Satisfies: SRG-OS-000004-GPOS-00004, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000304-GPOS-00121, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000470-GPOS-00214, SRG-OS-000471-GPOS-00215, SRG-OS-000239-GPOS-00089, SRG-OS-000240-GPOS-00090, SRG-OS-000241-GPOS-00091, SRG-OS-000303-GPOS-00120, SRG-OS-000466-GPOS-00210, SRG-OS-000476-GPOS-00221</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230410" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271529" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000510 - OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/group.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>In addition to auditing new user and group accounts, these watches will alert the system administrator(s) to any modifications. Any unexpected users, groups, or modifications must be investigated for legitimacy.
-
-	Satisfies: SRG-OS-000004-GPOS-00004, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000304-GPOS-00121, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000470-GPOS-00214, SRG-OS-000471-GPOS-00215, SRG-OS-000239-GPOS-00089, SRG-OS-000240-GPOS-00090, SRG-OS-000241-GPOS-00091, SRG-OS-000303-GPOS-00120, SRG-OS-000466-GPOS-00210, SRG-OS-000476-GPOS-00221</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230408" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271530" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000515 - OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/gshadow.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>In addition to auditing new user and group accounts, these watches will alert the system administrator(s) to any modifications. Any unexpected users, groups, or modifications should be investigated for legitimacy.
-
-	Satisfies: SRG-OS-000004-GPOS-00004, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000304-GPOS-00121, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000470-GPOS-00214, SRG-OS-000471-GPOS-00215, SRG-OS-000239-GPOS-00089, SRG-OS-000240-GPOS-00090, SRG-OS-000241-GPOS-00091, SRG-OS-000303-GPOS-00120, SRG-OS-000466-GPOS-00210, SRG-OS-000476-GPOS-00221</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230407" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271531" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000520 - OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/opasswd.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>In addition to auditing new user and group accounts, these watches will alert the system administrator(s) to any modifications. Any unexpected users, groups, or modifications should be investigated for legitimacy.
-
-	Satisfies: SRG-OS-000004-GPOS-00004, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000304-GPOS-00121, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000470-GPOS-00214, SRG-OS-000471-GPOS-00215, SRG-OS-000239-GPOS-00089, SRG-OS-000240-GPOS-00090, SRG-OS-000241-GPOS-00091, SRG-OS-000303-GPOS-00120, SRG-OS-000466-GPOS-00210, SRG-OS-000476-GPOS-00221</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230405" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271532" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000525 - OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/passwd.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>In addition to auditing new user and group accounts, these watches will alert the system administrator(s) to any modifications. Any unexpected users, groups, or modifications should be investigated for legitimacy.
-
-	Satisfies: SRG-OS-000004-GPOS-00004, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000304-GPOS-00121, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000470-GPOS-00214, SRG-OS-000471-GPOS-00215, SRG-OS-000239-GPOS-00089, SRG-OS-000240-GPOS-00090, SRG-OS-000241-GPOS-00091, SRG-OS-000303-GPOS-00120, SRG-OS-000466-GPOS-00210, SRG-OS-000476-GPOS-00221, SRG-OS-000274-GPOS-00104, SRG-OS-000275-GPOS-00105, SRG-OS-000276-GPOS-00106, SRG-OS-000277-GPOS-00107</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230406" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271533" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000530 - OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/shadow.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>In addition to auditing new user and group accounts, these watches will alert the system administrator(s) to any modifications. Any unexpected users, groups, or modifications should be investigated for legitimacy.
-
-	Satisfies: SRG-OS-000004-GPOS-00004, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000304-GPOS-00121, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000470-GPOS-00214, SRG-OS-000471-GPOS-00215, SRG-OS-000239-GPOS-00089, SRG-OS-000240-GPOS-00090, SRG-OS-000241-GPOS-00091, SRG-OS-000303-GPOS-00120, SRG-OS-000466-GPOS-00210, SRG-OS-000476-GPOS-00221</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230404" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271534" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000535 - OL 9 must audit all uses of the unix_update command.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000064-GPOS-00033, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230426" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271535" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000540 - OL 9 must audit all uses of the su command.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000064-GPOS-00033, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000466-GPOS-00210</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230412" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271536" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000545 - OL 9 must audit all uses of the setxattr, fsetxattr, lsetxattr, removexattr, fremovexattr, and lremovexattr system calls.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000458-GPOS-00203, SRG-OS-000462-GPOS-00206, SRG-OS-000463-GPOS-00207, SRG-OS-000471-GPOS-00215, SRG-OS-000474-GPOS-00219, SRG-OS-000466-GPOS-00210, SRG-OS-000064-GPOS-00033</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230413" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271537" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000550 - OL 9 must audit all uses of the chage command.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000468-GPOS-00212, SRG-OS-000471-GPOS-00215</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230418" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271538" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000555 - OL 9 must audit all uses of the chcon command.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	When a user logs on, the auid is set to the uid of the account that is being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000468-GPOS-00212, SRG-OS-000471-GPOS-00215, SRG-OS-000463-GPOS-00207, SRG-OS-000465-GPOS-00209</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230419" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271539" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000560 - OL 9 must audit all uses of the setfacl command.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230435" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271540" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000565 - OL 9 must audit all uses of the chsh command.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230448" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271541" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000570 - OL 9 must audit all uses of the crontab command.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230447" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271542" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000575 - OL 9 must audit all uses of the gpasswd command.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230444" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271543" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000580 - OL 9 must audit all uses of the newgrp command.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	When a user logs on, the auid is set to the uid of the account that is being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230437" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271544" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000585 - OL 9 must audit all uses of the pam_timestamp_check command.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230436" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271545" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000590 - OL 9 must audit all uses of the passwd command.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230422" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271546" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000595 - OL 9 must audit all uses of the postdrop command.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped however, by combining system calls into one rule whenever possible.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230427" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271547" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000600 - OL 9 must audit all uses of the postqueue command.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230428" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271548" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000605 - OL 9 must audit all uses of the ssh-agent command.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230421" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271549" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000610 - OL 9 must audit all uses of the ssh-keysign command.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230434" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271550" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000615 - OL 9 must audit all uses of the sudoedit command.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:238278" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271551" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000620 - OL 9 must audit all uses of the unix_chkpwd command.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230433" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271552" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000625 - OL 9 must audit all uses of the userhelper command.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230431" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271553" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000630 - OL 9 must audit all uses of the mount command.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	When a user logs on, the auid is set to the uid of the account that is being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230423" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271554" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000635 - OL 9 must audit all uses of the truncate, ftruncate, creat, open, openat, and open_by_handle_at system calls.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000064-GPOS-00033, SRG-OS-000458-GPOS-00203, SRG-OS-000461-GPOS-00205</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230449" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271555" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000640 - OL 9 must audit all uses of the chmod, fchmod, and fchmodat system calls.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000064-GPOS-00033, SRG-OS-000466-GPOS-00210, SRG-OS-000458-GPOS-00203</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230456" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271556" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000645 - OL 9 must audit all uses of the chown, fchown, fchownat, and lchown system calls.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000064-GPOS-00033, SRG-OS-000466-GPOS-00210, SRG-OS-000458-GPOS-00203, SRG-OS-000474-GPOS-00219</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230455" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271557" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000650 - OL 9 must audit all uses of the semanage command.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000463-GPOS-00207, SRG-OS-000465-GPOS-00209</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230429" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271558" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000655 - OL 9 must audit all uses of the setfiles command.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000463-GPOS-00207, SRG-OS-000465-GPOS-00209</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230430" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271559" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000660 - OL 9 must audit all uses of the setsebool command.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000463-GPOS-00207, SRG-OS-000465-GPOS-00209</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230432" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271560" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000665 - OL 9 must audit all uses of the chacl command.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000466-GPOS-00210</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230464" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271561" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000670 - OL 9 must audit all uses of the sudo command.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000466-GPOS-00210</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230462" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271562" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000675 - OL 9 must audit all uses of the usermod command.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000466-GPOS-00210</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230463" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271563" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000680 - OL 9 must audit all uses of the rename, unlink, rmdir, renameat, and unlinkat system calls.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000466-GPOS-00210, SRG-OS-000467-GPOS-00211, SRG-OS-000468-GPOS-00212</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230439" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271564" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000685 - OL 9 must audit all uses of the delete_module system call.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000471-GPOS-00216, SRG-OS-000477-GPOS-00222</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230446" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271565" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000690 - OL 9 must audit all uses of the init_module and finit_module system calls.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000471-GPOS-00216, SRG-OS-000477-GPOS-00222</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230438" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271566" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000695 - OL 9 must audit all uses of the kmod command.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000471-GPOS-00216, SRG-OS-000477-GPOS-00222</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230465" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271567" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000700 - OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /var/log/lastlog.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000473-GPOS-00218, SRG-OS-000470-GPOS-00214</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230467" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271568" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000705 - OL 9 must audit all uses of umount system calls.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
-
-	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230424" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271569" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000710 - OL 9 must use cryptographic mechanisms to protect the integrity of audit tools.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Protecting the integrity of the tools used for auditing purposes is a critical step toward ensuring the integrity of audit information. Audit information includes all information (e.g., audit records, audit settings, and audit reports) needed to successfully audit information system activity.
-
-	Audit tools include, but are not limited to, vendor-provided and open-source audit tools needed to successfully view and manipulate audit information system activity and records. Audit tools include custom queries and report generators.
-
-	It is not uncommon for attackers to replace the audit tools or inject code into the existing tools to provide the capability to hide or erase system activity from the audit logs.
-
-	To address this risk, audit tools must be cryptographically signed to provide the capability to identify when the audit tools have been modified, manipulated, or replaced. An example is a checksum hash of the file or files.
-
-	Satisfies: SRG-OS-000256-GPOS-00097, SRG-OS-000257-GPOS-00098, SRG-OS-000258-GPOS-00099, SRG-OS-000278-GPOS-00108</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230475" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271570" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000715 - OL 9 must audit uses of the execve system call.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Misuse of privileged functions, either intentionally or unintentionally by authorized users, or by unauthorized external entities that have compromised information system accounts, is a serious and ongoing concern and can have significant adverse impacts on organizations. Auditing the use of privileged functions is one way to detect such misuse and identify the risk from insider threats and the advanced persistent threat.
-
-	Satisfies: SRG-OS-000326-GPOS-00126, SRG-OS-000327-GPOS-00127, SRG-OS-000755-GPOS-00220</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230386" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271571" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000720 - OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /var/log/faillock.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Satisfies: SRG-OS-000392-GPOS-00172, SRG-OS-000470-GPOS-00214, SRG-OS-000473-GPOS-00218</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258224" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271572" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000725 - OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /var/log/tallylog.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	Satisfies: SRG-OS-000392-GPOS-00172, SRG-OS-000470-GPOS-00214, SRG-OS-000473-GPOS-00218</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:238285" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271573" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000730 - OL 9 must be configured so that successful/unsuccessful uses of the init command generate an audit record.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Misuse of the init command may cause availability issues for the system.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258211" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271574" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000735 - OL 9 must be configured so that successful/unsuccessful uses of the poweroff command generate an audit record.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Misuse of the poweroff command may cause availability issues for the system.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258212" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271575" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000740 - OL 9 must be configured so that successful/unsuccessful uses of the reboot command generate an audit record.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Misuse of the reboot command may cause availability issues for the system.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258213" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271576" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000745 - OL 9 must be configured so that successful/unsuccessful uses of the shutdown command generate an audit record.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Misuse of the shutdown command may cause availability issues for the system.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258214" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271577" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000750 - OL 9 must enable auditing of processes that start prior to the audit daemon.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without the capability to generate audit records, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	If auditing is enabled late in the startup process, the actions of some startup processes may not be audited. Some audit systems also maintain state information only available if auditing is enabled before a given process is created.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000473-GPOS-00218, SRG-OS-000254-GPOS-00095</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230468" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271578" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000755 - OL 9 must label all offloaded audit logs before sending them to the central log server.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Enriched logging is needed to determine who, what, and when events occur on a system. Without this, determining root cause of an event will be much more difficult.
-
-	When audit logs are not labeled before they are sent to a central log server, the audit data will not be able to be analyzed and tied back to the correct system.
-
-	Satisfies: SRG-OS-000039-GPOS-00017, SRG-OS-000342-GPOS-00133, SRG-OS-000479-GPOS-00224</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230394" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271579" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000760 - OL 9 audit system must take appropriate action when an error writing to the audit storage volume occurs.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>It is critical that when the operating system is at risk of failing to process audit logs as required, it takes action to mitigate the failure. Audit processing failures include software/hardware errors; failures in the audit capturing mechanisms; and audit storage capacity being reached or exceeded. Responses to audit failure depend upon the nature of the failure mode.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230390" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271580" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000765 - OL 9 audit system must take appropriate action when the audit storage volume is full.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>It is critical that when the operating system is at risk of failing to process audit logs as required, it takes action to mitigate the failure. Audit processing failures include software/hardware errors; failures in the audit capturing mechanisms; and audit storage capacity being reached or exceeded. Responses to audit failure depend upon the nature of the failure mode.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230392" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271581" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000770 - OL 9 audit system must take appropriate action when the audit files have reached maximum size.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>It is critical that when the operating system is at risk of failing to process audit logs as required, it takes action to mitigate the failure. Audit processing failures include software/hardware errors; failures in the audit capturing mechanisms; and audit storage capacity being reached or exceeded. Responses to audit failure depend upon the nature of the failure mode.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258160" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271582" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000775 - OL 9 must periodically flush audit records to disk to prevent the loss of audit records.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>If option "freq" is not set to a value that requires audit records being written to disk after a threshold number is reached, then audit records may be lost.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258168" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271583" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000785 - OL 9 audit logs must be group-owned by root or by a restricted logging group to prevent unauthorized read access.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Unauthorized disclosure of audit records can reveal system and configuration data to attackers, thus compromising its confidentiality.
-
-	Satisfies: SRG-OS-000057-GPOS-00027, SRG-OS-000058-GPOS-00028, SRG-OS-000059-GPOS-00029, SRG-OS-000206-GPOS-00084</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230398" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271584" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000790 - OL 9 audit log directory must be owned by root to prevent unauthorized read access.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Unauthorized disclosure of audit records can reveal system and configuration data to attackers, thus compromising its confidentiality.
-
-	Satisfies: SRG-OS-000057-GPOS-00027, SRG-OS-000058-GPOS-00028, SRG-OS-000059-GPOS-00029, SRG-OS-000206-GPOS-00084</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230399" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271585" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000795 - OL 9 audit logs file must have mode 0600 or less permissive to prevent unauthorized access to the audit log.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state or can identify the OL 9 system or platform. Additionally, Personally Identifiable Information (PII) and operational information must not be revealed through error messages to unauthorized personnel or their designated representatives.
-
-	The structure and content of error messages must be carefully considered by the organization and development team. The extent to which the information system is able to identify and handle error conditions is guided by organizational policy and operational requirements.
-
-	Satisfies: SRG-OS-000057-GPOS-00027, SRG-OS-000058-GPOS-00028, SRG-OS-000059-GPOS-00029, SRG-OS-000206-GPOS-00084</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230396" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271586" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000800 - OL 9 audit system must audit local events.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without establishing what type of events occurred, the source of events, where events occurred, and the outcome of events, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.
-
-	If option "local_events" isn't set to "yes" only events from network will be aggregated.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230393" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271587" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000805 - OL 9 must allow only the information system security manager (ISSM) (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without the capability to restrict the roles and individuals that can select which events are audited, unauthorized personnel may be able to prevent the auditing of critical events. Misconfigured audits may degrade the system's performance by overwhelming the audit log. Misconfigured audits may also make it more difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230471" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271588" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000810 - OL 9 /etc/audit/auditd.conf file must have 0640 or less permissive to prevent unauthorized access.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without the capability to restrict the roles and individuals that can select which events are audited, unauthorized personnel may be able to prevent the auditing of critical events. Misconfigured audits may degrade the system's performance by overwhelming the audit log. Misconfigured audits may also make it more difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258172" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271589" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000815 - OL 9 must forward mail from postmaster to the root account using a postfix alias.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>It is critical for the appropriate personnel to be aware if a system is at risk of failing to process audit logs as required. Without this notification, the security personnel may be unaware of an impending failure of the audit capability, and system operation may be adversely affected.
-
-	Audit processing failures include software/hardware errors, failures in the audit capturing mechanisms, and audit storage capacity being reached or exceeded.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230389" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271590" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000820 - OL 9 must take appropriate action when a critical audit processing failure occurs.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>It is critical for the appropriate personnel to be aware if a system is at risk of failing to process audit logs as required. Without this notification, the security personnel may be unaware of an impending failure of the audit capability, and system operation may be adversely affected.
-
-	Audit processing failures include software/hardware errors, failures in the audit capturing mechanisms, and audit storage capacity being reached or exceeded.
-
-	Satisfies: SRG-OS-000046-GPOS-00022, SRG-OS-000343-GPOS-00135</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258227" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271591" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000825 - The OL 9 system administrator (SA) and/or information system security officer (ISSO) (at a minimum) must be alerted of an audit processing failure event.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>It is critical for the appropriate personnel to be aware if a system is at risk of failing to process audit logs as required. Without this notification, the security personnel may be unaware of an impending failure of the audit capability, and system operation may be adversely affected.
-
-	Audit processing failures include software/hardware errors, failures in the audit capturing mechanisms, and audit storage capacity being reached or exceeded.
-
-	This requirement applies to each audit data storage repository (i.e., distinct information system component where audit records are stored), the centralized audit storage capacity of organizations (i.e., all audit data storage repositories combined), or both.
-
-	Satisfies: SRG-OS-000046-GPOS-00022, SRG-OS-000343-GPOS-00134</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230388" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271592" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000830 - OL 9 must allocate an audit_backlog_limit of sufficient size to capture processes that start prior to the audit daemon.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without the capability to generate audit records, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	If auditing is enabled late in the startup process, the actions of some startup processes may not be audited. Some audit systems also maintain state information only available if auditing is enabled before a given process is created.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	Allocating an audit_backlog_limit of sufficient size is critical in maintaining a stable boot process. With an insufficient limit allocated, the system is susceptible to boot failures and crashes.
-
-	Satisfies: SRG-OS-000254-GPOS-00095, SRG-OS-000341-GPOS-00132</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230469" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271593" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000835 - OL 9 must produce audit records containing information to establish the identity of any individual or process associated with the event.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without establishing what type of events occurred, the source of events, where events occurred, and the outcome of events, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.
-
-	Audit record content that may be necessary to satisfy this requirement includes, for example, time stamps, source and destination addresses, user/process identifiers, event descriptions, success/fail indications, filenames involved, and access control or flow control rules invoked.
-
-	Enriched logging aids in making sense of who, what, and when events occur on a system. Without this, determining root cause of an event will be much more difficult.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230395" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271594" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000840 - OL 9 must be configured so that successful/unsuccessful uses of the umount system call generate an audit record.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The changing of file permissions could indicate that a user is attempting to gain access to information that would otherwise be disallowed. Auditing DAC modifications can facilitate the identification of patterns of abuse among both authorized and unauthorized users.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258215" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271595" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000845 - OL 9 must be configured so that successful/unsuccessful uses of the umount2 system call generate an audit record.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The changing of file permissions could indicate that a user is attempting to gain access to information that would otherwise be disallowed. Auditing discretionary access control (DAC) modifications can facilitate the identification of patterns of abuse among both authorized and unauthorized users.
-
-	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258216" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271596" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000850 - OL 9 must allocate audit record storage capacity to store at least one week's worth of audit records.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>To ensure OL 9 systems have a sufficient storage capacity in which to write the audit logs, OL 9 needs to be able to allocate audit record storage capacity.
-
-	The task of allocating audit record storage capacity is usually performed during initial installation of OL 9.
-
-	Satisfies: SRG-OS-000341-GPOS-00132, SRG-OS-000342-GPOS-00133</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258155" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271597" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000855 - OL 9 must be configured to offload audit records onto a different system from the system being audited via syslog.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The auditd service does not include the ability to send audit records to a centralized server for management directly. However, it can use a plug-in for audit event multiplexor (audispd) to pass audit records to the local syslog server.
-
-	Satisfies: SRG-OS-000342-GPOS-00133, SRG-OS-000479-GPOS-00224</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258145" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271598" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000860 - OL 9 must take appropriate action when the internal event queue is full.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The audit system should have an action setup in the event the internal event queue becomes full so that no data is lost. Information stored in one location is vulnerable to accidental or incidental deletion or alteration.
-
-	Offloading is a common process in information systems with limited audit storage capacity.
-
-	Satisfies: SRG-OS-000342-GPOS-00133, SRG-OS-000479-GPOS-00224</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230480" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271599" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-000865 - OL 9 must take action when allocated audit record storage volume reaches 75 percent of the repository maximum audit record storage capacity.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>If security personnel are not notified immediately when storage volume reaches a maximum of 75 percent utilization, they are unable to plan for audit record storage capacity expansion. The notification can be set to trigger at lower utilization thresholds at the ISSO's discretion.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230483" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271600" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-000870 - OL 9 must notify the system administrator (SA) and information system security officer (ISSO) (at a minimum) when allocated audit record storage volume reaches 75 percent utilization.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>If security personnel are not notified immediately when storage volume reaches a maximum of 75 percent utilization, they are unable to plan for audit record storage capacity expansion. The notification can be set to trigger at lower utilization thresholds at the ISSO's discretion.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244543" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271601" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000875 - OL 9 must take action when allocated audit record storage volume reaches 95 percent of the audit record storage capacity.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>If action is not taken when storage volume reaches 95 percent utilization, the auditing system may fail when the storage volume reaches capacity.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258158" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271602" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000880 - OL 9 must write audit records to disk.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Audit data should be synchronously written to disk to ensure log integrity. This setting ensures that all audit event data is written disk.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258170" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271603" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000885 - OL 9 must act when allocated audit record storage volume reaches 95 percent of the repository maximum audit record storage capacity.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>If action is not taken when storage volume reaches 95 percent utilization, the auditing system may fail when the storage volume reaches capacity.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258159" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271607" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000925 - OL 9 must enable certificate-based smart card authentication.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without the use of multifactor authentication (MFA), the ease of access to privileged functions is greatly increased. Multifactor authentication requires using two or more factors to achieve authentication. A privileged account is defined as an information system account with authorizations of a privileged user. The DOD Common Access Card (CAC) with DOD-approved PKI is an example of multifactor authentication.
-
-	Satisfies: SRG-OS-000375-GPOS-00160, SRG-OS-000105-GPOS-00052</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258122" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271608" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000930 - OL 9 must implement certificate status checking for multifactor authentication (MFA).</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Using an authentication device, such as a DOD Common Access Card (CAC) or token that is separate from the information system, ensures that even if the information system is compromised, credentials stored on the authentication device will not be affected.
-
-	Multifactor solutions that require devices separate from information systems gaining access include, for example, hardware tokens providing time-based or challenge-response authenticators and smart cards such as the U.S. Government Personal Identity Verification (PIV) card and the DOD CAC.
-
-	OL 9 includes multiple options for configuring certificate status checking, but for this requirement focuses on the System Security Services Daemon (SSSD). By default, SSSD performs Online Certificate Status Protocol (OCSP) checking and certificate verification using a sha256 digest function.
-
-	Satisfies: SRG-OS-000375-GPOS-00160, SRG-OS-000377-GPOS-00162</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258123" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271609" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000935 - OL 9 must prohibit the use of cached authenticators after one day.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>If cached authentication information is out-of-date, the validity of the authentication information may be questionable.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230376" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271610" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-000940 - OL 9 must use the CAC smart card driver.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Smart card login provides two-factor authentication stronger than that provided by a username and password combination. Smart cards leverage public key infrastructure to provide and verify credentials. Configuring the smart card driver in use by the organization helps to prevent users from using unauthorized smart cards.
-
-	Satisfies: SRG-OS-000104-GPOS-00051, SRG-OS-000106-GPOS-00053, SRG-OS-000107-GPOS-00054, SRG-OS-000109-GPOS-00056, SRG-OS-000108-GPOS-00055, SRG-OS-000112-GPOS-00057, SRG-OS-000113-GPOS-00058</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258121" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271611" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-001000 - OL 9 must ensure the password complexity module is enabled in the system-auth file.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Enabling PAM password complexity permits enforcement of strong passwords and consequently makes the system less prone to dictionary attacks.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:251713" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271612" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-001001 - OL 9 must ensure the password complexity module in the system-auth file is configured for three retries or less.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. "pwquality" enforces complex password construction configuration and has the ability to limit brute-force attacks on the system.
-
-	OL 9 uses "pwquality" as a mechanism to enforce password complexity. This is set in both:
-	/etc/pam.d/password-auth
-	/etc/pam.d/system-auth
-
-	By limiting the number of attempts to meet the pwquality module complexity requirements before returning with an error, the system will audit abnormal attempts at password changes.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:251714" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271613" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-001005 - OL 9 must enforce password complexity by requiring that at least one uppercase character be used.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. Password complexity is one factor of several that determines how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised. Requiring a minimum number of uppercase characters makes password guessing attacks more difficult by ensuring a larger search space.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230357" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271614" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-001010 - OL 9 must ensure the password complexity module is enabled in the password-auth file.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Enabling PAM password complexity permits enforcement of strong passwords and consequently makes the system less prone to dictionary attacks.
-
-	Satisfies: SRG-OS-000069-GPOS-00037, SRG-OS-000070-GPOS-00038</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230356" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271615" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-001015 - OL 9 must enforce password complexity by requiring that at least one lowercase character be used.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. 
-
-	Password complexity is one factor of several that determines how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised. Requiring a minimum number of lowercase characters makes password guessing attacks more difficult by ensuring a larger search space.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230358" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271616" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-001020 - OL 9 must enforce password complexity by requiring that at least one numeric character be used.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
-
-	Password complexity is one factor of several that determines how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised. Requiring digits makes password guessing attacks more difficult by ensuring a larger search space.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230359" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271617" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-001025 - OL 9 must require the change of at least eight characters when passwords are changed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. 
-
-	Password complexity is one factor of several that determines how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised. Requiring a minimum number of different characters during password changes ensures that newly changed passwords will not resemble previously compromised ones. Note that passwords changed on compromised systems will still be compromised.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230363" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271618" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-001030 - OL 9 must require the maximum number of repeating characters of the same character class be limited to four when passwords are changed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
-
-	Password complexity is one factor of several that determines how long it takes to crack a password. The more complex a password, the greater the number of possible combinations that need to be tested before the password is compromised.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230360" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271619" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-001035 - OL 9 must require the maximum number of repeating characters be limited to three when passwords are changed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
-
-	Password complexity is one factor of several that determines how long it takes to crack a password. The more complex a password, the greater the number of possible combinations that need to be tested before the password is compromised.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230361" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271620" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-001040 - OL 9 must require the change of at least four character classes when passwords are changed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
-
-	Password complexity is one factor of several that determines how long it takes to crack a password. The more complex a password, the greater the number of possible combinations that need to be tested before the password is compromised.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230362" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271621" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-001045 - OL 9 must enforce password complexity rules for the root account.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
-
-	Password complexity is one factor of several that determines how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised.
-
-	Satisfies: SRG-OS-000072-GPOS-00040, SRG-OS-000071-GPOS-00039, SRG-OS-000070-GPOS-00038, SRG-OS-000266-GPOS-00101, SRG-OS-000078-GPOS-00046, SRG-OS-000480-GPOS-00225, SRG-OS-000069-GPOS-00037</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258101" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271622" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-001050 - OL 9 must be configured so that user and group account administration utilities are configured to store only encrypted representations of passwords.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Passwords need to be protected at all times, and encryption is the standard method for protecting passwords. If passwords are not encrypted, they can be plainly read (i.e., clear text) and easily compromised. Passwords that are encrypted with a weak algorithm are no more protected than if they are kept in plain text.
-
-	This setting ensures user and group account administration utilities are configured to store only encrypted representations of passwords. Additionally, the "crypt_style" configuration option ensures the use of a strong hashing algorithm that makes password cracking attacks more difficult.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:204417" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271623" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-001055 - OL 9 must be configured to use the shadow file to store only encrypted representations of passwords.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Passwords need to be protected at all times, and encryption is the standard method for protecting passwords. If passwords are not encrypted, they can be plainly read (i.e., clear text) and easily compromised. Passwords that are encrypted with a weak algorithm are no more protected than if they are kept in plain text.
-
-	This setting ensures user and group account administration utilities are configured to store only encrypted representations of passwords. Additionally, the "crypt_style" configuration option ensures the use of a strong hashing algorithm that makes password cracking attacks more difficult.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230231" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271624" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-001060 - OL 9 pam_unix.so module must be configured in the password-auth file to use a FIPS 140-3 approved cryptographic hashing algorithm for system authentication.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Unapproved mechanisms that are used for authentication to the cryptographic module are not verified and therefore, cannot be relied upon to provide confidentiality or integrity, and DOD data may be compromised.
-
-	OL 9 systems using encryption are required to use FIPS-compliant mechanisms for authenticating to cryptographic modules. 
-
-	FIPS 140-3 is the current standard for validating that mechanisms used to access cryptographic modules use authentication that meets DOD requirements. This allows for Security Levels 1, 2, 3, or 4 for use on a general-purpose computing system.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230237" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271625" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-001065 - OL 9 password-auth must be configured to use a sufficient number of hashing rounds.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Passwords need to be protected at all times, and encryption is the standard method for protecting passwords. If passwords are not encrypted, they can be plainly read (i.e., clear text) and easily compromised. Passwords that are encrypted with a weak algorithm are no more protected than if they are kept in plain text.
-
-	Using more hashing rounds makes password cracking attacks more difficult.
-
-	Satisfies: SRG-OS-000073-GPOS-00041, SRG-OS-000120-GPOS-00061</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258099" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271626" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-001070 - OL 9 system-auth must be configured to use a sufficient number of hashing rounds.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Passwords need to be protected at all times, and encryption is the standard method for protecting passwords. If passwords are not encrypted, they can be plainly read (i.e., clear text) and easily compromised. Passwords that are encrypted with a weak algorithm are no more protected than if they are kept in plain text.
-
-	Using more hashing rounds makes password cracking attacks more difficult.
-
-	Satisfies: SRG-OS-000073-GPOS-00041, SRG-OS-000120-GPOS-00061</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258100" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271627" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-001075 - OL 9 shadow password suite must be configured to use a sufficient number of hashing rounds.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Passwords need to be protected at all times, and encryption is the standard method for protecting passwords. If passwords are not encrypted, they can be plainly read (i.e., clear text) and easily compromised. Passwords that are encrypted with a weak algorithm are no more protected than if they are kept in plain text.
-
-	Using more hashing rounds makes password cracking attacks more difficult.
-
-	Satisfies: SRG-OS-000073-GPOS-00041, SRG-OS-000120-GPOS-00061</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230233" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271628" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-001080 - OL 9 must employ FIPS 140-3 approved cryptographic hashing algorithms for all stored passwords.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The system must use a strong hashing algorithm to store the password.
-
-	Passwords need to be protected at all times, and encryption is the standard method for protecting passwords. If passwords are not encrypted, they can be plainly read (i.e., clear text) and easily compromised.
-
-	Satisfies: SRG-OS-000073-GPOS-00041, SRG-OS-000120-GPOS-00061</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230232" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271629" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-001085 - OL 9 passwords for new users or password changes must have a 24-hour minimum password lifetime restriction in /etc/login.defs.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Enforcing a minimum password lifetime helps to prevent repeated password changes to defeat the password reuse or history enforcement requirement. If users are allowed to immediately and continually change their password, then the password could be repeatedly changed in a short period of time to defeat the organization's policy regarding password reuse.
-
-	Setting the minimum password age protects against users cycling back to a favorite password after satisfying the password reuse requirement.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230365" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271630" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-001090 - OL 9 passwords must have a 24-hour minimum password lifetime restriction in /etc/shadow.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Enforcing a minimum password lifetime helps to prevent repeated password changes to defeat the password reuse or history enforcement requirement. If users are allowed to immediately and continually change their password, the password could be repeatedly changed in a short period of time to defeat the organization's policy regarding password reuse.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230364" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271631" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-001095 - OL 9 user account passwords for new users or password changes must have a 60-day maximum password lifetime restriction in /etc/login.defs.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Any password, no matter how complex, can eventually be cracked; therefore, passwords need to be changed periodically. If the operating system does not limit the lifetime of passwords and force users to change their passwords, there is the risk that the operating system passwords could be compromised.
-
-	Setting the password maximum age ensures users are required to periodically change their passwords. Requiring shorter password lifetimes increases the risk of users writing down the password in a convenient location subject to physical compromise.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258041" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271632" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-001100 - OL 9 user account passwords must have a 60-day maximum password lifetime restriction.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Any password, no matter how complex, can eventually be cracked; therefore, passwords need to be changed periodically. If OL 9 does not limit the lifetime of passwords and force users to change their passwords, there is the risk that OL 9 passwords could be compromised.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230367" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271633" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-001105 - OL 9 passwords must be created with a minimum of 15 characters.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The shorter the password, the lower the number of possible combinations that need to be tested before the password is compromised.
-
-	Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. Password length is one factor of several that helps to determine strength and how long it takes to crack a password. Use of more characters in a password helps to increase exponentially the time and/or resources required to compromise the password.
-
-	OL 9 uses "pwquality" as a mechanism to enforce password complexity. Configurations are set in the "etc/security/pwquality.conf" file.
-
-	The "minlen", sometimes noted as minimum length, acts as a "score" of complexity based on the credit components of the "pwquality" module. By setting the credit components to a negative value, not only will those components be required, but they will not count toward the total "score" of "minlen". This will enable "minlen" to require a 15-character minimum.
-
-	The DOD minimum password requirement is 15 characters.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230369" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271634" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-001110 - OL 9 must not allow blank or null passwords.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>If an account has an empty password, anyone could log in and run commands with the privileges of that account. Accounts with empty passwords should never be used in operational environments.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244540" />
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244541" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271635" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-001115 - OL 9 must require a boot loader superuser password.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DOD-approved PKIs, all DOD systems (e.g., web servers and web portals) must be properly configured to incorporate access control methods that do not rely solely on the possession of a certificate for access. Successful authentication must not automatically give an entity access to an asset or security boundary. Authorization procedures and controls must be implemented to ensure each authenticated entity also has a validated and current authorization. Authorization is the process of determining whether an entity, once authenticated, is permitted to access a specific asset. Information systems use access control policies and enforcement mechanisms to implement this requirement.
-
-	Password protection on the boot loader configuration ensures users with physical access cannot trivially alter important bootloader settings. These include which kernel to use, and whether to enter single-user mode.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257787" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271636" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-001120 - OL 9 must enforce password complexity by requiring that at least one special character be used.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. Password complexity is one factor of several that determines how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised. OL 9 uses "pwquality" as a mechanism to enforce password complexity. Note that to require special characters without degrading the "minlen" value, the credit value must be expressed as a negative number in "/etc/security/pwquality.conf".</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230375" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271637" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-001125 - OL 9 must prevent the use of dictionary words for passwords.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. If OL 9 allows the user to select passwords based on dictionary words, this increases the chances of password compromise by increasing the opportunity for successful guesses, and brute-force attacks.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230377" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271638" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-001130 - OL 9 must not have accounts configured with blank or null passwords.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>If an account has an empty password, anyone could log in and run commands with the privileges of that account. Accounts with empty passwords should never be used in operational environments.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:251706" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271639" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002000 - OL 9 file system automount function must be disabled unless required.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>An authentication process resists replay attacks if it is impractical to achieve a successful authentication by recording and replaying a previous authentication message.
-
-	Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230502" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271640" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002010 - OL 9 must be configured so that the Network File System (NFS) is configured to use RPCSEC_GSS.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>When an NFS server is configured to use RPCSEC_SYS, a selected userid and groupid are used to handle requests from the remote user. The userid and groupid could mistakenly or maliciously be set incorrectly. The RPCSEC_GSS method of authentication uses certificates on the server and client systems to authenticate the remote mount request more securely.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:204626" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271641" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002011 - OL 9 must prevent special devices on file systems that are imported via Network File System (NFS).</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230307" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271642" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002012 - OL 9 must prevent code from being executed on file systems that are imported via Network File System (NFS).</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "noexec" mount option causes the system not to execute binary files. This option must be used for mounting any file system not containing approved binary as they may be incompatible. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230306" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271643" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002013 - OL 9 must prevent files with the setuid and setgid bit set from being executed on file systems that are imported via Network File System (NFS).</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "nosuid" mount option causes the system not to execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230308" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271647" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002030 - OL 9 must mount /boot with the nodev option.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The only legitimate location for device files is the "/dev" directory located on the root partition. The only exception to this is chroot jails.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257860" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271648" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002031 - OL 9 must prevent files with the setuid and setgid bit set from being executed on the /boot directory.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "nosuid" mount option causes the system not to execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230300" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271649" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002032 - OL 9 must prevent files with the setuid and setgid bit set from being executed on the /boot/efi directory.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "nosuid" mount option causes the system not to execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244530" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271650" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002040 - OL 9 must mount /dev/shm with the nodev option.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The nodev mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
-
-	The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230508" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271651" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002041 - OL 9 must mount /dev/shm with the noexec option.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The noexec mount option causes the system to not execute binary files. This option must be used for mounting any file system not containing approved binary files, as they may be incompatible. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230510" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271652" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002042 - OL 9 must mount /dev/shm with the nosuid option.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "nosuid" mount option causes the system to not execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230509" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271653" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002050 - OL 9 must mount /tmp with the nodev option.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
-
-	The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230511" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271654" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002051 - OL 9 must mount /tmp with the noexec option.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "noexec" mount option causes the system to not execute binary files. This option must be used for mounting any file system not containing approved binary files, as they may be incompatible. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257867" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271655" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002052 - OL 9 must mount /tmp with the nosuid option.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "nosuid" mount option causes the system to not execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230512" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271656" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002060 - OL 9 must mount /var with the nodev option.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
-
-	The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257869" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271657" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002061 - OL 9 must mount /var/log with the nodev option.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
-
-	The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230514" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271658" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002062 - OL 9 must mount /var/log with the noexec option.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "noexec" mount option causes the system to not execute binary files. This option must be used for mounting any file system not containing approved binary files, as they may be incompatible. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230516" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271659" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002063 - OL 9 must mount /var/log with the nosuid option.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "nosuid" mount option causes the system to not execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230515" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271660" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002064 - OL 9 must mount /var/log/audit with the nodev option.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
-
-	The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230517" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271661" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002065 - OL 9 must mount /var/log/audit with the noexec option.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "noexec" mount option causes the system to not execute binary files. This option must be used for mounting any file system not containing approved binary files, as they may be incompatible. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230519" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271662" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002066 - OL 9 must mount /var/log/audit with the nosuid option.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "nosuid" mount option causes the system to not execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230518" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271663" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002067 - OL 9 must mount /var/tmp with the nodev option.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
-
-	The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230520" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271664" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002068 - OL 9 must mount /var/tmp with the noexec option.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "noexec" mount option causes the system to not execute binary files. This option must be used for mounting any file system not containing approved binary files, as they may be incompatible. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230522" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271665" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002069 - OL 9 must mount /var/tmp with the nosuid option.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "nosuid" mount option causes the system to not execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230521" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271666" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002070 - OL 9 must prevent device files from being interpreted on file systems that contain user home directories.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
-
-	The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257850" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271667" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002071 - OL 9 must prevent files with the setuid and setgid bit set from being executed on file systems that contain user home directories.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "nosuid" mount option causes the system to not execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230299" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271668" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002072 - OL 9 must prevent code from being executed on file systems that contain user home directories.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The noexec mount option causes the system to not execute binary files. This option must be used for mounting any file system not containing approved binary files, as they may be incompatible. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257852" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271669" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002080 - OL 9 must prevent special devices on nonroot local partitions.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
-
-	The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230301" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271670" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002100 - OL 9 must disable the graphical user interface automount function unless required.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Automatically mounting file systems permits easy introduction of unknown devices, thereby facilitating malicious activity.
-
-	Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258014" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271678" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002120 - OL 9 must prevent a user from overriding the disabling of the graphical user interface automount function.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>A nonprivileged account is any operating system account with authorizations of a nonprivileged user.
-
-	Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258015" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271679" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002121 - OL 9 must prevent a user from overriding the disabling of the graphical user interface autorun function.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Techniques used to address this include protocols using nonces (e.g., numbers generated for a specific one-time use) or challenges (e.g., TLS, WS_Security). Additional techniques include time-synchronous or challenge-response one-time authenticators.
-
-	Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258017" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271680" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002122 - OL 9 must prevent a user from overriding the banner-message-enable setting for the graphical user interface.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Display of a standardized and approved use notification before granting access to the operating system ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
-
-	For U.S. government systems, system use notifications are required only for access via login interfaces with human users and are not required when such human interfaces do not exist.
-
-	Satisfies: SRG-OS-000023-GPOS-00006, SRG-OS-000228-GPOS-00088</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258013" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271681" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002123 - OL 9 must prevent a user from overriding the screensaver lock-enabled setting for the graphical user interface.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>A session time-out lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not log out because of the temporary nature of the absence. Rather than relying on the user to manually lock their operating system session prior to vacating the vicinity, operating systems need to be able to identify when a user's session has idled and take action to initiate the session lock.
-
-	The session lock is implemented at the point where session activity can be determined and/or controlled.
-
-	Implementing session settings will have little value if a user is able to manipulate these settings from the defaults prescribed in the other requirements of this implementation guide.
-
-	Satisfies: SRG-OS-000028-GPOS-00009, SRG-OS-000030-GPOS-00011</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244539" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271682" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002124 - OL 9 must prevent a user from overriding the session idle-delay setting for the graphical user interface.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>A session time-out lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not logout because of the temporary nature of the absence. Rather than relying on the user to manually lock their operating system session prior to vacating the vicinity, the GNOME desktop can be configured to identify when a user's session has idled and take action to initiate the session lock. As such, users should not be allowed to change session settings.
-
-	Satisfies: SRG-OS-000029-GPOS-00010, SRG-OS-000031-GPOS-00012</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244538" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271683" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002125 - OL 9 must prevent a user from overriding the session lock-delay setting for the graphical user interface.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>A session time-out lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not logout because of the temporary nature of the absence. Rather than relying on the user to manually lock their operating system session prior to vacating the vicinity, the GNOME desktop can be configured to identify when a user's session has idled and take action to initiate the session lock. As such, users should not be allowed to change session settings.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258026" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271684" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002126 - OL 9 must prevent a user from overriding the disabling of the graphical user smart card removal action.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>A session lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not want to log out because of the temporary nature of the absence.
-
-	The session lock is implemented at the point where session activity can be determined. Rather than be forced to wait for a period of time to expire before the user session can be locked, OL 9 must provide users with the ability to manually invoke a session lock so users can secure their session if it is necessary to temporarily vacate the immediate physical vicinity.
-
-	Satisfies: SRG-OS-000028-GPOS-00009, SRG-OS-000030-GPOS-00011</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258020" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271685" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002127 - OL 9 must disable the ability of a user to restart the system from the login screen.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>A user who is at the console can reboot the system at the login screen. If restart or shutdown buttons are pressed at the login screen, this can create the risk of short-term loss of availability of systems due to reboot.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258029" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271686" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002128 - OL 9 must prevent a user from overriding the disable-restart-buttons setting for the graphical user interface.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>A user who is at the console can reboot the system at the login screen. If restart or shutdown buttons are pressed at the login screen, this can create the risk of short-term loss of availability of systems due to reboot.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258030" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271687" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002129 - OL 9 must prevent a user from overriding the Ctrl-Alt-Del sequence settings for the graphical user interface.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>A locally logged-in user who presses Ctrl-Alt-Del, when at the console, can reboot the system. If accidentally pressed, as could happen in the case of mixed OS environment, this can create the risk of short-term loss of availability of systems due to unintentional reboot.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258032" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271688" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002150 - OL 9 must be configured to enable the display of the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system via a graphical user logon.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Display of a standardized and approved use notification before granting access to the operating system ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
-
-	For U.S. government systems, system use notifications are required only for access via login interfaces with human users and are not required when such human interfaces do not exist.
-
-	Satisfies: SRG-OS-000023-GPOS-00006, SRG-OS-000228-GPOS-00088</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244519" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271690" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002160 - OL 9 must be able to directly initiate a session lock for all connection types using smart card when the smart card is removed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>A session lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not want to log out because of the temporary nature of the absence.
-
-	The session lock is implemented at the point where session activity can be determined. Rather than be forced to wait for a period of time to expire before the user session can be locked, OL 9 needs to provide users with the ability to manually invoke a session lock so users can secure their session if it is necessary to temporarily vacate the immediate physical vicinity.
-
-	Satisfies: SRG-OS-000028-GPOS-00009, SRG-OS-000030-GPOS-00011</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230351" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271691" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002161 - OL 9 must not allow unattended or automatic logon via the graphical user interface.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Failure to restrict system access to authenticated users negatively impacts operating system security.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230329" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271693" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002301 - OL 9 must define default permissions for the bash shell.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The umask controls the default access mode assigned to newly created files. A umask of 077 limits new files to mode 600 or less permissive. Although umask can be represented as a four-digit number, the first digit representing special access modes is typically ignored or required to be "0". This requirement applies to the globally configured system defaults and the local interactive user defaults for each account on the system.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258072" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271694" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002302 - OL 9 must define default permissions for the c shell.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The umask controls the default access mode assigned to newly created files. A umask of 077 limits new files to mode 600 or less permissive. Although umask can be represented as a four-digit number, the first digit representing special access modes is typically ignored or required to be "0". This requirement applies to the globally configured system defaults and the local interactive user defaults for each account on the system.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258073" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271695" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002303 - OL 9 must define default permissions for the system default profile.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The umask controls the default access mode assigned to newly created files. A umask of 077 limits new files to mode 600 or less permissive. Although umask can be represented as a four-digit number, the first digit representing special access modes is typically ignored or required to be "0". This requirement applies to the globally configured system defaults and the local interactive user defaults for each account on the system.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258075" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271696" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002304 - OL 9 must define default permissions for all authenticated users in such a way that the user can only read and modify their own files.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Setting the most restrictive default permissions ensures that when new accounts are created, they do not have unnecessary access.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230383" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271697" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002320 - OL 9 must disable the chrony daemon from acting as a server.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Minimizing the exposure of the server functionality of the chrony daemon diminishes the attack surface.
-
-	Satisfies: SRG-OS-000096-GPOS-00050, SRG-OS-000095-GPOS-00049</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230485" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271698" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002321 - OL 9 must disable network management of the chrony daemon.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Not exposing the management interface of the chrony daemon on the network diminishes the attack space.
-
-	Satisfies: SRG-OS-000096-GPOS-00050, SRG-OS-000095-GPOS-00049</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230486" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271700" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002330 - OL 9 must enable Linux audit logging for the USBGuard daemon.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without the capability to generate audit records, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
-
-	If auditing is enabled late in the startup process, the actions of some startup processes may not be audited. Some audit systems also maintain state information only available if auditing is enabled before a given process is created.
-
-	Audit records can be generated from various components within the information system (e.g., module or policy filter).
-
-	The list of audited events is the set of events for which audits are to be generated. This set of events is typically a subset of the list of all events for which the system is capable of generating audit records.
-
-	DOD has defined the list of events for which OL 9 will provide an audit record generation capability as the following:
-
-	1. Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, security levels, or categories of information (e.g., classification levels);
-
-	2. Access actions, such as successful and unsuccessful logon attempts, privileged activities or other system-level access, starting and ending time for user access to the system, concurrent logons from different workstations, successful and unsuccessful accesses to objects, all program initiations, and all direct access to the information system;
-
-	3. All account creations, modifications, disabling, and terminations; and 
-
-	4. All kernel module load, unload, and restart actions.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230470" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271703" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002340 - OL 9 must log SSH connection attempts and failures to the server.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>SSH provides several logging levels with varying amounts of verbosity. "DEBUG" is specifically not recommended other than strictly for debugging SSH communications since it provides so much data that it is difficult to identify important security information. "INFO" or "VERBOSE" level is the basic level that only records login activity of SSH users. In many situations, such as Incident Response, it is important to determine when a particular user was active on a system. The logout record can eliminate those users who disconnected, which helps narrow the field.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:234815" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271704" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002341 - OL 9 SSH daemon must not allow Generic Security Service Application Program Interface (GSSAPI) authentication.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>GSSAPI authentication is used to provide additional authentication mechanisms to applications. Allowing GSSAPI authentication through SSH exposes the system's GSSAPI to remote hosts, increasing the attack surface of the system.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244528" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271705" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002342 - OL 9 must force a frequent session key renegotiation for SSH connections to the server.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without protection of the transmitted information, confidentiality and integrity may be compromised because unprotected communications can be intercepted and either read or altered. 
-
-	This requirement applies to both internal and external networks and all types of information system components from which information can be transmitted (e.g., servers, mobile devices, notebook computers, printers, copiers, scanners, and facsimile machines). Communication paths outside the physical protection of a controlled boundary are exposed to the possibility of interception and modification. 
-
-	Protecting the confidentiality and integrity of organizational information can be accomplished by physical means (e.g., employing physical distribution systems) or by logical means (e.g., employing cryptographic techniques). If physical means of protection are employed, then logical means (cryptography) do not have to be employed, and vice versa.
-
-	Session key regeneration limits the chances of a session key becoming compromised.
-
-	Satisfies: SRG-OS-000423-GPOS-00187, SRG-OS-000033-GPOS-00014, SRG-OS-000424-GPOS-00188</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230527" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271706" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002343 - OL 9 SSHD must not allow blank passwords.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>If an account has an empty password, anyone could log on and run commands with the privileges of that account. Accounts with empty passwords should never be used in operational environments.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257984" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271707" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002344 - OL 9 must enable the Pluggable Authentication Module (PAM) interface for SSHD.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>When UsePAM is set to "yes", PAM runs through account and session types properly. This is important when restricted access to services based off of IP, time, or other factors of the account is needed. Additionally, this ensures users can inherit certain environment variables on login or disallow access to the server.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257986" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271708" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002345 - OL 9 must not permit direct logons to the root account using remote access via SSH.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Even though the communications channel may be encrypted, an additional layer of security is gained by extending the policy of not logging directly on as root. In addition, logging in with a user-specific account provides individual accountability of actions performed on the system and also helps to minimize direct attack attempts on root's password.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230296" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271709" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-002346 - OL 9 must be configured so that all network connections associated with SSH traffic terminate after becoming unresponsive.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Terminating an unresponsive SSH session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a management session enabled on the console or console port that has been left unattended. In addition, quickly terminating an idle SSH session will also free up resources committed by the managed network element.
-
-	Terminating network connections associated with communications sessions includes, for example, deallocating associated TCP/IP address/port pairs at the operating system level and deallocating networking assignments at the application level if multiple application sessions are using a single operating system-level network connection. This does not mean the operating system terminates all sessions or network access; it only ends the unresponsive session and releases the resources associated with that session.
-
-	OL 9 uses /etc/ssh/sshd_config for configurations of OpenSSH. Within the sshd_config, the product of the values of "ClientAliveInterval" and "ClientAliveCountMax" are used to establish the inactivity threshold. The "ClientAliveInterval" is a timeout interval in seconds, after which if no data has been received from the client, SSHD will send a message through the encrypted channel to request a response from the client. The "ClientAliveCountMax" is the number of client alive messages that may be sent without SSHD receiving any messages back from the client. If this threshold is met, sshd will disconnect the client. For more information on these settings and others, refer to the sshd_config man pages.
-
-	Satisfies: SRG-OS-000163-GPOS-00072, SRG-OS-000279-GPOS-00109</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271709" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271710" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002347 - OL 9 must be configured so that all network connections associated with SSH traffic are terminated after 10 minutes of becoming unresponsive.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Terminating an unresponsive SSH session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a management session enabled on the console or console port that has been left unattended. In addition, quickly terminating an idle SSH session will also free up resources committed by the managed network element.
-
-	Terminating network connections associated with communications sessions includes, for example, deallocating associated TCP/IP address/port pairs at the operating system level and deallocating networking assignments at the application level if multiple application sessions are using a single operating system-level network connection. This does not mean the operating system terminates all sessions or network access; it only ends the unresponsive session and releases the resources associated with that session.
-
-	OL 9 uses /etc/ssh/sshd_config for configurations of OpenSSH. Within the sshd_config, the product of the values of "ClientAliveInterval" and "ClientAliveCountMax" are used to establish the inactivity threshold. The "ClientAliveInterval" is a timeout interval in seconds, after which if no data has been received from the client, SSHD will send a message through the encrypted channel to request a response from the client. The "ClientAliveCountMax" is the number of client alive messages that may be sent without SSHD receiving any messages back from the client. If this threshold is met, SSHD will disconnect the client. For more information on these settings and others, refer to the sshd_config man pages.
-
-	Satisfies: SRG-OS-000163-GPOS-00072, SRG-OS-000279-GPOS-00109, SRG-OS-000395-GPOS-00175</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257996" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271711" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002348 - OL 9 SSH daemon must not allow rhosts authentication.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>SSH trust relationships mean a compromise on one host can allow an attacker to move trivially to other hosts.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258005" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271712" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002349 - OL 9 SSH daemon must not allow known hosts authentication.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Configuring the IgnoreUserKnownHosts setting for the SSH daemon provides additional assurance that remote login via SSH will require a password, even in the event of misconfiguration elsewhere.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258006" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271713" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002350 - OL 9 SSH daemon must disable remote X connections for interactive users.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>When X11 forwarding is enabled, there may be additional exposure to the server and client displays if the SSHD proxy display is configured to listen on the wildcard address. By default, SSHD binds the forwarding server to the loopback address and sets the hostname part of the DISPLAY environment variable to localhost. This prevents remote hosts from connecting to the proxy display.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230555" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271714" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002351 - OL 9 SSH daemon must perform strict mode checking of home directory configuration files.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>If other users have access to modify user-specific SSH configuration files, they may be able to log into the system as another user.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230288" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271715" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002352 - OL 9 SSH daemon must display the date and time of the last successful account logon upon an SSH logon.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Providing users feedback on when account accesses last occurred facilitates user recognition and reporting of unauthorized account use.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258009" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271716" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002354 - OL 9 SSH daemon must prevent remote hosts from connecting to the proxy display.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>When X11 forwarding is enabled, there may be additional exposure to the server and client displays if the SSHD proxy display is configured to listen on the wildcard address. By default, SSHD binds the forwarding server to the loopback address and sets the hostname part of the "DISPLAY" environment variable to localhost. This prevents remote hosts from connecting to the proxy display.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230556" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271717" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002355 - OL 9 SSH daemon must not allow compression or must only allow compression after successful authentication.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>If compression is allowed in an SSH connection prior to authentication, vulnerabilities in the compression software could result in compromise of the system from an unauthenticated connection, potentially with root privileges.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258002" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271718" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002356 - OL 9 SSH daemon must not allow Kerberos authentication.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Kerberos authentication for SSH is often implemented using Generic Security Service Application Program Interface (GSSAPI). If Kerberos is enabled through SSH, the SSH daemon provides a means of access to the system's Kerberos implementation. Vulnerabilities in the system's Kerberos implementations may be subject to exploitation.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258004" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271719" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002357 - OL 9 must not allow a noncertificate trusted host SSH logon to the system.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>SSH trust relationships mean a compromise on one host can allow an attacker to move trivially to other hosts.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257992" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271720" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-002358 - OL 9 must not allow users to override SSH environment variables.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>SSH environment options potentially allow users to bypass access restriction in some configurations.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271720" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271721" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002359 - OL 9 SSHD must accept public key authentication.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without the use of multifactor authentication, the ease of access to privileged functions is greatly increased. Multifactor authentication requires using two or more factors to achieve authentication. A privileged account is defined as an information system account with authorizations of a privileged user. A DOD CAC with DOD-approved PKI is an example of multifactor authentication.
-
-	Satisfies: SRG-OS-000105-GPOS-00052, SRG-OS-000106-GPOS-00053, SRG-OS-000107-GPOS-00054, SRG-OS-000108-GPOS-00055</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257983" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271722" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002360 - OL 9 must require reauthentication when using the "sudo" command.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without reauthentication, users may access resources or perform tasks for which they do not have authorization. 
-
-	When operating systems provide the capability to escalate a functional capability, it is critical the organization requires the user to reauthenticate when using the "sudo" command.
-
-	If the value is set to an integer less than "0", the user's time stamp will not expire and the user will not have to reauthenticate for privileged actions until the user's session is terminated.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:237643" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271723" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002361 - OL 9 must restrict the use of the su command.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The su program allows to run commands with a substitute user and group ID. It is commonly used to run commands as the root user. Limiting access to such commands is considered a good security practice.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258088" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271724" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002362 - OL 9 must require users to reauthenticate for privilege escalation.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without reauthentication, users may access resources or perform tasks for which they do not have authorization.
-
-	When operating systems provide the capability to escalate a functional capability, it is critical that the user reauthenticate.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258086" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271725" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002363 - OL 9 must require users to provide a password for privilege escalation.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without reauthentication, users may access resources or perform tasks for which they do not have authorization.
-
-	When operating systems provide the capability to escalate a functional capability, it is critical that the user reauthenticate.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230271" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271726" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002364 - OL 9 must not be configured to bypass password requirements for privilege escalation.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without reauthentication, users may access resources or perform tasks for which they do not have authorization. When operating systems provide the capability to escalate a functional capability, it is critical the user reauthenticate.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258118" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271727" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002370 - OL 9 must disable the use of user namespaces.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>User namespaces are used primarily for Linux containers. The value "0" disallows the use of user namespaces.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230548" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271728" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002380 - OL 9 must disable the kernel.core_pattern.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230311" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271729" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002381 - OL 9 must disable core dump backtraces.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers or system operators trying to debug problems.
-
-	Enabling core dumps on production systems is not recommended; however, there may be overriding operational requirements to enable advanced debugging. Permitting temporary enablement of core dumps during such situations must be reviewed through local needs and policy.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230315" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271730" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002382 - OL 9 must disable storing core dumps.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers or system operators trying to debug problems. Enabling core dumps on production systems is not recommended; however, there may be overriding operational requirements to enable advanced debugging. Permitting temporary enablement of core dumps during such situations must be reviewed through local needs and policy.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230314" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271731" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002383 - OL 9 must disable core dumps for all users.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230313" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271732" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002384 - OL 9 must disable acquiring, saving, and processing core dumps.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230312" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271733" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002385 - OL 9 must be configured so that the kdump service is disabled.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Kernel core dumps may contain the full contents of system memory at the time of the crash. Kernel core dumps consume a considerable amount of disk space and may result in denial of service by exhausting the available space on the target file system partition. Unless the system is used for kernel development or testing, there is little need to run the kdump service.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230310" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271734" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002390 - OL 9 must clear SLUB/SLAB objects to prevent use-after-free attacks.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Some adversaries launch attacks with the intent of executing code in nonexecutable regions of memory or in memory locations that are prohibited. Security safeguards employed to protect memory include, for example, data execution prevention and address space layout randomization. Data execution prevention safeguards can be either hardware-enforced or software-enforced with hardware providing the greater strength of mechanism.
-
-	Poisoning writes an arbitrary value to freed pages, so any modification or reference to that page after being freed or before being initialized will be detected and prevented. This prevents many types of use-after-free vulnerabilities at little performance cost. Also prevents leak of data and detection of corrupted memory.
-
-	SLAB objects are blocks of physically contiguous memory. SLUB is the unqueued SLAB allocator.
-
-	Satisfies: SRG-OS-000433-GPOS-00192, SRG-OS-000134-GPOS-00068</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271734" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271735" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002391 - OL 9 must enable mitigations against processor-based vulnerabilities.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Kernel page-table isolation is a kernel feature that mitigates the Meltdown security vulnerability and hardens the kernel against attempts to bypass kernel address space layout randomization (KASLR).
-
-	Satisfies: SRG-OS-000433-GPOS-00193, SRG-OS-000095-GPOS-00049</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230491" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271736" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002392 - OL 9 must disable the ability of systemd to spawn an interactive boot process.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Using interactive or recovery boot, the console user could disable auditing, firewalls, or other services, weakening system security.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257788" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271737" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002393 - OL 9 must disable virtual system calls.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>System calls are special routines in the Linux kernel, which userspace applications ask to do privileged tasks. Invoking a system call is an expensive operation because the processor must interrupt the currently executing task and switch context to kernel mode and then back to userspace after the system call completes. Virtual system calls map into user space a page that contains some variables and the implementation of some system calls. This allows the system calls to be executed in userspace to alleviate the context switching expense.
-
-	Virtual system calls provide an opportunity of attack for a user who has control of the return instruction pointer. Disabling virtual system calls help to prevent return-oriented programming (ROP) attacks via buffer overflows and overruns. If the system intends to run containers based on OL 6 components, virtual system calls will have to be enabled so the components function properly.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230278" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271738" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002394 - OL 9 must clear the page allocator to prevent use-after-free attacks.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Poisoning writes an arbitrary value to freed pages, so any modification or reference to that page after being freed or before being initialized will be detected and prevented. This prevents many types of use-after-free vulnerabilities at little performance cost. Also prevents leak of data and detection of corrupted memory.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230277" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271739" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002400 - OL 9 systemd-journald service must be enabled.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>In the event of a system failure, OL 9 must preserve any information necessary to determine cause of failure and any information necessary to return to operations with least disruption to system processes.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257783" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271740" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002401 - OL 9 must enable kernel parameters to enforce discretionary access control on hardlinks.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>By enabling the fs.protected_hardlinks kernel parameter, users can no longer create soft or hard links to files they do not own. Disallowing such hardlinks mitigates vulnerabilities based on insecure file system accessed by privileged programs, avoiding an exploitation vector exploiting unsafe use of open() or creat().
-
-	Satisfies: SRG-OS-000312-GPOS-00123, SRG-OS-000324-GPOS-00125</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230268" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271741" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002402 - OL 9 must enable kernel parameters to enforce discretionary access control on symlinks.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>By enabling the fs.protected_symlinks kernel parameter, symbolic links are permitted to be followed only when outside a sticky world-writable directory, or when the user identifier (UID) of the link and follower match, or when the directory owner matches the symlink's owner. Disallowing such symlinks helps mitigate vulnerabilities based on insecure file system accessed by privileged programs, avoiding an exploitation vector exploiting unsafe use of open() or creat().
-
-	Satisfies: SRG-OS-000312-GPOS-00123, SRG-OS-000324-GPOS-00125</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257802" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271742" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002403 - OL 9 debug-shell systemd service must be disabled.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The debug-shell requires no authentication and provides root privileges to anyone who has physical access to the machine. While this feature is disabled by default, masking it adds an additional layer of assurance that it will not be enabled via a dependency in systemd. This also prevents attackers with physical access from trivially bypassing security on the machine through valid troubleshooting configurations and gaining root access when the system is rebooted.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230532" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271743" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002404 - OL 9 IP tunnels must use 140-3 approved cryptographic algorithms.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Overriding the system crypto policy makes the behavior of the Libreswan service violate expectations and makes system configuration more fragmented.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258232" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271745" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002406 - OL 9 must restrict access to the kernel message buffer.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
-
-	This requirement generally applies to the design of an information technology product, but it can also apply to the configuration of particular information system components that are, or use, such products. This can be verified by acceptance/validation processes in DOD or other government agencies.
-
-	There may be shared resources with configurable protections (e.g., files in storage) that may be assessed on specific information system components.
-
-	Restricting access to the kernel message buffer limits access to only root. This prevents attackers from gaining additional system information as a nonprivileged user.
-
-	Satisfies: SRG-OS-000132-GPOS-00067, SRG-OS-000138-GPOS-00069</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230269" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271746" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002407 - OL 9 must prevent kernel profiling by nonprivileged users.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
-
-	This requirement generally applies to the design of an information technology product, but it can also apply to the configuration of particular information system components that are, or use, such products. This can be verified by acceptance/validation processes in DOD or other government agencies.
-
-	There may be shared resources with configurable protections (e.g., files in storage) that may be assessed on specific information system components.
-
-	Setting the kernel.perf_event_paranoid kernel parameter to "2" prevents attackers from gaining additional system information as a nonprivileged user.
-
-	Satisfies: SRG-OS-000132-GPOS-00067, SRG-OS-000138-GPOS-00069</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230270" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271747" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002408 - OL 9 must restrict exposed kernel pointer addresses access.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Exposing kernel pointers (through procfs or "seq_printf()") exposes kernel writeable structures, which may contain functions pointers. If a write vulnerability occurs in the kernel, allowing write access to any of this structure, the kernel can be compromised. This option disallows any program without the CAP_SYSLOG capability to get the addresses of kernel pointers by replacing them with "0".
-
-	Satisfies: SRG-OS-000132-GPOS-00067, SRG-OS-000433-GPOS-00192</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257800" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271748" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002409 - OL 9 must disable access to network bpf system call from nonprivileged processes.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Loading and accessing the packet filters programs and maps using the bpf() system call has the potential of revealing sensitive information about the kernel state.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230545" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271749" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002410 - OL 9 must restrict usage of ptrace to descendant processes.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Unrestricted usage of ptrace allows compromised binaries to run ptrace on other processes of the user. Like this, the attacker can steal sensitive information from the target processes (e.g., SSH sessions, web browser, etc.) without any additional assistance from the user (i.e., without resorting to phishing).</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230546" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271750" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-002411 - OL 9 must automatically exit interactive command shell user sessions after 15 minutes of inactivity.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Terminating an idle interactive command shell user session within a short time period reduces the window of opportunity for unauthorized personnel to take control of it when left unattended in a virtual terminal or physical console.
-
-	Satisfies: SRG-OS-000163-GPOS-00072, SRG-OS-000029-GPOS-00010</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271750" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271751" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002412 - OL 9 must be configured so that the systemd Ctrl-Alt-Delete burst key sequence is disabled.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>A locally logged-on user who presses Ctrl-Alt-Delete when at the console can reboot the system. If accidentally pressed, as could happen in the case of a mixed OS environment, this can create the risk of short-term loss of availability of systems due to unintentional reboot. In a graphical user environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is reduced because the user will be prompted before any action is taken.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230531" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271752" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002413 - OL 9 must be configured so that the x86 Ctrl-Alt-Delete key sequence is disabled.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>A locally logged-on user who presses Ctrl-Alt-Delete when at the console can reboot the system. If accidentally pressed, as could happen in the case of a mixed OS environment, this can create the risk of short-term loss of availability of systems due to unintentional reboot. In a graphical user environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is reduced because the user will be prompted before any action is taken.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230529" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271753" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002415 - OL 9 must limit the number of concurrent sessions to ten for all accounts and/or account types.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Operating system management includes the ability to control the number of users and user sessions that use an operating system. Limiting the number of allowed users and sessions per user is helpful in reducing the risks related to denial-of-service (DoS) attacks.
-
-	This requirement addresses concurrent sessions for information system accounts and does not address concurrent sessions by single users via multiple system accounts. The maximum number of concurrent sessions must be defined based on mission needs and the operational environment for each system.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230346" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271754" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002416 - OL 9 must automatically lock an account when three unsuccessful logon attempts occur during a 15-minute time period.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>By limiting the number of failed logon attempts the risk of unauthorized system access via user password guessing, otherwise known as brute-forcing, is reduced. Limits are imposed by locking the account.
-
-	Satisfies: SRG-OS-000329-GPOS-00128, SRG-OS-000021-GPOS-00005</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230335" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271755" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002417 - OL 9 must maintain an account lock until the locked account is released by an administrator.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>By limiting the number of failed logon attempts the risk of unauthorized system access via user password guessing, otherwise known as brute-forcing, is reduced. Limits are imposed by locking the account.
-
-	Satisfies: SRG-OS-000329-GPOS-00128, SRG-OS-000021-GPOS-00005</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230337" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271757" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002419 - OL 9 file systems must not contain shosts.equiv files.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The shosts.equiv files are used to configure host-based authentication for the system via SSH. Host-based authentication is not sufficient for preventing unauthorized access to the system, as it does not require interactive identification and authentication of a connection request, or for the use of two-factor authentication.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230283" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271758" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002420 - OL 9 file systems must not contain .shosts files.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The .shosts files are used to configure host-based authentication for individual users or the system via SSH. Host-based authentication is not sufficient for preventing unauthorized access to the system, as it does not require interactive identification and authentication of a connection request, or for the use of two-factor authentication.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230284" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271759" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002421 - OL 9 must implement DOD-approved encryption in the bind package.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
-
-	Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
-
-	OL 9 incorporates system-wide crypto policies by default. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/ directory.
-
-	Satisfies: SRG-OS-000423-GPOS-00187, SRG-OS-000426-GPOS-00190</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258242" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271761" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002423 - OL 9 must implement address space layout randomization (ASLR) to protect its memory from unauthorized code execution.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>ASLR makes it more difficult for an attacker to predict the location of attack code they have introduced into a process' address space during an attempt at exploitation. Additionally, ASLR makes it more difficult for an attacker to know the location of existing code to repurpose it using return-oriented programming (ROP) techniques.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230280" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271762" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002424 - OL 9 must use mechanisms meeting the requirements of applicable federal laws, executive orders, directives, policies, regulations, standards, and guidance for authentication to a cryptographic module.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Overriding the system crypto policy makes the behavior of Kerberos violate expectations and makes system configuration more fragmented.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258237" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271763" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002425 - OL 9 must be configured to prevent unrestricted mail relaying.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>If unrestricted mail relaying is permitted, unauthorized senders could use this host as a mail relay for the purpose of sending spam or other unauthorized activity.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230550" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271765" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-002427 - OL 9 must be configured so that local initialization files do not execute world-writable programs.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>If user start-up files execute world-writable programs, especially in unprotected directories, they could be maliciously modified to destroy user files or otherwise compromise the system at the user level. If the system is compromised at the user level, it is easier to elevate privileges to eventually compromise the system at the root and network level.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271765" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271766" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002428 - OL 9 must prevent the loading of a new kernel for later execution.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Changes to any software components can have significant effects on the overall security of the operating system. This requirement ensures the software has not been tampered with and that it has been provided by a trusted vendor.
-
-	Disabling kexec_load prevents an unsigned kernel image (that could be a windows kernel or modified vulnerable kernel) from being loaded. Kexec can be used subvert the entire secureboot process and should be avoided at all costs especially since it can load unsigned kernel images.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230266" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271768" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002430 - OL 9 must enable hardening for the Berkeley Packet Filter (BPF) just-in-time compiler.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>When hardened, the extended BPF just-in-time (JIT) compiler will randomize any kernel addresses in the BPF programs and maps and will not expose the JIT addresses in "/proc/kallsyms".</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244554" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271771" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002502 - OL 9 SSH private host key files must have mode 0640 or less permissive.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>If an unauthorized user obtains the private SSH host key file, the host could be impersonated.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230287" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271772" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002503 - OL 9 SSH public host key files must have mode 0644 or less permissive.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>If a public host key file is modified by an unauthorized user, the SSH service may be compromised.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230286" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271773" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-002504 - OL 9 system commands must be group-owned by root or a system account.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
-
-	This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271773" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271774" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-002505 - OL 9 system commands must be owned by root.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
-
-	This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271774" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271775" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-002506 - OL 9 system commands must have mode 755 or less permissive.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
-
-	This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271775" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271776" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002507 - OL 9 SSH server configuration file must be group-owned by root.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Service configuration files enable or disable features of their respective services, which if configured incorrectly, can lead to insecure and vulnerable configurations. Therefore, service configuration files must be owned by the correct group to prevent unauthorized changes.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257997" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271777" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002508 - OL 9 SSH server configuration file must be owned by root.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Service configuration files enable or disable features of their respective services, which if configured incorrectly, can lead to insecure and vulnerable configurations. Therefore, service configuration files must be owned by the correct group to prevent unauthorized changes.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257998" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271778" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002509 - OL 9 SSH server configuration file must have mode 0600 or less permissive.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Service configuration files enable or disable features of their respective services that if configured incorrectly can lead to insecure and vulnerable configurations. Therefore, service configuration files should be owned by the correct group to prevent unauthorized changes.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257999" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271782" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002513 - OL 9 local initialization files must have mode 0740 or less permissive.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Local initialization files are used to configure the user's shell environment upon logon. Malicious modification of these files could compromise accounts upon logon.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230325" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271784" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002515 - OL 9 local interactive user home directories must have mode 0750 or less permissive.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Excessive permissions on local interactive user home directories may allow unauthorized access to user files by other users.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257890" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271786" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-002520 - OL 9 library directories must be group-owned by root or a system account.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
-
-	This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271786" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271787" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-002521 - OL 9 library directories must be owned by root.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
-
-	This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271787" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271788" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-002522 - OL 9 library directories must have mode 755 or less permissive.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
-
-	This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271788" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271789" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002523 - OL 9 library files must be group-owned by root or a system account.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
-
-	This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230262" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271790" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002524 - OL 9 library files must be owned by root.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
-
-	This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230261" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271791" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-002525 - OL 9 library files must have mode 755 or less permissive.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
-
-	This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:260487" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271792" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002530 - OL 9 /boot/grub2/grub.cfg file must be group-owned by root.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "root" group is a highly privileged group. The group-owner of this file should not have any access privileges.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257790" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271793" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002531 - OL 9 /boot/grub2/grub.cfg file must be owned by root.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "/boot/grub2/grub.cfg" file stores sensitive system configuration. Protection of this file is critical for system security.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257791" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271794" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002532 - OL 9 /etc/group file must be group-owned by root.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "/etc/group" file contains information regarding groups that are configured on the system. Protection of this file is important for system security.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257899" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271795" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002533 - OL 9 /etc/group- file must be group-owned by root.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "/etc/group-" file is a backup file of "/etc/group", and as such, contains information regarding groups that are configured on the system. Protection of this file is important for system security.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257901" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271796" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002534 - OL 9 /etc/group file must be owned by root.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "/etc/group" file contains information regarding groups that are configured on the system. Protection of this file is important for system security.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257898" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271797" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002535 - OL 9 /etc/group- file must be owned by root.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "/etc/group-" file is a backup file of "/etc/group", and as such, contains information regarding groups that are configured on the system. Protection of this file is important for system security.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257900" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271798" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002536 - OL 9 /etc/group file must have mode 0644 or less permissive to prevent unauthorized access.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "/etc/group" file contains information regarding groups that are configured on the system. Protection of this file is important for system security.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257891" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271799" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002537 - OL 9 /etc/group- file must have mode 0644 or less permissive to prevent unauthorized access.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "/etc/group-" file is a backup file of "/etc/group", and as such, contains information regarding groups that are configured on the system. Protection of this file is important for system security.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257892" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271800" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002538 - OL 9 /etc/gshadow file must be group-owned by root.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "/etc/gshadow" file contains group password hashes. Protection of this file is critical for system security.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257903" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271801" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002539 - OL 9 /etc/gshadow- file must be group-owned by root.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "/etc/gshadow-" file is a backup of "/etc/gshadow", and as such, contains group password hashes. Protection of this file is critical for system security.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257905" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271802" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002540 - OL 9 /etc/gshadow file must be owned by root.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "/etc/gshadow" file contains group password hashes. Protection of this file is critical for system security.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257902" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271803" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002541 - OL 9 /etc/gshadow- file must be owned by root.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "/etc/gshadow-" file is a backup of "/etc/gshadow", and as such, contains group password hashes. Protection of this file is critical for system security.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257904" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271804" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002542 - OL 9 /etc/gshadow file must have mode 0000 or less permissive to prevent unauthorized access.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "/etc/gshadow" file contains group password hashes. Protection of this file is critical for system security.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257893" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271805" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002543 - OL 9 /etc/gshadow- file must have mode 0000 or less permissive to prevent unauthorized access.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "/etc/gshadow-" file is a backup of "/etc/gshadow", and as such, contains group password hashes. Protection of this file is critical for system security.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257894" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271806" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002544 - OL 9 /etc/passwd file must be group-owned by root.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "/etc/passwd" file contains information about the users that are configured on the system. Protection of this file is critical for system security.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257907" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271807" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002545 - OL 9 /etc/passwd- file must be group-owned by root.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "/etc/passwd-" file is a backup file of "/etc/passwd", and as such, contains information about the users that are configured on the system. Protection of this file is critical for system security.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257909" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271808" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002546 - OL 9 /etc/passwd file must be owned by root.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "/etc/passwd" file contains information about the users that are configured on the system. Protection of this file is critical for system security.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257906" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271809" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002547 - OL 9 /etc/passwd- file must be owned by root.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "/etc/passwd-" file is a backup file of "/etc/passwd", and as such, contains information about the users that are configured on the system. Protection of this file is critical for system security.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257908" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271810" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002548 - OL 9 /etc/passwd file must have mode 0644 or less permissive to prevent unauthorized access.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>If the "/etc/passwd" file is writable by a group-owner or the world the risk of its compromise is increased. The file contains the list of accounts on the system and associated information, and protection of this file is critical for system security.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257895" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271811" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002549 - OL 9 /etc/passwd- file must have mode 0644 or less permissive to prevent unauthorized access.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "/etc/passwd-" file is a backup file of "/etc/passwd", and as such, contains information about the users that are configured on the system. Protection of this file is critical for system security.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257896" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271812" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002550 - OL 9 /etc/shadow file must be group-owned by root.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "/etc/shadow" file stores password hashes. Protection of this file is critical for system security.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257911" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271813" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002551 - OL 9 /etc/shadow- file must be group-owned by root.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "/etc/shadow-" file is a backup file of "/etc/shadow", and as such, contains the list of local system accounts and password hashes. Protection of this file is critical for system security.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257913" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271814" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002552 - OL 9 /etc/shadow file must be owned by root.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "/etc/shadow" file contains the list of local system accounts and stores password hashes. Protection of this file is critical for system security. Failure to give ownership of this file to root provides the designated owner with access to sensitive information, which could weaken the system security posture.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257910" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271815" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002553 - OL 9 /etc/shadow- file must be owned by root.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "/etc/shadow-" file is a backup file of "/etc/shadow", and as such, contains the list of local system accounts and password hashes. Protection of this file is critical for system security.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257912" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271816" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002554 - OL 9 /etc/shadow- file must have mode 0000 or less permissive to prevent unauthorized access.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "/etc/shadow-" file is a backup file of "/etc/shadow", and as such, contains the list of local system accounts and password hashes. Protection of this file is critical for system security.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257897" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271817" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002555 - OL 9 /etc/shadow file must have mode 0000 to prevent unauthorized access.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The "/etc/shadow" file contains the list of local system accounts and stores password hashes. Protection of this file is critical for system security. Failure to give ownership of this file to root provides the designated owner with access to sensitive information, which could weaken the system security posture.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257934" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271818" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002560 - OL 9 /var/log directory must be group-owned by root.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state or can identify the OL 9 system or platform. Additionally, personally identifiable information (PII) and operational information must not be revealed through error messages to unauthorized personnel or their designated representatives.
-
-	The structure and content of error messages must be carefully considered by the organization and development team. The extent to which the information system is able to identify and handle error conditions is guided by organizational policy and operational requirements.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230250" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271819" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002561 - OL 9 /var/log directory must be owned by root.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state or can identify the OL 9 system or platform. Additionally, personally identifiable information (PII) and operational information must not be revealed through error messages to unauthorized personnel or their designated representatives.
-
-	The structure and content of error messages must be carefully considered by the organization and development team. The extent to which the information system is able to identify and handle error conditions is guided by organizational policy and operational requirements.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230249" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271820" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002562 - OL 9 /var/log directory must have mode 0755 or less permissive.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state or can identify the OL 9 system or platform. Additionally, personally identifiable information (PII) and operational information must not be revealed through error messages to unauthorized personnel or their designated representatives.
-
-	The structure and content of error messages must be carefully considered by the organization and development team. The extent to which the information system is able to identify and handle error conditions is guided by organizational policy and operational requirements.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230248" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271821" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002563 - OL 9 /var/log/messages file must be group-owned by root.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state or can identify the OL 9 system or platform. Additionally, personally identifiable information (PII) and operational information must not be revealed through error messages to unauthorized personnel or their designated representatives.
-
-	The structure and content of error messages must be carefully considered by the organization and development team. The extent to which the information system is able to identify and handle error conditions is guided by organizational policy and operational requirements.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230247" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271822" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002564 - OL 9 /var/log/messages file must be owned by root.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state or can identify the OL 9 system or platform. Additionally, personally identifiable information (PII) and operational information must not be revealed through error messages to unauthorized personnel or their designated representatives.
-
-	The structure and content of error messages must be carefully considered by the organization and development team. The extent to which the information system is able to identify and handle error conditions is guided by organizational policy and operational requirements.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230246" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271823" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002565 - OL 9 /var/log/messages file must have mode 0640 or less permissive.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state or can identify the OL 9 system or platform. Additionally, personally identifiable information (PII) and operational information must not be revealed through error messages to unauthorized personnel or their designated representatives.
-
-	The structure and content of error messages must be carefully considered by the organization and development team. The extent to which the information system is able to identify and handle error conditions is guided by organizational policy and operational requirements.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230245" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271824" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002570 - OL 9 audit tools must be group-owned by root.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Protecting audit information also includes identifying and protecting the tools used to view and manipulate log data; therefore, protecting audit tools is necessary to prevent unauthorized operation on audit information.
-
-	OL 9 systems providing tools to interface with audit information will leverage user permissions and roles identifying the user accessing the tools, and the corresponding rights the user enjoys, to make access decisions regarding the access to audit tools.
-
-	Audit tools include, but are not limited to, vendor-provided and open source audit tools needed to successfully view and manipulate audit information system activity and records. Audit tools include custom queries and report generators.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230474" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271825" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002571 - OL 9 audit tools must be owned by root.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Protecting audit information also includes identifying and protecting the tools used to view and manipulate log data. Therefore, protecting audit tools is necessary to prevent unauthorized operation on audit information.
-
-	OL 9 systems providing tools to interface with audit information will leverage user permissions and roles identifying the user accessing the tools, and the corresponding rights the user enjoys, to make access decisions regarding the access to audit tools.
-
-	Audit tools include, but are not limited to, vendor-provided and open source audit tools needed to successfully view and manipulate audit information system activity and records. Audit tools include custom queries and report generators.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230473" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271826" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002572 - OL 9 audit tools must have a mode of 0755 or less permissive.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Protecting audit information also includes identifying and protecting the tools used to view and manipulate log data. Therefore, protecting audit tools is necessary to prevent unauthorized operation on audit information.
-
-	OL 9 systems providing tools to interface with audit information will leverage user permissions and roles identifying the user accessing the tools, and the corresponding rights the user enjoys, to make access decisions regarding the access to audit tools.
-
-	Audit tools include, but are not limited to, vendor-provided and open source audit tools needed to successfully view and manipulate audit information system activity and records. Audit tools include custom queries and report generators.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230472" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271827" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002580 - OL 9 cron configuration directories must have a mode of 0700 or less permissive.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Service configuration files enable or disable features of their respective services that if configured incorrectly can lead to insecure and vulnerable configurations. Therefore, service configuration files should have the correct access rights to prevent unauthorized changes.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257888" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271828" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002581 - OL 9 cron configuration files directory must be group-owned by root.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Service configuration files enable or disable features of their respective services that if configured incorrectly can lead to insecure and vulnerable configurations; therefore, service configuration files should be owned by the correct group to prevent unauthorized changes.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257927" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271829" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002582 - OL 9 cron configuration files directory must be owned by root.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Service configuration files enable or disable features of their respective services that if configured incorrectly can lead to insecure and vulnerable configurations; therefore, service configuration files must be owned by the correct group to prevent unauthorized changes.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257926" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271830" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-002583 - OL 9 /etc/crontab file must have mode 0600.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Service configuration files enable or disable features of their respective services that if configured incorrectly can lead to insecure and vulnerable configurations; therefore, service configuration files must have the correct access rights to prevent unauthorized changes.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257933" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271831" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-003000 - OL 9 must be configured so that the root account is the only account having unrestricted access to the system.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>An account has root authority if it has a user identifier (UID) of "0". Multiple accounts with a UID of "0" afford more opportunity for potential intruders to guess a password for a privileged account. Proper configuration of sudo is recommended to afford multiple system administrators access to root privileges in an accountable manner.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230534" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271832" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-003001 - OL 9 duplicate User IDs (UIDs) must not exist for interactive users.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>To ensure accountability and prevent unauthenticated access, interactive users must be identified and authenticated to prevent potential misuse and compromise of the system.
-
-	Satisfies: SRG-OS-000104-GPOS-00051, SRG-OS-000121-GPOS-00062, SRG-OS-000042-GPOS-00020</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258045" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271833" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-003002 - OL 9 local interactive users must have a home directory assigned in the /etc/passwd file.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>If local interactive users are not assigned a valid home directory, there is no place for the storage and control of files they should own.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258051" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271834" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-003005 - OL 9 interactive users must have a primary group that exists.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>If a user is assigned the Group Identifier (GID) of a group that does not exist on the system, and a group with the GID is subsequently created, the user may have unintended rights to any files associated with the group.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258048" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271835" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-003006 - OL 9 groups must have unique Group ID (GID).</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>To ensure accountability and prevent unauthenticated access, groups must be identified uniquely to prevent potential misuse and compromise of the system.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258061" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271836" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-003010 - OL 9 must configure SELinux context type to allow the use of a nondefault faillock tally directory.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Not having the correct SELinux context on the faillock directory may lead to unauthorized access to the directory.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258080" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271839" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-003020 - OL 9 must automatically lock an account when three unsuccessful logon attempts occur.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>By limiting the number of failed logon attempts, the risk of unauthorized system access via user password guessing, otherwise known as brute-force attacks, is reduced. Limits are imposed by locking the account.
-
-	Satisfies: SRG-OS-000329-GPOS-00128, SRG-OS-000021-GPOS-00005</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230333" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271840" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-003021 - OL 9 must automatically lock the root account until the root account is released by an administrator when three unsuccessful logon attempts occur during a 15-minute time period.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>By limiting the number of failed logon attempts, the risk of unauthorized system access via user password guessing, also known as brute-forcing, is reduced. Limits are imposed by locking the account.
-
-	Satisfies: SRG-OS-000329-GPOS-00128, SRG-OS-000021-GPOS-00005</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230345" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271841" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-003022 - OL 9 must log username information when unsuccessful logon attempts occur.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Without auditing of these events, it may be harder or impossible to identify what an attacker did after an attack.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230343" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271842" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-003023 - OL 9 must ensure account lockouts persist.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Having lockouts persist across reboots ensures that account is only unlocked by an administrator. If the lockouts did not persist across reboots, an attacker could simply reboot the system to continue brute force attacks against the accounts on the system.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230339" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271845" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-003051 - OL 9 system accounts must not have an interactive login shell.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Ensuring shells are not given to system accounts upon login makes it more difficult for attackers to make use of system accounts.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258046" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271846" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-003052 - OL 9 local interactive user accounts must be assigned a home directory upon creation.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>If local interactive users are not assigned a valid home directory, there is no place for the storage and control of files they should own.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230324" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271849" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-003065 - OL 9 must disable account identifiers (individuals, groups, roles, and devices) after 35 days of inactivity.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Inactive identifiers pose a risk to systems and applications because attackers may exploit an inactive identifier and potentially obtain undetected access to the system.
-
-	Disabling inactive accounts ensures that accounts which may not have been responsibly removed are not available to attackers who may have compromised their credentials.
-
-	Owners of inactive accounts will not notice if unauthorized access to their user account has been obtained.
-
-	Satisfies: SRG-OS-000118-GPOS-00060, SRG-OS-000590-GPOS-00110</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230373" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271850" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-003070 - OL 9 must enforce a delay of at least four seconds between logon prompts following a failed logon attempt.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Increasing the time between a failed authentication attempt and reprompting to enter credentials helps to slow a single-threaded brute force attack.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230378" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271851" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-005000 - OL 9 remote access methods must be monitored.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Logging remote access methods can be used to trace the decrease in the risks associated with remote user access management. It can also be used to spot cyberattacks and ensure ongoing compliance with organizational policies surrounding the use of remote access methods.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258144" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271852" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-005005 - OL 9 must be configured to forward audit records via TCP to a different system or media from the system being audited via rsyslog.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Information stored in one location is vulnerable to accidental or incidental deletion or alteration.
-
-	Offloading is a common process in information systems with limited audit storage capacity.
-
-	OL 9 installation media provides "rsyslogd", a system utility providing support for message logging. Support for both internet and Unix domain sockets enables this utility to support both local and remote logging. Coupling this utility with "gnutls" (a secure communications library implementing the SSL, TLS, and DTLS protocols) creates a method to securely encrypt and offload auditing.
-
-	Rsyslog provides three ways to forward message: the traditional UDP transport, which is extremely lossy but standard; the plain TCP based transport, which loses messages only during certain situations but is widely available; and the RELP transport, which does not lose messages but is currently available only as part of the rsyslogd 3.15.0 and above.
-
-	Examples of each configuration:
-	UDP *.* @remotesystemname
-	TCP *.* @@remotesystemname
-	RELP *.* :omrelp:remotesystemname:2514
-	Note that a port number was given as there is no standard port for RELP.
-
-	Satisfies: SRG-OS-000479-GPOS-00224, SRG-OS-000342-GPOS-00133</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258149" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271854" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-005015 - OL 9 must authenticate the remote logging server for offloading audit logs via rsyslog.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Information stored in one location is vulnerable to accidental or incidental deletion or alteration.
-
-	Offloading is a common process in information systems with limited audit storage capacity.
-
-	OL 9 installation media provides "rsyslogd", a system utility providing support for message logging. Support for both internet and Unix domain sockets enables this utility to support both local and remote logging. Coupling this utility with "gnutls" (a secure communications library implementing the SSL, TLS, and DTLS protocols) creates a method to securely encrypt and offload auditing.
-
-	"Rsyslog" supported authentication modes include:
-	anon - anonymous authentication
-	x509/fingerprint - certificate fingerprint authentication
-	x509/certvalid - certificate validation only
-	x509/name - certificate validation and subject name authentication
-
-	Satisfies: SRG-OS-000342-GPOS-00133, SRG-OS-000479-GPOS-00224</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271854" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271855" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-005020 - OL 9 must encrypt the transfer of audit records offloaded onto a different system or media from the system being audited via rsyslog.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Information stored in one location is vulnerable to accidental or incidental deletion or alteration.
-
-	Offloading is a common process in information systems with limited audit storage capacity.
-
-	OL 9 installation media provides "rsyslogd", a system utility providing support for message logging. Support for both internet and Unix domain sockets enables this utility to support both local and remote logging. Coupling this utility with "gnutls" (a secure communications library implementing the SSL, TLS, and DTLS protocols) creates a method to securely encrypt and offload auditing.
-
-	"Rsyslog" supported authentication modes include:
-	anon - anonymous authentication
-	x509/fingerprint - certificate fingerprint authentication
-	x509/certvalid - certificate validation only
-	x509/name - certificate validation and subject name authentication
-
-	Satisfies: SRG-OS-000342-GPOS-00133, SRG-OS-000479-GPOS-00224</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271855" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271856" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-005025 - OL 9 must encrypt via the gtls driver the transfer of audit records offloaded onto a different system or media from the system being audited via rsyslog.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Information stored in one location is vulnerable to accidental or incidental deletion or alteration.
-
-	Offloading is a common process in information systems with limited audit storage capacity.
-
-	OL 9 installation media provides "rsyslogd", a system utility providing support for message logging. Support for both internet and Unix domain sockets enables this utility to support both local and remote logging. Coupling this utility with "gnutls" (a secure communications library implementing the SSL, TLS, and DTLS protocols) creates a method to securely encrypt and offload auditing.
-
-	Satisfies: SRG-OS-000342-GPOS-00133, SRG-OS-000479-GPOS-00224</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271856" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271857" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-005030 - OL 9 must be configured so that the rsyslog daemon does not accept log messages from other servers unless the server is being used for log aggregation.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Unintentionally running a rsyslog server accepting remote messages puts the system at increased risk. Malicious rsyslog messages sent to the server could exploit vulnerabilities in the server software itself, could introduce misleading information into the system's logs, or could fill the system's storage leading to a denial of service.
-
-	If the system is intended to be a log aggregation server, its use must be documented with the information system security officer (ISSO).</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271857" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271858" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-006000 - OL 9 must protect against or limit the effects of denial-of-service (DoS) attacks by ensuring rate-limiting measures on impacted network interfaces are implemented.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>DoS is a condition when a resource is not available for legitimate users. When this occurs, the organization either cannot accomplish its mission or must operate at degraded capacity.
-
-	This requirement addresses the configuration of OL 9 to mitigate the impact of DoS attacks that have occurred or are ongoing on system availability. For each system, known and potential DoS attacks must be identified and solutions for each type implemented. A variety of technologies exists to limit or, in some cases, eliminate the effects of DoS attacks (e.g., limiting processes or establishing memory partitions). Employing increased capacity and bandwidth, combined with service redundancy, may reduce the susceptibility to some DoS attacks.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230525" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271860" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-006002 - OL 9 must configure a DNS processing mode set be Network Manager.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>To ensure that DNS resolver settings are respected, a DNS mode in Network Manager must be configured.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257949" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271861" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-006003 - OL 9 systems using Domain Name Servers (DNS) resolution must have at least two name servers configured.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>To provide availability for name resolution services, multiple redundant name servers are mandated. A failure in name resolution could lead to the failure of security functions requiring name resolution, which may include time synchronization, centralized authentication, and remote system logging.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230316" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271862" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-006004 - OL 9 network interfaces must not be in promiscuous mode.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Network interfaces in promiscuous mode allow for the capture of all network traffic visible to the system. If unauthorized individuals can access these applications, it may allow them to collect information such as logon IDs, passwords, and key exchanges between systems.
-
-	If the system is being used to perform a network troubleshooting function, the use of these tools must be documented with the information systems security officer (ISSO) and restricted to only authorized personnel.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230554" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271864" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-006020 - OL 9 must ignore Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirect messages.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
-
-	This feature of the IPv4 protocol has few legitimate uses. It should be disabled unless absolutely required.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271864" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271865" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-006021 - OL 9 must not forward Internet Protocol version 4 (IPv4) source-routed packets.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Source-routed packets allow the source of the packet to suggest routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when IPv4 forwarding is enabled and the system is functioning as a router.
-
-	Accepting source-routed packets in the IPv4 protocol has few legitimate uses. It must be disabled unless it is absolutely required.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271865" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271866" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-006022 - OL 9 must log IPv4 packets with impossible addresses.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The presence of "martian" packets (which have impossible addresses) as well as spoofed packets, source-routed packets, and redirects could be a sign of nefarious network activity. Logging these packets enables this activity to be detected.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271866" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271867" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-006023 - OL 9 must log IPv4 packets with impossible addresses by default.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>The presence of "martian" packets (which have impossible addresses) as well as spoofed packets, source-routed packets, and redirects could be a sign of nefarious network activity. Logging these packets enables this activity to be detected.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271867" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271868" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-006024 - OL 9 must use reverse path filtering on all IPv4 interfaces.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Enabling reverse path filtering drops packets with source addresses that should not have been able to be received on the interface on which they were received. It must not be used on systems that are routers for complicated networks but is helpful for end hosts and routers serving small networks.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271868" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271869" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-006025 - OL 9 must prevent IPv4 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
-
-	This feature of the IPv4 protocol has few legitimate uses. It must be disabled unless absolutely required.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271869" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271870" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-006026 - OL 9 must not forward IPv4 source-routed packets by default.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Source-routed packets allow the source of the packet to suggest routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures.
-
-	Accepting source-routed packets in the IPv4 protocol has few legitimate uses. It must be disabled unless it is absolutely required, such as when IPv4 forwarding is enabled and the system is legitimately functioning as a router.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271870" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271871" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-006027 - OL 9 must use a reverse-path filter for IPv4 network traffic, when possible, by default.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Enabling reverse path filtering drops packets with source addresses that should not have been able to be received on the interface on which they were received. It must not be used on systems that are routers for complicated networks but is helpful for end hosts and routers serving small networks.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271871" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271872" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-006028 - OL 9 must not enable IPv4 packet forwarding unless the system is a router.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Routing protocol daemons are typically used on routers to exchange network topology information with other routers. If this capability is used when not required, system network information may be unnecessarily transmitted across the network.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271872" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271873" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-006030 - OL 9 must not respond to Internet Control Message Protocol (ICMP) echoes sent to a broadcast address.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Responding to broadcast (ICMP) echoes facilitates network mapping and provides a vector for amplification attacks.
-
-	Ignoring ICMP echo requests (pings) sent to broadcast or multicast addresses makes the system slightly more difficult to enumerate on the network.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271873" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271874" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-006031 - OL 9 must limit the number of bogus Internet Control Message Protocol (ICMP) response errors logs.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Some routers will send responses to broadcast frames that violate RFC-1122, which fills up a log file system with many useless error messages. An attacker may take advantage of this and attempt to flood the logs with bogus error logs. Ignoring bogus ICMP error responses reduces log size, although some activity would not be logged.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271874" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271875" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-006032 - OL 9 must not send Internet Control Message Protocol (ICMP) redirects.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages contain information from the system's route table possibly revealing portions of the network topology.
-
-	The ability to send ICMP redirects is only appropriate for systems acting as routers.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271875" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271876" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-006033 - OL 9 must not allow interfaces to perform Internet Control Message Protocol (ICMP) redirects by default.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages contain information from the system's route table possibly revealing portions of the network topology.
-
-	The ability to send ICMP redirects is only appropriate for systems acting as routers.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271876" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271877" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-006040 - OL 9 must not accept router advertisements on all IPv6 interfaces.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>An illicit router advertisement message could result in a man-in-the-middle attack.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271877" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271878" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-006041 - OL 9 must ignore IPv6 Internet Control Message Protocol (ICMP) redirect messages.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>An illicit ICMP redirect message could result in a man-in-the-middle attack.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271878" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271879" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-006042 - OL 9 must not forward IPv6 source-routed packets.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Source-routed packets allow the source of the packet to suggest that routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when forwarding is enabled and the system is functioning as a router.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271879" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271880" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-006043 - OL 9 must not enable IPv6 packet forwarding unless the system is a router.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>IP forwarding permits the kernel to forward packets from one network interface to another. The ability to forward packets between two networks is only appropriate for systems acting as routers.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271880" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271881" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-006044 - OL 9 must not accept router advertisements on all IPv6 interfaces by default.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>An illicit router advertisement message could result in a man-in-the-middle attack.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271881" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271882" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-006045 - OL 9 must prevent IPv6 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271882" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271883" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-006046 - OL 9 must not forward IPv6 source-routed packets by default.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Source-routed packets allow the source of the packet to suggest that routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when forwarding is enabled and the system is functioning as a router.
-
-	Accepting source-routed packets in the IPv6 protocol has few legitimate uses. It must be disabled unless it is absolutely required.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230539" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271884" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-006050 - OL 9 must be configured to use TCP syncookies.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Denial of service (DoS) is a condition when a resource is not available for legitimate users. When this occurs, the organization either cannot accomplish its mission or must operate at degraded capacity. 
-
-	Managing excess capacity ensures that sufficient capacity is available to counter flooding attacks. Employing increased capacity and service redundancy may reduce the susceptibility to some DoS attacks. Managing excess capacity may include, for example, establishing selected usage priorities, quotas, or partitioning.
-
-	Satisfies: SRG-OS-000420-GPOS-00186, SRG-OS-000142-GPOS-00071</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271884" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271885" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-008000 - OL 9 audit system must protect logon UIDs from unauthorized change.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>If modification of login user identifiers (UIDs) is not prevented, they can be changed by nonprivileged users and make auditing complicated or impossible.
-
-	Satisfies: SRG-OS-000462-GPOS-00206, SRG-OS-000475-GPOS-00220, SRG-OS-000057-GPOS-00027, SRG-OS-000058-GPOS-00028, SRG-OS-000059-GPOS-00029</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230403" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:271886" version="1" class="compliance">
-          <metadata>
-            <title>OL09-00-008005 - OL 9 audit system must protect auditing rules from unauthorized change.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Unauthorized disclosure of audit records can reveal system and configuration data to attackers, thus compromising its confidentiality.
-
-	Audit information includes all information (e.g., audit records, audit settings, audit reports) needed to successfully audit OL 9 system activity.
-
-	In immutable mode, unauthorized users cannot execute changes to the audit system to potentially hide malicious activity and then put the audit rules back. A system reboot would be noticeable, and a system administrator could then investigate the unauthorized changes.
-
-	Satisfies: SRG-OS-000057-GPOS-00027, SRG-OS-000058-GPOS-00028, SRG-OS-000059-GPOS-00029</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230402" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.ol9os:def:278952" version="2" class="compliance">
-          <metadata>
-            <title>OL09-00-002584 - OL 9 must audit any script or executable called by cron as root or by any privileged user.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <description>Any script or executable called by cron as root or by any privileged user must be owned by that user, must have the permissions 0755 or more restrictive, and should have no extended rights that allow any nonprivileged user to modify the script or executable.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:274870" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:257988" version="1" class="compliance">
-          <metadata>
-            <title>RHEL-09-255060 - RHEL 9 must implement DOD-approved encryption ciphers to protect the confidentiality of SSH client connections.</title>
-            <affected family="unix">
-              <platform>Red Hat Enterprise Linux 9</platform>
-            </affected>
-            <description>Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
-
-Remote access (e.g., RDP) is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, non-organization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
-
-Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
-
-RHEL 9 incorporates system-wide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the /etc/sysconfig/sshd file. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/opensshserver.config file.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257988" />
-          </criteria>
-        </definition>
-      </definitions>
-      <tests>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:230345" version="1" check_existence="all_exist" check="all" comment="check /etc/security/faillock.conf for the even_deny_root setting">
-          <object object_ref="oval:mil.disa.stig.ind:obj:230345" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:10001201" version="1" check_existence="at_least_one_exists" check="all" comment="net.ipv6.conf.all.disable_ipv6 setting in sysctl configuration files is set to 1, and nothing else">
-          <object object_ref="oval:mil.disa.stig.ind:obj:10001203" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:10001202" version="1" check_existence="at_least_one_exists" check="all" comment="ipv6.disable=1 in the kernel cmdline">
-          <object object_ref="oval:mil.disa.stig.ind:obj:10001204" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:20441700" version="2" check_existence="at_least_one_exists" check="at least one" comment="libuser.conf, defaults/crypt_style exists">
-          <object object_ref="oval:mil.disa.stig.ind:obj:20441700" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20441700" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:20441701" version="4" check_existence="at_least_one_exists" check="all" comment="libuser.conf, crypt_style = sha512">
-          <object object_ref="oval:mil.disa.stig.ind:obj:20441701" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20441701" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23023100" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/login.defs:ENCRYPT_METHOD &gt;= SHA512">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23023100" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23023100" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23023200" version="2" check_existence="none_exist" check="all" comment="No active password hash in /etc/shadow has a prefix other than '$6$'.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23023201" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23023300" version="4" check_existence="any_exist" check="all" comment="/etc/login.defs: SHA_CRYPT_MIN_ROUNDS, if set, is set to 100000 or greater">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23023300" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23023300" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23023301" version="4" check_existence="any_exist" check="all" comment="/etc/login.defs: SHA_CRYPT_MAX_ROUNDS, if set, is set to 100000 or greater">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23023301" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23023300" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23023302" version="1" check="all" comment="/etc/login.defs: SHA_CRYPT_MIN_ROUNDS is set">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23023300" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23023303" version="1" check="all" comment="/etc/login.defs: SHA_CRYPT_MAX_ROUNDS is set">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23023301" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23023700" version="1" check_existence="only_one_exists" check="all" comment="/etc/pam.d/password-auth:password includes pam_unix.so sha512">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23023700" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23024000" version="2" check_existence="only_one_exists" check="all" comment="selinux is enforcing">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23024000" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23024000" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23024001" version="2" check_existence="only_one_exists" check="all" comment="/etc/selinux/config:SELINUX=enforcing">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23024001" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23024001" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23026400" version="1" check_existence="all_exist" check="all" comment="Every /etc/yum.repos.d/*.repo:[{reponame}] has a gpgcheck set to 1.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23026400" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23026400" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23026401" version="1" check_existence="all_exist" check="none satisfy" comment="No /etc/yum.repos.d/*.repo:[{reponame}] has a gpgcheck set to 0.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23026400" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23026401" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23026500" version="2" check="all" comment="/etc/dnf/dnf.conf: localpkg_gpgcheck is set to True, 1, or yes.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23026500" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000021" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23026601" version="1" check_existence="at_least_one_exists" check="all" comment="kernel.kexec_load_disabled setting in sysctl configuration files is set to 1, and nothing else">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23026603" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23026701" version="1" check_existence="at_least_one_exists" check="all" comment="fs.protected_symlinks setting in sysctl configuration files is set to 1, and nothing else, and there are no conflicting settings in other files">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23026703" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23026801" version="3" check_existence="at_least_one_exists" check="all" comment="fs.protected_hardlinks setting in /etc/sysctl.d/99-sysctl.conf is set to 1, and nothing else, and there are no conflicting settings in other files">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23026803" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23026801" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23026900" version="3" check_existence="at_least_one_exists" check="all" comment="kernel.dmesg_restrict setting in system sysctl configuration files is set to 1">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23026902" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23027001" version="1" check_existence="at_least_one_exists" check="all" comment="kernel.perf_event_paranoid setting in /etc/sysctl.d/99-*.conf is set to 2, and nothing else, and there are no conflicting settings in other files">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23027003" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000004" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23027100" version="1" check_existence="none_exist" check="all" comment="'NOPASSWD' does not exist in /etc/sudoers">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23027100" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23027101" version="1" check_existence="none_exist" check="all" comment="'NOPASSWD' does not exist in /etc/sudoers.d">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23027101" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23027800" version="1" check="all" comment="BLS options contain vsyscall=none">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25779300" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23027800" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23027801" version="1" check="all" comment="The GRUB_CMDLINE_LINUX arguments in /etc/default/grub contain vsyscall=none">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25779301" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23027800" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23028000" version="2" check_existence="at_least_one_exists" check="all" comment="kernel.randomize_va_space setting in admin sysctl configuration files is set to 2">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23028002" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000004" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23028100" version="1" check="all" comment="/etc/dnf/dnf.conf: clean_requirements_on_remove is set to True, 1 or yes">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23028100" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23028200" version="1" check="all" comment="/etc/selinux/config: SELINUXTYPE=targeted">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23028200" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23028200" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23028800" version="2" check_existence="at_least_one_exists" check="all" comment="/etc/ssh/sshd_config or /etc/ssh/sshd_config.d/*:StrictModes == yes">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23028802" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000016" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23029201" version="1" check_existence="all_exist" check="all" comment="There is a separate file system configured for /var.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23029201" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23029401" version="1" check_existence="all_exist" check="all" comment="There is a separate file system configured for audit data directory.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23029401" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23029500" version="1" check_existence="all_exist" check="all" comment="There is a separate file system configured for /tmp.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23029500" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23029600" version="2" check_existence="at_least_one_exists" check="all" comment="/etc/ssh/sshd_config:PermitRootLogin == no">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23029602" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000017" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23030001" version="1" check_existence="any_exist" check="all" comment="If /boot is configured in /etc/fstab, it is configured with the nosuid option">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23030001" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:2303001" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23030101" version="1" check_existence="any_exist" check="all" comment="Device files are configured in /etc/fstab to use the nodev option.  Mounts on '/' are ignored.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23030101" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23030100" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23030600" version="1" check_existence="any_exist" check="all" comment="all nfs entries in /etc/fstab have noexec">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23030600" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23030600" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23030601" version="1" check_existence="any_exist" check="all" comment="all nfs entries in /etc/mtab have noexec">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23030601" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23030600" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23030800" version="1" check_existence="at_least_one_exists" check="all" comment="NFS mounts are mounted with nosuid">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25785400" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23030800" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23031100" version="2" check_existence="at_least_one_exists" check="all" comment="kernel.core_pattern setting in sysctl configuration files is set to |/bin/false">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23031102" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23031100" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23031300" version="2" check="all" comment="For the global domain, core is set to 0.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23031300" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23031300" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23031301" version="2" check_existence="any_exist" check="all" comment="If core is set for any specific domains, it is set to 0.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23031301" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23031300" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23031400" version="1" check="all" comment="/usr/systemd/coredump.conf:Storage is set to none.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23031400" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000014" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23031500" version="1" check="all" comment="core dump backtraces are disabled">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23031500" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23031500" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23031600" version="1" check_existence="at_least_one_exists" check="all" comment="The system is using DNS">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23031600" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23031600" />
-        </textfilecontent54_test>
-        <variable_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23031601" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/resolv.conf is configured with at least two name servers">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23031601" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23031601" />
-        </variable_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23031602" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/resolv.conf contains at least one nameserver entry">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23031602" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23032400" version="1" check_existence="at_least_one_exists" check="all" comment="All local interactive user accounts are assigned a home directory upon creation">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23032400" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000016" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23032900" version="2" check="all" comment="AutomaticLoginEnable is set to false in /etc/gdm/custom.conf.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23032900" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000000" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23033300" version="1" check_existence="at_least_one_exists" check="all" state_operator="AND" comment="deny is set to 3 or less but not 0 in /etc/security/faillock.conf">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23033300" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23033300" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000015" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23033500" version="3" check_existence="at_least_one_exists" check="all" state_operator="AND" comment="/etc/security/faillock.conf:fail_interval &lt;=900 and !=0">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23033500" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23033500" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000024" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23033700" version="2" check_existence="all_exist" check="all" comment="unlock_time is set to 0 in /etc/security/faillock.conf">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23033700" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23033900" version="1" check="all" comment="/etc/security/faillock.conf: dir = var/log/faillock">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23033900" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23033900" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23034300" version="1" check_existence="all_exist" check="all" comment="check /etc/security/faillock.conf for the audit setting">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23034300" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23034600" version="1" check_existence="at_least_one_exists" check="all" comment="limits.conf and limits.d/*.conf:maxlogins is set to 10 or less by default">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23034600" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23034600" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23034601" version="1" check_existence="any_exist" check="all" comment="limits.conf and limits.d/*.conf:maxlogins is set to 10 or less for non-default domains">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23034603" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23034600" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23035100" version="2" check_existence="at_least_one_exists" check="at least one" comment="dconf smartcard removal-action lock-screen">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23035100" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23035100" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23035600" version="1" check="all" comment="The pam_pwquality module is included in password-auth.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23035600" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23035700" version="1" check="all" comment="at least one uppercase character is required">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23035700" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000020" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23035800" version="1" check="all" comment="at least one lowercase character is required">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23035800" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000020" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23035900" version="1" check="all" comment="at least one numeric character is required">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23035900" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000020" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23036000" version="1" check="all" comment="The maximum number of repeating characters of the same character class be limited to four when passwords are changed.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23036000" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23036000" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000015" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23036100" version="1" check="all" comment="The maximum number of repeating characters is limited to three when passwords are changed.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23036100" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23036100" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000015" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23036200" version="1" check="all" comment="Passwords contain at least four character classes.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23036200" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23036200" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23036300" version="1" check="all" comment="at least 8 characters must change when passwords are changed">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23036300" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23036300" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23036400" version="1" check_existence="none_exist" check="all" comment="Root does not have a minimum password age of 0 or blank">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23036400" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23036500" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/login.defs:PASS_MIN_DAYS &gt;= 1">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23036500" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23036500" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23036900" version="1" check="all" comment="passwords must have a minimum of 15 characters">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23036900" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23036900" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23037300" version="2" check="all" comment="/etc/default/useradd: INACTIVE is set to 35 or less, but not -1">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23037300" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000019" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23037300" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23037500" version="1" check="all" comment="Passwords contain at least one special character">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23037500" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000020" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23037600" version="3" check_existence="none_exist" check="all" comment="/etc/sssd/sssd.conf:cache_credentials = false">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23037606" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23037602" version="2" check_existence="at_least_one_exists" check="all" comment="/etc/sssd/sssd.conf:offline_credentials_expiration = 1">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23037608" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23037700" version="2" check="all" comment="passwords must not be dictionary words">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23037700" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000024" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23037800" version="1" check="all" comment="/etc/login.defs: FAIL_DELAY = 4 or greater">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23037800" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23037800" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23038200" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/ssh/sshd_config:PrintLastLog == yes">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23038200" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000016" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23038300" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/login.defs:UMASK == 077">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23038300" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23038300" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23038501" version="1" check_existence="all_exist" check="all" comment="UMASK is set to only 077 in /etc/csh.cshrc">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23038501" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23038500" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23038600" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of execve syscall comparing uids">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23038600" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23038601" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of execve syscall comparing uids">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23038601" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23038602" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of execve syscall comparing gids">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23038602" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23038603" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of execve syscall comparing gids">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23038603" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23038800" version="1" check="all" comment="/etc/audit/auditd.conf: action_mail_acct = root">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23038800" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23038800" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23038900" version="2" check="all" comment="/etc/aliases contains 'postmaster: root'">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23038900" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23039000" version="1" check="all" state_operator="OR" comment="/etc/audit/auditd.conf: disk_error_action = SYSLOG, SINGLE, or HALT">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23039000" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23039000" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23039001" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23039002" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23039200" version="1" check="all" state_operator="OR" comment="/etc/audit/auditd.conf: disk_full_action = SYSLOG, SINGLE, or HALT">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23039200" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23039200" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23039201" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23039202" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23039300" version="2" check="all" comment="/etc/audit/auditd.conf: local_events = yes">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23039300" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000022" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23039400" version="1" check="all" state_operator="OR" comment="/etc/audit/auditd.conf: name_format = hostname, fqd or numeric">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23039400" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23039400" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23039401" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23039402" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23039500" version="2" check="all" comment="/etc/audit/auditd.conf: log_format = enriched">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23039500" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23039500" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23040200" version="1" check="all" comment="/etc/audit/audit.rules: -e 2 option is present and is the last line in the file">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23040200" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23040300" version="1" check="all" comment="/etc/audit/audit.rules: --loginuid-immutable option is present">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23040300" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23040400" version="1" check_existence="all_exist" check="all" comment="Events resulting in modifications to /etc/shadow are audited">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23040400" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23040500" version="1" check_existence="all_exist" check="all" comment="Audit modifications to /etc/security/opasswd">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23040500" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23040600" version="1" check_existence="all_exist" check="all" comment="Audit modifications to /etc/passwd">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23040600" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23040700" version="1" check_existence="all_exist" check="all" comment="Audit modifications to /etc/gshadow">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23040700" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23040800" version="1" check_existence="all_exist" check="all" comment="Audit modifications to /etc/group">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23040800" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23040900" version="1" check_existence="all_exist" check="all" comment="Audit modifications to /etc/sudoers">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23040900" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23041000" version="1" check_existence="all_exist" check="all" comment="Audit modifications to /etc/sudoers.d/">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23041000" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23041200" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/bin/su">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23041200" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23041300" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of setxattr syscall (auid&gt;=1000)">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23041300" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23041301" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of setxattr syscall (auid&gt;=1000)">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23041301" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23041302" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of setxattr syscall (auid=0)">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23041302" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23041303" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of setxattr syscall (auid=0)">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23041303" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23041800" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/bin/chage">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23041800" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23041900" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/bin/chcon">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23041900" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23042100" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/bin/ssh-agent">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23042100" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23042200" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/bin/passwd">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23042200" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23042300" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/bin/mount">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23042300" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23042400" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/bin/umount">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23042400" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23042600" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/sbin/unix_update">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23042600" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23042700" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/sbin/postdrop">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23042700" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23042800" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/sbin/postqueue">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23042800" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23042900" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/sbin/semanage">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23042900" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23043000" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/sbin/setfiles">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23043000" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23043100" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/sbin/userhelper">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23043100" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23043200" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/sbin/setsebool">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23043200" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23043300" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/sbin/unix_chkpwd">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23043300" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23043400" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/libexec/openssh/ssh-keysign">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23043400" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23043500" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/bin/setfacl">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23043500" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23043600" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/sbin/pam_timestamp_check">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23043600" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23043700" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/bin/newgrp">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23043700" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23043800" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of init_module syscall">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23043800" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23043801" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of init_module syscall">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23043801" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23043802" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of finit_module syscall">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23043802" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23043803" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of finit_module syscall">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23043803" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044400" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/bin/gpasswd">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23044400" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044600" version="2" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of delete_module syscall">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23044600" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044601" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of delete_module syscall">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23044601" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044700" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/bin/crontab">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23044700" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044800" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/bin/chsh">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23044800" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044900" version="1" check="all" comment="Audit 32-bit invocations of truncate syscall with exit EPERM">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23044900" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044901" version="1" check="all" comment="Audit 64-bit invocations of truncate syscall with exit EPERM">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23044901" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044902" version="1" check="all" comment="Audit 32-bit invocations of truncate syscall with exit EACCES">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23044902" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044903" version="1" check="all" comment="Audit 64-bit invocations of truncate syscall with exit EACCES">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23044903" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044904" version="1" check="all" comment="Audit 32-bit invocations of ftruncate syscall with exit EPERM">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23044904" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044905" version="1" check="all" comment="Audit 64-bit invocations of ftruncate syscall with exit EPERM">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23044905" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044906" version="1" check="all" comment="Audit 32-bit invocations of ftruncate syscall with exit EACCES">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23044906" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044907" version="1" check="all" comment="Audit 64-bit invocations of ftruncate syscall with exit EACCES">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23044907" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044908" version="1" check="all" comment="Audit 32-bit invocations of creat syscall with exit EPERM">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23044908" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044909" version="1" check="all" comment="Audit 64-bit invocations of creat syscall with exit EPERM">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23044909" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044910" version="1" check="all" comment="Audit 32-bit invocations of creat syscall with exit EACCES">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23044910" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044911" version="1" check="all" comment="Audit 64-bit invocations of creat syscall with exit EACCES">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23044911" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044912" version="1" check="all" comment="Audit 32-bit invocations of open syscall with exit EPERM">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23044912" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044913" version="1" check="all" comment="Audit 64-bit invocations of open syscall with exit EPERM">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23044913" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044914" version="1" check="all" comment="Audit 32-bit invocations of open syscall with exit EACCES">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23044914" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044915" version="1" check="all" comment="Audit 64-bit invocations of open syscall with exit EACCES">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23044915" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044916" version="1" check="all" comment="Audit 32-bit invocations of openat syscall with exit EPERM">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23044916" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044917" version="1" check="all" comment="Audit 64-bit invocations of openat syscall with exit EPERM">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23044917" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044918" version="1" check="all" comment="Audit 32-bit invocations of openat syscall with exit EACCES">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23044918" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044919" version="1" check="all" comment="Audit 64-bit invocations of openat syscall with exit EACCES">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23044919" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044920" version="1" check="all" comment="Audit 32-bit invocations of open_by_handle_at syscall with exit EPERM">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23044920" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044921" version="1" check="all" comment="Audit 64-bit invocations of open_by_handle_at syscall with exit EPERM">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23044921" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044922" version="1" check="all" comment="Audit 32-bit invocations of open_by_handle_at syscall with exit EACCES">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23044922" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044923" version="1" check="all" comment="Audit 64-bit invocations of open_by_handle_at syscall with exit EACCES">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23044923" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23045500" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of chown syscall">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23045500" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23045501" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of chown syscall">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23045501" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23045502" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of lchown syscall">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23045502" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23045503" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of lchown syscall">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23045503" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23045504" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of fchownat syscall">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23045504" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23045505" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of fchownat syscall">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23045505" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23045506" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of fchown syscall">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23045506" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23045507" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of fchown syscall">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23045507" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23045600" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of chmod syscall">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23045600" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23045601" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of chmod syscall">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23045601" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23045602" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of fchmod syscall">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23045602" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23045603" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of fchmod syscall">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23045603" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23045604" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of fchmodat syscall">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23045604" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23045605" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of fchmodat syscall">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23045605" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23046200" version="1" check_existence="all_exist" check="all" comment="Invocations of /usr/bin/sudo are audited">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23046200" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23046300" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/sbin/usermod">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23046300" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23046400" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/bin/chacl">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23046400" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23046500" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/bin/kmod">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23046500" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23046700" version="1" check_existence="all_exist" check="all" comment="Audit modifications to /var/log/lastlog">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23046700" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23046800" version="1" check="all" comment="BLS options contain audit=1">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25779300" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23046800" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23046801" version="1" check="all" comment="The GRUB_CMDLINE_LINUX arguments in /etc/default/grub contain audit=1">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25779301" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23046800" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23046900" version="2" check="all" comment="The Boot Loader Specification options have audit_backlog_limit set to 8192 or greater.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23046900" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23046900" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23046901" version="2" check="all" comment="The GRUB_CMDLINE_LINUX arguments in /etc/default/grub have audit_backlog_limit set to 8192 or greater.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23046901" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23046900" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23047000" version="1" check="all" comment="FirewallBackend is set to nftables in /etc/usbguard/usbguard-daemon.conf.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23047000" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23047000" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23047500" version="1" check="all" comment="/etc/aide.conf has a selection line for /usr/sbin/auditctl.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23047500" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23047501" version="1" check="all" comment="/etc/aide.conf has a selection line for /usr/sbin/auditd.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23047501" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23047502" version="1" check="all" comment="/etc/aide.conf has a selection line for /usr/sbin/ausearch.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23047502" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23047503" version="1" check="all" comment="/etc/aide.conf has a selection line for /usr/sbin/aureport.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23047503" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23047504" version="1" check="all" comment="/etc/aide.conf has a selection line for /usr/sbin/autrace.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23047504" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23047505" version="1" check="all" comment="/etc/aide.conf has a selection line for /usr/sbin/augenrules.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23047505" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23048000" version="1" check="all" state_operator="OR" comment="/etc/audit/auditd.conf: overflow_action = syslog, single or halt">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23048000" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23039000" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23039001" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23039002" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23048100" version="1" check_existence="at_least_one_exists" check="all" comment="ActionSendStreamDriverMode == 1">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23048100" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23048300" version="2" check="all" comment="/etc/audit/auditd.conf: space_left greater than or equal to 25%">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23048300" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23048300" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23048301" version="1" check="all" comment="/etc/audit/auditd.conf: space_left less than 100%">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23048300" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23048301" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23048500" version="1" check="all" comment="The chrony daemon is disabled from acting as a server.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23048500" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23048600" version="1" check="all" comment="/etc/chrony.conf: cmdport option is set to 0">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23048600" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23049100" version="1" check="all" comment="BLS options contain pti=on">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25779300" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23049100" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23049101" version="1" check="all" comment="The GRUB_CMDLINE_LINUX arguments in /etc/default/grub contain pti=on">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25779301" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23049100" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23049400" version="2" check="all" comment="/etc/modprobe.d contains a file that contains 'install atm /bin/false'">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23049400" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23049401" version="1" check="all" comment="/etc/modprobe.d contains a file that contains 'blacklist atm'">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23049401" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23049501" version="1" check="all" comment="/etc/modprobe.d contains a file that contains 'blacklist can'">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23049501" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23049600" version="2" check="all" comment="/etc/modprobe.d contains a file that contains 'install sctp /bin/false'">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23049600" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23049601" version="1" check="all" comment="/etc/modprobe.d contains a file that contains 'blacklist sctp'">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23049601" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23049700" version="2" check="all" comment="/etc/modprobe.d contains a file that contains 'install tipc /bin/false'">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23049700" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23049701" version="1" check="all" comment="/etc/modprobe.d contains a file that contains 'blacklist tipc'">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23049701" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23049800" version="2" check="all" comment="/etc/modprobe.d contains a file that contains 'install cramfs /bin/false'">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23049800" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23049801" version="1" check="all" comment="/etc/modprobe.d contains a file that contains 'blacklist cramfs'">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23049801" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23049802" version="1" check="all" comment="/etc/modprobe.conf contains 'install cramfs /bin/false'">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23049802" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23049803" version="1" check="all" comment="/etc/modprobe.conf contains 'blacklist cramfs'">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23049803" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23049900" version="2" check="all" comment="/etc/modprobe.d contains a file that contains 'install firewire-core /bin/false'">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23049900" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23049901" version="1" check="all" comment="/etc/modprobe.d contains a file that contains 'blacklist firewire-core'">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23049901" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23050300" version="2" check="all" comment="/etc/modprobe.d contains a file that contains 'install usb-storage /bin/false'">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23050300" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23050301" version="1" check="all" comment="/etc/modprobe.d contains a file that contains 'blacklist usb-storage'">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23050301" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23050700" version="1" check="all" comment="/etc/modprobe.d contains a file that contains 'install bluetooth /bin/false'">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23050700" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23050701" version="1" check="all" comment="/etc/modprobe.d contains a file that contains 'blacklist bluetooth'">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23050701" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23050800" version="1" check_existence="any_exist" check="all" comment="If /dev/shm is configured in /etc/fstab, it is configured with the nodev option.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23050900" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23030100" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23050900" version="1" check_existence="any_exist" check="all" comment="If /dev/shm is configured in /etc/fstab, it is configured with the nosuid option">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23050900" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23050900" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23051001" version="1" check_existence="any_exist" check="all" comment="If /dev/shm is configured in /etc/fstab, it is configured with the noexec option">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23051001" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23051001" />
-        </textfilecontent54_test>
-        <variable_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23051101" version="1" check="all" comment="/tmp is configured with the nodev option in /etc/fstab">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23051101" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23051100" />
-        </variable_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23051102" version="1" check="all" comment="/tmp is configured in /etc/fstab">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23051102" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23051201" version="1" check="all" comment="/tmp is configured with the nosuid option in /etc/fstab">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23051201" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23051200" />
-        </textfilecontent54_test>
-        <variable_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23051401" version="1" check="all" comment="/var/log is configured with the nodev option in /etc/fstab">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23051401" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23051400" />
-        </variable_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23051402" version="1" check="all" comment="/var/log is configured in /etc/fstab">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23051402" />
-        </textfilecontent54_test>
-        <variable_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23051501" version="1" check="all" comment="/var/log is configured with the nosuid option in /etc/fstab">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23051501" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23051500" />
-        </variable_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23051502" version="1" check="all" comment="/var/log is configured in /etc/fstab">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23051502" />
-        </textfilecontent54_test>
-        <variable_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23051600" version="1" check="all" comment="/var/log is configured with the noexec option in /etc/fstab">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23051600" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23051600" />
-        </variable_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23051601" version="1" check="all" comment="/var/log is configured in /etc/fstab">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23051601" />
-        </textfilecontent54_test>
-        <variable_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23051701" version="1" check="all" comment="/var/log/audit is configured with the nodev option in /etc/fstab">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23051701" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23051700" />
-        </variable_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23051702" version="1" check="all" comment="/var/log/audit is configured in /etc/fstab">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23051702" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23051800" version="1" check="all" comment="/var/log/audit is configured in /etc/fstab with the nosuid option.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23051702" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:2303001" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23051901" version="1" check="all" comment="/var/log/audit is configured with the noexec option in /etc/fstab">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23051901" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23051900" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23052001" version="1" check_existence="any_exist" check="all" comment="If /var/tmp is configured in /etc/fstab, it is configured with the nodev option">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23052001" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23052000" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23052101" version="1" check_existence="any_exist" check="all" comment="If /var/tmp is configured in /etc/fstab, it is configured with the nosuid option">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23052101" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23052101" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23052500" version="1" check="all" comment="FirewallBackend is set to nftables in /etc/firewalld/firewalld.conf.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23052500" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23052500" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23052700" version="1" check_existence="all_exist" check="all" comment="/etc/ssh/sshd_config:RekeyLimit max data and time are greater than zero.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23052700" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23052700" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23052701" version="1" check_existence="all_exist" check="all" comment="/etc/ssh/sshd_config.d:RekeyLimit max data and time are greater than zero.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23052701" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23052700" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23053100" version="2" check_existence="all_exist" check="all" comment="/etc/systemd/system.conf:CtrlAltDelBurstAction is set to none.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23053100" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000014" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23053903" version="3" check_existence="at_least_one_exists" check="all" comment="net.ipv6.conf.default.accept_source_route setting in /etc/sysctl.d/99-sysctl.conf is set to 0, and nothing else">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23053903" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23054501" version="1" check="all" comment="kernel.unprivileged_bpf_disabled is set to 1, and nothing else, and there are no conflicting settings in other files">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23054501" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23054601" version="1" check="all" comment="kernel.yama.ptrace_scope in sysctl configuration files is set to 1, and nothing else, and there are no conflicting settings in other files">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23054603" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23054801" version="1" check="all" comment="user.max_user_namespaces is set to 0 in the sysctl configuration files.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23054803" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23055001" version="1" check="all" comment="/etc/postfix/main.cf: smtpd_client_restrictions = permit_mynetworks,reject">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23055001" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23055500" version="2" check_existence="at_least_one_exists" check="all" comment="/etc/ssh/sshd_config or /etc/ssh/sshd_config.d/*:X11Forwarding == no">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23055500" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000017" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23055600" version="3" check_existence="at_least_one_exists" check="all" comment="sshd_config X11UseLocalhost is set to yes.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23055600" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000016" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23481500" version="2" check_existence="at_least_one_exists" check="all" comment="/etc/ssh/sshd_config:LogLevel == VERBOSE">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23481502" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23481500" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23764200" version="1" check_existence="at_least_one_exists" check="all" comment="Defaults !targetpw in /etc/sudoers">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23764200" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23764201" version="1" check_existence="at_least_one_exists" check="at least one" comment="/etc/sudoers.d included in /etc/sudoers">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23764201" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23764200" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23764202" version="1" check_existence="at_least_one_exists" check="all" comment="Defaults !targetpw in /etc/sudoers.d">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23764202" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23764203" version="1" check_existence="at_least_one_exists" check="all" comment="Defaults !rootpw in /etc/sudoers">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23764203" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23764204" version="1" check_existence="at_least_one_exists" check="all" comment="Defaults !rootpw in /etc/sudoers.d">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23764204" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23764205" version="1" check_existence="at_least_one_exists" check="all" comment="Defaults !runaspw in /etc/sudoers">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23764205" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23764206" version="1" check_existence="at_least_one_exists" check="all" comment="Defaults !runaspw in /etc/sudoers.d">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23764206" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23764300" version="2" check="all" comment="Defaults timestamp_timeout is to a positive number in /etc/sudoers and /etc/sudoers.d.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23764302" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000019" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23827800" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/bin/sudoedit">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23827800" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23828500" version="1" check="all" comment="Audit modifications to /var/log/tallylog">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23828500" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24451900" version="1" check_existence="all_exist" check="all" comment="/etc/dconf/db/local.d/*/banner-message-enable is set to true">
-          <object object_ref="oval:mil.disa.stig.ind:obj:24451900" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000001" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24452300" version="1" check_existence="all_exist" check="all" comment="emergency.service config correct">
-          <object object_ref="oval:mil.disa.stig.ind:obj:24452300" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:24452300" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24452800" version="1" check="all" comment="/etc/ssh/sshd_config.d: GSSAPIAuthentication is set to no">
-          <object object_ref="oval:mil.disa.stig.ind:obj:24452800" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000017" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24452801" version="1" check="all" comment="/etc/ssh/sshd_config: GSSAPIAuthentication is set to no">
-          <object object_ref="oval:mil.disa.stig.ind:obj:24452801" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000017" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24453001" version="2" check_existence="at_least_one_exists" check="all" comment="If /boot/efi is configured in /etc/fstab, it is configured with the nosuid option">
-          <object object_ref="oval:mil.disa.stig.ind:obj:24453001" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:2445301" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24453801" version="1" check_existence="at_least_one_exists" check="all" comment="Check that the idle-delay setting is locked from nonprivileged user modification">
-          <object object_ref="oval:mil.disa.stig.ind:obj:24453801" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24453900" version="1" check="all" comment="/org/gnome/desktop/screensaver/lock-enabled in /etc/dconf/db/local.d/locks/*">
-          <object object_ref="oval:mil.disa.stig.ind:obj:24453900" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24454000" version="1" check_existence="none_exist" check="all" comment="There are no instances of nullok in /etc/pam.d/system-auth.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:24454000" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24454100" version="1" check_existence="none_exist" check="all" comment="There are no instances of nullok in /etc/pam.d/password-auth.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:24454100" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24454300" version="1" check="all" comment="/etc/audit/auditd.conf: space_left_action = email">
-          <object object_ref="oval:mil.disa.stig.ind:obj:24454300" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:24454300" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24455401" version="1" check="all" comment="net.core.bpf_jit_harden is set to 2 in the sysctl configuration files.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:24455401" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000004" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24877400" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of the rmdir">
-          <object object_ref="oval:mil.disa.stig.ind:obj:24877400" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24877401" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of the rmdir">
-          <object object_ref="oval:mil.disa.stig.ind:obj:24877401" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25170600" version="1" check_existence="none_exist" check="all" comment="There are no accounts in /etc/shadow that have blank password fields.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25170600" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25171300" version="1" check_existence="at_least_one_exists" check="at least one" comment="system-auth pam_pwquality">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25171300" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25171300" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25171400" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/pam.d/system-auth:retry not greater than 3 and not 0">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25171400" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000018" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25299700" version="4" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of rename">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25299700" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25299701" version="4" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of rename">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25299701" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25299800" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of renameat">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25299800" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25299801" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of renameat">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25299801" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25300000" version="4" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of unlink">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25300000" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25300001" version="4" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of unlink">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25300001" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25300100" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of unlinkat">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25300100" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25300101" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of unlinkat">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25300101" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303400" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of fsetxattr syscall (auid&gt;=1000)">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25303400" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303401" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of fsetxattr syscall (auid&gt;=1000)">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25303401" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303402" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of fsetxattr syscall (auid=0)">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25303402" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303403" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of fsetxattr syscall (auid=0)">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25303403" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303500" version="1" check="all" comment="Audit 32-bit invocations of the lsetxattr system call.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25303500" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303501" version="1" check="all" comment="Audit 64-bit invocations of the lsetxattr system call.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25303501" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303502" version="1" check="all" comment="Audit 32-bit invocations of the lsetxattr system call by root user.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25303502" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303503" version="1" check="all" comment="Audit 64-bit invocations of the lsetxattr system call by root user.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25303503" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303600" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of fremovexattr syscall">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25303600" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303601" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of fremovexattr syscall">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25303601" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303602" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of fremovexattr syscall by root">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25303602" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303603" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of fremovexattr syscall by root">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25303603" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303700" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of lremovexattr syscall">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25303700" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303701" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of lremovexattr syscall">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25303701" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303702" version="2" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of lremovexattr syscall by root">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25303702" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303703" version="2" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of lremovexattr syscall by root">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25303703" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303800" version="1" check="all" comment="Audit 32-bit invocations of the removexattr system call.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25303800" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303801" version="1" check="all" comment="Audit 64-bit invocations of the removexattr system call.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25303801" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303802" version="1" check="all" comment="Audit 32-bit invocations of the removexattr system call by root user.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25303802" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303803" version="1" check="all" comment="Audit 64-bit invocations of the removexattr system call by root user.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25303803" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25778700" version="2" check_existence="all_exist" check="all" comment="/etc/grub2.cfg:superusers exists and has a name.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25778700" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25778700" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25778701" version="1" check_existence="all_exist" check="all" comment="/boot/grub2/user.cfg:GRUB2_PASSWORD exists and has a PBKDF2/SHA512 password assigned.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25778701" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25778701" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25778800" version="1" check="all" comment="BLS options contain systemd.confirm_spawn">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25779300" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25778800" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25778801" version="1" check="all" comment="The GRUB_CMDLINE_LINUX arguments in /etc/default/grub contain systemd.confirm_spawn">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25779301" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25778800" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25779300" version="1" check_existence="at_least_one_exists" check="all" comment="BLS options contain page_poison=1">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25779300" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25779300" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25779301" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/default/grub page_poison=1">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25779301" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25779300" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25780001" version="1" check_existence="at_least_one_exists" check="all" comment="kernel.kptr_restrict is set to 1 in the sysctl configuration files, and no conflicting configs exist.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23054703" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23054701" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25780400" version="2" check="all" comment="/etc/modprobe.conf contains a file that contains 'install atm /bin/false'">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25780400" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25780401" version="1" check="all" comment="/etc/modprobe.conf contains a file that contains 'blacklist atm'">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25780401" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25780600" version="1" check="all" comment="/etc/modprobe.conf contains 'install firewire-core /bin/false'">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25780600" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25780601" version="1" check="all" comment="/etc/modprobe.conf contains 'blacklist firewire-core'">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25780601" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25780700" version="1" check="all" comment="/etc/modprobe.conf contains 'install sctp /bin/false'">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25780700" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25780701" version="1" check="all" comment="/etc/modprobe.conf contains 'blacklist sctp'">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25780701" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25782000" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/dnf/dnf.conf gpgcheck=1">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25782000" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25782000" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25785300" version="1" check_existence="any_exist" check="all" comment="NFS mounts have the sec option">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25785400" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25785300" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25785301" version="2" check_existence="any_exist" check="all" comment="NFS mounts have one or more sec=krb5p:krb5i:krb5 options">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25785400" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25785301" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25785302" version="1" check_existence="any_exist" check="none satisfy" comment="NFS mounts do not have the sec=sys option">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25785400" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25785302" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25785400" version="1" check_existence="at_least_one_exists" check="all" comment="NFS mounts are present">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25785400" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25785401" version="1" check_existence="at_least_one_exists" check="all" comment="NFS mounts are mounted with nodev">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25785400" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25785400" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25786900" version="1" check="all" comment="/var is configured in /etc/fstab with the nodev option.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25786900" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25785400" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25794900" version="2" check_existence="at_least_one_exists" check="all" state_operator="OR" comment="DNS setting exists in NetworkManager.conf and is default, none or systemd-resolved">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25794900" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25794901" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25794902" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25794903" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25794901" version="1" check_existence="at_least_one_exists" check="all" comment="DNS setting exists in NetworkManager.conf main section">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25794901" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25794900" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25798100" version="3" check_existence="at_least_one_exists" check="all" comment="/etc/ssh/sshd_config:banner == /etc/issue">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25798102" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25798100" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25798101" version="1" check_existence="none_exist" check="all" comment="/etc/ssh/sshd_config:banner == none">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25798105" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25798300" version="1" check="all" comment="/etc/ssh/sshd_config.d: PubkeyAuthentication is set to yes">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25798300" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000016" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25798301" version="1" check="all" comment="/etc/ssh/sshd_config: PubkeyAuthentication is set to yes">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25798301" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000016" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25798400" version="3" check_existence="at_least_one_exists" check="all" comment="/etc/ssh/sshd_config or /etc/ssh/sshd_config.d/*:PermitEmptyPasswords == no">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25798400" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000017" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25798600" version="2" check="all" comment="/etc/ssh/sshd_config or /etc/ssh/sshd_config.d/*:UsePAM == yes">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25798600" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000023" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25798800" version="1" check_existence="at_least_one_exists" check="at least one" comment="sshd_config includes crypto-policies">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25798800" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25798800" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25798801" version="1" check_existence="at_least_one_exists" check="at least one" comment="sshd_config includes sshd_config.d">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25798800" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25798801" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25798802" version="1" check_existence="at_least_one_exists" check="at least one" comment="sshd_config.d includes crypto-policies">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25798801" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25798800" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25798900" version="1" check_existence="at_least_one_exists" check="all" state_operator="OR" comment="openssh.config ciphers correct">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25798900" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25798900" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25798901" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25799100" version="2" check_existence="at_least_one_exists" check="all" state_operator="OR" comment="/etc/crypto-policies/back-ends/openssh.config: MACs use FIPS 140-3 validated cryptographic hash algorithms">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25799100" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25799100" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25799101" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25799200" version="1" check_existence="at_least_one_exists" check="all" comment="HostbasedAuthentication option is not set to yes in /etc/ssh/sshd_config and /etc/ssh/sshd_config.d/*.conf.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25799200" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000017" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25799600" version="1" check_existence="at_least_one_exists" check="all" state_operator="AND" comment="/etc/ssh/sshd_config or /etc/ssh/sshd_config.d/.*:ClientAliveInterval == 600">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25799602" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25799600" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25799601" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25800200" version="2" check_existence="at_least_one_exists" check="all" state_operator="OR" comment="/etc/ssh/sshd_config or /etc/ssh/sshd_config.d/.*: Compression == no or Compression == delayed">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25800202" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000017" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25294300" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25800400" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/ssh/sshd_config + sshd_config.d:KerberosAuthentication == no">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25800401" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000017" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25800401" version="1" check_existence="all_exist" check="all" comment="/etc/ssh/sshd_config:KerberosAuthentication == no">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25800402" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000017" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25800500" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/ssh/sshd_config:IgnoreRhosts == yes">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25800500" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000016" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25800600" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/ssh/sshd_config:IgnoreUserKnownHosts == yes">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25800600" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000016" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25800601" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/ssh/sshd_config.d:IgnoreUserKnownHosts == yes">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25800601" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000016" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25800900" version="1" check="all" comment="/etc/ssh/sshd_config.d: PrintLastLog is set to yes">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25800900" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000016" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25801300" version="1" check_existence="at_least_one_exists" check="all" comment="/org/gnome/login-screen/banner-message-enable in dconf user database locks directories exists">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25801300" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25801400" version="1" check="all" comment="The system disables the GUI automount feature.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25801400" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000000" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25801500" version="1" check="all" comment="/org/gnome/desktop/media-handling/automount-open in /etc/dconf/db/local.d/locks/*">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25801500" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25801700" version="4" check_existence="at_least_one_exists" check="all" comment="check that /etc/dconf/profile/user:system-db is at minimum set to local">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25801700" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25801701" version="1" check_existence="at_least_one_exists" check="all" comment="Check that the automount setting is locked from nonprivileged user modification">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25801701" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25802000" version="1" check_existence="at_least_one_exists" check="all" comment="/org/gnome/settings-daemon/peripherals/smartcard/removal-action in dconf user database locks directories exists">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25802000" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25802600" version="1" check_existence="at_least_one_exists" check="all" comment="dconf user database(s) exist">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25802600" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25802601" version="1" check_existence="at_least_one_exists" check="all" comment="/org/gnome/desktop/screensaver/lock-delay in dconf user database locks directories exists">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25802601" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25802900" version="1" check_existence="at_least_one_exists" check="at least one" comment="dconf disable-restart-buttons true">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25802900" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25802900" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25803000" version="1" check_existence="at_least_one_exists" check="all" comment="Check that the disable-restart-button setting is locked from nonprivileged user modification">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25803000" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25803200" version="1" check_existence="at_least_one_exists" check="all" comment="/org/gnome/settings-daemon/plugins/media-keys/logout is locked in /etc/dconf/db/local.d/locks/*">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25803200" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25804100" version="1" check="all" comment="PASS_MAX_DAYS is less than or equal to 60 but greater than 0.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25804100" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000015" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25804100" />
-        </textfilecontent54_test>
-        <variable_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25804500" version="1" check_existence="at_least_one_exists" check="all" comment="UIDs are unique">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25804501" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25804500" />
-        </variable_test>
-        <variable_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25806100" version="1" check_existence="at_least_one_exists" check="all" comment="GIDs are unique">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25806101" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25806100" />
-        </variable_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25807200" version="1" check_existence="all_exist" check="all" comment="UMASK is set to 077 in /etc/bashrc">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25807200" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000025" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25807500" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/profile:umask == 077">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25807500" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000025" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25808000" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/security/faillock.conf dir option exists">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25808000" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25808600" version="1" check_existence="none_exist" check="all" comment="'!authenticate' does not exist in /etc/sudoers">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25808600" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25808601" version="1" check_existence="none_exist" check="all" comment="'!authenticate' does not exist in /etc/sudoers.d">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25808601" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25808700" version="1" check_existence="none_exist" check="all" comment="ALL does not exist /etc/sudoers">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25808700" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25808701" version="1" check_existence="none_exist" check="all" comment="ALL does not exist in /etc/sudoers.d">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25808701" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25808800" version="1" check="all" comment="Users must be members of the wheel group to run the su command.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25808800" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25809900" version="2" check="all" comment="The pam_unix module is included in password-auth and configured for 100000 or more rounds.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25809900" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25810000" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25810000" version="2" check="all" comment="The pam_unix module is included in system-auth and configured for 100000 or more rounds.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25810000" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25810000" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25810100" version="1" check="all" comment="Password complexity rules are enforced for the root account">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25810100" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25811800" version="1" check_existence="none_exist" check="all" comment="pam_succeed_if is not present in /etc/pam.d/sudo">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25811800" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25812100" version="1" check="all" comment="/etc/opensc.conf: card_drivers = cac">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25812100" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25812100" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25812200" version="2" check_existence="at_least_one_exists" check="all" comment="sssd.conf: pam_cert_auth = True">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25812202" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25812200" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25812300" version="1" check_existence="at_least_one_exists" check="all" comment="sssd config: certificate_verification: ocsp_dgst=sha512">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25812302" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25812300" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25812900" version="1" check_existence="at_least_one_exists" check="all" comment="/usr/lib/systemd/system/rescue.service:ExecStart is set to -/usr/lib/systemd/systemd-sulogin-shell rescue">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25812900" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25812901" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/systemd/system/rescue.service.d/*.conf:ExecStart is set to -/usr/lib/systemd/systemd-sulogin-shell rescue">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25812901" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25814400" version="1" check="all" comment="rsyslog: auth.* is configured to be logged">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25814400" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25814401" version="1" check="all" comment="rsyslog: authpriv.* is configured to be logged">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25814401" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25814402" version="1" check="all" comment="rsyslog: daemon.* is configured to be logged">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25814402" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25814500" version="1" check="all" comment="/etc/audit/plugins.d/syslog.conf: active = yes">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25814500" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000023" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25814600" version="1" check_existence="at_least_one_exists" check="all" comment="ActionSendStreamDriverAuthMode == x509/name">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25814600" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25814600" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25814800" version="1" check_existence="at_least_one_exists" check="all" comment="DefaultNetstreamDriver == gtls">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25814800" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25814800" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25814900" version="1" check_existence="at_least_one_exists" check="all" comment="remote TCP logging">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25814900" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25814900" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25814901" version="2" check_existence="at_least_one_exists" check="at least one" comment="remote TCP logging (advanced syntax)">
-          <object object_ref="oval:mil.disa.stig.ind:obj:20000002" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000027" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25814902" />
-        </textfilecontent54_test>
-        <variable_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25815500" version="1" check_existence="all_exist" check="all" comment="Audit file system total space &gt;= 10GiB">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25815500" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25815500" />
-        </variable_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25815800" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/audit/auditd.conf: admin_space_left = 5%">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25815800" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25815800" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25815900" version="1" check="all" comment="/etc/audit/auditd.conf: admin_space_left_action = SINGLE">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25815900" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23039001" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25816000" version="1" check="all" state_operator="OR" comment="/etc/audit/auditd.conf: max_log_file_action is ROTATE or SINGLE">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25816000" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25816000" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25816001" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25816800" version="1" check_existence="at_least_one_exists" check="all" state_operator="AND" comment="/etc/audit/auditd.conf: freq = 1-100">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25816800" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25816800" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25816801" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25817000" version="1" check="all" comment="/etc/audit/auditd.conf: write_logs = yes">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25817000" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000022" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25821100" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/sbin/init">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25821100" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25821200" version="1" check="all" comment="Audit invocations of /usr/sbin/poweroff">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25821200" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25821300" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/sbin/reboot">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25821300" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25821400" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/sbin/shutdown">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25821400" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25821500" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of umount syscall">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25821500" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25821600" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of umount2 syscall">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25821600" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25821601" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of umount2 syscall">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25821601" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25822400" version="1" check="all" comment="Audit modifications to /var/log/faillock">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25822400" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25822700" version="1" check="all" comment="/etc/audit/audit.rules: -f 2 option is present">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25822700" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25823000" version="1" check_existence="all_exist" check="all" comment="fips_enabled == 1">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25823000" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25823200" version="1" check_existence="at_least_one_exists" check="at least one" comment="ipsec.conf includes crypto-policy">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25823200" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25823200" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25823201" version="1" check_existence="at_least_one_exists" check="at least one" comment="ipsec.conf includes /etc/ipsec.d/*.conf">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25823200" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25823201" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25823202" version="1" check_existence="at_least_one_exists" check="at least one" comment="/etc/ipsec.d/*.conf includes crypto-policy">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25823201" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25823200" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25824201" version="1" check_existence="at_least_one_exists" check="at least one" comment="named.conf includes crypto-policy">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25824201" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25824200" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:27017700" version="1" check="all" state_operator="OR" comment="openssh.config ciphers correct">
-          <object object_ref="oval:mil.disa.stig.ind:obj:27017700" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25798900" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25798901" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:27017800" version="1" check_existence="at_least_one_exists" check="all" state_operator="OR" comment="/etc/crypto-policies/back-ends/openssh.config: MACs use FIPS 140-3 validated cryptographic hash algorithms">
-          <object object_ref="oval:mil.disa.stig.ind:obj:27017800" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25799100" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25799101" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:27143800" version="2" check_existence="at_least_one_exists" check="all" comment="The Oracle Linux 9 minor version is supported.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:27143800" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000019" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:27170900" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/ssh/sshd_config:ClientAliveCountMax = 1">
-          <object object_ref="oval:mil.disa.stig.ind:obj:27170902" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:27172000" version="1" check_existence="at_least_one_exists" check="all" comment="The PermitUserEnvironment option is not set to yes in /etc/ssh/sshd_config and /etc/ssh/sshd_config.d/*.conf.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:27172000" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000017" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:27173400" version="1" check="all" comment="BLS options contain slub_debug=P">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25779300" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:27173400" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:27173401" version="1" check="all" comment="The GRUB_CMDLINE_LINUX arguments in /etc/default/grub contain slub_debug=P">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25779301" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:27173400" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:27175000" version="1" check_existence="at_least_one_exists" check="all" comment="TMOUT option is set to 900 or less in /etc/profile and /etc/profile.d/*.sh.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:27175000" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:27175000" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:27185700" version="1" check_existence="none_exist" check="all" comment="no remote log acceptance">
-          <object object_ref="oval:mil.disa.stig.ind:obj:27185700" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:27487000" version="1" check_existence="all_exist" check="all" comment="Audit modifications to /etc/cron.d">
-          <object object_ref="oval:mil.disa.stig.ind:obj:27487000" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:27487001" version="1" check_existence="all_exist" check="all" comment="Audit modifications to /var/spool/cron">
-          <object object_ref="oval:mil.disa.stig.ind:obj:27487001" />
-        </textfilecontent54_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:10000500" version="1" check_existence="all_exist" check="all" comment="Gnome is installed">
-          <object object_ref="oval:mil.disa.stig.linux:obj:10000500" />
-        </rpminfo_test>
-        <dpkginfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:10000501" version="1" check_existence="all_exist" check="all" comment="Gnome is installed">
-          <object object_ref="oval:mil.disa.stig.linux:obj:10000501" />
-        </dpkginfo_test>
-        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23024000" version="1" check_existence="at_least_one_exists" check="all" comment="selinux is active">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23024000" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:23024000" />
-        </partition_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23024100" version="1" check_existence="all_exist" check="all" comment="package policycoreutils is installed">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23024100" />
-        </rpminfo_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23027300" version="1" check_existence="all_exist" check="all" comment="package openssl-pkcs11 is installed">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23027300" />
-        </rpminfo_test>
-        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23028501" version="2" check_existence="at_least_one_exists" check="all" comment="rngd.service is active">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23028501" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000003" />
-        </systemdunitproperty_test>
-        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23029200" version="1" check_existence="all_exist" check="all" comment="There is a separate file system for /var.">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23029200" />
-        </partition_test>
-        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23029300" version="1" check_existence="all_exist" check="all" comment="There is a separate file system for /var/log.">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23029300" />
-        </partition_test>
-        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23029400" version="1" check_existence="all_exist" check="all" comment="There is a separate file system for audit data directory.">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23029400" />
-        </partition_test>
-        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23029500" version="1" check_existence="all_exist" check="all" comment="There is a separate file system for /tmp.">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23029500" />
-        </partition_test>
-        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23029900" version="1" check="all" comment="/home is mounted with the nosuid option.">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23032800" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000002" />
-        </partition_test>
-        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23030000" version="1" check_existence="any_exist" check="all" comment="If /boot is mounted, it is mounted with the nosuid option">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23030000" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000002" />
-        </partition_test>
-        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23030100" version="1" check_existence="any_exist" check="all" comment="Device files are mounted with the nodev option.  Mounts on '/' are ignored.">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23030100" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000001" />
-        </partition_test>
-        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23031000" version="2" check_existence="any_exist" check="all" comment="kdump.service LoadState is masked if it exists.">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23031000" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000005" />
-        </systemdunitproperty_test>
-        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23031001" version="2" check_existence="any_exist" check="all" comment="kdump.service UnitFileState is masked if it exists.">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23031001" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000005" />
-        </systemdunitproperty_test>
-        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23031002" version="1" check_existence="any_exist" check="all" comment="kdump.service ActiveState is inactive if it exists.">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23031002" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000007" />
-        </systemdunitproperty_test>
-        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23031200" version="2" check_existence="any_exist" check="all" comment="systemd-coredump.socket LoadState is masked if exists">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23031200" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000005" />
-        </systemdunitproperty_test>
-        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23031201" version="2" check_existence="any_exist" check="all" comment="systemd-coredump.socket UnitFileState is masked if exists">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23031201" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000005" />
-        </systemdunitproperty_test>
-        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23032800" version="1" check_existence="all_exist" check="all" comment="A separate operating system filesystem is used for user home directories">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23032800" />
-        </partition_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23041100" version="1" check_existence="all_exist" check="all" comment="package audit is installed">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23041100" />
-        </rpminfo_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23047700" version="1" check_existence="all_exist" check="all" comment="The rsyslog package is installed.">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23047700" />
-        </rpminfo_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23047800" version="1" check_existence="all_exist" check="all" comment="package rsyslog-gnutls is installed">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23047800" />
-        </rpminfo_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23048700" version="1" check_existence="none_exist" check="all" comment="package telnet-server is NOT installed">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23048700" />
-        </rpminfo_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23048900" version="1" check_existence="none_exist" check="all" comment="package sendmail is NOT installed">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23048900" />
-        </rpminfo_test>
-        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23050200" version="1" check_existence="any_exist" check="all" comment="autofs.service ActiveState is inactive if it exists.">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23050200" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000007" />
-        </systemdunitproperty_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23050500" version="1" check="all" comment="firewalld package is installed">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23050500" />
-        </rpminfo_test>
-        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23050800" version="1" check_existence="any_exist" check="all" comment="If /dev/shm is mounted, it is mounted with the nodev option.">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23050900" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000001" />
-        </partition_test>
-        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23050900" version="1" check_existence="any_exist" check="all" comment="If /dev/shm is mounted, it is mounted with the nosuid option">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23050900" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:23050900" />
-        </partition_test>
-        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23051000" version="1" check_existence="any_exist" check="all" comment="If /dev/shm is mounted, it is mounted with the noexec option">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23051000" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000000" />
-        </partition_test>
-        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23051100" version="1" check="all" comment="/tmp is mounted with the nodev option">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23051100" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000001" />
-        </partition_test>
-        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23051200" version="1" check="all" comment="/tmp is mounted with the nosuid option">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23051200" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000002" />
-        </partition_test>
-        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23051300" version="1" check="all" comment="/tmp is mounted with the noexec option">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23029500" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000000" />
-        </partition_test>
-        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23051400" version="1" check="all" comment="/var/log is mounted with the nodev option">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23051400" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000001" />
-        </partition_test>
-        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23051500" version="1" check="all" comment="/var/log is mounted with the nosuid option">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23051500" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000002" />
-        </partition_test>
-        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23051600" version="1" check="all" comment="/var/log is mounted with the noexec option">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23051600" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:23051600" />
-        </partition_test>
-        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23051700" version="1" check="all" comment="/var/log/audit is mounted with the nodev option">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23051700" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000001" />
-        </partition_test>
-        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23051800" version="1" check="all" comment="/var/log/audit is mounted with the nosuid option.">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23051700" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000002" />
-        </partition_test>
-        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23051900" version="1" check="all" comment="/var/log/audit is mounted with the noexec option">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23051900" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000000" />
-        </partition_test>
-        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23052000" version="1" check_existence="any_exist" check="all" comment="If /var/tmp is mounted, it is mounted with the nodev option">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23052000" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000001" />
-        </partition_test>
-        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23052100" version="1" check_existence="any_exist" check="all" comment="If /var/tmp is mounted, it is mounted with the nosuid option">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23052100" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000002" />
-        </partition_test>
-        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23052200" version="1" check="all" comment="/var/tmp is mounted with the noexec option">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23052200" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000000" />
-        </partition_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23053300" version="1" check_existence="none_exist" check="all" comment="The tftp-server package is absent.">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23053300" />
-        </rpminfo_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23055000" version="1" check="all" comment="The postfix package is installed">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23055000" />
-        </rpminfo_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23055300" version="1" check_existence="none_exist" check="all" comment="The graphical display manager is absent.">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23055300" />
-        </rpminfo_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23055900" version="1" check_existence="none_exist" check="all" comment="gssproxy">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23055900" />
-        </rpminfo_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23056000" version="1" check_existence="none_exist" check="all" comment="package iprutils is NOT installed">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23056000" />
-        </rpminfo_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23056100" version="1" check="all" comment="tuned package is installed">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23056100" />
-        </rpminfo_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:24452700" version="1" check="all" comment="The rng-tools package is installed.">
-          <object object_ref="oval:mil.disa.stig.linux:obj:24452700" />
-        </rpminfo_test>
-        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:24452900" version="1" check_existence="at_least_one_exists" check="all" comment="/var/tmp is mounted">
-          <object object_ref="oval:mil.disa.stig.linux:obj:24452900" />
-        </partition_test>
-        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:24453000" version="2" check_existence="at_least_one_exists" check="all" comment="If /boot/efi is mounted, it is mounted with the nosuid option">
-          <object object_ref="oval:mil.disa.stig.linux:obj:24453000" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000002" />
-        </partition_test>
-        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:24454500" version="1" check_existence="at_least_one_exists" check="all" comment="fapolicyd.service is active">
-          <object object_ref="oval:mil.disa.stig.linux:obj:24454500" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000003" />
-        </systemdunitproperty_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:24454900" version="1" check_existence="at_least_one_exists" check="all" comment="openssh-server package is installed">
-          <object object_ref="oval:mil.disa.stig.linux:obj:24454900" />
-        </rpminfo_test>
-        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25778300" version="1" check="all" comment="The systemd-journald service is active.">
-          <object object_ref="oval:mil.disa.stig.linux:obj:25778300" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000003" />
-        </systemdunitproperty_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25782600" version="1" check_existence="none_exist" check="all" comment="No File Transfer Protocol (FTP) server packages are installed">
-          <object object_ref="oval:mil.disa.stig.linux:obj:25782600" />
-        </rpminfo_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25782800" version="3" check="all" comment="nfs-utils package is installed">
-          <object object_ref="oval:mil.disa.stig.linux:obj:25782800" />
-        </rpminfo_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25783600" version="1" check_existence="none_exist" check="all" comment="The quagga package is not installed">
-          <object object_ref="oval:mil.disa.stig.linux:obj:25783600" />
-        </rpminfo_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25783900" version="1" check_existence="at_least_one_exists" check="all" comment="gnutls-utils">
-          <object object_ref="oval:mil.disa.stig.linux:obj:25783900" />
-        </rpminfo_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25784000" version="1" check_existence="at_least_one_exists" check="all" comment="package nss-tools is installed">
-          <object object_ref="oval:mil.disa.stig.linux:obj:25784000" />
-        </rpminfo_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25784200" version="1" check="all" comment="The s-nail package is installed">
-          <object object_ref="oval:mil.disa.stig.linux:obj:25784200" />
-        </rpminfo_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25784900" version="1" check="all" comment="The autofs package is installed.">
-          <object object_ref="oval:mil.disa.stig.linux:obj:25784900" />
-        </rpminfo_test>
-        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25785000" version="2" check="all" comment="/home is mounted with the noexec option">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23032800" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000001" />
-        </partition_test>
-        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25785200" version="2" check_existence="at_least_one_exists" check="all" comment="/home has noexec option">
-          <object object_ref="oval:mil.disa.stig.linux:obj:25785200" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000000" />
-        </partition_test>
-        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25786000" version="2" check_existence="at_least_one_exists" check="all" comment="/boot has nodev option">
-          <object object_ref="oval:mil.disa.stig.linux:obj:25786000" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000001" />
-        </partition_test>
-        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25786900" version="1" check="all" comment="/var is mounted with the nodev option.">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23029200" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000001" />
-        </partition_test>
-        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25793600" version="1" check_existence="at_least_one_exists" check="all" comment="Check if firewalld is in 'active' state">
-          <object object_ref="oval:mil.disa.stig.linux:obj:25793600" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000003" />
-        </systemdunitproperty_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25794300" version="1" check="all" comment="The chrony package is installed">
-          <object object_ref="oval:mil.disa.stig.linux:obj:25794300" />
-        </rpminfo_test>
-        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25794400" version="1" check_existence="at_least_one_exists" check="all" comment="chronyd service is active">
-          <object object_ref="oval:mil.disa.stig.linux:obj:25794400" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000003" />
-        </systemdunitproperty_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25795201" version="1" check_existence="at_least_one_exists" check="all" comment="The tftp-server package is iinstalled.">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23053300" />
-        </rpminfo_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25795400" version="1" check_existence="at_least_one_exists" check="all" comment="libreswan package is installed">
-          <object object_ref="oval:mil.disa.stig.linux:obj:25795400" />
-        </rpminfo_test>
-        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25797900" version="1" check_existence="at_least_one_exists" check="all" comment="Check if SSH is in 'active' state">
-          <object object_ref="oval:mil.disa.stig.linux:obj:25797900" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000003" />
-        </systemdunitproperty_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25798000" version="1" check_existence="at_least_one_exists" check="all" comment="openssh-clients package is installed">
-          <object object_ref="oval:mil.disa.stig.linux:obj:25798000" />
-        </rpminfo_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25803500" version="1" check_existence="at_least_one_exists" check="all" comment="usbguard package is installed">
-          <object object_ref="oval:mil.disa.stig.linux:obj:25803500" />
-        </rpminfo_test>
-        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25803600" version="1" check_existence="at_least_one_exists" check="all" comment="usbguard.service is active">
-          <object object_ref="oval:mil.disa.stig.linux:obj:25803600" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:25803600" />
-        </systemdunitproperty_test>
-        <selinuxsecuritycontext_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25808000" version="1" check_existence="at_least_one_exists" check="all" comment="configured faillock directory has correct selinux context">
-          <object object_ref="oval:mil.disa.stig.linux:obj:25808000" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:25808000" />
-        </selinuxsecuritycontext_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25808200" version="1" check="all" comment="The policycoreutils-python-utils package is installed">
-          <object object_ref="oval:mil.disa.stig.linux:obj:25808200" />
-        </rpminfo_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25808300" version="1" check_existence="at_least_one_exists" check="all" comment="sudo package is installed">
-          <object object_ref="oval:mil.disa.stig.linux:obj:25808300" />
-        </rpminfo_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25808900" version="1" check_existence="at_least_one_exists" check="all" comment="fapolicyd package is installed">
-          <object object_ref="oval:mil.disa.stig.linux:obj:25808900" />
-        </rpminfo_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25812400" version="1" check_existence="at_least_one_exists" check="all" comment="package pcsc-lite is installed">
-          <object object_ref="oval:mil.disa.stig.linux:obj:25812400" />
-        </rpminfo_test>
-        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25812500" version="2" check="all" comment="The pcscd socket is active.">
-          <object object_ref="oval:mil.disa.stig.linux:obj:25812500" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000003" />
-        </systemdunitproperty_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25812600" version="1" check_existence="at_least_one_exists" check="all" comment="opensc package is installed">
-          <object object_ref="oval:mil.disa.stig.linux:obj:25812600" />
-        </rpminfo_test>
-        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25814200" version="2" check_existence="at_least_one_exists" check="all" comment="rsyslog.service is active">
-          <object object_ref="oval:mil.disa.stig.linux:obj:25814200" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000003" />
-        </systemdunitproperty_test>
-        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25815200" version="1" check_existence="at_least_one_exists" check="all" comment="auditd.service is active">
-          <object object_ref="oval:mil.disa.stig.linux:obj:25815200" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000003" />
-        </systemdunitproperty_test>
-        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25815201" version="1" check_existence="at_least_one_exists" check="all" comment="auditd.service is running">
-          <object object_ref="oval:mil.disa.stig.linux:obj:25815201" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000004" />
-        </systemdunitproperty_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25817500" version="1" check_existence="at_least_one_exists" check="all" comment="audispd-plugins package is installed">
-          <object object_ref="oval:mil.disa.stig.linux:obj:25817500" />
-        </rpminfo_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25823400" version="1" check_existence="at_least_one_exists" check="all" comment="libreswan package is installed">
-          <object object_ref="oval:mil.disa.stig.linux:obj:25823400" />
-        </rpminfo_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25824200" version="1" check_existence="at_least_one_exists" check="all" comment="BIND installed">
-          <object object_ref="oval:mil.disa.stig.linux:obj:25824200" />
-        </rpminfo_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:27149300" version="1" check="all" comment="The sssd package is installed">
-          <object object_ref="oval:mil.disa.stig.linux:obj:27149300" />
-        </rpminfo_test>
-        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:27149400" version="1" check_existence="at_least_one_exists" check="all" comment="sssd.service is active">
-          <object object_ref="oval:mil.disa.stig.linux:obj:27149400" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000003" />
-        </systemdunitproperty_test>
-        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:27149401" version="1" check_existence="at_least_one_exists" check="all" comment="sssd.service is enabled">
-          <object object_ref="oval:mil.disa.stig.linux:obj:27149401" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:20000006" />
-        </systemdunitproperty_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:27150500" version="2" check_existence="at_least_one_exists" check="all" comment="oracle-linux-manager-client package is installed">
-          <object object_ref="oval:mil.disa.stig.linux:obj:27150500" />
-        </rpminfo_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:28513400" version="1" check_existence="at_least_one_exists" check="all" comment="aide package is installed">
-          <object object_ref="oval:mil.disa.stig.linux:obj:28513400" />
-        </rpminfo_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:2582320000" version="1" check_existence="at_least_one_exists" check="all" comment="The libreswan package is installed.">
-          <object object_ref="oval:mil.disa.stig.linux:obj:2582320000" />
-        </rpminfo_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:10000602" version="1" check_existence="all_exist" check="all" comment="/sys/firmware/efi exists">
-          <object object_ref="oval:mil.disa.stig.unix:obj:10000602" />
-        </file_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:10001200" version="1" check_existence="all_exist" check="all" comment="net.ipv6.conf.all.disable_ipv6 setting in kernel is set to 1">
-          <object object_ref="oval:mil.disa.stig.unix:obj:10001200" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
-        </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:20461100" version="2" check_existence="all_exist" check="all" comment="net.ipv4.conf.default.rp_filter setting in kernel is set to 1">
-          <object object_ref="oval:mil.disa.stig.unix:obj:20461100" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
-        </sysctl_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23024500" version="1" check="all" comment="/var/log/messages file has mode 0640 or less permissive">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23024500" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000007" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23024600" version="1" check="all" comment="/var/log/messages file is owned by root">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23024600" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23024700" version="2" check="all" comment="/var/log/messages file is owned by root">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23024700" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000006" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23024800" version="1" check="all" comment="/var/log directory has mode 0755 or less permissive.">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23024800" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000008" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23024900" version="1" check="all" comment="/var/log directory is owned by root">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23024900" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23025000" version="1" check="all" comment="/var/log directory is group-owned by root.">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23025000" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000006" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23026100" version="1" check_existence="none_exist" check="all" comment="The operating system library files are owned by root">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23026100" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23026200" version="2" check_existence="none_exist" check="all" comment="The operating system library files are group owned by root">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23026200" />
-        </file_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23026600" version="1" check_existence="all_exist" check="all" comment="kernel.kexec_load_disabled setting in kernel is set to 1">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23026600" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
-        </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23026700" version="1" check_existence="all_exist" check="all" comment="fs.protected_symlinks setting in kernel is set to 1">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23026700" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
-        </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23026800" version="1" check_existence="all_exist" check="all" comment="fs.protected_hardlinks setting in kernel is set to 1">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23026800" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:23026800" />
-        </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23026900" version="2" check_existence="all_exist" check="all" comment="kernel.dmesg_restrict setting in kernel is set to 1">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23026900" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
-        </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23027000" version="1" check_existence="all_exist" check="all" comment="kernel.perf_event_paranoid setting in kernel is set to 2">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23027000" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000011" />
-        </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23028000" version="2" check_existence="all_exist" check="all" comment="kernel.randomize_va_space setting in kernel is set to 2">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23028000" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000011" />
-        </sysctl_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23028300" version="1" check_existence="none_exist" check="all" comment="There must be no shosts.equiv files on the system.">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23028300" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23028400" version="1" check_existence="none_exist" check="all" comment="There are no .shosts files on the system.">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23028400" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23028600" version="1" check_existence="any_exist" check="all" comment="The SSH daemon public host key files have mode 0644 or less permissive">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23028600" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000001" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23028700" version="1" check_existence="all_exist" check="all" comment="SSH private key files mode 640 or less permissive">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23028700" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000007" />
-        </file_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23031100" version="2" check_existence="all_exist" check="all" comment="kernel.core_pattern setting in kernel is set to |/bin/false">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23031100" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:23031100" />
-        </sysctl_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23032500" version="2" check_existence="any_exist" check="all" comment="The home directories of non-system users have mode 0740 or less permissive.">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23032500" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000020" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23032501" version="1" check="all" comment="The home directory of the root user has mode 0740 or less permissive.">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23032501" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000020" />
-        </file_test>
-        <password_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23036401" version="1" check_existence="none_exist" check="all" comment="Non-system users do not have a minimum password age of 0 or blank">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23036401" />
-        </password_test>
-        <shadow_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23036700" version="1" check_existence="any_exist" check="all" comment="No password in /etc/shadow has a maximum password age of 0 or greater than 60">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23036700" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:23036700" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:23036701" />
-        </shadow_test>
-        <shadow_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23036701" version="1" check_existence="all_exist" check="all" comment="Root password in /etc/shadow does not have a maximum password age of 0 or greater than 60">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23036702" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:23036700" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:23036701" />
-        </shadow_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23039600" version="1" check="all" comment="Audit log is mode 0600 or less permissive">
-          <object object_ref="oval:mil.disa.stig.unix:obj:20000011" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000004" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23039800" version="2" check="all" comment="audit logs are group-owned by root">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23039700" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000006" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23039900" version="1" check_existence="all_exist" check="all" comment="audit log directories are owned by root">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23040100" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23047100" version="1" check="all" comment="/etc/audit/auditd.conf has mode 0640 or less permissive">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23047100" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000007" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23047101" version="1" check="all" comment=".rules files in /etc/audit/rules.d have mode 0640 or less permissive">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23047101" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000007" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23047200" version="1" check_existence="all_exist" check="all" comment="audit tools have a mode of 0755 or less permissive.">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23047200" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000008" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23047300" version="1" check_existence="all_exist" check="all" comment="audit tools are owned by root">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23047200" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23047400" version="1" check="all" comment="The audit tools are group-owned by root.">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23047200" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000006" />
-        </file_test>
-        <symlink_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23052900" version="2" check="all" comment="The ctrl-alt-del.target unit is masked.">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23052900" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000013" />
-        </symlink_test>
-        <symlink_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23053200" version="2" check_existence="at_least_one_exists" check="all" comment="debug-shell.service is masked">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23053200" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000013" />
-        </symlink_test>
-        <password_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23053400" version="1" check="all" comment="Only the root account has a UID of zero.">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23053400" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:23053400" />
-        </password_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23053500" version="1" check="all" comment="net.ipv6.conf.default.accept_redirects is set to 0 in kernel">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23053500" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
-        </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23053600" version="2" check_existence="all_exist" check="all" comment="net.ipv4.conf.all.send_redirects setting in kernel is set to 0">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23053600" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
-        </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23053700" version="1" check="all" comment="net.ipv4.icmp_echo_ignore_broadcasts is set to 1 in kernel">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23053700" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
-        </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23053800" version="1" check_existence="all_exist" check="all" comment="net.ipv6.conf.all.accept_source_route setting in kernel is set to 0">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23053800" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
-        </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23053902" version="1" check_existence="all_exist" check="all" comment="net.ipv6.conf.default.accept_source_route setting in kernel is set to 0">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23053904" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
-        </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23054000" version="1" check_existence="all_exist" check="all" comment="net.ipv6.conf.all.forwarding setting in kernel is set to 0">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23054000" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
-        </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23054300" version="2" check="all" comment="net.ipv4.conf.default.send_redirects is set to 0 in kernel">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23054300" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
-        </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23054400" version="1" check_existence="all_exist" check="all" comment="net.ipv6.conf.all.accept_redirects setting in kernel is set to 0">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23054400" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
-        </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23054500" version="2" check_existence="all_exist" check="all" comment="kernel.unprivileged_bpf_disabled setting in kernel is set to 1">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23054500" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
-        </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23054600" version="1" check_existence="all_exist" check="all" comment="kernel.yama.ptrace_scope setting in kernel is set to 1">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23054600" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
-        </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23054800" version="1" check="all" comment="user.max_user_namespaces is set to 0 in kernel">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23054800" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
-        </sysctl_test>
-        <interface_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23055400" version="1" check_existence="any_exist" check="all" comment="no network interfaces are in promiscuous mode">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23055400" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:23055400" />
-        </interface_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23833300" version="1" check_existence="all_exist" check="all" comment="net.ipv4.tcp_syncookies setting in kernel is set to 1">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23833300" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
-        </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:24455000" version="1" check_existence="all_exist" check="all" comment="net.ipv4.conf.default.accept_redirects setting in kernel is set to 0">
-          <object object_ref="oval:mil.disa.stig.unix:obj:24455000" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
-        </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:24455200" version="1" check_existence="all_exist" check="all" comment="net.ipv4.conf.default.accept_source_route setting in kernel is set to 0">
-          <object object_ref="oval:mil.disa.stig.unix:obj:24455200" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
-        </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:24455300" version="1" check="all" comment="net.ipv4.conf.all.accept_redirects is set to 0 in kernel">
-          <object object_ref="oval:mil.disa.stig.unix:obj:24455300" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
-        </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:24455400" version="1" check="all" comment="net.core.bpf_jit_harden is set to 2 in kernel">
-          <object object_ref="oval:mil.disa.stig.unix:obj:24455400" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000011" />
-        </sysctl_test>
-        <symlink_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25171800" version="1" check_existence="all_exist" check="all" comment="default.target is symlinked to multi-user.target">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25171800" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:25171800" />
-        </symlink_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25312000" version="1" check_existence="all_exist" check="all" comment="net.ipv6.conf.default.accept_ra setting in kernel is set to 0">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25312000" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
-        </sysctl_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25779000" version="2" check="all" comment="/boot/grub2/grub.cfg file is group-owned by root">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25779000" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000006" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25779100" version="1" check="all" comment="/boot/grub2/grub.cfg file is owned by root">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25779100" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
-        </file_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25780000" version="1" check="all" comment="kernel.kptr_restrict is set to 1 in kernel">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23054700" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:23054700" />
-        </sysctl_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25788800" version="2" check_existence="all_exist" check="all" comment="cron configuration directories have a mode of 700 or less permissive.">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25792601" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000014" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25789000" version="2" check_existence="any_exist" check="all" comment="All local interactive user home directories are 0750 or less">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25789001" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000022" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25789100" version="1" check_existence="any_exist" check="all" comment="The /etc/group file has mode 0644 or less permissive">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25789100" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000001" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25789200" version="1" check_existence="any_exist" check="all" comment="The /etc/group- file has mode 0644 or less permissive">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25789200" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000001" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25789300" version="1" check_existence="any_exist" check="all" comment="The /etc/gshadow file has mode 0000 or less permissive">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25789300" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000012" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25789400" version="1" check_existence="any_exist" check="all" comment="The /etc/gshadow- file has mode 0000 or less permissive">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25789400" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000012" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25789500" version="1" check="all" comment="The /etc/passwd file has mode 0644 or less permissive.">
-          <object object_ref="oval:mil.disa.stig.unix:obj:20000013" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000001" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25789600" version="1" check_existence="any_exist" check="all" comment="The /etc/passwd- file has mode 0644 or less permissive">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25789600" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000001" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25789700" version="1" check_existence="any_exist" check="all" comment="The /etc/shadow- file has mode 0000 or less permissive">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25789700" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000012" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25789800" version="1" check="all" comment="/etc/group file is owned by root">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25789800" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25789900" version="1" check="all" comment="/etc/group file is owned by root">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25789900" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000006" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25790000" version="1" check="all" comment="/etc/group- file is owned by root">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25790000" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25790100" version="1" check="all" comment="The /etc/group- file is group-owned by root.">
-          <object object_ref="oval:mil.disa.stig.unix:obj:20000014" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000006" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25790200" version="1" check="all" comment="/etc/gshadow file is owned by root">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25790200" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25790300" version="1" check="all" comment="/etc/gshadow file is owned by root">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25790300" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25790400" version="1" check="all" comment="/etc/gshadow- file is owned by root">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25790400" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25790500" version="1" check="all" comment="/etc/gshadow- file is owned by root">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25790500" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000006" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25790600" version="1" check="all" comment="/etc/passwd file is owned by root">
-          <object object_ref="oval:mil.disa.stig.unix:obj:20000013" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25790700" version="1" check="all" comment="The /etc/passwd file is group-owned by root.">
-          <object object_ref="oval:mil.disa.stig.unix:obj:20000013" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000006" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25790800" version="1" check="all" comment="/etc/passwd- file is owned by root">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25790800" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25790900" version="2" check="all" comment="/etc/passwd- file is group-owned by root">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25790800" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000006" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25791000" version="1" check="all" comment="/etc/shadow file is owned by root.">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25791000" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25791100" version="1" check="all" comment="/etc/shadow file is owned by root">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25791100" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000006" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25791200" version="1" check="all" comment="/etc/shadow- file is owned by root.">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25791200" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25791300" version="1" check="all" comment="The /etc/shadow- file is group-owned by root.">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25789700" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000006" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25792600" version="1" check_existence="any_exist" check="all" comment="/etc/cron* files owned by root">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25792600" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25792601" version="1" check_existence="any_exist" check="all" comment="/etc/cron* directories owned by root">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25792601" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25792700" version="2" check="all" comment="cron configuration files are group-owned by root">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25792700" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000006" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25793300" version="3" check_existence="any_exist" check="all" comment="The /etc/crontab file has mode 0600">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25793300" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:25793300" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25793400" version="2" check_existence="any_exist" check="all" comment="The /etc/shadow file has mode 0000 or less permissive">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25791100" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000012" />
-        </file_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25795900" version="2" check_existence="all_exist" check="all" comment="net.ipv4.conf.all.accept_source_routesetting in kernel is set to 0">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25795900" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
-        </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25796000" version="1" check_existence="all_exist" check="all" comment="net.ipv4.conf.all.log_martians setting in kernel is set to 1">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25796000" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
-        </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25796100" version="2" check_existence="all_exist" check="all" comment="net.ipv4.conf.default.log_martians setting in kernel is set to 1">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25796100" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
-        </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25796700" version="2" check_existence="all_exist" check="all" comment="net.ipv4.icmp_ignore_bogus_error_responses setting in kernel is set to 1">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25796700" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
-        </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25797000" version="1" check_existence="all_exist" check="all" comment="net.ipv4.conf.all.forwarding setting in kernel is set to 0">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25797000" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
-        </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25797100" version="2" check_existence="all_exist" check="all" comment="net.ipv6.conf.all.accept_ra setting in kernel is set to 0">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25797100" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
-        </sysctl_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25798800" version="1" check_existence="at_least_one_exists" check="all" comment="50-redhat.conf exists">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25798800" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25799700" version="1" check="all" comment="The /etc/ssh/sshd_config file is group-owned by root.">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25799900" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000006" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25799701" version="2" check="all" comment="The /etc/ssh/sshd_config.d directory and sub-directories are group-owned by root.">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25799901" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000006" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25799702" version="1" check="all" comment="The /etc/ssh/sshd_config.d files are group-owned by root.">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25799902" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000006" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25799800" version="1" check="all" comment="The /etc/ssh/sshd_config file is owned by root.">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25799900" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25799801" version="2" check="all" comment="The /etc/ssh/sshd_config.d directory and sub-directories are owned by root.">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25799901" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25799802" version="1" check="all" comment="The /etc/ssh/sshd_config.d files are owned by root.">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25799902" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25799900" version="2" check_existence="any_exist" check="all" comment="The /etc/ssh/sshd_config file has mode 0600 or less permissive">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25799900" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000004" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25799901" version="2" check_existence="any_exist" check="all" comment="The /etc/ssh/sshd_config.d directory and sub-directories has mode 0600 or less permissive">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25799901" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000004" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25799902" version="2" check_existence="any_exist" check="all" comment="The /etc/ssh/sshd_config.d files have mode 0600 or less permissive">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25799902" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000004" />
-        </file_test>
-        <password_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25804600" version="2" check="all" comment="The system accounts in /etc/passwd use /sbin/nologin.">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25804601" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:25804600" />
-        </password_test>
-        <password_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25804800" version="1" check_existence="all_exist" check="all" comment="All local users have valid GID">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25804800" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:25804800" />
-        </password_test>
-        <password_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25805100" version="1" check_existence="all_exist" check="all" comment="check for users without a home directory not defined">
-          <object object_ref="oval:mil.disa.stig.unix:obj:20000017" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000016" />
-        </password_test>
-        <password_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25805101" version="1" check_existence="all_exist" check="all" comment="check if root's home directory is not defined">
-          <object object_ref="oval:mil.disa.stig.unix:obj:20000018" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000016" />
-        </password_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25817200" version="1" check_existence="all_exist" check="all" comment="auditd.conf 0640 or less">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25817200" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000007" />
-        </file_test>
-        <symlink_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25823604" version="1" check_existence="at_least_one_exists" check="all" comment="krb5">
-          <object object_ref="oval:mil.disa.stig.unix:obj:25823604" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:25823604" />
-        </symlink_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:26048700" version="1" check_existence="none_exist" check="all" comment="no operating system library regular files have the SUID special permission set">
-          <object object_ref="oval:mil.disa.stig.unix:obj:26048700" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:26048701" version="1" check_existence="none_exist" check="all" comment="no operating system library regular files have the SGID special permission set">
-          <object object_ref="oval:mil.disa.stig.unix:obj:26048701" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:26048702" version="1" check_existence="none_exist" check="all" comment="no operating system library regular files have the sticky bit set">
-          <object object_ref="oval:mil.disa.stig.unix:obj:26048702" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:26048703" version="1" check_existence="none_exist" check="all" comment="no operating system library regular files are group-writable">
-          <object object_ref="oval:mil.disa.stig.unix:obj:26048703" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:26048704" version="1" check_existence="none_exist" check="all" comment="no operating system library regular files are world-writable">
-          <object object_ref="oval:mil.disa.stig.unix:obj:26048704" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:27176500" version="2" check_existence="any_exist" check="all" comment="local initialization files of non-system users do not reference world-writable files.">
-          <object object_ref="oval:mil.disa.stig.unix:obj:27176500" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:27176501" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:27176501" version="2" check="all" comment="local initialization files of root user do not reference world-writable files.">
-          <object object_ref="oval:mil.disa.stig.unix:obj:27176501" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:27176501" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:27177300" version="1" check_existence="none_exist" check="all" comment="No system commands exist, except for those group-owned by root or a system account.">
-          <object object_ref="oval:mil.disa.stig.unix:obj:27177300" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:27177400" version="1" check_existence="none_exist" check="all" comment="No system command files exist except those owned by root">
-          <object object_ref="oval:mil.disa.stig.unix:obj:27177400" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:27177500" version="1" check_existence="none_exist" check="all" comment="There are no group-writable system command files">
-          <object object_ref="oval:mil.disa.stig.unix:obj:27177500" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:27177501" version="1" check_existence="none_exist" check="all" comment="There are no world-writable system command files">
-          <object object_ref="oval:mil.disa.stig.unix:obj:27177501" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:27178600" version="1" check_existence="none_exist" check="all" comment="No system-wide library directories exist except for those group-owned by root">
-          <object object_ref="oval:mil.disa.stig.unix:obj:27178600" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:27178700" version="1" check_existence="none_exist" check="all" comment="No system-wide library directories exist except those owned by root">
-          <object object_ref="oval:mil.disa.stig.unix:obj:27178700" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:27178800" version="1" check_existence="none_exist" check="all" comment="No group-writable library directories exist.">
-          <object object_ref="oval:mil.disa.stig.unix:obj:27178800" />
-        </file_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:27178801" version="1" check_existence="none_exist" check="all" comment="No world-writable library directories exist.">
-          <object object_ref="oval:mil.disa.stig.unix:obj:27178801" />
-        </file_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:27186800" version="1" check_existence="all_exist" check="all" comment="net.ipv4.conf.all.rp_filter setting in kernel is set to 1">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23054900" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
-        </sysctl_test>
-        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:28513401" version="2" check_existence="at_least_one_exists" check="all" comment="/var/lib/aide/aide.db.gz exists and is not empty">
-          <object object_ref="oval:mil.disa.stig.unix:obj:28513401" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:28513400" />
-        </file_test>
-      </tests>
-      <objects>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:230345" version="1">
-          <filepath datatype="string">/etc/security/faillock.conf</filepath>
-          <pattern datatype="string" operation="pattern match">^\s*even_deny_root\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:10001201" version="1" comment="/etc/sysctl.conf">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*net\.ipv6\.conf\.all\.disable_ipv6\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:10001202" version="1" comment="other sysctl configuration files">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*net\.ipv6\.conf\.all\.disable_ipv6\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:10001203" version="1" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:10001201</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:10001202</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:10001204" version="1" comment="/proc/cmdline contains ipv6.disable=1">
-          <filepath>/proc/cmdline</filepath>
-          <pattern operation="pattern match">\bipv6\.disable=1\b</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:20000001" version="1" comment="Audit log file">
-          <filepath>/etc/audit/auditd.conf</filepath>
-          <pattern operation="pattern match">^\s*log_file\s*=\s*(\S+)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:20000002" version="1" comment="rsyslog: action for all messages">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:20000003</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:20000004</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:20000003" version="3" comment="rsyslog.conf: action for all messages">
-          <behaviors ignore_case="true" />
-          <filepath datatype="string">/etc/rsyslog.conf</filepath>
-          <pattern operation="pattern match">^\*\.\*\s+action\((\s*(?:[^#\)]*(?:#.*$)?\n)*[^#\)]*)\)</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:20000004" version="3" comment="rsyslog.d/*.conf: action for all messages">
-          <behaviors ignore_case="true" />
-          <path>/etc/rsyslog.d</path>
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^\*\.\*\s+action\((\s*(?:[^#\)]*(?:#.*$)?\n)*[^#\)]*)\)</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:20441700" version="4" comment="/etc/libuser.conf defaults section with crypt_style">
-          <filepath>/etc/libuser.conf</filepath>
-          <pattern operation="pattern match">^\[defaults]((?:\r?\n(?:[^[\r\n].*)?)*)</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:20441701" version="3" comment="/etc/libuser.conf defaults section with crypt_style">
-          <filepath>/etc/libuser.conf</filepath>
-          <pattern operation="pattern match">^\s*crypt_style\s*=\s*(\S+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23023100" version="1" comment="/etc/login.defs:ENCRYPT_METHOD">
-          <filepath>/etc/login.defs</filepath>
-          <pattern operation="pattern match">^\s*ENCRYPT_METHOD\s+([^#\r\n]*)</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23023200" version="1" comment="Extract password hashes from /etc/shadow.">
-          <filepath datatype="string">/etc/shadow</filepath>
-          <pattern operation="pattern match">^[^:]+:([^:]*):</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23023201" version="1" comment="Filter out acceptable shadow password entries.">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <object_reference>oval:mil.disa.stig.ind:obj:23023200</object_reference>
-            <filter action="exclude">oval:mil.disa.stig.ind:ste:23023200</filter>
-            <filter action="exclude">oval:mil.disa.stig.ind:ste:23023201</filter>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23023300" version="1">
-          <filepath>/etc/login.defs</filepath>
-          <pattern operation="pattern match">^\s*SHA_CRYPT_MIN_ROUNDS\s+(\d+)\b</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23023301" version="1">
-          <filepath>/etc/login.defs</filepath>
-          <pattern operation="pattern match">^\s*SHA_CRYPT_MAX_ROUNDS\s+(\d+)\b</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23023700" version="1">
-          <path datatype="string">/etc/pam.d</path>
-          <filename datatype="string">password-auth</filename>
-          <pattern operation="pattern match">^[ \t]*password[ \t]+sufficient[ \t]+pam_unix\.so(?:[ \t]+|(?:[ \t][^#\r\f\n]+[ \t]))sha512(?:[ \t]|$)</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23024000" version="2" comment="/sys/fs/selinux/enforce value">
-          <filepath>/sys/fs/selinux/enforce</filepath>
-          <pattern operation="pattern match">^(\d+)$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23024001" version="2" comment="/etc/selinux/config:SELINUX value">
-          <filepath>/etc/selinux/config</filepath>
-          <pattern operation="pattern match">^SELINUX=(.*)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026400" version="1">
-          <path>/etc/yum.repos.d</path>
-          <filename operation="pattern match">\.repo$</filename>
-          <pattern operation="pattern match">^\s*\[[^]]+\]\s*\n(?:[^[]*\n)*</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026500" version="2">
-          <filepath>/etc/dnf/dnf.conf</filepath>
-          <pattern operation="pattern match">^\s*localpkg_gpgcheck\s*=\s*(\w+)\b$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026601" version="1" comment="/etc/sysctl.conf">
-          <path>/etc</path>
-          <filename operation="equals">sysctl.conf</filename>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*kernel\.kexec_load_disabled\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026602" version="1" comment="other sysctl configuration files">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*kernel\.kexec_load_disabled\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026603" version="1" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23026601</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23026602</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026701" version="1" comment="other sysctl configuration files">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*fs\.protected_symlinks\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026702" version="1" comment="/etc/sysctl.conf">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*fs\.protected_symlinks\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026703" version="1" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23026701</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23026702</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026801" version="3" comment="/etc/sysctl.d/99-sysctl.conf">
-          <path var_ref="oval:mil.disa.stig.ind:var:23026800" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*fs\.protected_hardlinks\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026802" version="2" comment="/etc/sysctl.conf">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*fs\.protected_hardlinks\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026803" version="1" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23026801</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23026802</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026900" version="3">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*kernel\.dmesg_restrict\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026901" version="4">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^\s*kernel\.dmesg_restrict\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026902" version="1" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23026900</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23026901</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23027001" version="1" comment="other sysctl configuration files">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*kernel\.perf_event_paranoid\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23027002" version="1" comment="/etc/sysctl.conf">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*kernel\.perf_event_paranoid\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23027003" version="1" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23027001</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23027002</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23027100" version="1">
-          <behaviors ignore_case="true" />
-          <filepath>/etc/sudoers</filepath>
-          <pattern operation="pattern match">^(?!#).*\s+NOPASSWD.*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23027101" version="1">
-          <behaviors ignore_case="true" recurse_direction="down" />
-          <path>/etc/sudoers.d</path>
-          <filename operation="pattern match">^.*$</filename>
-          <pattern operation="pattern match">^(?!#).*\s+NOPASSWD.*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23028000" version="2">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*kernel\.randomize_va_space\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23028001" version="4" comment="system sysctl configuration files - kernel.randomize_va_space">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^\s*kernel\.randomize_va_space\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23028002" version="1" comment="all sysctl configuration files - kernel.randomize_va_space">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23028000</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23028001</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23028100" version="1">
-          <filepath>/etc/dnf/dnf.conf</filepath>
-          <pattern operation="pattern match">^[ \t]*clean_requirements_on_remove[ \t]*=[ \t]*(?:True|1|yes)[ \t]*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23028200" version="1">
-          <filepath>/etc/selinux/config</filepath>
-          <pattern operation="pattern match">^\s*SELINUXTYPE\s*=\s*(\w+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23028800" version="1">
-          <filepath>/etc/ssh/sshd_config</filepath>
-          <pattern operation="pattern match">^\s*(?i)StrictModes(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23028801" version="1">
-          <path>/etc/ssh/sshd_config.d</path>
-          <filename operation="pattern match">.+</filename>
-          <pattern operation="pattern match">^\s*(?i)StrictModes(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23028802" version="1">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23028800</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23028801</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23029201" version="1">
-          <filepath>/etc/fstab</filepath>
-          <pattern datatype="string" operation="pattern match">^[^# \t]+\s+/var\s+</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23029401" version="1">
-          <filepath>/etc/fstab</filepath>
-          <pattern datatype="string" operation="pattern match" var_ref="oval:mil.disa.stig.defs:var:23029401" var_check="at least one" />
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23029402" version="2">
-          <behaviors ignore_case="true" />
-          <filepath>/etc/audit/auditd.conf</filepath>
-          <pattern datatype="string" operation="pattern match">^\s*log_file\s*=\s*(\S+)/\S+\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23029500" version="1">
-          <filepath>/etc/fstab</filepath>
-          <pattern datatype="string" operation="pattern match">^[^# \t]+\s+/tmp\s+</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23029600" version="1">
-          <filepath>/etc/ssh/sshd_config</filepath>
-          <pattern operation="pattern match">^\s*(?i)PermitRootLogin(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23029601" version="1">
-          <path>/etc/ssh/sshd_config.d</path>
-          <filename operation="pattern match">.+</filename>
-          <pattern operation="pattern match">^\s*(?i)PermitRootLogin(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23029602" version="2" comment="all sshd_config and sshd_config.d/* files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23029600</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23029601</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23030001" version="1">
-          <filepath>/etc/fstab</filepath>
-          <pattern operation="pattern match">^\s*[^#\s]+\s+/boot\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23030101" version="1">
-          <filepath>/etc/fstab</filepath>
-          <pattern operation="pattern match">^\s*/dev\S*\s+/\S+\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23030600" version="1">
-          <filepath>/etc/fstab</filepath>
-          <pattern operation="pattern match">^\s*\[?[\.\w:-]+\]?:[/\w-]+\s+[/\w-]+\s+nfs[4]?\s+(.*)$</pattern>
-          <instance datatype="int" operation="not equal">0</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23030601" version="1">
-          <filepath>/etc/mtab</filepath>
-          <pattern operation="pattern match">^\s*\[?[\.\w:-]+\]?:[/\w-]+\s+[/\w-]+\s+nfs[4]?\s+(.*)$</pattern>
-          <instance datatype="int" operation="not equal">0</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031100" version="2">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*kernel\.core_pattern\s*=\s*(.+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031101" version="4">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^\s*kernel\.core_pattern\s*=\s*(.+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031102" version="1" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23031100</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23031101</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031300" version="1">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23031302</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23031303</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031301" version="1">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23031304</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23031305</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031302" version="1">
-          <filepath>/etc/security/limits.conf</filepath>
-          <pattern operation="pattern match">^[ \t]*\*[ \t]+(?:hard|soft|-)[ \t]+core[ \t]+(\d+)[ \t]*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031303" version="1">
-          <path>/etc/security/limits.d</path>
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">^[ \t]*\*[ \t]+(?:hard|soft|-)[ \t]+core[ \t]+(\d+)[ \t]*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031304" version="1">
-          <filepath>/etc/security/limits.conf</filepath>
-          <pattern operation="pattern match">^[ \t]*[^#*\s]+[ \t]+(?:hard|soft|-)[ \t]+core[ \t]+(\d+)[ \t]*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031305" version="1">
-          <path>/etc/security/limits.d</path>
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">^[ \t]*[^#*\s]+[ \t]+(?:hard|soft|-)[ \t]+core[ \t]+(\d+)[ \t]*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031400" version="1">
-          <filepath>/etc/systemd/coredump.conf</filepath>
-          <pattern operation="pattern match">^\s*Storage\s*=\s*(\w*)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031500" version="1">
-          <filepath>/etc/systemd/coredump.conf</filepath>
-          <pattern operation="pattern match">^\s*ProcessSizeMax\s*=\s*(\w*)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031600" version="2" comment="/etc/nsswitch.conf hosts entry">
-          <filepath>/etc/nsswitch.conf</filepath>
-          <pattern operation="pattern match">^\s*hosts:\s*(.*)$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <variable_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031601" version="1" comment="count of unique name servers">
-          <var_ref>oval:mil.disa.stig.ind:var:23031600</var_ref>
-        </variable_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031602" version="2" comment="/etc/resolv.conf nameserver entries">
-          <filepath>/etc/resolv.conf</filepath>
-          <pattern operation="pattern match">^nameserver\s+(.*)$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23032400" version="1">
-          <filepath>/etc/login.defs</filepath>
-          <pattern operation="pattern match">^\s*CREATE_HOME\s+([^#\s]+)</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23032900" version="2">
-          <filepath>/etc/gdm/custom.conf</filepath>
-          <pattern operation="pattern match">^\s*\[daemon\]\s+[#\s\w=]*^\s*AutomaticLoginEnable=(\w+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23033300" version="1">
-          <filepath datatype="string">/etc/security/faillock.conf</filepath>
-          <pattern datatype="string" operation="pattern match">^\s*deny\s*=\s*([\d]+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23033500" version="1">
-          <filepath datatype="string">/etc/security/faillock.conf</filepath>
-          <pattern datatype="string" operation="pattern match">^\s*fail_interval\s*=\s*([\d]+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23033700" version="2">
-          <filepath datatype="string">/etc/security/faillock.conf</filepath>
-          <pattern datatype="string" operation="pattern match">^\s*unlock_time\s*=\s*([\d]+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23033900" version="1">
-          <filepath>/etc/security/faillock.conf</filepath>
-          <pattern operation="pattern match">^\s*dir\s*=\s*(\S+)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23034300" version="1">
-          <filepath datatype="string">/etc/security/faillock.conf</filepath>
-          <pattern datatype="string" operation="pattern match">^\s*audit\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23034600" version="1" comment="all default maxlogins settings in /etc/security/limits.conf and /etc/security/limits.d/*.conf">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23034601</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23034602</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23034601" version="1" comment="default maxlogins in /etc/security/limits.conf">
-          <filepath>/etc/security/limits.conf</filepath>
-          <pattern operation="pattern match">^\s*\*\s+(?:(?:hard)|(?:-))\s+maxlogins\s+(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23034602" version="1" comment="default maxlogins in /etc/security/limits.d/*.conf">
-          <path>/etc/security/limits.d</path>
-          <filename operation="pattern match">.*\.conf$</filename>
-          <pattern operation="pattern match">^\s*\*\s+(?:(?:hard)|(?:-))\s+maxlogins\s+(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23034603" version="1" comment="all non-default maxlogins settings in /etc/security/limits.conf and /etc/security/limits.d/*.conf">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23034604</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23034605</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23034604" version="1" comment="non-default maxlogins in /etc/security/limits.conf">
-          <filepath>/etc/security/limits.conf</filepath>
-          <pattern operation="pattern match">^\s*[^#*\s]+\s+(?:(?:hard)|(?:-))\s+maxlogins\s+(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23034605" version="1" comment="non-default maxlogins in /etc/security/limits.d/*.conf">
-          <path>/etc/security/limits.d</path>
-          <filename operation="pattern match">.*\.conf$</filename>
-          <pattern operation="pattern match">^\s*[^#*\s]+\s+(?:(?:hard)|(?:-))\s+maxlogins\s+(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23035100" version="4" comment="dconf org/gnome/settings-daemon/peripherals/smartcard sections">
-          <path datatype="string" var_ref="oval:mil.disa.stig.defs:var:23035100" var_check="at least one" />
-          <filename datatype="string" operation="pattern match">.*</filename>
-          <pattern operation="pattern match">^\[org/gnome/settings-daemon/peripherals/smartcard](?:\r?\n(?:[^[\r\n].*)?)*</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23035600" version="1">
-          <filepath>/etc/pam.d/password-auth</filepath>
-          <pattern operation="pattern match">^\s*password\s+(?:required|requisite)\s+pam_pwquality\.so\b</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23035700" version="2">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23035701</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23035702</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23035701" version="2">
-          <filepath>/etc/security/pwquality.conf</filepath>
-          <pattern operation="pattern match">^\s*ucredit\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23035702" version="2">
-          <behaviors recurse_direction="down" />
-          <path>/etc/security/pwquality.conf.d</path>
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">^\s*ucredit\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23035800" version="3">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23035801</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23035802</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23035801" version="1">
-          <filepath>/etc/security/pwquality.conf</filepath>
-          <pattern operation="pattern match">^\s*lcredit\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23035802" version="1">
-          <behaviors recurse_direction="down" />
-          <path>/etc/security/pwquality.conf.d</path>
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">^\s*lcredit\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23035900" version="1">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23035901</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23035902</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23035901" version="2">
-          <filepath>/etc/security/pwquality.conf</filepath>
-          <pattern operation="pattern match">^\s*dcredit\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23035902" version="2">
-          <behaviors recurse_direction="down" />
-          <path>/etc/security/pwquality.conf.d</path>
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">^\s*dcredit\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036000" version="1">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23036001</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23036002</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036001" version="1">
-          <filepath>/etc/security/pwquality.conf</filepath>
-          <pattern operation="pattern match">^\s*maxclassrepeat\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036002" version="1">
-          <behaviors recurse_direction="down" />
-          <path>/etc/security/pwquality.conf.d</path>
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">^\s*maxclassrepeat\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036100" version="1">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23036101</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23036102</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036101" version="1">
-          <filepath>/etc/security/pwquality.conf</filepath>
-          <pattern operation="pattern match">^\s*maxrepeat\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036102" version="1">
-          <behaviors recurse_direction="down" />
-          <path>/etc/security/pwquality.conf.d</path>
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">^\s*maxrepeat\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036200" version="1">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23036201</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23036202</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036201" version="1">
-          <filepath>/etc/security/pwquality.conf</filepath>
-          <pattern operation="pattern match">^\s*minclass\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036202" version="1">
-          <behaviors recurse_direction="down" />
-          <path>/etc/security/pwquality.conf.d</path>
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">^\s*minclass\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036300" version="2">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23036301</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23036302</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036301" version="2">
-          <filepath>/etc/security/pwquality.conf</filepath>
-          <pattern operation="pattern match">^\s*difok\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036302" version="2">
-          <behaviors recurse_direction="down" />
-          <path>/etc/security/pwquality.conf.d</path>
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">^\s*difok\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036400" version="1">
-          <filepath datatype="string">/etc/shadow</filepath>
-          <pattern operation="pattern match">^root:[^:]*:[^:]*:0*:</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036402" version="1">
-          <filepath datatype="string">/etc/shadow</filepath>
-          <pattern operation="pattern match">^([^:]*):[^:]*:[^:]*:0*:</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036403" version="1">
-          <filepath datatype="string">/etc/passwd</filepath>
-          <pattern datatype="string" operation="pattern match">^nobody:[^:]*:([0-9]+):</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036500" version="1">
-          <filepath>/etc/login.defs</filepath>
-          <pattern operation="pattern match">^\s*PASS_MIN_DAYS\s+(\d*)</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036900" version="1">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23036901</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23036902</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036901" version="2">
-          <filepath>/etc/security/pwquality.conf</filepath>
-          <pattern operation="pattern match">^\s*minlen\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036902" version="2">
-          <behaviors recurse_direction="down" />
-          <path>/etc/security/pwquality.conf.d</path>
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">^\s*minlen\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23037300" version="1">
-          <filepath>/etc/default/useradd</filepath>
-          <pattern operation="pattern match">(?i)^\s*INACTIVE\s*=\s*(-?\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23037500" version="2">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23037501</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23037502</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23037501" version="1">
-          <filepath>/etc/security/pwquality.conf</filepath>
-          <pattern operation="pattern match">^\s*ocredit\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23037502" version="1">
-          <behaviors recurse_direction="down" />
-          <path>/etc/security/pwquality.conf.d</path>
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">^\s*ocredit\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23037600" version="2">
-          <behaviors ignore_case="true" />
-          <filepath>/etc/sssd/sssd.conf</filepath>
-          <pattern operation="pattern match">^\s*cache_credentials\s*=\s*true\b$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23037602" version="1">
-          <filepath>/etc/sssd/sssd.conf</filepath>
-          <pattern operation="pattern match">^\s*offline_credentials_expiration\s*=\s*(\d*)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23037603" version="2">
-          <behaviors ignore_case="true" max_depth="-1" recurse_direction="down" />
-          <path>/etc/sssd/conf.d</path>
-          <filename operation="pattern match">^.+\.conf$</filename>
-          <pattern operation="pattern match">^\s*cache_credentials\s*=\s*true\b$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23037605" version="1">
-          <behaviors max_depth="-1" recurse_direction="down" />
-          <path>/etc/sssd/conf.d</path>
-          <filename operation="pattern match">^.+\.conf$</filename>
-          <pattern operation="pattern match">^\s*offline_credentials_expiration\s*=\s*(\d*)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23037606" version="1">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23037600</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23037603</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23037608" version="1">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23037602</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23037605</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23037700" version="1" comment="all pwquality configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23037701</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23037702</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23037701" version="2">
-          <filepath>/etc/security/pwquality.conf</filepath>
-          <pattern operation="pattern match">^\s*dictcheck\s*=\s*([-\d]+)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23037702" version="2">
-          <path>/etc/security/pwquality.conf.d</path>
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">^\s*dictcheck\s*=\s*([-\d]+)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23037800" version="1">
-          <filepath>/etc/login.defs</filepath>
-          <pattern operation="pattern match">^\s*FAIL_DELAY\s+(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23038200" version="1">
-          <filepath>/etc/ssh/sshd_config</filepath>
-          <pattern operation="pattern match">^\s*(?i)PrintLastLog(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23038300" version="1">
-          <filepath>/etc/login.defs</filepath>
-          <pattern operation="pattern match">^\s*UMASK\s+([^#\s]+)</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23038501" version="1">
-          <filepath>/etc/csh.cshrc</filepath>
-          <pattern operation="pattern match">^\s*(?i)umask\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23038600" version="1" comment="32-bit execve syscall uid comparison">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+-S\s+execve\s+-C\s+uid!=euid\s+-F\s+euid=0\s*((\s+-k\s+|-F\s+key=)\S+\s*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23038601" version="1" comment="64-bit execve syscall uid comparison">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+-S\s+execve\s+-C\s+uid!=euid\s+-F\s+euid=0\s*((\s+-k\s+|-F\s+key=)\S+\s*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23038602" version="1" comment="32-bit execve syscall gid comparison">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+-S\s+execve\s+-C\s+gid!=egid\s+-F\s+egid=0\s*((\s+-k\s+|-F\s+key=)\S+\s*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23038603" version="1" comment="64-bit execve syscall gid comparison">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+-S\s+execve\s+-C\s+gid!=egid\s+-F\s+egid=0\s*((\s+-k\s+|-F\s+key=)\S+\s*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23038800" version="1">
-          <filepath>/etc/audit/auditd.conf</filepath>
-          <pattern operation="pattern match">(?i)^\s*action_mail_acct\s*=\s*(\w+)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23038900" version="2">
-          <path>/etc/</path>
-          <filename operation="pattern match">aliases</filename>
-          <pattern operation="pattern match">^\s*postmaster:\s*root\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23039000" version="1">
-          <filepath>/etc/audit/auditd.conf</filepath>
-          <pattern operation="pattern match">(?i)^\s*disk_error_action\s*=\s*(\w+)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23039200" version="1">
-          <filepath>/etc/audit/auditd.conf</filepath>
-          <pattern operation="pattern match">(?i)^\s*disk_full_action\s*=\s*(\w+)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23039300" version="1">
-          <filepath>/etc/audit/auditd.conf</filepath>
-          <pattern operation="pattern match">(?i)^\s*local_events\s*=\s*(\w+)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23039400" version="1">
-          <filepath>/etc/audit/auditd.conf</filepath>
-          <pattern operation="pattern match">(?i)^\s*name_format\s*=\s*(\w+)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23039500" version="1">
-          <filepath>/etc/audit/auditd.conf</filepath>
-          <pattern operation="pattern match">(?i)^\s*log_format\s*=\s*(\w+)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23039701" version="1">
-          <filepath>/etc/audit/auditd.conf</filepath>
-          <pattern operation="pattern match">^\s*log_file\s*=\s*(\S+)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23040200" version="1">
-          <behaviors multiline="false" />
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">\n[ \t]*-e[ \t]+2\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23040300" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^--loginuid-immutable$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23040400" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-w\s+/etc/shadow(\s+-p\s*([rx]*w[rx]*a[rx]*|[rx]*a[rx]*w[rx]*))?(\s+(-k\s+|-F\s+key=)\w+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23040500" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-w\s+/etc/security/opasswd(\s+-p\s*([rx]*w[rx]*a[rx]*|[rx]*a[rx]*w[rx]*))?(\s+(-k\s+|-F\s+key=)\w+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23040600" version="2">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-w\s+/etc/passwd(\s+-p\s*([rx]*w[rx]*a[rx]*|[rx]*a[rx]*w[rx]*))?(\s+(-k\s+|-F\s+key=)[\w-]+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23040700" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-w\s+/etc/gshadow(\s+-p\s*([rx]*w[rx]*a[rx]*|[rx]*a[rx]*w[rx]*))?(\s+(-k\s+|-F\s+key=)\w+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23040800" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-w\s+/etc/group(\s+-p\s*([rx]*w[rx]*a[rx]*|[rx]*a[rx]*w[rx]*))?(\s+(-k\s+|-F\s+key=)\w+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23040900" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-w\s+/etc/sudoers(\s+-p\s*([rx]*w[rx]*a[rx]*|[rx]*a[rx]*w[rx]*))?(\s+(-k\s+|-F\s+key=)\w+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23041000" version="3">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-w\s+/etc/sudoers.d/?(\s+-p\s*([rx]*w[rx]*a[rx]*|[rx]*a[rx]*w[rx]*))?(\s+(-k\s+|-F\s+key=)[\w-]+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23041200" version="2">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/bin/su\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23041300" version="1" comment="32-bit setxattr syscall">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+setxattr\s+|(\s+|,)setxattr(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23041301" version="1" comment="64-bit setxattr syscall">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+setxattr\s+|(\s+|,)setxattr(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23041302" version="1" comment="32-bit setxattr syscall">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+setxattr\s+|(\s+|,)setxattr(\s+|,))).*-F\s+auid=0(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23041303" version="1" comment="64-bit setxattr syscall">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+setxattr\s+|(\s+|,)setxattr(\s+|,))).*-F\s+auid=0(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23041800" version="2">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/bin/chage\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23041900" version="3">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=\/usr\/bin\/chcon\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23042100" version="2">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/bin/ssh-agent\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23042200" version="2">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/bin/passwd\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23042300" version="2">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/bin/mount\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23042400" version="2">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/bin/umount\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23042600" version="2">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/sbin/unix_update\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23042700" version="2">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/sbin/postdrop\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23042800" version="2">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/sbin/postqueue\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23042900" version="2">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/sbin/semanage\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23043000" version="2">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/sbin/setfiles\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23043100" version="2">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/sbin/userhelper\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23043200" version="2">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/sbin/setsebool\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23043300" version="2">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/sbin/unix_chkpwd\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23043400" version="2">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/libexec/openssh/ssh-keysign\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23043500" version="2">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/bin/setfacl\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23043600" version="2">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/sbin/pam_timestamp_check\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23043700" version="2">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/bin/newgrp\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23043800" version="1" comment="32-bit init_module syscall">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+init_module\s+|(\s+|,)init_module(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23043801" version="1" comment="64-bit init_module syscall">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+init_module\s+|(\s+|,)init_module(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23043802" version="1" comment="32-bit finit_module syscall">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+finit_module\s+|(\s+|,)finit_module(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23043803" version="1" comment="64-bit finit_module syscall">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+finit_module\s+|(\s+|,)finit_module(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044400" version="2">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/bin/gpasswd\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044600" version="2">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+delete_module\s+|(\s+|,)delete_module(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044601" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+delete_module\s+|(\s+|,)delete_module(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044700" version="2">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/bin/crontab\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044800" version="2">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/bin/chsh\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044900" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+truncate\s+|(\s+|,)truncate(\s+|,))).*-F\s+exit=-EPERM\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044901" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+truncate\s+|(\s+|,)truncate(\s+|,))).*-F\s+exit=-EPERM\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044902" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+truncate\s+|(\s+|,)truncate(\s+|,))).*-F\s+exit=-EACCES\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044903" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+truncate\s+|(\s+|,)truncate(\s+|,))).*-F\s+exit=-EACCES\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044904" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+ftruncate\s+|(\s+|,)ftruncate(\s+|,))).*-F\s+exit=-EPERM\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044905" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+ftruncate\s+|(\s+|,)ftruncate(\s+|,))).*-F\s+exit=-EPERM\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044906" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+ftruncate\s+|(\s+|,)ftruncate(\s+|,))).*-F\s+exit=-EACCES\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044907" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+ftruncate\s+|(\s+|,)ftruncate(\s+|,))).*-F\s+exit=-EACCES\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044908" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+creat\s+|(\s+|,)creat(\s+|,))).*-F\s+exit=-EPERM\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044909" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+creat\s+|(\s+|,)creat(\s+|,))).*-F\s+exit=-EPERM\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044910" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+creat\s+|(\s+|,)creat(\s+|,))).*-F\s+exit=-EACCES\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044911" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+creat\s+|(\s+|,)creat(\s+|,))).*-F\s+exit=-EACCES\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044912" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+open\s+|(\s+|,)open(\s+|,))).*-F\s+exit=-EPERM\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044913" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+open\s+|(\s+|,)open(\s+|,))).*-F\s+exit=-EPERM\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044914" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+open\s+|(\s+|,)open(\s+|,))).*-F\s+exit=-EACCES\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044915" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+open\s+|(\s+|,)open(\s+|,))).*-F\s+exit=-EACCES\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044916" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+openat\s+|(\s+|,)openat(\s+|,))).*-F\s+exit=-EPERM\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044917" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+openat\s+|(\s+|,)openat(\s+|,))).*-F\s+exit=-EPERM\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044918" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+openat\s+|(\s+|,)openat(\s+|,))).*-F\s+exit=-EACCES\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044919" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+openat\s+|(\s+|,)openat(\s+|,))).*-F\s+exit=-EACCES\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044920" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+open_by_handle_at\s+|(\s+|,)open_by_handle_at(\s+|,))).*-F\s+exit=-EPERM\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044921" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+open_by_handle_at\s+|(\s+|,)open_by_handle_at(\s+|,))).*-F\s+exit=-EPERM\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044922" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+open_by_handle_at\s+|(\s+|,)open_by_handle_at(\s+|,))).*-F\s+exit=-EACCES\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044923" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+open_by_handle_at\s+|(\s+|,)open_by_handle_at(\s+|,))).*-F\s+exit=-EACCES\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23045500" version="1" comment="32-bit chown syscall">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+chown\s+|(\s+|,)chown(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23045501" version="1" comment="64-bit chown syscall">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+chown\s+|(\s+|,)chown(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23045502" version="1" comment="32-bit lchown syscall">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+lchown\s+|(\s+|,)lchown(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23045503" version="1" comment="64-bit lchown syscall">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+lchown\s+|(\s+|,)lchown(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23045504" version="1" comment="32-bit fchownat syscall">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+fchownat\s+|(\s+|,)fchownat(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23045505" version="1" comment="64-bit fchownat syscall">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+fchownat\s+|(\s+|,)fchownat(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23045506" version="1" comment="32-bit fchown syscall">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+fchown\s+|(\s+|,)fchown(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23045507" version="1" comment="64-bit fchown syscall">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+fchown\s+|(\s+|,)fchown(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23045600" version="1" comment="32-bit chmod syscall">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+chmod\s+|(\s+|,)chmod(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23045601" version="1" comment="64-bit chmod syscall">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+chmod\s+|(\s+|,)chmod(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23045602" version="1" comment="32-bit fchmod syscall">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+fchmod\s+|(\s+|,)fchmod(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23045603" version="1" comment="64-bit fchmod syscall">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+fchmod\s+|(\s+|,)fchmod(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23045604" version="1" comment="32-bit fchmodat syscall">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+fchmodat\s+|(\s+|,)fchmodat(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23045605" version="1" comment="64-bit fchmodat syscall">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+fchmodat\s+|(\s+|,)fchmodat(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23046200" version="3">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/bin/sudo\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23046300" version="2">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/sbin/usermod\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23046400" version="2">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/bin/chacl\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23046500" version="2">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/bin/kmod\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23046700" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-w\s+/var/log/lastlog(\s+-p\s*([rx]*w[rx]*a[rx]*|[rx]*a[rx]*w[rx]*))?(\s+(-k\s+|-F\s+key=)\w+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23046900" version="2">
-          <path>/boot/loader/entries</path>
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^options\s+.*\baudit_backlog_limit=(\d+)\b</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23046901" version="3">
-          <filepath>/etc/default/grub</filepath>
-          <pattern operation="pattern match">^GRUB_CMDLINE_LINUX=".*\baudit_backlog_limit=(\d+)\b.*"</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23047000" version="1">
-          <filepath>/etc/usbguard/usbguard-daemon.conf</filepath>
-          <pattern operation="pattern match">^\s*AuditBackend\s*=\s*(\w+)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23047500" version="1">
-          <filepath>/etc/aide.conf</filepath>
-          <pattern operation="pattern match">^\s*/usr/sbin/auditctl\s+\S+</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23047501" version="1">
-          <filepath>/etc/aide.conf</filepath>
-          <pattern operation="pattern match">^\s*/usr/sbin/auditd\s+\S+</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23047502" version="1">
-          <filepath>/etc/aide.conf</filepath>
-          <pattern operation="pattern match">^\s*/usr/sbin/ausearch\s+\S+</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23047503" version="1">
-          <filepath>/etc/aide.conf</filepath>
-          <pattern operation="pattern match">^\s*/usr/sbin/aureport\s+\S+</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23047504" version="1">
-          <filepath>/etc/aide.conf</filepath>
-          <pattern operation="pattern match">^\s*/usr/sbin/autrace\s+\S+</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23047505" version="1">
-          <filepath>/etc/aide.conf</filepath>
-          <pattern operation="pattern match">^\s*/usr/sbin/augenrules\s+\S+</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23048000" version="1">
-          <filepath>/etc/audit/auditd.conf</filepath>
-          <pattern operation="pattern match">(?i)^\s*overflow_action\s*=\s*(\w+)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23048100" version="1" comment="ActionSendStreamDriverMode">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23048101</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23048102</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23048101" version="1" comment="rsyslog.conf: ActionSendStreamDriverMode">
-          <behaviors ignore_case="true" />
-          <filepath datatype="string">/etc/rsyslog.conf</filepath>
-          <pattern operation="pattern match">^\$ActionSendStreamDriverMode\s+(\S+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23048102" version="1" comment="rsyslog.d/*.conf: ActionSendStreamDriverMode">
-          <behaviors ignore_case="true" />
-          <path>/etc/rsyslog.d</path>
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^\$ActionSendStreamDriverMode\s+(\S+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23048300" version="2">
-          <filepath>/etc/audit/auditd.conf</filepath>
-          <pattern operation="pattern match">(?i)^\s*space_left\s*=\s*([\d]+)%\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23048500" version="1">
-          <filepath>/etc/chrony.conf</filepath>
-          <pattern operation="pattern match">^[ \t]*port[ \t]+(\d+)[ \t]*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23048600" version="1">
-          <filepath>/etc/chrony.conf</filepath>
-          <pattern operation="pattern match">^[ \t]*cmdport[ \t]+0[ \t]*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23049400" version="2">
-          <path>/etc/modprobe.d</path>
-          <filename operation="pattern match">.*</filename>
-          <pattern operation="pattern match">^[ \t]*install[ \t]+atm[ \t]+/bin/false[ \t]*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23049401" version="1">
-          <path>/etc/modprobe.d</path>
-          <filename operation="pattern match">.*</filename>
-          <pattern operation="pattern match">^[ \t]*blacklist[ \t]+atm[ \t]*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23049501" version="1">
-          <path>/etc/modprobe.d</path>
-          <filename operation="pattern match">.*</filename>
-          <pattern operation="pattern match">^[ \t]*blacklist[ \t]+can[ \t]*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23049600" version="2">
-          <path>/etc/modprobe.d</path>
-          <filename operation="pattern match">.*</filename>
-          <pattern operation="pattern match">^[ \t]*install[ \t]+sctp[ \t]+/bin/false[ \t]*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23049601" version="1">
-          <path>/etc/modprobe.d</path>
-          <filename operation="pattern match">.*</filename>
-          <pattern operation="pattern match">^[ \t]*blacklist[ \t]+sctp[ \t]*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23049700" version="2">
-          <path>/etc/modprobe.d</path>
-          <filename operation="pattern match">.*</filename>
-          <pattern operation="pattern match">^[ \t]*install[ \t]+tipc[ \t]+/bin/false[ \t]*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23049701" version="1">
-          <path>/etc/modprobe.d</path>
-          <filename operation="pattern match">.*</filename>
-          <pattern operation="pattern match">^[ \t]*blacklist[ \t]+tipc[ \t]*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23049800" version="2">
-          <path>/etc/modprobe.d</path>
-          <filename operation="pattern match">.*</filename>
-          <pattern operation="pattern match">^[ \t]*install[ \t]+cramfs[ \t]+/bin/false[ \t]*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23049801" version="1">
-          <path>/etc/modprobe.d</path>
-          <filename operation="pattern match">.*</filename>
-          <pattern operation="pattern match">^[ \t]*blacklist[ \t]+cramfs[ \t]*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23049802" version="1">
-          <filepath>/etc/modprobe.conf</filepath>
-          <pattern operation="pattern match">^[ \t]*install[ \t]+cramfs[ \t]+/bin/false[ \t]*$</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23049803" version="1">
-          <filepath>/etc/modprobe.conf</filepath>
-          <pattern operation="pattern match">^[ \t]*blacklist[ \t]+cramfs[ \t]*$</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23049900" version="2">
-          <path>/etc/modprobe.d</path>
-          <filename operation="pattern match">.*</filename>
-          <pattern operation="pattern match">^[ \t]*install[ \t]+firewire-core[ \t]+/bin/false[ \t]*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23049901" version="1">
-          <path>/etc/modprobe.d</path>
-          <filename operation="pattern match">.*</filename>
-          <pattern operation="pattern match">^[ \t]*blacklist[ \t]+firewire-core[ \t]*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23050300" version="2">
-          <path>/etc/modprobe.d</path>
-          <filename operation="pattern match">.*</filename>
-          <pattern operation="pattern match">^[ \t]*install[ \t]+usb-storage[ \t]+/bin/false[ \t]*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23050301" version="1">
-          <path>/etc/modprobe.d</path>
-          <filename operation="pattern match">.*</filename>
-          <pattern operation="pattern match">^[ \t]*blacklist[ \t]+usb-storage[ \t]*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23050700" version="1">
-          <path>/etc/modprobe.d</path>
-          <filename operation="pattern match">.*</filename>
-          <pattern operation="pattern match">^[ \t]*install[ \t]+bluetooth[ \t]+/bin/false[ \t]*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23050701" version="1">
-          <path>/etc/modprobe.d</path>
-          <filename operation="pattern match">.*</filename>
-          <pattern operation="pattern match">^[ \t]*blacklist[ \t]+bluetooth[ \t]*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23050900" version="1">
-          <filepath>/etc/fstab</filepath>
-          <pattern operation="pattern match">^\s*[^#\s]+\s+/dev/shm\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23051001" version="1">
-          <filepath>/etc/fstab</filepath>
-          <pattern operation="pattern match">^\s*[^#\s]+\s+/dev/shm\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <variable_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23051101" version="1">
-          <var_ref>oval:mil.disa.stig.linux:var:23051100</var_ref>
-        </variable_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23051102" version="1">
-          <filepath>/etc/fstab</filepath>
-          <pattern operation="pattern match">^\s*[^#\s]+\s+/tmp\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23051201" version="1">
-          <filepath>/etc/fstab</filepath>
-          <pattern operation="pattern match">^\s*[^#\s]+\s+/tmp\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <variable_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23051401" version="1">
-          <var_ref>oval:mil.disa.stig.ind:var:23051400</var_ref>
-        </variable_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23051402" version="1">
-          <filepath>/etc/fstab</filepath>
-          <pattern operation="pattern match">^\s*[^#\s]+\s+/var/log\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <variable_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23051501" version="1">
-          <var_ref>oval:mil.disa.stig.ind:var:23051500</var_ref>
-        </variable_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23051502" version="1">
-          <filepath>/etc/fstab</filepath>
-          <pattern operation="pattern match">^\s*[^#\s]+\s+/var/log\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <variable_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23051600" version="1">
-          <var_ref>oval:mil.disa.stig.defs:var:23051600</var_ref>
-        </variable_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23051601" version="1">
-          <filepath>/etc/fstab</filepath>
-          <pattern operation="pattern match">^\s*[^#\s]+\s+/var/log\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <variable_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23051701" version="1">
-          <var_ref>oval:mil.disa.stig.linux:var:23051700</var_ref>
-        </variable_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23051702" version="1">
-          <filepath>/etc/fstab</filepath>
-          <pattern operation="pattern match">^\s*[^#\s]+\s+/var/log/audit\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23051901" version="1">
-          <filepath>/etc/fstab</filepath>
-          <pattern operation="pattern match">^\s*[^#\s]+\s+/var/log/audit\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23052001" version="1">
-          <filepath>/etc/fstab</filepath>
-          <pattern operation="pattern match">^\s*[^#\s]+\s+/var/tmp\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23052101" version="1">
-          <filepath>/etc/fstab</filepath>
-          <pattern operation="pattern match">^\s*[^#\s]+\s+/var/tmp\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23052500" version="1">
-          <filepath>/etc/firewalld/firewalld.conf</filepath>
-          <pattern operation="pattern match">^\s*FirewallBackend\s*=\s*(\w+)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23052700" version="3">
-          <behaviors ignore_case="true" />
-          <filepath>/etc/ssh/sshd_config</filepath>
-          <pattern operation="pattern match">^\s*RekeyLimit\s+\d+[kmg]?\s+\d+[smdhw]?\s*</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23052701" version="3">
-          <behaviors ignore_case="true" />
-          <path>/etc/ssh/sshd_config.d</path>
-          <filename operation="pattern match">^.+\.conf$</filename>
-          <pattern operation="pattern match">^\s*RekeyLimit\s+\d+[kmg]?\s+\d+[smdhw]?\s*</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23053100" version="2">
-          <filepath datatype="string">/etc/systemd/system.conf</filepath>
-          <pattern operation="pattern match">^\s*CtrlAltDelBurstAction\s*=\s*(\S+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23053902" version="2" comment="/etc/sysctl.conf">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">(?:^|.*\n)\s*net\.ipv6\.conf\.default\.accept_source_route\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23053903" version="2" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23053902</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23053905</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23053905" version="3" comment="Check the sysctl configuration files for net.ipv6.conf.default.accept_source_route">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">(?:^|.*\n)\s*net\.ipv6\.conf\.default\.accept_source_route\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054501" version="1" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23054502</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23054503</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054502" version="1">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*kernel\.unprivileged_bpf_disabled\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054503" version="1">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*kernel\.unprivileged_bpf_disabled\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054601" version="11">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*kernel\.yama\.ptrace_scope\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054602" version="1" comment="other sysctl configuration files">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*kernel\.yama\.ptrace_scope\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054603" version="1" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23054601</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23054602</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054701" version="7">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="only one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">^\s*kernel\.kptr_restrict\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054702" version="2">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*kernel\.kptr_restrict\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054703" version="2">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23054701</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23054702</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054801" version="1">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="only one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">^\s*user\.max_user_namespaces\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054802" version="1">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*user\.max_user_namespaces\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054803" version="1">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23054801</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23054802</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23055001" version="1">
-          <filepath>/etc/postfix/main.cf</filepath>
-          <pattern operation="pattern match">^smtpd_client_restrictions[ \t]*=[ \t]*permit_mynetworks[, \t]+reject[ \t]*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23055500" version="2" comment="X11Forwarding in /etc/ssh/sshd_config and /etc/ssh/sshd_config.d/*">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23055501</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23055502</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23055501" version="1">
-          <filepath>/etc/ssh/sshd_config</filepath>
-          <pattern operation="pattern match">^\s*(?i)X11Forwarding[ \t]+([^\s#]*)[ \t]*(?:|(?:#.*))?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23055502" version="1">
-          <path>/etc/ssh/sshd_config.d</path>
-          <filename operation="pattern match">.+</filename>
-          <pattern operation="pattern match">^\s*(?i)X11Forwarding[ \t]+([^\s#]*)[ \t]*(?:|(?:#.*))?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23055600" version="2" comment="sshd_config X11UseLocalhost">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23055601</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23055602</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23055601" version="4" comment="sshd_config X11UseLocalhost">
-          <filepath datatype="string">/etc/ssh/sshd_config</filepath>
-          <pattern operation="pattern match">^\s*(?i)X11useLocalhost(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23055602" version="4">
-          <behaviors max_depth="-1" recurse_direction="down" />
-          <path>/etc/ssh/sshd_config.d</path>
-          <filename operation="pattern match">^.+\.conf$</filename>
-          <pattern operation="pattern match">^\s*(?i)X11useLocalhost(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23481500" version="1" comment="Pull value of /etc/ssh/sshd_config:LogLevel">
-          <filepath>/etc/ssh/sshd_config</filepath>
-          <pattern operation="pattern match">^\s*(?i)LogLevel(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23481501" version="1" comment="Pull value of /etc/ssh/sshd_config.d:LogLevel">
-          <path>/etc/ssh/sshd_config.d</path>
-          <filename operation="pattern match">.+</filename>
-          <pattern operation="pattern match">^\s*(?i)LogLevel(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23481502" version="1" comment="all sshd_config and sshd_config.d/* files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23481500</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23481501</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23764200" version="1" comment="/etc/sudoers Defaults !targetpw">
-          <filepath datatype="string">/etc/sudoers</filepath>
-          <pattern operation="pattern match">^\s*Defaults\s+!targetpw\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23764201" version="2" comment="/etc/sudoers includedir">
-          <filepath datatype="string">/etc/sudoers</filepath>
-          <pattern operation="pattern match">^\s*[#@]includedir\s+(\S+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23764202" version="1" comment="/etc/sudoers.d Defaults !targetpw">
-          <filepath var_ref="oval:mil.disa.stig.defs:var:23764200" var_check="at least one" />
-          <pattern operation="pattern match">^\s*Defaults\s+!targetpw\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23764203" version="1" comment="/etc/sudoers Defaults !rootpw">
-          <filepath datatype="string">/etc/sudoers</filepath>
-          <pattern operation="pattern match">^\s*Defaults\s+!rootpw\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23764204" version="1" comment="/etc/sudoers.d Defaults !rootpw">
-          <filepath var_ref="oval:mil.disa.stig.defs:var:23764200" var_check="at least one" />
-          <pattern operation="pattern match">^\s*Defaults\s+!rootpw\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23764205" version="1" comment="/etc/sudoers Defaults !runaspw">
-          <filepath datatype="string">/etc/sudoers</filepath>
-          <pattern operation="pattern match">^\s*Defaults\s+!runaspw\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23764206" version="1" comment="/etc/sudoers.d Defaults !runaspw">
-          <filepath var_ref="oval:mil.disa.stig.defs:var:23764200" var_check="at least one" />
-          <pattern operation="pattern match">^\s*Defaults\s+!runaspw\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23764300" version="1">
-          <behaviors ignore_case="true" />
-          <filepath>/etc/sudoers</filepath>
-          <pattern operation="pattern match">^\s*Defaults\s+timestamp_timeout\s*=\s*([-\d]+)\s*$</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23764301" version="1">
-          <behaviors ignore_case="true" max_depth="-1" recurse_direction="down" />
-          <path>/etc/sudoers.d</path>
-          <filename operation="pattern match">^.*$</filename>
-          <pattern operation="pattern match">^\s*Defaults\s+timestamp_timeout\s*=\s*([-\d]+)\s*$</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23764302" version="1">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23764300</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23764301</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23827800" version="2">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/bin/sudoedit\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23828500" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-w\s+/var/log/tallylog(\s+-p\s*([rx]*w[rx]*a[rx]*|[rx]*a[rx]*w[rx]*))?(\s+(-k\s+|-F\s+key=)[\w-]+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24451900" version="1">
-          <path datatype="string">/etc/dconf/db/local.d</path>
-          <filename datatype="string" operation="pattern match">.*</filename>
-          <pattern operation="pattern match">^\s*banner-message-enable\s*=\s*(\w+)$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24452300" version="1" comment="/usr/lib/systemd/system/emergency.service ExecStart">
-          <filepath datatype="string">/usr/lib/systemd/system/emergency.service</filepath>
-          <pattern operation="pattern match">^ExecStart=(.*)$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24452800" version="1">
-          <behaviors ignore_case="true" />
-          <path>/etc/ssh/sshd_config.d</path>
-          <filename operation="pattern match">^.+\.conf$</filename>
-          <pattern operation="pattern match">^\s*(?i)GSSAPIAuthentication(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24452801" version="1">
-          <behaviors ignore_case="true" />
-          <filepath>/etc/ssh/sshd_config</filepath>
-          <pattern operation="pattern match">^\s*(?i)GSSAPIAuthentication(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24453001" version="2">
-          <filepath>/etc/fstab</filepath>
-          <pattern operation="pattern match">^\s*[^#\s]+\s+/boot/efi\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24453801" version="1" comment="Check that the idle-delay setting is locked from nonprivileged user modification">
-          <path>/etc/dconf/db/local.d/locks</path>
-          <filename operation="pattern match">^.*$</filename>
-          <pattern datatype="string" operation="pattern match">^\s*\/org\/gnome\/desktop\/session\/idle-delay$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24453900" version="1">
-          <path>/etc/dconf/db/local.d/locks</path>
-          <filename operation="pattern match">.*</filename>
-          <pattern operation="pattern match">^/org/gnome/desktop/screensaver/lock-enabled$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24454000" version="1">
-          <filepath>/etc/pam.d/system-auth</filepath>
-          <pattern operation="pattern match">\bnullok\b</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24454100" version="1">
-          <filepath>/etc/pam.d/password-auth</filepath>
-          <pattern operation="pattern match">\bnullok\b</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24454300" version="1">
-          <filepath>/etc/audit/auditd.conf</filepath>
-          <pattern operation="pattern match">(?i)^\s*space_left_action\s*=\s*(\w+)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24455401" version="1">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:24455402</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:24455403</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24455402" version="1">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="only one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">^\s*net\.core\.bpf_jit_harden\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24455403" version="1">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*net\.core\.bpf_jit_harden\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24877400" version="1" comment="Audit 32-bit invocations of rmdir">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+rmdir\s+|(\s+|,)rmdir(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24877401" version="1" comment="Audit 64-bit invocations of rmdir">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+rmdir\s+|(\s+|,)rmdir(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25170600" version="1">
-          <filepath>/etc/shadow</filepath>
-          <pattern operation="pattern match">^[^:]+::[^:]*:[^:]*:</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25171300" version="2" comment="system-auth password required, requisite">
-          <behaviors ignore_case="true" />
-          <filepath datatype="string">/etc/pam.d/system-auth</filepath>
-          <pattern operation="pattern match">^\s*password\s+(?:required|requisite)\s+(.*)$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25171400" version="1" comment="in /etc/pam.d/system-auth check for pam_pwquality.so retry equals value">
-          <filepath>/etc/pam.d/system-auth</filepath>
-          <pattern operation="pattern match">^[ \t]*password[ \t]+(?:(?:required)|(?:requisite))[ \t]+pam_pwquality\.so(?:[ \t]+|(?:[ \t][^#\r\f\n]+[ \t]+))retry=([0-9]+)(?:\s|$)</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25299700" version="2" comment="32-bit rename command">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+rename\s+|(\s+|,)rename(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25299701" version="2" comment="64-bit rename command">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+rename\s+|(\s+|,)rename(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25299800" version="1" comment="32-bit renameat command">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+renameat\s+|(\s+|,)renameat(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25299801" version="1" comment="64-bit renameat command">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+renameat\s+|(\s+|,)renameat(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25300000" version="2" comment="32-bit unlink command">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+unlink\s+|(\s+|,)unlink(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25300001" version="2" comment="64-bit unlink command">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+unlink\s+|(\s+|,)unlink(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25300100" version="1" comment="32-bit unlinkat command">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+unlinkat\s+|(\s+|,)unlinkat(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25300101" version="1" comment="64-bit unlinkat command">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+unlinkat\s+|(\s+|,)unlinkat(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303400" version="1" comment="32-bit fsetxattr syscall">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+fsetxattr\s+|(\s+|,)fsetxattr(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303401" version="1" comment="64-bit fsetxattr syscall">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+fsetxattr\s+|(\s+|,)fsetxattr(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303402" version="1" comment="32-bit fsetxattr syscall">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+fsetxattr\s+|(\s+|,)fsetxattr(\s+|,))).*-F\s+auid=0(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303403" version="1" comment="64-bit fsetxattr syscall">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+fsetxattr\s+|(\s+|,)fsetxattr(\s+|,))).*-F\s+auid=0(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303500" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match" var_ref="oval:mil.disa.stig.defs:var:25303500" />
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303501" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match" var_ref="oval:mil.disa.stig.defs:var:25303501" />
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303502" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match" var_ref="oval:mil.disa.stig.defs:var:25303502" />
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303503" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match" var_ref="oval:mil.disa.stig.defs:var:25303503" />
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303600" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+fremovexattr\s+|(\s+|,)fremovexattr(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303601" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+fremovexattr\s+|(\s+|,)fremovexattr(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303602" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+fremovexattr\s+|(\s+|,)fremovexattr(\s+|,))).*-F\s+auid=0(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303603" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+fremovexattr\s+|(\s+|,)fremovexattr(\s+|,))).*-F\s+auid=0(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303700" version="3" comment="32-bit lremovexattr syscall">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+lremovexattr\s+|(\s+|,)lremovexattr(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303701" version="3" comment="64-bit lremovexattr syscall">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+lremovexattr\s+|(\s+|,)lremovexattr(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303702" version="3" comment="32-bit lremovexattr syscall (invoked by root)">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+lremovexattr\s+|(\s+|,)lremovexattr(\s+|,))).*-F\s+auid=0(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303703" version="3" comment="64-bit lremovexattr syscall (invoked by root)">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+lremovexattr\s+|(\s+|,)lremovexattr(\s+|,))).*-F\s+auid=0(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303800" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match" var_ref="oval:mil.disa.stig.defs:var:25303800" />
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303801" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match" var_ref="oval:mil.disa.stig.defs:var:25303801" />
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303802" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match" var_ref="oval:mil.disa.stig.defs:var:25303802" />
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303803" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match" var_ref="oval:mil.disa.stig.defs:var:25303803" />
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25778700" version="3" comment="/etc/grub2.cfg:superusers">
-          <filepath datatype="string">/etc/grub2.cfg</filepath>
-          <pattern operation="pattern match">^\s*set\s+superusers\s*=\s*"(\S+)"\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25778701" version="1" comment="/boot/grub2/grubenv:kernelopts">
-          <filepath datatype="string">/boot/grub2/user.cfg</filepath>
-          <pattern operation="pattern match">^\s*GRUB2_PASSWORD=(\S+)\b</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25779300" version="1" comment="BLS options">
-          <path>/boot/loader/entries</path>
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^options\s+(.*)$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25779301" version="1" comment="/etc/default/grub GRUB_CMDLINE_LINUX">
-          <filepath>/etc/default/grub</filepath>
-          <pattern operation="pattern match">^GRUB_CMDLINE_LINUX="(.*)"</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25780400" version="1">
-          <filepath>/etc/modprobe.conf</filepath>
-          <pattern operation="pattern match">^[ \t]*install[ \t]+atm[ \t]+/bin/false[ \t]*$</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25780401" version="1">
-          <filepath>/etc/modprobe.conf</filepath>
-          <pattern operation="pattern match">^[ \t]*blacklist[ \t]+atm[ \t]*$</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25780600" version="1">
-          <filepath>/etc/modprobe.conf</filepath>
-          <pattern operation="pattern match">^[ \t]*install[ \t]+firewire-core[ \t]+/bin/false[ \t]*$</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25780601" version="1">
-          <filepath>/etc/modprobe.conf</filepath>
-          <pattern operation="pattern match">^[ \t]*blacklist[ \t]+firewire-core[ \t]*$</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25780700" version="1">
-          <filepath>/etc/modprobe.conf</filepath>
-          <pattern operation="pattern match">^[ \t]*install[ \t]+sctp[ \t]+/bin/false[ \t]*$</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25780701" version="1">
-          <filepath>/etc/modprobe.conf</filepath>
-          <pattern operation="pattern match">^[ \t]*blacklist[ \t]+sctp[ \t]*$</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25782000" version="1" comment="/etc/dnf/dnf.conf gpgcheck">
-          <filepath>/etc/dnf/dnf.conf</filepath>
-          <pattern operation="pattern match">^gpgcheck=(.*)$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25785400" version="2" comment="/etc/fstab, uncommented, nfs, capturing options">
-          <filepath>/etc/fstab</filepath>
-          <pattern operation="pattern match">^\s*[^#\s][^\s]*\s+[^\s]+\s+nfs[^\s]*\s+([^\s]+)</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25786900" version="1">
-          <filepath>/etc/fstab</filepath>
-          <pattern operation="pattern match">^\s*[^#\s]+\s+/var\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25794900" version="1" comment="NetworkManager.conf dns setting">
-          <filepath>/etc/NetworkManager/NetworkManager.conf</filepath>
-          <pattern operation="pattern match">^dns=(\S*)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25794901" version="1" comment="NetworkManager.conf main section">
-          <filepath>/etc/NetworkManager/NetworkManager.conf</filepath>
-          <pattern operation="pattern match">^\[main\]((?:\r?\n(?:[^[\r\n].*)?)*)</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798100" version="1" comment="Pull value of /etc/ssh/sshd_config:banner">
-          <filepath>/etc/ssh/sshd_config</filepath>
-          <pattern operation="pattern match">^\s*(?i)banner(?-i)[ \t\"]+([\w\/]+)[\"\s]*(?:|(?:#.*))?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798101" version="1" comment="Pull value of /etc/ssh/sshd_config.d:banner">
-          <path>/etc/ssh/sshd_config.d</path>
-          <filename operation="pattern match">.+</filename>
-          <pattern operation="pattern match">^\s*(?i)banner(?-i)[ \t\"]+([\w\/]+)[\"\s]*(?:|(?:#.*))?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798102" version="1" comment="all sshd_config and sshd_config.d/* files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:25798100</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:25798101</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798103" version="1" comment="Pull value of /etc/ssh/sshd_config:banner">
-          <filepath>/etc/ssh/sshd_config</filepath>
-          <pattern operation="pattern match">^\s*(?i)banner(?-i)[ \t]*(?:none[\s]*|(?:#.*))?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798104" version="1" comment="Pull value of /etc/ssh/sshd_config.d:banner">
-          <path>/etc/ssh/sshd_config.d</path>
-          <filename operation="pattern match">.+</filename>
-          <pattern operation="pattern match">^\s*(?i)banner(?-i)[ \t]*(?:none[\s]*|(?:#.*))?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798105" version="1" comment="all sshd_config and sshd_config.d/* files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:25798103</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:25798104</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798300" version="2">
-          <behaviors ignore_case="true" />
-          <path>/etc/ssh/sshd_config.d</path>
-          <filename operation="pattern match">^.+\.conf$</filename>
-          <pattern operation="pattern match">^\s*(?i)PubkeyAuthentication(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798301" version="1">
-          <behaviors ignore_case="true" />
-          <filepath>/etc/ssh/sshd_config</filepath>
-          <pattern operation="pattern match">^\s*(?i)PubkeyAuthentication(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798400" version="2" comment="PermitEmptyPasswords in all sshd_config and sshd_config.d/* files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:25798401</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:25798402</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798401" version="1">
-          <filepath>/etc/ssh/sshd_config</filepath>
-          <pattern operation="pattern match">^(?i)\s*PermitEmptyPasswords\s+(\w+)$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798402" version="1">
-          <path>/etc/ssh/sshd_config.d</path>
-          <filename operation="pattern match">.+</filename>
-          <pattern operation="pattern match">^(?i)\s*PermitEmptyPasswords\s+(\w+)$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798600" version="2" comment="UsePAM in all sshd_config and sshd_config.d/* files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:25798601</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:25798602</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798601" version="1">
-          <filepath>/etc/ssh/sshd_config</filepath>
-          <pattern operation="pattern match">^\s*UsePAM\s+(\w*)</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798602" version="2">
-          <path>/etc/ssh/sshd_config.d</path>
-          <filename operation="pattern match">^.+\.conf$</filename>
-          <pattern operation="pattern match">^\s*UsePAM\s+(\w*)</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798800" version="1" comment="sshd_config includes">
-          <behaviors ignore_case="true" />
-          <filepath datatype="string">/etc/ssh/sshd_config</filepath>
-          <pattern operation="pattern match">^\s*include\s+(.*)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798801" version="1" comment="sshd_config.d includes">
-          <behaviors ignore_case="true" />
-          <path datatype="string">/etc/ssh/sshd_config.d</path>
-          <filename datatype="string" operation="pattern match">^.+\.conf$</filename>
-          <pattern operation="pattern match">^\s*include\s+(.*)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798900" version="3">
-          <filepath>/etc/crypto-policies/back-ends/opensshserver.config</filepath>
-          <pattern operation="pattern match">^\s*(?i)Ciphers(?-i)[ \t]+(\S+)[\s]*(?:|(?:#.*))?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25799100" version="2">
-          <filepath>/etc/crypto-policies/back-ends/opensshserver.config</filepath>
-          <pattern operation="pattern match">^\s*MACs\s+(\S+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25799200" version="1">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:25799201</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:25799202</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25799201" version="1">
-          <filepath>/etc/ssh/sshd_config</filepath>
-          <pattern operation="pattern match">^(?i)\s*HostbasedAuthentication\s+(\w+)$</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25799202" version="1">
-          <behaviors max_depth="-1" recurse_direction="down" />
-          <path>/etc/ssh/sshd_config.d</path>
-          <filename operation="pattern match">^.+\.conf$</filename>
-          <pattern operation="pattern match">^(?i)\s*HostbasedAuthentication\s+(\w+)$</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25799600" version="1">
-          <filepath>/etc/ssh/sshd_config</filepath>
-          <pattern operation="pattern match">^\s*(?i)ClientAliveInterval(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25799601" version="2">
-          <path>/etc/ssh/sshd_config.d</path>
-          <filename operation="pattern match">.+</filename>
-          <pattern operation="pattern match">^\s*(?i)ClientAliveInterval(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25799602" version="1">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:25799600</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:25799601</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25800200" version="1">
-          <filepath>/etc/ssh/sshd_config</filepath>
-          <pattern operation="pattern match">^\s*(?i)Compression(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25800201" version="1">
-          <path>/etc/ssh/sshd_config.d</path>
-          <filename operation="pattern match">.+</filename>
-          <pattern operation="pattern match">^\s*(?i)Compression(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25800202" version="1">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:25800200</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:25800201</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25800400" version="2">
-          <path>/etc/ssh/sshd_config.d</path>
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^\s*(?i)KerberosAuthentication(?-i)\s+("?\w+"?)\s*(?:|(?:#.*))?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25800401" version="2">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:25800402</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:25800400</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25800402" version="2">
-          <filepath>/etc/ssh/sshd_config</filepath>
-          <pattern operation="pattern match">^\s*(?i)KerberosAuthentication(?-i)\s+("?\w+"?)\s*(?:|(?:#.*))?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25800500" version="1" comment="Ignore Rhosts is set to 'yes' in both /etc/ssh/sshd_config and /etc/ssh/sshd_config.d/*">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:25800501</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:25800502</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25800501" version="1" comment="Pull value of /etc/ssh/sshd_config:IgnoreRhosts">
-          <filepath>/etc/ssh/sshd_config</filepath>
-          <pattern operation="pattern match">^\s*(?i)IgnoreRhosts(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25800502" version="1" comment="Pull value of /etc/ssh/sshd_config.d:IgnoreRhosts">
-          <path>/etc/ssh/sshd_config.d</path>
-          <filename operation="pattern match">^.*$</filename>
-          <pattern operation="pattern match">^\s*(?i)IgnoreRhosts(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25800600" version="1">
-          <filepath>/etc/ssh/sshd_config</filepath>
-          <pattern operation="pattern match">^\s*(?i)IgnoreUserKnownHosts(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25800601" version="1">
-          <path>/etc/ssh/sshd_config.d</path>
-          <filename datatype="string" operation="pattern match">^.+\.conf$</filename>
-          <pattern operation="pattern match">^\s*(?i)IgnoreUserKnownHosts(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25800900" version="2">
-          <behaviors ignore_case="true" />
-          <path>/etc/ssh/sshd_config.d</path>
-          <filename operation="pattern match">^.+\.conf$</filename>
-          <pattern operation="pattern match">^\s*(?i)PrintLastLog(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25801300" version="1" comment="/org/gnome/login-screen/banner-message-enable in dconf user database locks directories">
-          <path var_ref="oval:mil.disa.stig.defs:var:25802600" var_check="at least one" />
-          <filename operation="pattern match">.*</filename>
-          <pattern operation="pattern match">^/org/gnome/login-screen/banner-message-enable$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25801400" version="1">
-          <path>/etc/dconf/db/local.d</path>
-          <filename>00-security-settings</filename>
-          <pattern operation="pattern match">^\s*\[org\/gnome\/desktop\/media-handling]\s*\n+[^\[]*automount-open\s*=\s*(\w+)$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25801500" version="1">
-          <path>/etc/dconf/db/local.d/locks</path>
-          <filename operation="pattern match">.*</filename>
-          <pattern operation="pattern match">^/org/gnome/desktop/media-handling/automount-open$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25801700" version="3" comment="check that /etc/dconf/profile/user:system-db is at minimum set to local">
-          <filepath>/etc/dconf/profile/user</filepath>
-          <pattern operation="pattern match">^\s*system-db\s*:\s*local\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25801701" version="1" comment="Check that the automount setting is locked from nonprivileged user modification">
-          <path>/etc/dconf/db/local.d/locks</path>
-          <filename operation="pattern match">^.*$</filename>
-          <pattern datatype="string" operation="pattern match">^\s*\/org\/gnome\/desktop\/media-handling\/autorun-never$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25802000" version="1" comment="/org/gnome/settings-daemon/peripherals/smartcard/removal-action in dconf user database locks directories">
-          <path var_ref="oval:mil.disa.stig.defs:var:25802600" var_check="at least one" />
-          <filename operation="pattern match">.*</filename>
-          <pattern operation="pattern match">^/org/gnome/settings-daemon/peripherals/smartcard/removal-action$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25802600" version="2" comment="dconf user databases">
-          <filepath>/etc/dconf/profile/user</filepath>
-          <pattern operation="pattern match">^system-db:(\S+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25802601" version="1" comment="/org/gnome/desktop/screensaver/lock-delay in dconf user database locks directories">
-          <path var_ref="oval:mil.disa.stig.defs:var:25802600" var_check="at least one" />
-          <filename operation="pattern match">.*</filename>
-          <pattern operation="pattern match">^/org/gnome/desktop/screensaver/lock-delay$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25802900" version="1" comment="dconf org/gnome/login-screen sections">
-          <path datatype="string" var_ref="oval:mil.disa.stig.defs:var:23035100" var_check="at least one" />
-          <filename datatype="string" operation="pattern match">.*</filename>
-          <pattern operation="pattern match">^\[org/gnome/login-screen](?:\r?\n(?:[^[\r\n].*)?)*</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25803000" version="1" comment="Check that the disable-restart-button setting is locked from nonprivileged user modification">
-          <path>/etc/dconf/db/local.d/locks</path>
-          <filename operation="pattern match">^.*$</filename>
-          <pattern datatype="string" operation="pattern match">^\s*\/org\/gnome\/login-screen\/disable-restart-buttons$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25803200" version="1" comment="/org/gnome/settings-daemon/plugins/media-keys/logout in /etc/dconf/db/local.d/locks/*">
-          <path>/etc/dconf/db/local.d/locks</path>
-          <filename operation="pattern match">.*</filename>
-          <pattern operation="pattern match">^/org/gnome/settings-daemon/plugins/media-keys/logout$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25804100" version="1">
-          <filepath>/etc/login.defs</filepath>
-          <pattern operation="pattern match">^\s*PASS_MAX_DAYS\s+(\d+)</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <variable_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25804501" version="1" comment="count of passwd entries">
-          <var_ref>oval:mil.disa.stig.defs:var:25804500</var_ref>
-        </variable_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25804800" version="1" comment="/etc/group ids">
-          <filepath>/etc/group</filepath>
-          <pattern operation="pattern match">^[^:#]*:[^:]*:(\d+)</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25806100" version="1" comment="/etc/group GIDs">
-          <filepath>/etc/group</filepath>
-          <pattern operation="pattern match">^[^:]*:[^:]*:([^:]+):</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <variable_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25806101" version="1" comment="count of group entries">
-          <var_ref>oval:mil.disa.stig.defs:var:25806100</var_ref>
-        </variable_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25807200" version="2">
-          <filepath>/etc/bashrc</filepath>
-          <pattern operation="pattern match">^[^#]*\s*(?i)umask\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25807500" version="1">
-          <filepath>/etc/profile</filepath>
-          <pattern operation="pattern match">^(?i)\s*umask\s+([^#\s]+)</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25808000" version="1" comment="/etc/security/faillock.conf dir">
-          <filepath>/etc/security/faillock.conf</filepath>
-          <pattern operation="pattern match">^\s*dir\s*=\s*(.*)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25808600" version="4">
-          <behaviors ignore_case="true" />
-          <filepath>/etc/sudoers</filepath>
-          <pattern operation="pattern match">^(?!#).*\s+!\s*authenticate.*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25808601" version="5">
-          <behaviors ignore_case="true" recurse_direction="down" />
-          <path>/etc/sudoers.d</path>
-          <filename operation="pattern match">^.*$</filename>
-          <pattern operation="pattern match">^(?!#).*\s+!\s*authenticate.*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25808700" version="2">
-          <behaviors ignore_case="true" />
-          <filepath>/etc/sudoers</filepath>
-          <pattern operation="pattern match">^\s*ALL\s+ALL\=\(ALL(?:|\:ALL)\)\s+ALL\s*$</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25808701" version="2">
-          <behaviors ignore_case="true" recurse_direction="down" />
-          <path>/etc/sudoers.d</path>
-          <filename operation="pattern match">^.*$</filename>
-          <pattern operation="pattern match">^\s*ALL\s+ALL\=\(ALL(?:|\:ALL)\)\s+ALL\s*$</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25808800" version="1">
-          <filepath>/etc/pam.d/su</filepath>
-          <pattern operation="pattern match">^\s*auth\s+(?:required|requisite)\s+pam_wheel\.so(?:\s|$)</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25809900" version="1">
-          <filepath>/etc/pam.d/password-auth</filepath>
-          <pattern operation="pattern match">^\s*password\s+sufficient\s+pam_unix\.so\s+[^#\n]*\brounds=(\d+)\b</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25810000" version="1">
-          <filepath>/etc/pam.d/system-auth</filepath>
-          <pattern operation="pattern match">^\s*password\s+sufficient\s+pam_unix\.so\s+[^#\n]*\brounds=(\d+)\b</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25810100" version="1">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:25810101</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:25810102</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25810101" version="1">
-          <filepath>/etc/security/pwquality.conf</filepath>
-          <pattern operation="pattern match">^\s*enforce_for_root\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25810102" version="1">
-          <behaviors recurse_direction="down" />
-          <path>/etc/security/pwquality.conf.d</path>
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">^\s*enforce_for_root\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25811800" version="1">
-          <filepath>/etc/pam.d/sudo</filepath>
-          <pattern operation="pattern match">^\s*[^#\n]*\bpam_succeed_if\b</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25812100" version="2">
-          <filepath>/etc/opensc.conf</filepath>
-          <pattern operation="pattern match">(?i)^\s*card_drivers\s*=(.*);</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25812200" version="1" comment="sssd.conf: pam_cert_auth">
-          <filepath datatype="string">/etc/sssd/sssd.conf</filepath>
-          <pattern operation="pattern match">^\s*pam_cert_auth\s*=\s*(.*)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25812201" version="1" comment="/etc/sssd/conf.d: pam_cert_auth">
-          <behaviors recurse_direction="down" />
-          <path datatype="string">/etc/sssd/conf.d</path>
-          <filename datatype="string" operation="pattern match">.+</filename>
-          <pattern operation="pattern match">^\s*pam_cert_auth\s*=\s*(.*)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25812202" version="1">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:25812200</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:25812201</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25812300" version="1" comment="sssd.conf: certificate_verification">
-          <filepath datatype="string">/etc/sssd/sssd.conf</filepath>
-          <pattern operation="pattern match">^\s*certificate_verification\s*=\s*(.*)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25812301" version="1" comment="/etc/sssd/conf.d/*.conf: certificate_verification">
-          <path datatype="string">/etc/sssd/conf.d</path>
-          <filename datatype="string" operation="pattern match">^[^.].*\.conf$</filename>
-          <pattern operation="pattern match">^\s*certificate_verification\s*=\s*(.*)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25812302" version="1" comment="sssd config: certificate_verification">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:25812300</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:25812301</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25812900" version="1">
-          <path datatype="string" operation="equals">/usr/lib/systemd/system</path>
-          <filename datatype="string" operation="equals">rescue.service</filename>
-          <pattern datatype="string" operation="pattern match">^\s*ExecStart=-\/usr\/lib\/systemd\/systemd-sulogin-shell\srescue$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25812901" version="1">
-          <path datatype="string" operation="equals">/etc/systemd/system/rescue.service.d</path>
-          <filename datatype="string" operation="pattern match">^.+\.conf$</filename>
-          <pattern datatype="string" operation="pattern match">^\s*ExecStart=-\/usr\/lib\/systemd\/systemd-sulogin-shell\srescue$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814400" version="1">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:25814403</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:25814406</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814401" version="1">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:25814404</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:25814407</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814402" version="1">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:25814405</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:25814408</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814403" version="1">
-          <filepath>/etc/rsyslog.conf</filepath>
-          <pattern operation="pattern match">^[ \t]*(?:\S+;auth\.\*|auth\.\*;\S+|auth\.\*|\S+;auth\.\*;\S+)[ \t]+\S+\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814404" version="1">
-          <filepath>/etc/rsyslog.conf</filepath>
-          <pattern operation="pattern match">^[ \t]*(?:\S+;authpriv\.\*|authpriv\.\*;\S+|authpriv\.\*|\S+;authpriv\.\*;\S+)[ \t]+\S+\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814405" version="1">
-          <filepath>/etc/rsyslog.conf</filepath>
-          <pattern operation="pattern match">^[ \t]*(?:\S+;daemon\.\*|daemon\.\*;\S+|daemon\.\*|\S+;daemon\.\*;\S+)[ \t]+\S+\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814406" version="1">
-          <path>/etc/rsyslog.d</path>
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^[ \t]*(?:\S+;auth\.\*|auth\.\*;\S+|auth\.\*|\S+;auth\.\*;\S+)[ \t]+\S+\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814407" version="1">
-          <path>/etc/rsyslog.d</path>
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^[ \t]*(?:\S+;authpriv\.\*|authpriv\.\*;\S+|authpriv\.\*|\S+;authpriv\.\*;\S+)[ \t]+\S+\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814408" version="1">
-          <path>/etc/rsyslog.d</path>
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^[ \t]*(?:\S+;daemon\.\*|daemon\.\*;\S+|daemon\.\*|\S+;daemon\.\*;\S+)[ \t]+\S+\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814500" version="1">
-          <filepath>/etc/audit/plugins.d/syslog.conf</filepath>
-          <pattern operation="pattern match">^\s*active\s*=\s*(\w+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814600" version="1" comment="ActionSendStreamDriverAuthMode">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:25814601</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:25814602</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814601" version="1" comment="rsyslog.conf: ActionSendStreamDriverAuthMode">
-          <behaviors ignore_case="true" />
-          <filepath datatype="string">/etc/rsyslog.conf</filepath>
-          <pattern operation="pattern match">^\$ActionSendStreamDriverAuthMode\s+(\S+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814602" version="1" comment="rsyslog.d/*.conf: ActionSendStreamDriverAuthMode">
-          <behaviors ignore_case="true" />
-          <path>/etc/rsyslog.d</path>
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^\$ActionSendStreamDriverAuthMode\s+(\S+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814800" version="1" comment="DefaultNetstreamDriver">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:25814801</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:25814802</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814801" version="1" comment="rsyslog.conf: DefaultNetstreamDriver">
-          <behaviors ignore_case="true" />
-          <filepath datatype="string">/etc/rsyslog.conf</filepath>
-          <pattern operation="pattern match">^\$DefaultNetstreamDriver\s+(\S+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814802" version="1" comment="rsyslog.d/*.conf: DefaultNetstreamDriver">
-          <behaviors ignore_case="true" />
-          <path>/etc/rsyslog.d</path>
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^\$DefaultNetstreamDriver\s+(\S+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814900" version="1" comment="remote TCP logging">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:25814901</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:25814902</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814901" version="1" comment="rsyslog.conf: remote TCP logging">
-          <behaviors ignore_case="true" />
-          <filepath datatype="string">/etc/rsyslog.conf</filepath>
-          <pattern operation="pattern match">^\*\.\*\s+@@(\S+)</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814902" version="1" comment="rsyslog.d/*.conf: remote TCP logging">
-          <behaviors ignore_case="true" />
-          <path>/etc/rsyslog.d</path>
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^\*\.\*\s+@@(\S+)</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <variable_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25815500" version="1">
-          <var_ref>oval:mil.disa.stig.defs:var:25815500</var_ref>
-        </variable_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25815800" version="1">
-          <filepath>/etc/audit/auditd.conf</filepath>
-          <pattern operation="pattern match">(?i)^\s*admin_space_left\s*=\s*(\S+)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25815900" version="1">
-          <filepath>/etc/audit/auditd.conf</filepath>
-          <pattern operation="pattern match">(?i)^\s*admin_space_left_action\s*=\s*(\w+)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25816000" version="1">
-          <filepath>/etc/audit/auditd.conf</filepath>
-          <pattern operation="pattern match">(?i)^\s*max_log_file_action\s*=\s*(\S+)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25816800" version="1">
-          <filepath>/etc/audit/auditd.conf</filepath>
-          <pattern operation="pattern match">(?i)^\s*freq\s*=\s*(\S+)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25817000" version="1">
-          <filepath>/etc/audit/auditd.conf</filepath>
-          <pattern operation="pattern match">(?i)^\s*write_logs\s*=\s*(\w+)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25821100" version="2">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/sbin/init\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25821200" version="3">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/sbin/poweroff\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25821300" version="2">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/sbin/reboot\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25821400" version="2">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/sbin/shutdown\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25821500" version="1" comment="32-bit umount syscall">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+umount\s+|(\s+|,)umount(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25821600" version="1" comment="32-bit umount2 syscall">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+umount2\s+|(\s+|,)umount2(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25821601" version="1" comment="64-bit umount2 syscall">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+umount2\s+|(\s+|,)umount2(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25822400" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-w\s+/var/log/faillock(\s+-p\s*([rx]*w[rx]*a[rx]*|[rx]*a[rx]*w[rx]*))?(\s+(-k\s+|-F\s+key=)[\w-]+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25822700" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^[ \t]*-f[ \t]+2\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25823000" version="1" comment="/proc/sys/crypto/fips_enabled">
-          <filepath datatype="string">/proc/sys/crypto/fips_enabled</filepath>
-          <pattern operation="pattern match">^(\d+)$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25823200" version="1" comment="/etc/ipsec.conf includes">
-          <filepath>/etc/ipsec.conf</filepath>
-          <pattern operation="pattern match">^\s*include\s+(.*)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25823201" version="1" comment="/etc/ipsec.d/*.conf includes">
-          <path>/etc/ipsec.d</path>
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^\s*include\s+(.*)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25824201" version="1" comment="named.conf includes">
-          <filepath>/etc/named.conf</filepath>
-          <pattern operation="pattern match">^\s*include\s+"(.*)"\s*;\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27017700" version="1">
-          <filepath>/etc/crypto-policies/back-ends/openssh.config</filepath>
-          <pattern operation="pattern match">^\s*(?i)Ciphers(?-i)[ \t]+(\S+)[\s]*(?:|(?:#.*))?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27017800" version="2">
-          <filepath>/etc/crypto-policies/back-ends/openssh.config</filepath>
-          <pattern operation="pattern match">^\s*MACs\s+(\S+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27143800" version="1">
-          <path>/etc</path>
-          <filename>oracle-release</filename>
-          <pattern operation="pattern match">^\s*Oracle Linux Server release 9\.(\d+)\b</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27170900" version="1">
-          <filepath>/etc/ssh/sshd_config</filepath>
-          <pattern operation="pattern match">^\s*(?i)ClientAliveCountMax(?-i)\s+"?(\d+)"?\s*(?:|(?:#.*))?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27170901" version="1">
-          <path>/etc/ssh/sshd_config.d</path>
-          <filename operation="pattern match">.+</filename>
-          <pattern operation="pattern match">^\s*(?i)ClientAliveCountMax(?-i)\s+"?(\d+)"?\s*(?:|(?:#.*))?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27170902" version="2" comment="all sshd_config and sshd_config.d/* files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:27170900</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:27170901</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27172000" version="1">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:27172001</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:27172002</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27172001" version="1">
-          <filepath>/etc/ssh/sshd_config</filepath>
-          <pattern operation="pattern match">^(?i)\s*PermitUserEnvironment\s+(\w+)$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27172002" version="1">
-          <behaviors max_depth="-1" recurse_direction="down" />
-          <path>/etc/ssh/sshd_config.d</path>
-          <filename operation="pattern match">^.+\.conf$</filename>
-          <pattern operation="pattern match">^(?i)\s*PermitUserEnvironment\s+(\w+)$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27175000" version="1">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:27175001</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:27175002</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27175001" version="1">
-          <filepath>/etc/profile</filepath>
-          <pattern operation="pattern match">^[^#]*\s*TMOUT=(\d+)\s*$</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27175002" version="1">
-          <behaviors max_depth="-1" recurse_direction="down" />
-          <path>/etc/profile.d</path>
-          <filename operation="pattern match">^.+\.sh$</filename>
-          <pattern operation="pattern match">^[^#]*\s*TMOUT=(\d+)\s*$</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27185700" version="1" comment="remote log acceptance config">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:27185701</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:27185702</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27185701" version="1" comment="rsyslog.conf: remote log acceptance config">
-          <behaviors ignore_case="true" />
-          <filepath datatype="string">/etc/rsyslog.conf</filepath>
-          <pattern operation="pattern match" var_ref="oval:mil.disa.stig.defs:var:27185700" var_check="at least one" />
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27185702" version="1" comment="rsyslog.d/*.conf: remote log acceptance config">
-          <behaviors ignore_case="true" />
-          <path>/etc/rsyslog.d</path>
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match" var_ref="oval:mil.disa.stig.defs:var:27185700" var_check="at least one" />
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27487000" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-w\s+/etc/cron\.d(\s+-p\s*([rx]*w[rx]*a[rx]*|[rx]*a[rx]*w[rx]*))?(\s+(-k\s+|-F\s+key=)\w+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27487001" version="1">
-          <filepath>/etc/audit/audit.rules</filepath>
-          <pattern operation="pattern match">^\s*-w\s+/var/spool/cron(\s+-p\s*([rx]*w[rx]*a[rx]*|[rx]*a[rx]*w[rx]*))?(\s+(-k\s+|-F\s+key=)\w+)?\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:10000500" version="1">
-          <name>gnome-shell</name>
-        </rpminfo_object>
-        <dpkginfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:10000501" version="1">
-          <name>gnome-shell</name>
-        </dpkginfo_object>
-        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23024000" version="1" comment="/sys/fs/selinux">
-          <mount_point>/sys/fs/selinux</mount_point>
-        </partition_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23024100" version="1">
-          <name>policycoreutils</name>
-        </rpminfo_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23027300" version="1">
-          <name>openssl-pkcs11</name>
-        </rpminfo_object>
-        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23028501" version="2">
-          <unit>rngd.service</unit>
-          <property>ActiveState</property>
-        </systemdunitproperty_object>
-        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23029200" version="1">
-          <mount_point>/var</mount_point>
-        </partition_object>
-        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23029300" version="1">
-          <mount_point>/var/log</mount_point>
-        </partition_object>
-        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23029400" version="1">
-          <mount_point datatype="string" var_ref="oval:mil.disa.stig.defs:var:23029400" var_check="at least one" />
-        </partition_object>
-        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23029500" version="1">
-          <mount_point>/tmp</mount_point>
-        </partition_object>
-        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23030000" version="1">
-          <mount_point>/boot</mount_point>
-        </partition_object>
-        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23030100" version="1">
-          <mount_point operation="pattern match">^/\S+$</mount_point>
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.linux:ste:23030102</filter>
-        </partition_object>
-        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23031000" version="1">
-          <unit>kdump.service</unit>
-          <property>LoadState</property>
-        </systemdunitproperty_object>
-        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23031001" version="1">
-          <unit>kdump.service</unit>
-          <property>UnitFileState</property>
-        </systemdunitproperty_object>
-        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23031002" version="1">
-          <unit>kdump.service</unit>
-          <property>ActiveState</property>
-        </systemdunitproperty_object>
-        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23031200" version="1" comment="systemd-coredump.socket LoadState">
-          <unit>systemd-coredump.socket</unit>
-          <property>LoadState</property>
-        </systemdunitproperty_object>
-        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23031201" version="1" comment="systemd-coredump.socket UnitFileState">
-          <unit>systemd-coredump.socket</unit>
-          <property>UnitFileState</property>
-        </systemdunitproperty_object>
-        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23032800" version="2">
-          <mount_point operation="pattern match">.*\/home</mount_point>
-        </partition_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23041100" version="1">
-          <name>audit</name>
-        </rpminfo_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23047700" version="1">
-          <name>rsyslog</name>
-        </rpminfo_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23047800" version="1">
-          <name>rsyslog-gnutls</name>
-        </rpminfo_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23048700" version="1">
-          <name>telnet-server</name>
-        </rpminfo_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23048900" version="1">
-          <name>sendmail</name>
-        </rpminfo_object>
-        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23050200" version="1">
-          <unit>autofs.service</unit>
-          <property>ActiveState</property>
-        </systemdunitproperty_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23050500" version="1">
-          <name>firewalld</name>
-        </rpminfo_object>
-        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23050900" version="1">
-          <mount_point>/dev/shm</mount_point>
-        </partition_object>
-        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23051000" version="1">
-          <mount_point>/dev/shm</mount_point>
-        </partition_object>
-        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23051100" version="1">
-          <mount_point>/tmp</mount_point>
-        </partition_object>
-        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23051200" version="1">
-          <mount_point>/tmp</mount_point>
-        </partition_object>
-        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23051400" version="1">
-          <mount_point>/var/log</mount_point>
-        </partition_object>
-        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23051500" version="1">
-          <mount_point>/var/log</mount_point>
-        </partition_object>
-        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23051600" version="1">
-          <mount_point>/var/log</mount_point>
-        </partition_object>
-        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23051700" version="1">
-          <mount_point>/var/log/audit</mount_point>
-        </partition_object>
-        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23051900" version="1">
-          <mount_point>/var/log/audit</mount_point>
-        </partition_object>
-        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23052000" version="1">
-          <mount_point>/var/tmp</mount_point>
-        </partition_object>
-        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23052100" version="1">
-          <mount_point>/var/tmp</mount_point>
-        </partition_object>
-        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23052200" version="1">
-          <mount_point>/var/tmp</mount_point>
-        </partition_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23053300" version="1">
-          <name>tftp-server</name>
-        </rpminfo_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23055000" version="1">
-          <name>postfix</name>
-        </rpminfo_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23055300" version="3">
-          <name>xorg-x11-server-common</name>
-        </rpminfo_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23055900" version="1">
-          <name>gssproxy</name>
-        </rpminfo_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23056000" version="1">
-          <name>iprutils</name>
-        </rpminfo_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23056100" version="1">
-          <name>tuned</name>
-        </rpminfo_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:24452700" version="1">
-          <name>rng-tools</name>
-        </rpminfo_object>
-        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:24452900" version="1" comment="/var/tmp">
-          <mount_point>/var/tmp</mount_point>
-        </partition_object>
-        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:24453000" version="1">
-          <mount_point>/boot/efi</mount_point>
-        </partition_object>
-        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:24454500" version="1" comment="fapolicyd.service ActiveState">
-          <unit>fapolicyd.service</unit>
-          <property>ActiveState</property>
-        </systemdunitproperty_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:24454900" version="1">
-          <name>openssh-server</name>
-        </rpminfo_object>
-        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25778300" version="1">
-          <unit>systemd-journald.service</unit>
-          <property>ActiveState</property>
-        </systemdunitproperty_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25782600" version="1">
-          <name operation="pattern match">ftp</name>
-        </rpminfo_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25782800" version="1">
-          <name>nfs-utils</name>
-        </rpminfo_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25783600" version="1">
-          <name>quagga</name>
-        </rpminfo_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25783900" version="1">
-          <name>gnutls-utils</name>
-        </rpminfo_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25784000" version="1">
-          <name>nss-tools</name>
-        </rpminfo_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25784200" version="1">
-          <name>s-nail</name>
-        </rpminfo_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25784900" version="1">
-          <name>autofs</name>
-        </rpminfo_object>
-        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25785200" version="2" comment="/home">
-          <mount_point operation="pattern match">.*\/home</mount_point>
-        </partition_object>
-        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25786000" version="1" comment="/boot">
-          <mount_point>/boot</mount_point>
-        </partition_object>
-        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25793600" version="1" comment="firewalld.service ActiveState">
-          <unit>firewalld.service</unit>
-          <property>ActiveState</property>
-        </systemdunitproperty_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25794300" version="1">
-          <name>chrony</name>
-        </rpminfo_object>
-        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25794400" version="1">
-          <unit>chronyd.service</unit>
-          <property>ActiveState</property>
-        </systemdunitproperty_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25795400" version="1">
-          <name>libreswan</name>
-        </rpminfo_object>
-        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25797900" version="1" comment="sshd.service ActiveState">
-          <unit>sshd.service</unit>
-          <property>ActiveState</property>
-        </systemdunitproperty_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25798000" version="1">
-          <name>openssh-clients</name>
-        </rpminfo_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25803500" version="1">
-          <name>usbguard</name>
-        </rpminfo_object>
-        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25803600" version="1" comment="usbguard.service ActiveState">
-          <unit>usbguard.service</unit>
-          <property>ActiveState</property>
-        </systemdunitproperty_object>
-        <selinuxsecuritycontext_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25808000" version="1" comment="configured faillock directory selinux context">
-          <path var_ref="oval:mil.disa.stig.defs:var:25808000" />
-          <filename xsi:nil="true" />
-        </selinuxsecuritycontext_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25808200" version="1">
-          <name>policycoreutils-python-utils</name>
-        </rpminfo_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25808300" version="1">
-          <name>sudo</name>
-        </rpminfo_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25808900" version="1">
-          <name>fapolicyd</name>
-        </rpminfo_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25812400" version="1">
-          <name>pcsc-lite</name>
-        </rpminfo_object>
-        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25812500" version="2">
-          <unit>pcscd.socket</unit>
-          <property>ActiveState</property>
-        </systemdunitproperty_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25812600" version="1">
-          <name>opensc</name>
-        </rpminfo_object>
-        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25814200" version="2">
-          <unit>rsyslog.service</unit>
-          <property>ActiveState</property>
-        </systemdunitproperty_object>
-        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25815200" version="1">
-          <unit>auditd.service</unit>
-          <property>ActiveState</property>
-        </systemdunitproperty_object>
-        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25815201" version="1">
-          <unit>auditd.service</unit>
-          <property>SubState</property>
-        </systemdunitproperty_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25817500" version="1">
-          <name>audispd-plugins</name>
-        </rpminfo_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25823400" version="1">
-          <name>crypto-policies</name>
-        </rpminfo_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25824200" version="1" comment="bind">
-          <name>bind</name>
-        </rpminfo_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:27149300" version="1">
-          <name>sssd</name>
-        </rpminfo_object>
-        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:27149400" version="1">
-          <unit>sssd.service</unit>
-          <property>ActiveState</property>
-        </systemdunitproperty_object>
-        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:27149401" version="1">
-          <unit>sssd.service</unit>
-          <property>UnitFileState</property>
-        </systemdunitproperty_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:27150500" version="2">
-          <name operation="pattern match">oracle-linux-manager-client.*</name>
-        </rpminfo_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:28513400" version="1">
-          <name>aide</name>
-        </rpminfo_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:2582320000" version="1">
-          <name>libreswan</name>
-        </rpminfo_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:10000602" version="2">
-          <path datatype="string">/sys/firmware/efi</path>
-          <filename xsi:nil="true" />
-        </file_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:10001200" version="1">
-          <name>net.ipv6.conf.all.disable_ipv6</name>
-        </sysctl_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:20000011" version="1" comment="Audit log file location">
-          <filepath var_ref="oval:mil.disa.stig.defs:var:20000004" />
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:20000013" version="1">
-          <filepath>/etc/passwd</filepath>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:20000014" version="1">
-          <filepath>/etc/group-</filepath>
-        </file_object>
-        <password_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:20000016" version="1" comment="Users with an username">
-          <username datatype="string" operation="pattern match">[\w]+</username>
-        </password_object>
-        <password_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:20000017" version="1" comment="only non-system users (uid&gt;999) home-dirs">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="COMPLEMENT">
-            <object_reference>oval:mil.disa.stig.unix:obj:20000016</object_reference>
-            <filter>oval:mil.disa.stig.unix:ste:20000017</filter>
-          </set>
-        </password_object>
-        <password_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:20000018" version="1" comment="only root users (uid=0) home-dirs">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="COMPLEMENT">
-            <object_reference>oval:mil.disa.stig.unix:obj:20000016</object_reference>
-            <filter>oval:mil.disa.stig.unix:ste:20000018</filter>
-          </set>
-        </password_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:20461100" version="1">
-          <name>net.ipv4.conf.default.rp_filter</name>
-        </sysctl_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23024500" version="1">
-          <filepath>/var/log/messages</filepath>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23024600" version="1">
-          <filepath>/var/log/messages</filepath>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23024700" version="1">
-          <filepath>/var/log/messages</filepath>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23024800" version="1">
-          <path>/var/log</path>
-          <filename xsi:nil="true" />
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23024900" version="1">
-          <path>/var/log</path>
-          <filename xsi:nil="true" />
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23025000" version="1" comment="/var/log directory">
-          <path>/var/log</path>
-          <filename xsi:nil="true" />
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23026100" version="4">
-          <behaviors recurse="directories" recurse_direction="down" />
-          <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
-          <filename operation="pattern match">\.so(\.\d+)*$</filename>
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.stig.unix:ste:20000005</filter>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23026200" version="2">
-          <behaviors recurse_direction="down" />
-          <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
-          <filename operation="pattern match">\.so(\.\d+)*$</filename>
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.stig.unix:ste:20000006</filter>
-        </file_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23026600" version="1">
-          <name>kernel.kexec_load_disabled</name>
-        </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23026700" version="1">
-          <name>fs.protected_symlinks</name>
-        </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23026800" version="1">
-          <name>fs.protected_hardlinks</name>
-        </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23026900" version="1">
-          <name>kernel.dmesg_restrict</name>
-        </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23027000" version="1">
-          <name>kernel.perf_event_paranoid</name>
-        </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23028000" version="1">
-          <name>kernel.randomize_va_space</name>
-        </sysctl_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23028300" version="1">
-          <behaviors max_depth="-1" recurse="directories" recurse_direction="down" recurse_file_system="local" />
-          <path>/</path>
-          <filename>shosts.equiv</filename>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23028400" version="1">
-          <behaviors max_depth="-1" recurse="directories" recurse_direction="down" recurse_file_system="local" />
-          <path>/</path>
-          <filename>.shosts</filename>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23028600" version="1">
-          <behaviors max_depth="-1" recurse_direction="down" />
-          <path>/etc/ssh</path>
-          <filename operation="pattern match">^.*\.pub$</filename>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23028700" version="1" comment="SSH private key files">
-          <path>/etc/ssh</path>
-          <filename operation="pattern match">^ssh_host_.*_key$</filename>
-        </file_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23031100" version="1">
-          <name>kernel.core_pattern</name>
-        </sysctl_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23032500" version="3" comment="local initialization files of non-system users.">
-          <behaviors max_depth="1" recurse="symlinks" recurse_direction="down" />
-          <path var_ref="oval:mil.disa.stig.defs:var:23032500" var_check="at least one" />
-          <filename operation="pattern match">^\.[^\s\.]+</filename>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23032501" version="3" comment="local initialization files of root user.">
-          <behaviors max_depth="1" recurse="symlinks" recurse_direction="down" />
-          <path var_ref="oval:mil.disa.stig.defs:var:23032501" var_check="at least one" />
-          <filename operation="pattern match">^\.[^\s\.]+</filename>
-        </file_object>
-        <password_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23032502" version="1" comment="only non-system users (uid&gt;999) home-dirs excluding root directory">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="COMPLEMENT">
-            <object_reference>oval:mil.disa.stig.unix:obj:20000016</object_reference>
-            <filter>oval:mil.disa.stig.unix:ste:20000017</filter>
-            <filter>oval:mil.disa.stig.unix:ste:23032500</filter>
-          </set>
-        </password_object>
-        <password_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23032503" version="1" comment="only root users (uid=0) home-dirs excluding root directory">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="COMPLEMENT">
-            <object_reference>oval:mil.disa.stig.unix:obj:20000016</object_reference>
-            <filter>oval:mil.disa.stig.unix:ste:20000018</filter>
-            <filter>oval:mil.disa.stig.unix:ste:23032500</filter>
-          </set>
-        </password_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23035100" version="2" comment="dconf database directories">
-          <behaviors max_depth="1" recurse_direction="down" />
-          <path>/etc/dconf/db</path>
-          <filename xsi:nil="true" />
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:23035100</filter>
-        </file_object>
-        <password_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23036401" version="2" comment="Users with a password age of zero minus system users">
-          <username datatype="string" operation="equals" var_ref="oval:mil.disa.stig.defs:var:23036400" var_check="at least one" />
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.stig.unix:ste:23036400</filter>
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.stig.unix:ste:23036401</filter>
-        </password_object>
-        <shadow_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23036700" version="3" comment="/etc/shadow max password ages for non-system users">
-          <username datatype="string" operation="pattern match">.+</username>
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:23036702</filter>
-        </shadow_object>
-        <password_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23036701" version="3" comment="interactive non-anonymous users">
-          <username datatype="string" operation="pattern match">.*</username>
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:23036704</filter>
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:23036703</filter>
-        </password_object>
-        <shadow_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23036702" version="1" comment="/etc/shadow max password age for root">
-          <username datatype="string">root</username>
-        </shadow_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23039700" version="2" comment="Audit log file location">
-          <filepath var_ref="oval:mil.disa.stig.defs:var:23039700" />
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23040100" version="1" comment="Audit log directory">
-          <path var_ref="oval:mil.disa.stig.defs:var:23029400" />
-          <filename xsi:nil="true" />
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23047100" version="1">
-          <filepath>/etc/audit/auditd.conf</filepath>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23047101" version="1">
-          <path>/etc/audit/rules.d</path>
-          <filename operation="pattern match">.rules$</filename>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23047200" version="1" comment="audit tools">
-          <filepath datatype="string" var_ref="oval:mil.disa.stig.defs:var:23047200" var_check="at least one" />
-        </file_object>
-        <symlink_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23052900" version="1">
-          <filepath>/etc/systemd/system/ctrl-alt-del.target</filepath>
-        </symlink_object>
-        <symlink_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23053200" version="1" comment="debug-shell.service file">
-          <filepath>/etc/systemd/system/debug-shell.service</filepath>
-        </symlink_object>
-        <password_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23053400" version="1">
-          <username operation="not equal">root</username>
-        </password_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23053500" version="1">
-          <name>net.ipv6.conf.default.accept_redirects</name>
-        </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23053600" version="1">
-          <name>net.ipv4.conf.all.send_redirects</name>
-        </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23053700" version="1">
-          <name>net.ipv4.icmp_echo_ignore_broadcasts</name>
-        </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23053800" version="1">
-          <name>net.ipv6.conf.all.accept_source_route</name>
-        </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23053904" version="1">
-          <name>net.ipv6.conf.default.accept_source_route</name>
-        </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23054000" version="1">
-          <name>net.ipv6.conf.all.forwarding</name>
-        </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23054300" version="2">
-          <name>net.ipv4.conf.default.send_redirects</name>
-        </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23054400" version="1">
-          <name>net.ipv6.conf.all.accept_redirects</name>
-        </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23054500" version="1">
-          <name>kernel.unprivileged_bpf_disabled</name>
-        </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23054600" version="1">
-          <name>kernel.yama.ptrace_scope</name>
-        </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23054700" version="1">
-          <name>kernel.kptr_restrict</name>
-        </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23054800" version="1">
-          <name>user.max_user_namespaces</name>
-        </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23054900" version="1">
-          <name>net.ipv4.conf.all.rp_filter</name>
-        </sysctl_object>
-        <interface_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23055400" version="1" comment="All Interfaces">
-          <name operation="pattern match">.*</name>
-        </interface_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23764200" version="1" comment="/etc/sudoers.d config files, excluding files ending with ~ or containing .">
-          <path>/etc/sudoers.d</path>
-          <filename operation="pattern match">^[^.]*[^.~]$</filename>
-        </file_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23833300" version="1">
-          <name>net.ipv4.tcp_syncookies</name>
-        </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:24455000" version="1">
-          <name>net.ipv4.conf.default.accept_redirects</name>
-        </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:24455200" version="1">
-          <name>net.ipv4.conf.default.accept_source_route</name>
-        </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:24455300" version="1">
-          <name>net.ipv4.conf.all.accept_redirects</name>
-        </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:24455400" version="1">
-          <name>net.core.bpf_jit_harden</name>
-        </sysctl_object>
-        <symlink_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25171800" version="1">
-          <filepath>/etc/systemd/system/default.target</filepath>
-        </symlink_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25312000" version="1">
-          <name>net.ipv6.conf.default.accept_ra</name>
-        </sysctl_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25779000" version="1">
-          <filepath>/boot/grub2/grub.cfg</filepath>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25779100" version="1">
-          <filepath>/boot/grub2/grub.cfg</filepath>
-        </file_object>
-        <password_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25789000" version="5" comment="Local interactive users without nologin">
-          <username operation="pattern match">.*</username>
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="exclude">oval:mil.disa.stig.unix:ste:25789000</filter>
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="exclude">oval:mil.disa.stig.unix:ste:25789002</filter>
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="exclude">oval:mil.disa.stig.unix:ste:25789003</filter>
-        </password_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25789001" version="1" comment="home directories of local interactive users without nologin">
-          <path var_ref="oval:mil.disa.stig.defs:var:25789000" var_check="at least one" />
-          <filename xsi:nil="true" />
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25789100" version="1">
-          <filepath>/etc/group</filepath>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25789200" version="1">
-          <filepath>/etc/group-</filepath>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25789300" version="1">
-          <filepath>/etc/gshadow</filepath>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25789400" version="1">
-          <filepath>/etc/gshadow-</filepath>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25789600" version="1">
-          <filepath>/etc/passwd-</filepath>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25789700" version="1">
-          <filepath>/etc/shadow-</filepath>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25789800" version="1">
-          <filepath>/etc/group</filepath>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25789900" version="1">
-          <filepath>/etc/group</filepath>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25790000" version="1">
-          <filepath>/etc/group-</filepath>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25790200" version="1">
-          <filepath>/etc/gshadow</filepath>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25790300" version="1">
-          <filepath>/etc/gshadow</filepath>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25790400" version="2">
-          <path>/etc</path>
-          <filename>gshadow-</filename>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25790500" version="1">
-          <filepath>/etc/gshadow-</filepath>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25790800" version="1">
-          <filepath>/etc/passwd-</filepath>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25791000" version="2" comment="/etc/shadow file">
-          <path>/etc</path>
-          <filename>shadow</filename>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25791100" version="1">
-          <filepath>/etc/shadow</filepath>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25791200" version="2" comment="/etc/shadow- file">
-          <path>/etc</path>
-          <filename>shadow-</filename>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25792600" version="1" comment="/etc/cron* files">
-          <path>/etc</path>
-          <filename operation="pattern match">^cron.*$</filename>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25792601" version="1" comment="/etc/cron* directories">
-          <path operation="pattern match">^/etc/cron.*$</path>
-          <filename xsi:nil="true" />
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25792700" version="4">
-          <behaviors max_depth="-1" recurse_direction="down" />
-          <path>/etc</path>
-          <filename operation="pattern match">^cron.*</filename>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25793300" version="1">
-          <filepath>/etc/crontab</filepath>
-        </file_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25795900" version="1">
-          <name>net.ipv4.conf.all.accept_source_route</name>
-        </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25796000" version="1">
-          <name>net.ipv4.conf.all.log_martians</name>
-        </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25796100" version="1">
-          <name>net.ipv4.conf.default.log_martians</name>
-        </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25796700" version="1">
-          <name>net.ipv4.icmp_ignore_bogus_error_responses</name>
-        </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25797000" version="1">
-          <name>net.ipv4.conf.all.forwarding</name>
-        </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25797100" version="1">
-          <name>net.ipv6.conf.all.accept_ra</name>
-        </sysctl_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25798800" version="1" comment="/etc/ssh/sshd_config.d/50-redhat.conf">
-          <filepath datatype="string">/etc/ssh/sshd_config.d/50-redhat.conf</filepath>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25799900" version="1">
-          <filepath>/etc/ssh/sshd_config</filepath>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25799901" version="2">
-          <behaviors recurse="directories" recurse_direction="down" />
-          <path>/etc/ssh/sshd_config.d</path>
-          <filename xsi:nil="true" />
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25799902" version="2">
-          <behaviors recurse="directories" recurse_direction="down" />
-          <path>/etc/ssh/sshd_config.d</path>
-          <filename operation="pattern match">.*</filename>
-        </file_object>
-        <password_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25804500" version="1" comment="Interactive Users">
-          <username operation="pattern match">.*</username>
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:25804500</filter>
-        </password_object>
-        <password_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25804600" version="1">
-          <username operation="pattern match">.+</username>
-        </password_object>
-        <password_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25804601" version="1" comment="only system accounts">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.unix:obj:25804600</object_reference>
-            <filter action="exclude">oval:mil.disa.stig.unix:ste:25804601</filter>
-            <filter action="exclude">oval:mil.disa.stig.unix:ste:25804602</filter>
-          </set>
-        </password_object>
-        <password_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25804800" version="1" comment="All password entries">
-          <username operation="pattern match">.*</username>
-        </password_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25817200" version="1" comment="/etc/audit/auditd.conf">
-          <filepath>/etc/audit/auditd.conf</filepath>
-        </file_object>
-        <symlink_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25823604" version="1" comment="krb5">
-          <filepath>/etc/crypto-policies/back-ends/krb5.config</filepath>
-        </symlink_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048700" version="2">
-          <behaviors recurse_direction="down" />
-          <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
-          <filename operation="pattern match">\.so</filename>
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:26048700</filter>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048701" version="2">
-          <behaviors recurse_direction="down" />
-          <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
-          <filename operation="pattern match">\.so</filename>
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:26048701</filter>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048702" version="2">
-          <behaviors recurse_direction="down" />
-          <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
-          <filename operation="pattern match">\.so</filename>
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:26048702</filter>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048703" version="2">
-          <behaviors recurse_direction="down" />
-          <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
-          <filename operation="pattern match">\.so</filename>
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:26048703</filter>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048704" version="2">
-          <behaviors recurse_direction="down" />
-          <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
-          <filename operation="pattern match">\.so</filename>
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:26048704</filter>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:27176500" version="1" comment="local initialization files of non-system users.">
-          <behaviors max_depth="1" recurse="symlinks" recurse_direction="down" />
-          <path var_ref="oval:mil.disa.stig.defs:var:27176500" var_check="at least one" />
-          <filename operation="pattern match">^\.[^\s\.]+</filename>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:27176501" version="1" comment="local initialization files of root user.">
-          <behaviors max_depth="1" recurse="symlinks" recurse_direction="down" />
-          <path var_ref="oval:mil.disa.stig.defs:var:27176501" var_check="at least one" />
-          <filename operation="pattern match">^\.[^\s\.]+</filename>
-        </file_object>
-        <password_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:27176502" version="1" comment="only non-system users (uid&gt;999) home-dirs excluding root directory">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="COMPLEMENT">
-            <object_reference>oval:mil.disa.stig.unix:obj:20000016</object_reference>
-            <filter>oval:mil.disa.stig.unix:ste:20000017</filter>
-            <filter>oval:mil.disa.stig.unix:ste:27176500</filter>
-          </set>
-        </password_object>
-        <password_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:27176503" version="1" comment="only root users (uid=0) home-dirs excluding root directory">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="COMPLEMENT">
-            <object_reference>oval:mil.disa.stig.unix:obj:20000016</object_reference>
-            <filter>oval:mil.disa.stig.unix:ste:20000018</filter>
-            <filter>oval:mil.disa.stig.unix:ste:27176500</filter>
-          </set>
-        </password_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:27177300" version="2" comment="All files in system command directories, less files group-owned by root or a system account">
-          <behaviors recurse_direction="down" />
-          <path var_ref="oval:mil.disa.stig.defs:var:20000019" var_check="at least one" />
-          <filename operation="pattern match">.*</filename>
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.stig.unix:ste:20000023</filter>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:27177400" version="2" comment="All files in system command directories, less files owned by root">
-          <behaviors recurse_direction="down" />
-          <path var_ref="oval:mil.disa.stig.defs:var:20000019" var_check="at least one" />
-          <filename operation="pattern match">.*</filename>
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.stig.unix:ste:20000005</filter>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:27177500" version="1" comment="Group-writable files in system command directories">
-          <behaviors recurse_direction="down" />
-          <path datatype="string" var_ref="oval:mil.disa.stig.defs:var:20000019" var_check="at least one" />
-          <filename datatype="string" operation="pattern match">.*</filename>
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.stig.unix:ste:20000024</filter>
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.stig.unix:ste:20000002</filter>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:27177501" version="1" comment="World-writable files in system command directories">
-          <behaviors recurse_direction="down" />
-          <path datatype="string" var_ref="oval:mil.disa.stig.defs:var:20000019" var_check="at least one" />
-          <filename datatype="string" operation="pattern match">.*</filename>
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.stig.unix:ste:20000025</filter>
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.stig.unix:ste:20000002</filter>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:27178600" version="1" comment="All system-wide library directories">
-          <behaviors recurse_direction="down" />
-          <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
-          <filename xsi:nil="true" />
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000021</filter>
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="exclude">oval:mil.disa.stig.unix:ste:20000006</filter>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:27178700" version="1" comment="All system-wide library directories">
-          <behaviors recurse_direction="down" />
-          <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
-          <filename xsi:nil="true" />
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000021</filter>
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="exclude">oval:mil.disa.stig.unix:ste:20000005</filter>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:27178800" version="1" comment="All group-writable system-wide library directories">
-          <behaviors recurse_direction="down" />
-          <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
-          <filename xsi:nil="true" />
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000021</filter>
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="exclude">oval:mil.disa.stig.unix:ste:20000024</filter>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:27178801" version="1" comment="All world-writable system-wide library directories">
-          <behaviors recurse_direction="down" />
-          <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
-          <filename xsi:nil="true" />
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000021</filter>
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="exclude">oval:mil.disa.stig.unix:ste:20000025</filter>
-        </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:28513401" version="1">
-          <filepath>/var/lib/aide/aide.db.gz</filepath>
-        </file_object>
-      </objects>
-      <states>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:2303001" version="1">
-          <subexpression operation="pattern match">(?:^nosuid$|^nosuid,|,nosuid$|,nosuid,)</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:2445301" version="1">
-          <subexpression operation="pattern match">(?:^nosuid$|^nosuid,|,nosuid$|,nosuid,)</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000000" version="1">
-          <subexpression>false</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000001" version="1">
-          <subexpression>true</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000002" version="1">
-          <subexpression datatype="int" operation="equals">0</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000003" version="1">
-          <subexpression datatype="int" operation="equals">1</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000004" version="1">
-          <subexpression datatype="int" operation="equals">2</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000014" version="1">
-          <subexpression datatype="string" operation="equals">none</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000015" version="1">
-          <subexpression datatype="int" operation="greater than">0</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000016" version="1">
-          <subexpression datatype="string" operation="pattern match">^(yes|"yes")$</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000017" version="1">
-          <subexpression datatype="string" operation="pattern match">^(no|"no")$</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000018" version="1">
-          <subexpression datatype="string" operation="pattern match">^[123]$</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000019" version="2">
-          <subexpression datatype="int" operation="greater than or equal">0</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000020" version="2">
-          <subexpression datatype="int" operation="less than">0</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000021" version="2">
-          <subexpression datatype="string" operation="pattern match">^(True|1|yes)$</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000022" version="1">
-          <subexpression datatype="string" operation="pattern match">(?i)^yes$</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000023" version="1">
-          <subexpression>yes</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000024" version="1">
-          <subexpression datatype="int" operation="not equal">0</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000025" version="1">
-          <subexpression datatype="string" operation="equals">077</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000027" version="2">
-          <subexpression datatype="string" operation="pattern match">(?i)(?:^|\n)[^#]*\btype\s*=\s*"omfwd"</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20441700" version="2" comment="defaults/crypt_style">
-          <subexpression datatype="string" operation="pattern match">\n\s*crypt_style\s*=\s*(\S*)\s*(\n|$)</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20441701" version="3" comment="sha512">
-          <subexpression datatype="string">sha512</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23023100" version="1">
-          <subexpression datatype="string" operation="equals">SHA512</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23023200" version="1" comment="Exclude inactive/locked hashes (with leading '!' or '*').">
-          <subexpression datatype="string" operation="pattern match">^[!*]</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23023201" version="2" comment="Exclude hashes with leading '$6$'.">
-          <subexpression datatype="string" operation="pattern match">^[$][6][$]</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23023300" version="2">
-          <subexpression datatype="int" operation="greater than or equal">100000</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23024000" version="1" comment="/sys/fs/selinux/enforce != 0">
-          <subexpression datatype="int" operation="not equal">0</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23024001" version="1" comment="/etc/selinux/config:SELINUX=enforcing">
-          <subexpression datatype="string">enforcing</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23026400" version="1">
-          <text datatype="string" operation="pattern match">\n\s*gpgcheck\s*=\s*(True|1|yes)\s*(\n|$)</text>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23026401" version="1">
-          <text datatype="string" operation="pattern match">\n\s*gpgcheck\s*=\s*(False|0|no)\s*(\n|$)</text>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23026801" version="1">
-          <subexpression datatype="int" operation="equals">1</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23027800" version="1">
-          <subexpression operation="pattern match">(^|\s)vsyscall=none(\s|$)</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23028200" version="1">
-          <subexpression>targeted</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23030100" version="1">
-          <subexpression operation="pattern match">(?:^nodev$|^nodev,|,nodev$|,nodev,)</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23030600" version="1">
-          <subexpression operation="pattern match">^.*noexec.*$</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23030800" version="1">
-          <subexpression operation="pattern match">(^|,)nosuid(,|$)</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23031100" version="1">
-          <subexpression datatype="string" operation="equals">|/bin/false</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23031300" version="1">
-          <subexpression datatype="int">0</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23031500" version="1">
-          <subexpression>0</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23031600" version="2" comment="hosts entry contains dns">
-          <subexpression operation="pattern match">(^|\s)dns(\s|$)</subexpression>
-        </textfilecontent54_state>
-        <variable_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23031601" version="2" comment="/etc/resolv.conf is configured with at least two name servers">
-          <value datatype="int" operation="greater than or equal">2</value>
-        </variable_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23033300" version="1">
-          <subexpression datatype="int" operation="less than or equal">3</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23033500" version="1">
-          <subexpression datatype="int" operation="less than or equal">900</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23033900" version="1">
-          <subexpression>/var/log/faillock</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23034600" version="1">
-          <subexpression datatype="int" operation="less than or equal">10</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23035100" version="1">
-          <text datatype="string" operation="pattern match">\nremoval-action='lock-screen'\s*(\n|$)</text>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23036000" version="1">
-          <subexpression datatype="int" operation="less than or equal">4</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23036100" version="1">
-          <subexpression datatype="int" operation="less than or equal">3</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23036200" version="1">
-          <subexpression datatype="int" operation="greater than or equal">4</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23036300" version="1">
-          <subexpression datatype="int" operation="greater than or equal">8</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23036500" version="1">
-          <subexpression datatype="int" operation="greater than or equal">1</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23036900" version="1">
-          <subexpression datatype="int" operation="greater than or equal">15</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23037300" version="1">
-          <subexpression datatype="int" operation="less than or equal">35</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23037800" version="1">
-          <subexpression datatype="int" operation="greater than or equal">4</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23038300" version="1">
-          <subexpression datatype="string" operation="equals">077</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23038500" version="1">
-          <subexpression datatype="string" operation="equals">077</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23038800" version="1">
-          <subexpression operation="pattern match">(?i)^root$</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23039000" version="1">
-          <subexpression operation="pattern match">(?i)^syslog$</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23039001" version="1">
-          <subexpression operation="pattern match">(?i)^single$</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23039002" version="1">
-          <subexpression operation="pattern match">(?i)^halt$</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23039200" version="1">
-          <subexpression operation="pattern match">(?i)^syslog$</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23039201" version="1">
-          <subexpression operation="pattern match">(?i)^single$</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23039202" version="1">
-          <subexpression operation="pattern match">(?i)^halt$</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23039400" version="1">
-          <subexpression operation="pattern match">(?i)^hostname$</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23039401" version="1">
-          <subexpression operation="pattern match">(?i)^fqd$</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23039402" version="1">
-          <subexpression operation="pattern match">(?i)^numeric$</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23039500" version="1">
-          <subexpression operation="pattern match">(?i)^enriched$</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23046800" version="2">
-          <subexpression operation="pattern match">(^|\s)audit=1(\s|$)</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23046900" version="2">
-          <subexpression datatype="int" operation="greater than or equal">8192</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23047000" version="1">
-          <subexpression>LinuxAudit</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23048300" version="2">
-          <subexpression datatype="int" operation="greater than or equal">25</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23048301" version="1">
-          <subexpression datatype="int" operation="less than">100</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23049100" version="1">
-          <subexpression operation="pattern match">(^|\s)pti=on(\s|$)</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23050900" version="1">
-          <subexpression operation="pattern match">(?:^nosuid$|^nosuid,|,nosuid$|,nosuid,)</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23051001" version="1">
-          <subexpression operation="pattern match">(?:^noexec$|^noexec,|,noexec$|,noexec,)</subexpression>
-        </textfilecontent54_state>
-        <variable_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23051100" version="1">
-          <value entity_check="at least one">nodev</value>
-        </variable_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23051200" version="1">
-          <subexpression operation="pattern match">^.*nosuid.*$</subexpression>
-        </textfilecontent54_state>
-        <variable_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23051400" version="1">
-          <value entity_check="at least one">nodev</value>
-        </variable_state>
-        <variable_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23051500" version="1">
-          <value entity_check="at least one">nosuid</value>
-        </variable_state>
-        <variable_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23051600" version="1">
-          <value entity_check="at least one">noexec</value>
-        </variable_state>
-        <variable_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23051700" version="1">
-          <value entity_check="at least one">nodev</value>
-        </variable_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23051900" version="1">
-          <subexpression operation="pattern match">^.*noexec.*$</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23052000" version="1">
-          <subexpression operation="pattern match">(?:^nodev$|^nodev,|,nodev$|,nodev,)</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23052101" version="1">
-          <subexpression operation="pattern match">(?:^nosuid$|^nosuid,|,nosuid$|,nosuid,)</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23052500" version="1">
-          <subexpression>nftables</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23052700" version="1">
-          <text datatype="string" operation="pattern match">^(?i)\s*RekeyLimit\s+[1-9][0-9]*[kmg]?\s+([1-9][0-9]*[smhdw]?)+\s*$</text>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23054701" version="2">
-          <subexpression datatype="int">1</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23481500" version="1" comment="LogLevel value is set to VERBOSE">
-          <subexpression datatype="string" operation="pattern match">^VERBOSE$|^"VERBOSE"$</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23764200" version="1">
-          <subexpression datatype="string" operation="equals">/etc/sudoers.d</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:24452300" version="1" comment="emergency.service ExecStart">
-          <subexpression>-/usr/lib/systemd/systemd-sulogin-shell emergency</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:24454300" version="1">
-          <subexpression operation="pattern match">(?i)^email$</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25171300" version="1">
-          <subexpression datatype="string" operation="pattern match">^pam_pwquality.so(\s|$)</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25294300" version="1">
-          <subexpression datatype="string" operation="pattern match">^(delayed|"delayed")$</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25778700" version="1" comment="GRUB superuser name">
-          <subexpression datatype="string" operation="pattern match">^\S+$</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25778701" version="2" comment="GRUB superuser password">
-          <subexpression datatype="string" operation="pattern match">^grub\.pbkdf2\.sha512\.</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25778800" version="1">
-          <subexpression operation="pattern match">(^|\s)systemd\.confirm_spawn(\s|$)</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25779300" version="1">
-          <subexpression operation="pattern match">(^|\s)page_poison=1(\s|$)</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25782000" version="1" comment="/etc/dnf/dnf.conf gpgcheck=1">
-          <subexpression datatype="string" operation="equals">1</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25785300" version="1" comment="sec= option">
-          <subexpression datatype="string" operation="pattern match">(^|,)sec=[^,]+(,|$)</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25785301" version="3" comment="sec=krb5p:krb5i:krb5 options">
-          <subexpression datatype="string" operation="pattern match">(^|,)sec=([^:,]*:)?krb5[pi]?(:|,|$)</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25785302" version="3" comment="sec=sys option">
-          <subexpression datatype="string" operation="pattern match">(^|,)sec=([^:,]*:)?sys(:|,|$)</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25785400" version="1" comment="nodev option">
-          <subexpression datatype="string" operation="pattern match">(^|,)nodev(,|$)</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25794900" version="1">
-          <subexpression datatype="string" operation="pattern match">\ndns=</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25794901" version="1">
-          <subexpression datatype="string" operation="equals">none</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25794902" version="1">
-          <subexpression datatype="string" operation="equals">default</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25794903" version="1">
-          <subexpression datatype="string" operation="equals">systemd-resolved</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25798100" version="3" comment="banner value is set to /etc/issue">
-          <subexpression datatype="string" operation="pattern match">^\/.+$</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25798800" version="1">
-          <subexpression datatype="string" operation="equals">/etc/crypto-policies/back-ends/opensshserver.config</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25798801" version="1">
-          <subexpression datatype="string" operation="equals">/etc/ssh/sshd_config.d/*.conf</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25798900" version="2">
-          <subexpression datatype="string">aes256-gcm@openssh.com,aes256-ctr,aes128-gcm@openssh.com,aes128-ctr</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25798901" version="2">
-          <subexpression datatype="string">"aes256-gcm@openssh.com,aes256-ctr,aes128-gcm@openssh.com,aes128-ctr"</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25799100" version="2">
-          <subexpression>hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25799101" version="1">
-          <subexpression>"hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512"</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25799600" version="1">
-          <subexpression datatype="int" operation="less than or equal">600</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25799601" version="1">
-          <subexpression datatype="int" operation="greater than">0</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25802900" version="3">
-          <text datatype="string" operation="pattern match">\ndisable-restart-buttons=(true|'true')\s*(\n|$)</text>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25804100" version="1">
-          <subexpression datatype="int" operation="less than or equal">60</subexpression>
-        </textfilecontent54_state>
-        <variable_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25804500" version="1" comment="count of passwd UIDs">
-          <value datatype="int" var_ref="oval:mil.disa.stig.defs:var:25804501" />
-        </variable_state>
-        <variable_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25806100" version="1" comment="count of unique GIDs">
-          <value datatype="int" var_ref="oval:mil.disa.stig.defs:var:25806101" />
-        </variable_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25810000" version="2">
-          <subexpression datatype="int" operation="greater than or equal">100000</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25812100" version="2">
-          <subexpression operation="pattern match">(?i)\bcac\b</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25812200" version="1">
-          <subexpression datatype="string" operation="case insensitive equals">true</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25812300" version="1">
-          <subexpression datatype="string" operation="pattern match">(?i)(^|,)ocsp_dgst=sha512(,|$)</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25814600" version="1">
-          <subexpression datatype="string" operation="equals">x509/name</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25814800" version="1">
-          <subexpression datatype="string" operation="equals">gtls</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25814900" version="1">
-          <subexpression datatype="string" operation="pattern match">^.+$</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25814902" version="4">
-          <subexpression datatype="string" operation="pattern match">(?i)(?:^|\n)[^#]*\bprotocol\s*=\s*"tcp"</subexpression>
-        </textfilecontent54_state>
-        <variable_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25815500" version="1" comment="10GiB">
-          <value datatype="int" operation="greater than or equal">10737418240</value>
-        </variable_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25815800" version="1">
-          <subexpression datatype="string">5%</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25816000" version="2">
-          <subexpression datatype="string" operation="case insensitive equals">ROTATE</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25816001" version="2">
-          <subexpression datatype="string" operation="case insensitive equals">SINGLE</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25816800" version="1">
-          <subexpression datatype="int" operation="greater than or equal">1</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25816801" version="1">
-          <subexpression datatype="int" operation="less than or equal">100</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25823200" version="1">
-          <subexpression>/etc/crypto-policies/back-ends/libreswan.config</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25823201" version="1">
-          <subexpression>/etc/ipsec.d/*.conf</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25824200" version="1">
-          <subexpression>/etc/crypto-policies/back-ends/bind.config</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:27173400" version="1">
-          <subexpression operation="pattern match">(^|\s)slub_debug=P(\s|$)</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:27175000" version="1">
-          <subexpression datatype="int" operation="less than or equal">900</subexpression>
-        </textfilecontent54_state>
-        <partition_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:20000000" version="1">
-          <mount_options entity_check="at least one">noexec</mount_options>
-        </partition_state>
-        <partition_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:20000001" version="1">
-          <mount_options entity_check="at least one">nodev</mount_options>
-        </partition_state>
-        <partition_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:20000002" version="1">
-          <mount_options entity_check="at least one">nosuid</mount_options>
-        </partition_state>
-        <systemdunitproperty_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:20000003" version="1">
-          <value>active</value>
-        </systemdunitproperty_state>
-        <systemdunitproperty_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:20000004" version="1">
-          <value>running</value>
-        </systemdunitproperty_state>
-        <systemdunitproperty_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:20000005" version="1">
-          <value>masked</value>
-        </systemdunitproperty_state>
-        <systemdunitproperty_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:20000006" version="1">
-          <value>enabled</value>
-        </systemdunitproperty_state>
-        <systemdunitproperty_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:20000007" version="1">
-          <value>inactive</value>
-        </systemdunitproperty_state>
-        <partition_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:23024000" version="2">
-          <fs_type>selinuxfs</fs_type>
-        </partition_state>
-        <partition_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:23030102" version="1">
-          <device operation="pattern match">^/dev\S*$</device>
-        </partition_state>
-        <partition_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:23050900" version="1">
-          <mount_options entity_check="at least one">nosuid</mount_options>
-        </partition_state>
-        <partition_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:23051600" version="1">
-          <mount_options entity_check="at least one">noexec</mount_options>
-        </partition_state>
-        <systemdunitproperty_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:25803600" version="1" comment="usbguard.service active">
-          <value>active</value>
-        </systemdunitproperty_state>
-        <selinuxsecuritycontext_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:25808000" version="2" comment="configured faillock directory selinux context correct">
-          <type>faillog_t</type>
-        </selinuxsecuritycontext_state>
-        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000001" version="1" comment="File permissions is 644 or more restrictive">
-          <suid datatype="boolean">false</suid>
-          <sgid datatype="boolean">false</sgid>
-          <sticky datatype="boolean">false</sticky>
-          <uexec datatype="boolean">false</uexec>
-          <gwrite datatype="boolean">false</gwrite>
-          <gexec datatype="boolean">false</gexec>
-          <owrite datatype="boolean">false</owrite>
-          <oexec datatype="boolean">false</oexec>
-        </file_state>
-        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000002" version="1" comment="symbolic links">
-          <type entity_check="all" datatype="string" operation="equals">symbolic link</type>
-        </file_state>
-        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000004" version="1" comment="Mode 0600 or less permissive">
-          <suid datatype="boolean">false</suid>
-          <sgid datatype="boolean">false</sgid>
-          <sticky datatype="boolean">false</sticky>
-          <uexec datatype="boolean">false</uexec>
-          <gread datatype="boolean">false</gread>
-          <gwrite datatype="boolean">false</gwrite>
-          <gexec datatype="boolean">false</gexec>
-          <oread datatype="boolean">false</oread>
-          <owrite datatype="boolean">false</owrite>
-          <oexec datatype="boolean">false</oexec>
-        </file_state>
-        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000005" version="1" comment="owned by root">
-          <user_id datatype="int">0</user_id>
-        </file_state>
-        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000006" version="1" comment="group-owned by root">
-          <group_id datatype="int">0</group_id>
-        </file_state>
-        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000007" version="1" comment="mode 0640 or less permissive">
-          <suid datatype="boolean">false</suid>
-          <sgid datatype="boolean">false</sgid>
-          <sticky datatype="boolean">false</sticky>
-          <uexec datatype="boolean">false</uexec>
-          <gwrite datatype="boolean">false</gwrite>
-          <gexec datatype="boolean">false</gexec>
-          <oread datatype="boolean">false</oread>
-          <owrite datatype="boolean">false</owrite>
-          <oexec datatype="boolean">false</oexec>
-        </file_state>
-        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000008" version="1" comment="mode 0755 or less permissive">
-          <suid datatype="boolean">false</suid>
-          <sgid datatype="boolean">false</sgid>
-          <sticky datatype="boolean">false</sticky>
-          <gwrite datatype="boolean">false</gwrite>
-          <owrite datatype="boolean">false</owrite>
-        </file_state>
-        <sysctl_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000009" version="1">
-          <value datatype="int" operation="equals">0</value>
-        </sysctl_state>
-        <sysctl_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000010" version="1">
-          <value datatype="int" operation="equals">1</value>
-        </sysctl_state>
-        <sysctl_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000011" version="1">
-          <value datatype="int" operation="equals">2</value>
-        </sysctl_state>
-        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000012" version="1" comment="mode 0000 or less permissive">
-          <suid datatype="boolean">false</suid>
-          <sgid datatype="boolean">false</sgid>
-          <sticky datatype="boolean">false</sticky>
-          <uread datatype="boolean">false</uread>
-          <uwrite datatype="boolean">false</uwrite>
-          <uexec datatype="boolean">false</uexec>
-          <gread datatype="boolean">false</gread>
-          <gwrite datatype="boolean">false</gwrite>
-          <gexec datatype="boolean">false</gexec>
-          <oread datatype="boolean">false</oread>
-          <owrite datatype="boolean">false</owrite>
-          <oexec datatype="boolean">false</oexec>
-        </file_state>
-        <symlink_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000013" version="1">
-          <canonical_path>/dev/null</canonical_path>
-        </symlink_state>
-        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000014" version="1" comment="mode 700 or less permissive">
-          <gread datatype="boolean">false</gread>
-          <gwrite datatype="boolean">false</gwrite>
-          <gexec datatype="boolean">false</gexec>
-          <oread datatype="boolean">false</oread>
-          <owrite datatype="boolean">false</owrite>
-          <oexec datatype="boolean">false</oexec>
-        </file_state>
-        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000015" version="1">
-          <type>regular</type>
-        </file_state>
-        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000016" version="1" comment="only users with the home directory defined">
-          <home_dir datatype="string" operation="pattern match">.+</home_dir>
-        </password_state>
-        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000017" version="1" comment="only uids &lt; 1000">
-          <user_id entity_check="all" datatype="int" operation="less than">1000</user_id>
-        </password_state>
-        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000018" version="1" comment="only uids &gt; 0">
-          <user_id entity_check="all" datatype="int" operation="greater than">0</user_id>
-        </password_state>
-        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000020" version="2" comment="mode 0740 or less permissive">
-          <suid datatype="boolean">false</suid>
-          <sgid datatype="boolean">false</sgid>
-          <sticky datatype="boolean">false</sticky>
-          <gwrite datatype="boolean">false</gwrite>
-          <gexec datatype="boolean">false</gexec>
-          <oread datatype="boolean">false</oread>
-          <owrite datatype="boolean">false</owrite>
-          <oexec datatype="boolean">false</oexec>
-        </file_state>
-        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000021" version="1">
-          <type>directory</type>
-        </file_state>
-        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000022" version="1" comment="mode 0750 or less permissive">
-          <suid datatype="boolean">false</suid>
-          <sgid datatype="boolean">false</sgid>
-          <sticky datatype="boolean">false</sticky>
-          <gwrite datatype="boolean">false</gwrite>
-          <oread datatype="boolean">false</oread>
-          <owrite datatype="boolean">false</owrite>
-          <oexec datatype="boolean">false</oexec>
-        </file_state>
-        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000023" version="1">
-          <group_id datatype="int" operation="less than">1000</group_id>
-        </file_state>
-        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000024" version="1" comment="Not group-writable">
-          <gwrite datatype="boolean">false</gwrite>
-        </file_state>
-        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000025" version="1" comment="Not world-writable">
-          <owrite datatype="boolean">false</owrite>
-        </file_state>
-        <sysctl_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23026800" version="1">
-          <value datatype="int" operation="equals">1</value>
-        </sysctl_state>
-        <sysctl_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23031100" version="1">
-          <value datatype="string" operation="equals">|/bin/false</value>
-        </sysctl_state>
-        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23032500" version="1" comment="root directory">
-          <home_dir>/</home_dir>
-        </password_state>
-        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23035100" version="1" comment="dconf database directories">
-          <path operation="pattern match">^/etc/dconf/db/.*\.d$</path>
-        </file_state>
-        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23036400" version="1">
-          <user_id datatype="int" operation="less than">1000</user_id>
-        </password_state>
-        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23036401" version="1">
-          <user_id datatype="int" operation="equals" var_ref="oval:mil.disa.stig.defs:var:23036401" var_check="all" />
-        </password_state>
-        <shadow_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23036700" version="1" comment="greater than zero">
-          <chg_req datatype="int" operation="greater than">0</chg_req>
-        </shadow_state>
-        <shadow_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23036701" version="1" comment="less than or equal to sixty">
-          <chg_req datatype="int" operation="less than or equal">60</chg_req>
-        </shadow_state>
-        <shadow_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23036702" version="1" comment="Lines starting with usernames of system users">
-          <username datatype="string" operation="pattern match" var_ref="oval:mil.disa.stig.defs:var:23036700" var_check="at least one" />
-        </shadow_state>
-        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23036703" version="2" comment="anonymous users">
-          <user_id datatype="int" operation="not equal" var_ref="oval:mil.disa.stig.defs:var:23036701" var_check="all" />
-        </password_state>
-        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23036704" version="2">
-          <user_id datatype="int" operation="greater than or equal">1000</user_id>
-        </password_state>
-        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23053400" version="1">
-          <user_id datatype="int" operation="not equal">0</user_id>
-        </password_state>
-        <sysctl_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23054700" version="2">
-          <value datatype="int">1</value>
-        </sysctl_state>
-        <interface_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23055400" version="1" comment="Interface is not in PROMISC mode">
-          <flag entity_check="none satisfy" operation="pattern match">(^|\s)PROMISC(\s|$)</flag>
-        </interface_state>
-        <symlink_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:25171800" version="1">
-          <canonical_path operation="pattern match">[\S]*\/multi\-user\.target$</canonical_path>
-        </symlink_state>
-        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:25789000" version="3" comment="nologin shell">
-          <login_shell operation="pattern match">^.*nologin.*$</login_shell>
-        </password_state>
-        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:25789002" version="2" comment="uid &lt; 1000">
-          <user_id datatype="int" operation="less than">1000</user_id>
-        </password_state>
-        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:25789003" version="1" comment="uid = 65534 (nobody)">
-          <user_id datatype="int">65534</user_id>
-        </password_state>
-        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:25793300" version="1" comment="mode 0600">
-          <suid datatype="boolean">false</suid>
-          <sgid datatype="boolean">false</sgid>
-          <sticky datatype="boolean">false</sticky>
-          <uread datatype="boolean">true</uread>
-          <uwrite datatype="boolean">true</uwrite>
-          <uexec datatype="boolean">false</uexec>
-          <gread datatype="boolean">false</gread>
-          <gwrite datatype="boolean">false</gwrite>
-          <gexec datatype="boolean">false</gexec>
-          <oread datatype="boolean">false</oread>
-          <owrite datatype="boolean">false</owrite>
-          <oexec datatype="boolean">false</oexec>
-        </file_state>
-        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:25804500" version="1" comment="Interactive Users">
-          <user_id datatype="int" operation="greater than or equal">1000</user_id>
-        </password_state>
-        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:25804600" version="2">
-          <login_shell datatype="string" operation="pattern match">/sbin/nologin|/usr/sbin/nologin</login_shell>
-        </password_state>
-        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:25804601" version="2">
-          <user_id datatype="int" operation="greater than or equal">1000</user_id>
-        </password_state>
-        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:25804602" version="2">
-          <user_id datatype="int" operation="equals">0</user_id>
-        </password_state>
-        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:25804800" version="1" comment="Valid Local GIDs">
-          <group_id datatype="int" var_ref="oval:mil.disa.stig.defs:var:25804800" var_check="at least one" />
-        </password_state>
-        <symlink_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:25823604" version="1" comment="krb5">
-          <canonical_path>/usr/share/crypto-policies/FIPS/krb5.txt</canonical_path>
-        </symlink_state>
-        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:26048700" version="1">
-          <suid datatype="boolean">true</suid>
-        </file_state>
-        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:26048701" version="1">
-          <sgid datatype="boolean">true</sgid>
-        </file_state>
-        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:26048702" version="1">
-          <sticky datatype="boolean">true</sticky>
-        </file_state>
-        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:26048703" version="1">
-          <gwrite datatype="boolean">true</gwrite>
-        </file_state>
-        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:26048704" version="1">
-          <owrite datatype="boolean">true</owrite>
-        </file_state>
-        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:27176500" version="1" comment="root directory">
-          <home_dir>/</home_dir>
-        </password_state>
-        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:27176501" version="1" comment="not world-writable">
-          <owrite datatype="boolean">false</owrite>
-        </file_state>
-        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:28513400" version="1" comment="not empty">
-          <size datatype="int" operation="greater than">0</size>
-        </file_state>
-      </states>
-      <variables>
-        <local_variable id="oval:mil.disa.stig.defs:var:20000004" version="1" datatype="string" comment="Audit log location from /etc/audit/auditd.conf">
-          <object_component object_ref="oval:mil.disa.stig.ind:obj:20000001" item_field="subexpression" />
-        </local_variable>
-        <constant_variable id="oval:mil.disa.stig.defs:var:20000005" version="2" datatype="string" comment="Directories containing sysctl configuration files">
-          <value>/etc/sysctl.d</value>
-          <value>/run/sysctl.d</value>
-          <value>/lib/sysctl.d</value>
-          <value>/usr/lib/sysctl.d</value>
-          <value>/usr/local/lib/sysctl.d</value>
-        </constant_variable>
-        <constant_variable id="oval:mil.disa.stig.defs:var:20000006" version="2" datatype="string" comment="Append an audit rule">
-          <value>^\s*-a\s+(?:always,exit|exit,always)</value>
-        </constant_variable>
-        <constant_variable id="oval:mil.disa.stig.defs:var:20000007" version="2" datatype="string" comment="Audit 32-bit architecture">
-          <value>\s+-F\s+arch=b32</value>
-        </constant_variable>
-        <constant_variable id="oval:mil.disa.stig.defs:var:20000008" version="2" datatype="string" comment="Audit 64-bit architecture">
-          <value>\s+-F\s+arch=b64</value>
-        </constant_variable>
-        <constant_variable id="oval:mil.disa.stig.defs:var:20000009" version="2" datatype="string" comment="Allow for multiple -S fields">
-          <value>\s+(?:-S\s+[,\w]+\s+)*</value>
-        </constant_variable>
-        <constant_variable id="oval:mil.disa.stig.defs:var:20000010" version="2" datatype="string" comment="Allow for leading syscalls">
-          <value>-S\s+[,\w]*\b</value>
-        </constant_variable>
-        <constant_variable id="oval:mil.disa.stig.defs:var:20000011" version="2" datatype="string" comment="Allow for trailing syscalls">
-          <value>\b[,\w]*</value>
-        </constant_variable>
-        <constant_variable id="oval:mil.disa.stig.defs:var:20000012" version="2" datatype="string" comment="Filter out system UIDs">
-          <value>-F\s+auid&gt;=1000\s+-F\s+auid!=(?:4294967295|-1|unset)</value>
-        </constant_variable>
-        <constant_variable id="oval:mil.disa.stig.defs:var:20000013" version="2" datatype="string" comment="Key field">
-          <value>(?:\s+(?:-k\s+|-F\s+key=)[-\w]+)*\s*$</value>
-        </constant_variable>
-        <constant_variable id="oval:mil.disa.stig.defs:var:20000016" version="1" datatype="string" comment="Filter out non-root UIDs.">
-          <value>-F\s+auid=0</value>
-        </constant_variable>
-        <constant_variable id="oval:mil.disa.stig.defs:var:20000018" version="1" datatype="string" comment="system-wide shared library files directories">
-          <value>/lib</value>
-          <value>/lib64</value>
-          <value>/usr/lib</value>
-          <value>/usr/lib64</value>
-        </constant_variable>
-        <constant_variable id="oval:mil.disa.stig.defs:var:20000019" version="1" datatype="string" comment="system command directories (including /usr/libexec)">
-          <value>/bin</value>
-          <value>/sbin</value>
-          <value>/usr/bin</value>
-          <value>/usr/sbin</value>
-          <value>/usr/libexec</value>
-          <value>/usr/local/bin</value>
-          <value>/usr/local/sbin</value>
-        </constant_variable>
-        <local_variable id="oval:mil.disa.stig.defs:var:23029400" version="1" datatype="string" comment="audit data directory from /etc/audit/auditd.conf">
-          <object_component object_ref="oval:mil.disa.stig.ind:obj:23029402" item_field="subexpression" />
-        </local_variable>
-        <local_variable id="oval:mil.disa.stig.defs:var:23029401" version="1" datatype="string" comment="regex to find audit data partition in /etc/fstab">
-          <concat>
-            <literal_component>^[^# \t]+\s+</literal_component>
-            <object_component object_ref="oval:mil.disa.stig.ind:obj:23029402" item_field="subexpression" />
-            <literal_component>\s+</literal_component>
-          </concat>
-        </local_variable>
-        <local_variable id="oval:mil.disa.stig.defs:var:23032500" version="2" datatype="string" comment="The home directories of non-system users.">
-          <object_component object_ref="oval:mil.disa.stig.unix:obj:23032502" item_field="home_dir" />
-        </local_variable>
-        <local_variable id="oval:mil.disa.stig.defs:var:23032501" version="2" datatype="string" comment="The home directory of the root user.">
-          <object_component object_ref="oval:mil.disa.stig.unix:obj:23032503" item_field="home_dir" />
-        </local_variable>
-        <local_variable id="oval:mil.disa.stig.defs:var:23035100" version="1" datatype="string" comment="dconf database directories">
-          <object_component object_ref="oval:mil.disa.stig.unix:obj:23035100" item_field="path" />
-        </local_variable>
-        <local_variable id="oval:mil.disa.stig.defs:var:23036400" version="1" datatype="string" comment="Usernames of users with a minimum password age of 0 or blank">
-          <object_component object_ref="oval:mil.disa.stig.ind:obj:23036402" item_field="subexpression" />
-        </local_variable>
-        <local_variable id="oval:mil.disa.stig.defs:var:23036401" version="1" datatype="int" comment="UID for user nobody">
-          <object_component object_ref="oval:mil.disa.stig.ind:obj:23036403" item_field="subexpression" />
-        </local_variable>
-        <local_variable id="oval:mil.disa.stig.defs:var:23036700" version="2" datatype="string" comment="Pattern to match lines starting with usernames of system users">
-          <concat>
-            <literal_component datatype="string">^</literal_component>
-            <object_component object_ref="oval:mil.disa.stig.unix:obj:23036701" item_field="username" />
-            <literal_component datatype="string">$</literal_component>
-          </concat>
-        </local_variable>
-        <constant_variable id="oval:mil.disa.stig.defs:var:23036701" version="1" datatype="int" comment="anonymous UIDs">
-          <value>65534</value>
-          <value>65535</value>
-          <value>4294967294</value>
-          <value>4294967295</value>
-        </constant_variable>
-        <local_variable id="oval:mil.disa.stig.defs:var:23039700" version="1" datatype="string" comment="audit data directory from /etc/audit/auditd.conf">
-          <object_component object_ref="oval:mil.disa.stig.ind:obj:23039701" item_field="subexpression" />
-        </local_variable>
-        <constant_variable id="oval:mil.disa.stig.defs:var:23047200" version="1" datatype="string" comment="audit tools">
-          <value>/sbin/auditctl</value>
-          <value>/sbin/aureport</value>
-          <value>/sbin/ausearch</value>
-          <value>/sbin/autrace</value>
-          <value>/sbin/auditd</value>
-          <value>/sbin/rsyslogd</value>
-          <value>/sbin/augenrules</value>
-        </constant_variable>
-        <local_variable id="oval:mil.disa.stig.defs:var:23051600" version="1" datatype="string" comment="Mount options for /var/log in /etc/fstab">
-          <split delimiter=",">
-            <object_component object_ref="oval:mil.disa.stig.ind:obj:23051601" item_field="subexpression" />
-          </split>
-        </local_variable>
-        <local_variable id="oval:mil.disa.stig.defs:var:23764200" version="1" datatype="string" comment="sudoers.d config files">
-          <object_component object_ref="oval:mil.disa.stig.unix:obj:23764200" item_field="filepath" />
-        </local_variable>
-        <local_variable id="oval:mil.disa.stig.defs:var:25303500" version="1" datatype="string" comment="Pattern for audit rule for 32-bit invocations of lsetxattr system call.">
-          <concat>
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000006" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000007" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000009" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000010" />
-            <literal_component>lsetxattr</literal_component>
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000011" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000009" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000012" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000013" />
-          </concat>
-        </local_variable>
-        <local_variable id="oval:mil.disa.stig.defs:var:25303501" version="1" datatype="string" comment="Pattern for audit rule for 64-bit invocations of lsetxattr system call.">
-          <concat>
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000006" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000008" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000009" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000010" />
-            <literal_component>lsetxattr</literal_component>
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000011" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000009" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000012" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000013" />
-          </concat>
-        </local_variable>
-        <local_variable id="oval:mil.disa.stig.defs:var:25303502" version="1" datatype="string" comment="Pattern for audit rule for 32-bit invocations of lsetxattr system call by root user.">
-          <concat>
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000006" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000007" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000009" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000010" />
-            <literal_component>lsetxattr</literal_component>
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000011" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000009" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000016" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000013" />
-          </concat>
-        </local_variable>
-        <local_variable id="oval:mil.disa.stig.defs:var:25303503" version="1" datatype="string" comment="Pattern for audit rule for 32-bit invocations of lsetxattr system call by root user.">
-          <concat>
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000006" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000007" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000009" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000010" />
-            <literal_component>lsetxattr</literal_component>
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000011" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000009" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000016" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000013" />
-          </concat>
-        </local_variable>
-        <local_variable id="oval:mil.disa.stig.defs:var:25303800" version="1" datatype="string" comment="Pattern for audit rule for 32-bit invocations of removexattr system call.">
-          <concat>
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000006" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000007" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000009" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000010" />
-            <literal_component>removexattr</literal_component>
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000011" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000009" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000012" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000013" />
-          </concat>
-        </local_variable>
-        <local_variable id="oval:mil.disa.stig.defs:var:25303801" version="1" datatype="string" comment="Pattern for audit rule for 64-bit invocations of removexattr system call.">
-          <concat>
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000006" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000008" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000009" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000010" />
-            <literal_component>removexattr</literal_component>
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000011" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000009" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000012" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000013" />
-          </concat>
-        </local_variable>
-        <local_variable id="oval:mil.disa.stig.defs:var:25303802" version="1" datatype="string" comment="Pattern for audit rule for 32-bit invocations of removexattr system call by root user.">
-          <concat>
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000006" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000007" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000009" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000010" />
-            <literal_component>removexattr</literal_component>
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000011" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000009" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000016" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000013" />
-          </concat>
-        </local_variable>
-        <local_variable id="oval:mil.disa.stig.defs:var:25303803" version="1" datatype="string" comment="Pattern for audit rule for 32-bit invocations of removexattr system call by root user.">
-          <concat>
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000006" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000007" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000009" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000010" />
-            <literal_component>removexattr</literal_component>
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000011" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000009" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000016" />
-            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000013" />
-          </concat>
-        </local_variable>
-        <local_variable id="oval:mil.disa.stig.defs:var:25789000" version="1" datatype="string" comment="home directories of local interactive users without nologin">
-          <object_component object_ref="oval:mil.disa.stig.unix:obj:25789000" item_field="home_dir" />
-        </local_variable>
-        <local_variable id="oval:mil.disa.stig.defs:var:25802600" version="2" datatype="string" comment="dconf user database locks directories">
-          <concat>
-            <literal_component>/etc/dconf/db/</literal_component>
-            <object_component object_ref="oval:mil.disa.stig.ind:obj:25802600" item_field="subexpression" />
-            <literal_component>.d/locks</literal_component>
-          </concat>
-        </local_variable>
-        <local_variable id="oval:mil.disa.stig.defs:var:25804500" version="1" datatype="int" comment="count of passwd entries">
-          <count>
-            <object_component object_ref="oval:mil.disa.stig.unix:obj:25804500" item_field="user_id" />
-          </count>
-        </local_variable>
-        <local_variable id="oval:mil.disa.stig.defs:var:25804501" version="1" datatype="int" comment="count of unique UIDs">
-          <count>
-            <unique>
-              <object_component object_ref="oval:mil.disa.stig.unix:obj:25804500" item_field="user_id" />
-            </unique>
-          </count>
-        </local_variable>
-        <local_variable id="oval:mil.disa.stig.defs:var:25804800" version="1" datatype="int" comment="Valid Local GIDs">
-          <object_component object_ref="oval:mil.disa.stig.ind:obj:25804800" item_field="subexpression" />
-        </local_variable>
-        <local_variable id="oval:mil.disa.stig.defs:var:25806100" version="1" datatype="int" comment="count of group entries">
-          <count>
-            <object_component object_ref="oval:mil.disa.stig.ind:obj:25806100" item_field="subexpression" />
-          </count>
-        </local_variable>
-        <local_variable id="oval:mil.disa.stig.defs:var:25806101" version="1" datatype="int" comment="count of unique GIDs">
-          <count>
-            <unique>
-              <object_component object_ref="oval:mil.disa.stig.ind:obj:25806100" item_field="subexpression" />
-            </unique>
-          </count>
-        </local_variable>
-        <local_variable id="oval:mil.disa.stig.defs:var:25808000" version="1" datatype="string" comment="faillock directory">
-          <object_component object_ref="oval:mil.disa.stig.ind:obj:25808000" item_field="subexpression" />
-        </local_variable>
-        <local_variable id="oval:mil.disa.stig.defs:var:25815500" version="1" datatype="string" comment="audit partition total size in bytes">
-          <arithmetic arithmetic_operation="multiply">
-            <object_component object_ref="oval:mil.disa.stig.linux:obj:23029400" item_field="block_size" />
-            <object_component object_ref="oval:mil.disa.stig.linux:obj:23029400" item_field="total_space" />
-          </arithmetic>
-        </local_variable>
-        <local_variable id="oval:mil.disa.stig.defs:var:27176500" version="1" datatype="string" comment="The home directories of non-system users.">
-          <object_component object_ref="oval:mil.disa.stig.unix:obj:27176502" item_field="home_dir" />
-        </local_variable>
-        <local_variable id="oval:mil.disa.stig.defs:var:27176501" version="1" datatype="string" comment="The home directory of the root user.">
-          <object_component object_ref="oval:mil.disa.stig.unix:obj:27176503" item_field="home_dir" />
-        </local_variable>
-        <constant_variable id="oval:mil.disa.stig.defs:var:27185700" version="1" datatype="string" comment="Patterns for remote log acceptance config">
-          <value>^\s*\$ModLoad\s+imtcp</value>
-          <value>^\s*\$ModLoad\s+imudp</value>
-          <value>^\s*\$ModLoad\s+imrelp</value>
-          <value>^\s*\$InputTCPServerRun</value>
-          <value>^\s*\$UDPServerRun</value>
-          <value>^\s*\$InputRELPServerRun</value>
-        </constant_variable>
-        <constant_variable id="oval:mil.disa.stig.ind:var:23026800" version="1" datatype="string" comment="other sysctl configuration file locations">
-          <value>/etc/sysctl.d</value>
-          <value>/run/sysctl.d</value>
-          <value>/lib/sysctl.d</value>
-          <value>/usr/lib/sysctl.d</value>
-          <value>/usr/local/lib/sysctl.d</value>
-        </constant_variable>
-        <local_variable id="oval:mil.disa.stig.ind:var:23031600" version="1" datatype="int" comment="count of unique name servers">
-          <count>
-            <unique>
-              <object_component object_ref="oval:mil.disa.stig.ind:obj:23031602" item_field="subexpression" />
-            </unique>
-          </count>
-        </local_variable>
-        <local_variable id="oval:mil.disa.stig.ind:var:23051400" version="1" datatype="string" comment="Mount options for /var/log in /etc/fstab">
-          <split delimiter=",">
-            <object_component object_ref="oval:mil.disa.stig.ind:obj:23051402" item_field="subexpression" />
-          </split>
-        </local_variable>
-        <local_variable id="oval:mil.disa.stig.ind:var:23051500" version="1" datatype="string" comment="Mount options for /var/log in /etc/fstab">
-          <split delimiter=",">
-            <object_component object_ref="oval:mil.disa.stig.ind:obj:23051502" item_field="subexpression" />
-          </split>
-        </local_variable>
-        <local_variable id="oval:mil.disa.stig.linux:var:23051100" version="1" datatype="string" comment="Mount options for /tmp in /etc/fstab">
-          <split delimiter=",">
-            <object_component object_ref="oval:mil.disa.stig.ind:obj:23051102" item_field="subexpression" />
-          </split>
-        </local_variable>
-        <local_variable id="oval:mil.disa.stig.linux:var:23051700" version="1" datatype="string" comment="Mount options for /var/log/audit in /etc/fstab">
-          <split delimiter=",">
-            <object_component object_ref="oval:mil.disa.stig.ind:obj:23051702" item_field="subexpression" />
-          </split>
-        </local_variable>
-      </variables>
-    </oval_definitions>
-  </component>
-  <component id="scap_mil.disa.stig_comp_U_Oracle_Linux_9_V1R1_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" timestamp="2025-10-14T13:53:59.638-04:00">
-    <oval_definitions xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5">
-      <generator>
-        <oval:product_name>Security Content Tool 1.6.0</oval:product_name>
-        <oval:schema_version>5.11</oval:schema_version>
-        <oval:timestamp>2025-10-14T01:53:59</oval:timestamp>
-      </generator>
-      <definitions>
-        <definition id="oval:mil.disa.stig.ol9os:def:1" version="1" class="inventory">
-          <metadata>
-            <title>Oracle Linux 9 is installed.</title>
-            <affected family="unix">
-              <platform>Oracle Linux 9</platform>
-            </affected>
-            <reference source="CPE" ref_id="cpe:/o:oracle:linux:9:-" />
-            <description>Oracle Linux 9 is installed.</description>
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:10000008" comment="The oraclelinux-release package is version 9" />
-          </criteria>
-        </definition>
-      </definitions>
-      <tests>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:10000008" version="1" check_existence="all_exist" check="all" comment="The oraclelinux-release package is version 9.">
-          <object object_ref="oval:mil.disa.stig.linux:obj:10000003" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:10000005" />
-        </rpminfo_test>
-      </tests>
-      <objects>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:10000003" version="1">
-          <name>oraclelinux-release</name>
-        </rpminfo_object>
-      </objects>
-      <states>
-        <rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:10000005" version="1">
-          <version operation="pattern match">^9\.\d+$</version>
-        </rpminfo_state>
-      </states>
-    </oval_definitions>
-  </component>
-</data-stream-collection>
+<?xml version="1.0" encoding="UTF-8"?>
+<data-stream-collection xmlns="http://scap.nist.gov/schema/scap/source/1.2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" id="scap_mil.disa.stig_collection_U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark" schematron-version="1.3" xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2 http://scap.nist.gov/schema/xccdf/1.2/xccdf_1.2.xsd http://cpe.mitre.org/dictionary/2.0 http://scap.nist.gov/schema/cpe/2.3/cpe-dictionary_2.3.xsd http://cpe.mitre.org/language/2.0 https://csrc.nist.gov/schema/cpe/2.3/cpe-language_2.3.xsd http://oval.mitre.org/XMLSchema/oval-common-5 https://github.com/OVALProject/Language/tree/5.11.2/schemas/oval-common-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5 https://github.com/OVALProject/Language/tree/5.11.2/schemas/oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#independent https://github.com/OVALProject/Language/tree/5.11.2/schemas/independent-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#linux https://github.com/OVALProject/Language/tree/5.11.2/schemas/linux-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#unix https://github.com/OVALProject/Language/tree/5.11.2/schemas/unix-definitions-schema.xsd http://scap.nist.gov/schema/scap/source/1.2 http://scap.nist.gov/schema/scap/1.3/scap-source-data-stream_1.3.xsd">
+  <data-stream id="scap_mil.disa.stig_datastream_U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark" use-case="CONFIGURATION" scap-version="1.3" timestamp="2026-01-05T14:26:14.048-05:00">
+    <dictionaries>
+      <component-ref xmlns:xlink="http://www.w3.org/1999/xlink" id="scap_mil.disa.stig_cref_U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-cpe-dictionary.xml" xlink:href="#scap_mil.disa.stig_comp_U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-cpe-dictionary.xml">
+        <catalog xmlns="urn:oasis:names:tc:entity:xmlns:xml:catalog">
+          <uri name="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" uri="#scap_mil.disa.stig_cref_U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" />
+        </catalog>
+      </component-ref>
+    </dictionaries>
+    <checklists>
+      <component-ref xmlns:xlink="http://www.w3.org/1999/xlink" id="scap_mil.disa.stig_cref_U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-xccdf.xml" xlink:href="#scap_mil.disa.stig_comp_U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-xccdf.xml">
+        <catalog xmlns="urn:oasis:names:tc:entity:xmlns:xml:catalog">
+          <uri name="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" uri="#scap_mil.disa.stig_cref_U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" />
+        </catalog>
+      </component-ref>
+    </checklists>
+    <checks>
+      <component-ref xmlns:xlink="http://www.w3.org/1999/xlink" id="scap_mil.disa.stig_cref_U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" xlink:href="#scap_mil.disa.stig_comp_U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" />
+      <component-ref xmlns:xlink="http://www.w3.org/1999/xlink" id="scap_mil.disa.stig_cref_U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" xlink:href="#scap_mil.disa.stig_comp_U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" />
+    </checks>
+  </data-stream>
+  <component id="scap_mil.disa.stig_comp_U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-cpe-dictionary.xml" timestamp="2026-01-05T14:26:14.048-05:00">
+    <cpe-list xmlns="http://cpe.mitre.org/dictionary/2.0">
+      <cpe-item name="cpe:/o:oracle:linux:9:-">
+        <title xml:lang="en-us">Oracle Linux 9</title>
+        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-cpe-oval.xml">oval:mil.disa.stig.ol9os:def:1</check>
+      </cpe-item>
+    </cpe-list>
+  </component>
+  <component id="scap_mil.disa.stig_comp_U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-xccdf.xml" timestamp="2026-01-05T14:26:14.071-05:00">
+    <xccdf:Benchmark xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" id="xccdf_mil.disa.stig_benchmark_Oracle_Linux_9_STIG" style="SCAP_1.3" xml:lang="en">
+      <xccdf:status date="2025-12-22">accepted</xccdf:status>
+      <xccdf:title>Oracle Linux 9 STIG SCAP Benchmark</xccdf:title>
+      <xccdf:description>This Security Technical Implementation Guide is published as a tool to improve the security of Department of Defense (DOD) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.</xccdf:description>
+      <xccdf:notice id="terms-of-use" xml:lang="en" />
+      <xccdf:front-matter xml:lang="en" />
+      <xccdf:rear-matter xml:lang="en" />
+      <xccdf:reference href="https://cyber.mil">
+        <dc:publisher>DISA</dc:publisher>
+        <dc:source>STIG.DOD.MIL</dc:source>
+      </xccdf:reference>
+      <xccdf:plain-text id="release-info">Benchmark Date: 05 Jan 2026</xccdf:plain-text>
+      <xccdf:plain-text id="generator">3.5.2</xccdf:plain-text>
+      <xccdf:plain-text id="conventionsVersion">1.10.0</xccdf:plain-text>
+      <cpe:platform-specification>
+        <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxBIND">
+          <cpe:title>Linux with BIND installed</cpe:title>
+          <cpe:logical-test operator="AND" negate="false">
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25824200" />
+          </cpe:logical-test>
+        </cpe:platform>
+        <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxGnome">
+          <cpe:title>Gnome-shell Package</cpe:title>
+          <cpe:logical-test operator="AND" negate="false">
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100005" />
+          </cpe:logical-test>
+        </cpe:platform>
+        <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxNoNFSMounts">
+          <cpe:title>Linux with no NFS mounts configured</cpe:title>
+          <cpe:logical-test operator="AND" negate="true">
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25785400" />
+          </cpe:logical-test>
+        </cpe:platform>
+        <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxNFSMounts">
+          <cpe:title>Linux with NFS mounts configured</cpe:title>
+          <cpe:logical-test operator="AND" negate="false">
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25785400" />
+          </cpe:logical-test>
+        </cpe:platform>
+        <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxLibreswan">
+          <cpe:title>Linux with Libreswan installed</cpe:title>
+          <cpe:logical-test operator="AND" negate="false">
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25823200" />
+          </cpe:logical-test>
+        </cpe:platform>
+        <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxIPv6enabled">
+          <cpe:title>Linux IPv6 Enabled</cpe:title>
+          <cpe:logical-test operator="AND" negate="true">
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100012" />
+          </cpe:logical-test>
+        </cpe:platform>
+        <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxUEFIBootPartitionNotVfat">
+          <cpe:title>Linux UEFI system with boot partition file type other than VFAT</cpe:title>
+          <cpe:logical-test operator="AND" negate="false">
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100016" />
+          </cpe:logical-test>
+        </cpe:platform>
+        <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxKernelDumps">
+          <cpe:title>Kernel dumps are enabled</cpe:title>
+          <cpe:logical-test operator="AND" negate="true">
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:230311" />
+          </cpe:logical-test>
+        </cpe:platform>
+        <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxPostfix">
+          <cpe:title>Linux with postfix installed</cpe:title>
+          <cpe:logical-test operator="AND" negate="false">
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25795100" />
+          </cpe:logical-test>
+        </cpe:platform>
+        <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxAutofs">
+          <cpe:title>Linux with autofs installed</cpe:title>
+          <cpe:logical-test operator="AND" negate="false">
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25784900" />
+          </cpe:logical-test>
+        </cpe:platform>
+      </cpe:platform-specification>
+      <xccdf:platform idref="cpe:/o:oracle:linux:9:-" />
+      <xccdf:version>001.002</xccdf:version>
+      <xccdf:metadata>
+        <dc:creator>DISA</dc:creator>
+        <dc:publisher>DISA</dc:publisher>
+        <dc:contributor>DISA</dc:contributor>
+        <dc:source>STIG.DOD.MIL</dc:source>
+      </xccdf:metadata>
+      <xccdf:Profile id="xccdf_mil.disa.stig_profile_MAC-1_Classified">
+        <xccdf:title>I - Mission Critical Classified</xccdf:title>
+        <xccdf:description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</xccdf:description>
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271432" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271433" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271434" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271435" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271436" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271437" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271438" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271440" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271441" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271442" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271443" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271444" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271445" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271446" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271447" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271448" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271449" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271450" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271452" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271453" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271454" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271456" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271458" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271459" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271460" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271461" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271462" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271463" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271464" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271465" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271466" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271467" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271468" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271469" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271470" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271474" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271475" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271476" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271477" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271482" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271483" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271484" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271485" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271486" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271487" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271488" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271489" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271490" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271491" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271493" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271494" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271495" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271496" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271501" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271502" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271503" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271504" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271505" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271506" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271507" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271508" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271509" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271510" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271511" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271512" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271513" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271514" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271515" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271516" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271517" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271518" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271519" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271520" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271521" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271522" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271523" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271524" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271525" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271527" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271528" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271529" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271530" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271531" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271532" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271533" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271534" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271535" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271536" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271537" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271538" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271539" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271540" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271541" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271542" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271543" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271544" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271545" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271546" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271547" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271548" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271549" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271550" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271551" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271552" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271553" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271554" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271555" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271556" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271557" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271558" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271559" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271560" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271561" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271562" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271563" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271564" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271565" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271566" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271567" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271568" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271569" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271570" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271571" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271572" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271573" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271574" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271575" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271576" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271577" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271578" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271579" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271580" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271581" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271582" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271583" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271584" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271585" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271586" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271587" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271588" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271589" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271590" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271591" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271592" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271593" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271594" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271595" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271596" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271597" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271598" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271599" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271600" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271601" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271602" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271603" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271607" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271608" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271609" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271610" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271611" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271612" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271613" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271614" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271615" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271616" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271617" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271618" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271619" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271620" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271621" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271622" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271623" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271624" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271625" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271626" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271627" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271628" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271629" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271630" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271631" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271632" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271633" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271634" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271635" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271636" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271637" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271638" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271639" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271641" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271642" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271643" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271647" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271648" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271649" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271650" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271651" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271652" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271653" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271654" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271655" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271656" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271657" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271658" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271659" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271660" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271661" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271662" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271663" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271664" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271665" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271666" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271667" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271668" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271669" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271670" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271678" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271679" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271680" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271681" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271682" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271683" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271684" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271685" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271686" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271687" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271688" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271690" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271691" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271693" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271694" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271695" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271696" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271697" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271698" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271700" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271703" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271704" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271705" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271706" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271707" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271708" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271709" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271710" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271711" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271712" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271713" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271714" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271715" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271716" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271717" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271718" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271719" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271720" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271721" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271722" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271723" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271724" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271725" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271726" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271727" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271728" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271729" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271730" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271731" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271732" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271733" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271734" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271735" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271736" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271737" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271738" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271739" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271740" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271741" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271742" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271743" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271745" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271746" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271747" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271748" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271749" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271750" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271751" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271752" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271753" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271754" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271755" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271757" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271758" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271759" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271761" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271763" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271766" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271768" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271771" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271772" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271773" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271774" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271775" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271776" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271777" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271778" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271782" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271784" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271786" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271787" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271788" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271789" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271790" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271791" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271792" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271793" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271794" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271795" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271796" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271797" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271798" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271799" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271800" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271801" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271802" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271803" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271804" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271805" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271806" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271807" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271808" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271809" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271810" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271811" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271812" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271813" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271814" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271815" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271816" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271817" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271818" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271819" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271820" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271821" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271822" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271823" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271824" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271825" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271826" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271827" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271828" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271829" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271830" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271831" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271832" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271833" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271834" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271835" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271836" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271839" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271840" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271841" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271842" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271845" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271846" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271849" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271850" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271851" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271852" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271854" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271855" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271856" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271857" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271858" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271860" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271861" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271862" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271864" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271865" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271866" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271867" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271868" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271869" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271870" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271871" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271872" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271873" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271874" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271875" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271876" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271877" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271878" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271879" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271880" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271881" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271882" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271883" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271884" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271885" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271886" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-278952" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279935" selected="true" />
+      </xccdf:Profile>
+      <xccdf:Profile id="xccdf_mil.disa.stig_profile_MAC-1_Public">
+        <xccdf:title>I - Mission Critical Public</xccdf:title>
+        <xccdf:description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</xccdf:description>
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271432" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271433" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271434" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271435" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271436" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271437" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271438" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271440" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271441" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271442" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271443" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271444" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271445" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271446" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271447" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271448" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271449" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271450" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271452" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271453" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271454" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271456" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271458" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271459" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271460" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271461" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271462" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271463" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271464" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271465" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271466" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271467" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271468" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271469" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271470" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271474" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271475" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271476" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271477" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271482" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271483" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271484" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271485" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271486" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271487" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271488" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271489" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271490" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271491" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271493" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271494" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271495" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271496" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271501" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271502" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271503" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271504" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271505" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271506" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271507" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271508" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271509" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271510" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271511" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271512" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271513" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271514" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271515" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271516" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271517" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271518" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271519" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271520" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271521" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271522" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271523" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271524" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271525" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271527" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271528" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271529" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271530" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271531" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271532" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271533" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271534" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271535" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271536" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271537" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271538" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271539" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271540" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271541" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271542" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271543" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271544" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271545" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271546" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271547" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271548" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271549" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271550" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271551" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271552" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271553" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271554" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271555" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271556" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271557" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271558" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271559" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271560" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271561" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271562" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271563" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271564" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271565" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271566" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271567" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271568" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271569" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271570" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271571" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271572" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271573" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271574" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271575" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271576" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271577" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271578" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271579" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271580" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271581" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271582" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271583" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271584" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271585" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271586" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271587" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271588" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271589" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271590" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271591" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271592" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271593" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271594" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271595" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271596" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271597" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271598" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271599" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271600" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271601" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271602" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271603" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271607" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271608" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271609" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271610" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271611" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271612" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271613" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271614" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271615" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271616" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271617" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271618" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271619" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271620" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271621" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271622" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271623" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271624" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271625" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271626" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271627" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271628" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271629" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271630" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271631" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271632" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271633" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271634" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271635" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271636" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271637" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271638" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271639" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271641" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271642" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271643" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271647" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271648" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271649" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271650" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271651" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271652" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271653" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271654" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271655" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271656" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271657" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271658" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271659" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271660" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271661" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271662" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271663" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271664" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271665" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271666" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271667" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271668" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271669" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271670" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271678" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271679" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271680" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271681" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271682" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271683" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271684" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271685" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271686" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271687" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271688" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271690" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271691" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271693" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271694" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271695" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271696" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271697" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271698" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271700" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271703" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271704" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271705" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271706" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271707" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271708" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271709" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271710" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271711" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271712" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271713" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271714" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271715" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271716" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271717" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271718" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271719" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271720" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271721" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271722" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271723" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271724" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271725" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271726" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271727" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271728" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271729" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271730" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271731" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271732" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271733" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271734" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271735" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271736" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271737" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271738" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271739" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271740" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271741" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271742" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271743" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271745" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271746" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271747" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271748" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271749" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271750" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271751" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271752" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271753" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271754" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271755" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271757" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271758" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271759" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271761" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271763" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271766" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271768" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271771" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271772" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271773" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271774" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271775" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271776" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271777" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271778" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271782" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271784" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271786" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271787" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271788" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271789" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271790" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271791" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271792" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271793" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271794" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271795" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271796" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271797" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271798" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271799" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271800" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271801" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271802" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271803" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271804" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271805" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271806" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271807" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271808" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271809" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271810" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271811" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271812" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271813" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271814" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271815" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271816" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271817" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271818" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271819" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271820" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271821" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271822" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271823" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271824" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271825" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271826" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271827" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271828" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271829" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271830" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271831" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271832" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271833" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271834" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271835" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271836" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271839" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271840" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271841" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271842" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271845" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271846" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271849" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271850" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271851" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271852" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271854" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271855" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271856" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271857" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271858" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271860" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271861" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271862" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271864" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271865" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271866" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271867" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271868" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271869" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271870" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271871" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271872" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271873" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271874" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271875" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271876" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271877" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271878" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271879" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271880" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271881" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271882" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271883" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271884" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271885" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271886" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-278952" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279935" selected="true" />
+      </xccdf:Profile>
+      <xccdf:Profile id="xccdf_mil.disa.stig_profile_MAC-1_Sensitive">
+        <xccdf:title>I - Mission Critical Sensitive</xccdf:title>
+        <xccdf:description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</xccdf:description>
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271432" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271433" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271434" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271435" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271436" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271437" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271438" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271440" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271441" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271442" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271443" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271444" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271445" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271446" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271447" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271448" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271449" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271450" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271452" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271453" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271454" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271456" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271458" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271459" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271460" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271461" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271462" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271463" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271464" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271465" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271466" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271467" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271468" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271469" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271470" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271474" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271475" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271476" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271477" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271482" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271483" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271484" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271485" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271486" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271487" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271488" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271489" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271490" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271491" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271493" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271494" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271495" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271496" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271501" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271502" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271503" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271504" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271505" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271506" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271507" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271508" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271509" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271510" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271511" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271512" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271513" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271514" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271515" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271516" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271517" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271518" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271519" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271520" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271521" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271522" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271523" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271524" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271525" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271527" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271528" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271529" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271530" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271531" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271532" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271533" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271534" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271535" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271536" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271537" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271538" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271539" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271540" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271541" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271542" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271543" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271544" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271545" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271546" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271547" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271548" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271549" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271550" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271551" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271552" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271553" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271554" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271555" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271556" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271557" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271558" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271559" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271560" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271561" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271562" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271563" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271564" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271565" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271566" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271567" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271568" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271569" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271570" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271571" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271572" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271573" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271574" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271575" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271576" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271577" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271578" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271579" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271580" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271581" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271582" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271583" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271584" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271585" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271586" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271587" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271588" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271589" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271590" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271591" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271592" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271593" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271594" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271595" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271596" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271597" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271598" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271599" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271600" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271601" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271602" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271603" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271607" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271608" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271609" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271610" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271611" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271612" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271613" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271614" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271615" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271616" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271617" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271618" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271619" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271620" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271621" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271622" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271623" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271624" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271625" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271626" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271627" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271628" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271629" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271630" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271631" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271632" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271633" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271634" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271635" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271636" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271637" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271638" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271639" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271641" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271642" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271643" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271647" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271648" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271649" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271650" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271651" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271652" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271653" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271654" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271655" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271656" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271657" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271658" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271659" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271660" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271661" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271662" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271663" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271664" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271665" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271666" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271667" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271668" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271669" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271670" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271678" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271679" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271680" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271681" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271682" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271683" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271684" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271685" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271686" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271687" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271688" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271690" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271691" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271693" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271694" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271695" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271696" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271697" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271698" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271700" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271703" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271704" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271705" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271706" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271707" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271708" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271709" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271710" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271711" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271712" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271713" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271714" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271715" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271716" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271717" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271718" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271719" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271720" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271721" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271722" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271723" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271724" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271725" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271726" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271727" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271728" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271729" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271730" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271731" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271732" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271733" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271734" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271735" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271736" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271737" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271738" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271739" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271740" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271741" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271742" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271743" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271745" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271746" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271747" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271748" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271749" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271750" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271751" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271752" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271753" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271754" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271755" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271757" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271758" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271759" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271761" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271763" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271766" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271768" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271771" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271772" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271773" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271774" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271775" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271776" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271777" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271778" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271782" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271784" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271786" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271787" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271788" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271789" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271790" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271791" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271792" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271793" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271794" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271795" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271796" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271797" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271798" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271799" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271800" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271801" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271802" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271803" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271804" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271805" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271806" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271807" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271808" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271809" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271810" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271811" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271812" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271813" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271814" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271815" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271816" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271817" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271818" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271819" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271820" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271821" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271822" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271823" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271824" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271825" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271826" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271827" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271828" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271829" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271830" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271831" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271832" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271833" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271834" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271835" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271836" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271839" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271840" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271841" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271842" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271845" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271846" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271849" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271850" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271851" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271852" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271854" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271855" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271856" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271857" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271858" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271860" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271861" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271862" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271864" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271865" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271866" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271867" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271868" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271869" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271870" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271871" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271872" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271873" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271874" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271875" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271876" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271877" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271878" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271879" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271880" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271881" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271882" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271883" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271884" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271885" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271886" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-278952" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279935" selected="true" />
+      </xccdf:Profile>
+      <xccdf:Profile id="xccdf_mil.disa.stig_profile_MAC-2_Classified">
+        <xccdf:title>II - Mission Support Classified</xccdf:title>
+        <xccdf:description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</xccdf:description>
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271432" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271433" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271434" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271435" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271436" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271437" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271438" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271440" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271441" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271442" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271443" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271444" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271445" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271446" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271447" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271448" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271449" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271450" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271452" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271453" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271454" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271456" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271458" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271459" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271460" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271461" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271462" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271463" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271464" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271465" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271466" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271467" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271468" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271469" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271470" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271474" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271475" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271476" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271477" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271482" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271483" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271484" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271485" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271486" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271487" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271488" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271489" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271490" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271491" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271493" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271494" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271495" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271496" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271501" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271502" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271503" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271504" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271505" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271506" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271507" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271508" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271509" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271510" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271511" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271512" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271513" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271514" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271515" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271516" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271517" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271518" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271519" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271520" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271521" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271522" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271523" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271524" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271525" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271527" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271528" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271529" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271530" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271531" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271532" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271533" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271534" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271535" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271536" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271537" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271538" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271539" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271540" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271541" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271542" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271543" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271544" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271545" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271546" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271547" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271548" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271549" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271550" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271551" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271552" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271553" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271554" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271555" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271556" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271557" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271558" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271559" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271560" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271561" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271562" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271563" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271564" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271565" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271566" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271567" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271568" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271569" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271570" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271571" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271572" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271573" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271574" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271575" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271576" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271577" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271578" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271579" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271580" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271581" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271582" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271583" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271584" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271585" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271586" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271587" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271588" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271589" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271590" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271591" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271592" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271593" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271594" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271595" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271596" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271597" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271598" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271599" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271600" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271601" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271602" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271603" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271607" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271608" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271609" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271610" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271611" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271612" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271613" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271614" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271615" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271616" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271617" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271618" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271619" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271620" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271621" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271622" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271623" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271624" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271625" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271626" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271627" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271628" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271629" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271630" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271631" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271632" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271633" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271634" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271635" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271636" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271637" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271638" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271639" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271641" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271642" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271643" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271647" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271648" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271649" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271650" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271651" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271652" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271653" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271654" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271655" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271656" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271657" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271658" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271659" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271660" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271661" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271662" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271663" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271664" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271665" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271666" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271667" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271668" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271669" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271670" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271678" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271679" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271680" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271681" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271682" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271683" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271684" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271685" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271686" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271687" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271688" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271690" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271691" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271693" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271694" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271695" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271696" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271697" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271698" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271700" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271703" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271704" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271705" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271706" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271707" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271708" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271709" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271710" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271711" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271712" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271713" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271714" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271715" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271716" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271717" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271718" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271719" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271720" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271721" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271722" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271723" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271724" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271725" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271726" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271727" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271728" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271729" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271730" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271731" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271732" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271733" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271734" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271735" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271736" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271737" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271738" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271739" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271740" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271741" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271742" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271743" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271745" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271746" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271747" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271748" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271749" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271750" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271751" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271752" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271753" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271754" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271755" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271757" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271758" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271759" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271761" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271763" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271766" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271768" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271771" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271772" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271773" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271774" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271775" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271776" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271777" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271778" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271782" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271784" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271786" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271787" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271788" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271789" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271790" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271791" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271792" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271793" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271794" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271795" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271796" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271797" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271798" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271799" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271800" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271801" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271802" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271803" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271804" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271805" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271806" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271807" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271808" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271809" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271810" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271811" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271812" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271813" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271814" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271815" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271816" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271817" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271818" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271819" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271820" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271821" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271822" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271823" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271824" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271825" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271826" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271827" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271828" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271829" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271830" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271831" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271832" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271833" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271834" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271835" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271836" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271839" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271840" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271841" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271842" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271845" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271846" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271849" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271850" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271851" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271852" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271854" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271855" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271856" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271857" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271858" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271860" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271861" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271862" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271864" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271865" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271866" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271867" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271868" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271869" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271870" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271871" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271872" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271873" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271874" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271875" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271876" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271877" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271878" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271879" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271880" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271881" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271882" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271883" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271884" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271885" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271886" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-278952" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279935" selected="true" />
+      </xccdf:Profile>
+      <xccdf:Profile id="xccdf_mil.disa.stig_profile_MAC-2_Public">
+        <xccdf:title>II - Mission Support Public</xccdf:title>
+        <xccdf:description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</xccdf:description>
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271432" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271433" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271434" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271435" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271436" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271437" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271438" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271440" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271441" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271442" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271443" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271444" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271445" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271446" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271447" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271448" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271449" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271450" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271452" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271453" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271454" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271456" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271458" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271459" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271460" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271461" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271462" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271463" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271464" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271465" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271466" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271467" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271468" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271469" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271470" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271474" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271475" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271476" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271477" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271482" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271483" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271484" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271485" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271486" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271487" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271488" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271489" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271490" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271491" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271493" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271494" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271495" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271496" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271501" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271502" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271503" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271504" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271505" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271506" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271507" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271508" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271509" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271510" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271511" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271512" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271513" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271514" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271515" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271516" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271517" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271518" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271519" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271520" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271521" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271522" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271523" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271524" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271525" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271527" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271528" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271529" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271530" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271531" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271532" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271533" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271534" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271535" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271536" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271537" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271538" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271539" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271540" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271541" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271542" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271543" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271544" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271545" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271546" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271547" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271548" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271549" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271550" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271551" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271552" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271553" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271554" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271555" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271556" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271557" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271558" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271559" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271560" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271561" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271562" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271563" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271564" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271565" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271566" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271567" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271568" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271569" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271570" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271571" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271572" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271573" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271574" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271575" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271576" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271577" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271578" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271579" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271580" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271581" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271582" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271583" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271584" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271585" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271586" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271587" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271588" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271589" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271590" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271591" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271592" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271593" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271594" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271595" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271596" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271597" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271598" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271599" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271600" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271601" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271602" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271603" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271607" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271608" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271609" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271610" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271611" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271612" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271613" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271614" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271615" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271616" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271617" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271618" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271619" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271620" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271621" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271622" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271623" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271624" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271625" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271626" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271627" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271628" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271629" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271630" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271631" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271632" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271633" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271634" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271635" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271636" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271637" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271638" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271639" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271641" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271642" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271643" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271647" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271648" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271649" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271650" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271651" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271652" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271653" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271654" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271655" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271656" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271657" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271658" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271659" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271660" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271661" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271662" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271663" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271664" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271665" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271666" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271667" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271668" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271669" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271670" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271678" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271679" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271680" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271681" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271682" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271683" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271684" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271685" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271686" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271687" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271688" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271690" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271691" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271693" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271694" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271695" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271696" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271697" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271698" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271700" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271703" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271704" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271705" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271706" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271707" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271708" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271709" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271710" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271711" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271712" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271713" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271714" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271715" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271716" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271717" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271718" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271719" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271720" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271721" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271722" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271723" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271724" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271725" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271726" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271727" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271728" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271729" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271730" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271731" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271732" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271733" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271734" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271735" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271736" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271737" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271738" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271739" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271740" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271741" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271742" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271743" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271745" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271746" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271747" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271748" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271749" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271750" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271751" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271752" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271753" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271754" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271755" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271757" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271758" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271759" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271761" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271763" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271766" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271768" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271771" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271772" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271773" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271774" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271775" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271776" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271777" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271778" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271782" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271784" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271786" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271787" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271788" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271789" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271790" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271791" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271792" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271793" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271794" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271795" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271796" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271797" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271798" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271799" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271800" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271801" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271802" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271803" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271804" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271805" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271806" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271807" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271808" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271809" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271810" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271811" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271812" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271813" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271814" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271815" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271816" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271817" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271818" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271819" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271820" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271821" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271822" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271823" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271824" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271825" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271826" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271827" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271828" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271829" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271830" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271831" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271832" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271833" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271834" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271835" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271836" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271839" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271840" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271841" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271842" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271845" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271846" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271849" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271850" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271851" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271852" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271854" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271855" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271856" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271857" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271858" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271860" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271861" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271862" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271864" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271865" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271866" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271867" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271868" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271869" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271870" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271871" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271872" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271873" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271874" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271875" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271876" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271877" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271878" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271879" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271880" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271881" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271882" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271883" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271884" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271885" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271886" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-278952" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279935" selected="true" />
+      </xccdf:Profile>
+      <xccdf:Profile id="xccdf_mil.disa.stig_profile_MAC-2_Sensitive">
+        <xccdf:title>II - Mission Support Sensitive</xccdf:title>
+        <xccdf:description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</xccdf:description>
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271432" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271433" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271434" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271435" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271436" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271437" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271438" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271440" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271441" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271442" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271443" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271444" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271445" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271446" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271447" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271448" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271449" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271450" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271452" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271453" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271454" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271456" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271458" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271459" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271460" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271461" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271462" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271463" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271464" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271465" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271466" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271467" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271468" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271469" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271470" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271474" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271475" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271476" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271477" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271482" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271483" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271484" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271485" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271486" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271487" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271488" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271489" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271490" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271491" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271493" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271494" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271495" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271496" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271501" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271502" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271503" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271504" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271505" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271506" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271507" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271508" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271509" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271510" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271511" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271512" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271513" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271514" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271515" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271516" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271517" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271518" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271519" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271520" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271521" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271522" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271523" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271524" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271525" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271527" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271528" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271529" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271530" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271531" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271532" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271533" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271534" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271535" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271536" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271537" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271538" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271539" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271540" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271541" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271542" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271543" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271544" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271545" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271546" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271547" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271548" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271549" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271550" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271551" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271552" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271553" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271554" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271555" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271556" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271557" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271558" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271559" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271560" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271561" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271562" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271563" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271564" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271565" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271566" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271567" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271568" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271569" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271570" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271571" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271572" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271573" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271574" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271575" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271576" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271577" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271578" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271579" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271580" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271581" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271582" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271583" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271584" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271585" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271586" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271587" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271588" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271589" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271590" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271591" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271592" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271593" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271594" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271595" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271596" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271597" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271598" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271599" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271600" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271601" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271602" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271603" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271607" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271608" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271609" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271610" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271611" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271612" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271613" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271614" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271615" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271616" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271617" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271618" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271619" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271620" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271621" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271622" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271623" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271624" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271625" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271626" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271627" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271628" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271629" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271630" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271631" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271632" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271633" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271634" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271635" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271636" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271637" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271638" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271639" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271641" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271642" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271643" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271647" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271648" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271649" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271650" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271651" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271652" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271653" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271654" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271655" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271656" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271657" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271658" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271659" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271660" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271661" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271662" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271663" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271664" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271665" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271666" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271667" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271668" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271669" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271670" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271678" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271679" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271680" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271681" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271682" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271683" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271684" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271685" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271686" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271687" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271688" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271690" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271691" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271693" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271694" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271695" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271696" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271697" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271698" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271700" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271703" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271704" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271705" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271706" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271707" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271708" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271709" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271710" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271711" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271712" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271713" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271714" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271715" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271716" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271717" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271718" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271719" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271720" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271721" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271722" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271723" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271724" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271725" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271726" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271727" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271728" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271729" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271730" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271731" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271732" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271733" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271734" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271735" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271736" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271737" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271738" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271739" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271740" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271741" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271742" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271743" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271745" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271746" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271747" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271748" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271749" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271750" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271751" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271752" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271753" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271754" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271755" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271757" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271758" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271759" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271761" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271763" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271766" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271768" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271771" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271772" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271773" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271774" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271775" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271776" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271777" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271778" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271782" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271784" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271786" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271787" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271788" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271789" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271790" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271791" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271792" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271793" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271794" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271795" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271796" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271797" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271798" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271799" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271800" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271801" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271802" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271803" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271804" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271805" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271806" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271807" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271808" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271809" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271810" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271811" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271812" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271813" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271814" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271815" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271816" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271817" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271818" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271819" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271820" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271821" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271822" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271823" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271824" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271825" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271826" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271827" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271828" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271829" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271830" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271831" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271832" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271833" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271834" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271835" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271836" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271839" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271840" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271841" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271842" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271845" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271846" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271849" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271850" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271851" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271852" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271854" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271855" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271856" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271857" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271858" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271860" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271861" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271862" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271864" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271865" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271866" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271867" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271868" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271869" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271870" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271871" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271872" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271873" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271874" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271875" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271876" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271877" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271878" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271879" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271880" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271881" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271882" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271883" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271884" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271885" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271886" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-278952" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279935" selected="true" />
+      </xccdf:Profile>
+      <xccdf:Profile id="xccdf_mil.disa.stig_profile_MAC-3_Classified">
+        <xccdf:title>III - Administrative Classified</xccdf:title>
+        <xccdf:description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</xccdf:description>
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271432" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271433" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271434" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271435" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271436" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271437" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271438" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271440" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271441" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271442" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271443" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271444" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271445" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271446" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271447" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271448" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271449" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271450" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271452" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271453" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271454" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271456" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271458" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271459" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271460" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271461" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271462" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271463" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271464" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271465" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271466" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271467" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271468" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271469" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271470" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271474" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271475" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271476" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271477" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271482" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271483" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271484" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271485" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271486" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271487" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271488" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271489" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271490" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271491" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271493" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271494" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271495" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271496" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271501" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271502" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271503" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271504" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271505" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271506" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271507" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271508" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271509" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271510" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271511" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271512" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271513" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271514" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271515" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271516" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271517" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271518" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271519" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271520" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271521" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271522" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271523" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271524" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271525" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271527" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271528" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271529" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271530" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271531" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271532" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271533" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271534" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271535" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271536" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271537" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271538" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271539" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271540" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271541" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271542" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271543" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271544" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271545" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271546" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271547" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271548" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271549" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271550" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271551" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271552" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271553" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271554" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271555" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271556" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271557" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271558" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271559" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271560" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271561" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271562" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271563" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271564" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271565" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271566" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271567" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271568" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271569" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271570" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271571" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271572" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271573" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271574" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271575" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271576" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271577" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271578" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271579" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271580" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271581" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271582" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271583" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271584" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271585" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271586" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271587" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271588" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271589" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271590" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271591" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271592" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271593" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271594" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271595" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271596" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271597" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271598" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271599" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271600" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271601" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271602" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271603" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271607" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271608" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271609" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271610" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271611" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271612" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271613" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271614" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271615" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271616" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271617" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271618" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271619" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271620" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271621" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271622" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271623" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271624" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271625" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271626" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271627" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271628" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271629" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271630" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271631" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271632" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271633" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271634" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271635" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271636" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271637" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271638" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271639" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271641" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271642" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271643" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271647" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271648" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271649" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271650" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271651" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271652" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271653" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271654" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271655" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271656" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271657" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271658" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271659" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271660" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271661" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271662" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271663" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271664" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271665" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271666" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271667" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271668" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271669" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271670" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271678" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271679" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271680" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271681" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271682" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271683" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271684" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271685" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271686" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271687" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271688" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271690" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271691" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271693" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271694" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271695" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271696" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271697" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271698" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271700" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271703" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271704" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271705" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271706" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271707" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271708" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271709" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271710" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271711" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271712" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271713" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271714" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271715" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271716" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271717" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271718" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271719" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271720" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271721" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271722" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271723" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271724" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271725" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271726" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271727" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271728" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271729" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271730" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271731" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271732" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271733" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271734" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271735" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271736" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271737" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271738" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271739" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271740" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271741" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271742" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271743" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271745" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271746" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271747" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271748" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271749" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271750" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271751" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271752" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271753" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271754" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271755" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271757" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271758" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271759" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271761" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271763" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271766" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271768" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271771" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271772" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271773" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271774" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271775" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271776" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271777" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271778" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271782" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271784" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271786" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271787" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271788" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271789" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271790" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271791" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271792" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271793" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271794" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271795" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271796" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271797" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271798" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271799" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271800" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271801" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271802" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271803" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271804" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271805" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271806" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271807" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271808" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271809" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271810" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271811" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271812" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271813" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271814" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271815" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271816" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271817" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271818" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271819" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271820" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271821" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271822" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271823" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271824" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271825" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271826" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271827" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271828" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271829" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271830" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271831" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271832" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271833" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271834" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271835" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271836" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271839" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271840" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271841" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271842" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271845" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271846" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271849" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271850" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271851" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271852" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271854" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271855" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271856" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271857" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271858" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271860" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271861" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271862" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271864" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271865" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271866" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271867" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271868" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271869" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271870" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271871" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271872" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271873" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271874" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271875" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271876" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271877" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271878" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271879" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271880" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271881" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271882" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271883" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271884" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271885" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271886" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-278952" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279935" selected="true" />
+      </xccdf:Profile>
+      <xccdf:Profile id="xccdf_mil.disa.stig_profile_MAC-3_Public">
+        <xccdf:title>III - Administrative Public</xccdf:title>
+        <xccdf:description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</xccdf:description>
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271432" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271433" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271434" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271435" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271436" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271437" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271438" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271440" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271441" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271442" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271443" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271444" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271445" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271446" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271447" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271448" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271449" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271450" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271452" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271453" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271454" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271456" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271458" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271459" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271460" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271461" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271462" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271463" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271464" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271465" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271466" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271467" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271468" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271469" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271470" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271474" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271475" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271476" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271477" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271482" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271483" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271484" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271485" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271486" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271487" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271488" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271489" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271490" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271491" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271493" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271494" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271495" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271496" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271501" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271502" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271503" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271504" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271505" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271506" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271507" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271508" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271509" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271510" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271511" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271512" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271513" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271514" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271515" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271516" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271517" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271518" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271519" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271520" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271521" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271522" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271523" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271524" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271525" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271527" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271528" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271529" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271530" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271531" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271532" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271533" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271534" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271535" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271536" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271537" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271538" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271539" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271540" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271541" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271542" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271543" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271544" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271545" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271546" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271547" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271548" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271549" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271550" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271551" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271552" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271553" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271554" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271555" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271556" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271557" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271558" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271559" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271560" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271561" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271562" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271563" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271564" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271565" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271566" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271567" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271568" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271569" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271570" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271571" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271572" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271573" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271574" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271575" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271576" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271577" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271578" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271579" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271580" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271581" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271582" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271583" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271584" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271585" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271586" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271587" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271588" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271589" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271590" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271591" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271592" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271593" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271594" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271595" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271596" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271597" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271598" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271599" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271600" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271601" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271602" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271603" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271607" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271608" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271609" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271610" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271611" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271612" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271613" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271614" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271615" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271616" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271617" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271618" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271619" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271620" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271621" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271622" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271623" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271624" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271625" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271626" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271627" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271628" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271629" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271630" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271631" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271632" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271633" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271634" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271635" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271636" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271637" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271638" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271639" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271641" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271642" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271643" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271647" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271648" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271649" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271650" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271651" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271652" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271653" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271654" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271655" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271656" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271657" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271658" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271659" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271660" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271661" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271662" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271663" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271664" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271665" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271666" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271667" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271668" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271669" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271670" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271678" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271679" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271680" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271681" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271682" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271683" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271684" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271685" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271686" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271687" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271688" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271690" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271691" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271693" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271694" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271695" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271696" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271697" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271698" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271700" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271703" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271704" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271705" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271706" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271707" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271708" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271709" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271710" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271711" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271712" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271713" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271714" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271715" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271716" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271717" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271718" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271719" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271720" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271721" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271722" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271723" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271724" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271725" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271726" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271727" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271728" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271729" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271730" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271731" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271732" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271733" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271734" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271735" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271736" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271737" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271738" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271739" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271740" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271741" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271742" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271743" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271745" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271746" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271747" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271748" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271749" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271750" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271751" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271752" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271753" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271754" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271755" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271757" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271758" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271759" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271761" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271763" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271766" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271768" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271771" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271772" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271773" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271774" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271775" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271776" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271777" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271778" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271782" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271784" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271786" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271787" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271788" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271789" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271790" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271791" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271792" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271793" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271794" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271795" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271796" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271797" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271798" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271799" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271800" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271801" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271802" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271803" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271804" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271805" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271806" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271807" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271808" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271809" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271810" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271811" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271812" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271813" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271814" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271815" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271816" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271817" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271818" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271819" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271820" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271821" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271822" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271823" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271824" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271825" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271826" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271827" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271828" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271829" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271830" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271831" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271832" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271833" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271834" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271835" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271836" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271839" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271840" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271841" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271842" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271845" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271846" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271849" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271850" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271851" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271852" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271854" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271855" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271856" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271857" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271858" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271860" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271861" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271862" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271864" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271865" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271866" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271867" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271868" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271869" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271870" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271871" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271872" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271873" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271874" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271875" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271876" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271877" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271878" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271879" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271880" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271881" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271882" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271883" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271884" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271885" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271886" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-278952" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279935" selected="true" />
+      </xccdf:Profile>
+      <xccdf:Profile id="xccdf_mil.disa.stig_profile_MAC-3_Sensitive">
+        <xccdf:title>III - Administrative Sensitive</xccdf:title>
+        <xccdf:description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</xccdf:description>
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271432" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271433" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271434" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271435" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271436" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271437" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271438" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271440" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271441" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271442" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271443" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271444" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271445" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271446" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271447" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271448" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271449" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271450" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271452" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271453" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271454" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271456" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271458" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271459" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271460" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271461" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271462" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271463" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271464" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271465" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271466" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271467" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271468" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271469" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271470" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271474" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271475" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271476" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271477" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271482" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271483" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271484" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271485" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271486" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271487" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271488" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271489" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271490" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271491" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271493" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271494" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271495" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271496" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271501" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271502" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271503" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271504" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271505" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271506" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271507" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271508" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271509" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271510" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271511" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271512" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271513" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271514" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271515" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271516" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271517" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271518" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271519" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271520" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271521" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271522" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271523" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271524" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271525" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271527" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271528" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271529" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271530" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271531" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271532" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271533" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271534" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271535" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271536" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271537" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271538" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271539" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271540" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271541" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271542" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271543" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271544" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271545" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271546" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271547" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271548" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271549" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271550" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271551" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271552" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271553" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271554" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271555" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271556" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271557" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271558" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271559" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271560" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271561" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271562" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271563" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271564" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271565" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271566" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271567" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271568" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271569" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271570" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271571" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271572" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271573" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271574" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271575" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271576" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271577" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271578" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271579" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271580" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271581" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271582" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271583" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271584" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271585" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271586" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271587" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271588" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271589" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271590" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271591" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271592" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271593" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271594" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271595" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271596" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271597" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271598" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271599" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271600" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271601" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271602" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271603" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271607" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271608" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271609" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271610" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271611" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271612" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271613" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271614" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271615" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271616" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271617" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271618" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271619" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271620" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271621" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271622" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271623" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271624" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271625" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271626" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271627" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271628" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271629" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271630" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271631" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271632" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271633" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271634" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271635" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271636" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271637" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271638" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271639" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271641" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271642" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271643" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271647" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271648" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271649" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271650" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271651" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271652" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271653" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271654" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271655" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271656" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271657" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271658" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271659" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271660" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271661" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271662" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271663" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271664" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271665" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271666" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271667" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271668" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271669" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271670" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271678" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271679" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271680" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271681" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271682" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271683" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271684" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271685" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271686" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271687" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271688" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271690" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271691" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271693" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271694" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271695" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271696" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271697" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271698" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271700" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271703" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271704" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271705" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271706" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271707" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271708" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271709" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271710" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271711" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271712" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271713" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271714" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271715" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271716" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271717" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271718" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271719" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271720" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271721" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271722" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271723" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271724" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271725" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271726" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271727" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271728" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271729" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271730" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271731" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271732" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271733" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271734" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271735" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271736" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271737" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271738" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271739" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271740" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271741" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271742" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271743" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271745" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271746" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271747" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271748" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271749" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271750" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271751" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271752" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271753" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271754" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271755" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271757" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271758" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271759" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271761" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271763" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271766" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271768" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271771" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271772" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271773" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271774" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271775" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271776" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271777" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271778" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271782" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271784" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271786" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271787" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271788" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271789" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271790" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271791" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271792" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271793" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271794" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271795" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271796" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271797" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271798" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271799" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271800" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271801" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271802" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271803" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271804" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271805" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271806" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271807" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271808" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271809" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271810" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271811" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271812" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271813" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271814" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271815" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271816" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271817" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271818" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271819" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271820" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271821" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271822" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271823" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271824" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271825" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271826" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271827" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271828" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271829" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271830" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271831" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271832" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271833" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271834" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271835" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271836" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271839" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271840" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271841" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271842" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271845" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271846" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271849" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271850" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271851" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271852" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271854" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271855" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271856" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271857" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271858" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271860" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271861" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271862" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271864" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271865" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271866" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271867" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271868" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271869" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271870" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271871" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271872" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271873" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271874" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271875" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271876" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271877" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271878" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271879" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271880" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271881" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271882" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271883" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271884" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271885" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-271886" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-278952" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279935" selected="true" />
+      </xccdf:Profile>
+      <xccdf:Profile id="xccdf_mil.disa.stig_profile_Disable_Slow_Rules">
+        <xccdf:title>Disable Slow Rules</xccdf:title>
+        <xccdf:description>This profile disables rules known to have poor performance in some environments, such as systems with large numbers of user accounts.</xccdf:description>
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271827r1092193_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271789r1134863_rule" selected="false" />
+      </xccdf:Profile>
+      <xccdf:Profile id="xccdf_mil.disa.stig_profile_CAT_I_Only">
+        <xccdf:title>CAT I Only</xccdf:title>
+        <xccdf:description>This profile only includes rules that are Severity Category I.</xccdf:description>
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271679r1091749_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271598r1092588_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271669r1155336_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271739r1091929_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271750r1091962_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271583r1091461_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271469r1091119_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271814r1092154_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271748r1117266_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271703r1091821_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271825r1092187_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271798r1092106_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271476r1091140_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271533r1092486_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271668r1091716_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271573r1092564_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271846r1092250_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271487r1091173_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271555r1092530_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271880r1092352_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271491r1091185_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271552r1092524_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271593r1092580_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271528r1092476_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271570r1092558_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271803r1092121_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271521r1091275_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271716r1091860_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271698r1091806_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271768r1092016_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271784r1092064_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271461r1091095_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271624r1091584_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271547r1092514_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271850r1092262_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271586r1092576_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271613r1091551_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271710r1092596_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271444r1091044_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271506r1091230_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271635r1137691_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271727r1091893_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271510r1091242_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271589r1091479_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271861r1092295_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271795r1092097_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271827r1092193_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271720r1091872_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271654r1091674_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271772r1092028_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271560r1092540_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271643r1091641_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271761r1091995_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271433r1091011_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271576r1092570_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271816r1092160_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271875r1092337_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271568r1092556_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271474r1091134_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271432r1091008_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271808r1092136_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271577r1091443_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271737r1094967_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271581r1091455_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271708r1092594_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271864r1092304_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271876r1092641_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271684r1091764_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271734r1091914_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271626r1091590_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271812r1092148_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271631r1091605_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271855r1092277_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271548r1092516_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271660r1091692_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271493r1091191_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271540r1092500_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271743r1092635_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271819r1092169_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271638r1091626_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271709r1091839_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271733r1092598_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271520r1091272_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271529r1092478_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271877r1092343_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271608r1091536_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271842r1092238_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271656r1091680_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271791r1134971_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271485r1092625_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271774r1092034_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271874r1092612_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271556r1092532_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271574r1092566_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271715r1091857_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271801r1092115_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271881r1092355_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271597r1092586_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271763r1092001_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271612r1091548_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271866r1092310_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271870r1092322_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271619r1091569_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271686r1091770_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271536r1092492_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271678r1091746_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271468r1091116_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271856r1092280_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271551r1092522_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271572r1092562_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271601r1091515_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271872r1092328_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271569r1155308_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271450r1092466_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271799r1092109_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271490r1092628_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271742r1091938_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271813r1092151_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271642r1092593_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271518r1091266_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271537r1092494_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271543r1092506_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271804r1092124_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271458r1091086_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271704r1091824_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271596r1091500_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271561r1092542_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271682r1091758_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271851r1092265_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271522r1091278_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271470r1092618_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271697r1091803_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271649r1155334_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271509r1091239_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271534r1092488_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271845r1092247_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271594r1155314_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271625r1091587_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271719r1091869_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271860r1092292_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271794r1092094_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271653r1091671_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271771r1092025_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271729r1155325_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271728r1091896_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271790r1134866_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271820r1092172_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271434r1091014_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271530r1092480_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271553r1092526_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271828r1092196_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271475r1091137_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271685r1091767_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271566r1092552_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271641r1091635_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271637r1091623_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271735r1091917_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271747r1117266_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271865r1092307_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271693r1091791_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271539r1092498_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271590r1091482_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271632r1091608_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271811r1092145_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271496r1091200_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271690r1092634_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271854r1092274_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271595r1155316_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271483r1091161_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271558r1092536_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271567r1092554_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271807r1092133_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271627r1091593_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271449r1091059_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271515r1091257_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271609r1091539_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271559r1092538_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271531r1092482_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271802r1092118_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271599r1134856_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271663r1091701_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271436r1091020_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271532r1092484_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271836r1092637_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271830r1092202_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271857r1155339_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271477r1091143_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271544r1092508_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271618r1091566_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271622r1091578_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271753r1091971_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271789r1134863_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271687r1091773_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271584r1091464_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271650r1091662_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271867r1092313_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271659r1091689_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271839r1092229_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271871r1172843_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271482r1091158_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271467r1091113_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271489r1092627_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271585r1091467_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271688r1091776_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271805r1092127_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271542r1092504_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271505r1092629_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271852r1092608_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271738r1092600_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271741r1091935_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271681r1091755_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271670r1091722_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271448r1155297_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271459r1091089_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271571r1092560_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271652r1094966_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271705r1091827_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271833r1092607_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271777r1092043_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271666r1091710_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271718r1091866_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271696r1091800_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271766r1092010_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271538r1092496_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271884r1092364_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271517r1101885_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271565r1092550_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271550r1092520_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271873r1092331_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271759r1091989_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271587r1091473_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271519r1091269_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271582r1092574_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271501r1091215_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271435r1091017_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271722r1091878_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271829r1092199_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271600r1134858_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271694r1091794_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271796r1092100_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271732r1155329_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271615r1091557_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271602r1092590_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271508r1091236_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271512r1091248_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271835r1092217_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271554r1092528_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271575r1092568_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271651r1091665_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271806r1092130_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271579r1091449_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271636r1091620_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271557r1092534_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271563r1092546_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271821r1092175_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271711r1091845_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271817r1092163_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271793r1092605_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271549r1092518_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271486r1092626_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271495r1091197_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271725r1155318_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271628r1091596_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271810r1092142_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271465r1091107_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271578r1092572_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271700r1091812_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271883r1092361_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271879r1092349_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271514r1091254_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271658r1091686_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271840r1092232_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271724r1091884_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271776r1092040_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271788r1155305_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271441r1137691_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271617r1091563_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271664r1091704_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271443r1092463_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271541r1092502_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271621r1091575_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271662r1091698_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271787r1092073_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271610r1091542_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271647r1091653_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271562r1092544_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271754r1091974_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271437r1091023_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271503r1091221_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-278952r1135407_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271823r1092181_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271713r1091851_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271466r1091110_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271736r1091920_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271858r1092286_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271440r1092462_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271484r1092624_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271633r1091611_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271746r1117266_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271849r1092259_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271680r1091752_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271862r1092298_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271516r1091260_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271726r1091890_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271667r1091713_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271546r1092512_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271535r1092490_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271740r1091932_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271815r1092157_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271623r1091581_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271717r1091863_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271731r1155302_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271507r1091233_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271834r1092214_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271778r1092046_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271782r1092058_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271886r1092370_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271456r1091080_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271460r1091092_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271564r1092548_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271885r1092367_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271588r1091476_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271826r1092190_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271655r1091677_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271527r1092474_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271511r1091245_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271445r1091047_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271580r1091452_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271695r1091797_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271797r1092103_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271614r1091554_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271592r1091488_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271721r1091875_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271446r1155293_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271809r1092139_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271683r1091761_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271868r1172845_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271749r1117266_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271822r1092178_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271818r1092166_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271502r1091218_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-279935r1156358_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271755r1091977_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271629r1091599_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271630r1091602_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271603r1092592_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271792r1094968_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271745r1117266_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271464r1092459_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271639r1091629_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271712r1091848_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271591r1092578_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271494r1091194_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271878r1092346_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271513r1091251_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271607r1091533_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271730r1155327_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271800r1092112_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271453r1091071_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271488r1091176_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271442r1137691_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271616r1091560_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271620r1091572_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271841r1092235_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271657r1091683_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271775r1092037_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271723r1091881_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271869r1092319_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271661r1091695_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271786r1092070_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271611r1091545_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271832r1092208_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271648r1091656_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271773r1155299_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271714r1091854_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271665r1091707_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271882r1092358_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271447r1155295_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271824r1092184_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271545r1092510_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-271504r1091224_rule" selected="false" />
+      </xccdf:Profile>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271432">
+        <xccdf:title>SRG-OS-000341-GPOS-00132</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271432r1091008_rule" severity="low" weight="10.0">
+          <xccdf:version>OL09-00-000002</xccdf:version>
+          <xccdf:title>OL 9 must use a separate file system for the system audit data path.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Placing "/var/log/audit" in its own partition enables better separation between audit files and other system files and helps ensure that auditing cannot be halted due to the partition running out of space.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001849</xccdf:ident>
+          <xccdf:fixtext fixref="F-75389r1091007_fix">Migrate the system audit data path onto a separate file system.</xccdf:fixtext>
+          <xccdf:fix id="F-75389r1091007_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271432" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271433">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271433r1091011_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000003</xccdf:version>
+          <xccdf:title>OL 9 must be configured so that a separate file system must be used for user home directories (such as /home or an equivalent).</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Ensuring that "/home" is mounted on its own partition enables the setting of more restrictive mount options, and also helps ensure that users cannot trivially fill partitions used for log or audit data storage.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75390r1091010_fix">Migrate the "/home" directory onto a separate file system/partition.</xccdf:fixtext>
+          <xccdf:fix id="F-75390r1091010_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271433" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271434">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271434r1091014_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000004</xccdf:version>
+          <xccdf:title>OL 9 must use a separate file system for /tmp.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "/tmp" partition is used as temporary storage by many programs. Placing "/tmp" in its own partition enables the setting of more restrictive mount options, which can help protect programs that use it.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75391r1091013_fix">Migrate the "/tmp" path onto a separate file system.</xccdf:fixtext>
+          <xccdf:fix id="F-75391r1091013_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271434" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271435">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271435r1091017_rule" severity="low" weight="10.0">
+          <xccdf:version>OL09-00-000005</xccdf:version>
+          <xccdf:title>OL 9 must use a separate file system for /var.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Ensuring that "/var" is mounted on its own partition enables the setting of more restrictive mount options. This helps protect system services such as daemons or other programs which use it. It is not uncommon for the "/var" directory to contain world-writable directories installed by other software packages.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75392r1091016_fix">Migrate the "/var" path onto a separate file system.</xccdf:fixtext>
+          <xccdf:fix id="F-75392r1091016_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271435" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271436">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271436r1091020_rule" severity="low" weight="10.0">
+          <xccdf:version>OL09-00-000006</xccdf:version>
+          <xccdf:title>OL 9 must use a separate file system for /var/log.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Placing "/var/log" in its own partition enables better separation between log files and other files in "/var/".&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75393r1091019_fix">Migrate the "/var/log" path onto a separate file system.</xccdf:fixtext>
+          <xccdf:fix id="F-75393r1091019_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271436" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271437">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271437r1091023_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000007</xccdf:version>
+          <xccdf:title>OL 9 must use a separate file system for /var/tmp.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "/var/tmp" partition is used as temporary storage by many programs. Placing "/var/tmp" in its own partition enables the setting of more restrictive mount options, which can help protect programs that use it.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75394r1091022_fix">Migrate the "/var/tmp" path onto a separate file system.</xccdf:fixtext>
+          <xccdf:fix id="F-75394r1091022_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271437" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271438">
+        <xccdf:title>SRG-OS-000439-GPOS-00195</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271438r1155341_rule" severity="high" weight="10.0">
+          <xccdf:version>OL09-00-000010</xccdf:version>
+          <xccdf:title>OL 9 must be a vendor supported release.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;An operating system release is considered "supported" if the vendor continues to provide security patches for the product. With an unsupported release, it will not be possible to resolve security issues discovered in the system software.
+
+End Of Life dates for Oracle Linux 9 releases are as follows:
+Current end of Premier Support for Oracle Linux 9 is June 2032.
+Current end of Extended Support for Oracle Linux 9 is June 2035. 
+
+Each minor version reaches end of life when the new version is released.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002605</xccdf:ident>
+          <xccdf:fixtext fixref="F-75395r1091025_fix">Upgrade OL 9 to a supported version.</xccdf:fixtext>
+          <xccdf:fix id="F-75395r1091025_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271438" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271440">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271440r1092462_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000020</xccdf:version>
+          <xccdf:title>OL 9 must be configured so that the graphical display manager is not the default target unless approved.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Unnecessary service packages must not be installed to decrease the attack surface of the system. Graphical display managers have a long history of security vulnerabilities and must not be used unless approved and documented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75397r1091031_fix">Configure OL 9 to boot to the command line.
+
+Set the default target to multi-user with the following command:
+$ sudo systemctl set-default multi-user.target
+
+If there is an operational requirement for a graphical user interface, document it with the ISSO.</xccdf:fixtext>
+          <xccdf:fix id="F-75397r1091031_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271440" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271441">
+        <xccdf:title>SRG-OS-000080-GPOS-00048</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271441r1137691_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000025</xccdf:version>
+          <xccdf:title>OL 9 must require authentication to access emergency mode.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DOD-approved PKIs, all DOD systems (e.g., web servers and web portals) must be properly configured to incorporate access control methods that do not rely solely on the possession of a certificate for access. Successful authentication must not automatically give an entity access to an asset or security boundary. Authorization procedures and controls must be implemented to ensure each authenticated entity also has a validated and current authorization. Authorization is the process of determining whether an entity, once authenticated, is permitted to access a specific asset. Information systems use access control policies and enforcement mechanisms to implement this requirement.
+
+This requirement prevents attackers with physical access from trivially bypassing security on the machine and gaining root access. Such accesses are further prevented by configuring the bootloader password.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000213</xccdf:ident>
+          <xccdf:fixtext fixref="F-75398r1091034_fix">Configure OL 9 to require authentication for emergency mode.
+
+Add or modify the following line in the "/usr/lib/systemd/system/emergency.service" file:
+
+ExecStart=-/usr/lib/systemd/systemd-sulogin-shell emergency</xccdf:fixtext>
+          <xccdf:fix id="F-75398r1091034_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271441" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271442">
+        <xccdf:title>SRG-OS-000080-GPOS-00048</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271442r1137691_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000030</xccdf:version>
+          <xccdf:title>OL 9 must require authentication to access single-user mode.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DOD-approved PKIs, all DOD systems (e.g., web servers and web portals) must be properly configured to incorporate access control methods that do not rely solely on the possession of a certificate for access. Successful authentication must not automatically give an entity access to an asset or security boundary. Authorization procedures and controls must be implemented to ensure each authenticated entity also has a validated and current authorization. Authorization is the process of determining whether an entity, once authenticated, is permitted to access a specific asset. Information systems use access control policies and enforcement mechanisms to implement this requirement.
+
+This requirement prevents attackers with physical access from trivially bypassing security on the machine and gaining root access. Such accesses are further prevented by configuring the bootloader password.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000213</xccdf:ident>
+          <xccdf:fixtext fixref="F-75399r1091037_fix">Configure OL 9 to require authentication for single-user mode.
+
+Add or modify the following line in the "/usr/lib/systemd/system/rescue.service" file:
+
+ExecStart=-/usr/lib/systemd/systemd-sulogin-shell rescue</xccdf:fixtext>
+          <xccdf:fix id="F-75399r1091037_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271442" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271443">
+        <xccdf:title>SRG-OS-000095-GPOS-00049</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271443r1092463_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000040</xccdf:version>
+          <xccdf:title>OL 9 must be configured to disable the Asynchronous Transfer Mode (ATM) kernel module.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Disabling ATM protects the system against exploitation of any flaws in its implementation.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
+          <xccdf:fixtext fixref="F-75400r1091040_fix">Configure OL 9 to prevent the atm kernel module from being loaded.
+
+Add the following line to the file /etc/modprobe.d/atm.conf (or create atm.conf if it does not exist):
+
+install atm /bin/false
+blacklist atm</xccdf:fixtext>
+          <xccdf:fix id="F-75400r1091040_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271443" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271444">
+        <xccdf:title>SRG-OS-000095-GPOS-00049</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271444r1091044_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000041</xccdf:version>
+          <xccdf:title>OL 9 must be configured to disable the Controller Area Network (CAN) kernel module.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Disabling CAN protects the system against exploitation of any flaws in its implementation.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
+          <xccdf:fixtext fixref="F-75401r1091043_fix">Configure OL 9 to prevent the can kernel module from being loaded.
+
+Add the following line to the file /etc/modprobe.d/can.conf (or create atm.conf if it does not exist):
+
+install can /bin/false
+blacklist can</xccdf:fixtext>
+          <xccdf:fix id="F-75401r1091043_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271444" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271445">
+        <xccdf:title>SRG-OS-000095-GPOS-00049</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271445r1091047_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000042</xccdf:version>
+          <xccdf:title>OL 9 must be configured to disable the FireWire kernel module.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Disabling firewire protects the system against exploitation of any flaws in its implementation.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
+          <xccdf:fixtext fixref="F-75402r1091046_fix">Configure OL 9 to prevent the firewire-core kernel module from being loaded.
+
+Add the following line to the file /etc/modprobe.d/firewire-core.conf (or create firewire-core.conf if it does not exist):
+
+install firewire-core /bin/true
+blacklist firewire-core</xccdf:fixtext>
+          <xccdf:fix id="F-75402r1091046_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271445" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271446">
+        <xccdf:title>SRG-OS-000095-GPOS-00049</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271446r1155293_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000043</xccdf:version>
+          <xccdf:title>OL 9 must disable the Stream Control Transmission Protocol (SCTP) kernel module.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+
+Failing to disconnect unused protocols can result in a system compromise.
+
+The SCTP is a transport layer protocol, designed to support the idea of message-oriented communication, with several streams of messages within one connection. Disabling SCTP protects the system against exploitation of any flaws in its implementation.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
+          <xccdf:fixtext fixref="F-75403r1155292_fix">Configure OL 9 to prevent the sctp kernel module from being loaded.
+
+Add the following line to the file /etc/modprobe.d/sctp.conf (or create sctp.conf if it does not exist):
+
+install sctp /bin/false
+blacklist sctp</xccdf:fixtext>
+          <xccdf:fix id="F-75403r1155292_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271446" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271447">
+        <xccdf:title>SRG-OS-000095-GPOS-00049</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271447r1155295_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000044</xccdf:version>
+          <xccdf:title>OL 9 must disable the Transparent Inter Process Communication (TIPC) kernel module.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+
+Failing to disconnect unused protocols can result in a system compromise.
+
+The TIPC is a protocol that is specially designed for intra-cluster communication. It can be configured to transmit messages either on UDP or directly across Ethernet. Message delivery is sequence guaranteed, loss free, and flow controlled. Disabling TIPC protects the system against exploitation of any flaws in its implementation.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
+          <xccdf:fixtext fixref="F-75404r1091052_fix">Configure OL 9 to prevent the tipc kernel module from being loaded.
+
+Add the following line to the file /etc/modprobe.d/tipc.conf (or create tipc.conf if it does not exist):
+
+install tipc /bin/false
+blacklist tipc</xccdf:fixtext>
+          <xccdf:fix id="F-75404r1091052_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271447" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271448">
+        <xccdf:title>SRG-OS-000095-GPOS-00049</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271448r1155297_rule" severity="low" weight="10.0">
+          <xccdf:version>OL09-00-000045</xccdf:version>
+          <xccdf:title>OL 9 must disable mounting of cramfs.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+
+Removing support for unneeded filesystem types reduces the local attack surface of the server.
+
+Compressed ROM/RAM file system (or cramfs) is a read-only file system designed for simplicity and space-efficiency. It is mainly used in embedded and small-footprint systems.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
+          <xccdf:fixtext fixref="F-75405r1091055_fix">Configure OL 9 to prevent the cramfs kernel module from being loaded. 
+
+Add the following line to the file /etc/modprobe.d/cramfs.conf (or create blacklist.conf if it does not exist):
+
+install cramfs /bin/false
+blacklist cramfs
+
+Reboot the system for the settings to take effect.</xccdf:fixtext>
+          <xccdf:fix id="F-75405r1091055_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271448" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271449">
+        <xccdf:title>SRG-OS-000095-GPOS-00049</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271449r1091059_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000046</xccdf:version>
+          <xccdf:title>OL 9 Bluetooth must be disabled.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;This requirement applies to wireless peripheral technologies (e.g., wireless mice, keyboards, displays, etc.) used with OL 9 systems. Wireless peripherals (e.g., Wi-Fi/Bluetooth/IR keyboards, mice and pointing devices, and near field communications [NFC]) present a unique challenge by creating an open, unsecured port on a computer. Wireless peripherals must meet DOD requirements for wireless data transmission and be approved for use by the authorizing official (AO). Even though some wireless peripherals, such as mice and pointing devices, do not ordinarily carry information that need to be protected, modification of communications with these wireless peripherals may be used to compromise the OL 9 operating system.
+
+Satisfies: SRG-OS-000095-GPOS-00049, SRG-OS-000300-GPOS-00118&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001443</xccdf:ident>
+          <xccdf:fixtext fixref="F-75406r1091058_fix">Configure OL 9 to disable the Bluetooth adapter when not in use.
+
+Create or modify the "/etc/modprobe.d/bluetooth.conf" file with the following line:
+
+install bluetooth /bin/false
+blacklist bluetooth
+
+Reboot the system for the settings to take effect.</xccdf:fixtext>
+          <xccdf:fix id="F-75406r1091058_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271449" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271450">
+        <xccdf:title>SRG-OS-000114-GPOS-00059</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271450r1092466_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000047</xccdf:version>
+          <xccdf:title>OL 9 must be configured to disable USB mass storage.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;USB mass storage permits easy introduction of unknown devices, thereby facilitating malicious activity.
+
+Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000778</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001958</xccdf:ident>
+          <xccdf:fixtext fixref="F-75407r1092465_fix">Configure OL 9 to prevent the usb-storage kernel module from being loaded.
+
+Add the following line to the file /etc/modprobe.d/usb-storage.conf (or create usb-storage.conf if it does not exist):
+
+install usb-storage /bin/false
+blacklist usb-storage</xccdf:fixtext>
+          <xccdf:fix id="F-75407r1092465_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271450" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271452">
+        <xccdf:title>SRG-OS-000445-GPOS-00199</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271452r1091068_rule" severity="high" weight="10.0">
+          <xccdf:version>OL09-00-000060</xccdf:version>
+          <xccdf:title>OL 9 must use a Linux Security Module configured to enforce limits on system services.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without verification of the security functions, security functions may not operate correctly and the failure may go unnoticed. Security function is defined as the hardware, software, and/or firmware of the information system responsible for enforcing the system security policy and supporting the isolation of code and data on which the protection is based. Security functionality includes, but is not limited to, establishing system accounts, configuring access authorizations (i.e., permissions, privileges), setting events to be audited, and setting intrusion detection parameters.
+
+This requirement applies to operating systems performing security function verification/testing and/or systems and environments that require this functionality.
+
+Satisfies: SRG-OS-000445-GPOS-00199, SRG-OS-000134-GPOS-00068&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002696</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001084</xccdf:ident>
+          <xccdf:fixtext fixref="F-75409r1091067_fix">Configure OL 9 to verify correct operation of security functions.
+
+Edit the file "/etc/selinux/config" and add or modify the following line:
+
+ SELINUX=enforcing 
+
+A reboot is required for the changes to take effect.</xccdf:fixtext>
+          <xccdf:fix id="F-75409r1091067_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271452" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271453">
+        <xccdf:title>SRG-OS-000445-GPOS-00199</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271453r1091071_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000065</xccdf:version>
+          <xccdf:title>OL 9 must enable the SELinux targeted policy.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Setting the SELinux policy to "targeted" or a more specialized policy ensures the system will confine processes that are likely to be targeted for exploitation, such as network or system services.
+
+Note: During the development or debugging of SELinux modules, it is common to temporarily place nonproduction systems in "permissive" mode. In such temporary cases, SELinux policies should be developed, and once work is completed, the system should be reconfigured to "targeted".&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002696</xccdf:ident>
+          <xccdf:fixtext fixref="F-75410r1091070_fix">Configure OL 9 to use the targetd SELINUX policy.
+
+Edit the file "/etc/selinux/config" and add or modify the following line:
+
+ SELINUXTYPE=targeted 
+
+A reboot is required for the changes to take effect.</xccdf:fixtext>
+          <xccdf:fix id="F-75410r1091070_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271453" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271454">
+        <xccdf:title>SRG-OS-000033-GPOS-00014</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271454r1092458_rule" severity="high" weight="10.0">
+          <xccdf:version>OL09-00-000070</xccdf:version>
+          <xccdf:title>OL 9 must enable FIPS mode.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Use of weak or untested encryption algorithms undermines the purposes of using encryption to protect data. The operating system must implement cryptographic modules adhering to the higher standards approved by the federal government since this provides assurance they have been tested and validated. This includes NIST FIPS-validated cryptography for the following: Provisioning digital signatures, generating cryptographic hashes, and to protect data requiring data-at-rest protections in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, and standards.
+
+Satisfies: SRG-OS-000033-GPOS-00014, SRG-OS-000125-GPOS-00065, SRG-OS-000396-GPOS-00176, SRG-OS-000423-GPOS-00187, SRG-OS-000478-GPOS-00223&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000068</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000877</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002450</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002418</xccdf:ident>
+          <xccdf:fixtext fixref="F-75411r1092458_fix">Configure OL 9 to implement FIPS mode with the following command:
+
+$ sudo fips-mode-setup --enable
+
+Reboot the system for the changes to take effect.</xccdf:fixtext>
+          <xccdf:fix id="F-75411r1092458_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271454" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271456">
+        <xccdf:title>SRG-OS-000095-GPOS-00049</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271456r1091080_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000100</xccdf:version>
+          <xccdf:title>OL 9 must not have the nfs-utils package installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;"nfs-utils" provides a daemon for the kernel NFS server and related tools. This package also contains the "showmount" program. "showmount" queries the mount daemon on a remote host for information about the Network File System (NFS) server on the remote host. For example, "showmount" can display the clients that are mounted on that host.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
+          <xccdf:fixtext fixref="F-75413r1091079_fix">Remove the nfs-utils package with the following command:
+
+$ sudo dnf remove nfs-utils</xccdf:fixtext>
+          <xccdf:fix id="F-75413r1091079_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271456" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271458">
+        <xccdf:title>SRG-OS-000095-GPOS-00049</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271458r1091086_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000110</xccdf:version>
+          <xccdf:title>OL 9 must not have the telnet-server package installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities are often overlooked and therefore, may remain unsecure. They increase the risk to the platform by providing additional attack vectors.
+
+The telnet service provides an unencrypted remote access service, which does not provide for the confidentiality and integrity of user passwords or the remote session. If a privileged user were to login using this service, the privileged user password could be compromised.
+
+Removing the "telnet-server" package decreases the risk of accidental (or intentional) activation of the telnet service.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
+          <xccdf:fixtext fixref="F-75415r1091085_fix">Remove the telnet-server package with the following command:
+
+$ sudo dnf remove telnet-server</xccdf:fixtext>
+          <xccdf:fix id="F-75415r1091085_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271458" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271459">
+        <xccdf:title>SRG-OS-000095-GPOS-00049</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271459r1091089_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000115</xccdf:version>
+          <xccdf:title>OL 9 must not have the gssproxy package installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore, may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+
+Operating systems are capable of providing a wide variety of functions and services. Some of the functions and services provided by default may not be necessary to support essential organizational operations (e.g., key missions, functions).
+
+The gssproxy package is a proxy for GSS API credential handling and could expose secrets on some networks. It is not needed for normal function of the OS.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxNoNFSMounts" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
+          <xccdf:fixtext fixref="F-75416r1091088_fix">Remove the gssproxy package with the following command:
+
+$ sudo dnf remove gssproxy</xccdf:fixtext>
+          <xccdf:fix id="F-75416r1091088_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271459" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271460">
+        <xccdf:title>SRG-OS-000095-GPOS-00049</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271460r1091092_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000120</xccdf:version>
+          <xccdf:title>OL 9 must not have the iprutils package installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+
+Operating systems are capable of providing a wide variety of functions and services. Some of the functions and services, provided by default, may not be necessary to support essential organizational operations (e.g., key missions, functions).
+
+The iprutils package provides a suite of utilities to manage and configure SCSI devices supported by the ipr SCSI storage device driver.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
+          <xccdf:fixtext fixref="F-75417r1091091_fix">Remove the iprutils package with the following command:
+
+$ sudo dnf remove iprutils</xccdf:fixtext>
+          <xccdf:fix id="F-75417r1091091_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271460" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271461">
+        <xccdf:title>SRG-OS-000095-GPOS-00049</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271461r1091095_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000125</xccdf:version>
+          <xccdf:title>OL 9 must not have the tuned package installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+
+Operating systems are capable of providing a wide variety of functions and services. Some of the functions and services, provided by default, may not be necessary to support essential organizational operations (e.g., key missions, functions).
+
+The tuned package contains a daemon that tunes the system settings dynamically. It does so by monitoring the usage of several system components periodically. Based on that information, components will then be put into lower or higher power savings modes to adapt to the current usage. The tuned package is not needed for normal OS operations.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
+          <xccdf:fixtext fixref="F-75418r1091094_fix">Remove the tuned package with the following command:
+
+$ sudo dnf remove tuned</xccdf:fixtext>
+          <xccdf:fix id="F-75418r1091094_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271461" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271462">
+        <xccdf:title>SRG-OS-000074-GPOS-00042</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271462r1091098_rule" severity="high" weight="10.0">
+          <xccdf:version>OL09-00-000130</xccdf:version>
+          <xccdf:title>OL 9 must not have a File Transfer Protocol (FTP) server package installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The FTP service provides an unencrypted remote access that does not provide for the confidentiality and integrity of user passwords or the remote session. If a privileged user were to log on using this service, the privileged user password could be compromised. SSH or other encrypted file transfer methods must be used in place of this service.
+
+Removing the "vsftpd" package decreases the risk of accidental activation.
+
+Satisfies: SRG-OS-000074-GPOS-00042, SRG-OS-000095-GPOS-00049&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000197</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
+          <xccdf:fixtext fixref="F-75419r1091097_fix">Remove the ftp package can be removed with the following command (using vsftpd as an example):
+
+$ sudo dnf remove vsftpd</xccdf:fixtext>
+          <xccdf:fix id="F-75419r1091097_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271462" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271463">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271463r1091101_rule" severity="high" weight="10.0">
+          <xccdf:version>OL09-00-000135</xccdf:version>
+          <xccdf:title>OL 9 must not have a Trivial File Transfer Protocol (TFTP) server package installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Removing the "tftp-server" package decreases the risk of the accidental (or intentional) activation of tftp services.
+
+If TFTP is required for operational support (such as transmission of router configurations), its use must be documented with the information systems security manager (ISSM), restricted to only authorized personnel, and have access control rules established.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75420r1091100_fix">Remove the tftp package can be removed with the following command:
+
+$ sudo dnf remove tftp</xccdf:fixtext>
+          <xccdf:fix id="F-75420r1091100_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271463" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271464">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271464r1092459_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000140</xccdf:version>
+          <xccdf:title>OL 9 must not have the quagga package installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Quagga is a network routing software suite providing implementations of Open Shortest Path First (OSPF), Routing Information Protocol (RIP), Border Gateway Protocol (BGP) for Unix and Linux platforms.
+
+If there is no need to make the router software available, removing it provides a safeguard against its activation.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75421r1091103_fix">Remove the quagga package with the following command:
+
+$ sudo dnf remove quagga</xccdf:fixtext>
+          <xccdf:fix id="F-75421r1091103_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271464" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271465">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271465r1091107_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000145</xccdf:version>
+          <xccdf:title>OL 9 must not have a graphical display manager installed unless approved.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Unnecessary service packages must not be installed to decrease the attack surface of the system. Graphical display managers have a long history of security vulnerabilities and must not be used, unless approved and documented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000382</xccdf:ident>
+          <xccdf:fixtext fixref="F-75422r1091106_fix">Remove all xorg packages with the following command:
+
+Warning: If accessing the system through the graphical user interface, change to the multi-user.target with the following command:
+
+$ sudo systemctl isolate multi-user.target
+
+Warning: Removal of the graphical user interface will immediately render it useless. The following commands must not be run from a virtual terminal emulator in the graphical interface.
+
+$ sudo dnf remove "xorg*"
+$ sudo systemctl set-default multi-user.target
+
+If there is an operational requirement for a graphical user interface it must be documented with the ISSO.</xccdf:fixtext>
+          <xccdf:fix id="F-75422r1091106_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271465" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271466">
+        <xccdf:title>SRG-OS-000095-GPOS-00049</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271466r1091110_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000150</xccdf:version>
+          <xccdf:title>OL 9 must not have the sendmail package installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The sendmail software was not developed with security in mind, and its design prevents it from being effectively contained by SELinux. Postfix must be used instead.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
+          <xccdf:fixtext fixref="F-75423r1091109_fix">Remove the sendmail package with the following command:
+
+$ sudo dnf remove sendmail</xccdf:fixtext>
+          <xccdf:fix id="F-75423r1091109_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271466" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271467">
+        <xccdf:title>SRG-OS-000134-GPOS-00068</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271467r1091113_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000200</xccdf:version>
+          <xccdf:title>OL 9 must have policycoreutils package installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without verification of the security functions, security functions may not operate correctly and the failure may go unnoticed. Security function is defined as the hardware, software, and/or firmware of the information system responsible for enforcing the system security policy and supporting the isolation of code and data on which the protection is based. Security functionality includes, but is not limited to, establishing system accounts, configuring access authorizations (i.e., permissions, privileges), setting events to be audited, and setting intrusion detection parameters.
+
+Policycoreutils contains the policy core utilities that are required for basic operation of an SELinux-enabled system. These utilities include load_policy to load SELinux policies, setfile to label filesystems, newrole to switch roles, and run_init to run /etc/init.d scripts in the proper context.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001084</xccdf:ident>
+          <xccdf:fixtext fixref="F-75424r1091112_fix">Install the policycoreutils package with the following command:
+ 
+$ sudo dnf install -y policycoreutils</xccdf:fixtext>
+          <xccdf:fix id="F-75424r1091112_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271467" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271468">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271468r1091116_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000210</xccdf:version>
+          <xccdf:title>OL 9 policycoreutils-python-utils package must be installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The policycoreutils-python-utils package is required to operate and manage an SELinux environment and its policies. It provides utilities such as semanage, audit2allow, audit2why, chcat, and sandbox.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75425r1091115_fix">Install the policycoreutils-python-utils service package (if the policycoreutils-python-utils service is not already installed) with the following command:
+
+$ sudo dnf install -y policycoreutils-python-utils</xccdf:fixtext>
+          <xccdf:fix id="F-75425r1091115_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271468" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271469">
+        <xccdf:title>SRG-OS-000096-GPOS-00050</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271469r1091119_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000220</xccdf:version>
+          <xccdf:title>OL 9 must have the firewalld package installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Firewalld provides an easy and effective way to block/limit remote access to the system via ports, services, and protocols.
+
+Remote access services, such as those providing remote access to network devices and information systems, which lack automated control capabilities, increase risk and make remote user access management difficult at best.
+
+Remote access is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
+
+OL 9 functionality (e.g., SSH) must be capable of taking enforcement action if the audit reveals unauthorized activity. Automated control of remote access sessions allows organizations to ensure ongoing compliance with remote access policies by enforcing connection rules of remote access applications on a variety of information system components (e.g., servers, workstations, notebook computers, smartphones, and tablets).
+
+Satisfies: SRG-OS-000096-GPOS-00050, SRG-OS-000297-GPOS-00115, SRG-OS-000298-GPOS-00116, SRG-OS-000480-GPOS-00232&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000382</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002314</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002322</xccdf:ident>
+          <xccdf:fixtext fixref="F-75426r1091118_fix">Install the firewalld package with the following command:
+
+$ sudo dnf install -y firewalld</xccdf:fixtext>
+          <xccdf:fix id="F-75426r1091118_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271469" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271470">
+        <xccdf:title>SRG-OS-000096-GPOS-00050</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271470r1092618_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000221</xccdf:version>
+          <xccdf:title>OL 9 must be configured so that the firewalld service is active.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Firewalld provides an easy and effective way to block/limit remote access to the system via ports, services, and protocols.
+
+Remote access services, such as those providing remote access to network devices and information systems, which lack automated control capabilities, increase risk and make remote user access management difficult at best.
+
+Remote access is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
+
+OL 9 functionality (e.g., RDP) must be capable of taking enforcement action if the audit reveals unauthorized activity. Automated control of remote access sessions allows organizations to ensure ongoing compliance with remote access policies by enforcing connection rules of remote access applications on a variety of information system components (e.g., servers, workstations, notebook computers, smartphones, and tablets).
+
+Satisfies: SRG-OS-000096-GPOS-00050, SRG-OS-000297-GPOS-00115&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000382</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002314</xccdf:ident>
+          <xccdf:fixtext fixref="F-75427r1092617_fix">Enable the firewalld service with the following command:
+
+$ sudo systemctl enable --now firewalld
+
+Note: If firewalld is masked, run following command:
+
+sudo systemctl unmask firewalld</xccdf:fixtext>
+          <xccdf:fix id="F-75427r1092617_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271470" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271474">
+        <xccdf:title>SRG-OS-000324-GPOS-00125</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271474r1091134_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000230</xccdf:version>
+          <xccdf:title>OL 9 must have the sudo package installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;sudo is a program designed to allow a system administrator to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow system users to complete their work.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002235</xccdf:ident>
+          <xccdf:fixtext fixref="F-75431r1091133_fix">The sudo package can be installed with the following command:
+
+# dnf install -y sudo</xccdf:fixtext>
+          <xccdf:fix id="F-75431r1091133_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271474" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271475">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271475r1091137_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000231</xccdf:version>
+          <xccdf:title>OL 9 must use the invoking user's password for privilege escalation when using sudo.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;If the rootpw, targetpw, or runaspw flags are defined and not disabled, by default the operating system will prompt the invoking user for the "root" user password.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75432r1091136_fix">Configure OL 9 to use the invoking user's password for privilege escalation when using sudo. 
+
+Define the following in the Defaults section of the /etc/sudoers file or a single configuration file in the /etc/sudoers.d/ directory:
+
+Defaults !targetpw
+Defaults !rootpw
+Defaults !runaspw</xccdf:fixtext>
+          <xccdf:fix id="F-75432r1091136_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271475" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271476">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271476r1091140_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000232</xccdf:version>
+          <xccdf:title>OL 9 must restrict privilege elevation to authorized personnel.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;If the sudoers file is not configured correctly, any user defined on the system can initiate privileged actions on the target system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75433r1091139_fix">Remove the following entries from the /etc/sudoers file or configuration file under /etc/sudoers.d/:
+
+ALL     ALL=(ALL) ALL
+ALL     ALL=(ALL:ALL) ALL</xccdf:fixtext>
+          <xccdf:fix id="F-75433r1091139_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271476" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271477">
+        <xccdf:title>SRG-OS-000396-GPOS-00176</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271477r1091143_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000240</xccdf:version>
+          <xccdf:title>OL 9 must have the crypto-policies package installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Centralized cryptographic policies simplify applying secure ciphers across an operating system and the applications that run on that operating system. Use of weak or untested encryption algorithms undermines the purposes of using encryption to protect data.
+
+Satisfies: SRG-OS-000396-GPOS-00176, SRG-OS-000393-GPOS-00173, SRG-OS-000394-GPOS-00174&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002450</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002890</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-003123</xccdf:ident>
+          <xccdf:fixtext fixref="F-75434r1091142_fix">Install the crypto-policies package (if not already installed) with the following command:
+
+$ sudo dnf install -y crypto-policies</xccdf:fixtext>
+          <xccdf:fix id="F-75434r1091142_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271477" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271482">
+        <xccdf:title>SRG-OS-000423-GPOS-00187</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271482r1091158_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000250</xccdf:version>
+          <xccdf:title>OL 9 networked systems must have SSH installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without protection of the transmitted information, confidentiality and integrity may be compromised because unprotected communications can be intercepted and either read or altered. 
+
+This requirement applies to both internal and external networks and all types of information system components from which information can be transmitted (e.g., servers, mobile devices, notebook computers, printers, copiers, scanners, and facsimile machines). Communication paths outside the physical protection of a controlled boundary are exposed to the possibility of interception and modification. 
+
+Protecting the confidentiality and integrity of organizational information can be accomplished by physical means (e.g., employing physical distribution systems) or by logical means (e.g., employing cryptographic techniques). If physical means of protection are employed, then logical means (cryptography) do not have to be employed, and vice versa.
+
+Satisfies: SRG-OS-000423-GPOS-00187, SRG-OS-000424-GPOS-00188, SRG-OS-000425-GPOS-00189, SRG-OS-000426-GPOS-00190&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002418</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002421</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002420</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002422</xccdf:ident>
+          <xccdf:fixtext fixref="F-75439r1091157_fix">The openssh-server package can be installed with the following command:
+ 
+$ sudo dnf install -y openssh-server</xccdf:fixtext>
+          <xccdf:fix id="F-75439r1091157_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271482" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271483">
+        <xccdf:title>SRG-OS-000423-GPOS-00187</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271483r1091161_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000251</xccdf:version>
+          <xccdf:title>OL 9 networked systems must have and implement SSH to protect the confidentiality and integrity of transmitted and received information, as well as information during preparation for transmission.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without protection of the transmitted information, confidentiality and integrity may be compromised because unprotected communications can be intercepted and either read or altered. 
+
+This requirement applies to both internal and external networks and all types of information system components from which information can be transmitted (e.g., servers, mobile devices, notebook computers, printers, copiers, scanners, and facsimile machines). Communication paths outside the physical protection of a controlled boundary are exposed to the possibility of interception and modification. 
+
+Protecting the confidentiality and integrity of organizational information can be accomplished by physical means (e.g., employing physical distribution systems) or by logical means (e.g., employing cryptographic techniques). If physical means of protection are employed, then logical means (cryptography) do not have to be employed, and vice versa.
+
+Satisfies: SRG-OS-000423-GPOS-00187, SRG-OS-000424-GPOS-00188, SRG-OS-000425-GPOS-00189, SRG-OS-000426-GPOS-00190&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002418</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002421</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002420</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002422</xccdf:ident>
+          <xccdf:fixtext fixref="F-75440r1091160_fix">Enable the sshd service with the following command:
+
+$ systemctl enable --now sshd</xccdf:fixtext>
+          <xccdf:fix id="F-75440r1091160_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271483" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271484">
+        <xccdf:title>SRG-OS-000250-GPOS-00093</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271484r1092624_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000252</xccdf:version>
+          <xccdf:title>The OL 9 SSH daemon must be configured to use systemwide cryptographic policies.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
+
+Remote access (e.g., RDP) is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
+
+Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
+
+OL 9 incorporates systemwide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the /etc/sysconfig/sshd file. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/ directory.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001453</xccdf:ident>
+          <xccdf:fixtext fixref="F-75441r1092623_fix">Configure the OL 9 SSH daemon to use systemwide cryptographic policies by running the following commands:
+
+$ sudo dnf reinstall -y openssh-server</xccdf:fixtext>
+          <xccdf:fix id="F-75441r1092623_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271484" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271485">
+        <xccdf:title>SRG-OS-000250-GPOS-00093</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271485r1092625_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000254</xccdf:version>
+          <xccdf:title>OL 9 SSH server must be configured to use only ciphers employing FIPS 140-3 validated cryptographic hash algorithms to protect the confidentiality of SSH server connections.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
+
+Remote access (e.g., RDP) is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
+
+Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
+
+OL 9 incorporates systemwide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the /etc/sysconfig/sshd file. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/opensshserver.config file.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001453</xccdf:ident>
+          <xccdf:fixtext fixref="F-75442r1091166_fix">Configure the OL 9 SSH server to use only ciphers employing FIPS 140-3 approved algorithms.
+
+Reinstall crypto-policies with the following command:
+
+$ sudo dnf -y reinstall crypto-policies
+
+Set the crypto-policy to FIPS with the following command:
+
+$ sudo update-crypto-policies --set FIPS
+
+Setting system policy to FIPS
+
+Note: Systemwide crypto policies are applied on application startup. It is recommended to restart the system for the change of policies to fully take place.</xccdf:fixtext>
+          <xccdf:fix id="F-75442r1091166_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271485" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271486">
+        <xccdf:title>SRG-OS-000250-GPOS-00093</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271486r1092626_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000255</xccdf:version>
+          <xccdf:title>OL 9 SSH server must be configured to use only Message Authentication Codes (MACs) employing FIPS 140-3 validated cryptographic hash algorithms to protect the confidentiality of SSH server connections.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
+
+Remote access (e.g., RDP) is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
+
+Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
+
+OL 9 incorporates systemwide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the /etc/sysconfig/sshd file. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/opensshserver.config file.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001453</xccdf:ident>
+          <xccdf:fixtext fixref="F-75443r1091169_fix">Configure the OL 9 SSH server to use only MACs employing FIPS 140-3 approved algorithms.
+
+Reinstall crypto-policies with the following command:
+
+$ sudo dnf -y reinstall crypto-policies
+
+Set the crypto-policy to FIPS with the following command:
+
+$ sudo update-crypto-policies --set FIPS
+
+Setting system policy to FIPS
+
+Note: Systemwide crypto policies are applied on application startup. It is recommended to restart the system for the change of policies to fully take place.</xccdf:fixtext>
+          <xccdf:fix id="F-75443r1091169_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271486" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271487">
+        <xccdf:title>SRG-OS-000023-GPOS-00006</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271487r1091173_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000256</xccdf:version>
+          <xccdf:title>OL 9 must display the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system via a SSH logon.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The warning message reinforces policy awareness during the logon process and facilitates possible legal action against attackers. Alternatively, systems whose ownership should not be obvious should ensure usage of a banner that does not provide easy attribution.
+
+Satisfies: SRG-OS-000023-GPOS-00006, SRG-OS-000228-GPOS-00088&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000048</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001384</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001385</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001386</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001387</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001388</xccdf:ident>
+          <xccdf:fixtext fixref="F-75444r1091172_fix">Configure OL 9 to display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system via ssh.
+
+Edit the "etc/ssh/sshd_config" file or a file in "/etc/ssh/sshd_config.d" to uncomment the banner keyword and configure it to point to a file that will contain the logon banner (this file may be named differently or be in a different location if using a version of SSH that is provided by a third-party vendor).
+
+An example configuration line is:
+
+Banner /etc/issue</xccdf:fixtext>
+          <xccdf:fix id="F-75444r1091172_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271487" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271488">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271488r1091176_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000260</xccdf:version>
+          <xccdf:title>OL 9 must have the openssh-clients package installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;This package includes utilities to make encrypted connections and transfer files securely to SSH servers.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75445r1091175_fix">Install the openssh-clients package with the following command:
+ 
+$ sudo dnf install -y openssh-clients</xccdf:fixtext>
+          <xccdf:fix id="F-75445r1091175_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271488" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271489">
+        <xccdf:title>SRG-OS-000250-GPOS-00093</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271489r1092627_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000261</xccdf:version>
+          <xccdf:title>OL 9 SSH client must be configured to use only DOD-approved encryption ciphers employing FIPS 140-3 validated cryptographic hash algorithms to protect the confidentiality of SSH client connections.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
+
+Remote access (e.g., RDP) is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
+
+Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
+
+OL 9 incorporates systemwide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the /etc/sysconfig/sshd file. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/opensshserver.config file.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001453</xccdf:ident>
+          <xccdf:fixtext fixref="F-75446r1091178_fix">Configure the SSH client to use only ciphers employing FIPS 140-3 approved algorithms.
+
+Reinstall crypto-policies with the following command:
+
+$ sudo dnf -y reinstall crypto-policies
+
+Set the crypto-policy to FIPS with the following command:
+
+$ sudo update-crypto-policies --set FIPS
+
+Setting system policy to FIPS
+
+Note: Systemwide crypto policies are applied on application startup. It is recommended to restart the system for the change of policies to fully take place.</xccdf:fixtext>
+          <xccdf:fix id="F-75446r1091178_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271489" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271490">
+        <xccdf:title>SRG-OS-000250-GPOS-00093</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271490r1092628_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000262</xccdf:version>
+          <xccdf:title>OL 9 SSH client must be configured to use only DOD-approved Message Authentication Codes (MACs) employing FIPS 140-3 validated cryptographic hash algorithms to protect the confidentiality of SSH client connections.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
+
+Remote access (e.g., RDP) is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
+
+Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
+
+OL 9 incorporates systemwide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the /etc/sysconfig/sshd file. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/opensshserver.config file.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001453</xccdf:ident>
+          <xccdf:fixtext fixref="F-75447r1091181_fix">Configure the SSH client to use only MACs employing FIPS 140-3 approved algorithms.
+
+Reinstall crypto-policies with the following command:
+
+$ sudo dnf -y reinstall crypto-policies
+
+Set the crypto-policy to FIPS with the following command:
+
+$ sudo update-crypto-policies --set FIPS
+
+Setting system policy to FIPS
+
+Note: Systemwide crypto policies are applied on application startup. It is recommended to restart the system for the change of policies to fully take place.</xccdf:fixtext>
+          <xccdf:fix id="F-75447r1091181_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271490" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271491">
+        <xccdf:title>SRG-OS-000105-GPOS-00052</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271491r1091185_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000270</xccdf:version>
+          <xccdf:title>OL 9 must have the openssl-pkcs11 package installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without the use of multifactor authentication, the ease of access to privileged functions is greatly increased. Multifactor authentication requires using two or more factors to achieve authentication. A privileged account is defined as an information system account with authorizations of a privileged user. The DOD CAC with DOD-approved PKI is an example of multifactor authentication.
+
+Satisfies: SRG-OS-000105-GPOS-00052, SRG-OS-000375-GPOS-00160, SRG-OS-000376-GPOS-00161, SRG-OS-000377-GPOS-00162&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000765</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004046</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001953</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001954</xccdf:ident>
+          <xccdf:fixtext fixref="F-75448r1091184_fix">Install the openssl-pkcs11 package with the following command:
+ 
+$ sudo dnf install -y openssl-pkcs11</xccdf:fixtext>
+          <xccdf:fix id="F-75448r1091184_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271491" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271493">
+        <xccdf:title>SRG-OS-000705-GPOS-00150</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271493r1091191_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000285</xccdf:version>
+          <xccdf:title>OL 9 must have the SSSD package installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Using an authentication device, such as a CAC or token that is separate from the information system, ensures that even if the information system is compromised, that compromise will not affect credentials stored on the authentication device. 
+ 
+Multifactor solutions that require devices separate from information systems gaining access include, for example, hardware tokens providing time-based or challenge-response authenticators and smart cards such as the U.S. Government Personal Identity Verification card and the DOD Common Access Card. 
+ 
+A privileged account is defined as an information system account with authorizations of a privileged user. 
+ 
+Remote access is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless. 
+ 
+This requirement only applies to components where this is specific to the function of the device or has the concept of an organizational user (e.g., VPN, proxy capability). This does not apply to authentication for the purpose of configuring the device itself (management).
+
+Satisfies: SRG-OS-000705-GPOS-00150, SRG-OS-000105-GPOS-00052, SRG-OS-000106-GPOS-00053, SRG-OS-000107-GPOS-00054, SRG-OS-000108-GPOS-00055, SRG-OS-000375-GPOS-00160&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004046</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004047</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000765</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000766</xccdf:ident>
+          <xccdf:fixtext fixref="F-75450r1091190_fix">Install the SSSD package with the following command:
+
+$ sudo dnf install -y sssd</xccdf:fixtext>
+          <xccdf:fix id="F-75450r1091190_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271493" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271494">
+        <xccdf:title>SRG-OS-000705-GPOS-00150</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271494r1091194_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000286</xccdf:version>
+          <xccdf:title>OL 9 must use the SSSD package for multifactor authentication services.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Using an authentication device, such as a CAC or token that is separate from the information system, ensures that even if the information system is compromised, that compromise will not affect credentials stored on the authentication device. 
+ 
+Multifactor solutions that require devices separate from information systems gaining access include, for example, hardware tokens providing time-based or challenge-response authenticators and smart cards such as the U.S. Government Personal Identity Verification card and the DOD Common Access Card. 
+ 
+A privileged account is defined as an information system account with authorizations of a privileged user. 
+ 
+Without the use of multifactor authentication, the ease of access to privileged functions is greatly increased. 
+ 
+Multifactor authentication requires using two or more factors to achieve authentication. 
+ 
+Factors include:  
+1) Something a user knows (e.g., password/PIN); 
+2) Something a user has (e.g., cryptographic identification device, token); and 
+3) Something a user is (e.g., biometric). 
+ 
+A privileged account is defined as an information system account with authorizations of a privileged user. 
+ 
+Network access is defined as access to an information system by a user (or a process acting on behalf of a user) communicating through a network (e.g., local area network, wide area network, or the internet). 
+ 
+The DOD common access card (CAC) with DOD-approved PKI is an example of multifactor authentication.
+
+Satisfies: SRG-OS-000705-GPOS-00150, SRG-OS-000105-GPOS-00052, SRG-OS-000106-GPOS-00053, SRG-OS-000107-GPOS-00054, SRG-OS-000108-GPOS-00055, SRG-OS-000375-GPOS-00161&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004046</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004047</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000765</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000767</xccdf:ident>
+          <xccdf:fixtext fixref="F-75451r1091193_fix">Configure the sssd.service to start automatically on reboot with the following command: 
+ 
+$ sudo systemctl enable sssd.service 
+ 
+Ensure the sssd service is running: 
+ 
+$ sudo systemctl start sssd.service</xccdf:fixtext>
+          <xccdf:fix id="F-75451r1091193_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271494" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271495">
+        <xccdf:title>SRG-OS-000363-GPOS-00150</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271495r1091197_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000290</xccdf:version>
+          <xccdf:title>OL 9 must have the s-nail package installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The s-nail package provides the mail command required to allow sending email notifications of unauthorized configuration changes to designated personnel.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001744</xccdf:ident>
+          <xccdf:fixtext fixref="F-75452r1091196_fix">Install the s-nail package with the following command:
+
+$ sudo dnf install -y s-nail</xccdf:fixtext>
+          <xccdf:fix id="F-75452r1091196_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271495" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271496">
+        <xccdf:title>SRG-OS-000363-GPOS-00150</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271496r1091200_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000300</xccdf:version>
+          <xccdf:title>OL 9 must have the Advanced Intrusion Detection Environment (AIDE) package installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without verification of the security functions, security functions may not operate correctly, and the failure may go unnoticed. Security function is defined as the hardware, software, and/or firmware of the information system responsible for enforcing the system security policy and supporting the isolation of code and data on which the protection is based. Security functionality includes, but is not limited to, establishing system accounts, configuring access authorizations (i.e., permissions, privileges), setting events to be audited, and setting intrusion detection parameters.
+
+Satisfies: SRG-OS-000363-GPOS-00150, SRG-OS-000445-GPOS-00199&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001744</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002696</xccdf:ident>
+          <xccdf:fixtext fixref="F-75453r1091199_fix">Install AIDE, initialize it, and perform a manual check.
+
+Install AIDE:
+
+$ sudo dnf install -y aide
+
+Initialize AIDE:
+     
+$ sudo /usr/sbin/aide --init
+
+Example output:
+
+Start timestamp: 2023-06-05 10:09:04 -0600 (AIDE 0.16)
+AIDE initialized database at /var/lib/aide/aide.db.new.gz
+
+Number of entries:      86833
+
+---------------------------------------------------
+The attributes of the (uncompressed) database(s):
+---------------------------------------------------
+
+/var/lib/aide/aide.db.new.gz
+  MD5      : coZUtPHhoFoeD7+k54fUvQ==
+  SHA1     : DVpOEMWJwo0uPgrKZAygIUgSxeM=
+  SHA256   : EQiZH0XNEk001tcDmJa+5STFEjDb4MPE
+             TGdBJ/uvZKc=
+  SHA512   : 86KUqw++PZhoPK0SZvT3zuFq9yu9nnPP
+             toei0nENVELJ1LPurjoMlRig6q69VR8l
+             +44EwO9eYyy9nnbzQsfG1g==
+
+End timestamp: 2023-06-05 10:09:57 -0600 (run time: 0m 53s)
+
+The new database will need to be renamed to be read by AIDE:
+
+$ sudo mv /var/lib/aide/aide.db.new.gz /var/lib/aide/aide.db.gz
+
+Perform a manual check:
+
+$ sudo /usr/sbin/aide --check
+
+Example output:
+
+2023-06-05 10:16:08 -0600 (AIDE 0.16)
+AIDE found NO differences between database and filesystem. Looks okay!!</xccdf:fixtext>
+          <xccdf:fix id="F-75453r1091199_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271496" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271501">
+        <xccdf:title>SRG-OS-000355-GPOS-00143</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271501r1091215_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000310</xccdf:version>
+          <xccdf:title>OL 9 must have the chrony package installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Inaccurate time stamps make it more difficult to correlate events and can lead to an inaccurate analysis. Determining the correct time a particular event occurred on a system is critical when conducting forensic analysis and investigating system events. Sources outside the configured acceptable allowance (drift) may be inaccurate.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004923</xccdf:ident>
+          <xccdf:fixtext fixref="F-75458r1091214_fix">Install the chrony package with the following command:
+ 
+$ sudo dnf install -y chrony</xccdf:fixtext>
+          <xccdf:fix id="F-75458r1091214_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271501" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271502">
+        <xccdf:title>SRG-OS-000355-GPOS-00143</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271502r1091218_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000311</xccdf:version>
+          <xccdf:title>OL 9 must enable the chronyd service.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Inaccurate time stamps make it more difficult to correlate events and can lead to an inaccurate analysis. Determining the correct time a particular event occurred on a system is critical when conducting forensic analysis and investigating system events. Sources outside the configured acceptable allowance (drift) may be inaccurate.
+
+Synchronizing internal information system clocks provides uniformity of time stamps for information systems with multiple system clocks and systems connected over a network.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004923</xccdf:ident>
+          <xccdf:fixtext fixref="F-75459r1091217_fix">Enable the chronyd service with the following command:
+
+$ sudo systemctl enable --now chronyd</xccdf:fixtext>
+          <xccdf:fix id="F-75459r1091217_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271502" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271503">
+        <xccdf:title>SRG-OS-000378-GPOS-00163</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271503r1091221_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000320</xccdf:version>
+          <xccdf:title>OL 9 must have the USBGuard package installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The USBguard-daemon is the main component of the USBGuard software framework. It runs as a service in the background and enforces the USB device authorization policy for all USB devices. The policy is defined by a set of rules using a rule language described in the usbguard-rules.conf file. The policy and the authorization state of USB devices can be modified during runtime using the usbguard tool.
+
+The system administrator (SA) must work with the site information system security officer (ISSO) to determine a list of authorized peripherals and establish rules within the USBGuard software framework to allow only authorized devices.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001958</xccdf:ident>
+          <xccdf:fixtext fixref="F-75460r1091220_fix">Install the usbguard package with the following command:
+
+$ sudo dnf install -y usbguard</xccdf:fixtext>
+          <xccdf:fix id="F-75460r1091220_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271503" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271504">
+        <xccdf:title>SRG-OS-000378-GPOS-00163</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271504r1091224_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000321</xccdf:version>
+          <xccdf:title>OL 9 must enable the USBGuard package.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The USBguard-daemon is the main component of the USBGuard software framework. It runs as a service in the background and enforces the USB device authorization policy for all USB devices. The policy is defined by a set of rules using a rule language described in the usbguard-rules.conf file. The policy and the authorization state of USB devices can be modified during runtime using the usbguard tool.
+
+The system administrator (SA) must work with the site information system security officer (ISSO) to determine a list of authorized peripherals and establish rules within the USBGuard software framework to allow only authorized devices.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001958</xccdf:ident>
+          <xccdf:fixtext fixref="F-75461r1091223_fix">Enable the USBGuard service with the following command:
+
+$ sudo systemctl enable --now usbguard</xccdf:fixtext>
+          <xccdf:fix id="F-75461r1091223_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271504" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271505">
+        <xccdf:title>SRG-OS-000366-GPOS-00153</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271505r1092629_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000330</xccdf:version>
+          <xccdf:title>OL 9 must have the subscription-manager package installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Oracle Linux Manager, based on the Spacewalk open source software, helps automate Oracle Linux systems management. This enables users to control the system software life cycle from initial installation through maintenance, software configuration, upgrades, and eventual decommissioning. Oracle Linux Manager also helps automate a kickstart installation, system configuration, and maintenance tasks, which enables rapid deployment of proven and consistent software configurations for Oracle Linux systems.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-003992</xccdf:ident>
+          <xccdf:fixtext fixref="F-75462r1091226_fix">Install the oracle-linux-manager package with the following command:
+ 
+$ sudo dnf install -y oracle-linux-manager-client-release-el9</xccdf:fixtext>
+          <xccdf:fix id="F-75462r1091226_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271505" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271506">
+        <xccdf:title>SRG-OS-000370-GPOS-00155</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271506r1091230_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000340</xccdf:version>
+          <xccdf:title>OL 9 must have the fapolicy module installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The organization must identify authorized software programs and permit execution of authorized software. The process used to identify software programs that are authorized to execute on organizational information systems is commonly referred to as allowlisting.
+
+Using an allowlist provides a configuration management method for allowing the execution of only authorized software. Using only authorized software decreases risk by limiting the number of potential vulnerabilities. Verification of allowlisted software occurs prior to execution or at system startup.
+
+User home directories/folders may contain information of a sensitive nature. Nonprivileged users should coordinate any sharing of information with a system administrator (SA) through shared resources.
+
+OL 9 ships with many optional packages. One such package is a file access policy daemon called "fapolicyd". "fapolicyd" is a userspace daemon that determines access rights to files based on attributes of the process and file. It can be used to either blocklist or allowlist processes or file access.
+
+Proceed with caution with enforcing the use of this daemon. Improper configuration may render the system nonfunctional. The "fapolicyd" API is not namespace aware and can cause issues when launching or running containers.
+
+Satisfies: SRG-OS-000370-GPOS-00155, SRG-OS-000368-GPOS-00154&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001774</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
+          <xccdf:fixtext fixref="F-75463r1091229_fix">Install the fapolicyd package with the following command:
+ 
+$ sudo dnf install -y fapolicyd</xccdf:fixtext>
+          <xccdf:fix id="F-75463r1091229_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271506" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271507">
+        <xccdf:title>SRG-OS-000370-GPOS-00155</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271507r1091233_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000341</xccdf:version>
+          <xccdf:title>OL 9 must enable the fapolicy module.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The organization must identify authorized software programs and permit execution of authorized software. The process used to identify software programs that are authorized to execute on organizational information systems is commonly referred to as allowlisting.
+
+Using an allowlist provides a configuration management method for allowing the execution of only authorized software. Using only authorized software decreases risk by limiting the number of potential vulnerabilities. Verification of allowlisted software occurs prior to execution or at system startup.
+
+User home directories/folders may contain information of a sensitive nature. Nonprivileged users should coordinate any sharing of information with a system administrator (SA) through shared resources.
+
+OL 9 ships with many optional packages. One such package is a file access policy daemon called "fapolicyd". "fapolicyd" is a userspace daemon that determines access rights to files based on attributes of the process and file. It can be used to either blocklist or allowlist processes or file access.
+
+Proceed with caution with enforcing the use of this daemon. Improper configuration may render the system nonfunctional. The "fapolicyd" API is not namespace aware and can cause issues when launching or running containers.
+
+Satisfies: SRG-OS-000370-GPOS-00155, SRG-OS-000368-GPOS-00154&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001774</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
+          <xccdf:fixtext fixref="F-75464r1091232_fix">Enable the fapolicyd service with the following command:
+
+$ sudo systemctl enable --now fapolicyd</xccdf:fixtext>
+          <xccdf:fix id="F-75464r1091232_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271507" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271508">
+        <xccdf:title>SRG-OS-000479-GPOS-00224</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271508r1091236_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000350</xccdf:version>
+          <xccdf:title>OL 9 must have the rsyslog package installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;rsyslogd is a system utility providing support for message logging. Support for both internet and Unix domain sockets enables this utility to support both local and remote logging. Couple this utility with "gnutls" (which is a secure communications library implementing the SSL, TLS, and DTLS protocols), to create a method to securely encrypt and offload auditing.
+
+Satisfies: SRG-OS-000479-GPOS-00224, SRG-OS-000051-GPOS-00024&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001851</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000154</xccdf:ident>
+          <xccdf:fixtext fixref="F-75465r1091235_fix">The rsyslogd package can be installed with the following command:
+ 
+$ sudo dnf install -y rsyslogd</xccdf:fixtext>
+          <xccdf:fix id="F-75465r1091235_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271508" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271509">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271509r1091239_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000351</xccdf:version>
+          <xccdf:title>OL 9 must be configured so that the rsyslog service is active.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The rsyslog service must be running to provide logging services, which are essential to system administration.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75466r1091238_fix">Enable the rsyslog service with the following command:
+
+$ sudo systemctl enable --now rsyslog</xccdf:fixtext>
+          <xccdf:fix id="F-75466r1091238_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271509" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271510">
+        <xccdf:title>SRG-OS-000120-GPOS-00061</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271510r1091242_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000355</xccdf:version>
+          <xccdf:title>OL 9 must have the packages required for encrypting offloaded audit logs installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The rsyslog-gnutls package provides Transport Layer Security (TLS) support for the rsyslog daemon, which enables secure remote logging.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000803</xccdf:ident>
+          <xccdf:fixtext fixref="F-75467r1091241_fix">Install the rsyslog-gnutls package with the following command:
+ 
+$ sudo dnf install -y rsyslog-gnutls</xccdf:fixtext>
+          <xccdf:fix id="F-75467r1091241_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271510" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271511">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271511r1091245_rule" severity="low" weight="10.0">
+          <xccdf:version>OL09-00-000360</xccdf:version>
+          <xccdf:title>OL 9 must enable the hardware random number generator entropy gatherer service.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The most important characteristic of a random number generator is its randomness, namely its ability to deliver random numbers that are impossible to predict. Entropy in computer security is associated with the unpredictability of a source of randomness. The random source with high entropy tends to achieve a uniform distribution of random values. Random number generators are one of the most important building blocks of cryptosystems.
+
+The rngd service feeds random data from hardware device to kernel random device. Quality (nonpredictable) random number generation is important for several security functions (i.e., ciphers).&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75468r1091244_fix">Install the rng-tools package with the following command:
+
+$ sudo dnf install -y rng-tools
+
+Enable the rngd service run the following command:
+
+$ sudo systemctl enable --now rngd</xccdf:fixtext>
+          <xccdf:fix id="F-75468r1091244_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271511" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271512">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271512r1091248_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000370</xccdf:version>
+          <xccdf:title>OL 9 must have the rng-tools package installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;rng-tools provides hardware random number generator tools, such as those used in the formation of x509/PKI certificates.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75469r1091247_fix">Install the rng-tools package with the following command:
+ 
+$ sudo dnf install -y rng-tools</xccdf:fixtext>
+          <xccdf:fix id="F-75469r1091247_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271512" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271513">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271513r1091251_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000380</xccdf:version>
+          <xccdf:title>OL 9 must have the nss-tools package installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Install the "nss-tools" package to install command-line tools to manipulate the NSS certificate and key database.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75470r1091250_fix">Install the nss-tools package with the following command:
+ 
+$ sudo dnf install -y nss-tools</xccdf:fixtext>
+          <xccdf:fix id="F-75470r1091250_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271513" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271514">
+        <xccdf:title>SRG-OS-000375-GPOS-00160</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271514r1091254_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000390</xccdf:version>
+          <xccdf:title>OL 9 must have the pcsc-lite package installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The pcsc-lite package must be installed if it is to be available for multifactor authentication using smart cards.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004046</xccdf:ident>
+          <xccdf:fixtext fixref="F-75471r1091253_fix">Install the pcsc-lite package with the following command:
+ 
+$ sudo dnf install -y pcsc-lite</xccdf:fixtext>
+          <xccdf:fix id="F-75471r1091253_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271514" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271515">
+        <xccdf:title>SRG-OS-000375-GPOS-00160</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271515r1091257_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000400</xccdf:version>
+          <xccdf:title>OL 9 must have the opensc package installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The use of PIV credentials facilitates standardization and reduces the risk of unauthorized access.
+
+The DOD has mandated the use of the Common Access Card (CAC) to support identity management and personal authentication for systems covered under Homeland Security Presidential Directive (HSPD) 12, as well as making the CAC a primary component of layered protection for national security systems.
+
+Satisfies: SRG-OS-000375-GPOS-00160, SRG-OS-000376-GPOS-00161&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004046</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001953</xccdf:ident>
+          <xccdf:fixtext fixref="F-75472r1091256_fix">Install the opensc package with the following command:
+ 
+$ sudo dnf install -y opensc</xccdf:fixtext>
+          <xccdf:fix id="F-75472r1091256_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271515" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271516">
+        <xccdf:title>SRG-OS-000375-GPOS-00160</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271516r1091260_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000401</xccdf:version>
+          <xccdf:title>OL 9 must be configured so that the pcscd service is active.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The information system ensures that even if the information system is compromised, that compromise will not affect credentials stored on the authentication device.
+
+The daemon program for pcsc-lite and the MuscleCard framework is pcscd. It is a resource manager that coordinates communications with smart card readers and smart cards and cryptographic tokens that are connected to the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004046</xccdf:ident>
+          <xccdf:fixtext fixref="F-75473r1091259_fix">Enable the pcscd service with the following command:
+
+$ sudo systemctl enable --now pcscd</xccdf:fixtext>
+          <xccdf:fix id="F-75473r1091259_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271516" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271517">
+        <xccdf:title>SRG-OS-000120-GPOS-00061</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271517r1101885_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000410</xccdf:version>
+          <xccdf:title>OL 9 must have the libreswan package installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Providing the ability for remote users or systems to initiate a secure VPN connection protects information when it is transmitted over a wide area network.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000803</xccdf:ident>
+          <xccdf:fixtext fixref="F-75474r1091262_fix">Install the libreswan service (if it is not already installed) with the following command:
+
+$ sudo dnf install -y libreswan</xccdf:fixtext>
+          <xccdf:fix id="F-75474r1091262_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271517" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271518">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271518r1091266_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000430</xccdf:version>
+          <xccdf:title>OL 9 must have the gnutls-utils package installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;GnuTLS is a secure communications library implementing the SSL, TLS, and DTLS protocols and technologies around them. It provides a simple C language application programming interface (API) to access the secure communications protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP and other required structures. This package contains command line TLS client and server and certificate manipulation tools.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75475r1091265_fix">Install the gnutls-utils package with the following command:
+ 
+$ sudo dnf install -y gnutls-utils</xccdf:fixtext>
+          <xccdf:fix id="F-75475r1091265_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271518" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271519">
+        <xccdf:title>SRG-OS-000062-GPOS-00031</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271519r1091269_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000440</xccdf:version>
+          <xccdf:title>OL 9 must have the audit package installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without establishing what type of events occurred, the source of events, where events occurred, and the outcome of events, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.
+
+Audit record content that may be necessary to satisfy this requirement includes, for example, time stamps, source and destination addresses, user/process identifiers, event descriptions, success/fail indications, filenames involved, and access control or flow control rules invoked.
+
+Associating event types with detected events in audit logs provides a means of investigating an attack, recognizing resource utilization or capacity thresholds, or identifying an improperly configured OL 9 system.
+
+Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000038-GPOS-00016, SRG-OS-000039-GPOS-00017, SRG-OS-000040-GPOS-00018, SRG-OS-000041-GPOS-00019, SRG-OS-000042-GPOS-00021, SRG-OS-000051-GPOS-00024, SRG-OS-000054-GPOS-00025, SRG-OS-000122-GPOS-00063, SRG-OS-000254-GPOS-00095, SRG-OS-000255-GPOS-00096, SRG-OS-000337-GPOS-00129, SRG-OS-000348-GPOS-00136, SRG-OS-000349-GPOS-00137, SRG-OS-000350-GPOS-00138, SRG-OS-000351-GPOS-00139, SRG-OS-000352-GPOS-00140, SRG-OS-000353-GPOS-00141, SRG-OS-000354-GPOS-00142, SRG-OS-000358-GPOS-00145, SRG-OS-000365-GPOS-00152, SRG-OS-000392-GPOS-00172, SRG-OS-000475-GPOS-00220, SRG-OS-000055-GPOS-00026&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000131</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000132</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000133</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000134</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000154</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000158</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001876</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001464</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001487</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001914</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001875</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001877</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001878</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001879</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001880</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001881</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001882</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001889</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-003938</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000159</xccdf:ident>
+          <xccdf:fixtext fixref="F-75476r1091268_fix">Install the audit service package (if the audit service is not already installed) with the following command:
+
+$ sudo dnf install -y audit</xccdf:fixtext>
+          <xccdf:fix id="F-75476r1091268_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271519" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271520">
+        <xccdf:title>SRG-OS-000062-GPOS-00031</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271520r1091272_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000441</xccdf:version>
+          <xccdf:title>OL 9 audit service must be enabled.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without establishing what type of events occurred, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack. Ensuring the "auditd" service is active ensures audit records generated by the kernel are appropriately recorded.
+
+Additionally, a properly configured audit subsystem ensures that actions of individual system users can be uniquely traced to those users so they can be held accountable for their actions.
+
+Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000038-GPOS-00016, SRG-OS-000039-GPOS-00017, SRG-OS-000040-GPOS-00018, SRG-OS-000041-GPOS-00019, SRG-OS-000042-GPOS-00021, SRG-OS-000051-GPOS-00024, SRG-OS-000054-GPOS-00025, SRG-OS-000122-GPOS-00063, SRG-OS-000254-GPOS-00095, SRG-OS-000255-GPOS-00096, SRG-OS-000337-GPOS-00129, SRG-OS-000348-GPOS-00136, SRG-OS-000349-GPOS-00137, SRG-OS-000350-GPOS-00138, SRG-OS-000351-GPOS-00139, SRG-OS-000352-GPOS-00140, SRG-OS-000353-GPOS-00141, SRG-OS-000354-GPOS-00142, SRG-OS-000358-GPOS-00145, SRG-OS-000365-GPOS-00152, SRG-OS-000392-GPOS-00172, SRG-OS-000475-GPOS-00220&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000131</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000132</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000133</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000134</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000154</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000158</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001876</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001464</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001487</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001914</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001875</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001877</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001878</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001879</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001880</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001881</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001882</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001889</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-003938</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75477r1091271_fix">Enable the auditd service with the following command:
+
+$ sudo systemctl enable --now auditd</xccdf:fixtext>
+          <xccdf:fix id="F-75477r1091271_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271520" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271521">
+        <xccdf:title>SRG-OS-000342-GPOS-00133</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271521r1091275_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000450</xccdf:version>
+          <xccdf:title>OL 9 must have the audispd-plugins package installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;audispd-plugins provides plug-ins for the real-time interface to the audit subsystem, audispd. These plug-ins can do things like relay events to remote machines or analyze events for suspicious behavior.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001851</xccdf:ident>
+          <xccdf:fixtext fixref="F-75478r1091274_fix">The audispd-plugins package can be installed with the following command:
+ 
+$ sudo dnf install -y audispd-plugins</xccdf:fixtext>
+          <xccdf:fix id="F-75478r1091274_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271521" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271522">
+        <xccdf:title>SRG-OS-000437-GPOS-00194</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271522r1091278_rule" severity="low" weight="10.0">
+          <xccdf:version>OL09-00-000495</xccdf:version>
+          <xccdf:title>OL 9 must remove all software components after updated versions have been installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Previous versions of software components that are not removed from the information system after updates have been installed may be exploited by some adversaries.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002617</xccdf:ident>
+          <xccdf:fixtext fixref="F-75479r1091277_fix">Configure OL 9 to remove all software components after updated versions have been installed.
+
+Edit the file /etc/dnf/dnf.conf by adding or editing the following line:
+
+ clean_requirements_on_remove=1</xccdf:fixtext>
+          <xccdf:fix id="F-75479r1091277_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271522" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271523">
+        <xccdf:title>SRG-OS-000366-GPOS-00153</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271523r1091281_rule" severity="high" weight="10.0">
+          <xccdf:version>OL09-00-000496</xccdf:version>
+          <xccdf:title>OL 9 must check the GPG signature of locally installed software packages before installation.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Changes to any software components can have significant effects on the overall security of the operating system. This requirement ensures the software has not been tampered with and that it has been provided by a trusted vendor.
+
+All software packages must be signed with a cryptographic key recognized and approved by the organization.
+
+Verifying the authenticity of software prior to installation validates the integrity of the software package received from a vendor. This verifies the software has not been tampered with and that it has been provided by a trusted vendor.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-003992</xccdf:ident>
+          <xccdf:fixtext fixref="F-75480r1091280_fix">Configure dnf to always check the GPG signature of local software packages before installation.
+
+Add or update the following line in the [main] section of the /etc/dnf/dnf.conf file:
+
+localpkg_gpgcheck=1</xccdf:fixtext>
+          <xccdf:fix id="F-75480r1091280_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271523" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271524">
+        <xccdf:title>SRG-OS-000366-GPOS-00153</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271524r1091284_rule" severity="high" weight="10.0">
+          <xccdf:version>OL09-00-000497</xccdf:version>
+          <xccdf:title>OL 9 must check the GPG signature of software packages originating from external software repositories before installation.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Changes to any software components can have significant effects on the overall security of the operating system. This requirement ensures the software has not been tampered with and that it has been provided by a trusted vendor.
+
+All software packages must be signed with a cryptographic key recognized and approved by the organization.
+
+Verifying the authenticity of software prior to installation validates the integrity of the software package received from a vendor. This verifies the software has not been tampered with and that it has been provided by a trusted vendor.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-003992</xccdf:ident>
+          <xccdf:fixtext fixref="F-75481r1091283_fix">Configure dnf to always check the GPG signature of software packages originating from external software repositories before installation.
+
+Add or update the following line in the [main] section of the /etc/dnf/dnf.conf file:
+
+gpgcheck=1</xccdf:fixtext>
+          <xccdf:fix id="F-75481r1091283_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271524" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271525">
+        <xccdf:title>SRG-OS-000366-GPOS-00153</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271525r1091287_rule" severity="high" weight="10.0">
+          <xccdf:version>OL09-00-000498</xccdf:version>
+          <xccdf:title>OL 9 must have GPG signature verification enabled for all software repositories.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Changes to any software components can have significant effects on the overall security of the operating system. This requirement ensures the software has not been tampered with and that it has been provided by a trusted vendor.
+
+All software packages must be signed with a cryptographic key recognized and approved by the organization.
+
+Verifying the authenticity of software prior to installation validates the integrity of the software package received from a vendor. This verifies the software has not been tampered with and that it has been provided by a trusted vendor.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-003992</xccdf:ident>
+          <xccdf:fixtext fixref="F-75482r1091286_fix">Configure all software repositories defined in "/etc/yum.repos.d/" to have "gpgcheck" enabled:
+
+$ sudo sed -i 's/gpgcheck\s*=.*/gpgcheck=1/g' /etc/yum.repos.d/*</xccdf:fixtext>
+          <xccdf:fix id="F-75482r1091286_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271525" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271527">
+        <xccdf:title>SRG-OS-000004-GPOS-00004</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271527r1092474_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000500</xccdf:version>
+          <xccdf:title>OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/sudoers.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The actions taken by system administrators must be audited to keep a record of what was executed on the system, as well as for accountability purposes. Editing the sudoers file may be sign of an attacker trying to establish persistent methods to a system, auditing the editing of the sudoers files mitigates this risk.
+
+Satisfies: SRG-OS-000004-GPOS-00004, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000304-GPOS-00121, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000470-GPOS-00214, SRG-OS-000471-GPOS-00215, SRG-OS-000239-GPOS-00089, SRG-OS-000240-GPOS-00090, SRG-OS-000241-GPOS-00091, SRG-OS-000303-GPOS-00120, SRG-OS-000466-GPOS-00210, SRG-OS-000476-GPOS-00221&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000018</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000015</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001403</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001404</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001405</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002130</xccdf:ident>
+          <xccdf:fixtext fixref="F-75484r1092473_fix">Configure OL 9 to generate audit records for all account creations, modifications, disabling, and termination events that affect "/etc/sudoers".
+
+Add or update the following file system rule to "/etc/audit/rules.d/audit.rules":
+
+-w /etc/sudoers -p wa -k identity
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75484r1092473_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271527" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271528">
+        <xccdf:title>SRG-OS-000004-GPOS-00004</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271528r1092476_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000505</xccdf:version>
+          <xccdf:title>OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/sudoers.d/ directory.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The actions taken by system administrators must be audited to keep a record of what was executed on the system, as well as for accountability purposes. Editing the sudoers file may be sign of an attacker trying to establish persistent methods to a system, auditing the editing of the sudoers files mitigates this risk.
+
+Satisfies: SRG-OS-000004-GPOS-00004, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000304-GPOS-00121, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000470-GPOS-00214, SRG-OS-000471-GPOS-00215, SRG-OS-000239-GPOS-00089, SRG-OS-000240-GPOS-00090, SRG-OS-000241-GPOS-00091, SRG-OS-000303-GPOS-00120, SRG-OS-000466-GPOS-00210, SRG-OS-000476-GPOS-00221&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000018</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000015</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001403</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001404</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001405</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002130</xccdf:ident>
+          <xccdf:fixtext fixref="F-75485r1092475_fix">Configure OL 9 to generate audit records for all account creations, modifications, disabling, and termination events that affect "/etc/sudoers.d/".
+
+Add or update the following file system rule to "/etc/audit/rules.d/audit.rules":
+
+-w /etc/sudoers.d/ -p wa -k identity
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75485r1092475_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271528" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271529">
+        <xccdf:title>SRG-OS-000004-GPOS-00004</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271529r1092478_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000510</xccdf:version>
+          <xccdf:title>OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/group.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;In addition to auditing new user and group accounts, these watches will alert the system administrator(s) to any modifications. Any unexpected users, groups, or modifications must be investigated for legitimacy.
+
+Satisfies: SRG-OS-000004-GPOS-00004, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000304-GPOS-00121, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000470-GPOS-00214, SRG-OS-000471-GPOS-00215, SRG-OS-000239-GPOS-00089, SRG-OS-000240-GPOS-00090, SRG-OS-000241-GPOS-00091, SRG-OS-000303-GPOS-00120, SRG-OS-000466-GPOS-00210, SRG-OS-000476-GPOS-00221&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000018</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000015</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001403</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001404</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001405</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002130</xccdf:ident>
+          <xccdf:fixtext fixref="F-75486r1092477_fix">Configure OL 9 to generate audit records for all account creations, modifications, disabling, and termination events that affect "/etc/group".
+
+Add or update the following file system rule to "/etc/audit/rules.d/audit.rules":
+
+-w /etc/group -p wa -k identity
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75486r1092477_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271529" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271530">
+        <xccdf:title>SRG-OS-000004-GPOS-00004</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271530r1092480_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000515</xccdf:version>
+          <xccdf:title>OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/gshadow.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;In addition to auditing new user and group accounts, these watches will alert the system administrator(s) to any modifications. Any unexpected users, groups, or modifications should be investigated for legitimacy.
+
+Satisfies: SRG-OS-000004-GPOS-00004, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000304-GPOS-00121, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000470-GPOS-00214, SRG-OS-000471-GPOS-00215, SRG-OS-000239-GPOS-00089, SRG-OS-000240-GPOS-00090, SRG-OS-000241-GPOS-00091, SRG-OS-000303-GPOS-00120, SRG-OS-000466-GPOS-00210, SRG-OS-000476-GPOS-00221&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000018</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000015</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001403</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001404</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001405</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002130</xccdf:ident>
+          <xccdf:fixtext fixref="F-75487r1092479_fix">Configure OL 9 to generate audit records for all account creations, modifications, disabling, and termination events that affect "/etc/gshadow".
+
+Add or update the following file system rule to "/etc/audit/rules.d/audit.rules":
+
+-w /etc/gshadow -p wa -k identity
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75487r1092479_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271530" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271531">
+        <xccdf:title>SRG-OS-000004-GPOS-00004</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271531r1092482_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000520</xccdf:version>
+          <xccdf:title>OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/opasswd.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;In addition to auditing new user and group accounts, these watches will alert the system administrator(s) to any modifications. Any unexpected users, groups, or modifications should be investigated for legitimacy.
+
+Satisfies: SRG-OS-000004-GPOS-00004, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000304-GPOS-00121, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000470-GPOS-00214, SRG-OS-000471-GPOS-00215, SRG-OS-000239-GPOS-00089, SRG-OS-000240-GPOS-00090, SRG-OS-000241-GPOS-00091, SRG-OS-000303-GPOS-00120, SRG-OS-000466-GPOS-00210, SRG-OS-000476-GPOS-00221&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000018</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000015</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001403</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001404</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001405</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002130</xccdf:ident>
+          <xccdf:fixtext fixref="F-75488r1092481_fix">Configure OL 9 to generate audit records for all account creations, modifications, disabling, and termination events that affect "/etc/security/opasswd".
+
+Add or update the following file system rule to "/etc/audit/rules.d/audit.rules":
+
+-w /etc/security/opasswd -p wa -k identity
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75488r1092481_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271531" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271532">
+        <xccdf:title>SRG-OS-000004-GPOS-00004</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271532r1092484_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000525</xccdf:version>
+          <xccdf:title>OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/passwd.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;In addition to auditing new user and group accounts, these watches will alert the system administrator(s) to any modifications. Any unexpected users, groups, or modifications should be investigated for legitimacy.
+
+Satisfies: SRG-OS-000004-GPOS-00004, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000304-GPOS-00121, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000470-GPOS-00214, SRG-OS-000471-GPOS-00215, SRG-OS-000239-GPOS-00089, SRG-OS-000240-GPOS-00090, SRG-OS-000241-GPOS-00091, SRG-OS-000303-GPOS-00120, SRG-OS-000466-GPOS-00210, SRG-OS-000476-GPOS-00221, SRG-OS-000274-GPOS-00104, SRG-OS-000275-GPOS-00105, SRG-OS-000276-GPOS-00106, SRG-OS-000277-GPOS-00107&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000018</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000015</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001403</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001404</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001405</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002130</xccdf:ident>
+          <xccdf:fixtext fixref="F-75489r1092483_fix">Configure OL 9 to generate audit records for all account creations, modifications, disabling, and termination events that affect "/etc/passwd".
+
+Add or update the following file system rule to "/etc/audit/rules.d/audit.rules":
+
+-w /etc/passwd -p wa -k identity
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75489r1092483_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271532" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271533">
+        <xccdf:title>SRG-OS-000004-GPOS-00004</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271533r1092486_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000530</xccdf:version>
+          <xccdf:title>OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/shadow.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;In addition to auditing new user and group accounts, these watches will alert the system administrator(s) to any modifications. Any unexpected users, groups, or modifications should be investigated for legitimacy.
+
+Satisfies: SRG-OS-000004-GPOS-00004, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000304-GPOS-00121, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000470-GPOS-00214, SRG-OS-000471-GPOS-00215, SRG-OS-000239-GPOS-00089, SRG-OS-000240-GPOS-00090, SRG-OS-000241-GPOS-00091, SRG-OS-000303-GPOS-00120, SRG-OS-000466-GPOS-00210, SRG-OS-000476-GPOS-00221&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000018</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000015</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001403</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001404</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001405</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002130</xccdf:ident>
+          <xccdf:fixtext fixref="F-75490r1092485_fix">Configure OL 9 to generate audit records for all account creations, modifications, disabling, and termination events that affect "/etc/shadow".
+
+Add or update the following file system rule to "/etc/audit/rules.d/audit.rules":
+
+-w /etc/shadow -p wa -k identity
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75490r1092485_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271533" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271534">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271534r1092488_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000535</xccdf:version>
+          <xccdf:title>OL 9 must audit all uses of the unix_update command.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000064-GPOS-00033, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:fixtext fixref="F-75491r1092487_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the "unix_update" command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
+
+-a always,exit -F path=/usr/sbin/unix_update -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-unix-update
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75491r1092487_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271534" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271535">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271535r1092490_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000540</xccdf:version>
+          <xccdf:title>OL 9 must audit all uses of the su command.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000064-GPOS-00033, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000466-GPOS-00210&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:fixtext fixref="F-75492r1092489_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the su command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
+
+-a always,exit -F path=/usr/bin/su -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-priv_change
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75492r1092489_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271535" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271536">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271536r1092492_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000545</xccdf:version>
+          <xccdf:title>OL 9 must audit all uses of the setxattr, fsetxattr, lsetxattr, removexattr, fremovexattr, and lremovexattr system calls.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000458-GPOS-00203, SRG-OS-000462-GPOS-00206, SRG-OS-000463-GPOS-00207, SRG-OS-000471-GPOS-00215, SRG-OS-000474-GPOS-00219, SRG-OS-000466-GPOS-00210, SRG-OS-000064-GPOS-00033&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75493r1092491_fix">Configure OL 9 to audit the execution of the setxattr, fsetxattr, lsetxattr, removexattr, fremovexattr, and lremovexattr system calls by adding or updating the following lines to "/etc/audit/rules.d/audit.rules":
+
+-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid&gt;=1000 -F auid!=unset -k perm_mod
+-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid&gt;=1000 -F auid!=unset -k perm_mod
+
+-a always,exit -F arch=b32 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid=0 -k perm_mod
+-a always,exit -F arch=b64 -S setxattr,fsetxattr,lsetxattr,removexattr,fremovexattr,lremovexattr -F auid=0 -k perm_mod
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75493r1092491_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271536" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271537">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271537r1092494_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000550</xccdf:version>
+          <xccdf:title>OL 9 must audit all uses of the chage command.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000468-GPOS-00212, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75494r1092493_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the chage command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
+
+-a always,exit -F path=/usr/bin/chage -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-chage
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75494r1092493_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271537" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271538">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271538r1092496_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000555</xccdf:version>
+          <xccdf:title>OL 9 must audit all uses of the chcon command.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+When a user logs on, the auid is set to the uid of the account that is being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000468-GPOS-00212, SRG-OS-000471-GPOS-00215, SRG-OS-000463-GPOS-00207, SRG-OS-000465-GPOS-00209&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75495r1092495_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the chcon command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
+
+-a always,exit -F path=/usr/bin/chcon -F perm=x -F auid&gt;=1000 -F auid!=unset -k perm_mod
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75495r1092495_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271538" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271539">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271539r1092498_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000560</xccdf:version>
+          <xccdf:title>OL 9 must audit all uses of the setfacl command.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75496r1092497_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the setfacl command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
+
+-a always,exit -F path=/usr/bin/setfacl -F perm=x -F auid&gt;=1000 -F auid!=unset -k perm_mod
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75496r1092497_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271539" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271540">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271540r1092500_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000565</xccdf:version>
+          <xccdf:title>OL 9 must audit all uses of the chsh command.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75497r1092499_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the chsh command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
+
+-a always,exit -F path=/usr/bin/chsh -F perm=x -F auid&gt;=1000 -F auid!=unset -k priv_cmd
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75497r1092499_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271540" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271541">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271541r1092502_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000570</xccdf:version>
+          <xccdf:title>OL 9 must audit all uses of the crontab command.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75498r1092501_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the crontab command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
+
+-a always,exit -F path=/usr/bin/crontab -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-crontab
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75498r1092501_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271541" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271542">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271542r1092504_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000575</xccdf:version>
+          <xccdf:title>OL 9 must audit all uses of the gpasswd command.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75499r1092503_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the gpasswd command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
+
+-a always,exit -F path=/usr/bin/gpasswd -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-gpasswd
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75499r1092503_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271542" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271543">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271543r1092506_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000580</xccdf:version>
+          <xccdf:title>OL 9 must audit all uses of the newgrp command.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+When a user logs on, the auid is set to the uid of the account that is being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75500r1092505_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the newgrp command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
+
+-a always,exit -F path=/usr/bin/newgrp -F perm=x -F auid&gt;=1000 -F auid!=unset -k priv_cmd
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75500r1092505_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271543" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271544">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271544r1092508_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000585</xccdf:version>
+          <xccdf:title>OL 9 must audit all uses of the pam_timestamp_check command.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75501r1092507_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the pam_timestamp_check command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
+
+-a always,exit -F path=/usr/sbin/pam_timestamp_check -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-pam_timestamp_check
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75501r1092507_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271544" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271545">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271545r1092510_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000590</xccdf:version>
+          <xccdf:title>OL 9 must audit all uses of the passwd command.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75502r1092509_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the passwd command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
+
+-a always,exit -F path=/usr/bin/passwd -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-passwd
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75502r1092509_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271545" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271546">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271546r1092512_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000595</xccdf:version>
+          <xccdf:title>OL 9 must audit all uses of the postdrop command.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped however, by combining system calls into one rule whenever possible.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75503r1092511_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the postdrop command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
+
+-a always,exit -F path=/usr/sbin/postdrop -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-unix-update
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75503r1092511_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271546" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271547">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271547r1092514_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000600</xccdf:version>
+          <xccdf:title>OL 9 must audit all uses of the postqueue command.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75504r1092513_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the postqueue command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
+
+-a always,exit -F path=/usr/sbin/postqueue -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-unix-update
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75504r1092513_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271547" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271548">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271548r1092516_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000605</xccdf:version>
+          <xccdf:title>OL 9 must audit all uses of the ssh-agent command.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75505r1092515_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the ssh-agent command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
+
+-a always,exit -F path=/usr/bin/ssh-agent -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-ssh
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75505r1092515_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271548" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271549">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271549r1092518_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000610</xccdf:version>
+          <xccdf:title>OL 9 must audit all uses of the ssh-keysign command.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75506r1092517_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the ssh-keysign command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
+
+-a always,exit -F path=/usr/libexec/openssh/ssh-keysign -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-ssh
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75506r1092517_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271549" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271550">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271550r1092520_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000615</xccdf:version>
+          <xccdf:title>OL 9 must audit all uses of the sudoedit command.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75507r1092519_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the sudoedit command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
+
+-a always,exit -F path=/usr/bin/sudoedit -F perm=x -F auid&gt;=1000 -F auid!=unset -k priv_cmd
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75507r1092519_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271550" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271551">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271551r1092522_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000620</xccdf:version>
+          <xccdf:title>OL 9 must audit all uses of the unix_chkpwd command.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75508r1092521_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the unix_chkpwd command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
+
+-a always,exit -F path=/usr/sbin/unix_chkpwd -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-unix-update
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75508r1092521_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271551" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271552">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271552r1092524_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000625</xccdf:version>
+          <xccdf:title>OL 9 must audit all uses of the userhelper command.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75509r1092523_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the userhelper command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
+
+-a always,exit -F path=/usr/sbin/userhelper -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-unix-update
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75509r1092523_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271552" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271553">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271553r1092526_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000630</xccdf:version>
+          <xccdf:title>OL 9 must audit all uses of the mount command.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+When a user logs on, the auid is set to the uid of the account that is being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75510r1092525_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the mount command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
+
+-a always,exit -F path=/usr/bin/mount -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-mount
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75510r1092525_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271553" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271554">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271554r1092528_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000635</xccdf:version>
+          <xccdf:title>OL 9 must audit all uses of the truncate, ftruncate, creat, open, openat, and open_by_handle_at system calls.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000064-GPOS-00033, SRG-OS-000458-GPOS-00203, SRG-OS-000461-GPOS-00205&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75511r1092527_fix">Configure OL 9 to generate an audit event for any successful/unsuccessful use of the truncate, ftruncate, creat, open, openat, and open_by_handle_at system calls by adding or updating the following rules in the "/etc/audit/rules.d/audit.rules" file:
+
+-a always,exit -F arch=b32 -S truncate,ftruncate,creat,open,openat,open_by_handle_at -F exit=-EPERM -F auid&gt;=1000 -F auid!=unset -k perm_access
+-a always,exit -F arch=b64 -S truncate,ftruncate,creat,open,openat,open_by_handle_at -F exit=-EPERM -F auid&gt;=1000 -F auid!=unset -k perm_access
+
+-a always,exit -F arch=b32 -S truncate,ftruncate,creat,open,openat,open_by_handle_at -F exit=-EACCES -F auid&gt;=1000 -F auid!=unset -k perm_access
+-a always,exit -F arch=b64 -S truncate,ftruncate,creat,open,openat,open_by_handle_at -F exit=-EACCES -F auid&gt;=1000 -F auid!=unset -k perm_access
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75511r1092527_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271554" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271555">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271555r1092530_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000640</xccdf:version>
+          <xccdf:title>OL 9 must audit all uses of the chmod, fchmod, and fchmodat system calls.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000064-GPOS-00033, SRG-OS-000466-GPOS-00210, SRG-OS-000458-GPOS-00203&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75512r1092529_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the chmod, fchmod, and fchmodat system calls.
+
+Add or update the following rules in "/etc/audit/rules.d/audit.rules":
+
+-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid&gt;=1000 -F auid!=unset -k perm_mod
+
+-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid&gt;=1000 -F auid!=unset -k perm_mod
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75512r1092529_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271555" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271556">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271556r1092532_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000645</xccdf:version>
+          <xccdf:title>OL 9 must audit all uses of the chown, fchown, fchownat, and lchown system calls.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000064-GPOS-00033, SRG-OS-000466-GPOS-00210, SRG-OS-000458-GPOS-00203, SRG-OS-000474-GPOS-00219&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75513r1092531_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the chown, fchown, fchownat, and lchown system calls.
+
+Add or update the following rules in "/etc/audit/rules.d/audit.rules":
+
+-a always,exit -F arch=b32 -S chown,fchown,fchownat,lchown -F auid&gt;=1000 -F auid!=unset -k perm_mod
+-a always,exit -F arch=b64 -S chown,fchown,fchownat,lchown -F auid&gt;=1000 -F auid!=unset -k perm_mod
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75513r1092531_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271556" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271557">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271557r1092534_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000650</xccdf:version>
+          <xccdf:title>OL 9 must audit all uses of the semanage command.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000463-GPOS-00207, SRG-OS-000465-GPOS-00209&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75514r1092533_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the semanage command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
+
+-a always,exit -F path=/usr/sbin/semanage -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-unix-update
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75514r1092533_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271557" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271558">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271558r1092536_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000655</xccdf:version>
+          <xccdf:title>OL 9 must audit all uses of the setfiles command.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000463-GPOS-00207, SRG-OS-000465-GPOS-00209&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75515r1092535_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the setfiles command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
+
+-a always,exit -F path=/usr/sbin/setfiles -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-unix-update
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75515r1092535_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271558" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271559">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271559r1092538_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000660</xccdf:version>
+          <xccdf:title>OL 9 must audit all uses of the setsebool command.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000463-GPOS-00207, SRG-OS-000465-GPOS-00209&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75516r1092537_fix">Configure OL 9 to generate an audit event for any successful/unsuccessful use of the setsebool command by adding or updating the following rules in the "/etc/audit/rules.d/audit.rules" file:
+
+-a always,exit -F path=/usr/sbin/setsebool -F perm=x -F auid&gt;=1000 -F auid!=unset -F key=privileged 
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75516r1092537_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271559" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271560">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271560r1092540_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000665</xccdf:version>
+          <xccdf:title>OL 9 must audit all uses of the chacl command.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000466-GPOS-00210&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75517r1092539_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the chacl command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
+
+-a always,exit -F path=/usr/bin/chacl -F perm=x -F auid&gt;=1000 -F auid!=unset -k perm_mod
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75517r1092539_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271560" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271561">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271561r1092542_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000670</xccdf:version>
+          <xccdf:title>OL 9 must audit all uses of the sudo command.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000466-GPOS-00210&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75518r1092541_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the sudo command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
+
+-a always,exit -F path=/usr/bin/sudo -F perm=x -F auid&gt;=1000 -F auid!=unset -k priv_cmd
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75518r1092541_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271561" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271562">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271562r1092544_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000675</xccdf:version>
+          <xccdf:title>OL 9 must audit all uses of the usermod command.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000466-GPOS-00210&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75519r1092543_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the usermod command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
+
+-a always,exit -F path=/usr/sbin/usermod -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-usermod
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75519r1092543_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271562" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271563">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271563r1092546_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000680</xccdf:version>
+          <xccdf:title>OL 9 must audit all uses of the rename, unlink, rmdir, renameat, and unlinkat system calls.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000466-GPOS-00210, SRG-OS-000467-GPOS-00211, SRG-OS-000468-GPOS-00212&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75520r1092545_fix">Configure OL 9 to generate an audit event for any successful/unsuccessful use of the rename, unlink, rmdir, renameat, and unlinkat system calls by adding or updating the following rules in the "/etc/audit/rules.d/audit.rules" file:
+
+-a always,exit -F arch=b32 -S rename,unlink,rmdir,renameat,unlinkat -F auid&gt;=1000 -F auid!=unset -k delete
+-a always,exit -F arch=b64 -S rename,unlink,rmdir,renameat,unlinkat -F auid&gt;=1000 -F auid!=unset -k delete
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75520r1092545_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271563" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271564">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271564r1092548_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000685</xccdf:version>
+          <xccdf:title>OL 9 must audit all uses of the delete_module system call.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000471-GPOS-00216, SRG-OS-000477-GPOS-00222&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75521r1092547_fix">Configure OL 9 to generate an audit event for any successful/unsuccessful use of the delete_module system call by adding or updating the following rules in the "/etc/audit/rules.d/audit.rules" file:
+
+-a always,exit -F arch=b32 -S delete_module -F auid&gt;=1000 -F auid!=unset -k module_chng
+-a always,exit -F arch=b64 -S delete_module -F auid&gt;=1000 -F auid!=unset -k module_chng
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75521r1092547_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271564" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271565">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271565r1092550_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000690</xccdf:version>
+          <xccdf:title>OL 9 must audit all uses of the init_module and finit_module system calls.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000471-GPOS-00216, SRG-OS-000477-GPOS-00222&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75522r1092549_fix">Configure OL 9 to generate an audit event for any successful/unsuccessful use of the init_module and finit_module system calls by adding or updating the following rules in the "/etc/audit/rules.d/audit.rules" file:
+
+-a always,exit -F arch=b32 -S init_module,finit_module -F auid&gt;=1000 -F auid!=unset -k module_chng
+-a always,exit -F arch=b64 -S init_module,finit_module -F auid&gt;=1000 -F auid!=unset -k module_chng
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75522r1092549_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271565" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271566">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271566r1092552_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000695</xccdf:version>
+          <xccdf:title>OL 9 must audit all uses of the kmod command.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000471-GPOS-00216, SRG-OS-000477-GPOS-00222&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75523r1092551_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the kmod command by adding or updating the following rule in "/etc/audit/rules.d/audit.rules":
+
+-a always,exit -F path=/usr/bin/kmod -F perm=x -F auid&gt;=1000 -F auid!=unset -k modules
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75523r1092551_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271566" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271567">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271567r1092554_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000700</xccdf:version>
+          <xccdf:title>OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /var/log/lastlog.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000473-GPOS-00218, SRG-OS-000470-GPOS-00214&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75524r1092553_fix">Configure OL 9 to generate audit records for all account creations, modifications, disabling, and termination events that affect /var/log/lastlog.
+
+Add or update the following file system rule to "/etc/audit/rules.d/audit.rules":
+
+-w /var/log/lastlog -p wa -k logins
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75524r1092553_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271567" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271568">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271568r1092556_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000705</xccdf:version>
+          <xccdf:title>OL 9 must audit all uses of umount system calls.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75525r1092555_fix">Configure OL 9 to generate audit records upon successful/unsuccessful attempts to use the umount command by adding or updating the following rules in "/etc/audit/rules.d/audit.rules":
+
+-a always,exit -F path=/usr/bin/umount -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-mount
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75525r1092555_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271568" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271569">
+        <xccdf:title>SRG-OS-000256-GPOS-00097</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271569r1155308_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000710</xccdf:version>
+          <xccdf:title>OL 9 must use cryptographic mechanisms to protect the integrity of audit tools.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Protecting the integrity of the tools used for auditing purposes is a critical step toward ensuring the integrity of audit information. Audit information includes all information (e.g., audit records, audit settings, and audit reports) needed to successfully audit information system activity.
+
+Audit tools include, but are not limited to, vendor-provided and open-source audit tools needed to successfully view and manipulate audit information system activity and records. Audit tools include custom queries and report generators.
+
+It is not uncommon for attackers to replace the audit tools or inject code into the existing tools to provide the capability to hide or erase system activity from the audit logs.
+
+To address this risk, audit tools must be cryptographically signed to provide the capability to identify when the audit tools have been modified, manipulated, or replaced. An example is a checksum hash of the file or files.
+
+Satisfies: SRG-OS-000256-GPOS-00097, SRG-OS-000257-GPOS-00098, SRG-OS-000258-GPOS-00099, SRG-OS-000278-GPOS-00108&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001493</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001494</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001495</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001496</xccdf:ident>
+          <xccdf:fixtext fixref="F-75526r1155307_fix">Configure OL 9 to protect the integrity of the audit tools.
+
+Add or update the following lines to /etc/aide.conf:
+ 
+/usr/sbin/auditctl p+i+n+u+g+s+b+acl+xattrs+sha512
+/usr/sbin/auditd p+i+n+u+g+s+b+acl+xattrs+sha512
+/usr/sbin/ausearch p+i+n+u+g+s+b+acl+xattrs+sha512
+/usr/sbin/aureport p+i+n+u+g+s+b+acl+xattrs+sha512
+/usr/sbin/autrace p+i+n+u+g+s+b+acl+xattrs+sha512
+/usr/sbin/augenrules p+i+n+u+g+s+b+acl+xattrs+sha512</xccdf:fixtext>
+          <xccdf:fix id="F-75526r1155307_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271569" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271570">
+        <xccdf:title>SRG-OS-000326-GPOS-00126</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271570r1092558_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000715</xccdf:version>
+          <xccdf:title>OL 9 must audit uses of the execve system call.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Misuse of privileged functions, either intentionally or unintentionally by authorized users, or by unauthorized external entities that have compromised information system accounts, is a serious and ongoing concern and can have significant adverse impacts on organizations. Auditing the use of privileged functions is one way to detect such misuse and identify the risk from insider threats and the advanced persistent threat.
+
+Satisfies: SRG-OS-000326-GPOS-00126, SRG-OS-000327-GPOS-00127, SRG-OS-000755-GPOS-00220&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002233</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002234</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004188</xccdf:ident>
+          <xccdf:fixtext fixref="F-75527r1092557_fix">Configure OL 9 to audit the execution of the execve system call.
+
+Add or update the following file system rules to "/etc/audit/rules.d/audit.rules":
+
+-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k execpriv 
+-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k execpriv
+-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k execpriv 
+-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k execpriv 
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart
+
+Note: Users must reboot to view above results with command "auditctl -l | grep execve".</xccdf:fixtext>
+          <xccdf:fix id="F-75527r1092557_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271570" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271571">
+        <xccdf:title>SRG-OS-000392-GPOS-00172</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271571r1092560_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000720</xccdf:version>
+          <xccdf:title>OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /var/log/faillock.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Satisfies: SRG-OS-000392-GPOS-00172, SRG-OS-000470-GPOS-00214, SRG-OS-000473-GPOS-00218&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75528r1092559_fix">Configure OL 9 to generate audit records for all account creations, modifications, disabling, and termination events that affect /var/log/faillock.
+
+Add or update the following file system rule to "/etc/audit/rules.d/audit.rules":
+
+-w /var/log/faillock -p wa -k logins
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75528r1092559_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271571" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271572">
+        <xccdf:title>SRG-OS-000392-GPOS-00172</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271572r1092562_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000725</xccdf:version>
+          <xccdf:title>OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /var/log/tallylog.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+Satisfies: SRG-OS-000392-GPOS-00172, SRG-OS-000470-GPOS-00214, SRG-OS-000473-GPOS-00218&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75529r1092561_fix">Configure OL 9 to generate audit records for all account creations, modifications, disabling, and termination events that affect /var/log/tallylog.
+
+Add or update the following file system rule to "/etc/audit/rules.d/audit.rules":
+
+-w /var/log/tallylog -p wa -k logins
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75529r1092561_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271572" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271573">
+        <xccdf:title>SRG-OS-000477-GPOS-00222</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271573r1092564_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000730</xccdf:version>
+          <xccdf:title>OL 9 must be configured so that successful/unsuccessful uses of the init command generate an audit record.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Misuse of the init command may cause availability issues for the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75530r1092563_fix">Configure the audit system to generate an audit event for any successful/unsuccessful uses of the init command by adding or updating the following rule in the "/etc/audit/rules.d/audit.rules" file:
+
+-a always,exit -F path=/usr/sbin/init -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-init
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75530r1092563_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271573" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271574">
+        <xccdf:title>SRG-OS-000477-GPOS-00222</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271574r1092566_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000735</xccdf:version>
+          <xccdf:title>OL 9 must be configured so that successful/unsuccessful uses of the poweroff command generate an audit record.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Misuse of the poweroff command may cause availability issues for the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75531r1092565_fix">Configure the audit system to generate an audit event for any successful/unsuccessful uses of the poweroff command by adding or updating the following rule in the "/etc/audit/rules.d/audit.rules" file:
+
+-a always,exit -F path=/usr/sbin/poweroff -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-poweroff
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75531r1092565_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271574" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271575">
+        <xccdf:title>SRG-OS-000477-GPOS-00222</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271575r1092568_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000740</xccdf:version>
+          <xccdf:title>OL 9 must be configured so that successful/unsuccessful uses of the reboot command generate an audit record.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Misuse of the reboot command may cause availability issues for the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75532r1092567_fix">Configure the audit system to generate an audit event for any successful/unsuccessful uses of the reboot command by adding or updating the following rule in the "/etc/audit/rules.d/audit.rules" file:
+
+-a always,exit -F path=/usr/sbin/reboot -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-reboot
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75532r1092567_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271575" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271576">
+        <xccdf:title>SRG-OS-000477-GPOS-00222</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271576r1092570_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000745</xccdf:version>
+          <xccdf:title>OL 9 must be configured so that successful/unsuccessful uses of the shutdown command generate an audit record.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Misuse of the shutdown command may cause availability issues for the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75533r1092569_fix">Configure the audit system to generate an audit event for any successful/unsuccessful uses of the shutdown command by adding or updating the following rule in the "/etc/audit/rules.d/audit.rules" file:
+
+-a always,exit -F path=/usr/sbin/shutdown -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-shutdown
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75533r1092569_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271576" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271577">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271577r1091443_rule" severity="low" weight="10.0">
+          <xccdf:version>OL09-00-000750</xccdf:version>
+          <xccdf:title>OL 9 must enable auditing of processes that start prior to the audit daemon.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without the capability to generate audit records, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+If auditing is enabled late in the startup process, the actions of some startup processes may not be audited. Some audit systems also maintain state information only available if auditing is enabled before a given process is created.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000473-GPOS-00218, SRG-OS-000254-GPOS-00095&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001464</xccdf:ident>
+          <xccdf:fixtext fixref="F-75534r1091442_fix">Enable auditing of processes that start prior to the audit daemon with the following command:
+
+$ sudo grubby --update-kernel=ALL --args="audit=1"
+
+Add or modify the following line in "/etc/default/grub" to ensure the configuration survives kernel updates:
+
+GRUB_CMDLINE_LINUX="audit=1"</xccdf:fixtext>
+          <xccdf:fix id="F-75534r1091442_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271577" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271578">
+        <xccdf:title>SRG-OS-000039-GPOS-00017</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271578r1092572_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000755</xccdf:version>
+          <xccdf:title>OL 9 must label all offloaded audit logs before sending them to the central log server.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Enriched logging is needed to determine who, what, and when events occur on a system. Without this, determining root cause of an event will be much more difficult.
+
+When audit logs are not labeled before they are sent to a central log server, the audit data will not be able to be analyzed and tied back to the correct system.
+
+Satisfies: SRG-OS-000039-GPOS-00017, SRG-OS-000342-GPOS-00133, SRG-OS-000479-GPOS-00224&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000132</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001851</xccdf:ident>
+          <xccdf:fixtext fixref="F-75535r1092571_fix">Configure OL 9 to label all offloaded audit logs before sending them to the central log server.
+
+Edit the /etc/audit/auditd.conf file and add or update the "name_format" option:
+
+name_format = hostname
+
+The audit daemon must be restarted for changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75535r1092571_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271578" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271579">
+        <xccdf:title>SRG-OS-000062-GPOS-00031</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271579r1091449_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000760</xccdf:version>
+          <xccdf:title>OL 9 audit system must take appropriate action when an error writing to the audit storage volume occurs.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;It is critical that when the operating system is at risk of failing to process audit logs as required, it takes action to mitigate the failure. Audit processing failures include software/hardware errors; failures in the audit capturing mechanisms; and audit storage capacity being reached or exceeded. Responses to audit failure depend upon the nature of the failure mode.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:fixtext fixref="F-75536r1091448_fix">Configure OL 9 to shut down by default upon audit failure (unless availability is an overriding concern).
+
+Add or update the following line (depending on configuration "disk_error_action" can be set to "SYSLOG" or "SINGLE" depending on configuration) in "/etc/audit/auditd.conf" file:
+
+disk_error_action = HALT
+
+If availability has been determined to be more important, and this decision is documented with the information system security officer (ISSO), configure the operating system to notify SA staff and ISSO staff in the event of an audit processing failure by setting the "disk_error_action" to "SYSLOG".</xccdf:fixtext>
+          <xccdf:fix id="F-75536r1091448_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271579" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271580">
+        <xccdf:title>SRG-OS-000062-GPOS-00031</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271580r1091452_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000765</xccdf:version>
+          <xccdf:title>OL 9 audit system must take appropriate action when the audit storage volume is full.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;It is critical that when the operating system is at risk of failing to process audit logs as required, it takes action to mitigate the failure. Audit processing failures include software/hardware errors; failures in the audit capturing mechanisms; and audit storage capacity being reached or exceeded. Responses to audit failure depend upon the nature of the failure mode.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:fixtext fixref="F-75537r1091451_fix">Configure OL 9 to shut down by default upon audit failure (unless availability is an overriding concern).
+
+Add or update the following line (depending on configuration "disk_full_action" can be set to "SYSLOG" or "SINGLE" depending on configuration) in "/etc/audit/auditd.conf" file:
+
+disk_full_action = HALT
+
+If availability has been determined to be more important, and this decision is documented with the information system security officer (ISSO), configure the operating system to notify SA staff and ISSO staff in the event of an audit processing failure by setting the "disk_full_action" to "SYSLOG".</xccdf:fixtext>
+          <xccdf:fix id="F-75537r1091451_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271580" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271581">
+        <xccdf:title>SRG-OS-000062-GPOS-00031</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271581r1091455_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000770</xccdf:version>
+          <xccdf:title>OL 9 audit system must take appropriate action when the audit files have reached maximum size.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;It is critical that when the operating system is at risk of failing to process audit logs as required, it takes action to mitigate the failure. Audit processing failures include software/hardware errors; failures in the audit capturing mechanisms; and audit storage capacity being reached or exceeded. Responses to audit failure depend upon the nature of the failure mode.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:fixtext fixref="F-75538r1091454_fix">Configure OL 9 to rotate the audit log when it reaches maximum size.
+
+Add or update the following line in "/etc/audit/auditd.conf" file:
+
+max_log_file_action = ROTATE</xccdf:fixtext>
+          <xccdf:fix id="F-75538r1091454_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271581" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271582">
+        <xccdf:title>SRG-OS-000051-GPOS-00024</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271582r1092574_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000775</xccdf:version>
+          <xccdf:title>OL 9 must periodically flush audit records to disk to prevent the loss of audit records.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;If option "freq" is not set to a value that requires audit records being written to disk after a threshold number is reached, then audit records may be lost.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000154</xccdf:ident>
+          <xccdf:fixtext fixref="F-75539r1092573_fix">Configure OL 9 to flush audit to disk by adding or updating the following configuration in "/etc/audit/auditd.conf":
+
+freq = 100
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75539r1092573_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271582" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271583">
+        <xccdf:title>SRG-OS-000057-GPOS-00027</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271583r1091461_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000785</xccdf:version>
+          <xccdf:title>OL 9 audit logs must be group-owned by root or by a restricted logging group to prevent unauthorized read access.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Unauthorized disclosure of audit records can reveal system and configuration data to attackers, thus compromising its confidentiality.
+
+Satisfies: SRG-OS-000057-GPOS-00027, SRG-OS-000058-GPOS-00028, SRG-OS-000059-GPOS-00029, SRG-OS-000206-GPOS-00084&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000162</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000163</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000164</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001314</xccdf:ident>
+          <xccdf:fixtext fixref="F-75540r1091460_fix">Configure OL 9 audit logs to be group-owned by "root" or a restricted logging group.
+
+Change the group of the directory of "/var/log/audit" to be owned by a correct group.
+
+Identify the group that is configured to own audit log:
+
+$ sudo grep -P '^[ ]*log_group[ ]+=.*$' /etc/audit/auditd.conf
+
+Change the ownership to that group:
+
+$ sudo chgrp ${GROUP} /var/log/audit</xccdf:fixtext>
+          <xccdf:fix id="F-75540r1091460_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271583" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271584">
+        <xccdf:title>SRG-OS-000057-GPOS-00027</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271584r1091464_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000790</xccdf:version>
+          <xccdf:title>OL 9 audit log directory must be owned by root to prevent unauthorized read access.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Unauthorized disclosure of audit records can reveal system and configuration data to attackers, thus compromising its confidentiality.
+
+Satisfies: SRG-OS-000057-GPOS-00027, SRG-OS-000058-GPOS-00028, SRG-OS-000059-GPOS-00029, SRG-OS-000206-GPOS-00084&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000162</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000163</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000164</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001314</xccdf:ident>
+          <xccdf:fixtext fixref="F-75541r1091463_fix">Configure OL 9 to protect the audit log from unauthorized read access by setting the correct owner as "root" with the following command:
+
+$ sudo chown root /var/log/audit</xccdf:fixtext>
+          <xccdf:fix id="F-75541r1091463_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271584" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271585">
+        <xccdf:title>SRG-OS-000057-GPOS-00027</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271585r1091467_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000795</xccdf:version>
+          <xccdf:title>OL 9 audit logs file must have mode 0600 or less permissive to prevent unauthorized access to the audit log.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state or can identify the OL 9 system or platform. Additionally, Personally Identifiable Information (PII) and operational information must not be revealed through error messages to unauthorized personnel or their designated representatives.
+
+The structure and content of error messages must be carefully considered by the organization and development team. The extent to which the information system is able to identify and handle error conditions is guided by organizational policy and operational requirements.
+
+Satisfies: SRG-OS-000057-GPOS-00027, SRG-OS-000058-GPOS-00028, SRG-OS-000059-GPOS-00029, SRG-OS-000206-GPOS-00084&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000162</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000163</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000164</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001314</xccdf:ident>
+          <xccdf:fixtext fixref="F-75542r1091466_fix">Configure the audit logs to have a mode of "0600" with the following command:
+
+Replace "[audit_log_file]" to the correct audit log path, by default this location is "/var/log/audit/audit.log".
+
+$ sudo chmod 0600 /var/log/audit/[audit_log_file]
+
+Check the group that owns the system audit logs:
+
+$ sudo grep -m 1 -q ^log_group /etc/audit/auditd.conf
+
+If the log_group is not defined or it is set to root, configure the permissions the following way:
+
+$ sudo chmod 0640 $log_file
+$ sudo chmod 0440 $log_file.*
+
+Otherwise, configure the permissions the following way:
+
+$ sudo chmod 0600 $log_file
+$ sudo chmod 0400 $log_file.*</xccdf:fixtext>
+          <xccdf:fix id="F-75542r1091466_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271585" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271586">
+        <xccdf:title>SRG-OS-000062-GPOS-00031</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271586r1092576_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000800</xccdf:version>
+          <xccdf:title>OL 9 audit system must audit local events.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without establishing what type of events occurred, the source of events, where events occurred, and the outcome of events, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.
+
+If option "local_events" isn't set to "yes" only events from network will be aggregated.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:fixtext fixref="F-75543r1092575_fix">Configure OL 9 to generate audit records for local events by adding or updating the following line in "/etc/audit/auditd.conf":
+
+local_events = yes 
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75543r1092575_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271586" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271587">
+        <xccdf:title>SRG-OS-000063-GPOS-00032</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271587r1091473_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000805</xccdf:version>
+          <xccdf:title>OL 9 must allow only the information system security manager (ISSM) (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without the capability to restrict the roles and individuals that can select which events are audited, unauthorized personnel may be able to prevent the auditing of critical events. Misconfigured audits may degrade the system's performance by overwhelming the audit log. Misconfigured audits may also make it more difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000171</xccdf:ident>
+          <xccdf:fixtext fixref="F-75544r1091472_fix">Configure the files in directory "/etc/audit/rules.d/" and the "/etc/audit/auditd.conf" file to have a mode of "0640" with the following commands:
+
+$ sudo chmod 0640 /etc/audit/rules.d/audit.rules
+$ sudo chmod 0640 /etc/audit/rules.d/[customrulesfile].rules
+$ sudo chmod 0640 /etc/audit/auditd.conf</xccdf:fixtext>
+          <xccdf:fix id="F-75544r1091472_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271587" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271588">
+        <xccdf:title>SRG-OS-000063-GPOS-00032</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271588r1091476_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000810</xccdf:version>
+          <xccdf:title>OL 9 /etc/audit/auditd.conf file must have 0640 or less permissive to prevent unauthorized access.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without the capability to restrict the roles and individuals that can select which events are audited, unauthorized personnel may be able to prevent the auditing of critical events. Misconfigured audits may degrade the system's performance by overwhelming the audit log. Misconfigured audits may also make it more difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000171</xccdf:ident>
+          <xccdf:fixtext fixref="F-75545r1091475_fix">Configure the /etc/audit/auditd.conf file to have a mode of 0640 with the command:
+
+$ sudo chmod 0640 /etc/audit/auditd.conf</xccdf:fixtext>
+          <xccdf:fix id="F-75545r1091475_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271588" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271589">
+        <xccdf:title>SRG-OS-000046-GPOS-00022</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271589r1091479_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000815</xccdf:version>
+          <xccdf:title>OL 9 must forward mail from postmaster to the root account using a postfix alias.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;It is critical for the appropriate personnel to be aware if a system is at risk of failing to process audit logs as required. Without this notification, the security personnel may be unaware of an impending failure of the audit capability, and system operation may be adversely affected.
+
+Audit processing failures include software/hardware errors, failures in the audit capturing mechanisms, and audit storage capacity being reached or exceeded.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000139</xccdf:ident>
+          <xccdf:fixtext fixref="F-75546r1091478_fix">Configure a valid email address as an alias for the root account.
+
+Append the following line to "/etc/aliases":
+
+postmaster: root
+
+Then, run the following command:
+
+$ sudo newaliases</xccdf:fixtext>
+          <xccdf:fix id="F-75546r1091478_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271589" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271590">
+        <xccdf:title>SRG-OS-000046-GPOS-00022</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271590r1091482_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000820</xccdf:version>
+          <xccdf:title>OL 9 must take appropriate action when a critical audit processing failure occurs.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;It is critical for the appropriate personnel to be aware if a system is at risk of failing to process audit logs as required. Without this notification, the security personnel may be unaware of an impending failure of the audit capability, and system operation may be adversely affected.
+
+Audit processing failures include software/hardware errors, failures in the audit capturing mechanisms, and audit storage capacity being reached or exceeded.
+
+Satisfies: SRG-OS-000046-GPOS-00022, SRG-OS-000343-GPOS-00135&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000139</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000140</xccdf:ident>
+          <xccdf:fixtext fixref="F-75547r1091481_fix">Configure OL 9 to shut down when auditing failures occur.
+
+Add the following line to the bottom of the /etc/audit/audit.rules file:
+
+-f 2</xccdf:fixtext>
+          <xccdf:fix id="F-75547r1091481_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271590" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271591">
+        <xccdf:title>SRG-OS-000046-GPOS-00022</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271591r1092578_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000825</xccdf:version>
+          <xccdf:title>The OL 9 system administrator (SA) and/or information system security officer (ISSO) (at a minimum) must be alerted of an audit processing failure event.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;It is critical for the appropriate personnel to be aware if a system is at risk of failing to process audit logs as required. Without this notification, the security personnel may be unaware of an impending failure of the audit capability, and system operation may be adversely affected.
+
+Audit processing failures include software/hardware errors, failures in the audit capturing mechanisms, and audit storage capacity being reached or exceeded.
+
+This requirement applies to each audit data storage repository (i.e., distinct information system component where audit records are stored), the centralized audit storage capacity of organizations (i.e., all audit data storage repositories combined), or both.
+
+Satisfies: SRG-OS-000046-GPOS-00022, SRG-OS-000343-GPOS-00134&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000139</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001855</xccdf:ident>
+          <xccdf:fixtext fixref="F-75548r1092577_fix">Configure the auditd service to notify the SA and ISSO in the event of an audit processing failure.
+
+Edit the following line in "/etc/audit/auditd.conf" to ensure that administrators are notified via email for those situations:
+
+action_mail_acct = root
+
+The audit daemon must be restarted for changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75548r1092577_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271591" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271592">
+        <xccdf:title>SRG-OS-000254-GPOS-00095</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271592r1091488_rule" severity="low" weight="10.0">
+          <xccdf:version>OL09-00-000830</xccdf:version>
+          <xccdf:title>OL 9 must allocate an audit_backlog_limit of sufficient size to capture processes that start prior to the audit daemon.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without the capability to generate audit records, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+If auditing is enabled late in the startup process, the actions of some startup processes may not be audited. Some audit systems also maintain state information only available if auditing is enabled before a given process is created.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+Allocating an audit_backlog_limit of sufficient size is critical in maintaining a stable boot process. With an insufficient limit allocated, the system is susceptible to boot failures and crashes.
+
+Satisfies: SRG-OS-000254-GPOS-00095, SRG-OS-000341-GPOS-00132&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001464</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001849</xccdf:ident>
+          <xccdf:fixtext fixref="F-75549r1091487_fix">Configure OL 9 to allocate sufficient audit_backlog_limit to capture processes that start prior to the audit daemon with the following command:
+
+$ sudo grubby --update-kernel=ALL --args=audit_backlog_limit=8192</xccdf:fixtext>
+          <xccdf:fix id="F-75549r1091487_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271592" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271593">
+        <xccdf:title>SRG-OS-000255-GPOS-00096</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271593r1092580_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000835</xccdf:version>
+          <xccdf:title>OL 9 must produce audit records containing information to establish the identity of any individual or process associated with the event.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without establishing what type of events occurred, the source of events, where events occurred, and the outcome of events, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.
+
+Audit record content that may be necessary to satisfy this requirement includes, for example, time stamps, source and destination addresses, user/process identifiers, event descriptions, success/fail indications, filenames involved, and access control or flow control rules invoked.
+
+Enriched logging aids in making sense of who, what, and when events occur on a system. Without this, determining root cause of an event will be much more difficult.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001487</xccdf:ident>
+          <xccdf:fixtext fixref="F-75550r1092579_fix">Configure OL 9 to produce audit records containing information to establish the identity of any individual or process associated with the event.
+
+Edit the /etc/audit/auditd.conf file and add or update the "log_format" option:
+
+log_format = ENRICHED
+
+The audit daemon must be restarted for changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75550r1092579_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271593" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271594">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271594r1155314_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000840</xccdf:version>
+          <xccdf:title>OL 9 must be configured so that successful/unsuccessful uses of the umount system call generate an audit record.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The changing of file permissions could indicate that a user is attempting to gain access to information that would otherwise be disallowed. Auditing DAC modifications can facilitate the identification of patterns of abuse among both authorized and unauthorized users.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75551r1092581_fix">Configure the audit system to generate an audit event for any successful/unsuccessful use of the umount system call by adding or updating the following rules in "/etc/audit/audit.rules" and adding the following rules to "/etc/audit/rules.d/perm_mod.rules" or updating the existing rules in files in the "/etc/audit/rules.d/" directory:
+
+-a always,exit -F arch=b32 -S umount -F auid&gt;=1000 -F auid!=unset -k perm_mod -a always,exit -F arch=b64 -S umount -F auid&gt;=1000 -F auid!=unset -k perm_mod
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75551r1092581_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271594" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271595">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271595r1155316_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000845</xccdf:version>
+          <xccdf:title>OL 9 must be configured so that successful/unsuccessful uses of the umount2 system call generate an audit record.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The changing of file permissions could indicate that a user is attempting to gain access to information that would otherwise be disallowed. Auditing discretionary access control (DAC) modifications can facilitate the identification of patterns of abuse among both authorized and unauthorized users.
+
+Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:fixtext fixref="F-75552r1092583_fix">Configure the audit system to generate an audit event for any successful/unsuccessful use of the umount2 system call by adding the following rules to a rules file in /etc/audit/rules.d/ directory: (Example /etc/audit/rules.d/audit.rules)
+
+-a always,exit -F arch=b32 -S umount2 -F auid&gt;=1000 -F auid!=unset -k perm_mod
+-a always,exit -F arch=b64 -S umount2 -F auid&gt;=1000 -F auid!=unset -k perm_mod
+
+The audit daemon must be restarted for the changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75552r1092583_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271595" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271596">
+        <xccdf:title>SRG-OS-000341-GPOS-00132</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271596r1091500_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000850</xccdf:version>
+          <xccdf:title>OL 9 must allocate audit record storage capacity to store at least one week's worth of audit records.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;To ensure OL 9 systems have a sufficient storage capacity in which to write the audit logs, OL 9 needs to be able to allocate audit record storage capacity.
+
+The task of allocating audit record storage capacity is usually performed during initial installation of OL 9.
+
+Satisfies: SRG-OS-000341-GPOS-00132, SRG-OS-000342-GPOS-00133&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001849</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001851</xccdf:ident>
+          <xccdf:fixtext fixref="F-75553r1091499_fix">Allocate enough storage capacity for at least one week of audit records when audit records are not immediately sent to a central audit record storage facility.
+
+If audit records are stored on a partition made specifically for audit records, resize the partition with sufficient space to contain one week of audit records.
+
+If audit records are not stored on a partition made specifically for audit records, a new partition with sufficient space will need be to be created.</xccdf:fixtext>
+          <xccdf:fix id="F-75553r1091499_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271596" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271597">
+        <xccdf:title>SRG-OS-000342-GPOS-00133</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271597r1092586_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000855</xccdf:version>
+          <xccdf:title>OL 9 must be configured to offload audit records onto a different system from the system being audited via syslog.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The auditd service does not include the ability to send audit records to a centralized server for management directly. However, it can use a plug-in for audit event multiplexor (audispd) to pass audit records to the local syslog server.
+
+Satisfies: SRG-OS-000342-GPOS-00133, SRG-OS-000479-GPOS-00224&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001851</xccdf:ident>
+          <xccdf:fixtext fixref="F-75554r1092585_fix">Configure OL 9 to offload audit records onto a different system from the system being audited via syslog.
+
+Edit the /etc/audit/plugins.d/syslog.conf file and add or update the "active" option:
+
+active = yes
+
+The audit daemon must be restarted for changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75554r1092585_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271597" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271598">
+        <xccdf:title>SRG-OS-000342-GPOS-00133</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271598r1092588_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000860</xccdf:version>
+          <xccdf:title>OL 9 must take appropriate action when the internal event queue is full.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The audit system should have an action setup in the event the internal event queue becomes full so that no data is lost. Information stored in one location is vulnerable to accidental or incidental deletion or alteration.
+
+Offloading is a common process in information systems with limited audit storage capacity.
+
+Satisfies: SRG-OS-000342-GPOS-00133, SRG-OS-000479-GPOS-00224&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001851</xccdf:ident>
+          <xccdf:fixtext fixref="F-75555r1092587_fix">Configure OL 9 to take appropriate action when the internal event queue is full.
+
+Edit the /etc/audit/auditd.conf file and add or update the "overflow_action" option:
+
+overflow_action = syslog
+
+The audit daemon must be restarted for changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75555r1092587_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271598" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271599">
+        <xccdf:title>SRG-OS-000343-GPOS-00134</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271599r1134856_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000865</xccdf:version>
+          <xccdf:title>OL 9 must take action when allocated audit record storage volume reaches 75 percent of the repository maximum audit record storage capacity.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;If security personnel are not notified immediately when storage volume reaches a maximum of 75 percent utilization, they are unable to plan for audit record storage capacity expansion. The notification can be set to trigger at lower utilization thresholds at the ISSO's discretion.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001855</xccdf:ident>
+          <xccdf:fixtext fixref="F-75556r1134855_fix">Configure OL 9 to initiate an action to notify the SA and ISSO (at a minimum) when allocated audit record storage volume reaches (at most) 75 percent of the repository maximum audit record storage capacity by adding/modifying the following line in the /etc/audit/auditd.conf file:
+
+space_left  = 25%</xccdf:fixtext>
+          <xccdf:fix id="F-75556r1134855_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271599" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271600">
+        <xccdf:title>SRG-OS-000343-GPOS-00134</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271600r1134858_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000870</xccdf:version>
+          <xccdf:title>OL 9 must notify the system administrator (SA) and information system security officer (ISSO) (at a minimum) when allocated audit record storage volume reaches 75 percent utilization.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;If security personnel are not notified immediately when storage volume reaches a maximum of 75 percent utilization, they are unable to plan for audit record storage capacity expansion. The notification can be set to trigger at lower utilization thresholds at the ISSO's discretion.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001855</xccdf:ident>
+          <xccdf:fixtext fixref="F-75557r1134857_fix">Configure OL 9 to initiate an action to notify the SA and ISSO (at a minimum) when allocated audit record storage volume reaches (at most) 75 percent of the repository maximum audit record storage capacity by adding/modifying the following line in the /etc/audit/auditd.conf file:
+
+space_left_action = email</xccdf:fixtext>
+          <xccdf:fix id="F-75557r1134857_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271600" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271601">
+        <xccdf:title>SRG-OS-000343-GPOS-00134</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271601r1091515_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000875</xccdf:version>
+          <xccdf:title>OL 9 must take action when allocated audit record storage volume reaches 95 percent of the audit record storage capacity.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;If action is not taken when storage volume reaches 95 percent utilization, the auditing system may fail when the storage volume reaches capacity.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001855</xccdf:ident>
+          <xccdf:fixtext fixref="F-75558r1091514_fix">Configure OL 9 to initiate an action when allocated audit record storage volume reaches 95 percent of the repository maximum audit record storage capacity by adding/modifying the following line in the /etc/audit/auditd.conf file.
+
+admin_space_left  = 5%</xccdf:fixtext>
+          <xccdf:fix id="F-75558r1091514_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271601" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271602">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271602r1092590_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000880</xccdf:version>
+          <xccdf:title>OL 9 must write audit records to disk.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Audit data should be synchronously written to disk to ensure log integrity. This setting ensures that all audit event data is written disk.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75559r1092589_fix">Configure the audit system to write log files to the disk.
+
+Edit the /etc/audit/auditd.conf file and add or update the "write_logs" option to "yes":
+
+write_logs = yes 
+
+The audit daemon must be restarted for changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75559r1092589_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271602" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271603">
+        <xccdf:title>SRG-OS-000343-GPOS-00134</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271603r1092592_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000885</xccdf:version>
+          <xccdf:title>OL 9 must act when allocated audit record storage volume reaches 95 percent of the repository maximum audit record storage capacity.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;If action is not taken when storage volume reaches 95 percent utilization, the auditing system may fail when the storage volume reaches capacity.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001855</xccdf:ident>
+          <xccdf:fixtext fixref="F-75560r1092591_fix">Configure the auditd service to take action in the event of allocated audit record storage volume reaches 95 percent of the repository maximum audit record storage capacity.
+
+Edit the following line in "/etc/audit/auditd.conf" to ensure that the system is forced into single user mode in the event the audit record storage volume is about to reach maximum capacity:
+
+admin_space_left_action = single 
+
+The audit daemon must be restarted for changes to take effect.
+
+Restart auditd:
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75560r1092591_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271603" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271607">
+        <xccdf:title>SRG-OS-000375-GPOS-00160</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271607r1091533_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000925</xccdf:version>
+          <xccdf:title>OL 9 must enable certificate-based smart card authentication.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without the use of multifactor authentication (MFA), the ease of access to privileged functions is greatly increased. Multifactor authentication requires using two or more factors to achieve authentication. A privileged account is defined as an information system account with authorizations of a privileged user. The DOD Common Access Card (CAC) with DOD-approved PKI is an example of multifactor authentication.
+
+Satisfies: SRG-OS-000375-GPOS-00160, SRG-OS-000105-GPOS-00052&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004046</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000765</xccdf:ident>
+          <xccdf:fixtext fixref="F-75564r1091532_fix">Configure OL 9 to enable certificate-based smart card authentication.
+
+Edit the file "/etc/sssd/sssd.conf" and add or edit the following line:
+
+pam_cert_auth = True</xccdf:fixtext>
+          <xccdf:fix id="F-75564r1091532_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271607" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271608">
+        <xccdf:title>SRG-OS-000375-GPOS-00160</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271608r1091536_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000930</xccdf:version>
+          <xccdf:title>OL 9 must implement certificate status checking for multifactor authentication (MFA).</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Using an authentication device, such as a DOD Common Access Card (CAC) or token that is separate from the information system, ensures that even if the information system is compromised, credentials stored on the authentication device will not be affected.
+
+Multifactor solutions that require devices separate from information systems gaining access include, for example, hardware tokens providing time-based or challenge-response authenticators and smart cards such as the U.S. Government Personal Identity Verification (PIV) card and the DOD CAC.
+
+OL 9 includes multiple options for configuring certificate status checking, but for this requirement focuses on the System Security Services Daemon (SSSD). By default, SSSD performs Online Certificate Status Protocol (OCSP) checking and certificate verification using a sha256 digest function.
+
+Satisfies: SRG-OS-000375-GPOS-00160, SRG-OS-000377-GPOS-00162&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004046</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001954</xccdf:ident>
+          <xccdf:fixtext fixref="F-75565r1091535_fix">Configure OL 9 to implement certificate status checking for MFA.
+
+Review the "/etc/sssd/conf.d/certificate_verification.conf" file to determine if the system is configured to prevent OCSP or certificate verification.
+
+Add the following line to the "/etc/sssd/conf.d/certificate_verification.conf" file:
+
+certificate_verification = ocsp_dgst=sha512
+
+Set the correct ownership and permissions on the "/etc/sssd/conf.d/certificate_verification.conf" file by running these commands:
+
+$ sudo chown root:root "/etc/sssd/conf.d/certificate_verification.conf"
+$ sudo chmod 600 "/etc/sssd/conf.d/certificate_verification.conf"
+
+The "sssd" service must be restarted for the changes to take effect. To restart the "sssd" service, run the following command:
+
+$ sudo systemctl restart sssd.service</xccdf:fixtext>
+          <xccdf:fix id="F-75565r1091535_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271608" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271609">
+        <xccdf:title>SRG-OS-000383-GPOS-00166</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271609r1091539_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000935</xccdf:version>
+          <xccdf:title>OL 9 must prohibit the use of cached authenticators after one day.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;If cached authentication information is out-of-date, the validity of the authentication information may be questionable.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002007</xccdf:ident>
+          <xccdf:fixtext fixref="F-75566r1091538_fix">Configure the SSSD to prohibit the use of cached authentications after one day.
+
+Add or change the following line in "/etc/sssd/sssd.conf" just below the line [pam]:
+
+offline_credentials_expiration = 1</xccdf:fixtext>
+          <xccdf:fix id="F-75566r1091538_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271609" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271610">
+        <xccdf:title>SRG-OS-000104-GPOS-00051</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271610r1091542_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-000940</xccdf:version>
+          <xccdf:title>OL 9 must use the CAC smart card driver.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Smart card login provides two-factor authentication stronger than that provided by a username and password combination. Smart cards leverage public key infrastructure to provide and verify credentials. Configuring the smart card driver in use by the organization helps to prevent users from using unauthorized smart cards.
+
+Satisfies: SRG-OS-000104-GPOS-00051, SRG-OS-000106-GPOS-00053, SRG-OS-000107-GPOS-00054, SRG-OS-000109-GPOS-00056, SRG-OS-000108-GPOS-00055, SRG-OS-000112-GPOS-00057, SRG-OS-000113-GPOS-00058&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000764</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000766</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000765</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004045</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001941</xccdf:ident>
+          <xccdf:fixtext fixref="F-75567r1091541_fix">Configure OL 9 to load the CAC driver.
+
+Add or modify the following line in the "/etc/opensc.conf" file:
+
+card_drivers = cac;</xccdf:fixtext>
+          <xccdf:fix id="F-75567r1091541_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271610" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271611">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271611r1091545_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-001000</xccdf:version>
+          <xccdf:title>OL 9 must ensure the password complexity module is enabled in the system-auth file.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Enabling PAM password complexity permits enforcement of strong passwords and consequently makes the system less prone to dictionary attacks.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75568r1091544_fix">Configure OL 9 to use "pwquality" to enforce password complexity rules.
+
+Add the following line to the "/etc/pam.d/system-auth" file(or modify the line to have the required value):
+
+password required pam_pwquality.so</xccdf:fixtext>
+          <xccdf:fix id="F-75568r1091544_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271611" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271612">
+        <xccdf:title>SRG-OS-000069-GPOS-00037</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271612r1091548_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-001001</xccdf:version>
+          <xccdf:title>OL 9 must ensure the password complexity module in the system-auth file is configured for three retries or less.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. "pwquality" enforces complex password construction configuration and has the ability to limit brute-force attacks on the system.
+
+OL 9 uses "pwquality" as a mechanism to enforce password complexity. This is set in both:
+/etc/pam.d/password-auth
+/etc/pam.d/system-auth
+
+By limiting the number of attempts to meet the pwquality module complexity requirements before returning with an error, the system will audit abnormal attempts at password changes.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004066</xccdf:ident>
+          <xccdf:fixtext fixref="F-75569r1091547_fix">Configure OL 9 to limit the "pwquality" retry option to "3".
+
+Add the following line to the "/etc/pam.d/system-auth" file (or modify the line to have the required value):
+
+password required pam_pwquality.so retry=3</xccdf:fixtext>
+          <xccdf:fix id="F-75569r1091547_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271612" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271613">
+        <xccdf:title>SRG-OS-000069-GPOS-00037</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271613r1091551_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-001005</xccdf:version>
+          <xccdf:title>OL 9 must enforce password complexity by requiring that at least one uppercase character be used.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. Password complexity is one factor of several that determines how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised. Requiring a minimum number of uppercase characters makes password guessing attacks more difficult by ensuring a larger search space.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004066</xccdf:ident>
+          <xccdf:fixtext fixref="F-75570r1091550_fix">Configure OL 9 to enforce password complexity by requiring that at least one uppercase character is used by setting the "ucredit" option.
+
+Add the following line to /etc/security/pwquality.conf (or modify the line to have the required value):
+
+ucredit = -1</xccdf:fixtext>
+          <xccdf:fix id="F-75570r1091550_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271613" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271614">
+        <xccdf:title>SRG-OS-000069-GPOS-00037</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271614r1091554_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-001010</xccdf:version>
+          <xccdf:title>OL 9 must ensure the password complexity module is enabled in the password-auth file.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Enabling PAM password complexity permits enforcement of strong passwords and consequently makes the system less prone to dictionary attacks.
+
+Satisfies: SRG-OS-000069-GPOS-00037, SRG-OS-000070-GPOS-00038&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004066</xccdf:ident>
+          <xccdf:fixtext fixref="F-75571r1091553_fix">Configure OL 9 to use "pwquality" to enforce password complexity rules.
+
+Add the following line to the "/etc/pam.d/password-auth" file (or modify the line to have the required value):
+
+password required pam_pwquality.so</xccdf:fixtext>
+          <xccdf:fix id="F-75571r1091553_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271614" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271615">
+        <xccdf:title>SRG-OS-000070-GPOS-00038</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271615r1091557_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-001015</xccdf:version>
+          <xccdf:title>OL 9 must enforce password complexity by requiring that at least one lowercase character be used.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. 
+
+Password complexity is one factor of several that determines how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised. Requiring a minimum number of lowercase characters makes password guessing attacks more difficult by ensuring a larger search space.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004066</xccdf:ident>
+          <xccdf:fixtext fixref="F-75572r1091556_fix">Configure OL 9 to enforce password complexity by requiring at least one lowercase character is used by setting the "lcredit" option.
+
+Add the following line to "/etc/security/pwquality.conf" (or modify the line to have the required value):
+
+lcredit = -1</xccdf:fixtext>
+          <xccdf:fix id="F-75572r1091556_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271615" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271616">
+        <xccdf:title>SRG-OS-000071-GPOS-00039</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271616r1091560_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-001020</xccdf:version>
+          <xccdf:title>OL 9 must enforce password complexity by requiring that at least one numeric character be used.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor of several that determines how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised. Requiring digits makes password guessing attacks more difficult by ensuring a larger search space.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004066</xccdf:ident>
+          <xccdf:fixtext fixref="F-75573r1091559_fix">Configure OL 9 to enforce password complexity by requiring at least one numeric character is used by setting the "dcredit" option.
+
+Add the following line to "/etc/security/pwquality.conf" (or modify the line to have the required value):
+
+dcredit = -1</xccdf:fixtext>
+          <xccdf:fix id="F-75573r1091559_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271616" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271617">
+        <xccdf:title>SRG-OS-000072-GPOS-00040</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271617r1091563_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-001025</xccdf:version>
+          <xccdf:title>OL 9 must require the change of at least eight characters when passwords are changed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. 
+
+Password complexity is one factor of several that determines how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised. Requiring a minimum number of different characters during password changes ensures that newly changed passwords will not resemble previously compromised ones. Note that passwords changed on compromised systems will still be compromised.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004066</xccdf:ident>
+          <xccdf:fixtext fixref="F-75574r1091562_fix">Configure OL 9 to require the change of at least eight of the total number of characters when passwords are changed by setting the "difok" option.
+
+Add the following line to "/etc/security/pwquality.conf" (or modify the line to have the required value):
+
+difok = 8</xccdf:fixtext>
+          <xccdf:fix id="F-75574r1091562_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271617" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271618">
+        <xccdf:title>SRG-OS-000072-GPOS-00040</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271618r1091566_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-001030</xccdf:version>
+          <xccdf:title>OL 9 must require the maximum number of repeating characters of the same character class be limited to four when passwords are changed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor of several that determines how long it takes to crack a password. The more complex a password, the greater the number of possible combinations that need to be tested before the password is compromised.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004066</xccdf:ident>
+          <xccdf:fixtext fixref="F-75575r1091565_fix">Configure OL 9 to require the change of the number of repeating characters of the same character class when passwords are changed by setting the "maxclassrepeat" option.
+
+Add the following line to "/etc/security/pwquality.conf" conf (or modify the line to have the required value):
+
+maxclassrepeat = 4</xccdf:fixtext>
+          <xccdf:fix id="F-75575r1091565_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271618" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271619">
+        <xccdf:title>SRG-OS-000072-GPOS-00040</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271619r1091569_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-001035</xccdf:version>
+          <xccdf:title>OL 9 must require the maximum number of repeating characters be limited to three when passwords are changed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor of several that determines how long it takes to crack a password. The more complex a password, the greater the number of possible combinations that need to be tested before the password is compromised.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004066</xccdf:ident>
+          <xccdf:fixtext fixref="F-75576r1091568_fix">Configure OL 9 to require the change of the number of repeating consecutive characters when passwords are changed by setting the "maxrepeat" option.
+
+Add the following line to "/etc/security/pwquality.conf" (or modify the line to have the required value):
+
+maxrepeat = 3</xccdf:fixtext>
+          <xccdf:fix id="F-75576r1091568_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271619" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271620">
+        <xccdf:title>SRG-OS-000072-GPOS-00040</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271620r1091572_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-001040</xccdf:version>
+          <xccdf:title>OL 9 must require the change of at least four character classes when passwords are changed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor of several that determines how long it takes to crack a password. The more complex a password, the greater the number of possible combinations that need to be tested before the password is compromised.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004066</xccdf:ident>
+          <xccdf:fixtext fixref="F-75577r1091571_fix">Configure OL 9 to require the change of at least four character classes when passwords are changed by setting the "minclass" option.
+
+Add the following line to "/etc/security/pwquality.conf" (or modify the line to have the required value):
+
+minclass = 4</xccdf:fixtext>
+          <xccdf:fix id="F-75577r1091571_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271620" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271621">
+        <xccdf:title>SRG-OS-000072-GPOS-00040</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271621r1091575_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-001045</xccdf:version>
+          <xccdf:title>OL 9 must enforce password complexity rules for the root account.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor of several that determines how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised.
+
+Satisfies: SRG-OS-000072-GPOS-00040, SRG-OS-000071-GPOS-00039, SRG-OS-000070-GPOS-00038, SRG-OS-000266-GPOS-00101, SRG-OS-000078-GPOS-00046, SRG-OS-000480-GPOS-00225, SRG-OS-000069-GPOS-00037&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004066</xccdf:ident>
+          <xccdf:fixtext fixref="F-75578r1091574_fix">Configure OL 9 to enforce password complexity on the root account.
+
+Add or update the following line in /etc/security/pwquality.conf:
+
+enforce_for_root</xccdf:fixtext>
+          <xccdf:fix id="F-75578r1091574_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271621" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271622">
+        <xccdf:title>SRG-OS-000073-GPOS-00041</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271622r1091578_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-001050</xccdf:version>
+          <xccdf:title>OL 9 must be configured so that user and group account administration utilities are configured to store only encrypted representations of passwords.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Passwords need to be protected at all times, and encryption is the standard method for protecting passwords. If passwords are not encrypted, they can be plainly read (i.e., clear text) and easily compromised. Passwords that are encrypted with a weak algorithm are no more protected than if they are kept in plain text.
+
+This setting ensures user and group account administration utilities are configured to store only encrypted representations of passwords. Additionally, the "crypt_style" configuration option ensures the use of a strong hashing algorithm that makes password cracking attacks more difficult.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004062</xccdf:ident>
+          <xccdf:fixtext fixref="F-75579r1091577_fix">Configure OL 9 to use the SHA-512 algorithm for password hashing.
+
+Add or change the following line in the "[default]" section of "/etc/libuser.conf" file:
+
+crypt_style = sha512</xccdf:fixtext>
+          <xccdf:fix id="F-75579r1091577_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271622" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271623">
+        <xccdf:title>SRG-OS-000073-GPOS-00041</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271623r1091581_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-001055</xccdf:version>
+          <xccdf:title>OL 9 must be configured to use the shadow file to store only encrypted representations of passwords.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Passwords need to be protected at all times, and encryption is the standard method for protecting passwords. If passwords are not encrypted, they can be plainly read (i.e., clear text) and easily compromised. Passwords that are encrypted with a weak algorithm are no more protected than if they are kept in plain text.
+
+This setting ensures user and group account administration utilities are configured to store only encrypted representations of passwords. Additionally, the "crypt_style" configuration option ensures the use of a strong hashing algorithm that makes password cracking attacks more difficult.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004062</xccdf:ident>
+          <xccdf:fixtext fixref="F-75580r1091580_fix">Configure OL 9 to store only SHA-512 encrypted representations of passwords.
+
+Add or update the following line in the "/etc/login.defs" file:
+
+ENCRYPT_METHOD SHA512</xccdf:fixtext>
+          <xccdf:fix id="F-75580r1091580_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271623" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271624">
+        <xccdf:title>SRG-OS-000073-GPOS-00041</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271624r1091584_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-001060</xccdf:version>
+          <xccdf:title>OL 9 pam_unix.so module must be configured in the password-auth file to use a FIPS 140-3 approved cryptographic hashing algorithm for system authentication.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Unapproved mechanisms that are used for authentication to the cryptographic module are not verified and therefore, cannot be relied upon to provide confidentiality or integrity, and DOD data may be compromised.
+
+OL 9 systems using encryption are required to use FIPS-compliant mechanisms for authenticating to cryptographic modules. 
+
+FIPS 140-3 is the current standard for validating that mechanisms used to access cryptographic modules use authentication that meets DOD requirements. This allows for Security Levels 1, 2, 3, or 4 for use on a general-purpose computing system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004062</xccdf:ident>
+          <xccdf:fixtext fixref="F-75581r1091583_fix">Configure OL 9 to use a FIPS 140-3 approved cryptographic hashing algorithm for system authentication.
+
+Edit/modify the following line in the "/etc/pam.d/password-auth" file to include the sha512 option for pam_unix.so:
+
+password sufficient pam_unix.so sha512</xccdf:fixtext>
+          <xccdf:fix id="F-75581r1091583_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271624" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271625">
+        <xccdf:title>SRG-OS-000073-GPOS-00041</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271625r1091587_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-001065</xccdf:version>
+          <xccdf:title>OL 9 password-auth must be configured to use a sufficient number of hashing rounds.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Passwords need to be protected at all times, and encryption is the standard method for protecting passwords. If passwords are not encrypted, they can be plainly read (i.e., clear text) and easily compromised. Passwords that are encrypted with a weak algorithm are no more protected than if they are kept in plain text.
+
+Using more hashing rounds makes password cracking attacks more difficult.
+
+Satisfies: SRG-OS-000073-GPOS-00041, SRG-OS-000120-GPOS-00061&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004062</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000803</xccdf:ident>
+          <xccdf:fixtext fixref="F-75582r1091586_fix">Configure Oracle Linux 9 to use 100000 hashing rounds for hashing passwords.
+
+Add or modify the following line in "/etc/pam.d/password-auth" and set "rounds" to "100000".
+
+password sufficient pam_unix.so sha512 rounds=100000</xccdf:fixtext>
+          <xccdf:fix id="F-75582r1091586_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271625" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271626">
+        <xccdf:title>SRG-OS-000073-GPOS-00041</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271626r1091590_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-001070</xccdf:version>
+          <xccdf:title>OL 9 system-auth must be configured to use a sufficient number of hashing rounds.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Passwords need to be protected at all times, and encryption is the standard method for protecting passwords. If passwords are not encrypted, they can be plainly read (i.e., clear text) and easily compromised. Passwords that are encrypted with a weak algorithm are no more protected than if they are kept in plain text.
+
+Using more hashing rounds makes password cracking attacks more difficult.
+
+Satisfies: SRG-OS-000073-GPOS-00041, SRG-OS-000120-GPOS-00061&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004062</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000803</xccdf:ident>
+          <xccdf:fixtext fixref="F-75583r1091589_fix">Configure Oracle Linux 9 to use 100000 hashing rounds for hashing passwords.
+
+Add or modify the following line in "/etc/pam.d/system-auth" and set "rounds" to 100000.
+
+password sufficient pam_unix.so sha512 rounds=100000'</xccdf:fixtext>
+          <xccdf:fix id="F-75583r1091589_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271626" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271627">
+        <xccdf:title>SRG-OS-000073-GPOS-00041</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271627r1091593_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-001075</xccdf:version>
+          <xccdf:title>OL 9 shadow password suite must be configured to use a sufficient number of hashing rounds.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Passwords need to be protected at all times, and encryption is the standard method for protecting passwords. If passwords are not encrypted, they can be plainly read (i.e., clear text) and easily compromised. Passwords that are encrypted with a weak algorithm are no more protected than if they are kept in plain text.
+
+Using more hashing rounds makes password cracking attacks more difficult.
+
+Satisfies: SRG-OS-000073-GPOS-00041, SRG-OS-000120-GPOS-00061&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004062</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000803</xccdf:ident>
+          <xccdf:fixtext fixref="F-75584r1091592_fix">Configure OL 9 to encrypt all stored passwords with a strong cryptographic hash.
+
+Edit/modify the following line in the "/etc/login.defs" file and set "SHA_CRYPT_MIN_ROUNDS" to a value no lower than "100000":
+
+SHA_CRYPT_MIN_ROUNDS 100000
+SHA_CRYPT_MAX_ROUNDS 100000</xccdf:fixtext>
+          <xccdf:fix id="F-75584r1091592_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271627" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271628">
+        <xccdf:title>SRG-OS-000073-GPOS-00041</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271628r1091596_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-001080</xccdf:version>
+          <xccdf:title>OL 9 must employ FIPS 140-3 approved cryptographic hashing algorithms for all stored passwords.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The system must use a strong hashing algorithm to store the password.
+
+Passwords need to be protected at all times, and encryption is the standard method for protecting passwords. If passwords are not encrypted, they can be plainly read (i.e., clear text) and easily compromised.
+
+Satisfies: SRG-OS-000073-GPOS-00041, SRG-OS-000120-GPOS-00061&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004062</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000803</xccdf:ident>
+          <xccdf:fixtext fixref="F-75585r1091595_fix">Lock all interactive user accounts not using SHA-512 hashing until the passwords can be regenerated with SHA-512.
+
+To lock an account:
+
+$ sudo passwd -l [username]</xccdf:fixtext>
+          <xccdf:fix id="F-75585r1091595_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271628" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271629">
+        <xccdf:title>SRG-OS-000075-GPOS-00043</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271629r1091599_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-001085</xccdf:version>
+          <xccdf:title>OL 9 passwords for new users or password changes must have a 24-hour minimum password lifetime restriction in /etc/login.defs.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Enforcing a minimum password lifetime helps to prevent repeated password changes to defeat the password reuse or history enforcement requirement. If users are allowed to immediately and continually change their password, then the password could be repeatedly changed in a short period of time to defeat the organization's policy regarding password reuse.
+
+Setting the minimum password age protects against users cycling back to a favorite password after satisfying the password reuse requirement.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004066</xccdf:ident>
+          <xccdf:fixtext fixref="F-75586r1091598_fix">Configure OL 9 to enforce 24 hours as the minimum password lifetime.
+
+Add the following line in "/etc/login.defs" (or modify the line to have the required value):
+
+PASS_MIN_DAYS 1</xccdf:fixtext>
+          <xccdf:fix id="F-75586r1091598_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271629" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271630">
+        <xccdf:title>SRG-OS-000075-GPOS-00043</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271630r1091602_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-001090</xccdf:version>
+          <xccdf:title>OL 9 passwords must have a 24-hour minimum password lifetime restriction in /etc/shadow.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Enforcing a minimum password lifetime helps to prevent repeated password changes to defeat the password reuse or history enforcement requirement. If users are allowed to immediately and continually change their password, the password could be repeatedly changed in a short period of time to defeat the organization's policy regarding password reuse.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004066</xccdf:ident>
+          <xccdf:fixtext fixref="F-75587r1091601_fix">Configure noncompliant accounts to enforce a 24-hour minimum password lifetime:
+
+$ sudo passwd -n 1 [user]</xccdf:fixtext>
+          <xccdf:fix id="F-75587r1091601_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271630" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271631">
+        <xccdf:title>SRG-OS-000076-GPOS-00044</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271631r1091605_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-001095</xccdf:version>
+          <xccdf:title>OL 9 user account passwords for new users or password changes must have a 60-day maximum password lifetime restriction in /etc/login.defs.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Any password, no matter how complex, can eventually be cracked; therefore, passwords need to be changed periodically. If the operating system does not limit the lifetime of passwords and force users to change their passwords, there is the risk that the operating system passwords could be compromised.
+
+Setting the password maximum age ensures users are required to periodically change their passwords. Requiring shorter password lifetimes increases the risk of users writing down the password in a convenient location subject to physical compromise.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004066</xccdf:ident>
+          <xccdf:fixtext fixref="F-75588r1091604_fix">Configure OL 9 to enforce a 60-day maximum password lifetime.
+
+Add or modify the following line in the "/etc/login.defs" file:
+
+PASS_MAX_DAYS 60</xccdf:fixtext>
+          <xccdf:fix id="F-75588r1091604_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271631" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271632">
+        <xccdf:title>SRG-OS-000076-GPOS-00044</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271632r1091608_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-001100</xccdf:version>
+          <xccdf:title>OL 9 user account passwords must have a 60-day maximum password lifetime restriction.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Any password, no matter how complex, can eventually be cracked; therefore, passwords need to be changed periodically. If OL 9 does not limit the lifetime of passwords and force users to change their passwords, there is the risk that OL 9 passwords could be compromised.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004066</xccdf:ident>
+          <xccdf:fixtext fixref="F-75589r1091607_fix">Configure noncompliant accounts to enforce a 60-day maximum password lifetime restriction.
+
+passwd -x 60 [user]</xccdf:fixtext>
+          <xccdf:fix id="F-75589r1091607_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271632" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271633">
+        <xccdf:title>SRG-OS-000078-GPOS-00046</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271633r1091611_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-001105</xccdf:version>
+          <xccdf:title>OL 9 passwords must be created with a minimum of 15 characters.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The shorter the password, the lower the number of possible combinations that need to be tested before the password is compromised.
+
+Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. Password length is one factor of several that helps to determine strength and how long it takes to crack a password. Use of more characters in a password helps to increase exponentially the time and/or resources required to compromise the password.
+
+OL 9 uses "pwquality" as a mechanism to enforce password complexity. Configurations are set in the "etc/security/pwquality.conf" file.
+
+The "minlen", sometimes noted as minimum length, acts as a "score" of complexity based on the credit components of the "pwquality" module. By setting the credit components to a negative value, not only will those components be required, but they will not count toward the total "score" of "minlen". This will enable "minlen" to require a 15-character minimum.
+
+The DOD minimum password requirement is 15 characters.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004066</xccdf:ident>
+          <xccdf:fixtext fixref="F-75590r1091610_fix">Configure OL 9 to enforce a minimum 15-character password length.
+
+Add the following line to "/etc/security/pwquality.conf" (or modify the line to have the required value):
+
+minlen = 15</xccdf:fixtext>
+          <xccdf:fix id="F-75590r1091610_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271633" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271634">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271634r1091614_rule" severity="high" weight="10.0">
+          <xccdf:version>OL09-00-001110</xccdf:version>
+          <xccdf:title>OL 9 must not allow blank or null passwords.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;If an account has an empty password, anyone could log in and run commands with the privileges of that account. Accounts with empty passwords should never be used in operational environments.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75591r1091613_fix">Remove any instances of the "nullok" option in the "/etc/pam.d/password-auth" and "/etc/pam.d/system-auth" files to prevent logons with empty passwords.
+
+Note: Manual changes to the listed file may be overwritten by the "authselect" program.</xccdf:fixtext>
+          <xccdf:fix id="F-75591r1091613_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271634" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271635">
+        <xccdf:title>SRG-OS-000080-GPOS-00048</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271635r1137691_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-001115</xccdf:version>
+          <xccdf:title>OL 9 must require a boot loader superuser password.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DOD-approved PKIs, all DOD systems (e.g., web servers and web portals) must be properly configured to incorporate access control methods that do not rely solely on the possession of a certificate for access. Successful authentication must not automatically give an entity access to an asset or security boundary. Authorization procedures and controls must be implemented to ensure each authenticated entity also has a validated and current authorization. Authorization is the process of determining whether an entity, once authenticated, is permitted to access a specific asset. Information systems use access control policies and enforcement mechanisms to implement this requirement.
+
+Password protection on the boot loader configuration ensures users with physical access cannot trivially alter important bootloader settings. These include which kernel to use, and whether to enter single-user mode.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000213</xccdf:ident>
+          <xccdf:fixtext fixref="F-75592r1091616_fix">Configure OL 9 to require a grub bootloader password for the grub superuser account.
+
+Generate an encrypted grub2 password for the grub superuser account with the following command:
+
+$ sudo grub2-setpassword
+Enter password:
+Confirm password:</xccdf:fixtext>
+          <xccdf:fix id="F-75592r1091616_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271635" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271636">
+        <xccdf:title>SRG-OS-000266-GPOS-00101</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271636r1091620_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-001120</xccdf:version>
+          <xccdf:title>OL 9 must enforce password complexity by requiring that at least one special character be used.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. Password complexity is one factor of several that determines how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised. OL 9 uses "pwquality" as a mechanism to enforce password complexity. Note that to require special characters without degrading the "minlen" value, the credit value must be expressed as a negative number in "/etc/security/pwquality.conf".&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004066</xccdf:ident>
+          <xccdf:fixtext fixref="F-75593r1091619_fix">Configure OL 9 to enforce password complexity by requiring at least one special character be used by setting the "ocredit" option.
+
+Add the following line to "/etc/security/pwquality.conf" (or modify the line to have the required value):
+
+ocredit = -1</xccdf:fixtext>
+          <xccdf:fix id="F-75593r1091619_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271636" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271637">
+        <xccdf:title>SRG-OS-000480-GPOS-00225</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271637r1091623_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-001125</xccdf:version>
+          <xccdf:title>OL 9 must prevent the use of dictionary words for passwords.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. If OL 9 allows the user to select passwords based on dictionary words, this increases the chances of password compromise by increasing the opportunity for successful guesses, and brute-force attacks.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75594r1091622_fix">Configure OL 9 to prevent the use of dictionary words for passwords.
+
+Add or update the following line in the "/etc/security/pwquality.conf" file or a configuration file in the /etc/pwquality.conf.d/ directory to contain the "dictcheck" parameter:
+
+dictcheck=1</xccdf:fixtext>
+          <xccdf:fix id="F-75594r1091622_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271637" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271638">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271638r1091626_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-001130</xccdf:version>
+          <xccdf:title>OL 9 must not have accounts configured with blank or null passwords.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;If an account has an empty password, anyone could log in and run commands with the privileges of that account. Accounts with empty passwords should never be used in operational environments.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75595r1091625_fix">Configure OL 9 so that all accounts have a password or lock the account with the following commands:
+
+Perform a password reset:
+
+$ sudo passwd [username] 
+
+To lock an account:
+
+$ sudo passwd -l [username]</xccdf:fixtext>
+          <xccdf:fix id="F-75595r1091625_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271638" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271639">
+        <xccdf:title>SRG-OS-000114-GPOS-00059</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271639r1091629_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002000</xccdf:version>
+          <xccdf:title>OL 9 file system automount function must be disabled unless required.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;An authentication process resists replay attacks if it is impractical to achieve a successful authentication by recording and replaying a previous authentication message.
+
+Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxAutofs" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000778</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001958</xccdf:ident>
+          <xccdf:fixtext fixref="F-75596r1091628_fix">Configure OL 9 to disable and mask the ability to automount devices.
+
+The autofs service can be disabled and masked with the following command:
+
+$ sudo systemctl mask --now autofs.service</xccdf:fixtext>
+          <xccdf:fix id="F-75596r1091628_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271639" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271641">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271641r1091635_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002011</xccdf:version>
+          <xccdf:title>OL 9 must prevent special devices on file systems that are imported via Network File System (NFS).</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxNFSMounts" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75598r1091634_fix">Update each NFS mounted file system to use the "nodev" option on file systems that are being imported via NFS.</xccdf:fixtext>
+          <xccdf:fix id="F-75598r1091634_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271641" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271642">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271642r1092593_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002012</xccdf:version>
+          <xccdf:title>OL 9 must prevent code from being executed on file systems that are imported via Network File System (NFS).</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "noexec" mount option causes the system not to execute binary files. This option must be used for mounting any file system not containing approved binary as they may be incompatible. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxNFSMounts" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75599r1091637_fix">Update each NFS mounted file system to use the "noexec" option on file systems that are being imported via NFS.</xccdf:fixtext>
+          <xccdf:fix id="F-75599r1091637_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271642" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271643">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271643r1091641_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002013</xccdf:version>
+          <xccdf:title>OL 9 must prevent files with the setuid and setgid bit set from being executed on file systems that are imported via Network File System (NFS).</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system not to execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxNFSMounts" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75600r1091640_fix">Update each NFS mounted file system to use the "nosuid" option on file systems that are being imported via NFS.</xccdf:fixtext>
+          <xccdf:fix id="F-75600r1091640_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271643" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271647">
+        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271647r1091653_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002030</xccdf:version>
+          <xccdf:title>OL 9 must mount /boot with the nodev option.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The only legitimate location for device files is the "/dev" directory located on the root partition. The only exception to this is chroot jails.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
+          <xccdf:fixtext fixref="F-75604r1091652_fix">Configure OL 9 to mount /boot with the nodev option.
+
+Modify "/etc/fstab" to use the "nodev" option on the "/boot" directory.</xccdf:fixtext>
+          <xccdf:fix id="F-75604r1091652_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271647" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271648">
+        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271648r1091656_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002031</xccdf:version>
+          <xccdf:title>OL 9 must prevent files with the setuid and setgid bit set from being executed on the /boot directory.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system not to execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
+          <xccdf:fixtext fixref="F-75605r1091655_fix">Configure OL 9 to prevent files with the setuid and setgid bit set from being executed on the /boot directory.
+
+Modify "/etc/fstab" to use the "nosuid" option on the "/boot" directory.</xccdf:fixtext>
+          <xccdf:fix id="F-75605r1091655_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271648" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271649">
+        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271649r1155334_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002032</xccdf:version>
+          <xccdf:title>OL 9 must prevent files with the setuid and setgid bit set from being executed on the /boot/efi directory.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system not to execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxUEFIBootPartitionNotVfat" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
+          <xccdf:fixtext fixref="F-75606r1091658_fix">Configure OL 9 to prevent files with the setuid and setgid bit set from being executed on the /boot/efi directory.
+
+Modify "/etc/fstab" to use the "nosuid" option on the "/boot/efi" directory.</xccdf:fixtext>
+          <xccdf:fix id="F-75606r1091658_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271649" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271650">
+        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271650r1091662_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002040</xccdf:version>
+          <xccdf:title>OL 9 must mount /dev/shm with the nodev option.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The nodev mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
+
+The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
+          <xccdf:fixtext fixref="F-75607r1091661_fix">Configure OL 9 to mount /dev/shm with the nodev option.
+
+Modify "/etc/fstab" to use the "nodev" option on the "/dev/shm" file system.</xccdf:fixtext>
+          <xccdf:fix id="F-75607r1091661_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271650" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271651">
+        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271651r1091665_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002041</xccdf:version>
+          <xccdf:title>OL 9 must mount /dev/shm with the noexec option.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The noexec mount option causes the system to not execute binary files. This option must be used for mounting any file system not containing approved binary files, as they may be incompatible. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
+          <xccdf:fixtext fixref="F-75608r1091664_fix">Configure OL 9 to mount /dev/shm with the noexec option.
+
+Modify "/etc/fstab" to use the "noexec" option on the "/dev/shm" file system.</xccdf:fixtext>
+          <xccdf:fix id="F-75608r1091664_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271651" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271652">
+        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271652r1094966_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002042</xccdf:version>
+          <xccdf:title>OL 9 must mount /dev/shm with the nosuid option.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system to not execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
+          <xccdf:fixtext fixref="F-75609r1091667_fix">Configure OL 9 to mount /dev/shm with the nosuid option.
+
+Modify "/etc/fstab" to use the "nosuid" option on the "/dev/shm" file system.</xccdf:fixtext>
+          <xccdf:fix id="F-75609r1091667_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271652" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271653">
+        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271653r1091671_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002050</xccdf:version>
+          <xccdf:title>OL 9 must mount /tmp with the nodev option.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
+
+The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
+          <xccdf:fixtext fixref="F-75610r1091670_fix">Configure OL 9 to mount /tmp with the nodev option.
+
+Modify "/etc/fstab" to use the "nodev" option on the "/tmp" directory.</xccdf:fixtext>
+          <xccdf:fix id="F-75610r1091670_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271653" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271654">
+        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271654r1091674_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002051</xccdf:version>
+          <xccdf:title>OL 9 must mount /tmp with the noexec option.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "noexec" mount option causes the system to not execute binary files. This option must be used for mounting any file system not containing approved binary files, as they may be incompatible. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
+          <xccdf:fixtext fixref="F-75611r1091673_fix">Configure OL 9 to mount /tmp with the noexec option.
+
+Modify "/etc/fstab" to use the "noexec" option on the "/tmp" directory.</xccdf:fixtext>
+          <xccdf:fix id="F-75611r1091673_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271654" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271655">
+        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271655r1091677_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002052</xccdf:version>
+          <xccdf:title>OL 9 must mount /tmp with the nosuid option.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system to not execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
+          <xccdf:fixtext fixref="F-75612r1091676_fix">Configure OL 9 to mount /tmp with the nosuid option.
+
+Modify "/etc/fstab" to use the "nosuid" option on the "/tmp" directory.</xccdf:fixtext>
+          <xccdf:fix id="F-75612r1091676_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271655" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271656">
+        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271656r1091680_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002060</xccdf:version>
+          <xccdf:title>OL 9 must mount /var with the nodev option.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
+
+The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
+          <xccdf:fixtext fixref="F-75613r1091679_fix">Configure OL 9 to mount /var with the nodev option.
+
+Modify "/etc/fstab" to use the "nodev" option on the "/var" directory.</xccdf:fixtext>
+          <xccdf:fix id="F-75613r1091679_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271656" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271657">
+        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271657r1091683_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002061</xccdf:version>
+          <xccdf:title>OL 9 must mount /var/log with the nodev option.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
+
+The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
+          <xccdf:fixtext fixref="F-75614r1091682_fix">Configure OL 9 to mount /var/log with the nodev option.
+
+Modify "/etc/fstab" to use the "nodev" option on the "/var/log" directory.</xccdf:fixtext>
+          <xccdf:fix id="F-75614r1091682_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271657" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271658">
+        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271658r1091686_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002062</xccdf:version>
+          <xccdf:title>OL 9 must mount /var/log with the noexec option.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "noexec" mount option causes the system to not execute binary files. This option must be used for mounting any file system not containing approved binary files, as they may be incompatible. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
+          <xccdf:fixtext fixref="F-75615r1091685_fix">Configure OL 9 to mount /var/log with the noexec option.
+
+Modify "/etc/fstab" to use the "noexec" option on the "/var/log" directory.</xccdf:fixtext>
+          <xccdf:fix id="F-75615r1091685_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271658" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271659">
+        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271659r1091689_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002063</xccdf:version>
+          <xccdf:title>OL 9 must mount /var/log with the nosuid option.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system to not execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
+          <xccdf:fixtext fixref="F-75616r1091688_fix">Configure OL 9 to mount /var/log with the nosuid option.
+
+Modify "/etc/fstab" to use the "nosuid" option on the "/var/log" directory.</xccdf:fixtext>
+          <xccdf:fix id="F-75616r1091688_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271659" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271660">
+        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271660r1091692_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002064</xccdf:version>
+          <xccdf:title>OL 9 must mount /var/log/audit with the nodev option.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
+
+The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
+          <xccdf:fixtext fixref="F-75617r1091691_fix">Configure OL 9 to mount /var/log/audit with the nodev option.
+
+Modify "/etc/fstab" to use the "nodev" option on the "/var/log/audit" directory.</xccdf:fixtext>
+          <xccdf:fix id="F-75617r1091691_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271660" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271661">
+        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271661r1091695_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002065</xccdf:version>
+          <xccdf:title>OL 9 must mount /var/log/audit with the noexec option.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "noexec" mount option causes the system to not execute binary files. This option must be used for mounting any file system not containing approved binary files, as they may be incompatible. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
+          <xccdf:fixtext fixref="F-75618r1091694_fix">Configure OL 9 to mount /var/log/audit with the noexec option.
+
+Modify "/etc/fstab" to use the "noexec" option on the "/var/log/audit" directory.</xccdf:fixtext>
+          <xccdf:fix id="F-75618r1091694_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271661" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271662">
+        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271662r1091698_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002066</xccdf:version>
+          <xccdf:title>OL 9 must mount /var/log/audit with the nosuid option.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system to not execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
+          <xccdf:fixtext fixref="F-75619r1091697_fix">Configure OL 9 to mount /var/log/audit with the nosuid option.
+
+Modify "/etc/fstab" to use the "nosuid" option on the "/var/log/audit" directory.</xccdf:fixtext>
+          <xccdf:fix id="F-75619r1091697_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271662" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271663">
+        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271663r1091701_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002067</xccdf:version>
+          <xccdf:title>OL 9 must mount /var/tmp with the nodev option.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
+
+The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
+          <xccdf:fixtext fixref="F-75620r1091700_fix">Configure OL 9 to mount /var/tmp with the nodev option.
+
+Modify "/etc/fstab" to use the "nodev" option on the "/var/tmp" directory.</xccdf:fixtext>
+          <xccdf:fix id="F-75620r1091700_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271663" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271664">
+        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271664r1091704_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002068</xccdf:version>
+          <xccdf:title>OL 9 must mount /var/tmp with the noexec option.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "noexec" mount option causes the system to not execute binary files. This option must be used for mounting any file system not containing approved binary files, as they may be incompatible. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
+          <xccdf:fixtext fixref="F-75621r1091703_fix">Configure OL 9 to mount /var/tmp with the noexec option.
+
+Modify "/etc/fstab" to use the "noexec" option on the "/var/tmp" directory.</xccdf:fixtext>
+          <xccdf:fix id="F-75621r1091703_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271664" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271665">
+        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271665r1091707_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002069</xccdf:version>
+          <xccdf:title>OL 9 must mount /var/tmp with the nosuid option.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system to not execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
+          <xccdf:fixtext fixref="F-75622r1091706_fix">Configure OL 9 to mount /var/tmp with the nosuid option.
+
+Modify "/etc/fstab" to use the "nosuid" option on the "/var/tmp" directory.</xccdf:fixtext>
+          <xccdf:fix id="F-75622r1091706_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271665" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271666">
+        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271666r1091710_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002070</xccdf:version>
+          <xccdf:title>OL 9 must prevent device files from being interpreted on file systems that contain user home directories.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
+
+The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
+          <xccdf:fixtext fixref="F-75623r1091709_fix">Configure OL 9 to prevent device files from being interpreted on file systems that contain user home directories.
+
+Modify "/etc/fstab" to use the "nodev" option on the "/home" directory.</xccdf:fixtext>
+          <xccdf:fix id="F-75623r1091709_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271666" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271667">
+        <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271667r1091713_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002071</xccdf:version>
+          <xccdf:title>OL 9 must prevent files with the setuid and setgid bit set from being executed on file systems that contain user home directories.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system to not execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
+          <xccdf:fixtext fixref="F-75624r1091712_fix">Configure OL 9 to prevent files with the setuid and setgid bit set from being executed on file systems that contain user home directories.
+
+Modify "/etc/fstab" to use the "nosuid" option on the "/home" directory.</xccdf:fixtext>
+          <xccdf:fix id="F-75624r1091712_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271667" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271668">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271668r1091716_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002072</xccdf:version>
+          <xccdf:title>OL 9 must prevent code from being executed on file systems that contain user home directories.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The noexec mount option causes the system to not execute binary files. This option must be used for mounting any file system not containing approved binary files, as they may be incompatible. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75625r1091715_fix">Configure OL 9 to prevent code from being executed on file systems that contain user home directories.
+
+Modify "/etc/fstab" to use the "noexec" option on the "/home" directory.</xccdf:fixtext>
+          <xccdf:fix id="F-75625r1091715_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271668" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271669">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271669r1155336_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002080</xccdf:version>
+          <xccdf:title>OL 9 must prevent special devices on nonroot local partitions.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
+
+The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75626r1091718_fix">Configure the "/etc/fstab" to use the "nodev" option on all nonroot local partitions.</xccdf:fixtext>
+          <xccdf:fix id="F-75626r1091718_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271669" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271670">
+        <xccdf:title>SRG-OS-000114-GPOS-00059</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271670r1091722_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002100</xccdf:version>
+          <xccdf:title>OL 9 must disable the graphical user interface automount function unless required.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Automatically mounting file systems permits easy introduction of unknown devices, thereby facilitating malicious activity.
+
+Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxGnome" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000778</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001958</xccdf:ident>
+          <xccdf:fixtext fixref="F-75627r1091721_fix">Configure the GNOME desktop to disable automated mounting of removable media.
+
+The dconf settings can be edited in the /etc/dconf/db/* location.
+
+Update the [org/gnome/desktop/media-handling] section of the "/etc/dconf/db/local.d/00-security-settings" database file and add or update the following lines:
+
+[org/gnome/desktop/media-handling]
+automount-open=false
+
+Update the dconf system databases:
+
+$ sudo dconf update</xccdf:fixtext>
+          <xccdf:fix id="F-75627r1091721_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271670" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271678">
+        <xccdf:title>SRG-OS-000114-GPOS-00059</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271678r1091746_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002120</xccdf:version>
+          <xccdf:title>OL 9 must prevent a user from overriding the disabling of the graphical user interface automount function.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;A nonprivileged account is any operating system account with authorizations of a nonprivileged user.
+
+Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxGnome" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000778</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001958</xccdf:ident>
+          <xccdf:fixtext fixref="F-75635r1091745_fix">Configure the GNOME desktop to not allow a user to change the setting that disables automated mounting of removable media.
+
+Add the following line to "/etc/dconf/db/local.d/locks/00-security-settings-lock" to prevent user modification:
+
+/org/gnome/desktop/media-handling/automount-open
+
+Update the dconf system databases:
+
+$ sudo dconf update</xccdf:fixtext>
+          <xccdf:fix id="F-75635r1091745_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271678" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271679">
+        <xccdf:title>SRG-OS-000114-GPOS-00059</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271679r1091749_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002121</xccdf:version>
+          <xccdf:title>OL 9 must prevent a user from overriding the disabling of the graphical user interface autorun function.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Techniques used to address this include protocols using nonces (e.g., numbers generated for a specific one-time use) or challenges (e.g., TLS, WS_Security). Additional techniques include time-synchronous or challenge-response one-time authenticators.
+
+Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxGnome" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000778</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001958</xccdf:ident>
+          <xccdf:fixtext fixref="F-75636r1091748_fix">Configure the GNOME desktop to not allow a user to change the setting that disables autorun on removable media.
+
+Add the following line to "/etc/dconf/db/local.d/locks/00-security-settings-lock" to prevent user modification:
+
+/org/gnome/desktop/media-handling/autorun-never
+
+Update the dconf system databases:
+
+$ sudo dconf update</xccdf:fixtext>
+          <xccdf:fix id="F-75636r1091748_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271679" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271680">
+        <xccdf:title>SRG-OS-000023-GPOS-00006</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271680r1091752_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002122</xccdf:version>
+          <xccdf:title>OL 9 must prevent a user from overriding the banner-message-enable setting for the graphical user interface.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Display of a standardized and approved use notification before granting access to the operating system ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+For U.S. government systems, system use notifications are required only for access via login interfaces with human users and are not required when such human interfaces do not exist.
+
+Satisfies: SRG-OS-000023-GPOS-00006, SRG-OS-000228-GPOS-00088&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxGnome" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000048</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001384</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001385</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001386</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001387</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001388</xccdf:ident>
+          <xccdf:fixtext fixref="F-75637r1091751_fix">Configure OL 9 to prevent a user from overriding the banner setting for graphical user interfaces. 
+
+Create a database to contain the system-wide graphical user logon settings (if it does not already exist) with the following command:
+
+$ sudo touch /etc/dconf/db/local.d/locks/session
+
+Add the following setting to prevent nonprivileged users from modifying it:
+
+/org/gnome/login-screen/banner-message-enable
+
+Run the following command to update the database:
+
+$ sudo dconf update</xccdf:fixtext>
+          <xccdf:fix id="F-75637r1091751_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271680" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271681">
+        <xccdf:title>SRG-OS-000028-GPOS-00009</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271681r1091755_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002123</xccdf:version>
+          <xccdf:title>OL 9 must prevent a user from overriding the screensaver lock-enabled setting for the graphical user interface.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;A session time-out lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not log out because of the temporary nature of the absence. Rather than relying on the user to manually lock their operating system session prior to vacating the vicinity, operating systems need to be able to identify when a user's session has idled and take action to initiate the session lock.
+
+The session lock is implemented at the point where session activity can be determined and/or controlled.
+
+Implementing session settings will have little value if a user is able to manipulate these settings from the defaults prescribed in the other requirements of this implementation guide.
+
+Satisfies: SRG-OS-000028-GPOS-00009, SRG-OS-000030-GPOS-00011&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxGnome" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000056</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000057</xccdf:ident>
+          <xccdf:fixtext fixref="F-75638r1091754_fix">Configure OL 9 to prevent a user from overriding settings for graphical user interfaces.
+
+Create a database to contain the system-wide screensaver settings (if it does not already exist) with the following command: 
+
+Note: The example below is using the database "local" for the system, so if the system is using another database in "/etc/dconf/profile/user", the file should be created under the appropriate subdirectory.
+
+$ sudo touch /etc/dconf/db/local.d/locks/session
+
+Add the following setting to prevent nonprivileged users from modifying it:
+
+/org/gnome/desktop/screensaver/lock-enabled
+
+Update the system databases:
+
+$ sudo dconf update</xccdf:fixtext>
+          <xccdf:fix id="F-75638r1091754_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271681" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271682">
+        <xccdf:title>SRG-OS-000029-GPOS-00010</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271682r1091758_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002124</xccdf:version>
+          <xccdf:title>OL 9 must prevent a user from overriding the session idle-delay setting for the graphical user interface.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;A session time-out lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not logout because of the temporary nature of the absence. Rather than relying on the user to manually lock their operating system session prior to vacating the vicinity, the GNOME desktop can be configured to identify when a user's session has idled and take action to initiate the session lock. As such, users should not be allowed to change session settings.
+
+Satisfies: SRG-OS-000029-GPOS-00010, SRG-OS-000031-GPOS-00012&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxGnome" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000057</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000060</xccdf:ident>
+          <xccdf:fixtext fixref="F-75639r1091757_fix">Configure OL 9 to prevent a user from overriding settings for graphical user interfaces.
+
+Create a database to contain the system-wide screensaver settings (if it does not already exist) with the following command: 
+
+Note: The example below is using the database "local" for the system, so if the system is using another database in "/etc/dconf/profile/user", the file should be created under the appropriate subdirectory.
+
+$ sudo touch /etc/dconf/db/local.d/locks/session
+
+Add the following setting to prevent nonprivileged users from modifying it:
+
+/org/gnome/desktop/session/idle-delay
+
+Update the system databases:
+
+$ sudo dconf update</xccdf:fixtext>
+          <xccdf:fix id="F-75639r1091757_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271682" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271683">
+        <xccdf:title>SRG-OS-000029-GPOS-00010</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271683r1091761_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002125</xccdf:version>
+          <xccdf:title>OL 9 must prevent a user from overriding the session lock-delay setting for the graphical user interface.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;A session time-out lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not logout because of the temporary nature of the absence. Rather than relying on the user to manually lock their operating system session prior to vacating the vicinity, the GNOME desktop can be configured to identify when a user's session has idled and take action to initiate the session lock. As such, users should not be allowed to change session settings.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxGnome" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000057</xccdf:ident>
+          <xccdf:fixtext fixref="F-75640r1091760_fix">Configure OL 9 to prevent a user from overriding settings for graphical user interfaces.
+
+Create a database to contain the system-wide screensaver settings (if it does not already exist) with the following command: 
+
+Note: The example below is using the database "local" for the system, so if the system is using another database in "/etc/dconf/profile/user", the file should be created under the appropriate subdirectory.
+
+$ sudo touch /etc/dconf/db/local.d/locks/session
+
+Add the following setting to prevent nonprivileged users from modifying it:
+
+/org/gnome/desktop/screensaver/lock-delay
+
+Update the system databases:
+
+$ sudo dconf update</xccdf:fixtext>
+          <xccdf:fix id="F-75640r1091760_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271683" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271684">
+        <xccdf:title>SRG-OS-000028-GPOS-00009</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271684r1091764_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002126</xccdf:version>
+          <xccdf:title>OL 9 must prevent a user from overriding the disabling of the graphical user smart card removal action.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;A session lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not want to log out because of the temporary nature of the absence.
+
+The session lock is implemented at the point where session activity can be determined. Rather than be forced to wait for a period of time to expire before the user session can be locked, OL 9 must provide users with the ability to manually invoke a session lock so users can secure their session if it is necessary to temporarily vacate the immediate physical vicinity.
+
+Satisfies: SRG-OS-000028-GPOS-00009, SRG-OS-000030-GPOS-00011&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxGnome" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000056</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000057</xccdf:ident>
+          <xccdf:fixtext fixref="F-75641r1091763_fix">Configure OL 9 must prevent a user from overriding the disabling of the graphical user smart card removal action.
+
+Add the following line to "/etc/dconf/db/local.d/locks/00-security-settings-lock":
+
+/org/gnome/settings-daemon/peripherals/smartcard/removal-action
+
+Update the dconf system databases:
+
+$ sudo dconf update</xccdf:fixtext>
+          <xccdf:fix id="F-75641r1091763_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271684" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271685">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271685r1091767_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002127</xccdf:version>
+          <xccdf:title>OL 9 must disable the ability of a user to restart the system from the login screen.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;A user who is at the console can reboot the system at the login screen. If restart or shutdown buttons are pressed at the login screen, this can create the risk of short-term loss of availability of systems due to reboot.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxGnome" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75642r1091766_fix">Configure OL 9 to disable a user's ability to restart the system.
+
+Add or update the [org/gnome/settings-daemon/] section of the /etc/dconf/db/local.d/00-security-settings" database file and add or update the following lines:
+
+[org/gnome/settings-daemon/peripherals/smartcard]
+disable-restart-buttons='true'
+
+Then update the dconf system databases:
+
+$ sudo dconf update</xccdf:fixtext>
+          <xccdf:fix id="F-75642r1091766_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271685" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271686">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271686r1091770_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002128</xccdf:version>
+          <xccdf:title>OL 9 must prevent a user from overriding the disable-restart-buttons setting for the graphical user interface.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;A user who is at the console can reboot the system at the login screen. If restart or shutdown buttons are pressed at the login screen, this can create the risk of short-term loss of availability of systems due to reboot.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxGnome" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75643r1091769_fix">Configure OL 9 to prevent a user from overriding the disable-restart-buttons setting for graphical user interfaces. 
+
+Create a database to contain the system-wide graphical user logon settings (if it does not already exist) with the following command:
+
+$ sudo touch /etc/dconf/db/local.d/locks/session
+
+Add the following line to prevent nonprivileged users from modifying it:
+
+/org/gnome/login-screen/disable-restart-buttons
+
+Run the following command to update the database:
+
+$ sudo dconf update</xccdf:fixtext>
+          <xccdf:fix id="F-75643r1091769_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271686" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271687">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271687r1091773_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002129</xccdf:version>
+          <xccdf:title>OL 9 must prevent a user from overriding the Ctrl-Alt-Del sequence settings for the graphical user interface.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;A locally logged-in user who presses Ctrl-Alt-Del, when at the console, can reboot the system. If accidentally pressed, as could happen in the case of mixed OS environment, this can create the risk of short-term loss of availability of systems due to unintentional reboot.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxGnome" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75644r1091772_fix">Configure OL 9 to disallow the user changing the Ctrl-Alt-Del sequence in the GNOME desktop.
+
+Create a database to container system-wide graphical user logon settings (if it does not already exist) with the following command:
+
+$ sudo touch /etc/dconf/db/local.d/locks/session
+
+Add the following line to the session locks file to prevent nonprivileged users from modifying the Ctrl-Alt-Del setting:
+
+/org/gnome/settings-daemon/plugins/media-keys/logout
+
+Run the following command to update the database:
+
+$ sudo dconf update</xccdf:fixtext>
+          <xccdf:fix id="F-75644r1091772_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271687" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271688">
+        <xccdf:title>SRG-OS-000023-GPOS-00006</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271688r1091776_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002150</xccdf:version>
+          <xccdf:title>OL 9 must be configured to enable the display of the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system via a graphical user logon.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Display of a standardized and approved use notification before granting access to the operating system ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+For U.S. government systems, system use notifications are required only for access via login interfaces with human users and are not required when such human interfaces do not exist.
+
+Satisfies: SRG-OS-000023-GPOS-00006, SRG-OS-000228-GPOS-00088&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxGnome" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000048</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001384</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001385</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001386</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001387</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001388</xccdf:ident>
+          <xccdf:fixtext fixref="F-75645r1091775_fix">Configure OL 9 to display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system via a graphical user logon.
+
+Create a database to contain the system-wide graphical user logon settings (if it does not already exist) with the following command:
+
+$ sudo touch /etc/dconf/db/local.d/01-banner-message
+
+Add the following lines to the [org/gnome/login-screen] section of the "/etc/dconf/db/local.d/01-banner-message":
+
+[org/gnome/login-screen]
+
+banner-message-enable=true
+
+Run the following command to update the database:
+
+$ sudo dconf update</xccdf:fixtext>
+          <xccdf:fix id="F-75645r1091775_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271688" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271690">
+        <xccdf:title>SRG-OS-000028-GPOS-00009</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271690r1092634_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002160</xccdf:version>
+          <xccdf:title>OL 9 must be able to directly initiate a session lock for all connection types using smart card when the smart card is removed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;A session lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not want to log out because of the temporary nature of the absence.
+
+The session lock is implemented at the point where session activity can be determined. Rather than be forced to wait for a period of time to expire before the user session can be locked, OL 9 needs to provide users with the ability to manually invoke a session lock so users can secure their session if it is necessary to temporarily vacate the immediate physical vicinity.
+
+Satisfies: SRG-OS-000028-GPOS-00009, SRG-OS-000030-GPOS-00011&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxGnome" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000056</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000057</xccdf:ident>
+          <xccdf:fixtext fixref="F-75647r1092633_fix">Configure OL 9 to enable a user's session lock until that user reestablishes access using established identification and authentication procedures.
+
+Select or create an authselect profile and incorporate the "with-smartcard-lock-on-removal" feature with the following example:
+
+$ sudo authselect select sssd with-smartcard with-smartcard-lock-on-removal
+
+Alternatively, the dconf settings can be edited in the /etc/dconf/db/* location.
+
+Add or update the [org/gnome/settings-daemon/peripherals/smartcard] section of the /etc/dconf/db/local.d/00-security-settings" database file and add or update the following lines:
+
+[org/gnome/settings-daemon/peripherals/smartcard]
+removal-action='lock-screen'
+
+Update the dconf system databases:
+
+$ sudo dconf update</xccdf:fixtext>
+          <xccdf:fix id="F-75647r1092633_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271690" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271691">
+        <xccdf:title>SRG-OS-000480-GPOS-00229</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271691r1091785_rule" severity="high" weight="10.0">
+          <xccdf:version>OL09-00-002161</xccdf:version>
+          <xccdf:title>OL 9 must not allow unattended or automatic logon via the graphical user interface.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Failure to restrict system access to authenticated users negatively impacts operating system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxGnome" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75648r1091784_fix">Configure the GNOME desktop display manager to disable automatic login.
+
+Set AutomaticLoginEnable to false in the [daemon] section in /etc/gdm/custom.conf. For example:
+
+[daemon]
+AutomaticLoginEnable=false</xccdf:fixtext>
+          <xccdf:fix id="F-75648r1091784_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271691" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271693">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271693r1091791_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002301</xccdf:version>
+          <xccdf:title>OL 9 must define default permissions for the bash shell.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The umask controls the default access mode assigned to newly created files. A umask of 077 limits new files to mode 600 or less permissive. Although umask can be represented as a four-digit number, the first digit representing special access modes is typically ignored or required to be "0". This requirement applies to the globally configured system defaults and the local interactive user defaults for each account on the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75650r1091790_fix">Configure OL 9 to define default permissions for all authenticated users using the bash shell.
+
+Add or edit the lines for the "umask" parameter in the "/etc/bashrc" file to "077":
+
+umask 077</xccdf:fixtext>
+          <xccdf:fix id="F-75650r1091790_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271693" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271694">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271694r1091794_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002302</xccdf:version>
+          <xccdf:title>OL 9 must define default permissions for the c shell.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The umask controls the default access mode assigned to newly created files. A umask of 077 limits new files to mode 600 or less permissive. Although umask can be represented as a four-digit number, the first digit representing special access modes is typically ignored or required to be "0". This requirement applies to the globally configured system defaults and the local interactive user defaults for each account on the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75651r1091793_fix">Configure OL 9 to define default permissions for all authenticated users using the c shell.
+
+Add or edit the lines for the "umask" parameter in the "/etc/csh.cshrc" file to "077":
+
+umask 077</xccdf:fixtext>
+          <xccdf:fix id="F-75651r1091793_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271694" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271695">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271695r1091797_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002303</xccdf:version>
+          <xccdf:title>OL 9 must define default permissions for the system default profile.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The umask controls the default access mode assigned to newly created files. A umask of 077 limits new files to mode 600 or less permissive. Although umask can be represented as a four-digit number, the first digit representing special access modes is typically ignored or required to be "0". This requirement applies to the globally configured system defaults and the local interactive user defaults for each account on the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75652r1091796_fix">Configure OL 9 to define default permissions for all authenticated users in such a way that the user can only read and modify their own files.
+
+Add or edit the lines for the "umask" parameter in the "/etc/profile" file to "077":
+
+umask 077</xccdf:fixtext>
+          <xccdf:fix id="F-75652r1091796_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271695" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271696">
+        <xccdf:title>SRG-OS-000480-GPOS-00228</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271696r1091800_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002304</xccdf:version>
+          <xccdf:title>OL 9 must define default permissions for all authenticated users in such a way that the user can only read and modify their own files.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Setting the most restrictive default permissions ensures that when new accounts are created, they do not have unnecessary access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75653r1091799_fix">Configure OL 9 to define default permissions for all authenticated users in such a way that the user can only read and modify their own files.
+
+Add or edit the lines for the "UMASK" parameter in the "/etc/login.defs" file to "077":
+
+UMASK 077</xccdf:fixtext>
+          <xccdf:fix id="F-75653r1091799_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271696" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271697">
+        <xccdf:title>SRG-OS-000096-GPOS-00050</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271697r1091803_rule" severity="low" weight="10.0">
+          <xccdf:version>OL09-00-002320</xccdf:version>
+          <xccdf:title>OL 9 must disable the chrony daemon from acting as a server.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Minimizing the exposure of the server functionality of the chrony daemon diminishes the attack surface.
+
+Satisfies: SRG-OS-000096-GPOS-00050, SRG-OS-000095-GPOS-00049&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000382</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
+          <xccdf:fixtext fixref="F-75654r1091802_fix">Configure OL 9 to disable the chrony daemon from acting as a server by adding/modifying the following line in the /etc/chrony.conf file:
+
+port 0</xccdf:fixtext>
+          <xccdf:fix id="F-75654r1091802_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271697" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271698">
+        <xccdf:title>SRG-OS-000096-GPOS-00050</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271698r1091806_rule" severity="low" weight="10.0">
+          <xccdf:version>OL09-00-002321</xccdf:version>
+          <xccdf:title>OL 9 must disable network management of the chrony daemon.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Not exposing the management interface of the chrony daemon on the network diminishes the attack space.
+
+Satisfies: SRG-OS-000096-GPOS-00050, SRG-OS-000095-GPOS-00049&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000382</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
+          <xccdf:fixtext fixref="F-75655r1091805_fix">Configure OL 9 to disable network management of the chrony daemon by adding/modifying the following line in the /etc/chrony.conf file:
+
+cmdport 0</xccdf:fixtext>
+          <xccdf:fix id="F-75655r1091805_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271698" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271700">
+        <xccdf:title>SRG-OS-000062-GPOS-00031</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271700r1091812_rule" severity="low" weight="10.0">
+          <xccdf:version>OL09-00-002330</xccdf:version>
+          <xccdf:title>OL 9 must enable Linux audit logging for the USBGuard daemon.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without the capability to generate audit records, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+If auditing is enabled late in the startup process, the actions of some startup processes may not be audited. Some audit systems also maintain state information only available if auditing is enabled before a given process is created.
+
+Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+The list of audited events is the set of events for which audits are to be generated. This set of events is typically a subset of the list of all events for which the system is capable of generating audit records.
+
+DOD has defined the list of events for which OL 9 will provide an audit record generation capability as the following:
+
+1. Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, security levels, or categories of information (e.g., classification levels);
+
+2. Access actions, such as successful and unsuccessful logon attempts, privileged activities or other system-level access, starting and ending time for user access to the system, concurrent logons from different workstations, successful and unsuccessful accesses to objects, all program initiations, and all direct access to the information system;
+
+3. All account creations, modifications, disabling, and terminations; and 
+
+4. All kernel module load, unload, and restart actions.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:fixtext fixref="F-75657r1091811_fix">Configure OL 9 USBGuard AuditBackend to use the audit system.
+
+Add or edit the following line in /etc/usbguard/usbguard-daemon.conf 
+
+AuditBackend=LinuxAudit</xccdf:fixtext>
+          <xccdf:fix id="F-75657r1091811_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271700" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271703">
+        <xccdf:title>SRG-OS-000032-GPOS-00013</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271703r1091821_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002340</xccdf:version>
+          <xccdf:title>OL 9 must log SSH connection attempts and failures to the server.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;SSH provides several logging levels with varying amounts of verbosity. "DEBUG" is specifically not recommended other than strictly for debugging SSH communications since it provides so much data that it is difficult to identify important security information. "INFO" or "VERBOSE" level is the basic level that only records login activity of SSH users. In many situations, such as Incident Response, it is important to determine when a particular user was active on a system. The logout record can eliminate those users who disconnected, which helps narrow the field.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000067</xccdf:ident>
+          <xccdf:fixtext fixref="F-75660r1091820_fix">Configure OL 9 to log connection attempts add or modify the following line in "/etc/ssh/sshd_config" or in a file in "/etc/ssh/sshd_config.d".
+
+LogLevel VERBOSE
+
+Restart the SSH daemon for the settings to take effect:
+
+$ sudo systemctl restart sshd.service</xccdf:fixtext>
+          <xccdf:fix id="F-75660r1091820_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271703" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271704">
+        <xccdf:title>SRG-OS-000364-GPOS-00151</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271704r1091824_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002341</xccdf:version>
+          <xccdf:title>OL 9 SSH daemon must not allow Generic Security Service Application Program Interface (GSSAPI) authentication.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;GSSAPI authentication is used to provide additional authentication mechanisms to applications. Allowing GSSAPI authentication through SSH exposes the system's GSSAPI to remote hosts, increasing the attack surface of the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001813</xccdf:ident>
+          <xccdf:fixtext fixref="F-75661r1091823_fix">Configure the SSH daemon to not allow GSSAPI authentication.
+
+Add or uncomment the following line to "/etc/ssh/sshd_config" or to a file in "/etc/ssh/sshd_config.d" and set the value to "no":
+
+GSSAPIAuthentication no
+
+The SSH service must be restarted for changes to take effect:
+
+$ sudo systemctl restart sshd.service</xccdf:fixtext>
+          <xccdf:fix id="F-75661r1091823_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271704" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271705">
+        <xccdf:title>SRG-OS-000423-GPOS-00187</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271705r1091827_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002342</xccdf:version>
+          <xccdf:title>OL 9 must force a frequent session key renegotiation for SSH connections to the server.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without protection of the transmitted information, confidentiality and integrity may be compromised because unprotected communications can be intercepted and either read or altered. 
+
+This requirement applies to both internal and external networks and all types of information system components from which information can be transmitted (e.g., servers, mobile devices, notebook computers, printers, copiers, scanners, and facsimile machines). Communication paths outside the physical protection of a controlled boundary are exposed to the possibility of interception and modification. 
+
+Protecting the confidentiality and integrity of organizational information can be accomplished by physical means (e.g., employing physical distribution systems) or by logical means (e.g., employing cryptographic techniques). If physical means of protection are employed, then logical means (cryptography) do not have to be employed, and vice versa.
+
+Session key regeneration limits the chances of a session key becoming compromised.
+
+Satisfies: SRG-OS-000423-GPOS-00187, SRG-OS-000033-GPOS-00014, SRG-OS-000424-GPOS-00188&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002418</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000068</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002421</xccdf:ident>
+          <xccdf:fixtext fixref="F-75662r1091826_fix">Configure OL 9 to force a frequent session key renegotiation for SSH connections to the server by adding or modifying the following line in the "/etc/ssh/sshd_config" or in a file in "/etc/ssh/sshd_config.d":
+
+RekeyLimit 1G 1h
+
+Restart the SSH daemon for the settings to take effect.
+
+$ sudo systemctl restart sshd.service</xccdf:fixtext>
+          <xccdf:fix id="F-75662r1091826_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271705" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271706">
+        <xccdf:title>SRG-OS-000106-GPOS-00053</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271706r1091830_rule" severity="high" weight="10.0">
+          <xccdf:version>OL09-00-002343</xccdf:version>
+          <xccdf:title>OL 9 SSHD must not allow blank passwords.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;If an account has an empty password, anyone could log on and run commands with the privileges of that account. Accounts with empty passwords should never be used in operational environments.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000766</xccdf:ident>
+          <xccdf:fixtext fixref="F-75663r1091829_fix">Configure OL 9 to prevent SSH users from logging on with blank passwords by editing the following line in "/etc/ssh/sshd_config" or in a file in "/etc/ssh/sshd_config.d":
+
+PermitEmptyPasswords no
+
+Restart the SSH daemon for the settings to take effect:
+
+$ sudo systemctl restart sshd.service</xccdf:fixtext>
+          <xccdf:fix id="F-75663r1091829_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271706" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271707">
+        <xccdf:title>SRG-OS-000125-GPOS-00065</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271707r1091833_rule" severity="high" weight="10.0">
+          <xccdf:version>OL09-00-002344</xccdf:version>
+          <xccdf:title>OL 9 must enable the Pluggable Authentication Module (PAM) interface for SSHD.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;When UsePAM is set to "yes", PAM runs through account and session types properly. This is important when restricted access to services based off of IP, time, or other factors of the account is needed. Additionally, this ensures users can inherit certain environment variables on login or disallow access to the server.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000877</xccdf:ident>
+          <xccdf:fixtext fixref="F-75664r1091832_fix">Configure the OL 9 SSHD to use the UsePAM interface by adding or modifying the following line in "/etc/ssh/sshd_config" or in a file in "/etc/ssh/sshd_config.d".
+
+UsePAM yes
+
+Restart the SSH daemon for the settings to take effect:
+
+$ sudo systemctl restart sshd.service</xccdf:fixtext>
+          <xccdf:fix id="F-75664r1091832_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271707" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271708">
+        <xccdf:title>SRG-OS-000109-GPOS-00056</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271708r1092594_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002345</xccdf:version>
+          <xccdf:title>OL 9 must not permit direct logons to the root account using remote access via SSH.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Even though the communications channel may be encrypted, an additional layer of security is gained by extending the policy of not logging directly on as root. In addition, logging in with a user-specific account provides individual accountability of actions performed on the system and also helps to minimize direct attack attempts on root's password.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-004045</xccdf:ident>
+          <xccdf:fixtext fixref="F-75665r1091835_fix">Configure OL 9 to prevent SSH users from logging on directly as root by adding or modifying the following line in "/etc/ssh/sshd_config" or in a file in "/etc/ssh/sshd_config.d".
+
+PermitRootLogin no
+
+Restart the SSH daemon for the settings to take effect:
+
+$ sudo systemctl restart sshd.service</xccdf:fixtext>
+          <xccdf:fix id="F-75665r1091835_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271708" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271709">
+        <xccdf:title>SRG-OS-000163-GPOS-00072</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271709r1091839_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002346</xccdf:version>
+          <xccdf:title>OL 9 must be configured so that all network connections associated with SSH traffic terminate after becoming unresponsive.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Terminating an unresponsive SSH session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a management session enabled on the console or console port that has been left unattended. In addition, quickly terminating an idle SSH session will also free up resources committed by the managed network element.
+
+Terminating network connections associated with communications sessions includes, for example, deallocating associated TCP/IP address/port pairs at the operating system level and deallocating networking assignments at the application level if multiple application sessions are using a single operating system-level network connection. This does not mean the operating system terminates all sessions or network access; it only ends the unresponsive session and releases the resources associated with that session.
+
+OL 9 uses /etc/ssh/sshd_config for configurations of OpenSSH. Within the sshd_config, the product of the values of "ClientAliveInterval" and "ClientAliveCountMax" are used to establish the inactivity threshold. The "ClientAliveInterval" is a timeout interval in seconds, after which if no data has been received from the client, SSHD will send a message through the encrypted channel to request a response from the client. The "ClientAliveCountMax" is the number of client alive messages that may be sent without SSHD receiving any messages back from the client. If this threshold is met, sshd will disconnect the client. For more information on these settings and others, refer to the sshd_config man pages.
+
+Satisfies: SRG-OS-000163-GPOS-00072, SRG-OS-000279-GPOS-00109&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001133</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002361</xccdf:ident>
+          <xccdf:fixtext fixref="F-75666r1091838_fix">Note: This setting must be applied in conjunction with ClientAliveInterval to function correctly.
+
+Configure the SSH server to terminate a user session automatically after the SSH client has become unresponsive.
+
+Modify or append the following lines in the "/etc/ssh/sshd_config" or in a file in "/etc/ssh/sshd_config.d":
+
+ClientAliveCountMax 1
+
+In order for the changes to take effect, the SSH daemon must be restarted.
+
+$ sudo systemctl restart sshd.service</xccdf:fixtext>
+          <xccdf:fix id="F-75666r1091838_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271709" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271710">
+        <xccdf:title>SRG-OS-000163-GPOS-00072</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271710r1092596_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002347</xccdf:version>
+          <xccdf:title>OL 9 must be configured so that all network connections associated with SSH traffic are terminated after 10 minutes of becoming unresponsive.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Terminating an unresponsive SSH session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a management session enabled on the console or console port that has been left unattended. In addition, quickly terminating an idle SSH session will also free up resources committed by the managed network element.
+
+Terminating network connections associated with communications sessions includes, for example, deallocating associated TCP/IP address/port pairs at the operating system level and deallocating networking assignments at the application level if multiple application sessions are using a single operating system-level network connection. This does not mean the operating system terminates all sessions or network access; it only ends the unresponsive session and releases the resources associated with that session.
+
+OL 9 uses /etc/ssh/sshd_config for configurations of OpenSSH. Within the sshd_config, the product of the values of "ClientAliveInterval" and "ClientAliveCountMax" are used to establish the inactivity threshold. The "ClientAliveInterval" is a timeout interval in seconds, after which if no data has been received from the client, SSHD will send a message through the encrypted channel to request a response from the client. The "ClientAliveCountMax" is the number of client alive messages that may be sent without SSHD receiving any messages back from the client. If this threshold is met, SSHD will disconnect the client. For more information on these settings and others, refer to the sshd_config man pages.
+
+Satisfies: SRG-OS-000163-GPOS-00072, SRG-OS-000279-GPOS-00109, SRG-OS-000395-GPOS-00175&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001133</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002361</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002891</xccdf:ident>
+          <xccdf:fixtext fixref="F-75667r1092595_fix">Note: This setting must be applied in conjunction with ClientAliveCountMax" setting to function correctly.
+
+Configure the SSH server to terminate a user session automatically after the SSH client has been unresponsive for 10 minutes.
+
+Modify or append the following lines in the "/etc/ssh/sshd_config" or in a file in "/etc/ssh/sshd_config.d":
+
+ClientAliveInterval 600
+
+In order for the changes to take effect, the SSH daemon must be restarted.
+
+$ sudo systemctl restart sshd.service</xccdf:fixtext>
+          <xccdf:fix id="F-75667r1092595_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271710" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271711">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271711r1091845_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002348</xccdf:version>
+          <xccdf:title>OL 9 SSH daemon must not allow rhosts authentication.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;SSH trust relationships mean a compromise on one host can allow an attacker to move trivially to other hosts.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75668r1091844_fix">Configure the SSH daemon to not allow rhosts authentication.
+
+Add the following line to "/etc/ssh/sshd_config" or to a file in "/etc/ssh/sshd_config.d" or uncomment the line and set the value to "yes":
+
+IgnoreRhosts yes
+
+The SSH service must be restarted for changes to take effect:
+
+$ sudo systemctl restart sshd.service</xccdf:fixtext>
+          <xccdf:fix id="F-75668r1091844_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271711" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271712">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271712r1091848_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002349</xccdf:version>
+          <xccdf:title>OL 9 SSH daemon must not allow known hosts authentication.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Configuring the IgnoreUserKnownHosts setting for the SSH daemon provides additional assurance that remote login via SSH will require a password, even in the event of misconfiguration elsewhere.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75669r1091847_fix">Configure the SSH daemon to not allow known hosts authentication.
+
+Add the following line to "/etc/ssh/sshd_config" or to a file in "/etc/ssh/sshd_config.d" or uncomment the line and set the value to "yes":
+
+IgnoreUserKnownHosts yes
+
+The SSH service must be restarted for changes to take effect:
+
+$ sudo systemctl restart sshd.service</xccdf:fixtext>
+          <xccdf:fix id="F-75669r1091847_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271712" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271713">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271713r1091851_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002350</xccdf:version>
+          <xccdf:title>OL 9 SSH daemon must disable remote X connections for interactive users.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;When X11 forwarding is enabled, there may be additional exposure to the server and client displays if the SSHD proxy display is configured to listen on the wildcard address. By default, SSHD binds the forwarding server to the loopback address and sets the hostname part of the DISPLAY environment variable to localhost. This prevents remote hosts from connecting to the proxy display.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75670r1091850_fix">Configure the SSH daemon to not allow X11 forwarding.
+
+Add the following line to "/etc/ssh/sshd_config" or to a file in "/etc/ssh/sshd_config.d" or uncomment the line and set the value to "no":
+
+X11Forwarding no
+
+The SSH service must be restarted for changes to take effect:
+
+$ sudo systemctl restart sshd.service</xccdf:fixtext>
+          <xccdf:fix id="F-75670r1091850_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271713" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271714">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271714r1091854_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002351</xccdf:version>
+          <xccdf:title>OL 9 SSH daemon must perform strict mode checking of home directory configuration files.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;If other users have access to modify user-specific SSH configuration files, they may be able to log into the system as another user.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75671r1091853_fix">Configure the SSH daemon to perform strict mode checking of home directory configuration files.
+
+Add the following line to "/etc/ssh/sshd_config" or to a file in "/etc/ssh/sshd_config.d" or uncomment the line and set the value to "yes":
+
+StrictModes yes
+
+The SSH service must be restarted for changes to take effect:
+
+$ sudo systemctl restart sshd.service</xccdf:fixtext>
+          <xccdf:fix id="F-75671r1091853_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271714" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271715">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271715r1091857_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002352</xccdf:version>
+          <xccdf:title>OL 9 SSH daemon must display the date and time of the last successful account logon upon an SSH logon.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Providing users feedback on when account accesses last occurred facilitates user recognition and reporting of unauthorized account use.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75672r1091856_fix">Configure the SSH daemon to provide users with feedback on when account accesses last occurred.
+
+Add the following line to "/etc/ssh/sshd_config" or to a file in "/etc/ssh/sshd_config.d" or uncomment the line and set the value to "yes":
+
+PrintLastLog yes
+
+The SSH service must be restarted for changes to take effect:
+
+$ sudo systemctl restart sshd.service</xccdf:fixtext>
+          <xccdf:fix id="F-75672r1091856_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271715" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271716">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271716r1091860_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002354</xccdf:version>
+          <xccdf:title>OL 9 SSH daemon must prevent remote hosts from connecting to the proxy display.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;When X11 forwarding is enabled, there may be additional exposure to the server and client displays if the SSHD proxy display is configured to listen on the wildcard address. By default, SSHD binds the forwarding server to the loopback address and sets the hostname part of the "DISPLAY" environment variable to localhost. This prevents remote hosts from connecting to the proxy display.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75673r1091859_fix">Configure the SSH daemon to prevent remote hosts from connecting to the proxy display.
+
+Add the following line to "/etc/ssh/sshd_config" or to a file in "/etc/ssh/sshd_config.d" or uncomment the line and set the value to "yes":
+
+X11UseLocalhost yes
+
+The SSH service must be restarted for changes to take effect:
+
+$ sudo systemctl restart sshd.service</xccdf:fixtext>
+          <xccdf:fix id="F-75673r1091859_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271716" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271717">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271717r1091863_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002355</xccdf:version>
+          <xccdf:title>OL 9 SSH daemon must not allow compression or must only allow compression after successful authentication.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;If compression is allowed in an SSH connection prior to authentication, vulnerabilities in the compression software could result in compromise of the system from an unauthenticated connection, potentially with root privileges.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75674r1091862_fix">Configure the SSH daemon to not allow compression.
+
+Add the following line to "/etc/ssh/sshd_config" or to a file in "/etc/ssh/sshd_config.d" or uncomment the line and set the value to "delayed" or "no":
+
+Compression no
+
+The SSH service must be restarted for changes to take effect:
+
+$ sudo systemctl restart sshd.service</xccdf:fixtext>
+          <xccdf:fix id="F-75674r1091862_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271717" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271718">
+        <xccdf:title>SRG-OS-000364-GPOS-00151</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271718r1091866_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002356</xccdf:version>
+          <xccdf:title>OL 9 SSH daemon must not allow Kerberos authentication.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Kerberos authentication for SSH is often implemented using Generic Security Service Application Program Interface (GSSAPI). If Kerberos is enabled through SSH, the SSH daemon provides a means of access to the system's Kerberos implementation. Vulnerabilities in the system's Kerberos implementations may be subject to exploitation.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001813</xccdf:ident>
+          <xccdf:fixtext fixref="F-75675r1091865_fix">Configure the SSH daemon to not allow Kerberos authentication.
+
+Add the following line in "/etc/ssh/sshd_config" or to a file in "/etc/ssh/sshd_config.d" or uncomment the line and set the value to "no":
+
+KerberosAuthentication no
+
+The SSH service must be restarted for changes to take effect:
+
+$ sudo systemctl restart sshd.service</xccdf:fixtext>
+          <xccdf:fix id="F-75675r1091865_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271718" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271719">
+        <xccdf:title>SRG-OS-000480-GPOS-00229</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271719r1091869_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002357</xccdf:version>
+          <xccdf:title>OL 9 must not allow a noncertificate trusted host SSH logon to the system.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;SSH trust relationships mean a compromise on one host can allow an attacker to move trivially to other hosts.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75676r1091868_fix">Configure OL 9 to not allow a noncertificate trusted host SSH logon to access the system.
+
+Add or modify the following line in "/etc/ssh/sshd_config" or in a file in "/etc/ssh/sshd_config.d".
+
+HostbasedAuthentication no
+
+Restart the SSH daemon for the settings to take effect:
+
+$ sudo systemctl restart sshd.service</xccdf:fixtext>
+          <xccdf:fix id="F-75676r1091868_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271719" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271720">
+        <xccdf:title>SRG-OS-000480-GPOS-00229</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271720r1091872_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002358</xccdf:version>
+          <xccdf:title>OL 9 must not allow users to override SSH environment variables.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;SSH environment options potentially allow users to bypass access restriction in some configurations.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75677r1091871_fix">Configure the OL 9 SSH daemon to not allow unattended or automatic logon to the system.
+
+Add or edit the following line in the "/etc/ssh/sshd_config" or in a file in "/etc/ssh/sshd_config.d":
+
+PermitUserEnvironment no
+
+Restart the SSH daemon for the setting to take effect:
+
+$ sudo systemctl restart sshd.service</xccdf:fixtext>
+          <xccdf:fix id="F-75677r1091871_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271720" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271721">
+        <xccdf:title>SRG-OS-000105-GPOS-00052</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271721r1091875_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002359</xccdf:version>
+          <xccdf:title>OL 9 SSHD must accept public key authentication.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without the use of multifactor authentication, the ease of access to privileged functions is greatly increased. Multifactor authentication requires using two or more factors to achieve authentication. A privileged account is defined as an information system account with authorizations of a privileged user. A DOD CAC with DOD-approved PKI is an example of multifactor authentication.
+
+Satisfies: SRG-OS-000105-GPOS-00052, SRG-OS-000106-GPOS-00053, SRG-OS-000107-GPOS-00054, SRG-OS-000108-GPOS-00055&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000765</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000766</xccdf:ident>
+          <xccdf:fixtext fixref="F-75678r1091874_fix">Configure OL 9 to accept public key authentication by adding or modifying the following line in "/etc/ssh/sshd_config".
+
+PubkeyAuthentication yes
+
+Restart the SSH daemon for the settings to take effect:
+
+$ sudo systemctl restart sshd.service</xccdf:fixtext>
+          <xccdf:fix id="F-75678r1091874_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271721" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271722">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271722r1091878_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002360</xccdf:version>
+          <xccdf:title>OL 9 must require reauthentication when using the "sudo" command.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without reauthentication, users may access resources or perform tasks for which they do not have authorization. 
+
+When operating systems provide the capability to escalate a functional capability, it is critical the organization requires the user to reauthenticate when using the "sudo" command.
+
+If the value is set to an integer less than "0", the user's time stamp will not expire and the user will not have to reauthenticate for privileged actions until the user's session is terminated.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75679r1091877_fix">Configure OL 9 to reauthenticate "sudo" commands after the specified timeout:
+
+Add the following line to "/etc/sudoers":
+
+Defaults timestamp_timeout=0</xccdf:fixtext>
+          <xccdf:fix id="F-75679r1091877_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271722" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271723">
+        <xccdf:title>SRG-OS-000312-GPOS-00123</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271723r1091881_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002361</xccdf:version>
+          <xccdf:title>OL 9 must restrict the use of the su command.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The su program allows to run commands with a substitute user and group ID. It is commonly used to run commands as the root user. Limiting access to such commands is considered a good security practice.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002165</xccdf:ident>
+          <xccdf:fixtext fixref="F-75680r1091880_fix">Configure OL 9 to require users to be in the "wheel" group to run su command.
+
+In file "/etc/pam.d/su", uncomment the following line:
+
+"#auth    required    pam_wheel.so use_uid"
+
+Or use the following command to update /etc/pam.d/su 
+
+$ sed '/^[[:space:]]*#[[:space:]]*auth[[:space:]]\+required[[:space:]]\+pam_wheel\.so[[:space:]]\+use_uid$/s/^[[:space:]]*#//' -i /etc/pam.d/su
+
+If necessary, create a "wheel" group and add administrative users to the group.
+
+$ grep wheel /etc/group</xccdf:fixtext>
+          <xccdf:fix id="F-75680r1091880_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271723" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271724">
+        <xccdf:title>SRG-OS-000327-GPOS-00127</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271724r1091884_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002362</xccdf:version>
+          <xccdf:title>OL 9 must require users to reauthenticate for privilege escalation.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without reauthentication, users may access resources or perform tasks for which they do not have authorization.
+
+When operating systems provide the capability to escalate a functional capability, it is critical that the user reauthenticate.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002234</xccdf:ident>
+          <xccdf:fixtext fixref="F-75681r1091883_fix">Configure OL 9 to not allow users to execute privileged actions without authenticating.
+
+Remove any occurrence of "!authenticate" found in "/etc/sudoers" file or files in the "/etc/sudoers.d" directory.
+
+$ sudo sed -i '/\!authenticate/ s/^/# /g' /etc/sudoers /etc/sudoers.d/*</xccdf:fixtext>
+          <xccdf:fix id="F-75681r1091883_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271724" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271725">
+        <xccdf:title>SRG-OS-000327-GPOS-00127</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271725r1155318_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002363</xccdf:version>
+          <xccdf:title>OL 9 must require users to provide a password for privilege escalation.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without reauthentication, users may access resources or perform tasks for which they do not have authorization.
+
+When operating systems provide the capability to escalate a functional capability, it is critical that the user reauthenticate.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002234</xccdf:ident>
+          <xccdf:fixtext fixref="F-75682r1091886_fix">Configure OL 9 to not allow users to execute privileged actions without authenticating with a password.
+
+Remove any occurrence of "NOPASSWD" found in "/etc/sudoers" file or files in the "/etc/sudoers.d" directory.
+
+$ sudo sed -i '/NOPASSWD/ s/^/# /g' /etc/sudoers /etc/sudoers.d/*</xccdf:fixtext>
+          <xccdf:fix id="F-75682r1091886_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271725" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271726">
+        <xccdf:title>SRG-OS-000327-GPOS-00127</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271726r1091890_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002364</xccdf:version>
+          <xccdf:title>OL 9 must not be configured to bypass password requirements for privilege escalation.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without reauthentication, users may access resources or perform tasks for which they do not have authorization. When operating systems provide the capability to escalate a functional capability, it is critical the user reauthenticate.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002234</xccdf:ident>
+          <xccdf:fixtext fixref="F-75683r1091889_fix">Configure the operating system to require users to supply a password for privilege escalation.
+
+Remove any occurrences of " pam_succeed_if " in the  "/etc/pam.d/sudo" file.</xccdf:fixtext>
+          <xccdf:fix id="F-75683r1091889_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271726" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271727">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271727r1091893_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002370</xccdf:version>
+          <xccdf:title>OL 9 must disable the use of user namespaces.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;User namespaces are used primarily for Linux containers. The value "0" disallows the use of user namespaces.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75684r1091892_fix">Configure OL 9 to disable the use of user namespaces by adding the following line to a file, in the "/etc/sysctl.d" directory:
+
+Note: User namespaces are used primarily for Linux containers. If containers are in use, this requirement is Not Applicable. 
+
+user.max_user_namespaces = 0
+
+The system configuration files need to be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
+
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-75684r1091892_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271727" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271728">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271728r1091896_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002380</xccdf:version>
+          <xccdf:title>OL 9 must disable the kernel.core_pattern.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75685r1091895_fix">Configure OL 9 to disable storing core dumps.
+
+Add or edit the following line in a system configuration file, in the "/etc/sysctl.d/" directory:
+
+kernel.core_pattern = |/bin/false
+
+The system configuration files need to be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
+
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-75685r1091895_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271728" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271729">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271729r1155325_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002381</xccdf:version>
+          <xccdf:title>OL 9 must disable core dump backtraces.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers or system operators trying to debug problems.
+
+Enabling core dumps on production systems is not recommended; however, there may be overriding operational requirements to enable advanced debugging. Permitting temporary enablement of core dumps during such situations must be reviewed through local needs and policy.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxKernelDumps" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75686r1091898_fix">Configure the operating system to disable core dump backtraces.
+
+Add or modify the following line in /etc/systemd/coredump.conf:
+
+ProcessSizeMax=0</xccdf:fixtext>
+          <xccdf:fix id="F-75686r1091898_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271729" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271730">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271730r1155327_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002382</xccdf:version>
+          <xccdf:title>OL 9 must disable storing core dumps.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers or system operators trying to debug problems. Enabling core dumps on production systems is not recommended; however, there may be overriding operational requirements to enable advanced debugging. Permitting temporary enablement of core dumps during such situations must be reviewed through local needs and policy.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxKernelDumps" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75687r1091901_fix">Configure the operating system to disable storing core dumps for all users.
+
+Add or modify the following line in /etc/systemd/coredump.conf:
+
+Storage=none</xccdf:fixtext>
+          <xccdf:fix id="F-75687r1091901_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271730" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271731">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271731r1155302_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002383</xccdf:version>
+          <xccdf:title>OL 9 must disable core dumps for all users.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxKernelDumps" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75688r1155301_fix">Configure OL 9 to disable core dumps for all users.
+
+Add the following line to the top of the /etc/security/limits.conf or in a single ".conf" file defined in /etc/security/limits.d/:
+
+* hard core 0
+
+Remove or comment out any entries for users or groups with a value set to anything other than "0".</xccdf:fixtext>
+          <xccdf:fix id="F-75688r1155301_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271731" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271732">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271732r1155329_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002384</xccdf:version>
+          <xccdf:title>OL 9 must disable acquiring, saving, and processing core dumps.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxKernelDumps" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75689r1091907_fix">Configure the system to disable the systemd-coredump.socket with the following command:
+
+$ sudo systemctl mask --now systemd-coredump.socket
+
+Created symlink /etc/systemd/system/systemd-coredump.socket -&gt; /dev/null
+
+Reload the daemon for this change to take effect.
+
+$ sudo systemctl daemon-reload</xccdf:fixtext>
+          <xccdf:fix id="F-75689r1091907_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271732" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271733">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271733r1092598_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002385</xccdf:version>
+          <xccdf:title>OL 9 must be configured so that the kdump service is disabled.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Kernel core dumps may contain the full contents of system memory at the time of the crash. Kernel core dumps consume a considerable amount of disk space and may result in denial of service by exhausting the available space on the target file system partition. Unless the system is used for kernel development or testing, there is little need to run the kdump service.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75690r1092597_fix">Configure OL 9 to disable and mask the kdump service.
+
+To disable the kdump service, run the following command:
+
+$ sudo systemctl disable --now kdump
+
+To mask the kdump service, run the following command:
+
+$ sudo systemctl mask --now kdump</xccdf:fixtext>
+          <xccdf:fix id="F-75690r1092597_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271733" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271734">
+        <xccdf:title>SRG-OS-000433-GPOS-00192</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271734r1091914_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002390</xccdf:version>
+          <xccdf:title>OL 9 must clear SLUB/SLAB objects to prevent use-after-free attacks.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Some adversaries launch attacks with the intent of executing code in nonexecutable regions of memory or in memory locations that are prohibited. Security safeguards employed to protect memory include, for example, data execution prevention and address space layout randomization. Data execution prevention safeguards can be either hardware-enforced or software-enforced with hardware providing the greater strength of mechanism.
+
+Poisoning writes an arbitrary value to freed pages, so any modification or reference to that page after being freed or before being initialized will be detected and prevented. This prevents many types of use-after-free vulnerabilities at little performance cost. Also prevents leak of data and detection of corrupted memory.
+
+SLAB objects are blocks of physically contiguous memory. SLUB is the unqueued SLAB allocator.
+
+Satisfies: SRG-OS-000433-GPOS-00192, SRG-OS-000134-GPOS-00068&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002824</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001084</xccdf:ident>
+          <xccdf:fixtext fixref="F-75691r1091913_fix">Configure OL 9 to enable poisoning of SLUB/SLAB objects with the following commands:
+
+$ sudo grubby --update-kernel=ALL --args="slub_debug=P"
+
+Add or modify the following line in "/etc/default/grub" to ensure the configuration survives kernel updates:
+
+GRUB_CMDLINE_LINUX="slub_debug=P"</xccdf:fixtext>
+          <xccdf:fix id="F-75691r1091913_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271734" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271735">
+        <xccdf:title>SRG-OS-000433-GPOS-00193</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271735r1091917_rule" severity="low" weight="10.0">
+          <xccdf:version>OL09-00-002391</xccdf:version>
+          <xccdf:title>OL 9 must enable mitigations against processor-based vulnerabilities.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Kernel page-table isolation is a kernel feature that mitigates the Meltdown security vulnerability and hardens the kernel against attempts to bypass kernel address space layout randomization (KASLR).
+
+Satisfies: SRG-OS-000433-GPOS-00193, SRG-OS-000095-GPOS-00049&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002824</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
+          <xccdf:fixtext fixref="F-75692r1091916_fix">Configure OL 9 to enable kernel page-table isolation with the following command:
+
+$ sudo grubby --update-kernel=ALL --args="pti=on"
+
+Add or modify the following line in "/etc/default/grub" to ensure the configuration survives kernel updates:
+
+GRUB_CMDLINE_LINUX="pti=on"</xccdf:fixtext>
+          <xccdf:fix id="F-75692r1091916_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271735" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271736">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271736r1091920_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002392</xccdf:version>
+          <xccdf:title>OL 9 must disable the ability of systemd to spawn an interactive boot process.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Using interactive or recovery boot, the console user could disable auditing, firewalls, or other services, weakening system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75693r1091919_fix">Configure OL 9 to allocate sufficient audit_backlog_limit to disable the ability of systemd to spawn an interactive boot process with the following command:
+
+$ sudo grubby --update-kernel=ALL --remove-args="systemd.confirm_spawn"</xccdf:fixtext>
+          <xccdf:fix id="F-75693r1091919_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271736" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271737">
+        <xccdf:title>SRG-OS-000134-GPOS-00068</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271737r1094967_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002393</xccdf:version>
+          <xccdf:title>OL 9 must disable virtual system calls.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;System calls are special routines in the Linux kernel, which userspace applications ask to do privileged tasks. Invoking a system call is an expensive operation because the processor must interrupt the currently executing task and switch context to kernel mode and then back to userspace after the system call completes. Virtual system calls map into user space a page that contains some variables and the implementation of some system calls. This allows the system calls to be executed in userspace to alleviate the context switching expense.
+
+Virtual system calls provide an opportunity of attack for a user who has control of the return instruction pointer. Disabling virtual system calls help to prevent return-oriented programming (ROP) attacks via buffer overflows and overruns. If the system intends to run containers based on OL 6 components, virtual system calls will have to be enabled so the components function properly.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001084</xccdf:ident>
+          <xccdf:fixtext fixref="F-75694r1091922_fix">Document the use of virtual system calls with the ISSO as an operational requirement or disable them with the following command:
+
+$ sudo grubby --update-kernel=ALL --args="vsyscall=none"
+
+Add or modify the following line in "/etc/default/grub" to ensure the configuration survives kernel updates:
+
+GRUB_CMDLINE_LINUX="vsyscall=none"</xccdf:fixtext>
+          <xccdf:fix id="F-75694r1091922_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271737" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271738">
+        <xccdf:title>SRG-OS-000134-GPOS-00068</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271738r1092600_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002394</xccdf:version>
+          <xccdf:title>OL 9 must clear the page allocator to prevent use-after-free attacks.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Poisoning writes an arbitrary value to freed pages, so any modification or reference to that page after being freed or before being initialized will be detected and prevented. This prevents many types of use-after-free vulnerabilities at little performance cost. Also prevents leak of data and detection of corrupted memory.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001084</xccdf:ident>
+          <xccdf:fixtext fixref="F-75695r1091925_fix">Configure OL 9 to enable page poisoning with the following commands:
+
+$ sudo grubby --update-kernel=ALL --args="page_poison=1"
+
+Add or modify the following line in "/etc/default/grub" to ensure the configuration survives kernel updates:
+
+GRUB_CMDLINE_LINUX="page_poison=1"</xccdf:fixtext>
+          <xccdf:fix id="F-75695r1091925_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271738" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271739">
+        <xccdf:title>SRG-OS-000269-GPOS-00103</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271739r1091929_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002400</xccdf:version>
+          <xccdf:title>OL 9 systemd-journald service must be enabled.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;In the event of a system failure, OL 9 must preserve any information necessary to determine cause of failure and any information necessary to return to operations with least disruption to system processes.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001665</xccdf:ident>
+          <xccdf:fixtext fixref="F-75696r1091928_fix">Configure OL 9 to enable the systemd-journald service with the following command:
+
+$ sudo systemctl enable --now systemd-journald</xccdf:fixtext>
+          <xccdf:fix id="F-75696r1091928_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271739" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271740">
+        <xccdf:title>SRG-OS-000312-GPOS-00123</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271740r1091932_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002401</xccdf:version>
+          <xccdf:title>OL 9 must enable kernel parameters to enforce discretionary access control on hardlinks.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;By enabling the fs.protected_hardlinks kernel parameter, users can no longer create soft or hard links to files they do not own. Disallowing such hardlinks mitigates vulnerabilities based on insecure file system accessed by privileged programs, avoiding an exploitation vector exploiting unsafe use of open() or creat().
+
+Satisfies: SRG-OS-000312-GPOS-00123, SRG-OS-000324-GPOS-00125&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002165</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002235</xccdf:ident>
+          <xccdf:fixtext fixref="F-75697r1091931_fix">Configure OL 9 to enable DAC on hardlinks with the following:
+
+Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+
+fs.protected_hardlinks = 1
+
+Load settings from all system configuration files with the following command:
+
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-75697r1091931_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271740" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271741">
+        <xccdf:title>SRG-OS-000312-GPOS-00123</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271741r1091935_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002402</xccdf:version>
+          <xccdf:title>OL 9 must enable kernel parameters to enforce discretionary access control on symlinks.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;By enabling the fs.protected_symlinks kernel parameter, symbolic links are permitted to be followed only when outside a sticky world-writable directory, or when the user identifier (UID) of the link and follower match, or when the directory owner matches the symlink's owner. Disallowing such symlinks helps mitigate vulnerabilities based on insecure file system accessed by privileged programs, avoiding an exploitation vector exploiting unsafe use of open() or creat().
+
+Satisfies: SRG-OS-000312-GPOS-00123, SRG-OS-000324-GPOS-00125&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002165</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002235</xccdf:ident>
+          <xccdf:fixtext fixref="F-75698r1091934_fix">Configure OL 9 to enable DAC on symlinks with the following:
+
+Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+
+fs.protected_symlinks = 1
+
+Load settings from all system configuration files with the following command:
+
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-75698r1091934_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271741" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271742">
+        <xccdf:title>SRG-OS-000324-GPOS-00125</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271742r1091938_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002403</xccdf:version>
+          <xccdf:title>OL 9 debug-shell systemd service must be disabled.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The debug-shell requires no authentication and provides root privileges to anyone who has physical access to the machine. While this feature is disabled by default, masking it adds an additional layer of assurance that it will not be enabled via a dependency in systemd. This also prevents attackers with physical access from trivially bypassing security on the machine through valid troubleshooting configurations and gaining root access when the system is rebooted.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002235</xccdf:ident>
+          <xccdf:fixtext fixref="F-75699r1091937_fix">Configure OL 9 to mask the debug-shell systemd service with the following command:
+
+$ sudo systemctl disable --now debug-shell.service
+$ sudo systemctl mask --now debug-shell.service</xccdf:fixtext>
+          <xccdf:fix id="F-75699r1091937_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271742" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271743">
+        <xccdf:title>SRG-OS-000033-GPOS-00014</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271743r1092635_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002404</xccdf:version>
+          <xccdf:title>OL 9 IP tunnels must use 140-3 approved cryptographic algorithms.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Overriding the system crypto policy makes the behavior of the Libreswan service violate expectations and makes system configuration more fragmented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxLibreswan" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000068</xccdf:ident>
+          <xccdf:fixtext fixref="F-75700r1092602_fix">Configure IPsec to use the systemwide cryptographic policy.
+
+Add the following line to "/etc/ipsec.conf":
+
+include /etc/crypto-policies/back-ends/libreswan.config</xccdf:fixtext>
+          <xccdf:fix id="F-75700r1092602_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271743" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271745">
+        <xccdf:title>SRG-OS-000132-GPOS-00067</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271745r1117266_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002406</xccdf:version>
+          <xccdf:title>OL 9 must restrict access to the kernel message buffer.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
+
+This requirement generally applies to the design of an information technology product, but it can also apply to the configuration of particular information system components that are, or use, such products. This can be verified by acceptance/validation processes in DOD or other government agencies.
+
+There may be shared resources with configurable protections (e.g., files in storage) that may be assessed on specific information system components.
+
+Restricting access to the kernel message buffer limits access to only root. This prevents attackers from gaining additional system information as a nonprivileged user.
+
+Satisfies: SRG-OS-000132-GPOS-00067, SRG-OS-000138-GPOS-00069&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001082</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001090</xccdf:ident>
+          <xccdf:fixtext fixref="F-75702r1091946_fix">Configure OL 9 to restrict access to the kernel message buffer.
+
+Add or edit the following line in /etc/sysctl.d/99-sysctl.conf system configuration file:
+
+kernel.dmesg_restrict = 1
+
+Load settings from all system configuration files with the following command:
+
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-75702r1091946_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271745" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271746">
+        <xccdf:title>SRG-OS-000132-GPOS-00067</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271746r1117266_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002407</xccdf:version>
+          <xccdf:title>OL 9 must prevent kernel profiling by nonprivileged users.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
+
+This requirement generally applies to the design of an information technology product, but it can also apply to the configuration of particular information system components that are, or use, such products. This can be verified by acceptance/validation processes in DOD or other government agencies.
+
+There may be shared resources with configurable protections (e.g., files in storage) that may be assessed on specific information system components.
+
+Setting the kernel.perf_event_paranoid kernel parameter to "2" prevents attackers from gaining additional system information as a nonprivileged user.
+
+Satisfies: SRG-OS-000132-GPOS-00067, SRG-OS-000138-GPOS-00069&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001082</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001090</xccdf:ident>
+          <xccdf:fixtext fixref="F-75703r1091949_fix">Configure OL 9 to prevent kernel profiling by nonprivileged users.
+
+Add or edit the following line in /etc/sysctl.d/99-sysctl.conf system configuration file:
+
+kernel.perf_event_paranoid = 2
+
+Load settings from all system configuration files with the following command:
+
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-75703r1091949_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271746" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271747">
+        <xccdf:title>SRG-OS-000132-GPOS-00067</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271747r1117266_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002408</xccdf:version>
+          <xccdf:title>OL 9 must restrict exposed kernel pointer addresses access.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Exposing kernel pointers (through procfs or "seq_printf()") exposes kernel writeable structures, which may contain functions pointers. If a write vulnerability occurs in the kernel, allowing write access to any of this structure, the kernel can be compromised. This option disallows any program without the CAP_SYSLOG capability to get the addresses of kernel pointers by replacing them with "0".
+
+Satisfies: SRG-OS-000132-GPOS-00067, SRG-OS-000433-GPOS-00192&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001082</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002824</xccdf:ident>
+          <xccdf:fixtext fixref="F-75704r1091952_fix">Configure OL 9 to prevent the leak of kernel pointers to unprivileged users.
+
+Add or edit the following line in /etc/sysctl.d/99-sysctl.conf system configuration file:
+
+kernel.kptr_restrict = 1
+
+Reload settings from all system configuration files with the following command:
+
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-75704r1091952_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271747" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271748">
+        <xccdf:title>SRG-OS-000132-GPOS-00067</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271748r1117266_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002409</xccdf:version>
+          <xccdf:title>OL 9 must disable access to network bpf system call from nonprivileged processes.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Loading and accessing the packet filters programs and maps using the bpf() system call has the potential of revealing sensitive information about the kernel state.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001082</xccdf:ident>
+          <xccdf:fixtext fixref="F-75705r1091955_fix">Configure OL 9 to prevent privilege escalation thru the kernel by disabling access to the bpf syscall by adding the following line to a file, in the "/etc/sysctl.d" directory:
+
+kernel.unprivileged_bpf_disabled = 1
+
+The system configuration files need to be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
+
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-75705r1091955_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271748" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271749">
+        <xccdf:title>SRG-OS-000132-GPOS-00067</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271749r1117266_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002410</xccdf:version>
+          <xccdf:title>OL 9 must restrict usage of ptrace to descendant processes.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Unrestricted usage of ptrace allows compromised binaries to run ptrace on other processes of the user. Like this, the attacker can steal sensitive information from the target processes (e.g., SSH sessions, web browser, etc.) without any additional assistance from the user (i.e., without resorting to phishing).&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001082</xccdf:ident>
+          <xccdf:fixtext fixref="F-75706r1091958_fix">Configure OL 9 to restrict usage of ptrace to descendant processes by adding the following line to "/etc/sysctl.d/99-sysctl.conf":
+
+kernel.yama.ptrace_scope = 1
+
+The system configuration files need to be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
+
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-75706r1091958_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271749" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271750">
+        <xccdf:title>SRG-OS-000163-GPOS-00072</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271750r1091962_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002411</xccdf:version>
+          <xccdf:title>OL 9 must automatically exit interactive command shell user sessions after 15 minutes of inactivity.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Terminating an idle interactive command shell user session within a short time period reduces the window of opportunity for unauthorized personnel to take control of it when left unattended in a virtual terminal or physical console.
+
+Satisfies: SRG-OS-000163-GPOS-00072, SRG-OS-000029-GPOS-00010&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001133</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000057</xccdf:ident>
+          <xccdf:fixtext fixref="F-75707r1091961_fix">Configure OL 9 to exit interactive command shell user sessions after 15 minutes of inactivity.
+
+Add or edit the following line in "/etc/profile.d/tmout.sh":
+
+#!/bin/bash
+
+declare -xr TMOUT=900</xccdf:fixtext>
+          <xccdf:fix id="F-75707r1091961_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271750" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271751">
+        <xccdf:title>SRG-OS-000324-GPOS-00125</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271751r1155321_rule" severity="high" weight="10.0">
+          <xccdf:version>OL09-00-002412</xccdf:version>
+          <xccdf:title>OL 9 must be configured so that the systemd Ctrl-Alt-Delete burst key sequence is disabled.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;A locally logged-on user who presses Ctrl-Alt-Delete when at the console can reboot the system. If accidentally pressed, as could happen in the case of a mixed OS environment, this can create the risk of short-term loss of availability of systems due to unintentional reboot. In a graphical user environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is reduced because the user will be prompted before any action is taken.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002235</xccdf:ident>
+          <xccdf:fixtext fixref="F-75708r1155320_fix">Configure OL 9 to disable the CtrlAltDelBurstAction by adding it to a drop file in a "/etc/systemd/system.conf.d/" configuration file:
+
+If no drop file exists, create one with the following command:
+
+$ sudo mkdir -p /etc/systemd/system.conf.d &amp;&amp; sudo vi /etc/systemd/system.conf.d/55-CtrlAltDel-BurstAction
+
+Edit the file to contain the setting by adding the following text:
+
+CtrlAltDelBurstAction=none
+
+Reload the daemon for this change to take effect.
+
+$ sudo systemctl daemon-reload</xccdf:fixtext>
+          <xccdf:fix id="F-75708r1155320_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271751" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271752">
+        <xccdf:title>SRG-OS-000324-GPOS-00125</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271752r1091968_rule" severity="high" weight="10.0">
+          <xccdf:version>OL09-00-002413</xccdf:version>
+          <xccdf:title>OL 9 must be configured so that the x86 Ctrl-Alt-Delete key sequence is disabled.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;A locally logged-on user who presses Ctrl-Alt-Delete when at the console can reboot the system. If accidentally pressed, as could happen in the case of a mixed OS environment, this can create the risk of short-term loss of availability of systems due to unintentional reboot. In a graphical user environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is reduced because the user will be prompted before any action is taken.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002235</xccdf:ident>
+          <xccdf:fixtext fixref="F-75709r1091967_fix">Configure OL 9 to disable the ctrl-alt-del.target with the following command:
+
+$ sudo systemctl disable --now ctrl-alt-del.target
+$ sudo systemctl mask --now ctrl-alt-del.target</xccdf:fixtext>
+          <xccdf:fix id="F-75709r1091967_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271752" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271753">
+        <xccdf:title>SRG-OS-000027-GPOS-00008</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271753r1091971_rule" severity="low" weight="10.0">
+          <xccdf:version>OL09-00-002415</xccdf:version>
+          <xccdf:title>OL 9 must limit the number of concurrent sessions to ten for all accounts and/or account types.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Operating system management includes the ability to control the number of users and user sessions that use an operating system. Limiting the number of allowed users and sessions per user is helpful in reducing the risks related to denial-of-service (DoS) attacks.
+
+This requirement addresses concurrent sessions for information system accounts and does not address concurrent sessions by single users via multiple system accounts. The maximum number of concurrent sessions must be defined based on mission needs and the operational environment for each system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000054</xccdf:ident>
+          <xccdf:fixtext fixref="F-75710r1091970_fix">Configure OL 9 to limit the number of concurrent sessions to "10" for all accounts and/or account types.
+
+Add the following line to the /etc/security/limits.conf or in a ".conf" file defined in /etc/security/limits.d/:
+
+* hard maxlogins 10</xccdf:fixtext>
+          <xccdf:fix id="F-75710r1091970_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271753" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271754">
+        <xccdf:title>SRG-OS-000329-GPOS-00128</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271754r1091974_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002416</xccdf:version>
+          <xccdf:title>OL 9 must automatically lock an account when three unsuccessful logon attempts occur during a 15-minute time period.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;By limiting the number of failed logon attempts the risk of unauthorized system access via user password guessing, otherwise known as brute-forcing, is reduced. Limits are imposed by locking the account.
+
+Satisfies: SRG-OS-000329-GPOS-00128, SRG-OS-000021-GPOS-00005&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002238</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000044</xccdf:ident>
+          <xccdf:fixtext fixref="F-75711r1091973_fix">Configure OL 9 to lock out the "root" account after a number of incorrect login attempts within 15 minutes using "pam_faillock.so" by enabling the feature using the following command:
+ 
+$ sudo authselect enable-feature with-faillock  
+
+Then edit the "/etc/security/faillock.conf" file as follows:
+
+fail_interval = 900</xccdf:fixtext>
+          <xccdf:fix id="F-75711r1091973_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271754" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271755">
+        <xccdf:title>SRG-OS-000329-GPOS-00128</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271755r1091977_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002417</xccdf:version>
+          <xccdf:title>OL 9 must maintain an account lock until the locked account is released by an administrator.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;By limiting the number of failed logon attempts the risk of unauthorized system access via user password guessing, otherwise known as brute-forcing, is reduced. Limits are imposed by locking the account.
+
+Satisfies: SRG-OS-000329-GPOS-00128, SRG-OS-000021-GPOS-00005&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002238</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000044</xccdf:ident>
+          <xccdf:fixtext fixref="F-75712r1091976_fix">Configure OL 9 to lock an account until released by an administrator after three unsuccessful logon attempts with the command:
+ 
+$ sudo authselect enable-feature with-faillock  
+
+Then edit the "/etc/security/faillock.conf" file as follows:
+
+unlock_time = 0</xccdf:fixtext>
+          <xccdf:fix id="F-75712r1091976_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271755" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271757">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271757r1092604_rule" severity="high" weight="10.0">
+          <xccdf:version>OL09-00-002419</xccdf:version>
+          <xccdf:title>OL 9 file systems must not contain shosts.equiv files.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The shosts.equiv files are used to configure host-based authentication for the system via SSH. Host-based authentication is not sufficient for preventing unauthorized access to the system, as it does not require interactive identification and authentication of a connection request, or for the use of two-factor authentication.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75714r1091982_fix">Remove any found "shosts.equiv" files from the system.
+
+$ sudo rm /[path]/[to]/[file]/shosts.equiv</xccdf:fixtext>
+          <xccdf:fix id="F-75714r1091982_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271757" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271758">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271758r1091986_rule" severity="high" weight="10.0">
+          <xccdf:version>OL09-00-002420</xccdf:version>
+          <xccdf:title>OL 9 file systems must not contain .shosts files.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The .shosts files are used to configure host-based authentication for individual users or the system via SSH. Host-based authentication is not sufficient for preventing unauthorized access to the system, as it does not require interactive identification and authentication of a connection request, or for the use of two-factor authentication.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75715r1091985_fix">Remove any found ".shosts" files from the system.
+
+$ sudo rm /[path]/[to]/[file]/.shosts</xccdf:fixtext>
+          <xccdf:fix id="F-75715r1091985_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271758" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271759">
+        <xccdf:title>SRG-OS-000423-GPOS-00187</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271759r1091989_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002421</xccdf:version>
+          <xccdf:title>OL 9 must implement DOD-approved encryption in the bind package.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
+
+Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
+
+OL 9 incorporates system-wide crypto policies by default. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/ directory.
+
+Satisfies: SRG-OS-000423-GPOS-00187, SRG-OS-000426-GPOS-00190&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxBIND" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002418</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002422</xccdf:ident>
+          <xccdf:fixtext fixref="F-75716r1091988_fix">Configure BIND to use the system crypto policy.
+
+Add the following line to the "options" section in "/etc/named.conf":
+
+include "/etc/crypto-policies/back-ends/bind.config";</xccdf:fixtext>
+          <xccdf:fix id="F-75716r1091988_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271759" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271761">
+        <xccdf:title>SRG-OS-000433-GPOS-00193</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271761r1091995_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002423</xccdf:version>
+          <xccdf:title>OL 9 must implement address space layout randomization (ASLR) to protect its memory from unauthorized code execution.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;ASLR makes it more difficult for an attacker to predict the location of attack code they have introduced into a process' address space during an attempt at exploitation. Additionally, ASLR makes it more difficult for an attacker to know the location of existing code to repurpose it using return-oriented programming (ROP) techniques.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002824</xccdf:ident>
+          <xccdf:fixtext fixref="F-75718r1091994_fix">Configure OL 9 to implement address space layout randomization (ASLR) to protect its memory from unauthorized code execution.
+
+Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+
+kernel.randomize_va_space = 2
+
+Reload settings from all system configuration files with the following command:
+
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-75718r1091994_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271761" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271763">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271763r1092001_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002425</xccdf:version>
+          <xccdf:title>OL 9 must be configured to prevent unrestricted mail relaying.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;If unrestricted mail relaying is permitted, unauthorized senders could use this host as a mail relay for the purpose of sending spam or other unauthorized activity.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxPostfix" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75720r1092000_fix">Modify the postfix configuration file to restrict client connections to the local network with the following command:
+
+$ sudo postconf -e 'smtpd_client_restrictions = permit_mynetworks,reject'</xccdf:fixtext>
+          <xccdf:fix id="F-75720r1092000_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271763" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271766">
+        <xccdf:title>SRG-OS-000366-GPOS-00153</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271766r1092010_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002428</xccdf:version>
+          <xccdf:title>OL 9 must prevent the loading of a new kernel for later execution.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Changes to any software components can have significant effects on the overall security of the operating system. This requirement ensures the software has not been tampered with and that it has been provided by a trusted vendor.
+
+Disabling kexec_load prevents an unsigned kernel image (that could be a windows kernel or modified vulnerable kernel) from being loaded. Kexec can be used subvert the entire secureboot process and should be avoided at all costs especially since it can load unsigned kernel images.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-003992</xccdf:ident>
+          <xccdf:fixtext fixref="F-75723r1092009_fix">Configure OL 9 to prevent the loading of a new kernel for later execution.
+
+Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+
+kernel.kexec_load_disabled = 1
+
+Load settings from all system configuration files with the following command:
+
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-75723r1092009_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271766" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271768">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271768r1092016_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002430</xccdf:version>
+          <xccdf:title>OL 9 must enable hardening for the Berkeley Packet Filter (BPF) just-in-time compiler.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;When hardened, the extended BPF just-in-time (JIT) compiler will randomize any kernel addresses in the BPF programs and maps and will not expose the JIT addresses in "/proc/kallsyms".&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75725r1092015_fix">Configure OL 9 to enable hardening for the BPF JIT compiler by adding the following line to a file, in the "/etc/sysctl.d" directory:
+
+net.core.bpf_jit_harden = 2
+
+The system configuration files need to be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
+
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-75725r1092015_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271768" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271771">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271771r1092025_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002502</xccdf:version>
+          <xccdf:title>OL 9 SSH private host key files must have mode 0640 or less permissive.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;If an unauthorized user obtains the private SSH host key file, the host could be impersonated.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75728r1092024_fix">Configure the mode of SSH private host key files under "/etc/ssh" to "0640" with the following command:
+
+$ sudo chmod 0640 /etc/ssh/ssh_host*key
+
+Restart the SSH daemon for the changes to take effect:
+
+$ sudo systemctl restart sshd.service</xccdf:fixtext>
+          <xccdf:fix id="F-75728r1092024_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271771" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271772">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271772r1092028_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002503</xccdf:version>
+          <xccdf:title>OL 9 SSH public host key files must have mode 0644 or less permissive.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;If a public host key file is modified by an unauthorized user, the SSH service may be compromised.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75729r1092027_fix">Change the mode of public host key files under "/etc/ssh" to "0644" with the following command:
+
+$ sudo chmod 0644 /etc/ssh/*key.pub
+
+Restart the SSH daemon for the changes to take effect:
+
+$ sudo systemctl restart sshd.service</xccdf:fixtext>
+          <xccdf:fix id="F-75729r1092027_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271772" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271773">
+        <xccdf:title>SRG-OS-000259-GPOS-00100</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271773r1155299_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002504</xccdf:version>
+          <xccdf:title>OL 9 system commands must be group-owned by root or a system account.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
+
+This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001499</xccdf:ident>
+          <xccdf:fixtext fixref="F-75730r1092030_fix">Configure the system commands to be protected from unauthorized access.
+
+Run the following command, replacing "[FILE]" with any system command file not group-owned by "root" or a required system account.
+
+$ sudo chgrp root [FILE]</xccdf:fixtext>
+          <xccdf:fix id="F-75730r1092030_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271773" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271774">
+        <xccdf:title>SRG-OS-000259-GPOS-00100</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271774r1092034_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002505</xccdf:version>
+          <xccdf:title>OL 9 system commands must be owned by root.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
+
+This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001499</xccdf:ident>
+          <xccdf:fixtext fixref="F-75731r1092033_fix">Configure the system commands to be protected from unauthorized access.
+
+Run the following command, replacing "[FILE]" with any system command file not owned by "root".
+
+$ sudo chown root [FILE]</xccdf:fixtext>
+          <xccdf:fix id="F-75731r1092033_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271774" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271775">
+        <xccdf:title>SRG-OS-000259-GPOS-00100</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271775r1092037_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002506</xccdf:version>
+          <xccdf:title>OL 9 system commands must have mode 755 or less permissive.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
+
+This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001499</xccdf:ident>
+          <xccdf:fixtext fixref="F-75732r1092036_fix">Configure the system commands to be protected from unauthorized access.
+
+Run the following command, replacing "[FILE]" with any system command with a mode more permissive than "755".
+
+$ sudo chmod 755 [FILE]</xccdf:fixtext>
+          <xccdf:fix id="F-75732r1092036_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271775" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271776">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271776r1092040_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002507</xccdf:version>
+          <xccdf:title>OL 9 SSH server configuration file must be group-owned by root.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Service configuration files enable or disable features of their respective services, which if configured incorrectly, can lead to insecure and vulnerable configurations. Therefore, service configuration files must be owned by the correct group to prevent unauthorized changes.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75733r1092039_fix">Configure the "/etc/ssh/sshd_config" file to be group-owned by root with the following command:
+
+$ sudo chgrp root /etc/ssh/sshd_config</xccdf:fixtext>
+          <xccdf:fix id="F-75733r1092039_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271776" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271777">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271777r1092043_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002508</xccdf:version>
+          <xccdf:title>OL 9 SSH server configuration file must be owned by root.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Service configuration files enable or disable features of their respective services, which if configured incorrectly, can lead to insecure and vulnerable configurations. Therefore, service configuration files must be owned by the correct group to prevent unauthorized changes.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75734r1092042_fix">Configure the "/etc/ssh/sshd_config" file to be owned by root with the following command:
+
+$ sudo chown root /etc/ssh/sshd_config</xccdf:fixtext>
+          <xccdf:fix id="F-75734r1092042_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271777" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271778">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271778r1092046_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002509</xccdf:version>
+          <xccdf:title>OL 9 SSH server configuration file must have mode 0600 or less permissive.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Service configuration files enable or disable features of their respective services that if configured incorrectly can lead to insecure and vulnerable configurations. Therefore, service configuration files should be owned by the correct group to prevent unauthorized changes.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75735r1092045_fix">Configure the "/etc/ssh/sshd_config" permissions to be "0600" with the following command:
+
+$ sudo chmod 0600 /etc/ssh/sshd_config</xccdf:fixtext>
+          <xccdf:fix id="F-75735r1092045_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271778" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271782">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271782r1092058_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002513</xccdf:version>
+          <xccdf:title>OL 9 local initialization files must have mode 0740 or less permissive.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Local initialization files are used to configure the user's shell environment upon logon. Malicious modification of these files could compromise accounts upon logon.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75739r1092057_fix">Set the mode of the local initialization files to "0740" with the following command:
+
+Note: The example will be for the wadea user, who has a home directory of "/home/wadea".
+
+$ sudo chmod 0740 /home/wadea/.&lt;INIT_FILE&gt;</xccdf:fixtext>
+          <xccdf:fix id="F-75739r1092057_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271782" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271784">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271784r1092064_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002515</xccdf:version>
+          <xccdf:title>OL 9 local interactive user home directories must have mode 0750 or less permissive.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Excessive permissions on local interactive user home directories may allow unauthorized access to user files by other users.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75741r1092063_fix">Change the mode of interactive user's home directories to "0750". To change the mode of a local interactive user's home directory, use the following command:
+
+Note: The example will be for the user "wadea".
+
+$ sudo chmod 0750 /home/wadea</xccdf:fixtext>
+          <xccdf:fix id="F-75741r1092063_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271784" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271786">
+        <xccdf:title>SRG-OS-000259-GPOS-00100</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271786r1092070_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002520</xccdf:version>
+          <xccdf:title>OL 9 library directories must be group-owned by root or a system account.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
+
+This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001499</xccdf:ident>
+          <xccdf:fixtext fixref="F-75743r1092069_fix">Configure the system-wide shared library directories (/lib, /lib64, /usr/lib and /usr/lib64) to be protected from unauthorized access.
+
+Run the following command, replacing "[DIRECTORY]" with any library directory not group-owned by "root".
+
+$ sudo chgrp root [DIRECTORY]</xccdf:fixtext>
+          <xccdf:fix id="F-75743r1092069_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271786" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271787">
+        <xccdf:title>SRG-OS-000259-GPOS-00100</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271787r1092073_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002521</xccdf:version>
+          <xccdf:title>OL 9 library directories must be owned by root.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
+
+This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001499</xccdf:ident>
+          <xccdf:fixtext fixref="F-75744r1092072_fix">Configure the system-wide shared library directories within (/lib, /lib64, /usr/lib and /usr/lib64) to be protected from unauthorized access.
+
+Run the following command, replacing "[DIRECTORY]" with any library directory not owned by "root".
+
+$ sudo chown root [DIRECTORY]</xccdf:fixtext>
+          <xccdf:fix id="F-75744r1092072_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271787" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271788">
+        <xccdf:title>SRG-OS-000259-GPOS-00100</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271788r1155305_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002522</xccdf:version>
+          <xccdf:title>OL 9 library directories must have mode 755 or less permissive.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
+
+This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001499</xccdf:ident>
+          <xccdf:fixtext fixref="F-75745r1155304_fix">Configure the systemwide shared library directories (/lib, /lib64, /usr/lib and /usr/lib64) to be protected from unauthorized access. 
+
+Run the following command, replacing "[DIRECTORY]" with any library directory with a mode more permissive than 755.
+
+$ sudo chmod 755 [DIRECTORY]</xccdf:fixtext>
+          <xccdf:fix id="F-75745r1155304_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271788" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271789">
+        <xccdf:title>SRG-OS-000259-GPOS-00100</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271789r1134863_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002523</xccdf:version>
+          <xccdf:title>OL 9 library files must be group owned by root or a system account.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
+
+This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001499</xccdf:ident>
+          <xccdf:fixtext fixref="F-75746r1134862_fix">Configure the OL 9 systemwide shared library files contained in the directories "/lib", "/lib64", "/usr/lib", and "/usr/lib64" to be group owned by root with the following command:
+
+$ sudo find /lib /lib64 /usr/lib /usr/lib64 -type f -name '*.so*' ! -group root -exec chown :root {} +</xccdf:fixtext>
+          <xccdf:fix id="F-75746r1134862_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271789" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271790">
+        <xccdf:title>SRG-OS-000259-GPOS-00100</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271790r1134866_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002524</xccdf:version>
+          <xccdf:title>OL 9 library files must be owned by root.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
+
+This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001499</xccdf:ident>
+          <xccdf:fixtext fixref="F-75747r1134865_fix">Configure the systemwide shared library files contained in the directories "/lib", "/lib64", "/usr/lib", and "/usr/lib64" to be owned by root with the following command:
+
+$ sudo find /lib /lib64 /usr/lib /usr/lib64 -type f -name '*.so*' ! -user root -exec chown root {} +</xccdf:fixtext>
+          <xccdf:fix id="F-75747r1134865_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271790" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271791">
+        <xccdf:title>SRG-OS-000259-GPOS-00100</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271791r1134971_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002525</xccdf:version>
+          <xccdf:title>OL 9 library files must have mode 0755 or less permissive.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
+
+This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001499</xccdf:ident>
+          <xccdf:fixtext fixref="F-75748r1134868_fix">Configure the systemwide shared library files contained in the directories "/lib", "/lib64", "/usr/lib", and "/usr/lib64" to have mode 0755 or less permissive with the following command:
+
+$ sudo find /lib /lib64 /usr/lib /usr/lib64 -type f -name '*.so*' -perm /022 -exec chmod go-w {} +</xccdf:fixtext>
+          <xccdf:fix id="F-75748r1134868_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271791" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271792">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271792r1094968_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002530</xccdf:version>
+          <xccdf:title>OL 9 /boot/grub2/grub.cfg file must be group-owned by root.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "root" group is a highly privileged group. The group-owner of this file should not have any access privileges.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75749r1092087_fix">Change the group of the file /boot/grub2/grub.cfg to root by running the following command:
+
+$ sudo chgrp root /boot/grub2/grub.cfg</xccdf:fixtext>
+          <xccdf:fix id="F-75749r1092087_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271792" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271793">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271793r1092605_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002531</xccdf:version>
+          <xccdf:title>OL 9 /boot/grub2/grub.cfg file must be owned by root.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "/boot/grub2/grub.cfg" file stores sensitive system configuration. Protection of this file is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75750r1092090_fix">Change the owner of the file /boot/grub2/grub.cfg to root by running the following command:
+
+$ sudo chown root /boot/grub2/grub.cfg</xccdf:fixtext>
+          <xccdf:fix id="F-75750r1092090_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271793" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271794">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271794r1092094_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002532</xccdf:version>
+          <xccdf:title>OL 9 /etc/group file must be group-owned by root.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/group" file contains information regarding groups that are configured on the system. Protection of this file is important for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75751r1092093_fix">Change the group of the file /etc/group to root by running the following command:
+
+$ sudo chgrp root /etc/group</xccdf:fixtext>
+          <xccdf:fix id="F-75751r1092093_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271794" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271795">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271795r1092097_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002533</xccdf:version>
+          <xccdf:title>OL 9 /etc/group- file must be group-owned by root.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/group-" file is a backup file of "/etc/group", and as such, contains information regarding groups that are configured on the system. Protection of this file is important for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75752r1092096_fix">Change the group of the file /etc/group- to root by running the following command:
+
+$ sudo chgrp root /etc/group-</xccdf:fixtext>
+          <xccdf:fix id="F-75752r1092096_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271795" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271796">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271796r1092100_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002534</xccdf:version>
+          <xccdf:title>OL 9 /etc/group file must be owned by root.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/group" file contains information regarding groups that are configured on the system. Protection of this file is important for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75753r1092099_fix">Change the owner of the file /etc/group to root by running the following command:
+
+$ sudo chown root /etc/group</xccdf:fixtext>
+          <xccdf:fix id="F-75753r1092099_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271796" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271797">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271797r1092103_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002535</xccdf:version>
+          <xccdf:title>OL 9 /etc/group- file must be owned by root.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/group-" file is a backup file of "/etc/group", and as such, contains information regarding groups that are configured on the system. Protection of this file is important for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75754r1092102_fix">Change the owner of the file /etc/group- to root by running the following command:
+
+$ sudo chown root /etc/group-</xccdf:fixtext>
+          <xccdf:fix id="F-75754r1092102_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271797" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271798">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271798r1092106_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002536</xccdf:version>
+          <xccdf:title>OL 9 /etc/group file must have mode 0644 or less permissive to prevent unauthorized access.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/group" file contains information regarding groups that are configured on the system. Protection of this file is important for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75755r1092105_fix">Change the mode of the file "/etc/group" to "0644" by running the following command:
+
+$ sudo chmod 0644 /etc/group</xccdf:fixtext>
+          <xccdf:fix id="F-75755r1092105_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271798" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271799">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271799r1092109_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002537</xccdf:version>
+          <xccdf:title>OL 9 /etc/group- file must have mode 0644 or less permissive to prevent unauthorized access.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/group-" file is a backup file of "/etc/group", and as such, contains information regarding groups that are configured on the system. Protection of this file is important for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75756r1092108_fix">Change the mode of the file "/etc/group-" to "0644" by running the following command:
+
+$ sudo chmod 0644 /etc/group-</xccdf:fixtext>
+          <xccdf:fix id="F-75756r1092108_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271799" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271800">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271800r1092112_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002538</xccdf:version>
+          <xccdf:title>OL 9 /etc/gshadow file must be group-owned by root.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/gshadow" file contains group password hashes. Protection of this file is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75757r1092111_fix">Change the group of the file /etc/gshadow to root by running the following command:
+
+$ sudo chgrp root /etc/gshadow</xccdf:fixtext>
+          <xccdf:fix id="F-75757r1092111_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271800" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271801">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271801r1092115_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002539</xccdf:version>
+          <xccdf:title>OL 9 /etc/gshadow- file must be group-owned by root.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/gshadow-" file is a backup of "/etc/gshadow", and as such, contains group password hashes. Protection of this file is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75758r1092114_fix">Change the group of the file /etc/gshadow- to root by running the following command:
+
+$ sudo chgrp root /etc/gshadow-</xccdf:fixtext>
+          <xccdf:fix id="F-75758r1092114_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271801" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271802">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271802r1092118_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002540</xccdf:version>
+          <xccdf:title>OL 9 /etc/gshadow file must be owned by root.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/gshadow" file contains group password hashes. Protection of this file is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75759r1092117_fix">Change the owner of the file /etc/gshadow to root by running the following command:
+
+$ sudo chown root /etc/gshadow</xccdf:fixtext>
+          <xccdf:fix id="F-75759r1092117_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271802" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271803">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271803r1092121_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002541</xccdf:version>
+          <xccdf:title>OL 9 /etc/gshadow- file must be owned by root.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/gshadow-" file is a backup of "/etc/gshadow", and as such, contains group password hashes. Protection of this file is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75760r1092120_fix">Change the owner of the file /etc/gshadow- to root by running the following command:
+
+$ sudo chown root /etc/gshadow-</xccdf:fixtext>
+          <xccdf:fix id="F-75760r1092120_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271803" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271804">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271804r1092124_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002542</xccdf:version>
+          <xccdf:title>OL 9 /etc/gshadow file must have mode 0000 or less permissive to prevent unauthorized access.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/gshadow" file contains group password hashes. Protection of this file is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75761r1092123_fix">Change the mode of the file "/etc/gshadow" to "0000" by running the following command:
+
+$ sudo chmod 0000 /etc/gshadow</xccdf:fixtext>
+          <xccdf:fix id="F-75761r1092123_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271804" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271805">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271805r1092127_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002543</xccdf:version>
+          <xccdf:title>OL 9 /etc/gshadow- file must have mode 0000 or less permissive to prevent unauthorized access.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/gshadow-" file is a backup of "/etc/gshadow", and as such, contains group password hashes. Protection of this file is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75762r1092126_fix">Change the mode of the file "/etc/gshadow-" to "0000" by running the following command:
+
+$ sudo chmod 0000 /etc/gshadow-</xccdf:fixtext>
+          <xccdf:fix id="F-75762r1092126_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271805" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271806">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271806r1092130_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002544</xccdf:version>
+          <xccdf:title>OL 9 /etc/passwd file must be group-owned by root.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/passwd" file contains information about the users that are configured on the system. Protection of this file is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75763r1092129_fix">Change the group of the file /etc/passwd to root by running the following command:
+
+$ sudo chgrp root /etc/passwd</xccdf:fixtext>
+          <xccdf:fix id="F-75763r1092129_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271806" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271807">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271807r1092133_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002545</xccdf:version>
+          <xccdf:title>OL 9 /etc/passwd- file must be group-owned by root.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/passwd-" file is a backup file of "/etc/passwd", and as such, contains information about the users that are configured on the system. Protection of this file is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75764r1092132_fix">Change the group of the file /etc/passwd- to root by running the following command:
+
+$ sudo chgrp root /etc/passwd-</xccdf:fixtext>
+          <xccdf:fix id="F-75764r1092132_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271807" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271808">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271808r1092136_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002546</xccdf:version>
+          <xccdf:title>OL 9 /etc/passwd file must be owned by root.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/passwd" file contains information about the users that are configured on the system. Protection of this file is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75765r1092135_fix">Change the owner of the file /etc/passwd to root by running the following command:
+
+$ sudo chown root /etc/passwd</xccdf:fixtext>
+          <xccdf:fix id="F-75765r1092135_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271808" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271809">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271809r1092139_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002547</xccdf:version>
+          <xccdf:title>OL 9 /etc/passwd- file must be owned by root.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/passwd-" file is a backup file of "/etc/passwd", and as such, contains information about the users that are configured on the system. Protection of this file is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75766r1092138_fix">Change the owner of the file /etc/passwd- to root by running the following command:
+
+$ sudo chown root /etc/passwd-</xccdf:fixtext>
+          <xccdf:fix id="F-75766r1092138_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271809" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271810">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271810r1092142_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002548</xccdf:version>
+          <xccdf:title>OL 9 /etc/passwd file must have mode 0644 or less permissive to prevent unauthorized access.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;If the "/etc/passwd" file is writable by a group-owner or the world the risk of its compromise is increased. The file contains the list of accounts on the system and associated information, and protection of this file is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75767r1092141_fix">Change the mode of the file "/etc/passwd" to "0644" by running the following command:
+
+$ sudo chmod 0644 /etc/passwd</xccdf:fixtext>
+          <xccdf:fix id="F-75767r1092141_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271810" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271811">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271811r1092145_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002549</xccdf:version>
+          <xccdf:title>OL 9 /etc/passwd- file must have mode 0644 or less permissive to prevent unauthorized access.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/passwd-" file is a backup file of "/etc/passwd", and as such, contains information about the users that are configured on the system. Protection of this file is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75768r1092144_fix">Change the mode of the file "/etc/passwd-" to "0644" by running the following command:
+
+$ sudo chmod 0644 /etc/passwd-</xccdf:fixtext>
+          <xccdf:fix id="F-75768r1092144_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271811" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271812">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271812r1092148_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002550</xccdf:version>
+          <xccdf:title>OL 9 /etc/shadow file must be group-owned by root.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/shadow" file stores password hashes. Protection of this file is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75769r1092147_fix">Change the group of the file /etc/shadow to root by running the following command:
+
+$ sudo chgrp root /etc/shadow</xccdf:fixtext>
+          <xccdf:fix id="F-75769r1092147_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271812" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271813">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271813r1092151_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002551</xccdf:version>
+          <xccdf:title>OL 9 /etc/shadow- file must be group-owned by root.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/shadow-" file is a backup file of "/etc/shadow", and as such, contains the list of local system accounts and password hashes. Protection of this file is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75770r1092150_fix">Change the group of the file /etc/shadow- to root by running the following command:
+
+$ sudo chgrp root /etc/shadow-</xccdf:fixtext>
+          <xccdf:fix id="F-75770r1092150_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271813" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271814">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271814r1092154_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002552</xccdf:version>
+          <xccdf:title>OL 9 /etc/shadow file must be owned by root.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/shadow" file contains the list of local system accounts and stores password hashes. Protection of this file is critical for system security. Failure to give ownership of this file to root provides the designated owner with access to sensitive information, which could weaken the system security posture.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75771r1092153_fix">Change the owner of the file /etc/shadow to root by running the following command:
+
+$ sudo chown root /etc/shadow</xccdf:fixtext>
+          <xccdf:fix id="F-75771r1092153_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271814" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271815">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271815r1092157_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002553</xccdf:version>
+          <xccdf:title>OL 9 /etc/shadow- file must be owned by root.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/shadow-" file is a backup file of "/etc/shadow", and as such, contains the list of local system accounts and password hashes. Protection of this file is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75772r1092156_fix">Change the owner of the file /etc/shadow- to root by running the following command:
+
+$ sudo chown root /etc/shadow-</xccdf:fixtext>
+          <xccdf:fix id="F-75772r1092156_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271815" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271816">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271816r1092160_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002554</xccdf:version>
+          <xccdf:title>OL 9 /etc/shadow- file must have mode 0000 or less permissive to prevent unauthorized access.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/shadow-" file is a backup file of "/etc/shadow", and as such, contains the list of local system accounts and password hashes. Protection of this file is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75773r1092159_fix">Change the mode of the file "/etc/shadow-" to "0000" by running the following command:
+
+$ sudo chmod 0000 /etc/shadow-</xccdf:fixtext>
+          <xccdf:fix id="F-75773r1092159_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271816" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271817">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271817r1092163_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002555</xccdf:version>
+          <xccdf:title>OL 9 /etc/shadow file must have mode 0000 to prevent unauthorized access.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/shadow" file contains the list of local system accounts and stores password hashes. Protection of this file is critical for system security. Failure to give ownership of this file to root provides the designated owner with access to sensitive information, which could weaken the system security posture.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75774r1092162_fix">Change the mode of the file "/etc/shadow" to "0000" by running the following command:
+
+$ sudo chmod 0000 /etc/shadow</xccdf:fixtext>
+          <xccdf:fix id="F-75774r1092162_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271817" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271818">
+        <xccdf:title>SRG-OS-000206-GPOS-00084</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271818r1092166_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002560</xccdf:version>
+          <xccdf:title>OL 9 /var/log directory must be group-owned by root.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state or can identify the OL 9 system or platform. Additionally, personally identifiable information (PII) and operational information must not be revealed through error messages to unauthorized personnel or their designated representatives.
+
+The structure and content of error messages must be carefully considered by the organization and development team. The extent to which the information system is able to identify and handle error conditions is guided by organizational policy and operational requirements.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001314</xccdf:ident>
+          <xccdf:fixtext fixref="F-75775r1092165_fix">Configure the group owner of the directory "/var/log" to "root" by running the following command:
+
+$ sudo chgrp root /var/log</xccdf:fixtext>
+          <xccdf:fix id="F-75775r1092165_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271818" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271819">
+        <xccdf:title>SRG-OS-000206-GPOS-00084</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271819r1092169_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002561</xccdf:version>
+          <xccdf:title>OL 9 /var/log directory must be owned by root.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state or can identify the OL 9 system or platform. Additionally, personally identifiable information (PII) and operational information must not be revealed through error messages to unauthorized personnel or their designated representatives.
+
+The structure and content of error messages must be carefully considered by the organization and development team. The extent to which the information system is able to identify and handle error conditions is guided by organizational policy and operational requirements.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001314</xccdf:ident>
+          <xccdf:fixtext fixref="F-75776r1092168_fix">Configure the owner of the directory "/var/log" to "root" by running the following command:
+
+$ sudo chown root /var/log</xccdf:fixtext>
+          <xccdf:fix id="F-75776r1092168_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271819" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271820">
+        <xccdf:title>SRG-OS-000206-GPOS-00084</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271820r1092172_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002562</xccdf:version>
+          <xccdf:title>OL 9 /var/log directory must have mode 0755 or less permissive.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state or can identify the OL 9 system or platform. Additionally, personally identifiable information (PII) and operational information must not be revealed through error messages to unauthorized personnel or their designated representatives.
+
+The structure and content of error messages must be carefully considered by the organization and development team. The extent to which the information system is able to identify and handle error conditions is guided by organizational policy and operational requirements.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001314</xccdf:ident>
+          <xccdf:fixtext fixref="F-75777r1092171_fix">Configure the "/var/log" directory to a mode of "0755" by running the following command:
+
+$ sudo chmod 0755 /var/log</xccdf:fixtext>
+          <xccdf:fix id="F-75777r1092171_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271820" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271821">
+        <xccdf:title>SRG-OS-000206-GPOS-00084</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271821r1092175_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002563</xccdf:version>
+          <xccdf:title>OL 9 /var/log/messages file must be group-owned by root.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state or can identify the OL 9 system or platform. Additionally, personally identifiable information (PII) and operational information must not be revealed through error messages to unauthorized personnel or their designated representatives.
+
+The structure and content of error messages must be carefully considered by the organization and development team. The extent to which the information system is able to identify and handle error conditions is guided by organizational policy and operational requirements.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001314</xccdf:ident>
+          <xccdf:fixtext fixref="F-75778r1092174_fix">Change the group owner of the "/var/log/messages" file to "root" by running the following command:
+
+$ sudo chgrp root /var/log/messages</xccdf:fixtext>
+          <xccdf:fix id="F-75778r1092174_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271821" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271822">
+        <xccdf:title>SRG-OS-000206-GPOS-00084</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271822r1092178_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002564</xccdf:version>
+          <xccdf:title>OL 9 /var/log/messages file must be owned by root.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state or can identify the OL 9 system or platform. Additionally, personally identifiable information (PII) and operational information must not be revealed through error messages to unauthorized personnel or their designated representatives.
+
+The structure and content of error messages must be carefully considered by the organization and development team. The extent to which the information system is able to identify and handle error conditions is guided by organizational policy and operational requirements.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001314</xccdf:ident>
+          <xccdf:fixtext fixref="F-75779r1092177_fix">Change the owner of the "/var/log/messages" file to "root" by running the following command:
+
+$ sudo chown root /var/log/messages</xccdf:fixtext>
+          <xccdf:fix id="F-75779r1092177_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271822" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271823">
+        <xccdf:title>SRG-OS-000206-GPOS-00084</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271823r1092181_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002565</xccdf:version>
+          <xccdf:title>OL 9 /var/log/messages file must have mode 0640 or less permissive.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state or can identify the OL 9 system or platform. Additionally, personally identifiable information (PII) and operational information must not be revealed through error messages to unauthorized personnel or their designated representatives.
+
+The structure and content of error messages must be carefully considered by the organization and development team. The extent to which the information system is able to identify and handle error conditions is guided by organizational policy and operational requirements.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001314</xccdf:ident>
+          <xccdf:fixtext fixref="F-75780r1092180_fix">Configure the "/var/log/messages" file to have a mode of "0640" by running the following command:
+
+$ sudo chmod 0640 /var/log/messages</xccdf:fixtext>
+          <xccdf:fix id="F-75780r1092180_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271823" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271824">
+        <xccdf:title>SRG-OS-000256-GPOS-00097</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271824r1092184_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002570</xccdf:version>
+          <xccdf:title>OL 9 audit tools must be group-owned by root.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Protecting audit information also includes identifying and protecting the tools used to view and manipulate log data; therefore, protecting audit tools is necessary to prevent unauthorized operation on audit information.
+
+OL 9 systems providing tools to interface with audit information will leverage user permissions and roles identifying the user accessing the tools, and the corresponding rights the user enjoys, to make access decisions regarding the access to audit tools.
+
+Audit tools include, but are not limited to, vendor-provided and open source audit tools needed to successfully view and manipulate audit information system activity and records. Audit tools include custom queries and report generators.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001493</xccdf:ident>
+          <xccdf:fixtext fixref="F-75781r1092183_fix">Configure the audit tools to be group-owned by "root" by running the following command:
+
+$ sudo chgrp root [audit_tool]
+
+Replace "[audit_tool]" with each audit tool not group-owned by "root".</xccdf:fixtext>
+          <xccdf:fix id="F-75781r1092183_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271824" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271825">
+        <xccdf:title>SRG-OS-000256-GPOS-00097</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271825r1092187_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002571</xccdf:version>
+          <xccdf:title>OL 9 audit tools must be owned by root.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Protecting audit information also includes identifying and protecting the tools used to view and manipulate log data. Therefore, protecting audit tools is necessary to prevent unauthorized operation on audit information.
+
+OL 9 systems providing tools to interface with audit information will leverage user permissions and roles identifying the user accessing the tools, and the corresponding rights the user enjoys, to make access decisions regarding the access to audit tools.
+
+Audit tools include, but are not limited to, vendor-provided and open source audit tools needed to successfully view and manipulate audit information system activity and records. Audit tools include custom queries and report generators.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001493</xccdf:ident>
+          <xccdf:fixtext fixref="F-75782r1092186_fix">Configure the audit tools to be owned by "root" by running the following command:
+
+$ sudo chown root [audit_tool]
+
+Replace "[audit_tool]" with each audit tool not owned by "root".</xccdf:fixtext>
+          <xccdf:fix id="F-75782r1092186_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271825" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271826">
+        <xccdf:title>SRG-OS-000256-GPOS-00097</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271826r1092190_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002572</xccdf:version>
+          <xccdf:title>OL 9 audit tools must have a mode of 0755 or less permissive.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Protecting audit information also includes identifying and protecting the tools used to view and manipulate log data. Therefore, protecting audit tools is necessary to prevent unauthorized operation on audit information.
+
+OL 9 systems providing tools to interface with audit information will leverage user permissions and roles identifying the user accessing the tools, and the corresponding rights the user enjoys, to make access decisions regarding the access to audit tools.
+
+Audit tools include, but are not limited to, vendor-provided and open source audit tools needed to successfully view and manipulate audit information system activity and records. Audit tools include custom queries and report generators.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001493</xccdf:ident>
+          <xccdf:fixtext fixref="F-75783r1092189_fix">Configure the audit tools to have a mode of "0755" by running the following command:
+
+$ sudo chmod 0755 [audit_tool]
+
+Replace "[audit_tool]" with each audit tool that has a more permissive mode than 0755.</xccdf:fixtext>
+          <xccdf:fix id="F-75783r1092189_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271826" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271827">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271827r1092193_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002580</xccdf:version>
+          <xccdf:title>OL 9 cron configuration directories must have a mode of 0700 or less permissive.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Service configuration files enable or disable features of their respective services that if configured incorrectly can lead to insecure and vulnerable configurations. Therefore, service configuration files should have the correct access rights to prevent unauthorized changes.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75784r1092192_fix">Configure any OL 9 cron configuration directory with a mode more permissive than "0700" as follows:
+
+$ sudo chmod 0700 [cron configuration directory]</xccdf:fixtext>
+          <xccdf:fix id="F-75784r1092192_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271827" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271828">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271828r1092196_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002581</xccdf:version>
+          <xccdf:title>OL 9 cron configuration files directory must be group-owned by root.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Service configuration files enable or disable features of their respective services that if configured incorrectly can lead to insecure and vulnerable configurations; therefore, service configuration files should be owned by the correct group to prevent unauthorized changes.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75785r1092195_fix">Configure any cron configuration not group-owned by root with the following command:
+
+$ sudo chgrp root [cron config file]</xccdf:fixtext>
+          <xccdf:fix id="F-75785r1092195_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271828" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271829">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271829r1092199_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002582</xccdf:version>
+          <xccdf:title>OL 9 cron configuration files directory must be owned by root.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Service configuration files enable or disable features of their respective services that if configured incorrectly can lead to insecure and vulnerable configurations; therefore, service configuration files must be owned by the correct group to prevent unauthorized changes.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75786r1092198_fix">Configure any cron configuration not owned by root with the following command:
+
+$ sudo chown root [cron config file]</xccdf:fixtext>
+          <xccdf:fix id="F-75786r1092198_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271829" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271830">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271830r1092202_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002583</xccdf:version>
+          <xccdf:title>OL 9 /etc/crontab file must have mode 0600.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Service configuration files enable or disable features of their respective services that if configured incorrectly can lead to insecure and vulnerable configurations; therefore, service configuration files must have the correct access rights to prevent unauthorized changes.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75787r1092201_fix">Configure the OL 9 file /etc/crontab with mode 600.
+
+$ sudo chmod 0600 /etc/crontab</xccdf:fixtext>
+          <xccdf:fix id="F-75787r1092201_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271830" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271831">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271831r1092205_rule" severity="high" weight="10.0">
+          <xccdf:version>OL09-00-003000</xccdf:version>
+          <xccdf:title>OL 9 must be configured so that the root account is the only account having unrestricted access to the system.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;An account has root authority if it has a user identifier (UID) of "0". Multiple accounts with a UID of "0" afford more opportunity for potential intruders to guess a password for a privileged account. Proper configuration of sudo is recommended to afford multiple system administrators access to root privileges in an accountable manner.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75788r1092204_fix">Change the UID of any account on the system, other than root, that has a UID of "0". 
+
+If the account is associated with system commands or applications, the UID should be changed to one greater than "0" but less than "1000". Otherwise, assign a UID of greater than "1000" that has not already been assigned.</xccdf:fixtext>
+          <xccdf:fix id="F-75788r1092204_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271831" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271832">
+        <xccdf:title>SRG-OS-000104-GPOS-00051</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271832r1092208_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-003001</xccdf:version>
+          <xccdf:title>OL 9 duplicate User IDs (UIDs) must not exist for interactive users.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;To ensure accountability and prevent unauthenticated access, interactive users must be identified and authenticated to prevent potential misuse and compromise of the system.
+
+Satisfies: SRG-OS-000104-GPOS-00051, SRG-OS-000121-GPOS-00062, SRG-OS-000042-GPOS-00020&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000764</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000804</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:fixtext fixref="F-75789r1092207_fix">Edit the file "/etc/passwd" and provide each interactive user account that has a duplicate UID with a unique UID.</xccdf:fixtext>
+          <xccdf:fix id="F-75789r1092207_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271832" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271833">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271833r1092607_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-003002</xccdf:version>
+          <xccdf:title>OL 9 local interactive users must have a home directory assigned in the /etc/passwd file.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;If local interactive users are not assigned a valid home directory, there is no place for the storage and control of files they should own.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75790r1092210_fix">Create and assign home directories to all local interactive users on OL 9 that currently do not have a home directory assigned.</xccdf:fixtext>
+          <xccdf:fix id="F-75790r1092210_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271833" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271834">
+        <xccdf:title>SRG-OS-000104-GPOS-00051</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271834r1092214_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-003005</xccdf:version>
+          <xccdf:title>OL 9 interactive users must have a primary group that exists.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;If a user is assigned the Group Identifier (GID) of a group that does not exist on the system, and a group with the GID is subsequently created, the user may have unintended rights to any files associated with the group.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000764</xccdf:ident>
+          <xccdf:fixtext fixref="F-75791r1092213_fix">Configure the system so that all GIDs are referenced in "/etc/passwd" are defined in "/etc/group".
+
+Edit the file "/etc/passwd" and ensure that every user's GID is a valid GID.</xccdf:fixtext>
+          <xccdf:fix id="F-75791r1092213_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271834" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271835">
+        <xccdf:title>SRG-OS-000104-GPOS-00051</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271835r1092217_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-003006</xccdf:version>
+          <xccdf:title>OL 9 groups must have unique Group ID (GID).</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;To ensure accountability and prevent unauthenticated access, groups must be identified uniquely to prevent potential misuse and compromise of the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000764</xccdf:ident>
+          <xccdf:fixtext fixref="F-75792r1092216_fix">Edit the file "/etc/group" and provide each group that has a duplicate GID with a unique GID.</xccdf:fixtext>
+          <xccdf:fix id="F-75792r1092216_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271835" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271836">
+        <xccdf:title>SRG-OS-000021-GPOS-00005</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271836r1092637_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-003010</xccdf:version>
+          <xccdf:title>OL 9 must configure SELinux context type to allow the use of a nondefault faillock tally directory.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Not having the correct SELinux context on the faillock directory may lead to unauthorized access to the directory.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000044</xccdf:ident>
+          <xccdf:fixtext fixref="F-75793r1092219_fix">Configure OL 9 to allow the use of a nondefault faillock tally directory while SELinux enforces a targeted policy.
+
+Create a nondefault faillock tally directory (if it does not already exist) with the following example:
+
+$ sudo mkdir /var/log/faillock
+
+Update the /etc/selinux/targeted/contexts/files/file_contexts.local with "faillog_t" context type for the nondefault faillock tally directory with the following command:
+
+$ sudo semanage fcontext -a -t faillog_t "/var/log/faillock(/.*)?"
+
+Update the context type of the nondefault faillock directory/subdirectories and files with the following command:
+
+$ sudo restorecon -R -v /var/log/faillock</xccdf:fixtext>
+          <xccdf:fix id="F-75793r1092219_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271836" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271839">
+        <xccdf:title>SRG-OS-000329-GPOS-00128</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271839r1092229_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-003020</xccdf:version>
+          <xccdf:title>OL 9 must automatically lock an account when three unsuccessful logon attempts occur.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;By limiting the number of failed logon attempts, the risk of unauthorized system access via user password guessing, otherwise known as brute-force attacks, is reduced. Limits are imposed by locking the account.
+
+Satisfies: SRG-OS-000329-GPOS-00128, SRG-OS-000021-GPOS-00005&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002238</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000044</xccdf:ident>
+          <xccdf:fixtext fixref="F-75796r1092228_fix">Configure OL 9 to lock an account when three unsuccessful logon attempts occur.
+
+Add/modify the "/etc/security/faillock.conf" file to match the following line:
+
+deny = 3</xccdf:fixtext>
+          <xccdf:fix id="F-75796r1092228_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271839" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271840">
+        <xccdf:title>SRG-OS-000329-GPOS-00128</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271840r1092232_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-003021</xccdf:version>
+          <xccdf:title>OL 9 must automatically lock the root account until the root account is released by an administrator when three unsuccessful logon attempts occur during a 15-minute time period.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;By limiting the number of failed logon attempts, the risk of unauthorized system access via user password guessing, also known as brute-forcing, is reduced. Limits are imposed by locking the account.
+
+Satisfies: SRG-OS-000329-GPOS-00128, SRG-OS-000021-GPOS-00005&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002238</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000044</xccdf:ident>
+          <xccdf:fixtext fixref="F-75797r1092231_fix">Configure OL 9 to lock out the "root" account after a number of incorrect login attempts using "pam_faillock.so", first enable the feature using the following command:
+ 
+$ sudo authselect enable-feature with-faillock  
+
+Then edit the "/etc/security/faillock.conf" file as follows:
+ 
+  add or uncomment the following line:
+ even_deny_root</xccdf:fixtext>
+          <xccdf:fix id="F-75797r1092231_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271840" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271841">
+        <xccdf:title>SRG-OS-000021-GPOS-00005</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271841r1092235_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-003022</xccdf:version>
+          <xccdf:title>OL 9 must log username information when unsuccessful logon attempts occur.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without auditing of these events, it may be harder or impossible to identify what an attacker did after an attack.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000044</xccdf:ident>
+          <xccdf:fixtext fixref="F-75798r1092234_fix">Configure OL 9 to log username information when unsuccessful logon attempts occur.
+
+Add/modify the "/etc/security/faillock.conf" file to match the following line:
+
+audit</xccdf:fixtext>
+          <xccdf:fix id="F-75798r1092234_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271841" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271842">
+        <xccdf:title>SRG-OS-000021-GPOS-00005</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271842r1092238_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-003023</xccdf:version>
+          <xccdf:title>OL 9 must ensure account lockouts persist.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Having lockouts persist across reboots ensures that account is only unlocked by an administrator. If the lockouts did not persist across reboots, an attacker could simply reboot the system to continue brute force attacks against the accounts on the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000044</xccdf:ident>
+          <xccdf:fixtext fixref="F-75799r1092237_fix">Configure OL 9 maintain the contents of the faillock directory after a reboot.
+
+Add/modify the "/etc/security/faillock.conf" file to match the following line:
+
+dir = /var/log/faillock</xccdf:fixtext>
+          <xccdf:fix id="F-75799r1092237_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271842" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271845">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271845r1092247_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-003051</xccdf:version>
+          <xccdf:title>OL 9 system accounts must not have an interactive login shell.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Ensuring shells are not given to system accounts upon login makes it more difficult for attackers to make use of system accounts.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75802r1092246_fix">Configure OL 9 so that all noninteractive accounts on the system do not have an interactive shell assigned to them.
+
+If the system account needs a shell assigned for mission operations, document the need with the ISSO.
+
+Run the following command to disable the interactive shell for a specific noninteractive user account:
+
+Replace &lt;user&gt; with the user that has a login shell.
+
+$ sudo usermod --shell /sbin/nologin &lt;user&gt;
+
+Do not perform the steps in this section on the root account. Doing so will cause the system to become inaccessible.</xccdf:fixtext>
+          <xccdf:fix id="F-75802r1092246_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271845" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271846">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271846r1092250_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-003052</xccdf:version>
+          <xccdf:title>OL 9 local interactive user accounts must be assigned a home directory upon creation.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;If local interactive users are not assigned a valid home directory, there is no place for the storage and control of files they should own.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75803r1092249_fix">Configure OL 9 to assign home directories to all new local interactive users by setting the "CREATE_HOME" parameter in "/etc/login.defs" to "yes" as follows.
+
+CREATE_HOME yes</xccdf:fixtext>
+          <xccdf:fix id="F-75803r1092249_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271846" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271849">
+        <xccdf:title>SRG-OS-000118-GPOS-00060</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271849r1092259_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-003065</xccdf:version>
+          <xccdf:title>OL 9 must disable account identifiers (individuals, groups, roles, and devices) after 35 days of inactivity.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Inactive identifiers pose a risk to systems and applications because attackers may exploit an inactive identifier and potentially obtain undetected access to the system.
+
+Disabling inactive accounts ensures that accounts which may not have been responsibly removed are not available to attackers who may have compromised their credentials.
+
+Owners of inactive accounts will not notice if unauthorized access to their user account has been obtained.
+
+Satisfies: SRG-OS-000118-GPOS-00060, SRG-OS-000590-GPOS-00110&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-003627</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-003628</xccdf:ident>
+          <xccdf:fixtext fixref="F-75806r1092258_fix">Configure OL 9 to disable account identifiers after 35 days of inactivity after the password expiration. 
+
+Run the following command to change the configuration for useradd:
+
+$ sudo useradd -D -f 35
+
+The recommendation is 35 days, but a lower value is acceptable.</xccdf:fixtext>
+          <xccdf:fix id="F-75806r1092258_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271849" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271850">
+        <xccdf:title>SRG-OS-000480-GPOS-00226</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271850r1092262_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-003070</xccdf:version>
+          <xccdf:title>OL 9 must enforce a delay of at least four seconds between logon prompts following a failed logon attempt.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Increasing the time between a failed authentication attempt and reprompting to enter credentials helps to slow a single-threaded brute force attack.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75807r1092261_fix">Configure the OL 9 to enforce a delay of at least four seconds between logon prompts following a failed console logon attempt.
+
+Modify the "/etc/login.defs" file to set the "FAIL_DELAY" parameter to 4 or greater:
+
+FAIL_DELAY 4</xccdf:fixtext>
+          <xccdf:fix id="F-75807r1092261_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271850" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271851">
+        <xccdf:title>SRG-OS-000032-GPOS-00013</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271851r1092265_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-005000</xccdf:version>
+          <xccdf:title>OL 9 remote access methods must be monitored.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Logging remote access methods can be used to trace the decrease in the risks associated with remote user access management. It can also be used to spot cyberattacks and ensure ongoing compliance with organizational policies surrounding the use of remote access methods.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000067</xccdf:ident>
+          <xccdf:fixtext fixref="F-75808r1092264_fix">Configure OL 9 remote access methods to be monitored.
+
+Add or update the following lines to the "/etc/rsyslog.conf" file:
+
+auth.*;authpriv.*;daemon.* /var/log/secure
+
+The "rsyslog" service must be restarted for the changes to take effect with the following command:
+
+$ sudo systemctl restart rsyslog.service</xccdf:fixtext>
+          <xccdf:fix id="F-75808r1092264_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271851" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271852">
+        <xccdf:title>SRG-OS-000479-GPOS-00224</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271852r1092608_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-005005</xccdf:version>
+          <xccdf:title>OL 9 must be configured to forward audit records via TCP to a different system or media from the system being audited via rsyslog.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Information stored in one location is vulnerable to accidental or incidental deletion or alteration.
+
+Offloading is a common process in information systems with limited audit storage capacity.
+
+OL 9 installation media provides "rsyslogd", a system utility providing support for message logging. Support for both internet and Unix domain sockets enables this utility to support both local and remote logging. Coupling this utility with "gnutls" (a secure communications library implementing the SSL, TLS, and DTLS protocols) creates a method to securely encrypt and offload auditing.
+
+Rsyslog provides three ways to forward message: the traditional UDP transport, which is extremely lossy but standard; the plain TCP based transport, which loses messages only during certain situations but is widely available; and the RELP transport, which does not lose messages but is currently available only as part of the rsyslogd 3.15.0 and above.
+
+Examples of each configuration:
+UDP *.* @remotesystemname
+TCP *.* @@remotesystemname
+RELP *.* :omrelp:remotesystemname:2514
+Note that a port number was given as there is no standard port for RELP.
+
+Satisfies: SRG-OS-000479-GPOS-00224, SRG-OS-000342-GPOS-00133&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001851</xccdf:ident>
+          <xccdf:fixtext fixref="F-75809r1092267_fix">Configure OL 9 to offload audit records onto a different system or media from the system being audited via TCP using rsyslog by specifying the remote logging server in "/etc/rsyslog.conf"" or "/etc/rsyslog.d/[customfile].conf" with the name or IP address of the log aggregation server.
+
+*.* @@[remoteloggingserver]:[port]"</xccdf:fixtext>
+          <xccdf:fix id="F-75809r1092267_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271852" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271854">
+        <xccdf:title>SRG-OS-000342-GPOS-00133</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271854r1092274_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-005015</xccdf:version>
+          <xccdf:title>OL 9 must authenticate the remote logging server for offloading audit logs via rsyslog.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Information stored in one location is vulnerable to accidental or incidental deletion or alteration.
+
+Offloading is a common process in information systems with limited audit storage capacity.
+
+OL 9 installation media provides "rsyslogd", a system utility providing support for message logging. Support for both internet and Unix domain sockets enables this utility to support both local and remote logging. Coupling this utility with "gnutls" (a secure communications library implementing the SSL, TLS, and DTLS protocols) creates a method to securely encrypt and offload auditing.
+
+"Rsyslog" supported authentication modes include:
+anon - anonymous authentication
+x509/fingerprint - certificate fingerprint authentication
+x509/certvalid - certificate validation only
+x509/name - certificate validation and subject name authentication
+
+Satisfies: SRG-OS-000342-GPOS-00133, SRG-OS-000479-GPOS-00224&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001851</xccdf:ident>
+          <xccdf:fixtext fixref="F-75811r1092273_fix">Configure OL 9 to authenticate the remote logging server for off-loading audit logs by setting the following option in "/etc/rsyslog.conf" or "/etc/rsyslog.d/[customfile].conf":
+
+$ActionSendStreamDriverAuthMode x509/name</xccdf:fixtext>
+          <xccdf:fix id="F-75811r1092273_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271854" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271855">
+        <xccdf:title>SRG-OS-000342-GPOS-00133</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271855r1092277_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-005020</xccdf:version>
+          <xccdf:title>OL 9 must encrypt the transfer of audit records offloaded onto a different system or media from the system being audited via rsyslog.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Information stored in one location is vulnerable to accidental or incidental deletion or alteration.
+
+Offloading is a common process in information systems with limited audit storage capacity.
+
+OL 9 installation media provides "rsyslogd", a system utility providing support for message logging. Support for both internet and Unix domain sockets enables this utility to support both local and remote logging. Coupling this utility with "gnutls" (a secure communications library implementing the SSL, TLS, and DTLS protocols) creates a method to securely encrypt and offload auditing.
+
+"Rsyslog" supported authentication modes include:
+anon - anonymous authentication
+x509/fingerprint - certificate fingerprint authentication
+x509/certvalid - certificate validation only
+x509/name - certificate validation and subject name authentication
+
+Satisfies: SRG-OS-000342-GPOS-00133, SRG-OS-000479-GPOS-00224&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001851</xccdf:ident>
+          <xccdf:fixtext fixref="F-75812r1092276_fix">Configure OL 9 to encrypt offloaded audit records via rsyslog by setting the following options in "/etc/rsyslog.conf" or "/etc/rsyslog.d/[customfile].conf":
+
+$ActionSendStreamDriverMode 1</xccdf:fixtext>
+          <xccdf:fix id="F-75812r1092276_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271855" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271856">
+        <xccdf:title>SRG-OS-000342-GPOS-00133</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271856r1092280_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-005025</xccdf:version>
+          <xccdf:title>OL 9 must encrypt via the gtls driver the transfer of audit records offloaded onto a different system or media from the system being audited via rsyslog.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Information stored in one location is vulnerable to accidental or incidental deletion or alteration.
+
+Offloading is a common process in information systems with limited audit storage capacity.
+
+OL 9 installation media provides "rsyslogd", a system utility providing support for message logging. Support for both internet and Unix domain sockets enables this utility to support both local and remote logging. Coupling this utility with "gnutls" (a secure communications library implementing the SSL, TLS, and DTLS protocols) creates a method to securely encrypt and offload auditing.
+
+Satisfies: SRG-OS-000342-GPOS-00133, SRG-OS-000479-GPOS-00224&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001851</xccdf:ident>
+          <xccdf:fixtext fixref="F-75813r1092279_fix">Configure OL 9 to use the gtls driver to encrypt offloaded audit records by setting the following options in "/etc/rsyslog.conf" or "/etc/rsyslog.d/[customfile].conf":
+
+$DefaultNetstreamDriver gtls</xccdf:fixtext>
+          <xccdf:fix id="F-75813r1092279_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271856" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271857">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271857r1155339_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-005030</xccdf:version>
+          <xccdf:title>OL 9 must be configured so that the rsyslog daemon does not accept log messages from other servers unless the server is being used for log aggregation.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Unintentionally running a rsyslog server accepting remote messages puts the system at increased risk. Malicious rsyslog messages sent to the server could exploit vulnerabilities in the server software itself, could introduce misleading information into the system's logs, or could fill the system's storage leading to a denial of service.
+
+If the system is intended to be a log aggregation server, its use must be documented with the information system security officer (ISSO).&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75814r1155338_fix">Configure OL 9 to not receive remote logs using rsyslog.
+
+Remove the lines in /etc/rsyslog.conf and any files in the /etc/rsyslog.d directory that match any of the following:
+InputTCPServerRun
+UDPServerRun
+RELPServerRun
+module(load="imtcp")
+module(load="imudp")
+module(load="imrelp")
+input(type="imudp" port="514")
+input(type="imtcp" port="514")
+input(type="imrelp" port="514")
+
+The rsyslog daemon must be restarted for the changes to take effect:
+
+$ sudo systemctl restart rsyslog.service</xccdf:fixtext>
+          <xccdf:fix id="F-75814r1155338_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271857" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271858">
+        <xccdf:title>SRG-OS-000420-GPOS-00186</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271858r1092286_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-006000</xccdf:version>
+          <xccdf:title>OL 9 must protect against or limit the effects of denial-of-service (DoS) attacks by ensuring rate-limiting measures on impacted network interfaces are implemented.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;DoS is a condition when a resource is not available for legitimate users. When this occurs, the organization either cannot accomplish its mission or must operate at degraded capacity.
+
+This requirement addresses the configuration of OL 9 to mitigate the impact of DoS attacks that have occurred or are ongoing on system availability. For each system, known and potential DoS attacks must be identified and solutions for each type implemented. A variety of technologies exists to limit or, in some cases, eliminate the effects of DoS attacks (e.g., limiting processes or establishing memory partitions). Employing increased capacity and bandwidth, combined with service redundancy, may reduce the susceptibility to some DoS attacks.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002385</xccdf:ident>
+          <xccdf:fixtext fixref="F-75815r1092285_fix">Configure "nftables" to be the default "firewallbackend" for "firewalld" by adding or editing the following line in "/etc/firewalld/firewalld.conf":
+
+FirewallBackend=nftables
+
+Establish rate-limiting rules based on organization-defined types of DoS attacks on impacted network interfaces.</xccdf:fixtext>
+          <xccdf:fix id="F-75815r1092285_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271858" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271860">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271860r1092292_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-006002</xccdf:version>
+          <xccdf:title>OL 9 must configure a DNS processing mode set be Network Manager.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;To ensure that DNS resolver settings are respected, a DNS mode in Network Manager must be configured.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75817r1092291_fix">Configure NetworkManager in OL 9 to use a DNS mode.
+
+In "/etc/NetworkManager/NetworkManager.conf" add the following line in the "[main]" section:
+
+dns = none
+
+NetworkManager must be reloaded for the change to take effect.
+
+$ sudo systemctl reload NetworkManager</xccdf:fixtext>
+          <xccdf:fix id="F-75817r1092291_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271860" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271861">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271861r1092295_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-006003</xccdf:version>
+          <xccdf:title>OL 9 systems using Domain Name Servers (DNS) resolution must have at least two name servers configured.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;To provide availability for name resolution services, multiple redundant name servers are mandated. A failure in name resolution could lead to the failure of security functions requiring name resolution, which may include time synchronization, centralized authentication, and remote system logging.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75818r1092294_fix">Configure the operating system to use two or more name servers for DNS resolution based on the DNS mode of the system.
+
+If the NetworkManager DNS mode is set to "none", then add the following lines to "/etc/resolv.conf":
+
+nameserver [name server 1]
+nameserver [name server 2]
+
+Replace [name server 1] and [name server 2] with the IPs of two different DNS resolvers.
+
+If the NetworkManager DNS mode is set to "default" then add two DNS servers to a NetworkManager connection. Using the following commands:
+
+$ sudo nmcli connection modify [connection name] ipv4.dns [name server 1]
+$ sudo nmcli connection modify [connection name] ipv4.dns [name server 2]
+
+Replace [name server 1] and [name server 2] with the IPs of two different DNS resolvers. Replace [connection name] with a valid NetworkManager connection name on the system. Replace ipv4 with ipv6 if IPv6 DNS servers are used.</xccdf:fixtext>
+          <xccdf:fix id="F-75818r1092294_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271861" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271862">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271862r1092298_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-006004</xccdf:version>
+          <xccdf:title>OL 9 network interfaces must not be in promiscuous mode.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Network interfaces in promiscuous mode allow for the capture of all network traffic visible to the system. If unauthorized individuals can access these applications, it may allow them to collect information such as logon IDs, passwords, and key exchanges between systems.
+
+If the system is being used to perform a network troubleshooting function, the use of these tools must be documented with the information systems security officer (ISSO) and restricted to only authorized personnel.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75819r1092297_fix">Configure network interfaces to turn off promiscuous mode unless approved by the ISSO and documented.
+
+Set the promiscuous mode of an interface to off with the following command:
+
+$ sudo ip link set dev &lt;devicename&gt; multicast off promisc off</xccdf:fixtext>
+          <xccdf:fix id="F-75819r1092297_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271862" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271864">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271864r1092304_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-006020</xccdf:version>
+          <xccdf:title>OL 9 must ignore Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirect messages.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
+
+This feature of the IPv4 protocol has few legitimate uses. It should be disabled unless absolutely required.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75821r1092303_fix">Configure OL 9 to ignore IPv4 ICMP redirect messages.
+
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
+
+net.ipv4.conf.all.accept_redirects = 0
+
+Load settings from all system configuration files with the following command:
+
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-75821r1092303_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271864" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271865">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271865r1092307_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-006021</xccdf:version>
+          <xccdf:title>OL 9 must not forward Internet Protocol version 4 (IPv4) source-routed packets.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Source-routed packets allow the source of the packet to suggest routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when IPv4 forwarding is enabled and the system is functioning as a router.
+
+Accepting source-routed packets in the IPv4 protocol has few legitimate uses. It must be disabled unless it is absolutely required.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75822r1092306_fix">Configure OL 9 to ignore IPv4 source-routed packets.
+
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
+
+net.ipv4.conf.all.accept_source_route = 0
+
+Load settings from all system configuration files with the following command:
+
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-75822r1092306_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271865" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271866">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271866r1092310_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-006022</xccdf:version>
+          <xccdf:title>OL 9 must log IPv4 packets with impossible addresses.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The presence of "martian" packets (which have impossible addresses) as well as spoofed packets, source-routed packets, and redirects could be a sign of nefarious network activity. Logging these packets enables this activity to be detected.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75823r1092309_fix">Configure OL 9 to log martian packets on IPv4 interfaces.
+
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
+
+net.ipv4.conf.all.log_martians=1
+
+Load settings from all system configuration files with the following command:
+
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-75823r1092309_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271866" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271867">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271867r1092313_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-006023</xccdf:version>
+          <xccdf:title>OL 9 must log IPv4 packets with impossible addresses by default.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;The presence of "martian" packets (which have impossible addresses) as well as spoofed packets, source-routed packets, and redirects could be a sign of nefarious network activity. Logging these packets enables this activity to be detected.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75824r1092312_fix">Configure OL 9 to log martian packets on IPv4 interfaces by default.
+
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
+
+net.ipv4.conf.default.log_martians=1
+
+Load settings from all system configuration files with the following command:
+
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-75824r1092312_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271867" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271868">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271868r1172845_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-006024</xccdf:version>
+          <xccdf:title>OL 9 must use reverse path filtering on all IPv4 interfaces.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Enabling reverse path filtering drops packets with source addresses that should not have been able to be received on the interface on which they were received. It must not be used on systems that are routers for complicated networks but is helpful for end hosts and routers serving small networks.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75825r1092315_fix">Configure OL 9 to use reverse path filtering on all IPv4 interfaces. 
+
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
+
+net.ipv4.conf.all.rp_filter = 1
+
+The system configuration files need to be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
+
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-75825r1092315_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271868" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271869">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271869r1092319_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-006025</xccdf:version>
+          <xccdf:title>OL 9 must prevent IPv4 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
+
+This feature of the IPv4 protocol has few legitimate uses. It must be disabled unless absolutely required.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75826r1092318_fix">Configure OL 9 to prevent IPv4 ICMP redirect messages from being accepted.
+
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
+
+net.ipv4.conf.default.accept_redirects = 0
+
+Load settings from all system configuration files with the following command:
+
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-75826r1092318_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271869" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271870">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271870r1092322_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-006026</xccdf:version>
+          <xccdf:title>OL 9 must not forward IPv4 source-routed packets by default.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Source-routed packets allow the source of the packet to suggest routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures.
+
+Accepting source-routed packets in the IPv4 protocol has few legitimate uses. It must be disabled unless it is absolutely required, such as when IPv4 forwarding is enabled and the system is legitimately functioning as a router.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75827r1092321_fix">Configure OL 9 to not forward IPv4 source-routed packets by default.
+
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
+
+net.ipv4.conf.default.accept_source_route = 0
+
+Load settings from all system configuration files with the following command:
+
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-75827r1092321_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271870" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271871">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271871r1172843_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-006027</xccdf:version>
+          <xccdf:title>OL 9 must use a reverse-path filter for IPv4 network traffic, when possible, by default.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Enabling reverse path filtering drops packets with source addresses that should not have been able to be received on the interface on which they were received. It must not be used on systems that are routers for complicated networks but is helpful for end hosts and routers serving small networks.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75828r1092324_fix">Configure OL 9 to use reverse path filtering on IPv4 interfaces by default.
+
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
+
+net.ipv4.conf.default.rp_filter = 1
+
+Load settings from all system configuration files with the following command:
+
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-75828r1092324_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271871" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271872">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271872r1092328_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-006028</xccdf:version>
+          <xccdf:title>OL 9 must not enable IPv4 packet forwarding unless the system is a router.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Routing protocol daemons are typically used on routers to exchange network topology information with other routers. If this capability is used when not required, system network information may be unnecessarily transmitted across the network.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75829r1092327_fix">Configure OL 9 to not allow IPv4 packet forwarding unless the system is a router.
+
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
+
+net.ipv4.conf.all.forwarding = 0
+
+Load settings from all system configuration files with the following command:
+
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-75829r1092327_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271872" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271873">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271873r1092331_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-006030</xccdf:version>
+          <xccdf:title>OL 9 must not respond to Internet Control Message Protocol (ICMP) echoes sent to a broadcast address.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Responding to broadcast (ICMP) echoes facilitates network mapping and provides a vector for amplification attacks.
+
+Ignoring ICMP echo requests (pings) sent to broadcast or multicast addresses makes the system slightly more difficult to enumerate on the network.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75830r1092330_fix">Configure OL 9 to not respond to IPv4 ICMP echoes sent to a broadcast address.
+
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
+
+net.ipv4.icmp_echo_ignore_broadcasts = 1
+
+Load settings from all system configuration files with the following command:
+
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-75830r1092330_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271873" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271874">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271874r1092612_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-006031</xccdf:version>
+          <xccdf:title>OL 9 must limit the number of bogus Internet Control Message Protocol (ICMP) response errors logs.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Some routers will send responses to broadcast frames that violate RFC-1122, which fills up a log file system with many useless error messages. An attacker may take advantage of this and attempt to flood the logs with bogus error logs. Ignoring bogus ICMP error responses reduces log size, although some activity would not be logged.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75831r1092333_fix">Configure OL 9 to not log bogus ICMP errors: 
+
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
+
+net.ipv4.icmp_ignore_bogus_error_responses = 1
+
+Load settings from all system configuration files with the following command:
+
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-75831r1092333_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271874" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271875">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271875r1092337_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-006032</xccdf:version>
+          <xccdf:title>OL 9 must not send Internet Control Message Protocol (ICMP) redirects.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages contain information from the system's route table possibly revealing portions of the network topology.
+
+The ability to send ICMP redirects is only appropriate for systems acting as routers.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75832r1092336_fix">Configure OL 9 to not allow interfaces to perform IPv4 ICMP redirects.
+
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
+
+net.ipv4.conf.all.send_redirects = 0
+
+Load settings from all system configuration files with the following command:
+
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-75832r1092336_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271875" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271876">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271876r1092641_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-006033</xccdf:version>
+          <xccdf:title>OL 9 must not allow interfaces to perform Internet Control Message Protocol (ICMP) redirects by default.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages contain information from the system's route table possibly revealing portions of the network topology.
+
+The ability to send ICMP redirects is only appropriate for systems acting as routers.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75833r1092640_fix">Configure OL 9 to not allow interfaces to perform IPv4 ICMP redirects by default.
+
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
+
+net.ipv4.conf.default.send_redirects = 0
+
+Load settings from all system configuration files with the following command:
+
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-75833r1092640_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271876" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271877">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271877r1092343_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-006040</xccdf:version>
+          <xccdf:title>OL 9 must not accept router advertisements on all IPv6 interfaces.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;An illicit router advertisement message could result in a man-in-the-middle attack.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxIPv6enabled" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75834r1092342_fix">Configure OL 9 to not accept router advertisements on all IPv6 interfaces unless the system is a router.
+
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
+
+net.ipv6.conf.all.accept_ra = 0
+
+Load settings from all system configuration files with the following command:
+
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-75834r1092342_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271877" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271878">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271878r1092346_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-006041</xccdf:version>
+          <xccdf:title>OL 9 must ignore IPv6 Internet Control Message Protocol (ICMP) redirect messages.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;An illicit ICMP redirect message could result in a man-in-the-middle attack.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxIPv6enabled" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75835r1092345_fix">Configure OL 9 to ignore IPv6 ICMP redirect messages.
+
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
+
+net.ipv6.conf.all.accept_redirects = 0
+
+Load settings from all system configuration files with the following command:
+
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-75835r1092345_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271878" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271879">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271879r1092349_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-006042</xccdf:version>
+          <xccdf:title>OL 9 must not forward IPv6 source-routed packets.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Source-routed packets allow the source of the packet to suggest that routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when forwarding is enabled and the system is functioning as a router.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxIPv6enabled" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75836r1092348_fix">Configure OL 9 to not forward IPv6 source-routed packets.
+
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
+
+net.ipv6.conf.all.accept_source_route = 0
+
+Load settings from all system configuration files with the following command:
+
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-75836r1092348_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271879" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271880">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271880r1092352_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-006043</xccdf:version>
+          <xccdf:title>OL 9 must not enable IPv6 packet forwarding unless the system is a router.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;IP forwarding permits the kernel to forward packets from one network interface to another. The ability to forward packets between two networks is only appropriate for systems acting as routers.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxIPv6enabled" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75837r1092351_fix">Configure OL 9 to not allow IPv6 packet forwarding unless the system is a router.
+
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
+
+net.ipv6.conf.all.forwarding = 0
+
+Load settings from all system configuration files with the following command:
+
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-75837r1092351_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271880" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271881">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271881r1092355_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-006044</xccdf:version>
+          <xccdf:title>OL 9 must not accept router advertisements on all IPv6 interfaces by default.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;An illicit router advertisement message could result in a man-in-the-middle attack.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxIPv6enabled" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75838r1092354_fix">Configure OL 9 to not accept router advertisements on all IPv6 interfaces by default unless the system is a router.
+
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
+
+net.ipv6.conf.default.accept_ra = 0
+
+Load settings from all system configuration files with the following command:
+
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-75838r1092354_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271881" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271882">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271882r1092358_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-006045</xccdf:version>
+          <xccdf:title>OL 9 must prevent IPv6 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxIPv6enabled" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75839r1092357_fix">Configure OL 9 to prevent IPv6 ICMP redirect messages from being accepted.
+
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
+
+net.ipv6.conf.default.accept_redirects = 0
+
+Load settings from all system configuration files with the following command:
+
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-75839r1092357_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271882" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271883">
+        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271883r1092361_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-006046</xccdf:version>
+          <xccdf:title>OL 9 must not forward IPv6 source-routed packets by default.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Source-routed packets allow the source of the packet to suggest that routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when forwarding is enabled and the system is functioning as a router.
+
+Accepting source-routed packets in the IPv6 protocol has few legitimate uses. It must be disabled unless it is absolutely required.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxIPv6enabled" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
+          <xccdf:fixtext fixref="F-75840r1092360_fix">Configure OL 9 to not forward IPv6 source-routed packets by default.
+
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
+
+net.ipv6.conf.default.accept_source_route = 0
+
+Load settings from all system configuration files with the following command:
+
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-75840r1092360_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271883" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271884">
+        <xccdf:title>SRG-OS-000420-GPOS-00186</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271884r1092364_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-006050</xccdf:version>
+          <xccdf:title>OL 9 must be configured to use TCP syncookies.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Denial of service (DoS) is a condition when a resource is not available for legitimate users. When this occurs, the organization either cannot accomplish its mission or must operate at degraded capacity. 
+
+Managing excess capacity ensures that sufficient capacity is available to counter flooding attacks. Employing increased capacity and service redundancy may reduce the susceptibility to some DoS attacks. Managing excess capacity may include, for example, establishing selected usage priorities, quotas, or partitioning.
+
+Satisfies: SRG-OS-000420-GPOS-00186, SRG-OS-000142-GPOS-00071&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002385</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001095</xccdf:ident>
+          <xccdf:fixtext fixref="F-75841r1092363_fix">Configure OL 9 to use TCP syncookies.
+
+Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+
+ net.ipv4.tcp_syncookies = 1
+
+Load settings from all system configuration files with the following command:
+
+$ sudo sysctl --system</xccdf:fixtext>
+          <xccdf:fix id="F-75841r1092363_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271884" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271885">
+        <xccdf:title>SRG-OS-000462-GPOS-00206</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271885r1092367_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-008000</xccdf:version>
+          <xccdf:title>OL 9 audit system must protect logon UIDs from unauthorized change.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;If modification of login user identifiers (UIDs) is not prevented, they can be changed by nonprivileged users and make auditing complicated or impossible.
+
+Satisfies: SRG-OS-000462-GPOS-00206, SRG-OS-000475-GPOS-00220, SRG-OS-000057-GPOS-00027, SRG-OS-000058-GPOS-00028, SRG-OS-000059-GPOS-00029&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000162</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000163</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000164</xccdf:ident>
+          <xccdf:fixtext fixref="F-75842r1092366_fix">Configure OL 9 auditing to prevent modification of login UIDs once they are set by adding the following line to /etc/audit/rules.d/audit.rules:
+
+--loginuid-immutable
+
+The audit daemon must be restarted for the changes to take effect.
+
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75842r1092366_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271885" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-271886">
+        <xccdf:title>SRG-OS-000057-GPOS-00027</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-271886r1092370_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-008005</xccdf:version>
+          <xccdf:title>OL 9 audit system must protect auditing rules from unauthorized change.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Unauthorized disclosure of audit records can reveal system and configuration data to attackers, thus compromising its confidentiality.
+
+Audit information includes all information (e.g., audit records, audit settings, audit reports) needed to successfully audit OL 9 system activity.
+
+In immutable mode, unauthorized users cannot execute changes to the audit system to potentially hide malicious activity and then put the audit rules back. A system reboot would be noticeable, and a system administrator could then investigate the unauthorized changes.
+
+Satisfies: SRG-OS-000057-GPOS-00027, SRG-OS-000058-GPOS-00028, SRG-OS-000059-GPOS-00029&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000162</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000163</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000164</xccdf:ident>
+          <xccdf:fixtext fixref="F-75843r1092369_fix">Configure the audit system to set the audit rules to be immutable by adding the following line to end of "/etc/audit/rules.d/audit.rules"
+
+-e 2
+
+The audit daemon must be restarted for the changes to take effect.
+
+$ sudo service auditd restart</xccdf:fixtext>
+          <xccdf:fix id="F-75843r1092369_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:271886" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-278952">
+        <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-278952r1135407_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002584</xccdf:version>
+          <xccdf:title>OL 9 must audit any script or executable called by cron as root or by any privileged user.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Any script or executable called by cron as root or by any privileged user must be owned by that user, must have the permissions 0755 or more restrictive, and should have no extended rights that allow any nonprivileged user to modify the script or executable.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000130</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000135</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000169</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000172</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002884</xccdf:ident>
+          <xccdf:fixtext fixref="F-83391r1135405_fix">Configure OL 9 to audit the execution of any system call made by cron as root or as any privileged user.
+
+Add or update the following file system rules to "/etc/audit/rules.d/audit.rules":
+
+auditctl -w /etc/cron.d/ -p wa -k cronjobs
+auditctl -w /var/spool/cron/ -p wa -k cronjobs
+
+To load the rules to the kernel immediately, use the following command:
+
+$ sudo augenrules --load</xccdf:fixtext>
+          <xccdf:fix id="F-83391r1135405_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:278952" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-279935">
+        <xccdf:title>SRG-OS-000163-GPOS-00072</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-279935r1156358_rule" severity="medium" weight="10.0">
+          <xccdf:version>OL09-00-002376</xccdf:version>
+          <xccdf:title>OL 9 must terminate idle user sessions.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a management session enabled on the console or console port that has been left unattended.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Oracle Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Oracle Linux 9</dc:subject>
+            <dc:identifier>5680</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001134</xccdf:ident>
+          <xccdf:fixtext fixref="F-84400r1156357_fix">Configure OL 9 to log out idle sessions by editing the /etc/systemd/logind.conf file with the following line:
+
+StopIdleSessionSec=600
+
+The "logind" service must be restarted for the changes to take effect. To restart the "logind" service, run the following command:
+
+$ sudo systemctl restart systemd-logind</xccdf:fixtext>
+          <xccdf:fix id="F-84400r1156357_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.ol9os:def:279935" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+    </xccdf:Benchmark>
+  </component>
+  <component id="scap_mil.disa.stig_comp_U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-oval.xml" timestamp="2026-01-05T14:26:46.407-05:00">
+    <oval_definitions xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5">
+      <generator>
+        <oval:product_name>Security Content Tool 1.7.0</oval:product_name>
+        <oval:schema_version>5.11</oval:schema_version>
+        <oval:timestamp>2026-01-05T02:26:46</oval:timestamp>
+      </generator>
+      <definitions>
+        <definition id="oval:mil.disa.stig.defs:def:204417" version="2" class="compliance">
+          <metadata>
+            <title>The operating system must be configured so that user and group account administration utilities are configured to store only encrypted representations of passwords.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:20441700" comment="libuser.conf, defaults/crypt_style exists" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:20441701" comment="libuser.conf, crypt_style = sha512" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230231" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must encrypt all stored passwords with a FIPS 140-2 approved cryptographic hashing algorithm.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23023100" comment="/etc/login.defs:ENCRYPT_METHOD &gt;= SHA512" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230232" version="2" class="compliance">
+          <metadata>
+            <title>The operating system must employ FIPS 140-2 approved cryptographic hashing algorithms for all stored passwords.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23023200" comment="No active password hash in /etc/shadow has a prefix other than '$6$'." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230233" version="4" class="compliance">
+          <metadata>
+            <title>The operating system shadow password suite must be configured to use a sufficient number of hashing rounds.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23023300" comment="/etc/login.defs: SHA_CRYPT_MIN_ROUNDS, if set, is set to 100000 or greater" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23023301" comment="/etc/login.defs: SHA_CRYPT_MAX_ROUNDS, if set, is set to 100000 or greater" />
+            <criteria operator="OR">
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:23023302" comment="/etc/login.defs: SHA_CRYPT_MIN_ROUNDS is set" />
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:23023303" comment="/etc/login.defs: SHA_CRYPT_MAX_ROUNDS is set" />
+            </criteria>
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230237" version="1" class="compliance">
+          <metadata>
+            <title>The operating system pam_unix.so module must be configured in the password-auth file to use a FIPS 140-2 approved cryptographic hashing algorithm for system authentication.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23023700" comment="/etc/pam.d/password-auth:password includes pam_unix.so sha512" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230240" version="3" class="compliance">
+          <metadata>
+            <title>The operating system must use a Linux Security Module configured to enforce limits on system services.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23024000" comment="selinux is active" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23024000" comment="selinux is enforcing" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23024001" comment="/etc/selinux/config:SELINUX=enforcing" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230241" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must have policycoreutils package installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23024100" comment="package policycoreutils is installed" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230245" version="1" class="compliance">
+          <metadata>
+            <title>The operating system /var/log/messages file must have mode 0640 or less permissive.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23024500" comment="/var/log/messages file has mode 0640 or less permissive" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230246" version="1" class="compliance">
+          <metadata>
+            <title>The operating system /var/log/messages file must be owned by root.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23024600" comment="/var/log/messages file is owned by root" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230247" version="1" class="compliance">
+          <metadata>
+            <title>The operating system /var/log/messages file must be group-owned by root.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23024700" comment="/var/log/messages file is owned by root" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230248" version="1" class="compliance">
+          <metadata>
+            <title>The operating system /var/log directory must have mode 0755 or less permissive.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23024800" comment="/var/log directory has mode 0755 or less permissive." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230249" version="1" class="compliance">
+          <metadata>
+            <title>The operating system /var/log directory must be owned by root.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23024900" comment="/var/log directory is owned by root" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230250" version="1" class="compliance">
+          <metadata>
+            <title>The operating system /var/log directory must be group-owned by root.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23025000" comment="/var/log directory is group-owned by root." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230261" version="1" class="compliance">
+          <metadata>
+            <title>The operating system library files must be owned by root.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23026100" comment="The operating system library files are owned by root" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230262" version="2" class="compliance">
+          <metadata>
+            <title>The operating system library files must be group-owned by root or a system account.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23026200" comment="All system-wide library files must be group-owned by root" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230264" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must prevent the installation of software, patches, service packs, device drivers, or operating system components from a repository without verification they have been digitally signed using a certificate that is issued by a Certificate Authority (CA) that is recognized and approved by the organization.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23026400" comment="Every /etc/yum.repos.d/*.repo:[{reponame}] has a gpgcheck entry set to 1." />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23026401" comment="No /etc/yum.repos.d/*.repo:[{reponame}] has a gpgcheck entry set to 0." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230265" version="2" class="compliance">
+          <metadata>
+            <title>The operating system must prevent the installation of software, patches, service packs, device drivers, or operating system components of local packages without verification they have been digitally signed using a certificate that is issued by a Certificate Authority (CA) that is recognized and approved by the organization.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23026500" comment="/etc/dnf/dnf.conf: localpkg_gpgcheck is set to True, 1, or yes." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230266" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must prevent the loading of a new kernel for later execution.</title>
+            <description />
+          </metadata>
+          <criteria operator="AND">
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23026600" comment="kernel.kexec_load_disabled setting in kernel is 1" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23026601" comment="kernel.kexec_load_disabled setting in sysctl configuration files is set to 1, and nothing else" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230271" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must require users to provide a password for privilege escalation.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23027100" comment="'NOPASSWD' does not exist in /etc/sudoers" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23027101" comment="'NOPASSWD' does not exist in /etc/sudoers.d" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230273" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must have the packages required for multifactor authentication installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23027300" comment="package openssl-pkcs11 is installed" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230277" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must clear the page allocator to prevent use-after-free attacks.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25779300" comment="BLS options contain page_poison=1" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25779301" comment="/etc/default/grub page_poison=1" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230278" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must disable virtual syscalls.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23027800" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23027801" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230281" version="1" class="compliance">
+          <metadata>
+            <title>YUM must remove all software components after updated versions have been installed on the operating system.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23028100" comment="/etc/dnf/dnf.conf: clean_requirements_on_remove is set to True, 1 or yes" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230282" version="2" class="compliance">
+          <metadata>
+            <title>The operating system must enable the SELinux targeted policy.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23024000" comment="selinux is active" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23028200" comment="/etc/selinux/config: SELINUXTYPE=targeted" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230283" version="1" class="compliance">
+          <metadata>
+            <title>There must be no shosts.equiv files on the operating system operating system.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23028300" comment="There must be no shosts.equiv files on the system." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230284" version="1" class="compliance">
+          <metadata>
+            <title>There must be no .shosts files on the operating system operating system.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23028400" comment="There are no .shosts files on the system." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230286" version="1" class="compliance">
+          <metadata>
+            <title>The operating system SSH public host key files must have mode 0644 or less permissive.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23028600" comment="The SSH daemon public host key files have mode 0644 or less permissive" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230287" version="1" class="compliance">
+          <metadata>
+            <title>The operating system SSH private host key files must have mode 0640 or less permissive.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23028700" comment="SSH private key files mode 640 or less permissive" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230288" version="2" class="compliance">
+          <metadata>
+            <title>The operating system SSH daemon must perform strict mode checking of home directory configuration files.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23028800" comment="/etc/ssh/sshd_config or /etc/ssh/sshd_config.d/*:StrictModes == yes" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230292" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must use a separate file system for /var.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23029200" comment="There is a separate file system for /var" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23029201" comment="There is a separate file system configured for /var" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230294" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must use a separate file system for the system audit data path.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23029400" comment="There is a separate file system for audit data directory." />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23029401" comment="There is a separate file system configured for audit data directory." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230295" version="2" class="compliance">
+          <metadata>
+            <title>A separate the operating system filesystem must be used for the /tmp directory.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23029500" comment="There is a separate file system for /tmp." />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23029500" comment="There is a separate file system configured for /tmp." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230296" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must not permit direct logons to the root account using remote access via SSH.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23029600" comment="/etc/ssh/sshd_config:PermitRootLogin == no" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230299" version="2" class="compliance">
+          <metadata>
+            <title>The operating system must prevent files with the setuid and setgid bit set from being executed on file systems that contain user home directories.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23029900" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230300" version="2" class="compliance">
+          <metadata>
+            <title>The operating system must prevent files with the setuid and setgid bit set from being executed on the /boot directory.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23030000" comment="/boot is mounted an configured with the nosuid option." />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23030001" comment="If /boot is configured in /etc/fstab it is with the nosuid option." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230301" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must prevent special devices on non-root local partitions.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23030100" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23030101" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230306" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must prevent code from being executed on file systems that are imported via Network File System (NFS).</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23030600" comment="remote nfs filesystems in /etc/fstab have noexec" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23030601" comment="actual nfs mounts have noexec" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230307" version="2" class="compliance">
+          <metadata>
+            <title>The operating system must prevent special devices on file systems that are imported via Network File System (NFS).</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25785401" comment="nfs mounts have nodev option" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230308" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must prevent files with the setuid and setgid bit set from being executed on file systems that are imported via Network File System (NFS).</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23030800" comment="remote nfs filesystems in /etc/fstab have nosuid" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230310" version="2" class="compliance">
+          <metadata>
+            <title>The operating system must disable kernel dumps unless needed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23031000" />
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23031001" />
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23031002" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230311" version="3" class="compliance">
+          <metadata>
+            <title>The operating system must disable the kernel.core_pattern.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23031100" comment="kernel.core_pattern setting in kernel is |/bin/false" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230312" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must disable acquiring, saving, and processing core dumps.</title>
+            <description />
+          </metadata>
+          <criteria operator="AND">
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23031200" comment="systemd-coredump.socket LoadState is masked if exists" />
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23031201" comment="systemd-coredump.socket UnitFileState is masked if exists" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230313" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must disable core dumps for all users.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23031300" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23031301" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230314" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must disable storing core dumps.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23031400" comment="/usr/systemd/coredump.conf:Storage is set to none." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230315" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must disable core dump backtraces.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23031500" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230316" version="2" class="compliance">
+          <metadata>
+            <title>For Systems using Domain Name Servers (DNS) resolution, at least two name servers must be configured.</title>
+            <description />
+          </metadata>
+          <criteria operator="OR">
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23031600" negate="true" comment="The system is not using DNS" />
+            <criteria operator="AND">
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:23031600" comment="The system is using DNS" />
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:23031602" comment="/etc/resolv.conf contains at least one nameserver entry" />
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:23031601" comment="/etc/resolv.conf is configured with at least two name servers" />
+            </criteria>
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230324" version="1" class="compliance">
+          <metadata>
+            <title>All the operating system local interactive user accounts must be assigned a home directory upon creation.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23032400" comment="All local interactive user accounts are assigned a home directory upon creation" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230325" version="1" class="compliance">
+          <metadata>
+            <title>All the operating system local initialization files must have mode 0740 or less permissive.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23032500" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23032501" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230328" version="1" class="compliance">
+          <metadata>
+            <title>A separate operating system filesystem must be used for user home directories (such as /home or an equivalent).</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23032800" comment="A separate operating system filesystem is used for user home directories" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230329" version="1" class="compliance">
+          <metadata>
+            <title>Unattended or automatic logon via the operating system graphical user interface must not be allowed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23032900" comment="AutomaticLoginEnable is set to false" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230333" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must automatically lock an account when three unsuccessful logon attempts occur.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23033300" comment="deny is set to 3 or less but not 0 in /etc/security/faillock.conf" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230335" version="2" class="compliance">
+          <metadata>
+            <title>The operating system must automatically lock an account when three unsuccessful logon attempts occur during a 15-minute time period.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23033500" comment="/etc/security/faillock.conf:fail_interval &lt;=900 and !=0" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230337" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must automatically lock an account until the locked account is released by an administrator when three unsuccessful logon attempts occur during a 15-minute time period.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23033700" comment="unlock_time is set to 0 in /etc/security/faillock.conf" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230339" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must ensure account lockouts persist</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23033900" comment="/etc/security/faillock.conf: dir = var/log/faillock" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230343" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must log user name information when unsuccessful logon attempts occur.</title>
+            <description />
+          </metadata>
+          <criteria comment="/etc/security/faillock.conf has audit configured">
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23034300" comment="audit is set in /etc/security/faillock.conf" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230345" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must include root when automatically locking an account until the locked account is released by an administrator when three unsuccessful logon attempts occur during a 15-minute time period.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:230345" comment="check /etc/security/faillock.conf for the even_deny_root setting" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230346" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must limit the number of concurrent sessions to ten for all accounts and/or account types.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23034600" comment="limits.conf and limits.d/*.conf:maxlogins is set to 10 or less by default" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23034601" comment="limits.conf and limits.d/*.conf:maxlogins is set to 10 or less for non-default domains" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230351" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must be able to initiate directly a session lock for all connection types using smartcard when the smartcard is removed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23035100" comment="/proc/sys/crypto/fips_enabled is set to 1" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230356" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must ensure the password complexity module is enabled in the password-auth file.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23035600" comment="The pam_pwquality module is included in password-auth." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230357" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must enforce password complexity by requiring that at least one uppercase character be used.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23035700" comment="at least one uppercase character is required" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230358" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must enforce password complexity by requiring that at least one lower-case character be used.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23035800" comment="at least one lowercase character is required" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230359" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must enforce password complexity by requiring that at least one numeric character be used.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23035900" comment="at least one numeric character is required" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230360" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must require the maximum number of repeating characters of the same character class be limited to four when passwords are changed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23036000" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230361" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must require the maximum number of repeating characters be limited to three when passwords are changed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23036100" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230362" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must require the change of at least four character classes when passwords are changed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23036200" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230363" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must require the change of at least 8 characters when passwords are changed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23036300" comment="at least 8 characters must change when passwords are changed" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230364" version="1" class="compliance">
+          <metadata>
+            <title>The operating system passwords must have a 24 hours/1 day minimum password lifetime restriction in /etc/shadow.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23036400" comment="Root does not have a minimum password age of 0 or blank" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23036401" comment="Non-system users do not have a minimum password age of 0 or blank" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230365" version="1" class="compliance">
+          <metadata>
+            <title>The operating system passwords for new users or password changes must have a 24 hours/1 day minimum password lifetime restriction in /etc/login.defs.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23036500" comment="/etc/login.defs:PASS_MIN_DAYS &gt;= 1" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230367" version="1" class="compliance">
+          <metadata>
+            <title>The operating system user account passwords must be configured so that existing passwords are restricted to a 60-day maximum lifetime.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23036700" comment="No password in /etc/shadow has a maximum password age of 0 or greater than 60" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23036701" comment="Root password in /etc/shadow does not have a maximum password age of 0 or greater than 60" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230369" version="1" class="compliance">
+          <metadata>
+            <title>The operating system passwords must have a minimum of 15 characters.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23036900" comment="passwords must have a minimum of 15 characters" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230373" version="1" class="compliance">
+          <metadata>
+            <title>The operating system account identifiers (individuals, groups, roles, and devices) must be disabled after 35 days of inactivity.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23037300" comment="/etc/default/useradd: INACTIVE is set to 35 or less, but not -1" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230375" version="1" class="compliance">
+          <metadata>
+            <title>All the operating system passwords must contain at least one special character.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23037500" comment="Passwords contain at least one special character" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230376" version="2" class="compliance">
+          <metadata>
+            <title>The operating system must prohibit the use of cached authentications after one day.</title>
+            <description />
+          </metadata>
+          <criteria operator="OR">
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23037600" comment="/etc/sssd/sssd.conf:cache_credentials = true does not exist" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23037602" comment="/etc/sssd/sssd.conf:offline_credentials_expiration = 1" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230377" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must prevent the use of dictionary words for passwords.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23037700" comment="passwords must not be dictionary words" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230378" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must enforce a delay of at least four seconds between logon prompts following a failed logon attempt.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23037800" comment="/etc/login.defs: FAIL_DELAY = 4 or greater" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230383" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must define default permissions for all authenticated users in such a way that the user can only read and modify their own files.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23038300" comment="/etc/login.defs:UMASK == 077" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230386" version="1" class="compliance">
+          <metadata>
+            <title>The operating system audit system must be configured to audit the execution of privileged functions and prevent all software from executing at higher privilege levels than users executing the software.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23038600" comment="Audit 32-bit invocations of execve syscall comparing uids" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23038601" comment="Audit 64-bit invocations of execve syscall comparing uids" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23038602" comment="Audit 32-bit invocations of execve syscall comparing gids" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23038603" comment="Audit 64-bit invocations of execve syscall comparing gids" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230388" version="1" class="compliance">
+          <metadata>
+            <title>The operating system System Administrator (SA) and Information System Security Officer (ISSO) (at a minimum) must be alerted of an audit processing failure event.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23038800" comment="/etc/audit/auditd.conf: action_mail_acct = root" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230389" version="1" class="compliance">
+          <metadata>
+            <title>The operating system Information System Security Officer (ISSO) and System Administrator (SA) (at a minimum) must have mail aliases to be notified of an audit processing failure.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23038900" comment="/etc/aliases contains 'postmaster: root'" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230390" version="1" class="compliance">
+          <metadata>
+            <title>The operating system System must take appropriate action when an audit processing failure occurs.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23039000" comment="/etc/audit/auditd.conf: disk_error_action = SYSLOG, SINGLE, or HALT" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230392" version="1" class="compliance">
+          <metadata>
+            <title>The operating system audit system must take appropriate action when the audit storage volume is full.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23039200" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230393" version="1" class="compliance">
+          <metadata>
+            <title>The operating system audit system must audit local events.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23039300" comment="/etc/audit/auditd.conf: local_events = yes" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230394" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must label all off-loaded audit logs before sending them to the central log server.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23039400" comment="/etc/audit/auditd.conf: name_format = hostname, fqd or numeric" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230395" version="2" class="compliance">
+          <metadata>
+            <title>The operating system must resolve audit information before writing to disk.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23039500" comment="/etc/audit/auditd.conf: log_format = enriched" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230396" version="1" class="compliance">
+          <metadata>
+            <title>The operating system audit logs must have a mode of 0600 or less permissive to prevent unauthorized read access.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23039600" comment="Audit log is mode 0600 or less permissive" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230398" version="1" class="compliance">
+          <metadata>
+            <title>The operating system audit logs must be group-owned by root to prevent unauthorized read access.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23039800" comment="audit logs are group-owned by root" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230399" version="1" class="compliance">
+          <metadata>
+            <title>The operating system audit log directory must be owned by root to prevent unauthorized read access.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23039900" comment="audit log directories are owned by root" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230402" version="1" class="compliance">
+          <metadata>
+            <title>The operating system audit system must protect auditing rules from unauthorized change.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23040200" comment="/etc/audit/audit.rules: -e 2 option is present and is the last line in the file" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230403" version="1" class="compliance">
+          <metadata>
+            <title>The operating system audit system must protect logon UIDs from unauthorized change.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23040300" comment="/etc/audit/audit.rules: --loginuid-immutable option is present" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230404" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/shadow.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23040400" comment="Events resulting in modifications to /etc/shadow are audited" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230405" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/security/opasswd.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23040500" comment="Audit modifications to /etc/security/opasswd" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230406" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/passwd.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23040600" comment="Audit modifications to /etc/passwd" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230407" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/gshadow.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23040700" comment="Audit modifications to /etc/gshadow" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230408" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/group.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23040800" comment="Audit modifications to /etc/group" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230409" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/sudoers.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23040900" comment="Audit modifications to /etc/sudoers" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230410" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/sudoers.d/.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23041000" comment="Audit modifications to /etc/sudoers.d/" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230411" version="1" class="compliance">
+          <metadata>
+            <title>The operating system audit package must be installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23041100" comment="package audit is installed" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230412" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the su command in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23041200" comment="Audit invocations of /usr/bin/su" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230413" version="1" class="compliance">
+          <metadata>
+            <title>The operating system audit system must be configured to audit any usage of the setxattr, fsetxattr, lsetxattr, removexattr, fremovexattr, and lremovexattr system calls.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:253034" comment="Audit fsetxattr" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:253035" comment="Audit lsetxattr" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:253036" comment="Audit fremovexattr" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:253037" comment="Audit lremovexattr" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:253038" comment="Audit removexattr" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23041300" comment="Audit 32-bit invocations of setxattr syscall (auid&gt;=1000)" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23041301" comment="Audit 64-bit invocations of setxattr syscall (auid&gt;=1000)" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23041302" comment="Audit 32-bit invocations of setxattr syscall (auid=0)" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23041303" comment="Audit 64-bit invocations of setxattr syscall (auid=0)" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230418" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the chage command in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23041800" comment="Audit invocations of /usr/bin/chage" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230419" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the chcon command in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23041900" comment="Audit invocations of /usr/bin/chcon" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230421" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the ssh-agent in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23042100" comment="Audit invocations of /usr/bin/ssh-agent" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230422" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the passwd command in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23042200" comment="Audit invocations of /usr/bin/passwd" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230423" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the mount command in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23042300" comment="Audit executions of /usr/bin/mount" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230424" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the umount command in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23042400" comment="Audit invocations of /usr/bin/umount" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230426" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the unix_update in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23042600" comment="Audit invocations of /usr/sbin/unix_update" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230427" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of postdrop in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23042700" comment="Audit invocations of /usr/sbin/postdrop" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230428" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of postqueue in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23042800" comment="Audit invocations of /usr/sbin/postqueue" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230429" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of semanage in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23042900" comment="Audit invocations of /usr/sbin/semanage" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230430" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of setfiles in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23043000" comment="Audit invocations of /usr/sbin/setfiles" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230431" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of userhelper in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23043100" comment="Audit invocations of /usr/sbin/userhelper" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230432" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of setsebool in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23043200" comment="Audit invocations of /usr/sbin/setsebool" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230433" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of unix_chkpwd in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23043300" comment="Audit invocations of /usr/sbin/unix_chkpwd" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230434" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the ssh-keysign in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23043400" comment="Audit invocations of /usr/libexec/openssh/ssh-keysign" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230435" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the setfacl command in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23043500" comment="Audit invocations of /usr/bin/setfacl" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230436" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the pam_timestamp_check command in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23043600" comment="Audit invocations of /usr/sbin/pam_timestamp_check" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230437" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the newgrp command in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23043700" comment="Audit invocations of /usr/bin/newgrp" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230438" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the init_module and finit_module system calls in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23043800" comment="Audit 32-bit invocations of init_module syscall" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23043801" comment="Audit 64-bit invocations of init_module syscall" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23043802" comment="Audit 32-bit invocations of finit_module syscall" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23043803" comment="Audit 64-bit invocations of finit_module syscall" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230439" version="2" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the rename, unlink, rmdir, renameat, and unlinkat system calls in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:252997" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:252998" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:248774" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:253000" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:253001" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230444" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the gpasswd command in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044400" comment="Audit invocations of /usr/bin/gpasswd" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230446" version="2" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the delete_module command in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044600" comment="Audit 32-bit invocations of delete_module syscall" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044601" comment="Audit 64-bit invocations of delete_module syscall" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230447" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the crontab command in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044700" comment="Audit invocations of /usr/bin/crontab" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230448" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the chsh command in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044800" comment="Audit invocations of /usr/bin/chsh" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230449" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the truncate, ftruncate, creat, open, openat, and open_by_handle_at system calls in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044900" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044901" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044902" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044903" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044904" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044905" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044906" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044907" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044908" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044909" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044910" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044911" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044912" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044913" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044914" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044915" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044916" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044917" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044918" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044919" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044920" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044921" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044922" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23044923" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230455" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the chown, fchown, fchownat, and lchown system calls in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23045500" comment="Audit 32-bit invocations of chown syscall" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23045501" comment="Audit 64-bit invocations of chown syscall" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23045502" comment="Audit 32-bit invocations of lchown syscall" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23045503" comment="Audit 64-bit invocations of lchown syscall" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23045504" comment="Audit 32-bit invocations of fchownat syscall" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23045505" comment="Audit 64-bit invocations of fchownat syscall" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23045506" comment="Audit 32-bit invocations of fchown syscall" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23045507" comment="Audit 64-bit invocations of fchown syscall" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230456" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the chmod, fchmod, and fchmodat system calls in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23045600" comment="Audit 32-bit invocations of chmod syscall" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23045601" comment="Audit 64-bit invocations of chmod syscall" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23045602" comment="Audit 32-bit invocations of fchmod syscall" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23045603" comment="Audit 64-bit invocations of fchmod syscall" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23045604" comment="Audit 32-bit invocations of fchmodat syscall" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23045605" comment="Audit 64-bit invocations of fchmodat syscall" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230462" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the sudo command in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23046200" comment="Invocations of /usr/bin/sudo are audited" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230463" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the usermod command in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23046300" comment="Audit invocations of /usr/sbin/usermod" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230464" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the chacl command in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23046400" comment="Audit invocations of /usr/bin/chacl" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230465" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the kmod command in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23046500" comment="Audit invocations of /usr/bin/kmod" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230467" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful modifications to the lastlog file in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23046700" comment="Audit modifications to /var/log/lastlog" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230468" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must enable auditing of processes that start prior to the audit daemon.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23046800" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23046801" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230469" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must allocate an audit_backlog_limit of sufficient size to capture processes that start prior to the audit daemon.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23046900" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23046901" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230470" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must enable Linux audit logging for the USBGuard daemon.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23047000" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230471" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must allow only the Information System Security Manager (ISSM) (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23047100" comment="/etc/audit/auditd.conf has mode 0640 or less permissive" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23047101" comment=".rules files in /etc/audit/rules.d have mode 0640 or less permissive" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230472" version="1" class="compliance">
+          <metadata>
+            <title>The operating system audit tools must have a mode of 0755 or less permissive.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23047200" comment="audit tools have a mode of 0755 or less permissive." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230473" version="1" class="compliance">
+          <metadata>
+            <title>The operating system audit tools must be owned by root.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23047300" comment="audit tools are owned by root" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230474" version="1" class="compliance">
+          <metadata>
+            <title>The operating system audit tools must be group-owned by root.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23047400" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230475" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must use cryptographic mechanisms to protect the integrity of audit tools.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23047500" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23047501" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23047502" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23047503" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23047504" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23047505" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230477" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must have the packages required for offloading audit logs installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23047700" comment="The rsyslog package is installed." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230478" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must have the packages required for encrypting offloaded audit logs installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23047800" comment="package rsyslog-gnutls is installed" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230480" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must take appropriate action when the internal event queue is full.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23048000" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230483" version="2" class="compliance">
+          <metadata>
+            <title>The operating system must take action when allocated audit record storage volume reaches 75 percent of the repository maximum audit record storage capacity.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23048300" comment="/etc/audit/auditd.conf: space_left greater than or equal to 25%" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23048301" comment="/etc/audit/auditd.conf: space_left less than 100%" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230485" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must disable the chrony daemon from acting as a server.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23048500" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230486" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must disable network management of the chrony daemon.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23048600" comment="/etc/chrony.conf: cmdport option is set to 0" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230487" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must not have the telnet-server package installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23048700" comment="package telnet-server is not installed" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230489" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must not have the sendmail package installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23048900" comment="package sendmail is not installed" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230491" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must enable mitigations against processor-based vulnerabilities.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23049100" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23049101" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230497" version="2" class="compliance">
+          <metadata>
+            <title>The operating system must disable the transparent inter-process communication (TIPC) protocol.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23049700" comment="/etc/modprobe.d contains a file that contains 'install tipc /bin/false'" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23049701" comment="/etc/modprobe.d contains a file that contains 'blacklist tipc'" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230498" version="3" class="compliance">
+          <metadata>
+            <title>The operating system must disable mounting of cramfs.</title>
+            <description />
+          </metadata>
+          <criteria operator="OR">
+            <criteria>
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:23049800" comment="/etc/modprobe.d contains a file that contains 'install cramfs /bin/false'" />
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:23049801" comment="/etc/modprobe.d contains a file that contains 'blacklist cramfs'" />
+            </criteria>
+            <criteria>
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:23049802" comment="/etc/modprobe.conf contains 'install cramfs /bin/false'" />
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:23049803" comment="/etc/modprobe.conf contains 'blacklist cramfs'" />
+            </criteria>
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230502" version="2" class="compliance">
+          <metadata>
+            <title>The operating system file system automounter must be disabled unless required.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23050200" comment="The autofs.service is inactive if it exists." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230503" version="2" class="compliance">
+          <metadata>
+            <title>The operating system must be configured to disable USB mass storage.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23050300" comment="/etc/modprobe.d contains a file that contains 'install usb-storage /bin/false'" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23050301" comment="/etc/modprobe.d contains a file that contains 'blacklist usb-storage'" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230505" version="1" class="compliance">
+          <metadata>
+            <title>A firewall must be installed on the operating system.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23050500" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230507" version="1" class="compliance">
+          <metadata>
+            <title>The operating system Bluetooth must be disabled.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23050700" comment="/etc/modprobe.d contains a file that contains 'install bluetooth /bin/false'" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23050701" comment="/etc/modprobe.d contains a file that contains 'blacklist bluetooth'" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230508" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must mount /dev/shm with the nodev option.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23050800" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23050800" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230509" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must mount /dev/shm with the nosuid option.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23050900" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23050900" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230510" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must mount /dev/shm with the noexec option.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23051000" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23051001" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230511" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must mount /tmp with the nodev option.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23051100" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23051101" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23051102" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230512" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must mount /tmp with the nosuid option.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23051200" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23051201" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230514" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must mount /var/log with the nodev option.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23051400" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23051401" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23051402" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230515" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must mount /var/log with the nosuid option.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23051500" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23051501" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23051502" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230516" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must mount /var/log with the noexec option.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23051600" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23051600" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23051601" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230517" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must mount /var/log/audit with the nodev option.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23051700" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23051701" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23051702" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230518" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must mount /var/log/audit with the nosuid option.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23051800" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23051800" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230519" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must mount /var/log/audit with the noexec option.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23051900" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23051901" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230520" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must mount /var/tmp with the nodev option.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23052000" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23052001" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230521" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must mount /var/tmp with the nosuid option.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23052100" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23052101" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230522" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must mount /var/tmp with the noexec option.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23052200" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230525" version="1" class="compliance">
+          <metadata>
+            <title>A firewall must be able to protect against or limit the effects of Denial of Service (DoS) attacks by ensuring the operating system can implement rate-limiting measures on impacted network interfaces.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23052500" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230527" version="3" class="compliance">
+          <metadata>
+            <title>The operating system must force a frequent session key renegotiation for SSH connections to the server.</title>
+            <description />
+          </metadata>
+          <criteria operator="OR">
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23052700" comment="/etc/ssh/sshd_config:RekeyLimit maximum data and time are greater than zero." />
+            <criteria operator="AND">
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:25798801" comment="sshd_config includes sshd_config.d" />
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:23052701" comment="/etc/ssh/sshd_config.d:RekeyLimit maximum data and time are greater than zero." />
+            </criteria>
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230529" version="1" class="compliance">
+          <metadata>
+            <title>The x86 Ctrl-Alt-Delete key sequence must be disabled on the operating system.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23052900" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230532" version="5" class="compliance">
+          <metadata>
+            <title>The debug-shell systemd service must be disabled on the operating system.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23053200" comment="debug-shell.service is masked" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230533" version="1" class="compliance">
+          <metadata>
+            <title>The Trivial File Transfer Protocol (TFTP) server package must not be installed if not required for the operating system operational support.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23053300" comment="The tftp-server package is absent." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230534" version="1" class="compliance">
+          <metadata>
+            <title>The root account must be the only account having unrestricted access to the operating system system.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23053400" comment="Only the root account has a UID of zero." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230546" version="2" class="compliance">
+          <metadata>
+            <title>The operating system must restrict usage of ptrace to descendant processes.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054600" comment="kernel.yama.ptrace_scope setting in kernel is set to 1" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230550" version="2" class="compliance">
+          <metadata>
+            <title>The operating system must be configured to prevent unrestricted mail relaying.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23055001" comment="/etc/postfix/main.cf: smtpd_client_restrictions = permit_mynetworks,reject" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230553" version="1" class="compliance">
+          <metadata>
+            <title>The graphical display manager must not be installed on the operating system unless approved.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23055300" comment="The graphical display manager is absent." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230554" version="1" class="compliance">
+          <metadata>
+            <title>The operating system network interfaces must not be in promiscuous mode.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23055400" comment="no network interfaces are in promiscuous mode" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230555" version="2" class="compliance">
+          <metadata>
+            <title>The operating system remote X connections for interactive users must be disabled unless to fulfill documented and validated mission requirements.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23055500" comment="/etc/ssh/sshd_config or /etc/ssh/sshd_config.d/*:X11Forwarding == no" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230556" version="1" class="compliance">
+          <metadata>
+            <title>The operating system SSH daemon must prevent remote hosts from connecting to the proxy display.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23055600" comment="sshd_config X11UseLocalhost is set to 'yes'." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230560" version="1" class="compliance">
+          <metadata>
+            <title>The iprutils package must not be installed unless mission essential on the operating system.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23056000" comment="package iprutils is not installed" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:230561" version="1" class="compliance">
+          <metadata>
+            <title>The tuned package must not be installed unless mission essential on the operating system.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23056100" negate="true" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:234815" version="1" class="compliance">
+          <metadata>
+            <title>The operating system operating system must log SSH connection attempts and failures to the server.</title>
+            <description />
+          </metadata>
+          <criteria comment="SSH LogLevel == VERBOSE">
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23481500" comment="/etc/ssh/sshd_config:LogLevel == VERBOSE" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:234990" version="1" class="compliance">
+          <metadata>
+            <title>The systemd Ctrl-Alt-Delete burst key sequence in the operating system must be disabled.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23499000" comment="/etc/systemd/system.conf:CtrlAltDelBurstAction is set to none." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:237642" version="2" class="compliance">
+          <metadata>
+            <title>The operating system must use the invoking user's password for privilege escalation when using "sudo".</title>
+            <description />
+          </metadata>
+          <criteria operator="OR">
+            <criteria operator="AND" comment="All config in sudoers">
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:23764200" comment="Defaults !targetpw in /etc/sudoers" />
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:23764203" comment="Defaults !rootpw in /etc/sudoers" />
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:23764205" comment="Defaults !runaspw in /etc/sudoers" />
+            </criteria>
+            <criteria operator="AND" comment="All config in sudoers.d">
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:23764201" comment="/etc/sudoers.d included in /etc/sudoers" />
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:23764202" comment="Defaults !targetpw in /etc/sudoers.d" />
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:23764204" comment="Defaults !rootpw in /etc/sudoers.d" />
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:23764206" comment="Defaults !runaspw in /etc/sudoers.d" />
+            </criteria>
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:237643" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must require re-authentication when using the "sudo" command.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23764300" comment="Defaults timestamp_timeout is to a positive number in /etc/sudoers and /etc/sudoers.d." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:238278" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must generate audit records for successful/unsuccessful uses of the sudoedit command.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23827800" comment="Audit invocations of /usr/bin/sudoedit" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:238285" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must generate audit records for the use and modification of the tallylog file.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23828500" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:244519" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must display a banner before granting local or remote access to the system via a graphical user logon.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:24451900" comment="/etc/dconf/db/local.d/* has banner-message-enable set to true" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:244523" version="1" class="compliance">
+          <metadata>
+            <title>The operating system operating systems must require authentication upon booting into emergency mode.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:24452300" comment="emergency.service config correct" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:244526" version="1" class="compliance">
+          <metadata>
+            <title>The operating system SSH daemon must be configured to use system-wide crypto policies.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.rhel9os:def:257988" comment="The Content Checks are the Same for Rule 257988" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:244527" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must have the packages required to use the hardware random number generator entropy gatherer service.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:24452700" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:244528" version="1" class="compliance">
+          <metadata>
+            <title>The operating system SSH daemon must not allow GSSAPI authentication, except to fulfill documented and validated mission requirements.</title>
+            <description />
+          </metadata>
+          <criteria operator="OR">
+            <criteria>
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:25798801" comment="sshd_config includes sshd_config.d" />
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:24452800" comment="/etc/ssh/sshd_config.d: GSSAPIAuthentication is set to no" />
+            </criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:24452801" comment="/etc/ssh/sshd_config: GSSAPIAuthentication is set to no" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:244529" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must use a separate file system for /var/tmp.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:24452900" comment="/var/tmp is mounted" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:244530" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must prevent files with the setuid and setgid bit set from being executed on the /boot/efi directory.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:24453000" comment="/boot/efi is mounted an configured with the nosuid option." />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:24453001" comment="If /boot/efi is configured in /etc/fstab it is with the nosuid option." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:244538" version="2" class="compliance">
+          <metadata>
+            <title>The operating system must prevent a user from overriding the session idle-delay setting for the graphical user interface.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25801700" comment="check that /etc/dconf/profile/user:system-db is at minimum set to local" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:24453801" comment="Check that the automount setting is locked from nonprivileged user modification" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:244539" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must prevent a user from overriding the screensaver lock-enabled setting for the graphical user interface.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25801700" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:24453900" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:244540" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must not allow blank or null passwords in the system-auth file.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:24454000" comment="There are no instances of nullok in /etc/pam.d/system-auth." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:244541" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must not allow blank or null passwords in the password-auth file.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:24454100" comment="There are no instances of nullok in /etc/pam.d/password-auth." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:244543" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must notify the System Administrator (SA) and Information System Security Officer (ISSO) (at a minimum) when allocated audit record storage volume 75 percent utilization.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:24454300" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:244545" version="1" class="compliance">
+          <metadata>
+            <title>The operating system fapolicy module must be enabled.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:24454500" comment="fapolicyd is active" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:244549" version="1" class="compliance">
+          <metadata>
+            <title>All the operating system networked systems must have openssh-server package installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:24454900" comment="SSH is installed" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:248577" version="2" class="compliance">
+          <metadata>
+            <title>The operating system must enable kernel parameters to enforce discretionary access control on symlinks.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:24857700" comment="fs.protected_symlinks setting in kernel is 1" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:248578" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must enable kernel parameters to enforce discretionary access control on hardlinks.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:24857800" comment="fs.protected_hardlinks setting in kernel is 1" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:248579" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must restrict access to the kernel message buffer.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:24857900" comment="kernel.dmesg_restrict setting in kernel is 1" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:248580" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must prevent kernel profiling by unprivileged users.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:24858000" comment="kernel.perf_event_paranoid setting in kernel is 2" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:248774" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the "rmdir" command in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:24877400" comment="Audit 32-bit invocations of rmdir" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:24877401" comment="Audit 64-bit invocations of rmdir" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:248882" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must not forward IPv6 source-routed packets by default.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:24888202" comment="net.ipv6.conf.default.accept_source_route setting in kernel is 0" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:251706" version="1" class="compliance">
+          <metadata>
+            <title>The operating system operating system must not have accounts configured with blank or null passwords.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25170600" comment="There are no accounts in /etc/shadow that have blank password fields." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:251713" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must ensure the password complexity module is enabled in the system-auth file.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25171300" comment="system-auth pam_pwquality" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:251714" version="1" class="compliance">
+          <metadata>
+            <title>Systems below version 8.4 must ensure the password complexity module in the system-auth file is configured for three retries or less.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25171400" comment="/etc/pam.d/system-auth:retry not greater than 3 and not 0" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:251718" version="1" class="compliance">
+          <metadata>
+            <title>The graphical display manager must not be the default target on the operating system unless approved.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25171800" comment="default.target is symlinked to multi-user.target" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:252997" version="5" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the "rename" command in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25299700" comment="Audit 32-bit invocations of rename" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25299701" comment="Audit 64-bit invocations of rename" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:252998" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the "renameat" command in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25299800" comment="Audit 32-bit invocations of renameat" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25299801" comment="Audit 64-bit invocations of renameat" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:253000" version="5" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the "unlink" command in the operating system must generate an audit record</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25300000" comment="Audit 32-bit invocations of unlink" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25300001" comment="Audit 64-bit invocations of unlink" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:253001" version="2" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the "unlinkat" command in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25300100" comment="Audit 32-bit invocations of unlinkat" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25300101" comment="Audit 64-bit invocations of unlinkat" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:253034" version="2" class="compliance">
+          <metadata>
+            <title>The operating system audit system must be configured to audit any usage of the "fsetxattr" system call.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303400" comment="Audit 32-bit invocations of fsetxattr syscall (auid&gt;=1000)" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303401" comment="Audit 64-bit invocations of fsetxattr syscall (auid&gt;=1000)" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303402" comment="Audit 32-bit invocations of fsetxattr syscall (auid=0)" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303403" comment="Audit 64-bit invocations of fsetxattr syscall (auid=0)" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:253035" version="1" class="compliance">
+          <metadata>
+            <title>The operating system audit system must be configured to audit any usage of the "lsetxattr" system call.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303500" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303501" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303502" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303503" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:253036" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the fremovexattr system call in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303600" comment="Audit 32-bit invocations of fremovexattr syscall" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303601" comment="Audit 64-bit invocations of fremovexattr syscall" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303602" comment="Audit 32-bit invocations of fremovexattr syscall by root" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303603" comment="Audit 64-bit invocations of fremovexattr syscall by root" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:253037" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the "lremovexattr" system call in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303700" comment="Audit 32-bit invocations of lremovexattr syscall" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303701" comment="Audit 64-bit invocations of lremovexattr syscall" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303702" comment="Audit 32-bit invocations of lremovexattr syscall by root" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303703" comment="Audit 64-bit invocations of lremovexattr syscall by root" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:253038" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the "removexattr" system call in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303800" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303801" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303802" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25303803" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257258" version="1" class="compliance">
+          <metadata>
+            <title>The system must terminate idle user sessions.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25725800" comment="The system terminates idle user sessions." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257782" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must enable the hardware random number generator entropy gatherer service.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23028501" comment="rngd.service is active" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257783" version="1" class="compliance">
+          <metadata>
+            <title>The operating system systemd-journald service must be enabled.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25778300" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257787" version="3" class="compliance">
+          <metadata>
+            <title>The operating system must require a boot loader superuser password.</title>
+            <description />
+          </metadata>
+          <criteria comment="Verify a BIOS GRUB superuser password is configured.">
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25778700" comment="/etc/grub2.cfg:superusers exists and has a name." />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25778701" comment="/boot/grub2/user.cfg:GRUB2_PASSWORD exists and has a PBKDF2/SHA512 password assigned." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257788" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must disable the ability of systemd to spawn an interactive boot process.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25778800" negate="true" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25778801" negate="true" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257790" version="2" class="compliance">
+          <metadata>
+            <title>The operating system /boot/grub2/grub.cfg file must be group-owned by root.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25779000" comment="/boot/grub2/grub.cfg file is group-owned by root" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257791" version="1" class="compliance">
+          <metadata>
+            <title>The operating system /boot/grub2/grub.cfg file must be owned by root.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25779100" comment="/boot/grub2/grub.cfg is owned by root." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257800" version="2" class="compliance">
+          <metadata>
+            <title>The operating system must restrict exposed kernel pointer addresses access.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25780000" comment="kernel.kptr_restrict is set to 1" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257804" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must disable the asynchronous transfer mode (ATM) protocol.</title>
+            <description />
+          </metadata>
+          <criteria operator="OR">
+            <criteria>
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:23049400" comment="/etc/modprobe.d contains a file that contains 'install atm /bin/false'" />
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:23049401" comment="/etc/modprobe.d contains a file that contains 'blacklist atm'" />
+            </criteria>
+            <criteria>
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:25780400" comment="/etc/modprobe.conf contains a file that contains 'install atm /bin/false'" />
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:25780401" comment="/etc/modprobe.conf contains a file that contains 'blacklist atm'" />
+            </criteria>
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257805" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must disable the controller area network (CAN) protocol.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23049501" comment="/etc/modprobe.d contains a file that contains 'blacklist can'" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257806" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must disable IEEE 1394 (FireWire) Support.</title>
+            <description />
+          </metadata>
+          <criteria operator="OR">
+            <criteria>
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:23049900" comment="/etc/modprobe.d contains a file that contains 'install firewire-core /bin/false'" />
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:23049901" comment="/etc/modprobe.d contains a file that contains 'blacklist firewire-core'" />
+            </criteria>
+            <criteria>
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:25780600" comment="/etc/modprobe.conf contains 'install firewire-core /bin/false'" />
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:25780601" comment="/etc/modprobe.conf contains 'blacklist firewire-core'" />
+            </criteria>
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257807" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must disable the stream control transmission protocol (SCTP).</title>
+            <description />
+          </metadata>
+          <criteria operator="OR">
+            <criteria>
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:23049600" comment="/etc/modprobe.d contains a file that contains 'install sctp /bin/false'" />
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:23049601" comment="/etc/modprobe.d contains a file that contains 'blacklist sctp'" />
+            </criteria>
+            <criteria>
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:25780700" comment="/etc/modprobe.conf contains 'install sctp /bin/false'" />
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:25780701" comment="/etc/modprobe.conf contains 'blacklist sctp'" />
+            </criteria>
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257820" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must check the GPG signature of software packages originating from external software repositories before installation.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25782000" comment="/etc/dnf/dnf.conf gpgcheck=1" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257826" version="2" class="compliance">
+          <metadata>
+            <title>A File Transfer Protocol (FTP) server package must not be installed unless mission essential on the operating system.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25782600" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257828" version="2" class="compliance">
+          <metadata>
+            <title>The operating system must not have the nfs-utils package installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25782800" negate="true" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257832" version="1" class="compliance">
+          <metadata>
+            <title>The gssproxy package must not be installed unless mission essential on the operating system.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23055900" comment="gssproxy package is not installed" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257836" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must not have the quagga package installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25783600" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257839" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must have the gnutls-utils package installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25783900" comment="gnutls-utils package is installed" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257840" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must have the nss-tools package installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25784000" comment="package nss-tools is installed" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257842" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must have the s-nail package installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25784200" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257846" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must use a separate file system for /var/log.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23029300" comment="There is a separate file system for /var/log." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257850" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must prevent device files from being interpreted on file systems that contain user home directories.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25785000" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257852" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must prevent code from being executed on file systems that contain user home directories.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25785200" comment="/home has noexec option" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257860" version="3" class="compliance">
+          <metadata>
+            <title>The operating system must mount /boot with the nodev option.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25786000" comment="/boot has nodev option" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257867" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must mount /tmp with the noexec option.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23051300" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257869" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must mount /var with the nodev option.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25786900" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25786900" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257888" version="1" class="compliance">
+          <metadata>
+            <title>The operating system cron configuration directories must have a mode of 0700 or less permissive.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25788800" comment="cron configuration directories have a mode of 0755 or less permissive." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257890" version="1" class="compliance">
+          <metadata>
+            <title>All the operating system local interactive user home directories must have mode 0750 or less permissive.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25789000" comment="All local interactive user home directories are 0750 or less" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257891" version="1" class="compliance">
+          <metadata>
+            <title>The operating system /etc/group file must have mode 0644 or less permissive to prevent unauthorized access.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25789100" comment="The /etc/group file has mode 0644 or less permissive" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257892" version="1" class="compliance">
+          <metadata>
+            <title>The operating system /etc/group- file must have mode 0644 or less permissive to prevent unauthorized access.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25789200" comment="The /etc/group- file has mode 0644 or less permissive" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257893" version="1" class="compliance">
+          <metadata>
+            <title>The operating system /etc/gshadow file must have mode 0000 or less permissive to prevent unauthorized access.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25789300" comment="The /etc/gshadow file has mode 0000 or less permissive" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257894" version="1" class="compliance">
+          <metadata>
+            <title>The operating system /etc/gshadow- file must have mode 0000 or less permissive to prevent unauthorized access.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25789400" comment="The /etc/gshadow- file has mode 0000 or less permissive" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257895" version="1" class="compliance">
+          <metadata>
+            <title>The operating system /etc/passwd file must have mode 0644 or less permissive to prevent unauthorized access.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25789500" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257896" version="1" class="compliance">
+          <metadata>
+            <title>The operating system /etc/passwd- file must have mode 0644 or less permissive to prevent unauthorized access.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25789600" comment="The /etc/passwd- file has mode 0644 or less permissive" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257897" version="1" class="compliance">
+          <metadata>
+            <title>The operating system /etc/shadow- file must have mode 0000 or less permissive to prevent unauthorized access.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25789700" comment="The /etc/shadow- file has mode 0000 or less permissive" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257898" version="1" class="compliance">
+          <metadata>
+            <title>The operating system /etc/group file must be owned by root.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25789800" comment="/etc/group file is owned by root" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257899" version="1" class="compliance">
+          <metadata>
+            <title>The operating system /etc/group file must be group-owned by root.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25789900" comment="/etc/group file is owned by root" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257900" version="1" class="compliance">
+          <metadata>
+            <title>The operating system /etc/group- file must be owned by root.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25790000" comment="/etc/group- file is owned by root" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257901" version="1" class="compliance">
+          <metadata>
+            <title>The operating system /etc/group- file must be group-owned by root.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25790100" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257902" version="1" class="compliance">
+          <metadata>
+            <title>The operating system /etc/gshadow file must be owned by root.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25790200" comment="/etc/group file is owned by root" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257903" version="1" class="compliance">
+          <metadata>
+            <title>The operating system /etc/gshadow file must be group-owned by root.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25790300" comment="/etc/gshadow file is owned by root" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257904" version="1" class="compliance">
+          <metadata>
+            <title>The operating system /etc/gshadow- file must be owned by root.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25790400" comment="/etc/gshadow- file is owned by root" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257905" version="1" class="compliance">
+          <metadata>
+            <title>The operating system /etc/gshadow- file must be group-owned by root.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25790500" comment="/etc/gshadow- file is owned by root" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257906" version="1" class="compliance">
+          <metadata>
+            <title>The operating system /etc/passwd file must be owned by root.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25790600" comment="/etc/passwd file is owned by root" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257907" version="1" class="compliance">
+          <metadata>
+            <title>The operating system /etc/passwd file must be group-owned by root.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25790700" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257908" version="1" class="compliance">
+          <metadata>
+            <title>The operating system /etc/passwd- file must be owned by root.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25790800" comment="/etc/passwd- file is owned by root" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257909" version="2" class="compliance">
+          <metadata>
+            <title>The operating system /etc/passwd- file must be group-owned by root.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25790900" comment="/etc/passwd- file is group-owned by root" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257910" version="1" class="compliance">
+          <metadata>
+            <title>The operating system /etc/shadow file must be owned by root.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25791000" comment="/etc/shadow file is owned by root." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257911" version="1" class="compliance">
+          <metadata>
+            <title>The operating system /etc/shadow file must be group-owned by root.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25791100" comment="/etc/shadow file is owned by root" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257912" version="1" class="compliance">
+          <metadata>
+            <title>The operating system /etc/shadow- file must be owned by root.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25791200" comment="/etc/shadow- file is owned by root." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257913" version="1" class="compliance">
+          <metadata>
+            <title>The operating system /etc/shadow- file must be group-owned by root.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25791300" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257926" version="1" class="compliance">
+          <metadata>
+            <title>The operating system cron configuration files directory must be owned by root.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25792600" comment="/etc/cron* files owned by root" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25792601" comment="/etc/cron* directories owned by root" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257927" version="1" class="compliance">
+          <metadata>
+            <title>The operating system cron configuration files directory must be group-owned by root.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25792700" comment="cron configuration files are group-owned by root" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257933" version="2" class="compliance">
+          <metadata>
+            <title>The operating system /etc/crontab file must have mode 0600.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25793300" comment="The /etc/crontab file has mode 0600" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257934" version="2" class="compliance">
+          <metadata>
+            <title>The operating system /etc/shadow file must have mode 0000 to prevent unauthorized access.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25793400" comment="The /etc/shadow file has mode 0000 or less permissive" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257936" version="1" class="compliance">
+          <metadata>
+            <title>A firewall must be active on the operating system.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25793600" comment="The firewall daemon is active" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257943" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must have the chrony package installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25794300" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257944" version="1" class="compliance">
+          <metadata>
+            <title>The operating system chronyd service must be enabled.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25794400" comment="chronyd service is active" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257949" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must configure a DNS processing mode set be Network Manager.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25794900" comment="DNS setting exists in NetworkManager.conf and is default or none" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25794901" comment="DNS setting exists in NetworkManager.conf main section" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257954" version="1" class="compliance">
+          <metadata>
+            <title>The operating system libreswan package must be installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25795400" comment="libreswan package is installed" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257979" version="2" class="compliance">
+          <metadata>
+            <title>All the operating system networked systems must have and implement SSH to protect the confidentiality and integrity of transmitted and received information, as well as information during preparation for transmission.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25797900" comment="The SSH daemon is active" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257980" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must have the openssh-clients package installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25798000" comment="openssh-clients package is installed" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257981" version="2" class="compliance">
+          <metadata>
+            <title>The operating system must display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system via a ssh logon.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25798100" comment="/etc/ssh/sshd_config:banner == /filepath" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25798101" comment="/etc/ssh/sshd_config:banner != none" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257983" version="1" class="compliance">
+          <metadata>
+            <title>The operating system SSHD must accept public key authentication.</title>
+            <description />
+          </metadata>
+          <criteria operator="OR">
+            <criteria>
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:25798801" comment="sshd_config includes sshd_config.d" />
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:25798300" comment="/etc/ssh/sshd_config.d: PubkeyAuthentication is set to yes" />
+            </criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25798301" comment="/etc/ssh/sshd_config: PubkeyAuthentication is set to yes" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257984" version="4" class="compliance">
+          <metadata>
+            <title>The operating system SSHD must not allow blank passwords.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25798400" comment="/etc/ssh/sshd_config or /etc/ssh/sshd_config.d/*:PermitEmptyPasswords == no" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257986" version="4" class="compliance">
+          <metadata>
+            <title>The operating system must enable the Pluggable Authentication Module (PAM) interface for SSHD.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25798600" comment="/etc/ssh/sshd_config or /etc/ssh/sshd_config.d/*:UsePAM == yes" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257988" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must implement DOD-approved encryption ciphers to protect the confidentiality of SSH client connections.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criteria operator="OR">
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:25798800" comment="sshd_config includes crypto-polices" />
+              <criteria operator="AND">
+                <criterion test_ref="oval:mil.disa.stig.ind:tst:25798801" comment="sshd_config includes sshd_config.d" />
+                <criterion test_ref="oval:mil.disa.stig.ind:tst:25798802" comment="sshd_config.d includes crypto-policies" />
+              </criteria>
+            </criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25798800" comment="50-redhat.conf exists" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257989" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must implement DOD-approved encryption ciphers to protect the confidentiality of SSH server connections.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25798900" comment="openssh.config ciphers correct" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257991" version="1" class="compliance">
+          <metadata>
+            <title>The operating system SSH server must be configured to use only Message Authentication Codes (MACs) employing FIPS 140-3 validated cryptographic hash algorithms.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25799100" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257992" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must not allow a noncertificate trusted host SSH logon to the system.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25799200" comment="HostbasedAuthentication is set to no in /etc/ssh/sshd_config and /etc/ssh/sshd_config.d/*.conf" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257996" version="1" class="compliance">
+          <metadata>
+            <title>The operating system SSH daemon must be configured with a timeout interval.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25799600" comment="/etc/ssh/sshd_config or /etc/ssh/sshd_config.d/.* :ClientAliveInterval == 600" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257997" version="3" class="compliance">
+          <metadata>
+            <title>The operating system SSH server configuration file must be group-owned by root.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25799700" comment="The /etc/ssh/sshd_config file is group-owned by root." />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25799701" comment="The /etc/ssh/sshd_config.d directory and sub-directories are group-owned by root." />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25799702" comment="The /etc/ssh/sshd_config.d files are group-owned by root." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257998" version="3" class="compliance">
+          <metadata>
+            <title>The operating system SSH server configuration file must be owned by root.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25799800" comment="The /etc/ssh/sshd_config file is owned by root." />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25799801" comment="The /etc/ssh/sshd_config.d directory and sub-directories are owned by root." />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25799802" comment="The /etc/ssh/sshd_config.d files are owned by root." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257999" version="4" class="compliance">
+          <metadata>
+            <title>The operating system SSH server configuration file must have mode 0600 or less permissive.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25799900" comment="The /etc/ssh/sshd_config file has mode 0600 or less permissive" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25799901" comment="The /etc/ssh/sshd_config.d directory and sub-directories has mode 0600 or less permissive" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25799902" comment="The /etc/ssh/sshd_config.d files have mode 0600 or less permissive" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258002" version="2" class="compliance">
+          <metadata>
+            <title>The operating system must be configured so that the SSH daemon does not allow compression or only allows compression after successful authentication.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25800200" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258004" version="5" class="compliance">
+          <metadata>
+            <title>The operating system SSH daemon must not allow Kerberos authentication, except to fulfill documented and validated mission requirements.</title>
+            <description />
+          </metadata>
+          <criteria operator="OR">
+            <criteria>
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:25800401" comment="/etc/ssh/sshd_config:KerberosAuthentication == no" />
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:25798801" negate="true" comment="/etc/ssh/sshd_config does not include sshd_config.d" />
+            </criteria>
+            <criteria>
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:25798801" comment="/etc/ssh/sshd_config includes sshd_config.d" />
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:25800400" comment="/etc/ssh/sshd_config + sshd_config.d:KerberosAuthentication == no" />
+            </criteria>
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258005" version="1" class="compliance">
+          <metadata>
+            <title>The operating system SSH daemon must not allow rhosts authentication.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25800500" comment="/etc/ssh/sshd_config and /etc/ssh/sshd_config.d/*:IgnoreRhosts == yes" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258006" version="2" class="compliance">
+          <metadata>
+            <title>The operating system SSH daemon must not allow authentication using known host's authentication.</title>
+            <description />
+          </metadata>
+          <criteria operator="OR">
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25800600" comment="/etc/ssh/sshd_config:IgnoreUserKnownHosts == yes" />
+            <criteria operator="AND">
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:25798801" comment="/etc/ssh/sshd_config includes sshd_config.d" />
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:25800601" comment="/etc/ssh/sshd_config.d:IgnoreUserKnownHosts == yes" />
+            </criteria>
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258009" version="2" class="compliance">
+          <metadata>
+            <title>The operating system must display the date and time of the last successful account logon upon an SSH logon.</title>
+            <description />
+          </metadata>
+          <criteria operator="OR">
+            <criteria>
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:25798801" comment="sshd_config includes sshd_config.d" />
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:25800900" comment="/etc/ssh/sshd_config.d: PrintLastLog is set to yes" />
+            </criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23038200" comment="/etc/ssh/sshd_config: PrintLastLog is set to yes" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258013" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must prevent a user from overriding the banner-message-enable setting for the graphical user interface.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25802600" comment="dconf user database(s) exist" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25801300" comment="/org/gnome/login-screen/banner-message-enable in dconf user database locks directories exists" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258014" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must disable the graphical user interface automount function unless required.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25801400" comment="The operating system disables the GUI automount feature." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258015" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must prevent a user from overriding the disabling of the graphical user interface automount function.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25801700" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25801500" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258017" version="2" class="compliance">
+          <metadata>
+            <title>The operating system must prevent a user from overriding the disabling of the graphical user interface autorun function.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25801700" comment="check that /etc/dconf/profile/user:system-db is at minimum set to local" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25801701" comment="Check that the automount setting is locked from nonprivileged user modification" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258020" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must prevent a user from overriding the disabling of the graphical user smart card removal action.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25802600" comment="dconf user database(s) exist" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25802000" comment="/org/gnome/settings-daemon/peripherals/smartcard/removal-action in dconf user database locks directories exists" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258026" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must prevent a user from overriding the session lock-delay setting for the graphical user interface.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25802600" comment="dconf user database(s) exist" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25802601" comment="/org/gnome/desktop/screensaver/lock-delay in dconf user database locks directories exists" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258029" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must disable the ability of a user to restart the system from the login screen.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25802900" comment="dconf disable-restart-buttons true" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258030" version="2" class="compliance">
+          <metadata>
+            <title>The operating system must prevent a user from overriding the disable-restart-buttons setting for the graphical user interface.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25801700" comment="check that /etc/dconf/profile/user:system-db is at minimum set to local" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25803000" comment="Check that the disable-restart-button setting is locked from nonprivileged user modification" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258032" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must prevent a user from overriding the Ctrl-Alt-Del sequence settings for the graphical user interface.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25803200" comment="/org/gnome/settings-daemon/plugins/media-keys/logout is locked in /etc/dconf/db/local.d/locks/*" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258035" version="2" class="compliance">
+          <metadata>
+            <title>The operating system must have the USBGuard installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25803500" comment="usbguard package is installed" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258036" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must have the USBGuard package enabled.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25803600" comment="usbguard is active" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258041" version="1" class="compliance">
+          <metadata>
+            <title>The operating system user account passwords for new users or password changes must have a 60-day maximum password lifetime restriction in /etc/login.defs.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25804100" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258045" version="1" class="compliance">
+          <metadata>
+            <title>The operating system duplicate User IDs (UIDs) must not exist for interactive users.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25804500" comment="GIDs are unique" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258046" version="1" class="compliance">
+          <metadata>
+            <title>The operating system system accounts must not have an interactive login shell.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25804600" comment="The system accounts other than root have the login shell configured to /sbin/nologin." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258048" version="1" class="compliance">
+          <metadata>
+            <title>All the operating system interactive users must have a primary group that exists.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25804800" comment="All local users have valid GID" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258051" version="1" class="compliance">
+          <metadata>
+            <title>All the operating system local interactive users must have a home directory assigned in the /etc/passwd file.</title>
+            <description />
+          </metadata>
+          <criteria operator="AND">
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25805100" comment="Check for local non-system users in /etc/passwd without a home directory defined" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25805101" comment="Check /etc/passwd if root has a home directory defined" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258061" version="1" class="compliance">
+          <metadata>
+            <title>The operating system groups must have unique Group ID (GID).</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25806100" comment="GIDs are unique" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258072" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must define default permissions for the bash shell.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25807200" comment="UMASK is set to 077 in /etc/bashrc" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258073" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must define default permissions for the c shell.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23038501" comment="UMASK is set to only 077 in /etc/csh.cshrc" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258075" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must define default permissions for the system default profile.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25807500" comment="/etc/profile:umask == 077" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258080" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must configure SELinux context type to allow the use of a nondefault faillock tally directory.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25808000" comment="configured faillock directory has correct selinux context" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25808000" comment="/etc/security/faillock.conf dir option exists" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258082" version="1" class="compliance">
+          <metadata>
+            <title>The operating system policycoreutils-python-utils package must be installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25808200" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258083" version="2" class="compliance">
+          <metadata>
+            <title>The operating system must have the sudo package installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25808300" comment="sudo package is installed" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258086" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must require users to reauthenticate for privilege escalation.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25808600" comment="'!authenticate' does not exist in /etc/sudoers" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25808601" comment="'!authenticate' does not exist in /etc/sudoers.d" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258087" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must restrict privilege elevation to authorized personnel.</title>
+            <description />
+          </metadata>
+          <criteria operator="AND">
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25808700" comment="ALL is not configured in /etc/sudoers" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25808701" comment="ALL is not configured in /etc/sudoers.d" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258088" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must restrict the use of the "su" command.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25808800" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258089" version="2" class="compliance">
+          <metadata>
+            <title>The operating system fapolicy module must be installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25808900" comment="fapolicyd package is installed" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258099" version="2" class="compliance">
+          <metadata>
+            <title>The operating system password-auth must be configured to use a sufficient number of hashing rounds.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25809900" comment="The pam_unix module is included in password-auth and configured for 100000 or more rounds." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258100" version="2" class="compliance">
+          <metadata>
+            <title>The operating system system-auth must be configured to use a sufficient number of hashing rounds.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25810000" comment="The pam_unix module is included in system-auth and configured for 100000 or more rounds." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258101" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must enforce password complexity rules for the root account.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25810100" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258118" version="2" class="compliance">
+          <metadata>
+            <title>The operating system operating system must not be configured to bypass password requirements for privilege escalation.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25811800" comment="pam_succeed_if is not present in /etc/pam.d/sudo" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258121" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must use the CAC smart card driver.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25812100" comment="/etc/opensc.conf: card_drivers = cac" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258122" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must enable certificate based smart card authentication.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25812200" comment="sssd.conf: pam_cert_auth = True" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258123" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must implement certificate status checking for multifactor authentication.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25812300" comment="sssd config: certificate_verification: ocsp_dgst=sha512" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258124" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must have the pcsc-lite package installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25812400" comment="package pcsc-lite is installed" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258125" version="1" class="compliance">
+          <metadata>
+            <title>The pcscd service on the operating system must be active.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25812500" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258126" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must have the opensc package installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25812600" comment="opensc package is installed" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258129" version="1" class="compliance">
+          <metadata>
+            <title>The operating system operating systems must require authentication upon booting into rescue mode.</title>
+            <description />
+          </metadata>
+          <criteria operator="OR">
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25812900" comment="/usr/lib/systemd/system/rescue.service:ExecStart is set to -/usr/lib/systemd/systemd-sulogin-shell rescue" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25812901" comment="/etc/systemd/system/rescue.service.d/*.conf:ExecStart is set to -/usr/lib/systemd/systemd-sulogin-shell rescue" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258134" version="2" class="compliance">
+          <metadata>
+            <title>The operating system operating system must use a file integrity tool to verify correct operation of all security functions.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:28513400" comment="aide package is installed" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:28513401" comment="/var/lib/aide/aide.db.gz exists and is not empty" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258142" version="1" class="compliance">
+          <metadata>
+            <title>The rsyslog service must be running in the operating system.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25814200" comment="rsyslog is active" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258143" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must be configured so that the rsyslog daemon does not accept log messages from other servers unless the server is being used for log aggregation.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25814300" comment="no remote log acceptance" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258144" version="1" class="compliance">
+          <metadata>
+            <title>All the operating system remote access methods must be monitored.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25814400" comment="rsyslog: auth.* is configured to be logged" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25814401" comment="rsyslog: authpriv.* is configured to be logged" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25814402" comment="rsyslog: daemon.* is configured to be logged" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258145" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must be configured to offload audit records onto a different system from the system being audited via syslog.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25814500" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258149" version="2" class="compliance">
+          <metadata>
+            <title>The operating system audit records must be off-loaded onto a different system or storage media from the system being audited.</title>
+            <description />
+          </metadata>
+          <criteria operator="OR">
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25814900" comment="remote TCP logging (basic syntax)" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25814901" comment="remote TCP logging (advanced syntax)" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258152" version="1" class="compliance">
+          <metadata>
+            <title>The operating system audit service must be enabled.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25815200" comment="auditd is active" />
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25815201" comment="auditd is running" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258155" version="3" class="compliance">
+          <metadata>
+            <title>The operating system must allocate audit record storage capacity to store at least one week of audit records, when audit records are not immediately sent to a central audit record storage facility.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23029400" comment="Audit file system exists" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25815500" comment="Audit file system total space &gt;= 10GiB" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258158" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must take action when allocated audit record storage volume reaches 95 percent of the audit record storage capacity.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25815800" comment="/etc/audit/auditd.conf: admin_space_left = 5%" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258159" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must take action when allocated audit record storage volume reaches 95 percent of the repository maximum audit record storage capacity.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25815900" comment="/etc/audit/auditd.conf: admin_space_left_action = SINGLE" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258160" version="1" class="compliance">
+          <metadata>
+            <title>The operating system audit system must take appropriate action when the audit files have reached maximum size.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25816000" comment="/etc/audit/auditd.conf: max_log_file_action is ROTATE or SINGLE" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258168" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must periodically flush audit records to disk to prevent the loss of audit records.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25816800" comment="/etc/audit/auditd.conf: freq = 1-100" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258170" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must write audit records to disk.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25817000" comment="/etc/audit/auditd.conf: write_logs = yes" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258172" version="2" class="compliance">
+          <metadata>
+            <title>The operating system /etc/audit/auditd.conf file must have 0640 or less permissive to prevent unauthorized access.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25817200" comment="auditd.conf 0640 or less" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258175" version="1" class="compliance">
+          <metadata>
+            <title>The operating system audispd-plugins package must be installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25817500" comment="audispd-plugins package is installed" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258211" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the init command in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25821100" comment="Audit invocations of /usr/sbin/init" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258212" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the poweroff command in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25821200" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258213" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the reboot command in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25821300" comment="Audit invocations of /usr/sbin/reboot" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258214" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the shutdown command in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25821400" comment="Audit invocations of /usr/sbin/shutdown" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258215" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the umount system call in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25821500" comment="Audit 32-bit invocations of umount syscall" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258216" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the umount2 system call in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25821600" comment="Audit 32-bit invocations of umount2 syscall" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25821601" comment="Audit 64-bit invocations of umount2 syscall" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258224" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /var/log/faillock.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25822400" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258227" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must take appropriate action when a critical audit processing failure occurs.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25822700" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258232" version="1" class="compliance">
+          <metadata>
+            <title>The operating system IP tunnels must use FIPS 140-2/140-3 approved cryptographic algorithms.</title>
+            <description />
+          </metadata>
+          <criteria operator="OR">
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25823200" comment="ipsec.conf includes crypto-policy" />
+            <criteria>
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:25823201" comment="ipsec.conf includes /etc/ipsec.d/*.conf" />
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:25823202" comment="/etc/ipsec.d/*.conf includes crypto-policy" />
+            </criteria>
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258234" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must have the crypto-policies package installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25823400" comment="crypto-policies package is installed" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258242" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must implement DOD-approved encryption in the bind package.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25824201" comment="named.conf includes crypto-policy" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:260487" version="1" class="compliance">
+          <metadata>
+            <title>The operating system library directories must have mode 0755 or less permissive.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:26048700" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:26048701" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:26048702" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:26048703" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:26048704" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:270177" version="1" class="compliance">
+          <metadata>
+            <title>The operating system SSH client must be configured to use only DOD-approved encryption ciphers employing FIPS 140-3 validated cryptographic hash algorithms to protect the confidentiality of SSH client connections.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:27017700" comment="openssh.config ciphers correct" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:270178" version="1" class="compliance">
+          <metadata>
+            <title>The operating system SSH client must be configured to use only DOD-approved Message Authentication Codes (MACs) employing FIPS 140-3 validated cryptographic hash algorithms to protect the confidentiality of SSH client connections.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:27017800" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271438" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must be a vendor supported release.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:27143800" comment="The Oracle Linux 9 minor version is supported." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271454" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must enable FIPS mode.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25823000" comment="/proc/sys/crypto/fips_enabled is set to 1" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271493" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must have the SSSD package installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:27149300" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271494" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must use the SSSD package for multifactor authentication services.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:27149400" comment="sssd.service is active" />
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:27149401" comment="sssd.service is enabled" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271505" version="2" class="compliance">
+          <metadata>
+            <title>The operating system oracle-linux-manager package must be installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:27150500" comment="oracle-linux-manager-client package is installed" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271709" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must be configured so that all network connections associated with SSH traffic are terminated at the end of the session or after 10 minutes of inactivity, except to fulfill documented and validated mission requirements.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:27170900" comment="/etc/ssh/sshd_config:ClientAliveCountMax = 1" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271720" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must not allow users to override SSH environment variables.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:27172000" comment="Check to see if PermitUserEnvironment is set to no in /etc/ssh/sshd_config and /etc/ssh/sshd_config.d/*.conf" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271727" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must disable the use of user namespaces.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054800" comment="user.max_user_namespaces is set to 0" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271734" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must clear SLUB/SLAB objects to prevent use-after-free attacks.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:27173400" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:27173401" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271748" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must disable access to network bpf system call from nonprivileged processes.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054500" comment="kernel.unprivileged_bpf_disabled setting in kernel is '1'." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271750" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must automatically exit interactive command shell user sessions after 15 minutes of inactivity.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:27175000" comment="TMOUT is set to 900 or less in /etc/profile and /etc/profile.d/*.sh" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271761" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must implement address space layout randomization (ASLR) to protect its memory from unauthorized code execution.</title>
+            <description />
+          </metadata>
+          <criteria operator="AND">
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23028000" comment="kernel.randomize_va_space setting in kernel is 2" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271768" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must enable hardening for the Berkeley Packet Filter Just-in-time compiler.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:24455400" comment="net.core.bpf_jit_harden is set to 2" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271773" version="1" class="compliance">
+          <metadata>
+            <title>The operating system system commands must be group-owned by root or a system account.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:27177300" comment="System commands are group-owned by root or a system account" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271774" version="1" class="compliance">
+          <metadata>
+            <title>The operating system system commands must be owned by root.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:27177400" comment="System command files are owned by root" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271775" version="1" class="compliance">
+          <metadata>
+            <title>The operating system system commands must have mode 755 or less permissive.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:27177500" comment="There are no group-writable system command files" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:27177501" comment="There are no world-writable system command files" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271786" version="1" class="compliance">
+          <metadata>
+            <title>The operating system library directories must be group-owned by root or a system account.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:27178600" comment="No system-wide library directories exist except for those group-owned by root" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271787" version="1" class="compliance">
+          <metadata>
+            <title>The operating system library directories must be owned by root.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:27178700" comment="All system-wide library directories must be owned by root" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271788" version="1" class="compliance">
+          <metadata>
+            <title>The operating system library directories must have mode 755 or less permissive.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:27178800" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:27178801" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271854" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must authenticate the remote logging server for offloading audit logs via rsyslog.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25814600" comment="ActionSendStreamDriverAuthMode is set to x509/name" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271855" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must encrypt the transfer of audit records offloaded onto a different system or media from the system being audited via rsyslog.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23048100" comment="ActionSendStreamDriverMode == 1" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271856" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must encrypt via the gtls driver the transfer of audit records offloaded onto a different system or media from the system being audited via rsyslog.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25814800" comment="DefaultNetstreamDriver == gtls" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271864" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must ignore Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirect messages.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:24455300" comment="net.ipv4.conf.all.accept_redirects setting in kernel to 0" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271865" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must not forward IPv4 source-routed packets.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25795900" comment="net.ipv4.conf.all.accept_source_routesetting in kernel is set to 0" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271866" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must log IPv4 packets with impossible addresses.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25796000" comment="net.ipv4.conf.all.log_martians setting in kernel set to 1" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271867" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must log IPv4 packets with impossible addresses by default.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25796100" comment="net.ipv4.conf.default.log_martians setting in kernel is 1" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271868" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must use reverse path filtering on all IPv4 interfaces.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:27186800" comment="net.ipv4.conf.all.rp_filter setting in kernel is 1" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271869" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must prevent IPv4 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</title>
+            <description />
+          </metadata>
+          <criteria operator="AND">
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:24455000" comment="net.ipv4.conf.default.accept_redirects setting in kernel is 0" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271870" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must not forward IPv4 source-routed packets by default.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:24455200" comment="net.ipv4.conf.default.accept_source_route setting in kernel is 0" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271871" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must use a reverse-path filter for IPv4 network traffic, when possible, by default.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:20461100" comment="net.ipv4.conf.default.rp_filter setting in kernel is set to 1" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271872" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must not enable IPv4 packet forwarding unless the system is a router.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25797000" comment="net.ipv4.conf.all.forwarding setting in kernel is 0" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271873" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must not respond to Internet Control Message Protocol (ICMP) echoes sent to a broadcast address.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23053700" comment="net.ipv4.icmp_echo_ignore_broadcasts is set to 1 in kernel" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271874" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must limit the number of bogus Internet Control Message Protocol (ICMP) response errors logs.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25796700" comment="net.ipv4.icmp_ignore_bogus_error_responses setting in kernel is 1" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271875" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must not send Internet Control Message Protocol (ICMP) redirects.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23053600" comment="net.ipv4.conf.all.send_redirects setting in kernel is 0" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271876" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must not allow interfaces to perform Internet Control Message Protocol (ICMP) redirects by default.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054300" comment="net.ipv4.conf.default.send_redirects is set to 0 in kernel" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271877" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must not accept router advertisements on all IPv6 interfaces.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25797100" comment="net.ipv6.conf.all.accept_ra setting in kernel is set to 0" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271878" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must ignore IPv6 Internet Control Message Protocol (ICMP) redirect messages.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054400" comment="net.ipv6.conf.all.accept_redirects setting in kernel is 0" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271879" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must not forward IPv6 source-routed packets.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23053800" comment="net.ipv6.conf.all.accept_source_route setting in kernel is 0" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271880" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must not enable IPv6 packet forwarding unless the system is a router.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054000" comment="net.ipv6.conf.all.forwarding setting in kernel is 0" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271881" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must not accept router advertisements on all IPv6 interfaces by default.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25312000" comment="net.ipv6.conf.default.accept_ra setting in kernel is 0" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271882" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must prevent IPv6 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23053500" comment="net.ipv6.conf.default.accept_redirects is set to 0 in kernel" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271884" version="2" class="compliance">
+          <metadata>
+            <title>The operating system must be configured to use TCP syncookies.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23833300" comment="net.ipv4.tcp_syncookies setting in kernel to 1" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:274870" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must audit any script or executable called by cron as root or by any privileged user.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:27487000" comment="Audit modifications to /etc/cron.d" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:27487001" comment="Audit modifications to /var/spool/cron" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:25784900" version="1" class="inventory">
+          <metadata>
+            <title>The autofs package is installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25784900" comment="The autofs package is installed." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:25785400" version="2" class="inventory">
+          <metadata>
+            <title>The system has nfs entries in /etc/fstab</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25785400" comment="nfs mounts" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:25795100" version="1" class="inventory">
+          <metadata>
+            <title>The postifx package is installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23055000" comment="The postifx package is installed." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:25795200" version="1" class="compliance">
+          <metadata>
+            <title>The Trivial File Transfer Protocol (TFTP) server package is installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25795201" comment="The tftp-server package is installed." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:25823200" version="1" class="inventory">
+          <metadata>
+            <title>The libreswan package is installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:2582320000" comment="The libreswan package is installed." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:25824200" version="1" class="inventory">
+          <metadata>
+            <title>The system has BIND installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25824200" comment="BIND installed" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.linux:def:100005" version="2" class="inventory">
+          <metadata>
+            <title>Gnome is installed</title>
+            <affected family="unix">
+              <platform>Linux Systems</platform>
+            </affected>
+            <description />
+          </metadata>
+          <criteria operator="OR">
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:10000500" comment="The Gnome-shell package is installed (RPM)" />
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:10000501" comment="The Gnome-shell package is installed (DEB)" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.linux:def:100006" version="6" class="inventory">
+          <metadata>
+            <title>Linux United Extensible Firmware Interface (UEFI)</title>
+            <affected family="unix">
+              <platform>Linux Systems</platform>
+            </affected>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:10000602" comment="/sys/firmware/efi exists" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.linux:def:100012" version="1" class="inventory">
+          <metadata>
+            <title>IPv6 is disabled in the kernel.</title>
+            <affected family="unix">
+              <platform>Linux Systems</platform>
+            </affected>
+            <description>IPv6 is disabled in the kernel, either via a kernel cmdline option or sysctl.</description>
+          </metadata>
+          <criteria operator="OR">
+            <criteria operator="AND" comment="IPv6 is disabled via sysctl">
+              <criterion test_ref="oval:mil.disa.stig.unix:tst:10001200" comment="net.ipv6.conf.all.disable_ipv6 setting in kernel is 1" />
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:10001201" comment="net.ipv6.conf.all.disable_ipv6 setting in sysctl configuration files is set to 1, and nothing else" />
+            </criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:10001202" comment="ipv6.disable=1 in the kernel cmdline" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.linux:def:100016" version="4" class="inventory">
+          <metadata>
+            <title>Linux UEFI Boot Partition Not VFAT File Type</title>
+            <affected family="unix">
+              <platform>Linux Systems</platform>
+            </affected>
+            <description />
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.linux:def:100006" comment="Linux United Extensible Firmware Interface (UEFI)" />
+            <criteria negate="true">
+              <criterion test_ref="oval:mil.disa.stig.linux:tst:10001600" comment="/boot/efi is mounted with VFAT file type." />
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:10001601" comment="If /boot/efi is configured in /etc/fstab it is VFAT file type." />
+            </criteria>
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271432" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000002 - OL 9 must use a separate file system for the system audit data path.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Placing "/var/log/audit" in its own partition enables better separation between audit files and other system files and helps ensure that auditing cannot be halted due to the partition running out of space.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230294" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271433" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000003 - OL 9 must be configured so that a separate file system must be used for user home directories (such as /home or an equivalent).</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Ensuring that "/home" is mounted on its own partition enables the setting of more restrictive mount options, and also helps ensure that users cannot trivially fill partitions used for log or audit data storage.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230328" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271434" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000004 - OL 9 must use a separate file system for /tmp.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "/tmp" partition is used as temporary storage by many programs. Placing "/tmp" in its own partition enables the setting of more restrictive mount options, which can help protect programs that use it.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230295" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271435" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000005 - OL 9 must use a separate file system for /var.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Ensuring that "/var" is mounted on its own partition enables the setting of more restrictive mount options. This helps protect system services such as daemons or other programs which use it. It is not uncommon for the "/var" directory to contain world-writable directories installed by other software packages.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230292" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271436" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000006 - OL 9 must use a separate file system for /var/log.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Placing "/var/log" in its own partition enables better separation between log files and other files in "/var/".</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257846" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271437" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000007 - OL 9 must use a separate file system for /var/tmp.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "/var/tmp" partition is used as temporary storage by many programs. Placing "/var/tmp" in its own partition enables the setting of more restrictive mount options, which can help protect programs that use it.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244529" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271438" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000010 - OL 9 must be a vendor supported release.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>An operating system release is considered "supported" if the vendor continues to provide security patches for the product. With an unsupported release, it will not be possible to resolve security issues discovered in the system software.
+
+	Oracle offers Oracle Linux Premier Support, for a fee, for those customers who wish to standardize on a specific minor release for an extended period.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271438" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271440" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000020 - OL 9 must be configured so that the graphical display manager is not the default target unless approved.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Unnecessary service packages must not be installed to decrease the attack surface of the system. Graphical display managers have a long history of security vulnerabilities and must not be used unless approved and documented.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:251718" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271441" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000025 - OL 9 must require authentication to access emergency mode.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DOD-approved PKIs, all DOD systems (e.g., web servers and web portals) must be properly configured to incorporate access control methods that do not rely solely on the possession of a certificate for access. Successful authentication must not automatically give an entity access to an asset or security boundary. Authorization procedures and controls must be implemented to ensure each authenticated entity also has a validated and current authorization. Authorization is the process of determining whether an entity, once authenticated, is permitted to access a specific asset. Information systems use access control policies and enforcement mechanisms to implement this requirement.
+
+	This requirement prevents attackers with physical access from trivially bypassing security on the machine and gaining root access. Such accesses are further prevented by configuring the bootloader password.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244523" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271442" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-000030 - OL 9 must require authentication to access single-user mode.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DOD-approved PKIs, all DOD systems (e.g., web servers and web portals) must be properly configured to incorporate access control methods that do not rely solely on the possession of a certificate for access. Successful authentication must not automatically give an entity access to an asset or security boundary. Authorization procedures and controls must be implemented to ensure each authenticated entity also has a validated and current authorization. Authorization is the process of determining whether an entity, once authenticated, is permitted to access a specific asset. Information systems use access control policies and enforcement mechanisms to implement this requirement.
+
+	This requirement prevents attackers with physical access from trivially bypassing security on the machine and gaining root access. Such accesses are further prevented by configuring the bootloader password.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258129" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271443" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000040 - OL 9 must be configured to disable the Asynchronous Transfer Mode (ATM) kernel module.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Disabling ATM protects the system against exploitation of any flaws in its implementation.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257804" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271444" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000041 - OL 9 must be configured to disable the Controller Area Network (CAN) kernel module.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Disabling CAN protects the system against exploitation of any flaws in its implementation.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257805" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271445" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000042 - OL 9 must be configured to disable the FireWire kernel module.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Disabling firewire protects the system against exploitation of any flaws in its implementation.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257806" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271446" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000043 - OL 9 must disable the Stream Control Transmission Protocol (SCTP) kernel module.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+
+	Failing to disconnect unused protocols can result in a system compromise.
+
+	The SCTP is a transport layer protocol, designed to support the idea of message-oriented communication, with several streams of messages within one connection. Disabling SCTP protects the system against exploitation of any flaws in its implementation.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257807" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271447" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000044 - OL 9 must disable the Transparent Inter Process Communication (TIPC) kernel module.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+
+	Failing to disconnect unused protocols can result in a system compromise.
+
+	The TIPC is a protocol that is specially designed for intra-cluster communication. It can be configured to transmit messages either on UDP or directly across Ethernet. Message delivery is sequence guaranteed, loss free, and flow controlled. Disabling TIPC protects the system against exploitation of any flaws in its implementation.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230497" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271448" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000045 - OL 9 must disable mounting of cramfs.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+
+	Removing support for unneeded filesystem types reduces the local attack surface of the server.
+
+	Compressed ROM/RAM file system (or cramfs) is a read-only file system designed for simplicity and space-efficiency. It is mainly used in embedded and small-footprint systems.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230498" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271449" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000046 - OL 9 Bluetooth must be disabled.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>This requirement applies to wireless peripheral technologies (e.g., wireless mice, keyboards, displays, etc.) used with OL 9 systems. Wireless peripherals (e.g., Wi-Fi/Bluetooth/IR keyboards, mice and pointing devices, and near field communications [NFC]) present a unique challenge by creating an open, unsecured port on a computer. Wireless peripherals must meet DOD requirements for wireless data transmission and be approved for use by the authorizing official (AO). Even though some wireless peripherals, such as mice and pointing devices, do not ordinarily carry information that need to be protected, modification of communications with these wireless peripherals may be used to compromise the OL 9 operating system.
+
+	Satisfies: SRG-OS-000095-GPOS-00049, SRG-OS-000300-GPOS-00118</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230507" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271450" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000047 - OL 9 must be configured to disable USB mass storage.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>USB mass storage permits easy introduction of unknown devices, thereby facilitating malicious activity.
+
+	Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230503" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271452" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000060 - OL 9 must use a Linux Security Module configured to enforce limits on system services.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without verification of the security functions, security functions may not operate correctly and the failure may go unnoticed. Security function is defined as the hardware, software, and/or firmware of the information system responsible for enforcing the system security policy and supporting the isolation of code and data on which the protection is based. Security functionality includes, but is not limited to, establishing system accounts, configuring access authorizations (i.e., permissions, privileges), setting events to be audited, and setting intrusion detection parameters.
+
+	This requirement applies to operating systems performing security function verification/testing and/or systems and environments that require this functionality.
+
+	Satisfies: SRG-OS-000445-GPOS-00199, SRG-OS-000134-GPOS-00068</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230240" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271453" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000065 - OL 9 must enable the SELinux targeted policy.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Setting the SELinux policy to "targeted" or a more specialized policy ensures the system will confine processes that are likely to be targeted for exploitation, such as network or system services.
+
+	Note: During the development or debugging of SELinux modules, it is common to temporarily place nonproduction systems in "permissive" mode. In such temporary cases, SELinux policies should be developed, and once work is completed, the system should be reconfigured to "targeted".</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230282" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271454" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-000070 - OL 9 must enable FIPS mode.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Use of weak or untested encryption algorithms undermines the purposes of using encryption to protect data. The operating system must implement cryptographic modules adhering to the higher standards approved by the federal government since this provides assurance they have been tested and validated. This includes NIST FIPS-validated cryptography for the following: Provisioning digital signatures, generating cryptographic hashes, and to protect data requiring data-at-rest protections in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, and standards.
+
+	Satisfies: SRG-OS-000033-GPOS-00014, SRG-OS-000125-GPOS-00065, SRG-OS-000396-GPOS-00176, SRG-OS-000423-GPOS-00187, SRG-OS-000478-GPOS-00223</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271454" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271456" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000100 - OL 9 must not have the nfs-utils package installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>"nfs-utils" provides a daemon for the kernel NFS server and related tools. This package also contains the "showmount" program. "showmount" queries the mount daemon on a remote host for information about the Network File System (NFS) server on the remote host. For example, "showmount" can display the clients that are mounted on that host.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257828" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271458" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000110 - OL 9 must not have the telnet-server package installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities are often overlooked and therefore, may remain unsecure. They increase the risk to the platform by providing additional attack vectors.
+
+	The telnet service provides an unencrypted remote access service, which does not provide for the confidentiality and integrity of user passwords or the remote session. If a privileged user were to login using this service, the privileged user password could be compromised.
+
+	Removing the "telnet-server" package decreases the risk of accidental (or intentional) activation of the telnet service.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230487" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271459" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000115 - OL 9 must not have the gssproxy package installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore, may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+
+	Operating systems are capable of providing a wide variety of functions and services. Some of the functions and services provided by default may not be necessary to support essential organizational operations (e.g., key missions, functions).
+
+	The gssproxy package is a proxy for GSS API credential handling and could expose secrets on some networks. It is not needed for normal function of the OS.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257832" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271460" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000120 - OL 9 must not have the iprutils package installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+
+	Operating systems are capable of providing a wide variety of functions and services. Some of the functions and services, provided by default, may not be necessary to support essential organizational operations (e.g., key missions, functions).
+
+	The iprutils package provides a suite of utilities to manage and configure SCSI devices supported by the ipr SCSI storage device driver.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230560" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271461" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000125 - OL 9 must not have the tuned package installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+
+	Operating systems are capable of providing a wide variety of functions and services. Some of the functions and services, provided by default, may not be necessary to support essential organizational operations (e.g., key missions, functions).
+
+	The tuned package contains a daemon that tunes the system settings dynamically. It does so by monitoring the usage of several system components periodically. Based on that information, components will then be put into lower or higher power savings modes to adapt to the current usage. The tuned package is not needed for normal OS operations.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230561" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271462" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000130 - OL 9 must not have a File Transfer Protocol (FTP) server package installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The FTP service provides an unencrypted remote access that does not provide for the confidentiality and integrity of user passwords or the remote session. If a privileged user were to log on using this service, the privileged user password could be compromised. SSH or other encrypted file transfer methods must be used in place of this service.
+
+	Removing the "vsftpd" package decreases the risk of accidental activation.
+
+	Satisfies: SRG-OS-000074-GPOS-00042, SRG-OS-000095-GPOS-00049</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257826" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271463" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000135 - OL 9 must not have a Trivial File Transfer Protocol (TFTP) server package installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Removing the "tftp-server" package decreases the risk of the accidental (or intentional) activation of tftp services.
+
+	If TFTP is required for operational support (such as transmission of router configurations), its use must be documented with the information systems security manager (ISSM), restricted to only authorized personnel, and have access control rules established.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230533" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271464" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000140 - OL 9 must not have the quagga package installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Quagga is a network routing software suite providing implementations of Open Shortest Path First (OSPF), Routing Information Protocol (RIP), Border Gateway Protocol (BGP) for Unix and Linux platforms.
+
+	If there is no need to make the router software available, removing it provides a safeguard against its activation.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257836" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271465" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000145 - OL 9 must not have a graphical display manager installed unless approved.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Unnecessary service packages must not be installed to decrease the attack surface of the system. Graphical display managers have a long history of security vulnerabilities and must not be used, unless approved and documented.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230553" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271466" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000150 - OL 9 must not have the sendmail package installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The sendmail software was not developed with security in mind, and its design prevents it from being effectively contained by SELinux. Postfix must be used instead.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230489" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271467" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000200 - OL 9 must have policycoreutils package installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without verification of the security functions, security functions may not operate correctly and the failure may go unnoticed. Security function is defined as the hardware, software, and/or firmware of the information system responsible for enforcing the system security policy and supporting the isolation of code and data on which the protection is based. Security functionality includes, but is not limited to, establishing system accounts, configuring access authorizations (i.e., permissions, privileges), setting events to be audited, and setting intrusion detection parameters.
+
+	Policycoreutils contains the policy core utilities that are required for basic operation of an SELinux-enabled system. These utilities include load_policy to load SELinux policies, setfile to label filesystems, newrole to switch roles, and run_init to run /etc/init.d scripts in the proper context.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230241" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271468" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000210 - OL 9 policycoreutils-python-utils package must be installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The policycoreutils-python-utils package is required to operate and manage an SELinux environment and its policies. It provides utilities such as semanage, audit2allow, audit2why, chcat, and sandbox.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258082" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271469" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000220 - OL 9 must have the firewalld package installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Firewalld provides an easy and effective way to block/limit remote access to the system via ports, services, and protocols.
+
+	Remote access services, such as those providing remote access to network devices and information systems, which lack automated control capabilities, increase risk and make remote user access management difficult at best.
+
+	Remote access is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
+
+	OL 9 functionality (e.g., SSH) must be capable of taking enforcement action if the audit reveals unauthorized activity. Automated control of remote access sessions allows organizations to ensure ongoing compliance with remote access policies by enforcing connection rules of remote access applications on a variety of information system components (e.g., servers, workstations, notebook computers, smartphones, and tablets).
+
+	Satisfies: SRG-OS-000096-GPOS-00050, SRG-OS-000297-GPOS-00115, SRG-OS-000298-GPOS-00116, SRG-OS-000480-GPOS-00232</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230505" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271470" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000221 - OL 9 must be configured so that the firewalld service is active.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Firewalld provides an easy and effective way to block/limit remote access to the system via ports, services, and protocols.
+
+	Remote access services, such as those providing remote access to network devices and information systems, which lack automated control capabilities, increase risk and make remote user access management difficult at best.
+
+	Remote access is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
+
+	OL 9 functionality (e.g., RDP) must be capable of taking enforcement action if the audit reveals unauthorized activity. Automated control of remote access sessions allows organizations to ensure ongoing compliance with remote access policies by enforcing connection rules of remote access applications on a variety of information system components (e.g., servers, workstations, notebook computers, smartphones, and tablets).
+
+	Satisfies: SRG-OS-000096-GPOS-00050, SRG-OS-000297-GPOS-00115</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257936" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271474" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000230 - OL 9 must have the sudo package installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>sudo is a program designed to allow a system administrator to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow system users to complete their work.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258083" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271475" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000231 - OL 9 must use the invoking user's password for privilege escalation when using sudo.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>If the rootpw, targetpw, or runaspw flags are defined and not disabled, by default the operating system will prompt the invoking user for the "root" user password.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:237642" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271476" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000232 - OL 9 must restrict privilege elevation to authorized personnel.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>If the sudoers file is not configured correctly, any user defined on the system can initiate privileged actions on the target system.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258087" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271477" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000240 - OL 9 must have the crypto-policies package installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Centralized cryptographic policies simplify applying secure ciphers across an operating system and the applications that run on that operating system. Use of weak or untested encryption algorithms undermines the purposes of using encryption to protect data.
+
+	Satisfies: SRG-OS-000396-GPOS-00176, SRG-OS-000393-GPOS-00173, SRG-OS-000394-GPOS-00174</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258234" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271482" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000250 - OL 9 networked systems must have SSH installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without protection of the transmitted information, confidentiality and integrity may be compromised because unprotected communications can be intercepted and either read or altered. 
+
+	This requirement applies to both internal and external networks and all types of information system components from which information can be transmitted (e.g., servers, mobile devices, notebook computers, printers, copiers, scanners, and facsimile machines). Communication paths outside the physical protection of a controlled boundary are exposed to the possibility of interception and modification. 
+
+	Protecting the confidentiality and integrity of organizational information can be accomplished by physical means (e.g., employing physical distribution systems) or by logical means (e.g., employing cryptographic techniques). If physical means of protection are employed, then logical means (cryptography) do not have to be employed, and vice versa.
+
+	Satisfies: SRG-OS-000423-GPOS-00187, SRG-OS-000424-GPOS-00188, SRG-OS-000425-GPOS-00189, SRG-OS-000426-GPOS-00190</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244549" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271483" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000251 - OL 9 networked systems must have and implement SSH to protect the confidentiality and integrity of transmitted and received information, as well as information during preparation for transmission.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without protection of the transmitted information, confidentiality and integrity may be compromised because unprotected communications can be intercepted and either read or altered. 
+
+	This requirement applies to both internal and external networks and all types of information system components from which information can be transmitted (e.g., servers, mobile devices, notebook computers, printers, copiers, scanners, and facsimile machines). Communication paths outside the physical protection of a controlled boundary are exposed to the possibility of interception and modification. 
+
+	Protecting the confidentiality and integrity of organizational information can be accomplished by physical means (e.g., employing physical distribution systems) or by logical means (e.g., employing cryptographic techniques). If physical means of protection are employed, then logical means (cryptography) do not have to be employed, and vice versa.
+
+	Satisfies: SRG-OS-000423-GPOS-00187, SRG-OS-000424-GPOS-00188, SRG-OS-000425-GPOS-00189, SRG-OS-000426-GPOS-00190</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257979" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271484" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000252 - The OL 9 SSH daemon must be configured to use systemwide cryptographic policies.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
+
+	Remote access (e.g., RDP) is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
+
+	Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
+
+	OL 9 incorporates systemwide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the /etc/sysconfig/sshd file. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/ directory.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244526" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271485" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000254 - OL 9 SSH server must be configured to use only ciphers employing FIPS 140-3 validated cryptographic hash algorithms to protect the confidentiality of SSH server connections.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
+
+	Remote access (e.g., RDP) is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
+
+	Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
+
+	OL 9 incorporates systemwide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the /etc/sysconfig/sshd file. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/opensshserver.config file.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257989" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271486" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000255 - OL 9 SSH server must be configured to use only Message Authentication Codes (MACs) employing FIPS 140-3 validated cryptographic hash algorithms to protect the confidentiality of SSH server connections.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
+
+	Remote access (e.g., RDP) is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
+
+	Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
+
+	OL 9 incorporates systemwide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the /etc/sysconfig/sshd file. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/opensshserver.config file.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257991" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271487" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000256 - OL 9 must display the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system via a SSH logon.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The warning message reinforces policy awareness during the logon process and facilitates possible legal action against attackers. Alternatively, systems whose ownership should not be obvious should ensure usage of a banner that does not provide easy attribution.
+
+	Satisfies: SRG-OS-000023-GPOS-00006, SRG-OS-000228-GPOS-00088</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257981" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271488" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000260 - OL 9 must have the openssh-clients package installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>This package includes utilities to make encrypted connections and transfer files securely to SSH servers.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257980" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271489" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000261 - OL 9 SSH client must be configured to use only DOD-approved encryption ciphers employing FIPS 140-3 validated cryptographic hash algorithms to protect the confidentiality of SSH client connections.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
+
+	Remote access (e.g., RDP) is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
+
+	Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
+
+	OL 9 incorporates systemwide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the /etc/sysconfig/sshd file. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/opensshserver.config file.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:270177" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271490" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000262 - OL 9 SSH client must be configured to use only DOD-approved Message Authentication Codes (MACs) employing FIPS 140-3 validated cryptographic hash algorithms to protect the confidentiality of SSH client connections.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
+
+	Remote access (e.g., RDP) is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
+
+	Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
+
+	OL 9 incorporates systemwide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the /etc/sysconfig/sshd file. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/opensshserver.config file.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:270178" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271491" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000270 - OL 9 must have the openssl-pkcs11 package installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without the use of multifactor authentication, the ease of access to privileged functions is greatly increased. Multifactor authentication requires using two or more factors to achieve authentication. A privileged account is defined as an information system account with authorizations of a privileged user. The DOD CAC with DOD-approved PKI is an example of multifactor authentication.
+
+	Satisfies: SRG-OS-000105-GPOS-00052, SRG-OS-000375-GPOS-00160, SRG-OS-000376-GPOS-00161, SRG-OS-000377-GPOS-00162</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230273" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271493" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000285 - OL 9 must have the SSSD package installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Using an authentication device, such as a CAC or token that is separate from the information system, ensures that even if the information system is compromised, that compromise will not affect credentials stored on the authentication device. 
+	 
+	Multifactor solutions that require devices separate from information systems gaining access include, for example, hardware tokens providing time-based or challenge-response authenticators and smart cards such as the U.S. Government Personal Identity Verification card and the DOD Common Access Card. 
+	 
+	A privileged account is defined as an information system account with authorizations of a privileged user. 
+	 
+	Remote access is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless. 
+	 
+	This requirement only applies to components where this is specific to the function of the device or has the concept of an organizational user (e.g., VPN, proxy capability). This does not apply to authentication for the purpose of configuring the device itself (management).
+
+	Satisfies: SRG-OS-000705-GPOS-00150, SRG-OS-000105-GPOS-00052, SRG-OS-000106-GPOS-00053, SRG-OS-000107-GPOS-00054, SRG-OS-000108-GPOS-00055, SRG-OS-000375-GPOS-00160</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271493" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271494" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000286 - OL 9 must use the SSSD package for multifactor authentication services.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Using an authentication device, such as a CAC or token that is separate from the information system, ensures that even if the information system is compromised, that compromise will not affect credentials stored on the authentication device. 
+	 
+	Multifactor solutions that require devices separate from information systems gaining access include, for example, hardware tokens providing time-based or challenge-response authenticators and smart cards such as the U.S. Government Personal Identity Verification card and the DOD Common Access Card. 
+	 
+	A privileged account is defined as an information system account with authorizations of a privileged user. 
+	 
+	Without the use of multifactor authentication, the ease of access to privileged functions is greatly increased. 
+	 
+	Multifactor authentication requires using two or more factors to achieve authentication. 
+	 
+	Factors include:  
+	1) Something a user knows (e.g., password/PIN); 
+	2) Something a user has (e.g., cryptographic identification device, token); and 
+	3) Something a user is (e.g., biometric). 
+	 
+	A privileged account is defined as an information system account with authorizations of a privileged user. 
+	 
+	Network access is defined as access to an information system by a user (or a process acting on behalf of a user) communicating through a network (e.g., local area network, wide area network, or the internet). 
+	 
+	The DOD common access card (CAC) with DOD-approved PKI is an example of multifactor authentication.
+
+	Satisfies: SRG-OS-000705-GPOS-00150, SRG-OS-000105-GPOS-00052, SRG-OS-000106-GPOS-00053, SRG-OS-000107-GPOS-00054, SRG-OS-000108-GPOS-00055, SRG-OS-000375-GPOS-00161</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271494" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271495" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000290 - OL 9 must have the s-nail package installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The s-nail package provides the mail command required to allow sending email notifications of unauthorized configuration changes to designated personnel.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257842" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271496" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000300 - OL 9 must have the Advanced Intrusion Detection Environment (AIDE) package installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without verification of the security functions, security functions may not operate correctly, and the failure may go unnoticed. Security function is defined as the hardware, software, and/or firmware of the information system responsible for enforcing the system security policy and supporting the isolation of code and data on which the protection is based. Security functionality includes, but is not limited to, establishing system accounts, configuring access authorizations (i.e., permissions, privileges), setting events to be audited, and setting intrusion detection parameters.
+
+	Satisfies: SRG-OS-000363-GPOS-00150, SRG-OS-000445-GPOS-00199</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258134" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271501" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000310 - OL 9 must have the chrony package installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Inaccurate time stamps make it more difficult to correlate events and can lead to an inaccurate analysis. Determining the correct time a particular event occurred on a system is critical when conducting forensic analysis and investigating system events. Sources outside the configured acceptable allowance (drift) may be inaccurate.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257943" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271502" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000311 - OL 9 must enable the chronyd service.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Inaccurate time stamps make it more difficult to correlate events and can lead to an inaccurate analysis. Determining the correct time a particular event occurred on a system is critical when conducting forensic analysis and investigating system events. Sources outside the configured acceptable allowance (drift) may be inaccurate.
+
+	Synchronizing internal information system clocks provides uniformity of time stamps for information systems with multiple system clocks and systems connected over a network.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257944" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271503" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000320 - OL 9 must have the USBGuard package installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The USBguard-daemon is the main component of the USBGuard software framework. It runs as a service in the background and enforces the USB device authorization policy for all USB devices. The policy is defined by a set of rules using a rule language described in the usbguard-rules.conf file. The policy and the authorization state of USB devices can be modified during runtime using the usbguard tool.
+
+	The system administrator (SA) must work with the site information system security officer (ISSO) to determine a list of authorized peripherals and establish rules within the USBGuard software framework to allow only authorized devices.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258035" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271504" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000321 - OL 9 must enable the USBGuard package.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The USBguard-daemon is the main component of the USBGuard software framework. It runs as a service in the background and enforces the USB device authorization policy for all USB devices. The policy is defined by a set of rules using a rule language described in the usbguard-rules.conf file. The policy and the authorization state of USB devices can be modified during runtime using the usbguard tool.
+
+	The system administrator (SA) must work with the site information system security officer (ISSO) to determine a list of authorized peripherals and establish rules within the USBGuard software framework to allow only authorized devices.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258036" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271505" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-000330 - OL 9 must have the oracle-linux-manager package installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Oracle Linux Manager, based on the Spacewalk open source software, helps automate Oracle Linux systems management. This enables users to control the system software life cycle from initial installation through maintenance, software configuration, upgrades, and eventual decommissioning. Oracle Linux Manager also helps automate a kickstart installation, system configuration, and maintenance tasks, which enables rapid deployment of proven and consistent software configurations for Oracle Linux systems.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271505" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271506" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000340 - OL 9 must have the fapolicy module installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The organization must identify authorized software programs and permit execution of authorized software. The process used to identify software programs that are authorized to execute on organizational information systems is commonly referred to as allowlisting.
+
+	Using an allowlist provides a configuration management method for allowing the execution of only authorized software. Using only authorized software decreases risk by limiting the number of potential vulnerabilities. Verification of allowlisted software occurs prior to execution or at system startup.
+
+	User home directories/folders may contain information of a sensitive nature. Nonprivileged users should coordinate any sharing of information with a system administrator (SA) through shared resources.
+
+	OL 9 ships with many optional packages. One such package is a file access policy daemon called "fapolicyd". "fapolicyd" is a userspace daemon that determines access rights to files based on attributes of the process and file. It can be used to either blocklist or allowlist processes or file access.
+
+	Proceed with caution with enforcing the use of this daemon. Improper configuration may render the system nonfunctional. The "fapolicyd" API is not namespace aware and can cause issues when launching or running containers.
+
+	Satisfies: SRG-OS-000370-GPOS-00155, SRG-OS-000368-GPOS-00154</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258089" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271507" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000341 - OL 9 must enable the fapolicy module.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The organization must identify authorized software programs and permit execution of authorized software. The process used to identify software programs that are authorized to execute on organizational information systems is commonly referred to as allowlisting.
+
+	Using an allowlist provides a configuration management method for allowing the execution of only authorized software. Using only authorized software decreases risk by limiting the number of potential vulnerabilities. Verification of allowlisted software occurs prior to execution or at system startup.
+
+	User home directories/folders may contain information of a sensitive nature. Nonprivileged users should coordinate any sharing of information with a system administrator (SA) through shared resources.
+
+	OL 9 ships with many optional packages. One such package is a file access policy daemon called "fapolicyd". "fapolicyd" is a userspace daemon that determines access rights to files based on attributes of the process and file. It can be used to either blocklist or allowlist processes or file access.
+
+	Proceed with caution with enforcing the use of this daemon. Improper configuration may render the system nonfunctional. The "fapolicyd" API is not namespace aware and can cause issues when launching or running containers.
+
+	Satisfies: SRG-OS-000370-GPOS-00155, SRG-OS-000368-GPOS-00154</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244545" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271508" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000350 - OL 9 must have the rsyslog package installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>rsyslogd is a system utility providing support for message logging. Support for both internet and Unix domain sockets enables this utility to support both local and remote logging. Couple this utility with "gnutls" (which is a secure communications library implementing the SSL, TLS, and DTLS protocols), to create a method to securely encrypt and offload auditing.
+
+	Satisfies: SRG-OS-000479-GPOS-00224, SRG-OS-000051-GPOS-00024</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230477" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271509" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000351 - OL 9 must be configured so that the rsyslog service is active.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The rsyslog service must be running to provide logging services, which are essential to system administration.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258142" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271510" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000355 - OL 9 must have the packages required for encrypting offloaded audit logs installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The rsyslog-gnutls package provides Transport Layer Security (TLS) support for the rsyslog daemon, which enables secure remote logging.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230478" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271511" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000360 - OL 9 must enable the hardware random number generator entropy gatherer service.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The most important characteristic of a random number generator is its randomness, namely its ability to deliver random numbers that are impossible to predict. Entropy in computer security is associated with the unpredictability of a source of randomness. The random source with high entropy tends to achieve a uniform distribution of random values. Random number generators are one of the most important building blocks of cryptosystems.
+
+	The rngd service feeds random data from hardware device to kernel random device. Quality (nonpredictable) random number generation is important for several security functions (i.e., ciphers).</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257782" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271512" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000370 - OL 9 must have the rng-tools package installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>rng-tools provides hardware random number generator tools, such as those used in the formation of x509/PKI certificates.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244527" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271513" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000380 - OL 9 must have the nss-tools package installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Install the "nss-tools" package to install command-line tools to manipulate the NSS certificate and key database.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257840" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271514" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000390 - OL 9 must have the pcsc-lite package installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The pcsc-lite package must be installed if it is to be available for multifactor authentication using smart cards.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258124" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271515" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000400 - OL 9 must have the opensc package installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The use of PIV credentials facilitates standardization and reduces the risk of unauthorized access.
+
+	The DOD has mandated the use of the Common Access Card (CAC) to support identity management and personal authentication for systems covered under Homeland Security Presidential Directive (HSPD) 12, as well as making the CAC a primary component of layered protection for national security systems.
+
+	Satisfies: SRG-OS-000375-GPOS-00160, SRG-OS-000376-GPOS-00161</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258126" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271516" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000401 - OL 9 must be configured so that the pcscd service is active.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The information system ensures that even if the information system is compromised, that compromise will not affect credentials stored on the authentication device.
+
+	The daemon program for pcsc-lite and the MuscleCard framework is pcscd. It is a resource manager that coordinates communications with smart card readers and smart cards and cryptographic tokens that are connected to the system.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258125" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271517" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000410 - OL 9 must have the libreswan package installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Providing the ability for remote users or systems to initiate a secure VPN connection protects information when it is transmitted over a wide area network.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257954" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271518" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000430 - OL 9 must have the gnutls-utils package installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>GnuTLS is a secure communications library implementing the SSL, TLS, and DTLS protocols and technologies around them. It provides a simple C language application programming interface (API) to access the secure communications protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP and other required structures. This package contains command line TLS client and server and certificate manipulation tools.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257839" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271519" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000440 - OL 9 must have the audit package installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without establishing what type of events occurred, the source of events, where events occurred, and the outcome of events, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.
+
+	Audit record content that may be necessary to satisfy this requirement includes, for example, time stamps, source and destination addresses, user/process identifiers, event descriptions, success/fail indications, filenames involved, and access control or flow control rules invoked.
+
+	Associating event types with detected events in audit logs provides a means of investigating an attack, recognizing resource utilization or capacity thresholds, or identifying an improperly configured OL 9 system.
+
+	Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000038-GPOS-00016, SRG-OS-000039-GPOS-00017, SRG-OS-000040-GPOS-00018, SRG-OS-000041-GPOS-00019, SRG-OS-000042-GPOS-00021, SRG-OS-000051-GPOS-00024, SRG-OS-000054-GPOS-00025, SRG-OS-000122-GPOS-00063, SRG-OS-000254-GPOS-00095, SRG-OS-000255-GPOS-00096, SRG-OS-000337-GPOS-00129, SRG-OS-000348-GPOS-00136, SRG-OS-000349-GPOS-00137, SRG-OS-000350-GPOS-00138, SRG-OS-000351-GPOS-00139, SRG-OS-000352-GPOS-00140, SRG-OS-000353-GPOS-00141, SRG-OS-000354-GPOS-00142, SRG-OS-000358-GPOS-00145, SRG-OS-000365-GPOS-00152, SRG-OS-000392-GPOS-00172, SRG-OS-000475-GPOS-00220, SRG-OS-000055-GPOS-00026</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230411" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271520" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000441 - OL 9 audit service must be enabled.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without establishing what type of events occurred, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack. Ensuring the "auditd" service is active ensures audit records generated by the kernel are appropriately recorded.
+
+	Additionally, a properly configured audit subsystem ensures that actions of individual system users can be uniquely traced to those users so they can be held accountable for their actions.
+
+	Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000038-GPOS-00016, SRG-OS-000039-GPOS-00017, SRG-OS-000040-GPOS-00018, SRG-OS-000041-GPOS-00019, SRG-OS-000042-GPOS-00021, SRG-OS-000051-GPOS-00024, SRG-OS-000054-GPOS-00025, SRG-OS-000122-GPOS-00063, SRG-OS-000254-GPOS-00095, SRG-OS-000255-GPOS-00096, SRG-OS-000337-GPOS-00129, SRG-OS-000348-GPOS-00136, SRG-OS-000349-GPOS-00137, SRG-OS-000350-GPOS-00138, SRG-OS-000351-GPOS-00139, SRG-OS-000352-GPOS-00140, SRG-OS-000353-GPOS-00141, SRG-OS-000354-GPOS-00142, SRG-OS-000358-GPOS-00145, SRG-OS-000365-GPOS-00152, SRG-OS-000392-GPOS-00172, SRG-OS-000475-GPOS-00220</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258152" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271521" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000450 - OL 9 must have the audispd-plugins package installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>audispd-plugins provides plug-ins for the real-time interface to the audit subsystem, audispd. These plug-ins can do things like relay events to remote machines or analyze events for suspicious behavior.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258175" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271522" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000495 - OL 9 must remove all software components after updated versions have been installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Previous versions of software components that are not removed from the information system after updates have been installed may be exploited by some adversaries.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230281" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271523" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000496 - OL 9 must check the GPG signature of locally installed software packages before installation.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Changes to any software components can have significant effects on the overall security of the operating system. This requirement ensures the software has not been tampered with and that it has been provided by a trusted vendor.
+
+	All software packages must be signed with a cryptographic key recognized and approved by the organization.
+
+	Verifying the authenticity of software prior to installation validates the integrity of the software package received from a vendor. This verifies the software has not been tampered with and that it has been provided by a trusted vendor.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230265" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271524" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000497 - OL 9 must check the GPG signature of software packages originating from external software repositories before installation.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Changes to any software components can have significant effects on the overall security of the operating system. This requirement ensures the software has not been tampered with and that it has been provided by a trusted vendor.
+
+	All software packages must be signed with a cryptographic key recognized and approved by the organization.
+
+	Verifying the authenticity of software prior to installation validates the integrity of the software package received from a vendor. This verifies the software has not been tampered with and that it has been provided by a trusted vendor.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257820" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271525" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000498 - OL 9 must have GPG signature verification enabled for all software repositories.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Changes to any software components can have significant effects on the overall security of the operating system. This requirement ensures the software has not been tampered with and that it has been provided by a trusted vendor.
+
+	All software packages must be signed with a cryptographic key recognized and approved by the organization.
+
+	Verifying the authenticity of software prior to installation validates the integrity of the software package received from a vendor. This verifies the software has not been tampered with and that it has been provided by a trusted vendor.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230264" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271527" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000500 - OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/sudoers.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The actions taken by system administrators must be audited to keep a record of what was executed on the system, as well as for accountability purposes. Editing the sudoers file may be sign of an attacker trying to establish persistent methods to a system, auditing the editing of the sudoers files mitigates this risk.
+
+	Satisfies: SRG-OS-000004-GPOS-00004, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000304-GPOS-00121, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000470-GPOS-00214, SRG-OS-000471-GPOS-00215, SRG-OS-000239-GPOS-00089, SRG-OS-000240-GPOS-00090, SRG-OS-000241-GPOS-00091, SRG-OS-000303-GPOS-00120, SRG-OS-000466-GPOS-00210, SRG-OS-000476-GPOS-00221</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230409" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271528" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000505 - OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/sudoers.d/ directory.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The actions taken by system administrators must be audited to keep a record of what was executed on the system, as well as for accountability purposes. Editing the sudoers file may be sign of an attacker trying to establish persistent methods to a system, auditing the editing of the sudoers files mitigates this risk.
+
+	Satisfies: SRG-OS-000004-GPOS-00004, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000304-GPOS-00121, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000470-GPOS-00214, SRG-OS-000471-GPOS-00215, SRG-OS-000239-GPOS-00089, SRG-OS-000240-GPOS-00090, SRG-OS-000241-GPOS-00091, SRG-OS-000303-GPOS-00120, SRG-OS-000466-GPOS-00210, SRG-OS-000476-GPOS-00221</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230410" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271529" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000510 - OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/group.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>In addition to auditing new user and group accounts, these watches will alert the system administrator(s) to any modifications. Any unexpected users, groups, or modifications must be investigated for legitimacy.
+
+	Satisfies: SRG-OS-000004-GPOS-00004, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000304-GPOS-00121, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000470-GPOS-00214, SRG-OS-000471-GPOS-00215, SRG-OS-000239-GPOS-00089, SRG-OS-000240-GPOS-00090, SRG-OS-000241-GPOS-00091, SRG-OS-000303-GPOS-00120, SRG-OS-000466-GPOS-00210, SRG-OS-000476-GPOS-00221</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230408" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271530" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000515 - OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/gshadow.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>In addition to auditing new user and group accounts, these watches will alert the system administrator(s) to any modifications. Any unexpected users, groups, or modifications should be investigated for legitimacy.
+
+	Satisfies: SRG-OS-000004-GPOS-00004, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000304-GPOS-00121, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000470-GPOS-00214, SRG-OS-000471-GPOS-00215, SRG-OS-000239-GPOS-00089, SRG-OS-000240-GPOS-00090, SRG-OS-000241-GPOS-00091, SRG-OS-000303-GPOS-00120, SRG-OS-000466-GPOS-00210, SRG-OS-000476-GPOS-00221</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230407" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271531" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000520 - OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/opasswd.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>In addition to auditing new user and group accounts, these watches will alert the system administrator(s) to any modifications. Any unexpected users, groups, or modifications should be investigated for legitimacy.
+
+	Satisfies: SRG-OS-000004-GPOS-00004, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000304-GPOS-00121, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000470-GPOS-00214, SRG-OS-000471-GPOS-00215, SRG-OS-000239-GPOS-00089, SRG-OS-000240-GPOS-00090, SRG-OS-000241-GPOS-00091, SRG-OS-000303-GPOS-00120, SRG-OS-000466-GPOS-00210, SRG-OS-000476-GPOS-00221</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230405" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271532" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000525 - OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/passwd.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>In addition to auditing new user and group accounts, these watches will alert the system administrator(s) to any modifications. Any unexpected users, groups, or modifications should be investigated for legitimacy.
+
+	Satisfies: SRG-OS-000004-GPOS-00004, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000304-GPOS-00121, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000470-GPOS-00214, SRG-OS-000471-GPOS-00215, SRG-OS-000239-GPOS-00089, SRG-OS-000240-GPOS-00090, SRG-OS-000241-GPOS-00091, SRG-OS-000303-GPOS-00120, SRG-OS-000466-GPOS-00210, SRG-OS-000476-GPOS-00221, SRG-OS-000274-GPOS-00104, SRG-OS-000275-GPOS-00105, SRG-OS-000276-GPOS-00106, SRG-OS-000277-GPOS-00107</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230406" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271533" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000530 - OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/shadow.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>In addition to auditing new user and group accounts, these watches will alert the system administrator(s) to any modifications. Any unexpected users, groups, or modifications should be investigated for legitimacy.
+
+	Satisfies: SRG-OS-000004-GPOS-00004, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000304-GPOS-00121, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000470-GPOS-00214, SRG-OS-000471-GPOS-00215, SRG-OS-000239-GPOS-00089, SRG-OS-000240-GPOS-00090, SRG-OS-000241-GPOS-00091, SRG-OS-000303-GPOS-00120, SRG-OS-000466-GPOS-00210, SRG-OS-000476-GPOS-00221</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230404" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271534" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000535 - OL 9 must audit all uses of the unix_update command.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000064-GPOS-00033, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230426" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271535" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000540 - OL 9 must audit all uses of the su command.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000064-GPOS-00033, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000466-GPOS-00210</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230412" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271536" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000545 - OL 9 must audit all uses of the setxattr, fsetxattr, lsetxattr, removexattr, fremovexattr, and lremovexattr system calls.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000458-GPOS-00203, SRG-OS-000462-GPOS-00206, SRG-OS-000463-GPOS-00207, SRG-OS-000471-GPOS-00215, SRG-OS-000474-GPOS-00219, SRG-OS-000466-GPOS-00210, SRG-OS-000064-GPOS-00033</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230413" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271537" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000550 - OL 9 must audit all uses of the chage command.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000468-GPOS-00212, SRG-OS-000471-GPOS-00215</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230418" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271538" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000555 - OL 9 must audit all uses of the chcon command.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	When a user logs on, the auid is set to the uid of the account that is being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000468-GPOS-00212, SRG-OS-000471-GPOS-00215, SRG-OS-000463-GPOS-00207, SRG-OS-000465-GPOS-00209</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230419" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271539" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000560 - OL 9 must audit all uses of the setfacl command.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230435" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271540" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000565 - OL 9 must audit all uses of the chsh command.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230448" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271541" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000570 - OL 9 must audit all uses of the crontab command.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230447" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271542" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000575 - OL 9 must audit all uses of the gpasswd command.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230444" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271543" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000580 - OL 9 must audit all uses of the newgrp command.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	When a user logs on, the auid is set to the uid of the account that is being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230437" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271544" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000585 - OL 9 must audit all uses of the pam_timestamp_check command.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230436" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271545" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000590 - OL 9 must audit all uses of the passwd command.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230422" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271546" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000595 - OL 9 must audit all uses of the postdrop command.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped however, by combining system calls into one rule whenever possible.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230427" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271547" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000600 - OL 9 must audit all uses of the postqueue command.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230428" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271548" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000605 - OL 9 must audit all uses of the ssh-agent command.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230421" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271549" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000610 - OL 9 must audit all uses of the ssh-keysign command.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230434" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271550" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000615 - OL 9 must audit all uses of the sudoedit command.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:238278" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271551" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000620 - OL 9 must audit all uses of the unix_chkpwd command.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230433" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271552" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000625 - OL 9 must audit all uses of the userhelper command.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230431" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271553" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000630 - OL 9 must audit all uses of the mount command.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	When a user logs on, the auid is set to the uid of the account that is being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230423" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271554" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000635 - OL 9 must audit all uses of the truncate, ftruncate, creat, open, openat, and open_by_handle_at system calls.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000064-GPOS-00033, SRG-OS-000458-GPOS-00203, SRG-OS-000461-GPOS-00205</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230449" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271555" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000640 - OL 9 must audit all uses of the chmod, fchmod, and fchmodat system calls.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000064-GPOS-00033, SRG-OS-000466-GPOS-00210, SRG-OS-000458-GPOS-00203</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230456" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271556" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000645 - OL 9 must audit all uses of the chown, fchown, fchownat, and lchown system calls.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000064-GPOS-00033, SRG-OS-000466-GPOS-00210, SRG-OS-000458-GPOS-00203, SRG-OS-000474-GPOS-00219</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230455" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271557" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000650 - OL 9 must audit all uses of the semanage command.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000463-GPOS-00207, SRG-OS-000465-GPOS-00209</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230429" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271558" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000655 - OL 9 must audit all uses of the setfiles command.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000463-GPOS-00207, SRG-OS-000465-GPOS-00209</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230430" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271559" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000660 - OL 9 must audit all uses of the setsebool command.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000463-GPOS-00207, SRG-OS-000465-GPOS-00209</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230432" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271560" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000665 - OL 9 must audit all uses of the chacl command.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000466-GPOS-00210</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230464" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271561" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000670 - OL 9 must audit all uses of the sudo command.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000466-GPOS-00210</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230462" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271562" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000675 - OL 9 must audit all uses of the usermod command.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit record specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000466-GPOS-00210</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230463" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271563" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000680 - OL 9 must audit all uses of the rename, unlink, rmdir, renameat, and unlinkat system calls.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000466-GPOS-00210, SRG-OS-000467-GPOS-00211, SRG-OS-000468-GPOS-00212</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230439" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271564" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000685 - OL 9 must audit all uses of the delete_module system call.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000471-GPOS-00216, SRG-OS-000477-GPOS-00222</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230446" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271565" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000690 - OL 9 must audit all uses of the init_module and finit_module system calls.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000471-GPOS-00216, SRG-OS-000477-GPOS-00222</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230438" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271566" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000695 - OL 9 must audit all uses of the kmod command.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000471-GPOS-00216, SRG-OS-000477-GPOS-00222</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230465" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271567" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000700 - OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /var/log/lastlog.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000473-GPOS-00218, SRG-OS-000470-GPOS-00214</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230467" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271568" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000705 - OL 9 must audit all uses of umount system calls.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	When a user logs on, the auid is set to the uid of the account being authenticated. Daemons are not user sessions and have the loginuid set to -1. The auid representation is an unsigned 32-bit integer, which equals 4294967295. The audit system interprets -1, 4294967295, and "unset" in the same way.
+
+	The system call rules are loaded into a matching engine that intercepts each system call made by all programs on the system. Therefore, it is very important to use system call rules only when absolutely necessary since these affect performance. The more rules, the bigger the performance hit. The performance can be helped, however, by combining system calls into one rule whenever possible.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230424" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271569" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000710 - OL 9 must use cryptographic mechanisms to protect the integrity of audit tools.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Protecting the integrity of the tools used for auditing purposes is a critical step toward ensuring the integrity of audit information. Audit information includes all information (e.g., audit records, audit settings, and audit reports) needed to successfully audit information system activity.
+
+	Audit tools include, but are not limited to, vendor-provided and open-source audit tools needed to successfully view and manipulate audit information system activity and records. Audit tools include custom queries and report generators.
+
+	It is not uncommon for attackers to replace the audit tools or inject code into the existing tools to provide the capability to hide or erase system activity from the audit logs.
+
+	To address this risk, audit tools must be cryptographically signed to provide the capability to identify when the audit tools have been modified, manipulated, or replaced. An example is a checksum hash of the file or files.
+
+	Satisfies: SRG-OS-000256-GPOS-00097, SRG-OS-000257-GPOS-00098, SRG-OS-000258-GPOS-00099, SRG-OS-000278-GPOS-00108</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230475" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271570" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000715 - OL 9 must audit uses of the execve system call.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Misuse of privileged functions, either intentionally or unintentionally by authorized users, or by unauthorized external entities that have compromised information system accounts, is a serious and ongoing concern and can have significant adverse impacts on organizations. Auditing the use of privileged functions is one way to detect such misuse and identify the risk from insider threats and the advanced persistent threat.
+
+	Satisfies: SRG-OS-000326-GPOS-00126, SRG-OS-000327-GPOS-00127, SRG-OS-000755-GPOS-00220</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230386" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271571" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000720 - OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /var/log/faillock.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Satisfies: SRG-OS-000392-GPOS-00172, SRG-OS-000470-GPOS-00214, SRG-OS-000473-GPOS-00218</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258224" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271572" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000725 - OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /var/log/tallylog.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	Satisfies: SRG-OS-000392-GPOS-00172, SRG-OS-000470-GPOS-00214, SRG-OS-000473-GPOS-00218</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:238285" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271573" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000730 - OL 9 must be configured so that successful/unsuccessful uses of the init command generate an audit record.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Misuse of the init command may cause availability issues for the system.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258211" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271574" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000735 - OL 9 must be configured so that successful/unsuccessful uses of the poweroff command generate an audit record.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Misuse of the poweroff command may cause availability issues for the system.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258212" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271575" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000740 - OL 9 must be configured so that successful/unsuccessful uses of the reboot command generate an audit record.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Misuse of the reboot command may cause availability issues for the system.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258213" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271576" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000745 - OL 9 must be configured so that successful/unsuccessful uses of the shutdown command generate an audit record.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Misuse of the shutdown command may cause availability issues for the system.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258214" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271577" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000750 - OL 9 must enable auditing of processes that start prior to the audit daemon.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without the capability to generate audit records, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	If auditing is enabled late in the startup process, the actions of some startup processes may not be audited. Some audit systems also maintain state information only available if auditing is enabled before a given process is created.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215, SRG-OS-000473-GPOS-00218, SRG-OS-000254-GPOS-00095</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230468" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271578" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000755 - OL 9 must label all offloaded audit logs before sending them to the central log server.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Enriched logging is needed to determine who, what, and when events occur on a system. Without this, determining root cause of an event will be much more difficult.
+
+	When audit logs are not labeled before they are sent to a central log server, the audit data will not be able to be analyzed and tied back to the correct system.
+
+	Satisfies: SRG-OS-000039-GPOS-00017, SRG-OS-000342-GPOS-00133, SRG-OS-000479-GPOS-00224</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230394" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271579" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000760 - OL 9 audit system must take appropriate action when an error writing to the audit storage volume occurs.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>It is critical that when the operating system is at risk of failing to process audit logs as required, it takes action to mitigate the failure. Audit processing failures include software/hardware errors; failures in the audit capturing mechanisms; and audit storage capacity being reached or exceeded. Responses to audit failure depend upon the nature of the failure mode.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230390" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271580" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000765 - OL 9 audit system must take appropriate action when the audit storage volume is full.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>It is critical that when the operating system is at risk of failing to process audit logs as required, it takes action to mitigate the failure. Audit processing failures include software/hardware errors; failures in the audit capturing mechanisms; and audit storage capacity being reached or exceeded. Responses to audit failure depend upon the nature of the failure mode.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230392" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271581" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000770 - OL 9 audit system must take appropriate action when the audit files have reached maximum size.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>It is critical that when the operating system is at risk of failing to process audit logs as required, it takes action to mitigate the failure. Audit processing failures include software/hardware errors; failures in the audit capturing mechanisms; and audit storage capacity being reached or exceeded. Responses to audit failure depend upon the nature of the failure mode.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258160" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271582" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000775 - OL 9 must periodically flush audit records to disk to prevent the loss of audit records.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>If option "freq" is not set to a value that requires audit records being written to disk after a threshold number is reached, then audit records may be lost.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258168" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271583" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000785 - OL 9 audit logs must be group-owned by root or by a restricted logging group to prevent unauthorized read access.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Unauthorized disclosure of audit records can reveal system and configuration data to attackers, thus compromising its confidentiality.
+
+	Satisfies: SRG-OS-000057-GPOS-00027, SRG-OS-000058-GPOS-00028, SRG-OS-000059-GPOS-00029, SRG-OS-000206-GPOS-00084</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230398" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271584" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000790 - OL 9 audit log directory must be owned by root to prevent unauthorized read access.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Unauthorized disclosure of audit records can reveal system and configuration data to attackers, thus compromising its confidentiality.
+
+	Satisfies: SRG-OS-000057-GPOS-00027, SRG-OS-000058-GPOS-00028, SRG-OS-000059-GPOS-00029, SRG-OS-000206-GPOS-00084</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230399" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271585" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000795 - OL 9 audit logs file must have mode 0600 or less permissive to prevent unauthorized access to the audit log.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state or can identify the OL 9 system or platform. Additionally, Personally Identifiable Information (PII) and operational information must not be revealed through error messages to unauthorized personnel or their designated representatives.
+
+	The structure and content of error messages must be carefully considered by the organization and development team. The extent to which the information system is able to identify and handle error conditions is guided by organizational policy and operational requirements.
+
+	Satisfies: SRG-OS-000057-GPOS-00027, SRG-OS-000058-GPOS-00028, SRG-OS-000059-GPOS-00029, SRG-OS-000206-GPOS-00084</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230396" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271586" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000800 - OL 9 audit system must audit local events.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without establishing what type of events occurred, the source of events, where events occurred, and the outcome of events, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.
+
+	If option "local_events" isn't set to "yes" only events from network will be aggregated.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230393" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271587" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000805 - OL 9 must allow only the information system security manager (ISSM) (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without the capability to restrict the roles and individuals that can select which events are audited, unauthorized personnel may be able to prevent the auditing of critical events. Misconfigured audits may degrade the system's performance by overwhelming the audit log. Misconfigured audits may also make it more difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230471" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271588" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000810 - OL 9 /etc/audit/auditd.conf file must have 0640 or less permissive to prevent unauthorized access.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without the capability to restrict the roles and individuals that can select which events are audited, unauthorized personnel may be able to prevent the auditing of critical events. Misconfigured audits may degrade the system's performance by overwhelming the audit log. Misconfigured audits may also make it more difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258172" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271589" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000815 - OL 9 must forward mail from postmaster to the root account using a postfix alias.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>It is critical for the appropriate personnel to be aware if a system is at risk of failing to process audit logs as required. Without this notification, the security personnel may be unaware of an impending failure of the audit capability, and system operation may be adversely affected.
+
+	Audit processing failures include software/hardware errors, failures in the audit capturing mechanisms, and audit storage capacity being reached or exceeded.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230389" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271590" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000820 - OL 9 must take appropriate action when a critical audit processing failure occurs.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>It is critical for the appropriate personnel to be aware if a system is at risk of failing to process audit logs as required. Without this notification, the security personnel may be unaware of an impending failure of the audit capability, and system operation may be adversely affected.
+
+	Audit processing failures include software/hardware errors, failures in the audit capturing mechanisms, and audit storage capacity being reached or exceeded.
+
+	Satisfies: SRG-OS-000046-GPOS-00022, SRG-OS-000343-GPOS-00135</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258227" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271591" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000825 - The OL 9 system administrator (SA) and/or information system security officer (ISSO) (at a minimum) must be alerted of an audit processing failure event.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>It is critical for the appropriate personnel to be aware if a system is at risk of failing to process audit logs as required. Without this notification, the security personnel may be unaware of an impending failure of the audit capability, and system operation may be adversely affected.
+
+	Audit processing failures include software/hardware errors, failures in the audit capturing mechanisms, and audit storage capacity being reached or exceeded.
+
+	This requirement applies to each audit data storage repository (i.e., distinct information system component where audit records are stored), the centralized audit storage capacity of organizations (i.e., all audit data storage repositories combined), or both.
+
+	Satisfies: SRG-OS-000046-GPOS-00022, SRG-OS-000343-GPOS-00134</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230388" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271592" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000830 - OL 9 must allocate an audit_backlog_limit of sufficient size to capture processes that start prior to the audit daemon.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without the capability to generate audit records, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	If auditing is enabled late in the startup process, the actions of some startup processes may not be audited. Some audit systems also maintain state information only available if auditing is enabled before a given process is created.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	Allocating an audit_backlog_limit of sufficient size is critical in maintaining a stable boot process. With an insufficient limit allocated, the system is susceptible to boot failures and crashes.
+
+	Satisfies: SRG-OS-000254-GPOS-00095, SRG-OS-000341-GPOS-00132</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230469" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271593" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000835 - OL 9 must produce audit records containing information to establish the identity of any individual or process associated with the event.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without establishing what type of events occurred, the source of events, where events occurred, and the outcome of events, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.
+
+	Audit record content that may be necessary to satisfy this requirement includes, for example, time stamps, source and destination addresses, user/process identifiers, event descriptions, success/fail indications, filenames involved, and access control or flow control rules invoked.
+
+	Enriched logging aids in making sense of who, what, and when events occur on a system. Without this, determining root cause of an event will be much more difficult.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230395" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271594" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000840 - OL 9 must be configured so that successful/unsuccessful uses of the umount system call generate an audit record.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The changing of file permissions could indicate that a user is attempting to gain access to information that would otherwise be disallowed. Auditing DAC modifications can facilitate the identification of patterns of abuse among both authorized and unauthorized users.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258215" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271595" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000845 - OL 9 must be configured so that successful/unsuccessful uses of the umount2 system call generate an audit record.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The changing of file permissions could indicate that a user is attempting to gain access to information that would otherwise be disallowed. Auditing discretionary access control (DAC) modifications can facilitate the identification of patterns of abuse among both authorized and unauthorized users.
+
+	Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258216" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271596" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000850 - OL 9 must allocate audit record storage capacity to store at least one week's worth of audit records.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>To ensure OL 9 systems have a sufficient storage capacity in which to write the audit logs, OL 9 needs to be able to allocate audit record storage capacity.
+
+	The task of allocating audit record storage capacity is usually performed during initial installation of OL 9.
+
+	Satisfies: SRG-OS-000341-GPOS-00132, SRG-OS-000342-GPOS-00133</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258155" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271597" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000855 - OL 9 must be configured to offload audit records onto a different system from the system being audited via syslog.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The auditd service does not include the ability to send audit records to a centralized server for management directly. However, it can use a plug-in for audit event multiplexor (audispd) to pass audit records to the local syslog server.
+
+	Satisfies: SRG-OS-000342-GPOS-00133, SRG-OS-000479-GPOS-00224</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258145" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271598" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000860 - OL 9 must take appropriate action when the internal event queue is full.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The audit system should have an action setup in the event the internal event queue becomes full so that no data is lost. Information stored in one location is vulnerable to accidental or incidental deletion or alteration.
+
+	Offloading is a common process in information systems with limited audit storage capacity.
+
+	Satisfies: SRG-OS-000342-GPOS-00133, SRG-OS-000479-GPOS-00224</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230480" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271599" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-000865 - OL 9 must take action when allocated audit record storage volume reaches 75 percent of the repository maximum audit record storage capacity.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>If security personnel are not notified immediately when storage volume reaches a maximum of 75 percent utilization, they are unable to plan for audit record storage capacity expansion. The notification can be set to trigger at lower utilization thresholds at the ISSO's discretion.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230483" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271600" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-000870 - OL 9 must notify the system administrator (SA) and information system security officer (ISSO) (at a minimum) when allocated audit record storage volume reaches 75 percent utilization.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>If security personnel are not notified immediately when storage volume reaches a maximum of 75 percent utilization, they are unable to plan for audit record storage capacity expansion. The notification can be set to trigger at lower utilization thresholds at the ISSO's discretion.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244543" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271601" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000875 - OL 9 must take action when allocated audit record storage volume reaches 95 percent of the audit record storage capacity.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>If action is not taken when storage volume reaches 95 percent utilization, the auditing system may fail when the storage volume reaches capacity.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258158" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271602" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000880 - OL 9 must write audit records to disk.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Audit data should be synchronously written to disk to ensure log integrity. This setting ensures that all audit event data is written disk.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258170" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271603" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000885 - OL 9 must act when allocated audit record storage volume reaches 95 percent of the repository maximum audit record storage capacity.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>If action is not taken when storage volume reaches 95 percent utilization, the auditing system may fail when the storage volume reaches capacity.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258159" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271607" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000925 - OL 9 must enable certificate-based smart card authentication.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without the use of multifactor authentication (MFA), the ease of access to privileged functions is greatly increased. Multifactor authentication requires using two or more factors to achieve authentication. A privileged account is defined as an information system account with authorizations of a privileged user. The DOD Common Access Card (CAC) with DOD-approved PKI is an example of multifactor authentication.
+
+	Satisfies: SRG-OS-000375-GPOS-00160, SRG-OS-000105-GPOS-00052</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258122" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271608" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000930 - OL 9 must implement certificate status checking for multifactor authentication (MFA).</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Using an authentication device, such as a DOD Common Access Card (CAC) or token that is separate from the information system, ensures that even if the information system is compromised, credentials stored on the authentication device will not be affected.
+
+	Multifactor solutions that require devices separate from information systems gaining access include, for example, hardware tokens providing time-based or challenge-response authenticators and smart cards such as the U.S. Government Personal Identity Verification (PIV) card and the DOD CAC.
+
+	OL 9 includes multiple options for configuring certificate status checking, but for this requirement focuses on the System Security Services Daemon (SSSD). By default, SSSD performs Online Certificate Status Protocol (OCSP) checking and certificate verification using a sha256 digest function.
+
+	Satisfies: SRG-OS-000375-GPOS-00160, SRG-OS-000377-GPOS-00162</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258123" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271609" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000935 - OL 9 must prohibit the use of cached authenticators after one day.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>If cached authentication information is out-of-date, the validity of the authentication information may be questionable.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230376" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271610" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-000940 - OL 9 must use the CAC smart card driver.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Smart card login provides two-factor authentication stronger than that provided by a username and password combination. Smart cards leverage public key infrastructure to provide and verify credentials. Configuring the smart card driver in use by the organization helps to prevent users from using unauthorized smart cards.
+
+	Satisfies: SRG-OS-000104-GPOS-00051, SRG-OS-000106-GPOS-00053, SRG-OS-000107-GPOS-00054, SRG-OS-000109-GPOS-00056, SRG-OS-000108-GPOS-00055, SRG-OS-000112-GPOS-00057, SRG-OS-000113-GPOS-00058</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258121" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271611" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-001000 - OL 9 must ensure the password complexity module is enabled in the system-auth file.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Enabling PAM password complexity permits enforcement of strong passwords and consequently makes the system less prone to dictionary attacks.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:251713" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271612" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-001001 - OL 9 must ensure the password complexity module in the system-auth file is configured for three retries or less.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. "pwquality" enforces complex password construction configuration and has the ability to limit brute-force attacks on the system.
+
+	OL 9 uses "pwquality" as a mechanism to enforce password complexity. This is set in both:
+	/etc/pam.d/password-auth
+	/etc/pam.d/system-auth
+
+	By limiting the number of attempts to meet the pwquality module complexity requirements before returning with an error, the system will audit abnormal attempts at password changes.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:251714" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271613" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-001005 - OL 9 must enforce password complexity by requiring that at least one uppercase character be used.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. Password complexity is one factor of several that determines how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised. Requiring a minimum number of uppercase characters makes password guessing attacks more difficult by ensuring a larger search space.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230357" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271614" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-001010 - OL 9 must ensure the password complexity module is enabled in the password-auth file.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Enabling PAM password complexity permits enforcement of strong passwords and consequently makes the system less prone to dictionary attacks.
+
+	Satisfies: SRG-OS-000069-GPOS-00037, SRG-OS-000070-GPOS-00038</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230356" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271615" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-001015 - OL 9 must enforce password complexity by requiring that at least one lowercase character be used.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. 
+
+	Password complexity is one factor of several that determines how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised. Requiring a minimum number of lowercase characters makes password guessing attacks more difficult by ensuring a larger search space.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230358" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271616" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-001020 - OL 9 must enforce password complexity by requiring that at least one numeric character be used.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+	Password complexity is one factor of several that determines how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised. Requiring digits makes password guessing attacks more difficult by ensuring a larger search space.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230359" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271617" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-001025 - OL 9 must require the change of at least eight characters when passwords are changed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. 
+
+	Password complexity is one factor of several that determines how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised. Requiring a minimum number of different characters during password changes ensures that newly changed passwords will not resemble previously compromised ones. Note that passwords changed on compromised systems will still be compromised.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230363" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271618" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-001030 - OL 9 must require the maximum number of repeating characters of the same character class be limited to four when passwords are changed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+	Password complexity is one factor of several that determines how long it takes to crack a password. The more complex a password, the greater the number of possible combinations that need to be tested before the password is compromised.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230360" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271619" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-001035 - OL 9 must require the maximum number of repeating characters be limited to three when passwords are changed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+	Password complexity is one factor of several that determines how long it takes to crack a password. The more complex a password, the greater the number of possible combinations that need to be tested before the password is compromised.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230361" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271620" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-001040 - OL 9 must require the change of at least four character classes when passwords are changed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+	Password complexity is one factor of several that determines how long it takes to crack a password. The more complex a password, the greater the number of possible combinations that need to be tested before the password is compromised.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230362" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271621" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-001045 - OL 9 must enforce password complexity rules for the root account.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+	Password complexity is one factor of several that determines how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised.
+
+	Satisfies: SRG-OS-000072-GPOS-00040, SRG-OS-000071-GPOS-00039, SRG-OS-000070-GPOS-00038, SRG-OS-000266-GPOS-00101, SRG-OS-000078-GPOS-00046, SRG-OS-000480-GPOS-00225, SRG-OS-000069-GPOS-00037</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258101" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271622" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-001050 - OL 9 must be configured so that user and group account administration utilities are configured to store only encrypted representations of passwords.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Passwords need to be protected at all times, and encryption is the standard method for protecting passwords. If passwords are not encrypted, they can be plainly read (i.e., clear text) and easily compromised. Passwords that are encrypted with a weak algorithm are no more protected than if they are kept in plain text.
+
+	This setting ensures user and group account administration utilities are configured to store only encrypted representations of passwords. Additionally, the "crypt_style" configuration option ensures the use of a strong hashing algorithm that makes password cracking attacks more difficult.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:204417" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271623" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-001055 - OL 9 must be configured to use the shadow file to store only encrypted representations of passwords.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Passwords need to be protected at all times, and encryption is the standard method for protecting passwords. If passwords are not encrypted, they can be plainly read (i.e., clear text) and easily compromised. Passwords that are encrypted with a weak algorithm are no more protected than if they are kept in plain text.
+
+	This setting ensures user and group account administration utilities are configured to store only encrypted representations of passwords. Additionally, the "crypt_style" configuration option ensures the use of a strong hashing algorithm that makes password cracking attacks more difficult.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230231" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271624" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-001060 - OL 9 pam_unix.so module must be configured in the password-auth file to use a FIPS 140-3 approved cryptographic hashing algorithm for system authentication.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Unapproved mechanisms that are used for authentication to the cryptographic module are not verified and therefore, cannot be relied upon to provide confidentiality or integrity, and DOD data may be compromised.
+
+	OL 9 systems using encryption are required to use FIPS-compliant mechanisms for authenticating to cryptographic modules. 
+
+	FIPS 140-3 is the current standard for validating that mechanisms used to access cryptographic modules use authentication that meets DOD requirements. This allows for Security Levels 1, 2, 3, or 4 for use on a general-purpose computing system.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230237" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271625" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-001065 - OL 9 password-auth must be configured to use a sufficient number of hashing rounds.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Passwords need to be protected at all times, and encryption is the standard method for protecting passwords. If passwords are not encrypted, they can be plainly read (i.e., clear text) and easily compromised. Passwords that are encrypted with a weak algorithm are no more protected than if they are kept in plain text.
+
+	Using more hashing rounds makes password cracking attacks more difficult.
+
+	Satisfies: SRG-OS-000073-GPOS-00041, SRG-OS-000120-GPOS-00061</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258099" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271626" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-001070 - OL 9 system-auth must be configured to use a sufficient number of hashing rounds.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Passwords need to be protected at all times, and encryption is the standard method for protecting passwords. If passwords are not encrypted, they can be plainly read (i.e., clear text) and easily compromised. Passwords that are encrypted with a weak algorithm are no more protected than if they are kept in plain text.
+
+	Using more hashing rounds makes password cracking attacks more difficult.
+
+	Satisfies: SRG-OS-000073-GPOS-00041, SRG-OS-000120-GPOS-00061</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258100" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271627" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-001075 - OL 9 shadow password suite must be configured to use a sufficient number of hashing rounds.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Passwords need to be protected at all times, and encryption is the standard method for protecting passwords. If passwords are not encrypted, they can be plainly read (i.e., clear text) and easily compromised. Passwords that are encrypted with a weak algorithm are no more protected than if they are kept in plain text.
+
+	Using more hashing rounds makes password cracking attacks more difficult.
+
+	Satisfies: SRG-OS-000073-GPOS-00041, SRG-OS-000120-GPOS-00061</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230233" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271628" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-001080 - OL 9 must employ FIPS 140-3 approved cryptographic hashing algorithms for all stored passwords.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The system must use a strong hashing algorithm to store the password.
+
+	Passwords need to be protected at all times, and encryption is the standard method for protecting passwords. If passwords are not encrypted, they can be plainly read (i.e., clear text) and easily compromised.
+
+	Satisfies: SRG-OS-000073-GPOS-00041, SRG-OS-000120-GPOS-00061</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230232" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271629" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-001085 - OL 9 passwords for new users or password changes must have a 24-hour minimum password lifetime restriction in /etc/login.defs.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Enforcing a minimum password lifetime helps to prevent repeated password changes to defeat the password reuse or history enforcement requirement. If users are allowed to immediately and continually change their password, then the password could be repeatedly changed in a short period of time to defeat the organization's policy regarding password reuse.
+
+	Setting the minimum password age protects against users cycling back to a favorite password after satisfying the password reuse requirement.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230365" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271630" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-001090 - OL 9 passwords must have a 24-hour minimum password lifetime restriction in /etc/shadow.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Enforcing a minimum password lifetime helps to prevent repeated password changes to defeat the password reuse or history enforcement requirement. If users are allowed to immediately and continually change their password, the password could be repeatedly changed in a short period of time to defeat the organization's policy regarding password reuse.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230364" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271631" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-001095 - OL 9 user account passwords for new users or password changes must have a 60-day maximum password lifetime restriction in /etc/login.defs.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Any password, no matter how complex, can eventually be cracked; therefore, passwords need to be changed periodically. If the operating system does not limit the lifetime of passwords and force users to change their passwords, there is the risk that the operating system passwords could be compromised.
+
+	Setting the password maximum age ensures users are required to periodically change their passwords. Requiring shorter password lifetimes increases the risk of users writing down the password in a convenient location subject to physical compromise.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258041" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271632" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-001100 - OL 9 user account passwords must have a 60-day maximum password lifetime restriction.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Any password, no matter how complex, can eventually be cracked; therefore, passwords need to be changed periodically. If OL 9 does not limit the lifetime of passwords and force users to change their passwords, there is the risk that OL 9 passwords could be compromised.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230367" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271633" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-001105 - OL 9 passwords must be created with a minimum of 15 characters.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The shorter the password, the lower the number of possible combinations that need to be tested before the password is compromised.
+
+	Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. Password length is one factor of several that helps to determine strength and how long it takes to crack a password. Use of more characters in a password helps to increase exponentially the time and/or resources required to compromise the password.
+
+	OL 9 uses "pwquality" as a mechanism to enforce password complexity. Configurations are set in the "etc/security/pwquality.conf" file.
+
+	The "minlen", sometimes noted as minimum length, acts as a "score" of complexity based on the credit components of the "pwquality" module. By setting the credit components to a negative value, not only will those components be required, but they will not count toward the total "score" of "minlen". This will enable "minlen" to require a 15-character minimum.
+
+	The DOD minimum password requirement is 15 characters.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230369" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271634" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-001110 - OL 9 must not allow blank or null passwords.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>If an account has an empty password, anyone could log in and run commands with the privileges of that account. Accounts with empty passwords should never be used in operational environments.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244540" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244541" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271635" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-001115 - OL 9 must require a boot loader superuser password.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DOD-approved PKIs, all DOD systems (e.g., web servers and web portals) must be properly configured to incorporate access control methods that do not rely solely on the possession of a certificate for access. Successful authentication must not automatically give an entity access to an asset or security boundary. Authorization procedures and controls must be implemented to ensure each authenticated entity also has a validated and current authorization. Authorization is the process of determining whether an entity, once authenticated, is permitted to access a specific asset. Information systems use access control policies and enforcement mechanisms to implement this requirement.
+
+	Password protection on the boot loader configuration ensures users with physical access cannot trivially alter important bootloader settings. These include which kernel to use, and whether to enter single-user mode.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257787" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271636" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-001120 - OL 9 must enforce password complexity by requiring that at least one special character be used.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. Password complexity is one factor of several that determines how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised. OL 9 uses "pwquality" as a mechanism to enforce password complexity. Note that to require special characters without degrading the "minlen" value, the credit value must be expressed as a negative number in "/etc/security/pwquality.conf".</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230375" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271637" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-001125 - OL 9 must prevent the use of dictionary words for passwords.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. If OL 9 allows the user to select passwords based on dictionary words, this increases the chances of password compromise by increasing the opportunity for successful guesses, and brute-force attacks.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230377" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271638" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-001130 - OL 9 must not have accounts configured with blank or null passwords.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>If an account has an empty password, anyone could log in and run commands with the privileges of that account. Accounts with empty passwords should never be used in operational environments.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:251706" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271639" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002000 - OL 9 file system automount function must be disabled unless required.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>An authentication process resists replay attacks if it is impractical to achieve a successful authentication by recording and replaying a previous authentication message.
+
+	Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230502" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271641" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002011 - OL 9 must prevent special devices on file systems that are imported via Network File System (NFS).</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230307" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271642" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002012 - OL 9 must prevent code from being executed on file systems that are imported via Network File System (NFS).</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "noexec" mount option causes the system not to execute binary files. This option must be used for mounting any file system not containing approved binary as they may be incompatible. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230306" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271643" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002013 - OL 9 must prevent files with the setuid and setgid bit set from being executed on file systems that are imported via Network File System (NFS).</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "nosuid" mount option causes the system not to execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230308" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271647" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002030 - OL 9 must mount /boot with the nodev option.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The only legitimate location for device files is the "/dev" directory located on the root partition. The only exception to this is chroot jails.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257860" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271648" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002031 - OL 9 must prevent files with the setuid and setgid bit set from being executed on the /boot directory.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "nosuid" mount option causes the system not to execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230300" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271649" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002032 - OL 9 must prevent files with the setuid and setgid bit set from being executed on the /boot/efi directory.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "nosuid" mount option causes the system not to execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244530" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271650" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002040 - OL 9 must mount /dev/shm with the nodev option.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The nodev mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
+
+	The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230508" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271651" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002041 - OL 9 must mount /dev/shm with the noexec option.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The noexec mount option causes the system to not execute binary files. This option must be used for mounting any file system not containing approved binary files, as they may be incompatible. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230510" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271652" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002042 - OL 9 must mount /dev/shm with the nosuid option.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "nosuid" mount option causes the system to not execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230509" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271653" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002050 - OL 9 must mount /tmp with the nodev option.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
+
+	The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230511" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271654" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002051 - OL 9 must mount /tmp with the noexec option.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "noexec" mount option causes the system to not execute binary files. This option must be used for mounting any file system not containing approved binary files, as they may be incompatible. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257867" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271655" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002052 - OL 9 must mount /tmp with the nosuid option.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "nosuid" mount option causes the system to not execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230512" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271656" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002060 - OL 9 must mount /var with the nodev option.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
+
+	The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257869" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271657" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002061 - OL 9 must mount /var/log with the nodev option.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
+
+	The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230514" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271658" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002062 - OL 9 must mount /var/log with the noexec option.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "noexec" mount option causes the system to not execute binary files. This option must be used for mounting any file system not containing approved binary files, as they may be incompatible. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230516" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271659" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002063 - OL 9 must mount /var/log with the nosuid option.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "nosuid" mount option causes the system to not execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230515" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271660" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002064 - OL 9 must mount /var/log/audit with the nodev option.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
+
+	The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230517" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271661" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002065 - OL 9 must mount /var/log/audit with the noexec option.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "noexec" mount option causes the system to not execute binary files. This option must be used for mounting any file system not containing approved binary files, as they may be incompatible. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230519" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271662" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002066 - OL 9 must mount /var/log/audit with the nosuid option.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "nosuid" mount option causes the system to not execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230518" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271663" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002067 - OL 9 must mount /var/tmp with the nodev option.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
+
+	The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230520" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271664" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002068 - OL 9 must mount /var/tmp with the noexec option.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "noexec" mount option causes the system to not execute binary files. This option must be used for mounting any file system not containing approved binary files, as they may be incompatible. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230522" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271665" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002069 - OL 9 must mount /var/tmp with the nosuid option.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "nosuid" mount option causes the system to not execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230521" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271666" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002070 - OL 9 must prevent device files from being interpreted on file systems that contain user home directories.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
+
+	The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257850" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271667" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002071 - OL 9 must prevent files with the setuid and setgid bit set from being executed on file systems that contain user home directories.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "nosuid" mount option causes the system to not execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230299" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271668" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002072 - OL 9 must prevent code from being executed on file systems that contain user home directories.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The noexec mount option causes the system to not execute binary files. This option must be used for mounting any file system not containing approved binary files, as they may be incompatible. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257852" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271669" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002080 - OL 9 must prevent special devices on nonroot local partitions.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
+
+	The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230301" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271670" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002100 - OL 9 must disable the graphical user interface automount function unless required.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Automatically mounting file systems permits easy introduction of unknown devices, thereby facilitating malicious activity.
+
+	Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258014" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271678" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002120 - OL 9 must prevent a user from overriding the disabling of the graphical user interface automount function.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>A nonprivileged account is any operating system account with authorizations of a nonprivileged user.
+
+	Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258015" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271679" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002121 - OL 9 must prevent a user from overriding the disabling of the graphical user interface autorun function.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Techniques used to address this include protocols using nonces (e.g., numbers generated for a specific one-time use) or challenges (e.g., TLS, WS_Security). Additional techniques include time-synchronous or challenge-response one-time authenticators.
+
+	Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258017" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271680" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002122 - OL 9 must prevent a user from overriding the banner-message-enable setting for the graphical user interface.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Display of a standardized and approved use notification before granting access to the operating system ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+	For U.S. government systems, system use notifications are required only for access via login interfaces with human users and are not required when such human interfaces do not exist.
+
+	Satisfies: SRG-OS-000023-GPOS-00006, SRG-OS-000228-GPOS-00088</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258013" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271681" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002123 - OL 9 must prevent a user from overriding the screensaver lock-enabled setting for the graphical user interface.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>A session time-out lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not log out because of the temporary nature of the absence. Rather than relying on the user to manually lock their operating system session prior to vacating the vicinity, operating systems need to be able to identify when a user's session has idled and take action to initiate the session lock.
+
+	The session lock is implemented at the point where session activity can be determined and/or controlled.
+
+	Implementing session settings will have little value if a user is able to manipulate these settings from the defaults prescribed in the other requirements of this implementation guide.
+
+	Satisfies: SRG-OS-000028-GPOS-00009, SRG-OS-000030-GPOS-00011</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244539" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271682" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002124 - OL 9 must prevent a user from overriding the session idle-delay setting for the graphical user interface.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>A session time-out lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not logout because of the temporary nature of the absence. Rather than relying on the user to manually lock their operating system session prior to vacating the vicinity, the GNOME desktop can be configured to identify when a user's session has idled and take action to initiate the session lock. As such, users should not be allowed to change session settings.
+
+	Satisfies: SRG-OS-000029-GPOS-00010, SRG-OS-000031-GPOS-00012</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244538" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271683" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002125 - OL 9 must prevent a user from overriding the session lock-delay setting for the graphical user interface.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>A session time-out lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not logout because of the temporary nature of the absence. Rather than relying on the user to manually lock their operating system session prior to vacating the vicinity, the GNOME desktop can be configured to identify when a user's session has idled and take action to initiate the session lock. As such, users should not be allowed to change session settings.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258026" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271684" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002126 - OL 9 must prevent a user from overriding the disabling of the graphical user smart card removal action.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>A session lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not want to log out because of the temporary nature of the absence.
+
+	The session lock is implemented at the point where session activity can be determined. Rather than be forced to wait for a period of time to expire before the user session can be locked, OL 9 must provide users with the ability to manually invoke a session lock so users can secure their session if it is necessary to temporarily vacate the immediate physical vicinity.
+
+	Satisfies: SRG-OS-000028-GPOS-00009, SRG-OS-000030-GPOS-00011</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258020" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271685" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002127 - OL 9 must disable the ability of a user to restart the system from the login screen.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>A user who is at the console can reboot the system at the login screen. If restart or shutdown buttons are pressed at the login screen, this can create the risk of short-term loss of availability of systems due to reboot.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258029" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271686" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002128 - OL 9 must prevent a user from overriding the disable-restart-buttons setting for the graphical user interface.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>A user who is at the console can reboot the system at the login screen. If restart or shutdown buttons are pressed at the login screen, this can create the risk of short-term loss of availability of systems due to reboot.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258030" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271687" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002129 - OL 9 must prevent a user from overriding the Ctrl-Alt-Del sequence settings for the graphical user interface.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>A locally logged-in user who presses Ctrl-Alt-Del, when at the console, can reboot the system. If accidentally pressed, as could happen in the case of mixed OS environment, this can create the risk of short-term loss of availability of systems due to unintentional reboot.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258032" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271688" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002150 - OL 9 must be configured to enable the display of the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system via a graphical user logon.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Display of a standardized and approved use notification before granting access to the operating system ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+	For U.S. government systems, system use notifications are required only for access via login interfaces with human users and are not required when such human interfaces do not exist.
+
+	Satisfies: SRG-OS-000023-GPOS-00006, SRG-OS-000228-GPOS-00088</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244519" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271690" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002160 - OL 9 must be able to directly initiate a session lock for all connection types using smart card when the smart card is removed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>A session lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not want to log out because of the temporary nature of the absence.
+
+	The session lock is implemented at the point where session activity can be determined. Rather than be forced to wait for a period of time to expire before the user session can be locked, OL 9 needs to provide users with the ability to manually invoke a session lock so users can secure their session if it is necessary to temporarily vacate the immediate physical vicinity.
+
+	Satisfies: SRG-OS-000028-GPOS-00009, SRG-OS-000030-GPOS-00011</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230351" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271691" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002161 - OL 9 must not allow unattended or automatic logon via the graphical user interface.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Failure to restrict system access to authenticated users negatively impacts operating system security.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230329" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271693" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002301 - OL 9 must define default permissions for the bash shell.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The umask controls the default access mode assigned to newly created files. A umask of 077 limits new files to mode 600 or less permissive. Although umask can be represented as a four-digit number, the first digit representing special access modes is typically ignored or required to be "0". This requirement applies to the globally configured system defaults and the local interactive user defaults for each account on the system.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258072" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271694" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002302 - OL 9 must define default permissions for the c shell.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The umask controls the default access mode assigned to newly created files. A umask of 077 limits new files to mode 600 or less permissive. Although umask can be represented as a four-digit number, the first digit representing special access modes is typically ignored or required to be "0". This requirement applies to the globally configured system defaults and the local interactive user defaults for each account on the system.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258073" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271695" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002303 - OL 9 must define default permissions for the system default profile.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The umask controls the default access mode assigned to newly created files. A umask of 077 limits new files to mode 600 or less permissive. Although umask can be represented as a four-digit number, the first digit representing special access modes is typically ignored or required to be "0". This requirement applies to the globally configured system defaults and the local interactive user defaults for each account on the system.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258075" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271696" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002304 - OL 9 must define default permissions for all authenticated users in such a way that the user can only read and modify their own files.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Setting the most restrictive default permissions ensures that when new accounts are created, they do not have unnecessary access.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230383" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271697" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002320 - OL 9 must disable the chrony daemon from acting as a server.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Minimizing the exposure of the server functionality of the chrony daemon diminishes the attack surface.
+
+	Satisfies: SRG-OS-000096-GPOS-00050, SRG-OS-000095-GPOS-00049</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230485" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271698" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002321 - OL 9 must disable network management of the chrony daemon.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Not exposing the management interface of the chrony daemon on the network diminishes the attack space.
+
+	Satisfies: SRG-OS-000096-GPOS-00050, SRG-OS-000095-GPOS-00049</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230486" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271700" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002330 - OL 9 must enable Linux audit logging for the USBGuard daemon.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without the capability to generate audit records, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+
+	If auditing is enabled late in the startup process, the actions of some startup processes may not be audited. Some audit systems also maintain state information only available if auditing is enabled before a given process is created.
+
+	Audit records can be generated from various components within the information system (e.g., module or policy filter).
+
+	The list of audited events is the set of events for which audits are to be generated. This set of events is typically a subset of the list of all events for which the system is capable of generating audit records.
+
+	DOD has defined the list of events for which OL 9 will provide an audit record generation capability as the following:
+
+	1. Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, security levels, or categories of information (e.g., classification levels);
+
+	2. Access actions, such as successful and unsuccessful logon attempts, privileged activities or other system-level access, starting and ending time for user access to the system, concurrent logons from different workstations, successful and unsuccessful accesses to objects, all program initiations, and all direct access to the information system;
+
+	3. All account creations, modifications, disabling, and terminations; and 
+
+	4. All kernel module load, unload, and restart actions.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230470" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271703" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002340 - OL 9 must log SSH connection attempts and failures to the server.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>SSH provides several logging levels with varying amounts of verbosity. "DEBUG" is specifically not recommended other than strictly for debugging SSH communications since it provides so much data that it is difficult to identify important security information. "INFO" or "VERBOSE" level is the basic level that only records login activity of SSH users. In many situations, such as Incident Response, it is important to determine when a particular user was active on a system. The logout record can eliminate those users who disconnected, which helps narrow the field.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:234815" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271704" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002341 - OL 9 SSH daemon must not allow Generic Security Service Application Program Interface (GSSAPI) authentication.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>GSSAPI authentication is used to provide additional authentication mechanisms to applications. Allowing GSSAPI authentication through SSH exposes the system's GSSAPI to remote hosts, increasing the attack surface of the system.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244528" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271705" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002342 - OL 9 must force a frequent session key renegotiation for SSH connections to the server.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without protection of the transmitted information, confidentiality and integrity may be compromised because unprotected communications can be intercepted and either read or altered. 
+
+	This requirement applies to both internal and external networks and all types of information system components from which information can be transmitted (e.g., servers, mobile devices, notebook computers, printers, copiers, scanners, and facsimile machines). Communication paths outside the physical protection of a controlled boundary are exposed to the possibility of interception and modification. 
+
+	Protecting the confidentiality and integrity of organizational information can be accomplished by physical means (e.g., employing physical distribution systems) or by logical means (e.g., employing cryptographic techniques). If physical means of protection are employed, then logical means (cryptography) do not have to be employed, and vice versa.
+
+	Session key regeneration limits the chances of a session key becoming compromised.
+
+	Satisfies: SRG-OS-000423-GPOS-00187, SRG-OS-000033-GPOS-00014, SRG-OS-000424-GPOS-00188</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230527" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271706" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002343 - OL 9 SSHD must not allow blank passwords.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>If an account has an empty password, anyone could log on and run commands with the privileges of that account. Accounts with empty passwords should never be used in operational environments.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257984" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271707" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002344 - OL 9 must enable the Pluggable Authentication Module (PAM) interface for SSHD.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>When UsePAM is set to "yes", PAM runs through account and session types properly. This is important when restricted access to services based off of IP, time, or other factors of the account is needed. Additionally, this ensures users can inherit certain environment variables on login or disallow access to the server.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257986" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271708" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002345 - OL 9 must not permit direct logons to the root account using remote access via SSH.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Even though the communications channel may be encrypted, an additional layer of security is gained by extending the policy of not logging directly on as root. In addition, logging in with a user-specific account provides individual accountability of actions performed on the system and also helps to minimize direct attack attempts on root's password.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230296" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271709" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-002346 - OL 9 must be configured so that all network connections associated with SSH traffic terminate after becoming unresponsive.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Terminating an unresponsive SSH session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a management session enabled on the console or console port that has been left unattended. In addition, quickly terminating an idle SSH session will also free up resources committed by the managed network element.
+
+	Terminating network connections associated with communications sessions includes, for example, deallocating associated TCP/IP address/port pairs at the operating system level and deallocating networking assignments at the application level if multiple application sessions are using a single operating system-level network connection. This does not mean the operating system terminates all sessions or network access; it only ends the unresponsive session and releases the resources associated with that session.
+
+	OL 9 uses /etc/ssh/sshd_config for configurations of OpenSSH. Within the sshd_config, the product of the values of "ClientAliveInterval" and "ClientAliveCountMax" are used to establish the inactivity threshold. The "ClientAliveInterval" is a timeout interval in seconds, after which if no data has been received from the client, SSHD will send a message through the encrypted channel to request a response from the client. The "ClientAliveCountMax" is the number of client alive messages that may be sent without SSHD receiving any messages back from the client. If this threshold is met, sshd will disconnect the client. For more information on these settings and others, refer to the sshd_config man pages.
+
+	Satisfies: SRG-OS-000163-GPOS-00072, SRG-OS-000279-GPOS-00109</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271709" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271710" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002347 - OL 9 must be configured so that all network connections associated with SSH traffic are terminated after 10 minutes of becoming unresponsive.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Terminating an unresponsive SSH session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a management session enabled on the console or console port that has been left unattended. In addition, quickly terminating an idle SSH session will also free up resources committed by the managed network element.
+
+	Terminating network connections associated with communications sessions includes, for example, deallocating associated TCP/IP address/port pairs at the operating system level and deallocating networking assignments at the application level if multiple application sessions are using a single operating system-level network connection. This does not mean the operating system terminates all sessions or network access; it only ends the unresponsive session and releases the resources associated with that session.
+
+	OL 9 uses /etc/ssh/sshd_config for configurations of OpenSSH. Within the sshd_config, the product of the values of "ClientAliveInterval" and "ClientAliveCountMax" are used to establish the inactivity threshold. The "ClientAliveInterval" is a timeout interval in seconds, after which if no data has been received from the client, SSHD will send a message through the encrypted channel to request a response from the client. The "ClientAliveCountMax" is the number of client alive messages that may be sent without SSHD receiving any messages back from the client. If this threshold is met, SSHD will disconnect the client. For more information on these settings and others, refer to the sshd_config man pages.
+
+	Satisfies: SRG-OS-000163-GPOS-00072, SRG-OS-000279-GPOS-00109, SRG-OS-000395-GPOS-00175</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257996" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271711" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002348 - OL 9 SSH daemon must not allow rhosts authentication.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>SSH trust relationships mean a compromise on one host can allow an attacker to move trivially to other hosts.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258005" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271712" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002349 - OL 9 SSH daemon must not allow known hosts authentication.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Configuring the IgnoreUserKnownHosts setting for the SSH daemon provides additional assurance that remote login via SSH will require a password, even in the event of misconfiguration elsewhere.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258006" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271713" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002350 - OL 9 SSH daemon must disable remote X connections for interactive users.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>When X11 forwarding is enabled, there may be additional exposure to the server and client displays if the SSHD proxy display is configured to listen on the wildcard address. By default, SSHD binds the forwarding server to the loopback address and sets the hostname part of the DISPLAY environment variable to localhost. This prevents remote hosts from connecting to the proxy display.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230555" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271714" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002351 - OL 9 SSH daemon must perform strict mode checking of home directory configuration files.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>If other users have access to modify user-specific SSH configuration files, they may be able to log into the system as another user.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230288" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271715" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002352 - OL 9 SSH daemon must display the date and time of the last successful account logon upon an SSH logon.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Providing users feedback on when account accesses last occurred facilitates user recognition and reporting of unauthorized account use.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258009" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271716" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002354 - OL 9 SSH daemon must prevent remote hosts from connecting to the proxy display.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>When X11 forwarding is enabled, there may be additional exposure to the server and client displays if the SSHD proxy display is configured to listen on the wildcard address. By default, SSHD binds the forwarding server to the loopback address and sets the hostname part of the "DISPLAY" environment variable to localhost. This prevents remote hosts from connecting to the proxy display.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230556" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271717" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002355 - OL 9 SSH daemon must not allow compression or must only allow compression after successful authentication.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>If compression is allowed in an SSH connection prior to authentication, vulnerabilities in the compression software could result in compromise of the system from an unauthenticated connection, potentially with root privileges.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258002" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271718" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002356 - OL 9 SSH daemon must not allow Kerberos authentication.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Kerberos authentication for SSH is often implemented using Generic Security Service Application Program Interface (GSSAPI). If Kerberos is enabled through SSH, the SSH daemon provides a means of access to the system's Kerberos implementation. Vulnerabilities in the system's Kerberos implementations may be subject to exploitation.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258004" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271719" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002357 - OL 9 must not allow a noncertificate trusted host SSH logon to the system.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>SSH trust relationships mean a compromise on one host can allow an attacker to move trivially to other hosts.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257992" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271720" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-002358 - OL 9 must not allow users to override SSH environment variables.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>SSH environment options potentially allow users to bypass access restriction in some configurations.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271720" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271721" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002359 - OL 9 SSHD must accept public key authentication.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without the use of multifactor authentication, the ease of access to privileged functions is greatly increased. Multifactor authentication requires using two or more factors to achieve authentication. A privileged account is defined as an information system account with authorizations of a privileged user. A DOD CAC with DOD-approved PKI is an example of multifactor authentication.
+
+	Satisfies: SRG-OS-000105-GPOS-00052, SRG-OS-000106-GPOS-00053, SRG-OS-000107-GPOS-00054, SRG-OS-000108-GPOS-00055</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257983" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271722" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002360 - OL 9 must require reauthentication when using the "sudo" command.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without reauthentication, users may access resources or perform tasks for which they do not have authorization. 
+
+	When operating systems provide the capability to escalate a functional capability, it is critical the organization requires the user to reauthenticate when using the "sudo" command.
+
+	If the value is set to an integer less than "0", the user's time stamp will not expire and the user will not have to reauthenticate for privileged actions until the user's session is terminated.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:237643" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271723" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002361 - OL 9 must restrict the use of the su command.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The su program allows to run commands with a substitute user and group ID. It is commonly used to run commands as the root user. Limiting access to such commands is considered a good security practice.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258088" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271724" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002362 - OL 9 must require users to reauthenticate for privilege escalation.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without reauthentication, users may access resources or perform tasks for which they do not have authorization.
+
+	When operating systems provide the capability to escalate a functional capability, it is critical that the user reauthenticate.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258086" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271725" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002363 - OL 9 must require users to provide a password for privilege escalation.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without reauthentication, users may access resources or perform tasks for which they do not have authorization.
+
+	When operating systems provide the capability to escalate a functional capability, it is critical that the user reauthenticate.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230271" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271726" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002364 - OL 9 must not be configured to bypass password requirements for privilege escalation.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without reauthentication, users may access resources or perform tasks for which they do not have authorization. When operating systems provide the capability to escalate a functional capability, it is critical the user reauthenticate.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258118" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271727" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-002370 - OL 9 must disable the use of user namespaces.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>User namespaces are used primarily for Linux containers. The value "0" disallows the use of user namespaces.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271727" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271728" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002380 - OL 9 must disable the kernel.core_pattern.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230311" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271729" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002381 - OL 9 must disable core dump backtraces.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers or system operators trying to debug problems.
+
+	Enabling core dumps on production systems is not recommended; however, there may be overriding operational requirements to enable advanced debugging. Permitting temporary enablement of core dumps during such situations must be reviewed through local needs and policy.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230315" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271730" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002382 - OL 9 must disable storing core dumps.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers or system operators trying to debug problems. Enabling core dumps on production systems is not recommended; however, there may be overriding operational requirements to enable advanced debugging. Permitting temporary enablement of core dumps during such situations must be reviewed through local needs and policy.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230314" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271731" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002383 - OL 9 must disable core dumps for all users.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230313" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271732" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002384 - OL 9 must disable acquiring, saving, and processing core dumps.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230312" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271733" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002385 - OL 9 must be configured so that the kdump service is disabled.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Kernel core dumps may contain the full contents of system memory at the time of the crash. Kernel core dumps consume a considerable amount of disk space and may result in denial of service by exhausting the available space on the target file system partition. Unless the system is used for kernel development or testing, there is little need to run the kdump service.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230310" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271734" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002390 - OL 9 must clear SLUB/SLAB objects to prevent use-after-free attacks.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Some adversaries launch attacks with the intent of executing code in nonexecutable regions of memory or in memory locations that are prohibited. Security safeguards employed to protect memory include, for example, data execution prevention and address space layout randomization. Data execution prevention safeguards can be either hardware-enforced or software-enforced with hardware providing the greater strength of mechanism.
+
+	Poisoning writes an arbitrary value to freed pages, so any modification or reference to that page after being freed or before being initialized will be detected and prevented. This prevents many types of use-after-free vulnerabilities at little performance cost. Also prevents leak of data and detection of corrupted memory.
+
+	SLAB objects are blocks of physically contiguous memory. SLUB is the unqueued SLAB allocator.
+
+	Satisfies: SRG-OS-000433-GPOS-00192, SRG-OS-000134-GPOS-00068</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271734" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271735" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002391 - OL 9 must enable mitigations against processor-based vulnerabilities.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Kernel page-table isolation is a kernel feature that mitigates the Meltdown security vulnerability and hardens the kernel against attempts to bypass kernel address space layout randomization (KASLR).
+
+	Satisfies: SRG-OS-000433-GPOS-00193, SRG-OS-000095-GPOS-00049</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230491" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271736" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002392 - OL 9 must disable the ability of systemd to spawn an interactive boot process.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Using interactive or recovery boot, the console user could disable auditing, firewalls, or other services, weakening system security.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257788" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271737" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002393 - OL 9 must disable virtual system calls.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>System calls are special routines in the Linux kernel, which userspace applications ask to do privileged tasks. Invoking a system call is an expensive operation because the processor must interrupt the currently executing task and switch context to kernel mode and then back to userspace after the system call completes. Virtual system calls map into user space a page that contains some variables and the implementation of some system calls. This allows the system calls to be executed in userspace to alleviate the context switching expense.
+
+	Virtual system calls provide an opportunity of attack for a user who has control of the return instruction pointer. Disabling virtual system calls help to prevent return-oriented programming (ROP) attacks via buffer overflows and overruns. If the system intends to run containers based on OL 6 components, virtual system calls will have to be enabled so the components function properly.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230278" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271738" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002394 - OL 9 must clear the page allocator to prevent use-after-free attacks.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Poisoning writes an arbitrary value to freed pages, so any modification or reference to that page after being freed or before being initialized will be detected and prevented. This prevents many types of use-after-free vulnerabilities at little performance cost. Also prevents leak of data and detection of corrupted memory.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230277" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271739" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002400 - OL 9 systemd-journald service must be enabled.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>In the event of a system failure, OL 9 must preserve any information necessary to determine cause of failure and any information necessary to return to operations with least disruption to system processes.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257783" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271740" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-002401 - OL 9 must enable kernel parameters to enforce discretionary access control on hardlinks.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>By enabling the fs.protected_hardlinks kernel parameter, users can no longer create soft or hard links to files they do not own. Disallowing such hardlinks mitigates vulnerabilities based on insecure file system accessed by privileged programs, avoiding an exploitation vector exploiting unsafe use of open() or creat().
+
+	Satisfies: SRG-OS-000312-GPOS-00123, SRG-OS-000324-GPOS-00125</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:248578" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271741" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-002402 - OL 9 must enable kernel parameters to enforce discretionary access control on symlinks.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>By enabling the fs.protected_symlinks kernel parameter, symbolic links are permitted to be followed only when outside a sticky world-writable directory, or when the user identifier (UID) of the link and follower match, or when the directory owner matches the symlink's owner. Disallowing such symlinks helps mitigate vulnerabilities based on insecure file system accessed by privileged programs, avoiding an exploitation vector exploiting unsafe use of open() or creat().
+
+	Satisfies: SRG-OS-000312-GPOS-00123, SRG-OS-000324-GPOS-00125</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:248577" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271742" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002403 - OL 9 debug-shell systemd service must be disabled.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The debug-shell requires no authentication and provides root privileges to anyone who has physical access to the machine. While this feature is disabled by default, masking it adds an additional layer of assurance that it will not be enabled via a dependency in systemd. This also prevents attackers with physical access from trivially bypassing security on the machine through valid troubleshooting configurations and gaining root access when the system is rebooted.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230532" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271743" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002404 - OL 9 IP tunnels must use 140-3 approved cryptographic algorithms.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Overriding the system crypto policy makes the behavior of the Libreswan service violate expectations and makes system configuration more fragmented.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258232" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271745" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-002406 - OL 9 must restrict access to the kernel message buffer.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
+
+	This requirement generally applies to the design of an information technology product, but it can also apply to the configuration of particular information system components that are, or use, such products. This can be verified by acceptance/validation processes in DOD or other government agencies.
+
+	There may be shared resources with configurable protections (e.g., files in storage) that may be assessed on specific information system components.
+
+	Restricting access to the kernel message buffer limits access to only root. This prevents attackers from gaining additional system information as a nonprivileged user.
+
+	Satisfies: SRG-OS-000132-GPOS-00067, SRG-OS-000138-GPOS-00069</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:248579" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271746" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-002407 - OL 9 must prevent kernel profiling by nonprivileged users.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
+
+	This requirement generally applies to the design of an information technology product, but it can also apply to the configuration of particular information system components that are, or use, such products. This can be verified by acceptance/validation processes in DOD or other government agencies.
+
+	There may be shared resources with configurable protections (e.g., files in storage) that may be assessed on specific information system components.
+
+	Setting the kernel.perf_event_paranoid kernel parameter to "2" prevents attackers from gaining additional system information as a nonprivileged user.
+
+	Satisfies: SRG-OS-000132-GPOS-00067, SRG-OS-000138-GPOS-00069</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:248580" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271747" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-002408 - OL 9 must restrict exposed kernel pointer addresses access.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Exposing kernel pointers (through procfs or "seq_printf()") exposes kernel writeable structures, which may contain functions pointers. If a write vulnerability occurs in the kernel, allowing write access to any of this structure, the kernel can be compromised. This option disallows any program without the CAP_SYSLOG capability to get the addresses of kernel pointers by replacing them with "0".
+
+	Satisfies: SRG-OS-000132-GPOS-00067, SRG-OS-000433-GPOS-00192</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257800" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271748" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-002409 - OL 9 must disable access to network bpf system call from nonprivileged processes.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Loading and accessing the packet filters programs and maps using the bpf() system call has the potential of revealing sensitive information about the kernel state.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271748" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271749" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002410 - OL 9 must restrict usage of ptrace to descendant processes.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Unrestricted usage of ptrace allows compromised binaries to run ptrace on other processes of the user. Like this, the attacker can steal sensitive information from the target processes (e.g., SSH sessions, web browser, etc.) without any additional assistance from the user (i.e., without resorting to phishing).</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230546" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271750" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-002411 - OL 9 must automatically exit interactive command shell user sessions after 15 minutes of inactivity.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Terminating an idle interactive command shell user session within a short time period reduces the window of opportunity for unauthorized personnel to take control of it when left unattended in a virtual terminal or physical console.
+
+	Satisfies: SRG-OS-000163-GPOS-00072, SRG-OS-000029-GPOS-00010</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271750" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271751" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-002412 - OL 9 must be configured so that the systemd Ctrl-Alt-Delete burst key sequence is disabled.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>A locally logged-on user who presses Ctrl-Alt-Delete when at the console can reboot the system. If accidentally pressed, as could happen in the case of a mixed OS environment, this can create the risk of short-term loss of availability of systems due to unintentional reboot. In a graphical user environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is reduced because the user will be prompted before any action is taken.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:234990" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271752" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002413 - OL 9 must be configured so that the x86 Ctrl-Alt-Delete key sequence is disabled.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>A locally logged-on user who presses Ctrl-Alt-Delete when at the console can reboot the system. If accidentally pressed, as could happen in the case of a mixed OS environment, this can create the risk of short-term loss of availability of systems due to unintentional reboot. In a graphical user environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is reduced because the user will be prompted before any action is taken.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230529" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271753" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002415 - OL 9 must limit the number of concurrent sessions to ten for all accounts and/or account types.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Operating system management includes the ability to control the number of users and user sessions that use an operating system. Limiting the number of allowed users and sessions per user is helpful in reducing the risks related to denial-of-service (DoS) attacks.
+
+	This requirement addresses concurrent sessions for information system accounts and does not address concurrent sessions by single users via multiple system accounts. The maximum number of concurrent sessions must be defined based on mission needs and the operational environment for each system.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230346" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271754" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002416 - OL 9 must automatically lock an account when three unsuccessful logon attempts occur during a 15-minute time period.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>By limiting the number of failed logon attempts the risk of unauthorized system access via user password guessing, otherwise known as brute-forcing, is reduced. Limits are imposed by locking the account.
+
+	Satisfies: SRG-OS-000329-GPOS-00128, SRG-OS-000021-GPOS-00005</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230335" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271755" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002417 - OL 9 must maintain an account lock until the locked account is released by an administrator.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>By limiting the number of failed logon attempts the risk of unauthorized system access via user password guessing, otherwise known as brute-forcing, is reduced. Limits are imposed by locking the account.
+
+	Satisfies: SRG-OS-000329-GPOS-00128, SRG-OS-000021-GPOS-00005</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230337" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271757" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002419 - OL 9 file systems must not contain shosts.equiv files.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The shosts.equiv files are used to configure host-based authentication for the system via SSH. Host-based authentication is not sufficient for preventing unauthorized access to the system, as it does not require interactive identification and authentication of a connection request, or for the use of two-factor authentication.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230283" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271758" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002420 - OL 9 file systems must not contain .shosts files.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The .shosts files are used to configure host-based authentication for individual users or the system via SSH. Host-based authentication is not sufficient for preventing unauthorized access to the system, as it does not require interactive identification and authentication of a connection request, or for the use of two-factor authentication.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230284" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271759" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002421 - OL 9 must implement DOD-approved encryption in the bind package.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
+
+	Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
+
+	OL 9 incorporates system-wide crypto policies by default. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/ directory.
+
+	Satisfies: SRG-OS-000423-GPOS-00187, SRG-OS-000426-GPOS-00190</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258242" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271761" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-002423 - OL 9 must implement address space layout randomization (ASLR) to protect its memory from unauthorized code execution.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>ASLR makes it more difficult for an attacker to predict the location of attack code they have introduced into a process' address space during an attempt at exploitation. Additionally, ASLR makes it more difficult for an attacker to know the location of existing code to repurpose it using return-oriented programming (ROP) techniques.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271761" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271763" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002425 - OL 9 must be configured to prevent unrestricted mail relaying.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>If unrestricted mail relaying is permitted, unauthorized senders could use this host as a mail relay for the purpose of sending spam or other unauthorized activity.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230550" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271766" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002428 - OL 9 must prevent the loading of a new kernel for later execution.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Changes to any software components can have significant effects on the overall security of the operating system. This requirement ensures the software has not been tampered with and that it has been provided by a trusted vendor.
+
+	Disabling kexec_load prevents an unsigned kernel image (that could be a windows kernel or modified vulnerable kernel) from being loaded. Kexec can be used subvert the entire secureboot process and should be avoided at all costs especially since it can load unsigned kernel images.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230266" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271768" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-002430 - OL 9 must enable hardening for the Berkeley Packet Filter (BPF) just-in-time compiler.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>When hardened, the extended BPF just-in-time (JIT) compiler will randomize any kernel addresses in the BPF programs and maps and will not expose the JIT addresses in "/proc/kallsyms".</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271768" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271771" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002502 - OL 9 SSH private host key files must have mode 0640 or less permissive.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>If an unauthorized user obtains the private SSH host key file, the host could be impersonated.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230287" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271772" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002503 - OL 9 SSH public host key files must have mode 0644 or less permissive.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>If a public host key file is modified by an unauthorized user, the SSH service may be compromised.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230286" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271773" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-002504 - OL 9 system commands must be group-owned by root or a system account.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
+
+	This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271773" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271774" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-002505 - OL 9 system commands must be owned by root.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
+
+	This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271774" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271775" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-002506 - OL 9 system commands must have mode 755 or less permissive.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
+
+	This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271775" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271776" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002507 - OL 9 SSH server configuration file must be group-owned by root.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Service configuration files enable or disable features of their respective services, which if configured incorrectly, can lead to insecure and vulnerable configurations. Therefore, service configuration files must be owned by the correct group to prevent unauthorized changes.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257997" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271777" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002508 - OL 9 SSH server configuration file must be owned by root.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Service configuration files enable or disable features of their respective services, which if configured incorrectly, can lead to insecure and vulnerable configurations. Therefore, service configuration files must be owned by the correct group to prevent unauthorized changes.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257998" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271778" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002509 - OL 9 SSH server configuration file must have mode 0600 or less permissive.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Service configuration files enable or disable features of their respective services that if configured incorrectly can lead to insecure and vulnerable configurations. Therefore, service configuration files should be owned by the correct group to prevent unauthorized changes.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257999" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271782" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002513 - OL 9 local initialization files must have mode 0740 or less permissive.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Local initialization files are used to configure the user's shell environment upon logon. Malicious modification of these files could compromise accounts upon logon.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230325" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271784" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002515 - OL 9 local interactive user home directories must have mode 0750 or less permissive.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Excessive permissions on local interactive user home directories may allow unauthorized access to user files by other users.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257890" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271786" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-002520 - OL 9 library directories must be group-owned by root or a system account.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
+
+	This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271786" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271787" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-002521 - OL 9 library directories must be owned by root.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
+
+	This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271787" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271788" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-002522 - OL 9 library directories must have mode 755 or less permissive.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
+
+	This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271788" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271789" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002523 - OL 9 library files must be group-owned by root or a system account.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
+
+	This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230262" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271790" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002524 - OL 9 library files must be owned by root.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
+
+	This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230261" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271791" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-002525 - OL 9 library files must have mode 755 or less permissive.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
+
+	This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:260487" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271792" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002530 - OL 9 /boot/grub2/grub.cfg file must be group-owned by root.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "root" group is a highly privileged group. The group-owner of this file should not have any access privileges.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257790" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271793" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002531 - OL 9 /boot/grub2/grub.cfg file must be owned by root.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "/boot/grub2/grub.cfg" file stores sensitive system configuration. Protection of this file is critical for system security.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257791" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271794" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002532 - OL 9 /etc/group file must be group-owned by root.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "/etc/group" file contains information regarding groups that are configured on the system. Protection of this file is important for system security.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257899" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271795" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002533 - OL 9 /etc/group- file must be group-owned by root.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "/etc/group-" file is a backup file of "/etc/group", and as such, contains information regarding groups that are configured on the system. Protection of this file is important for system security.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257901" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271796" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002534 - OL 9 /etc/group file must be owned by root.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "/etc/group" file contains information regarding groups that are configured on the system. Protection of this file is important for system security.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257898" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271797" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002535 - OL 9 /etc/group- file must be owned by root.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "/etc/group-" file is a backup file of "/etc/group", and as such, contains information regarding groups that are configured on the system. Protection of this file is important for system security.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257900" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271798" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002536 - OL 9 /etc/group file must have mode 0644 or less permissive to prevent unauthorized access.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "/etc/group" file contains information regarding groups that are configured on the system. Protection of this file is important for system security.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257891" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271799" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002537 - OL 9 /etc/group- file must have mode 0644 or less permissive to prevent unauthorized access.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "/etc/group-" file is a backup file of "/etc/group", and as such, contains information regarding groups that are configured on the system. Protection of this file is important for system security.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257892" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271800" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002538 - OL 9 /etc/gshadow file must be group-owned by root.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "/etc/gshadow" file contains group password hashes. Protection of this file is critical for system security.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257903" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271801" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002539 - OL 9 /etc/gshadow- file must be group-owned by root.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "/etc/gshadow-" file is a backup of "/etc/gshadow", and as such, contains group password hashes. Protection of this file is critical for system security.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257905" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271802" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002540 - OL 9 /etc/gshadow file must be owned by root.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "/etc/gshadow" file contains group password hashes. Protection of this file is critical for system security.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257902" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271803" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002541 - OL 9 /etc/gshadow- file must be owned by root.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "/etc/gshadow-" file is a backup of "/etc/gshadow", and as such, contains group password hashes. Protection of this file is critical for system security.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257904" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271804" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002542 - OL 9 /etc/gshadow file must have mode 0000 or less permissive to prevent unauthorized access.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "/etc/gshadow" file contains group password hashes. Protection of this file is critical for system security.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257893" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271805" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002543 - OL 9 /etc/gshadow- file must have mode 0000 or less permissive to prevent unauthorized access.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "/etc/gshadow-" file is a backup of "/etc/gshadow", and as such, contains group password hashes. Protection of this file is critical for system security.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257894" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271806" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002544 - OL 9 /etc/passwd file must be group-owned by root.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "/etc/passwd" file contains information about the users that are configured on the system. Protection of this file is critical for system security.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257907" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271807" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002545 - OL 9 /etc/passwd- file must be group-owned by root.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "/etc/passwd-" file is a backup file of "/etc/passwd", and as such, contains information about the users that are configured on the system. Protection of this file is critical for system security.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257909" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271808" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002546 - OL 9 /etc/passwd file must be owned by root.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "/etc/passwd" file contains information about the users that are configured on the system. Protection of this file is critical for system security.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257906" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271809" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002547 - OL 9 /etc/passwd- file must be owned by root.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "/etc/passwd-" file is a backup file of "/etc/passwd", and as such, contains information about the users that are configured on the system. Protection of this file is critical for system security.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257908" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271810" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002548 - OL 9 /etc/passwd file must have mode 0644 or less permissive to prevent unauthorized access.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>If the "/etc/passwd" file is writable by a group-owner or the world the risk of its compromise is increased. The file contains the list of accounts on the system and associated information, and protection of this file is critical for system security.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257895" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271811" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002549 - OL 9 /etc/passwd- file must have mode 0644 or less permissive to prevent unauthorized access.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "/etc/passwd-" file is a backup file of "/etc/passwd", and as such, contains information about the users that are configured on the system. Protection of this file is critical for system security.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257896" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271812" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002550 - OL 9 /etc/shadow file must be group-owned by root.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "/etc/shadow" file stores password hashes. Protection of this file is critical for system security.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257911" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271813" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002551 - OL 9 /etc/shadow- file must be group-owned by root.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "/etc/shadow-" file is a backup file of "/etc/shadow", and as such, contains the list of local system accounts and password hashes. Protection of this file is critical for system security.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257913" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271814" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002552 - OL 9 /etc/shadow file must be owned by root.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "/etc/shadow" file contains the list of local system accounts and stores password hashes. Protection of this file is critical for system security. Failure to give ownership of this file to root provides the designated owner with access to sensitive information, which could weaken the system security posture.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257910" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271815" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002553 - OL 9 /etc/shadow- file must be owned by root.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "/etc/shadow-" file is a backup file of "/etc/shadow", and as such, contains the list of local system accounts and password hashes. Protection of this file is critical for system security.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257912" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271816" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002554 - OL 9 /etc/shadow- file must have mode 0000 or less permissive to prevent unauthorized access.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "/etc/shadow-" file is a backup file of "/etc/shadow", and as such, contains the list of local system accounts and password hashes. Protection of this file is critical for system security.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257897" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271817" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002555 - OL 9 /etc/shadow file must have mode 0000 to prevent unauthorized access.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The "/etc/shadow" file contains the list of local system accounts and stores password hashes. Protection of this file is critical for system security. Failure to give ownership of this file to root provides the designated owner with access to sensitive information, which could weaken the system security posture.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257934" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271818" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002560 - OL 9 /var/log directory must be group-owned by root.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state or can identify the OL 9 system or platform. Additionally, personally identifiable information (PII) and operational information must not be revealed through error messages to unauthorized personnel or their designated representatives.
+
+	The structure and content of error messages must be carefully considered by the organization and development team. The extent to which the information system is able to identify and handle error conditions is guided by organizational policy and operational requirements.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230250" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271819" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002561 - OL 9 /var/log directory must be owned by root.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state or can identify the OL 9 system or platform. Additionally, personally identifiable information (PII) and operational information must not be revealed through error messages to unauthorized personnel or their designated representatives.
+
+	The structure and content of error messages must be carefully considered by the organization and development team. The extent to which the information system is able to identify and handle error conditions is guided by organizational policy and operational requirements.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230249" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271820" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002562 - OL 9 /var/log directory must have mode 0755 or less permissive.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state or can identify the OL 9 system or platform. Additionally, personally identifiable information (PII) and operational information must not be revealed through error messages to unauthorized personnel or their designated representatives.
+
+	The structure and content of error messages must be carefully considered by the organization and development team. The extent to which the information system is able to identify and handle error conditions is guided by organizational policy and operational requirements.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230248" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271821" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002563 - OL 9 /var/log/messages file must be group-owned by root.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state or can identify the OL 9 system or platform. Additionally, personally identifiable information (PII) and operational information must not be revealed through error messages to unauthorized personnel or their designated representatives.
+
+	The structure and content of error messages must be carefully considered by the organization and development team. The extent to which the information system is able to identify and handle error conditions is guided by organizational policy and operational requirements.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230247" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271822" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002564 - OL 9 /var/log/messages file must be owned by root.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state or can identify the OL 9 system or platform. Additionally, personally identifiable information (PII) and operational information must not be revealed through error messages to unauthorized personnel or their designated representatives.
+
+	The structure and content of error messages must be carefully considered by the organization and development team. The extent to which the information system is able to identify and handle error conditions is guided by organizational policy and operational requirements.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230246" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271823" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002565 - OL 9 /var/log/messages file must have mode 0640 or less permissive.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state or can identify the OL 9 system or platform. Additionally, personally identifiable information (PII) and operational information must not be revealed through error messages to unauthorized personnel or their designated representatives.
+
+	The structure and content of error messages must be carefully considered by the organization and development team. The extent to which the information system is able to identify and handle error conditions is guided by organizational policy and operational requirements.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230245" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271824" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002570 - OL 9 audit tools must be group-owned by root.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Protecting audit information also includes identifying and protecting the tools used to view and manipulate log data; therefore, protecting audit tools is necessary to prevent unauthorized operation on audit information.
+
+	OL 9 systems providing tools to interface with audit information will leverage user permissions and roles identifying the user accessing the tools, and the corresponding rights the user enjoys, to make access decisions regarding the access to audit tools.
+
+	Audit tools include, but are not limited to, vendor-provided and open source audit tools needed to successfully view and manipulate audit information system activity and records. Audit tools include custom queries and report generators.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230474" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271825" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002571 - OL 9 audit tools must be owned by root.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Protecting audit information also includes identifying and protecting the tools used to view and manipulate log data. Therefore, protecting audit tools is necessary to prevent unauthorized operation on audit information.
+
+	OL 9 systems providing tools to interface with audit information will leverage user permissions and roles identifying the user accessing the tools, and the corresponding rights the user enjoys, to make access decisions regarding the access to audit tools.
+
+	Audit tools include, but are not limited to, vendor-provided and open source audit tools needed to successfully view and manipulate audit information system activity and records. Audit tools include custom queries and report generators.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230473" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271826" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002572 - OL 9 audit tools must have a mode of 0755 or less permissive.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Protecting audit information also includes identifying and protecting the tools used to view and manipulate log data. Therefore, protecting audit tools is necessary to prevent unauthorized operation on audit information.
+
+	OL 9 systems providing tools to interface with audit information will leverage user permissions and roles identifying the user accessing the tools, and the corresponding rights the user enjoys, to make access decisions regarding the access to audit tools.
+
+	Audit tools include, but are not limited to, vendor-provided and open source audit tools needed to successfully view and manipulate audit information system activity and records. Audit tools include custom queries and report generators.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230472" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271827" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002580 - OL 9 cron configuration directories must have a mode of 0700 or less permissive.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Service configuration files enable or disable features of their respective services that if configured incorrectly can lead to insecure and vulnerable configurations. Therefore, service configuration files should have the correct access rights to prevent unauthorized changes.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257888" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271828" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002581 - OL 9 cron configuration files directory must be group-owned by root.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Service configuration files enable or disable features of their respective services that if configured incorrectly can lead to insecure and vulnerable configurations; therefore, service configuration files should be owned by the correct group to prevent unauthorized changes.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257927" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271829" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002582 - OL 9 cron configuration files directory must be owned by root.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Service configuration files enable or disable features of their respective services that if configured incorrectly can lead to insecure and vulnerable configurations; therefore, service configuration files must be owned by the correct group to prevent unauthorized changes.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257926" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271830" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002583 - OL 9 /etc/crontab file must have mode 0600.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Service configuration files enable or disable features of their respective services that if configured incorrectly can lead to insecure and vulnerable configurations; therefore, service configuration files must have the correct access rights to prevent unauthorized changes.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257933" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271831" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-003000 - OL 9 must be configured so that the root account is the only account having unrestricted access to the system.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>An account has root authority if it has a user identifier (UID) of "0". Multiple accounts with a UID of "0" afford more opportunity for potential intruders to guess a password for a privileged account. Proper configuration of sudo is recommended to afford multiple system administrators access to root privileges in an accountable manner.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230534" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271832" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-003001 - OL 9 duplicate User IDs (UIDs) must not exist for interactive users.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>To ensure accountability and prevent unauthenticated access, interactive users must be identified and authenticated to prevent potential misuse and compromise of the system.
+
+	Satisfies: SRG-OS-000104-GPOS-00051, SRG-OS-000121-GPOS-00062, SRG-OS-000042-GPOS-00020</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258045" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271833" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-003002 - OL 9 local interactive users must have a home directory assigned in the /etc/passwd file.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>If local interactive users are not assigned a valid home directory, there is no place for the storage and control of files they should own.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258051" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271834" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-003005 - OL 9 interactive users must have a primary group that exists.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>If a user is assigned the Group Identifier (GID) of a group that does not exist on the system, and a group with the GID is subsequently created, the user may have unintended rights to any files associated with the group.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258048" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271835" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-003006 - OL 9 groups must have unique Group ID (GID).</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>To ensure accountability and prevent unauthenticated access, groups must be identified uniquely to prevent potential misuse and compromise of the system.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258061" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271836" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-003010 - OL 9 must configure SELinux context type to allow the use of a nondefault faillock tally directory.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Not having the correct SELinux context on the faillock directory may lead to unauthorized access to the directory.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258080" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271839" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-003020 - OL 9 must automatically lock an account when three unsuccessful logon attempts occur.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>By limiting the number of failed logon attempts, the risk of unauthorized system access via user password guessing, otherwise known as brute-force attacks, is reduced. Limits are imposed by locking the account.
+
+	Satisfies: SRG-OS-000329-GPOS-00128, SRG-OS-000021-GPOS-00005</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230333" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271840" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-003021 - OL 9 must automatically lock the root account until the root account is released by an administrator when three unsuccessful logon attempts occur during a 15-minute time period.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>By limiting the number of failed logon attempts, the risk of unauthorized system access via user password guessing, also known as brute-forcing, is reduced. Limits are imposed by locking the account.
+
+	Satisfies: SRG-OS-000329-GPOS-00128, SRG-OS-000021-GPOS-00005</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230345" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271841" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-003022 - OL 9 must log username information when unsuccessful logon attempts occur.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Without auditing of these events, it may be harder or impossible to identify what an attacker did after an attack.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230343" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271842" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-003023 - OL 9 must ensure account lockouts persist.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Having lockouts persist across reboots ensures that account is only unlocked by an administrator. If the lockouts did not persist across reboots, an attacker could simply reboot the system to continue brute force attacks against the accounts on the system.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230339" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271845" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-003051 - OL 9 system accounts must not have an interactive login shell.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Ensuring shells are not given to system accounts upon login makes it more difficult for attackers to make use of system accounts.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258046" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271846" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-003052 - OL 9 local interactive user accounts must be assigned a home directory upon creation.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>If local interactive users are not assigned a valid home directory, there is no place for the storage and control of files they should own.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230324" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271849" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-003065 - OL 9 must disable account identifiers (individuals, groups, roles, and devices) after 35 days of inactivity.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Inactive identifiers pose a risk to systems and applications because attackers may exploit an inactive identifier and potentially obtain undetected access to the system.
+
+	Disabling inactive accounts ensures that accounts which may not have been responsibly removed are not available to attackers who may have compromised their credentials.
+
+	Owners of inactive accounts will not notice if unauthorized access to their user account has been obtained.
+
+	Satisfies: SRG-OS-000118-GPOS-00060, SRG-OS-000590-GPOS-00110</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230373" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271850" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-003070 - OL 9 must enforce a delay of at least four seconds between logon prompts following a failed logon attempt.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Increasing the time between a failed authentication attempt and reprompting to enter credentials helps to slow a single-threaded brute force attack.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230378" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271851" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-005000 - OL 9 remote access methods must be monitored.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Logging remote access methods can be used to trace the decrease in the risks associated with remote user access management. It can also be used to spot cyberattacks and ensure ongoing compliance with organizational policies surrounding the use of remote access methods.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258144" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271852" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-005005 - OL 9 must be configured to forward audit records via TCP to a different system or media from the system being audited via rsyslog.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Information stored in one location is vulnerable to accidental or incidental deletion or alteration.
+
+	Offloading is a common process in information systems with limited audit storage capacity.
+
+	OL 9 installation media provides "rsyslogd", a system utility providing support for message logging. Support for both internet and Unix domain sockets enables this utility to support both local and remote logging. Coupling this utility with "gnutls" (a secure communications library implementing the SSL, TLS, and DTLS protocols) creates a method to securely encrypt and offload auditing.
+
+	Rsyslog provides three ways to forward message: the traditional UDP transport, which is extremely lossy but standard; the plain TCP based transport, which loses messages only during certain situations but is widely available; and the RELP transport, which does not lose messages but is currently available only as part of the rsyslogd 3.15.0 and above.
+
+	Examples of each configuration:
+	UDP *.* @remotesystemname
+	TCP *.* @@remotesystemname
+	RELP *.* :omrelp:remotesystemname:2514
+	Note that a port number was given as there is no standard port for RELP.
+
+	Satisfies: SRG-OS-000479-GPOS-00224, SRG-OS-000342-GPOS-00133</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258149" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271854" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-005015 - OL 9 must authenticate the remote logging server for offloading audit logs via rsyslog.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Information stored in one location is vulnerable to accidental or incidental deletion or alteration.
+
+	Offloading is a common process in information systems with limited audit storage capacity.
+
+	OL 9 installation media provides "rsyslogd", a system utility providing support for message logging. Support for both internet and Unix domain sockets enables this utility to support both local and remote logging. Coupling this utility with "gnutls" (a secure communications library implementing the SSL, TLS, and DTLS protocols) creates a method to securely encrypt and offload auditing.
+
+	"Rsyslog" supported authentication modes include:
+	anon - anonymous authentication
+	x509/fingerprint - certificate fingerprint authentication
+	x509/certvalid - certificate validation only
+	x509/name - certificate validation and subject name authentication
+
+	Satisfies: SRG-OS-000342-GPOS-00133, SRG-OS-000479-GPOS-00224</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271854" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271855" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-005020 - OL 9 must encrypt the transfer of audit records offloaded onto a different system or media from the system being audited via rsyslog.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Information stored in one location is vulnerable to accidental or incidental deletion or alteration.
+
+	Offloading is a common process in information systems with limited audit storage capacity.
+
+	OL 9 installation media provides "rsyslogd", a system utility providing support for message logging. Support for both internet and Unix domain sockets enables this utility to support both local and remote logging. Coupling this utility with "gnutls" (a secure communications library implementing the SSL, TLS, and DTLS protocols) creates a method to securely encrypt and offload auditing.
+
+	"Rsyslog" supported authentication modes include:
+	anon - anonymous authentication
+	x509/fingerprint - certificate fingerprint authentication
+	x509/certvalid - certificate validation only
+	x509/name - certificate validation and subject name authentication
+
+	Satisfies: SRG-OS-000342-GPOS-00133, SRG-OS-000479-GPOS-00224</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271855" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271856" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-005025 - OL 9 must encrypt via the gtls driver the transfer of audit records offloaded onto a different system or media from the system being audited via rsyslog.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Information stored in one location is vulnerable to accidental or incidental deletion or alteration.
+
+	Offloading is a common process in information systems with limited audit storage capacity.
+
+	OL 9 installation media provides "rsyslogd", a system utility providing support for message logging. Support for both internet and Unix domain sockets enables this utility to support both local and remote logging. Coupling this utility with "gnutls" (a secure communications library implementing the SSL, TLS, and DTLS protocols) creates a method to securely encrypt and offload auditing.
+
+	Satisfies: SRG-OS-000342-GPOS-00133, SRG-OS-000479-GPOS-00224</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271856" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271857" version="3" class="compliance">
+          <metadata>
+            <title>OL09-00-005030 - OL 9 must be configured so that the rsyslog daemon does not accept log messages from other servers unless the server is being used for log aggregation.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Unintentionally running a rsyslog server accepting remote messages puts the system at increased risk. Malicious rsyslog messages sent to the server could exploit vulnerabilities in the server software itself, could introduce misleading information into the system's logs, or could fill the system's storage leading to a denial of service.
+
+	If the system is intended to be a log aggregation server, its use must be documented with the information system security officer (ISSO).</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258143" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271858" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-006000 - OL 9 must protect against or limit the effects of denial-of-service (DoS) attacks by ensuring rate-limiting measures on impacted network interfaces are implemented.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>DoS is a condition when a resource is not available for legitimate users. When this occurs, the organization either cannot accomplish its mission or must operate at degraded capacity.
+
+	This requirement addresses the configuration of OL 9 to mitigate the impact of DoS attacks that have occurred or are ongoing on system availability. For each system, known and potential DoS attacks must be identified and solutions for each type implemented. A variety of technologies exists to limit or, in some cases, eliminate the effects of DoS attacks (e.g., limiting processes or establishing memory partitions). Employing increased capacity and bandwidth, combined with service redundancy, may reduce the susceptibility to some DoS attacks.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230525" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271860" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-006002 - OL 9 must configure a DNS processing mode set be Network Manager.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>To ensure that DNS resolver settings are respected, a DNS mode in Network Manager must be configured.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257949" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271861" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-006003 - OL 9 systems using Domain Name Servers (DNS) resolution must have at least two name servers configured.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>To provide availability for name resolution services, multiple redundant name servers are mandated. A failure in name resolution could lead to the failure of security functions requiring name resolution, which may include time synchronization, centralized authentication, and remote system logging.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230316" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271862" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-006004 - OL 9 network interfaces must not be in promiscuous mode.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Network interfaces in promiscuous mode allow for the capture of all network traffic visible to the system. If unauthorized individuals can access these applications, it may allow them to collect information such as logon IDs, passwords, and key exchanges between systems.
+
+	If the system is being used to perform a network troubleshooting function, the use of these tools must be documented with the information systems security officer (ISSO) and restricted to only authorized personnel.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230554" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271864" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-006020 - OL 9 must ignore Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirect messages.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
+
+	This feature of the IPv4 protocol has few legitimate uses. It should be disabled unless absolutely required.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271864" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271865" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-006021 - OL 9 must not forward Internet Protocol version 4 (IPv4) source-routed packets.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Source-routed packets allow the source of the packet to suggest routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when IPv4 forwarding is enabled and the system is functioning as a router.
+
+	Accepting source-routed packets in the IPv4 protocol has few legitimate uses. It must be disabled unless it is absolutely required.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271865" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271866" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-006022 - OL 9 must log IPv4 packets with impossible addresses.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The presence of "martian" packets (which have impossible addresses) as well as spoofed packets, source-routed packets, and redirects could be a sign of nefarious network activity. Logging these packets enables this activity to be detected.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271866" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271867" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-006023 - OL 9 must log IPv4 packets with impossible addresses by default.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>The presence of "martian" packets (which have impossible addresses) as well as spoofed packets, source-routed packets, and redirects could be a sign of nefarious network activity. Logging these packets enables this activity to be detected.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271867" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271868" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-006024 - OL 9 must use reverse path filtering on all IPv4 interfaces.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Enabling reverse path filtering drops packets with source addresses that should not have been able to be received on the interface on which they were received. It must not be used on systems that are routers for complicated networks but is helpful for end hosts and routers serving small networks.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271868" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271869" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-006025 - OL 9 must prevent IPv4 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
+
+	This feature of the IPv4 protocol has few legitimate uses. It must be disabled unless absolutely required.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271869" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271870" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-006026 - OL 9 must not forward IPv4 source-routed packets by default.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Source-routed packets allow the source of the packet to suggest routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures.
+
+	Accepting source-routed packets in the IPv4 protocol has few legitimate uses. It must be disabled unless it is absolutely required, such as when IPv4 forwarding is enabled and the system is legitimately functioning as a router.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271870" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271871" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-006027 - OL 9 must use a reverse-path filter for IPv4 network traffic, when possible, by default.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Enabling reverse path filtering drops packets with source addresses that should not have been able to be received on the interface on which they were received. It must not be used on systems that are routers for complicated networks but is helpful for end hosts and routers serving small networks.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271871" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271872" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-006028 - OL 9 must not enable IPv4 packet forwarding unless the system is a router.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Routing protocol daemons are typically used on routers to exchange network topology information with other routers. If this capability is used when not required, system network information may be unnecessarily transmitted across the network.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271872" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271873" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-006030 - OL 9 must not respond to Internet Control Message Protocol (ICMP) echoes sent to a broadcast address.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Responding to broadcast (ICMP) echoes facilitates network mapping and provides a vector for amplification attacks.
+
+	Ignoring ICMP echo requests (pings) sent to broadcast or multicast addresses makes the system slightly more difficult to enumerate on the network.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271873" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271874" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-006031 - OL 9 must limit the number of bogus Internet Control Message Protocol (ICMP) response errors logs.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Some routers will send responses to broadcast frames that violate RFC-1122, which fills up a log file system with many useless error messages. An attacker may take advantage of this and attempt to flood the logs with bogus error logs. Ignoring bogus ICMP error responses reduces log size, although some activity would not be logged.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271874" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271875" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-006032 - OL 9 must not send Internet Control Message Protocol (ICMP) redirects.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages contain information from the system's route table possibly revealing portions of the network topology.
+
+	The ability to send ICMP redirects is only appropriate for systems acting as routers.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271875" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271876" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-006033 - OL 9 must not allow interfaces to perform Internet Control Message Protocol (ICMP) redirects by default.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages contain information from the system's route table possibly revealing portions of the network topology.
+
+	The ability to send ICMP redirects is only appropriate for systems acting as routers.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271876" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271877" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-006040 - OL 9 must not accept router advertisements on all IPv6 interfaces.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>An illicit router advertisement message could result in a man-in-the-middle attack.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271877" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271878" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-006041 - OL 9 must ignore IPv6 Internet Control Message Protocol (ICMP) redirect messages.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>An illicit ICMP redirect message could result in a man-in-the-middle attack.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271878" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271879" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-006042 - OL 9 must not forward IPv6 source-routed packets.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Source-routed packets allow the source of the packet to suggest that routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when forwarding is enabled and the system is functioning as a router.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271879" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271880" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-006043 - OL 9 must not enable IPv6 packet forwarding unless the system is a router.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>IP forwarding permits the kernel to forward packets from one network interface to another. The ability to forward packets between two networks is only appropriate for systems acting as routers.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271880" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271881" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-006044 - OL 9 must not accept router advertisements on all IPv6 interfaces by default.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>An illicit router advertisement message could result in a man-in-the-middle attack.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271881" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271882" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-006045 - OL 9 must prevent IPv6 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271882" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271883" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-006046 - OL 9 must not forward IPv6 source-routed packets by default.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Source-routed packets allow the source of the packet to suggest that routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when forwarding is enabled and the system is functioning as a router.
+
+	Accepting source-routed packets in the IPv6 protocol has few legitimate uses. It must be disabled unless it is absolutely required.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:248882" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271884" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-006050 - OL 9 must be configured to use TCP syncookies.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Denial of service (DoS) is a condition when a resource is not available for legitimate users. When this occurs, the organization either cannot accomplish its mission or must operate at degraded capacity. 
+
+	Managing excess capacity ensures that sufficient capacity is available to counter flooding attacks. Employing increased capacity and service redundancy may reduce the susceptibility to some DoS attacks. Managing excess capacity may include, for example, establishing selected usage priorities, quotas, or partitioning.
+
+	Satisfies: SRG-OS-000420-GPOS-00186, SRG-OS-000142-GPOS-00071</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271884" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271885" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-008000 - OL 9 audit system must protect logon UIDs from unauthorized change.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>If modification of login user identifiers (UIDs) is not prevented, they can be changed by nonprivileged users and make auditing complicated or impossible.
+
+	Satisfies: SRG-OS-000462-GPOS-00206, SRG-OS-000475-GPOS-00220, SRG-OS-000057-GPOS-00027, SRG-OS-000058-GPOS-00028, SRG-OS-000059-GPOS-00029</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230403" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:271886" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-008005 - OL 9 audit system must protect auditing rules from unauthorized change.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Unauthorized disclosure of audit records can reveal system and configuration data to attackers, thus compromising its confidentiality.
+
+	Audit information includes all information (e.g., audit records, audit settings, audit reports) needed to successfully audit OL 9 system activity.
+
+	In immutable mode, unauthorized users cannot execute changes to the audit system to potentially hide malicious activity and then put the audit rules back. A system reboot would be noticeable, and a system administrator could then investigate the unauthorized changes.
+
+	Satisfies: SRG-OS-000057-GPOS-00027, SRG-OS-000058-GPOS-00028, SRG-OS-000059-GPOS-00029</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230402" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:278952" version="2" class="compliance">
+          <metadata>
+            <title>OL09-00-002584 - OL 9 must audit any script or executable called by cron as root or by any privileged user.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Any script or executable called by cron as root or by any privileged user must be owned by that user, must have the permissions 0755 or more restrictive, and should have no extended rights that allow any nonprivileged user to modify the script or executable.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:274870" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.ol9os:def:279935" version="1" class="compliance">
+          <metadata>
+            <title>OL09-00-002376 - OL 9 must terminate idle user sessions.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <description>Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a management session enabled on the console or console port that has been left unattended.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.rhel8os:def:257258" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.rhel8os:def:257258" version="1" class="compliance">
+          <metadata>
+            <title>RHEL-08-020035 - RHEL 8 must terminate idle user sessions.</title>
+            <affected family="unix">
+              <platform>Red Hat Enterprise Linux 8</platform>
+            </affected>
+            <description>Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a management session enabled on the console or console port that has been left unattended.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257258" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.rhel9os:def:257988" version="1" class="compliance">
+          <metadata>
+            <title>RHEL-09-255060 - RHEL 9 must implement DOD-approved encryption ciphers to protect the confidentiality of SSH client connections.</title>
+            <affected family="unix">
+              <platform>Red Hat Enterprise Linux 9</platform>
+            </affected>
+            <description>Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
+
+Remote access (e.g., RDP) is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, non-organization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
+
+Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
+
+RHEL 9 incorporates system-wide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the /etc/sysconfig/sshd file. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/opensshserver.config file.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257988" />
+          </criteria>
+        </definition>
+      </definitions>
+      <tests>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:230345" version="1" check_existence="all_exist" check="all" comment="check /etc/security/faillock.conf for the even_deny_root setting">
+          <object object_ref="oval:mil.disa.stig.ind:obj:230345" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:10001201" version="1" check_existence="at_least_one_exists" check="all" comment="net.ipv6.conf.all.disable_ipv6 setting in sysctl configuration files is set to 1, and nothing else">
+          <object object_ref="oval:mil.disa.stig.ind:obj:10001203" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:10001202" version="1" check_existence="at_least_one_exists" check="all" comment="ipv6.disable=1 in the kernel cmdline">
+          <object object_ref="oval:mil.disa.stig.ind:obj:10001204" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:10001601" version="2" check_existence="at_least_one_exists" check="all" comment="/boot/efi is configured in /etc/fstab with the VFAT file type">
+          <object object_ref="oval:mil.disa.stig.ind:obj:10001601" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:10001601" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:20441700" version="2" check_existence="at_least_one_exists" check="at least one" comment="libuser.conf, defaults/crypt_style exists">
+          <object object_ref="oval:mil.disa.stig.ind:obj:20441700" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20441700" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:20441701" version="4" check_existence="at_least_one_exists" check="all" comment="libuser.conf, crypt_style = sha512">
+          <object object_ref="oval:mil.disa.stig.ind:obj:20441701" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20441701" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23023100" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/login.defs:ENCRYPT_METHOD &gt;= SHA512">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23023100" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23023100" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23023200" version="2" check_existence="none_exist" check="all" comment="No active password hash in /etc/shadow has a prefix other than '$6$'.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23023201" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23023300" version="4" check_existence="any_exist" check="all" comment="/etc/login.defs: SHA_CRYPT_MIN_ROUNDS, if set, is set to 100000 or greater">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23023300" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23023300" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23023301" version="4" check_existence="any_exist" check="all" comment="/etc/login.defs: SHA_CRYPT_MAX_ROUNDS, if set, is set to 100000 or greater">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23023301" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23023300" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23023302" version="1" check="all" comment="/etc/login.defs: SHA_CRYPT_MIN_ROUNDS is set">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23023300" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23023303" version="1" check="all" comment="/etc/login.defs: SHA_CRYPT_MAX_ROUNDS is set">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23023301" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23023700" version="1" check_existence="only_one_exists" check="all" comment="/etc/pam.d/password-auth:password includes pam_unix.so sha512">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23023700" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23024000" version="2" check_existence="only_one_exists" check="all" comment="selinux is enforcing">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23024000" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23024000" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23024001" version="2" check_existence="only_one_exists" check="all" comment="/etc/selinux/config:SELINUX=enforcing">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23024001" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23024001" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23026400" version="1" check_existence="all_exist" check="all" comment="Every /etc/yum.repos.d/*.repo:[{reponame}] has a gpgcheck set to 1.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23026400" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23026400" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23026401" version="1" check_existence="all_exist" check="none satisfy" comment="No /etc/yum.repos.d/*.repo:[{reponame}] has a gpgcheck set to 0.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23026400" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23026401" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23026500" version="2" check="all" comment="/etc/dnf/dnf.conf: localpkg_gpgcheck is set to True, 1, or yes.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23026500" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000021" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23026601" version="1" check_existence="at_least_one_exists" check="all" comment="kernel.kexec_load_disabled setting in sysctl configuration files is set to 1, and nothing else">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23026603" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23027100" version="1" check_existence="none_exist" check="all" comment="'NOPASSWD' does not exist in /etc/sudoers">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23027100" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23027101" version="1" check_existence="none_exist" check="all" comment="'NOPASSWD' does not exist in /etc/sudoers.d">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23027101" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23027800" version="1" check="all" comment="BLS options contain vsyscall=none">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25779300" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23027800" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23027801" version="1" check="all" comment="The GRUB_CMDLINE_LINUX arguments in /etc/default/grub contain vsyscall=none">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25779301" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23027800" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23028100" version="1" check="all" comment="/etc/dnf/dnf.conf: clean_requirements_on_remove is set to True, 1 or yes">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23028100" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23028200" version="1" check="all" comment="/etc/selinux/config: SELINUXTYPE=targeted">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23028200" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23028200" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23028800" version="2" check_existence="at_least_one_exists" check="all" comment="/etc/ssh/sshd_config or /etc/ssh/sshd_config.d/*:StrictModes == yes">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23028802" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000016" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23029201" version="1" check_existence="all_exist" check="all" comment="There is a separate file system configured for /var.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23029201" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23029401" version="1" check_existence="all_exist" check="all" comment="There is a separate file system configured for audit data directory.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23029401" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23029500" version="1" check_existence="all_exist" check="all" comment="There is a separate file system configured for /tmp.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23029500" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23029600" version="2" check_existence="at_least_one_exists" check="all" comment="/etc/ssh/sshd_config:PermitRootLogin == no">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23029602" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000017" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23030001" version="1" check_existence="any_exist" check="all" comment="If /boot is configured in /etc/fstab, it is configured with the nosuid option">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23030001" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:2303001" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23030101" version="2" check_existence="any_exist" check="all" comment="Device files are configured in /etc/fstab to use the nodev option.  Mounts on '/', and vfat mounts, are ignored.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23030101" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23030100" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23030600" version="1" check_existence="any_exist" check="all" comment="all nfs entries in /etc/fstab have noexec">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23030600" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23030600" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23030601" version="1" check_existence="any_exist" check="all" comment="all nfs entries in /etc/mtab have noexec">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23030601" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23030600" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23030800" version="1" check_existence="at_least_one_exists" check="all" comment="NFS mounts are mounted with nosuid">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25785400" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23030800" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23031300" version="2" check="all" comment="For the global domain, core is set to 0.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23031300" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23031300" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23031301" version="2" check_existence="any_exist" check="all" comment="If core is set for any specific domains, it is set to 0.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23031301" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23031300" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23031400" version="1" check="all" comment="/usr/systemd/coredump.conf:Storage is set to none.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23031400" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000014" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23031500" version="1" check="all" comment="core dump backtraces are disabled">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23031500" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23031500" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23031600" version="1" check_existence="at_least_one_exists" check="all" comment="The system is using DNS">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23031600" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23031600" />
+        </textfilecontent54_test>
+        <variable_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23031601" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/resolv.conf is configured with at least two name servers">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23031601" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23031601" />
+        </variable_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23031602" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/resolv.conf contains at least one nameserver entry">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23031602" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23032400" version="1" check_existence="at_least_one_exists" check="all" comment="All local interactive user accounts are assigned a home directory upon creation">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23032400" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000016" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23032900" version="2" check="all" comment="AutomaticLoginEnable is set to false in /etc/gdm/custom.conf.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23032900" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000000" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23033300" version="1" check_existence="at_least_one_exists" check="all" state_operator="AND" comment="deny is set to 3 or less but not 0 in /etc/security/faillock.conf">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23033300" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23033300" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000015" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23033500" version="3" check_existence="at_least_one_exists" check="all" state_operator="AND" comment="/etc/security/faillock.conf:fail_interval &lt;=900 and !=0">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23033500" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23033500" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000024" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23033700" version="2" check_existence="all_exist" check="all" comment="unlock_time is set to 0 in /etc/security/faillock.conf">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23033700" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23033900" version="1" check="all" comment="/etc/security/faillock.conf: dir = var/log/faillock">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23033900" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23033900" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23034300" version="1" check_existence="all_exist" check="all" comment="check /etc/security/faillock.conf for the audit setting">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23034300" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23034600" version="1" check_existence="at_least_one_exists" check="all" comment="limits.conf and limits.d/*.conf:maxlogins is set to 10 or less by default">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23034600" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23034600" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23034601" version="1" check_existence="any_exist" check="all" comment="limits.conf and limits.d/*.conf:maxlogins is set to 10 or less for non-default domains">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23034603" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23034600" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23035100" version="2" check_existence="at_least_one_exists" check="at least one" comment="dconf smartcard removal-action lock-screen">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23035100" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23035100" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23035600" version="1" check="all" comment="The pam_pwquality module is included in password-auth.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23035600" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23035700" version="1" check="all" comment="at least one uppercase character is required">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23035700" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000020" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23035800" version="1" check="all" comment="at least one lowercase character is required">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23035800" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000020" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23035900" version="1" check="all" comment="at least one numeric character is required">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23035900" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000020" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23036000" version="1" check="all" comment="The maximum number of repeating characters of the same character class be limited to four when passwords are changed.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23036000" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23036000" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000015" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23036100" version="1" check="all" comment="The maximum number of repeating characters is limited to three when passwords are changed.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23036100" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23036100" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000015" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23036200" version="1" check="all" comment="Passwords contain at least four character classes.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23036200" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23036200" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23036300" version="1" check="all" comment="at least 8 characters must change when passwords are changed">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23036300" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23036300" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23036400" version="1" check_existence="none_exist" check="all" comment="Root does not have a minimum password age of 0 or blank">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23036400" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23036500" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/login.defs:PASS_MIN_DAYS &gt;= 1">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23036500" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23036500" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23036900" version="1" check="all" comment="passwords must have a minimum of 15 characters">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23036900" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23036900" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23037300" version="2" check="all" comment="/etc/default/useradd: INACTIVE is set to 35 or less, but not -1">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23037300" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000019" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23037300" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23037500" version="1" check="all" comment="Passwords contain at least one special character">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23037500" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000020" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23037600" version="3" check_existence="none_exist" check="all" comment="/etc/sssd/sssd.conf:cache_credentials = false">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23037606" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23037602" version="2" check_existence="at_least_one_exists" check="all" comment="/etc/sssd/sssd.conf:offline_credentials_expiration = 1">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23037608" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23037700" version="2" check="all" comment="passwords must not be dictionary words">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23037700" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000024" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23037800" version="1" check="all" comment="/etc/login.defs: FAIL_DELAY = 4 or greater">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23037800" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23037800" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23038200" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/ssh/sshd_config:PrintLastLog == yes">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23038200" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000016" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23038300" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/login.defs:UMASK == 077">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23038300" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23038300" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23038501" version="1" check_existence="all_exist" check="all" comment="UMASK is set to only 077 in /etc/csh.cshrc">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23038501" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23038500" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23038600" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of execve syscall comparing uids">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23038600" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23038601" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of execve syscall comparing uids">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23038601" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23038602" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of execve syscall comparing gids">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23038602" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23038603" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of execve syscall comparing gids">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23038603" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23038800" version="1" check="all" comment="/etc/audit/auditd.conf: action_mail_acct = root">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23038800" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23038800" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23038900" version="2" check="all" comment="/etc/aliases contains 'postmaster: root'">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23038900" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23039000" version="1" check="all" state_operator="OR" comment="/etc/audit/auditd.conf: disk_error_action = SYSLOG, SINGLE, or HALT">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23039000" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23039000" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23039001" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23039002" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23039200" version="1" check="all" state_operator="OR" comment="/etc/audit/auditd.conf: disk_full_action = SYSLOG, SINGLE, or HALT">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23039200" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23039200" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23039201" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23039202" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23039300" version="2" check="all" comment="/etc/audit/auditd.conf: local_events = yes">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23039300" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000022" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23039400" version="1" check="all" state_operator="OR" comment="/etc/audit/auditd.conf: name_format = hostname, fqd or numeric">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23039400" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23039400" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23039401" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23039402" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23039500" version="2" check="all" comment="/etc/audit/auditd.conf: log_format = enriched">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23039500" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23039500" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23040200" version="1" check="all" comment="/etc/audit/audit.rules: -e 2 option is present and is the last line in the file">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23040200" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23040300" version="1" check="all" comment="/etc/audit/audit.rules: --loginuid-immutable option is present">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23040300" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23040400" version="1" check_existence="all_exist" check="all" comment="Events resulting in modifications to /etc/shadow are audited">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23040400" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23040500" version="1" check_existence="all_exist" check="all" comment="Audit modifications to /etc/security/opasswd">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23040500" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23040600" version="1" check_existence="all_exist" check="all" comment="Audit modifications to /etc/passwd">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23040600" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23040700" version="1" check_existence="all_exist" check="all" comment="Audit modifications to /etc/gshadow">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23040700" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23040800" version="1" check_existence="all_exist" check="all" comment="Audit modifications to /etc/group">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23040800" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23040900" version="1" check_existence="all_exist" check="all" comment="Audit modifications to /etc/sudoers">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23040900" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23041000" version="1" check_existence="all_exist" check="all" comment="Audit modifications to /etc/sudoers.d/">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23041000" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23041200" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/bin/su">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23041200" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23041300" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of setxattr syscall (auid&gt;=1000)">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23041300" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23041301" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of setxattr syscall (auid&gt;=1000)">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23041301" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23041302" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of setxattr syscall (auid=0)">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23041302" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23041303" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of setxattr syscall (auid=0)">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23041303" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23041800" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/bin/chage">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23041800" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23041900" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/bin/chcon">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23041900" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23042100" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/bin/ssh-agent">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23042100" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23042200" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/bin/passwd">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23042200" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23042300" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/bin/mount">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23042300" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23042400" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/bin/umount">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23042400" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23042600" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/sbin/unix_update">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23042600" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23042700" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/sbin/postdrop">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23042700" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23042800" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/sbin/postqueue">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23042800" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23042900" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/sbin/semanage">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23042900" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23043000" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/sbin/setfiles">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23043000" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23043100" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/sbin/userhelper">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23043100" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23043200" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/sbin/setsebool">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23043200" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23043300" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/sbin/unix_chkpwd">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23043300" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23043400" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/libexec/openssh/ssh-keysign">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23043400" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23043500" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/bin/setfacl">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23043500" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23043600" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/sbin/pam_timestamp_check">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23043600" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23043700" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/bin/newgrp">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23043700" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23043800" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of init_module syscall">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23043800" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23043801" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of init_module syscall">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23043801" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23043802" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of finit_module syscall">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23043802" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23043803" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of finit_module syscall">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23043803" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044400" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/bin/gpasswd">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23044400" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044600" version="2" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of delete_module syscall">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23044600" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044601" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of delete_module syscall">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23044601" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044700" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/bin/crontab">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23044700" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044800" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/bin/chsh">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23044800" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044900" version="1" check="all" comment="Audit 32-bit invocations of truncate syscall with exit EPERM">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23044900" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044901" version="1" check="all" comment="Audit 64-bit invocations of truncate syscall with exit EPERM">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23044901" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044902" version="1" check="all" comment="Audit 32-bit invocations of truncate syscall with exit EACCES">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23044902" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044903" version="1" check="all" comment="Audit 64-bit invocations of truncate syscall with exit EACCES">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23044903" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044904" version="1" check="all" comment="Audit 32-bit invocations of ftruncate syscall with exit EPERM">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23044904" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044905" version="1" check="all" comment="Audit 64-bit invocations of ftruncate syscall with exit EPERM">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23044905" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044906" version="1" check="all" comment="Audit 32-bit invocations of ftruncate syscall with exit EACCES">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23044906" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044907" version="1" check="all" comment="Audit 64-bit invocations of ftruncate syscall with exit EACCES">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23044907" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044908" version="1" check="all" comment="Audit 32-bit invocations of creat syscall with exit EPERM">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23044908" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044909" version="1" check="all" comment="Audit 64-bit invocations of creat syscall with exit EPERM">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23044909" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044910" version="1" check="all" comment="Audit 32-bit invocations of creat syscall with exit EACCES">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23044910" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044911" version="1" check="all" comment="Audit 64-bit invocations of creat syscall with exit EACCES">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23044911" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044912" version="1" check="all" comment="Audit 32-bit invocations of open syscall with exit EPERM">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23044912" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044913" version="1" check="all" comment="Audit 64-bit invocations of open syscall with exit EPERM">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23044913" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044914" version="1" check="all" comment="Audit 32-bit invocations of open syscall with exit EACCES">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23044914" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044915" version="1" check="all" comment="Audit 64-bit invocations of open syscall with exit EACCES">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23044915" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044916" version="1" check="all" comment="Audit 32-bit invocations of openat syscall with exit EPERM">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23044916" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044917" version="1" check="all" comment="Audit 64-bit invocations of openat syscall with exit EPERM">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23044917" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044918" version="1" check="all" comment="Audit 32-bit invocations of openat syscall with exit EACCES">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23044918" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044919" version="1" check="all" comment="Audit 64-bit invocations of openat syscall with exit EACCES">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23044919" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044920" version="1" check="all" comment="Audit 32-bit invocations of open_by_handle_at syscall with exit EPERM">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23044920" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044921" version="1" check="all" comment="Audit 64-bit invocations of open_by_handle_at syscall with exit EPERM">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23044921" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044922" version="1" check="all" comment="Audit 32-bit invocations of open_by_handle_at syscall with exit EACCES">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23044922" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23044923" version="1" check="all" comment="Audit 64-bit invocations of open_by_handle_at syscall with exit EACCES">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23044923" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23045500" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of chown syscall">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23045500" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23045501" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of chown syscall">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23045501" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23045502" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of lchown syscall">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23045502" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23045503" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of lchown syscall">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23045503" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23045504" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of fchownat syscall">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23045504" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23045505" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of fchownat syscall">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23045505" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23045506" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of fchown syscall">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23045506" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23045507" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of fchown syscall">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23045507" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23045600" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of chmod syscall">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23045600" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23045601" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of chmod syscall">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23045601" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23045602" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of fchmod syscall">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23045602" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23045603" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of fchmod syscall">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23045603" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23045604" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of fchmodat syscall">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23045604" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23045605" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of fchmodat syscall">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23045605" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23046200" version="1" check_existence="all_exist" check="all" comment="Invocations of /usr/bin/sudo are audited">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23046200" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23046300" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/sbin/usermod">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23046300" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23046400" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/bin/chacl">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23046400" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23046500" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/bin/kmod">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23046500" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23046700" version="1" check_existence="all_exist" check="all" comment="Audit modifications to /var/log/lastlog">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23046700" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23046800" version="1" check="all" comment="BLS options contain audit=1">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25779300" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23046800" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23046801" version="1" check="all" comment="The GRUB_CMDLINE_LINUX arguments in /etc/default/grub contain audit=1">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25779301" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23046800" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23046900" version="2" check="all" comment="The Boot Loader Specification options have audit_backlog_limit set to 8192 or greater.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23046900" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23046900" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23046901" version="2" check="all" comment="The GRUB_CMDLINE_LINUX arguments in /etc/default/grub have audit_backlog_limit set to 8192 or greater.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23046901" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23046900" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23047000" version="1" check="all" comment="FirewallBackend is set to nftables in /etc/usbguard/usbguard-daemon.conf.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23047000" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23047000" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23047500" version="1" check="all" comment="/etc/aide.conf has a selection line for /usr/sbin/auditctl.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23047500" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23047501" version="1" check="all" comment="/etc/aide.conf has a selection line for /usr/sbin/auditd.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23047501" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23047502" version="1" check="all" comment="/etc/aide.conf has a selection line for /usr/sbin/ausearch.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23047502" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23047503" version="1" check="all" comment="/etc/aide.conf has a selection line for /usr/sbin/aureport.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23047503" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23047504" version="1" check="all" comment="/etc/aide.conf has a selection line for /usr/sbin/autrace.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23047504" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23047505" version="1" check="all" comment="/etc/aide.conf has a selection line for /usr/sbin/augenrules.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23047505" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23048000" version="1" check="all" state_operator="OR" comment="/etc/audit/auditd.conf: overflow_action = syslog, single or halt">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23048000" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23039000" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23039001" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23039002" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23048100" version="1" check_existence="at_least_one_exists" check="all" comment="ActionSendStreamDriverMode == 1">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23048100" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23048300" version="2" check="all" comment="/etc/audit/auditd.conf: space_left greater than or equal to 25%">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23048300" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23048300" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23048301" version="1" check="all" comment="/etc/audit/auditd.conf: space_left less than 100%">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23048300" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23048301" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23048500" version="1" check="all" comment="The chrony daemon is disabled from acting as a server.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23048500" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23048600" version="1" check="all" comment="/etc/chrony.conf: cmdport option is set to 0">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23048600" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23049100" version="1" check="all" comment="BLS options contain pti=on">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25779300" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23049100" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23049101" version="1" check="all" comment="The GRUB_CMDLINE_LINUX arguments in /etc/default/grub contain pti=on">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25779301" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23049100" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23049400" version="2" check="all" comment="/etc/modprobe.d contains a file that contains 'install atm /bin/false'">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23049400" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23049401" version="1" check="all" comment="/etc/modprobe.d contains a file that contains 'blacklist atm'">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23049401" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23049501" version="1" check="all" comment="/etc/modprobe.d contains a file that contains 'blacklist can'">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23049501" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23049600" version="2" check="all" comment="/etc/modprobe.d contains a file that contains 'install sctp /bin/false'">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23049600" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23049601" version="1" check="all" comment="/etc/modprobe.d contains a file that contains 'blacklist sctp'">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23049601" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23049700" version="2" check="all" comment="/etc/modprobe.d contains a file that contains 'install tipc /bin/false'">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23049700" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23049701" version="1" check="all" comment="/etc/modprobe.d contains a file that contains 'blacklist tipc'">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23049701" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23049800" version="2" check="all" comment="/etc/modprobe.d contains a file that contains 'install cramfs /bin/false'">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23049800" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23049801" version="1" check="all" comment="/etc/modprobe.d contains a file that contains 'blacklist cramfs'">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23049801" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23049802" version="1" check="all" comment="/etc/modprobe.conf contains 'install cramfs /bin/false'">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23049802" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23049803" version="1" check="all" comment="/etc/modprobe.conf contains 'blacklist cramfs'">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23049803" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23049900" version="2" check="all" comment="/etc/modprobe.d contains a file that contains 'install firewire-core /bin/false'">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23049900" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23049901" version="1" check="all" comment="/etc/modprobe.d contains a file that contains 'blacklist firewire-core'">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23049901" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23050300" version="2" check="all" comment="/etc/modprobe.d contains a file that contains 'install usb-storage /bin/false'">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23050300" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23050301" version="1" check="all" comment="/etc/modprobe.d contains a file that contains 'blacklist usb-storage'">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23050301" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23050700" version="1" check="all" comment="/etc/modprobe.d contains a file that contains 'install bluetooth /bin/false'">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23050700" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23050701" version="1" check="all" comment="/etc/modprobe.d contains a file that contains 'blacklist bluetooth'">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23050701" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23050800" version="1" check_existence="any_exist" check="all" comment="If /dev/shm is configured in /etc/fstab, it is configured with the nodev option.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23050900" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23030100" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23050900" version="1" check_existence="any_exist" check="all" comment="If /dev/shm is configured in /etc/fstab, it is configured with the nosuid option">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23050900" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23050900" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23051001" version="1" check_existence="any_exist" check="all" comment="If /dev/shm is configured in /etc/fstab, it is configured with the noexec option">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23051001" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23051001" />
+        </textfilecontent54_test>
+        <variable_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23051101" version="1" check="all" comment="/tmp is configured with the nodev option in /etc/fstab">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23051101" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23051100" />
+        </variable_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23051102" version="1" check="all" comment="/tmp is configured in /etc/fstab">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23051102" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23051201" version="1" check="all" comment="/tmp is configured with the nosuid option in /etc/fstab">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23051201" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23051200" />
+        </textfilecontent54_test>
+        <variable_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23051401" version="1" check="all" comment="/var/log is configured with the nodev option in /etc/fstab">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23051401" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23051400" />
+        </variable_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23051402" version="1" check="all" comment="/var/log is configured in /etc/fstab">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23051402" />
+        </textfilecontent54_test>
+        <variable_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23051501" version="1" check="all" comment="/var/log is configured with the nosuid option in /etc/fstab">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23051501" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23051500" />
+        </variable_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23051502" version="1" check="all" comment="/var/log is configured in /etc/fstab">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23051502" />
+        </textfilecontent54_test>
+        <variable_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23051600" version="1" check="all" comment="/var/log is configured with the noexec option in /etc/fstab">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23051600" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23051600" />
+        </variable_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23051601" version="1" check="all" comment="/var/log is configured in /etc/fstab">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23051601" />
+        </textfilecontent54_test>
+        <variable_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23051701" version="1" check="all" comment="/var/log/audit is configured with the nodev option in /etc/fstab">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23051701" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23051700" />
+        </variable_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23051702" version="1" check="all" comment="/var/log/audit is configured in /etc/fstab">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23051702" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23051800" version="1" check="all" comment="/var/log/audit is configured in /etc/fstab with the nosuid option.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23051702" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:2303001" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23051901" version="1" check="all" comment="/var/log/audit is configured with the noexec option in /etc/fstab">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23051901" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23051900" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23052001" version="1" check_existence="any_exist" check="all" comment="If /var/tmp is configured in /etc/fstab, it is configured with the nodev option">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23052001" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23052000" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23052101" version="1" check_existence="any_exist" check="all" comment="If /var/tmp is configured in /etc/fstab, it is configured with the nosuid option">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23052101" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23052101" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23052500" version="1" check="all" comment="FirewallBackend is set to nftables in /etc/firewalld/firewalld.conf.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23052500" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23052500" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23052700" version="1" check_existence="all_exist" check="all" comment="/etc/ssh/sshd_config:RekeyLimit max data and time are greater than zero.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23052700" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23052700" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23052701" version="1" check_existence="all_exist" check="all" comment="/etc/ssh/sshd_config.d:RekeyLimit max data and time are greater than zero.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23052701" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23052700" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23055001" version="1" check="all" comment="/etc/postfix/main.cf: smtpd_client_restrictions = permit_mynetworks,reject">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23055001" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23055500" version="2" check_existence="at_least_one_exists" check="all" comment="/etc/ssh/sshd_config or /etc/ssh/sshd_config.d/*:X11Forwarding == no">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23055500" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000017" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23055600" version="3" check_existence="at_least_one_exists" check="all" comment="sshd_config X11UseLocalhost is set to yes.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23055600" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000016" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23481500" version="2" check_existence="at_least_one_exists" check="all" comment="/etc/ssh/sshd_config:LogLevel == VERBOSE">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23481502" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23481500" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23499000" version="2" check_existence="at_least_one_exists" check="all" comment="/etc/systemd/system.conf:CtrlAltDelBurstAction is set to none.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23499000" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000014" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23764200" version="1" check_existence="at_least_one_exists" check="all" comment="Defaults !targetpw in /etc/sudoers">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23764200" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23764201" version="1" check_existence="at_least_one_exists" check="at least one" comment="/etc/sudoers.d included in /etc/sudoers">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23764201" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23764200" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23764202" version="1" check_existence="at_least_one_exists" check="all" comment="Defaults !targetpw in /etc/sudoers.d">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23764202" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23764203" version="1" check_existence="at_least_one_exists" check="all" comment="Defaults !rootpw in /etc/sudoers">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23764203" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23764204" version="1" check_existence="at_least_one_exists" check="all" comment="Defaults !rootpw in /etc/sudoers.d">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23764204" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23764205" version="1" check_existence="at_least_one_exists" check="all" comment="Defaults !runaspw in /etc/sudoers">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23764205" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23764206" version="1" check_existence="at_least_one_exists" check="all" comment="Defaults !runaspw in /etc/sudoers.d">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23764206" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23764300" version="2" check="all" comment="Defaults timestamp_timeout is to a positive number in /etc/sudoers and /etc/sudoers.d.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23764302" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000019" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23827800" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/bin/sudoedit">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23827800" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23828500" version="1" check="all" comment="Audit modifications to /var/log/tallylog">
+          <object object_ref="oval:mil.disa.stig.ind:obj:23828500" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24451900" version="1" check_existence="all_exist" check="all" comment="/etc/dconf/db/local.d/*/banner-message-enable is set to true">
+          <object object_ref="oval:mil.disa.stig.ind:obj:24451900" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000001" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24452300" version="1" check_existence="all_exist" check="all" comment="emergency.service config correct">
+          <object object_ref="oval:mil.disa.stig.ind:obj:24452300" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:24452300" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24452800" version="1" check="all" comment="/etc/ssh/sshd_config.d: GSSAPIAuthentication is set to no">
+          <object object_ref="oval:mil.disa.stig.ind:obj:24452800" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000017" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24452801" version="1" check="all" comment="/etc/ssh/sshd_config: GSSAPIAuthentication is set to no">
+          <object object_ref="oval:mil.disa.stig.ind:obj:24452801" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000017" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24453001" version="2" check_existence="at_least_one_exists" check="all" comment="If /boot/efi is configured in /etc/fstab, it is configured with the nosuid option">
+          <object object_ref="oval:mil.disa.stig.ind:obj:24453001" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:2445301" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24453801" version="1" check_existence="at_least_one_exists" check="all" comment="Check that the idle-delay setting is locked from nonprivileged user modification">
+          <object object_ref="oval:mil.disa.stig.ind:obj:24453801" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24453900" version="1" check="all" comment="/org/gnome/desktop/screensaver/lock-enabled in /etc/dconf/db/local.d/locks/*">
+          <object object_ref="oval:mil.disa.stig.ind:obj:24453900" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24454000" version="1" check_existence="none_exist" check="all" comment="There are no instances of nullok in /etc/pam.d/system-auth.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:24454000" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24454100" version="1" check_existence="none_exist" check="all" comment="There are no instances of nullok in /etc/pam.d/password-auth.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:24454100" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24454300" version="1" check="all" comment="/etc/audit/auditd.conf: space_left_action = email">
+          <object object_ref="oval:mil.disa.stig.ind:obj:24454300" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:24454300" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24877400" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of the rmdir">
+          <object object_ref="oval:mil.disa.stig.ind:obj:24877400" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24877401" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of the rmdir">
+          <object object_ref="oval:mil.disa.stig.ind:obj:24877401" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25170600" version="1" check_existence="none_exist" check="all" comment="There are no accounts in /etc/shadow that have blank password fields.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25170600" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25171300" version="1" check_existence="at_least_one_exists" check="at least one" comment="system-auth pam_pwquality">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25171300" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25171300" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25171400" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/pam.d/system-auth:retry not greater than 3 and not 0">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25171400" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000018" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25299700" version="4" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of rename">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25299700" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25299701" version="4" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of rename">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25299701" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25299800" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of renameat">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25299800" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25299801" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of renameat">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25299801" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25300000" version="4" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of unlink">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25300000" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25300001" version="4" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of unlink">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25300001" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25300100" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of unlinkat">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25300100" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25300101" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of unlinkat">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25300101" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303400" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of fsetxattr syscall (auid&gt;=1000)">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25303400" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303401" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of fsetxattr syscall (auid&gt;=1000)">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25303401" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303402" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of fsetxattr syscall (auid=0)">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25303402" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303403" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of fsetxattr syscall (auid=0)">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25303403" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303500" version="1" check="all" comment="Audit 32-bit invocations of the lsetxattr system call.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25303500" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303501" version="1" check="all" comment="Audit 64-bit invocations of the lsetxattr system call.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25303501" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303502" version="1" check="all" comment="Audit 32-bit invocations of the lsetxattr system call by root user.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25303502" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303503" version="1" check="all" comment="Audit 64-bit invocations of the lsetxattr system call by root user.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25303503" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303600" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of fremovexattr syscall">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25303600" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303601" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of fremovexattr syscall">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25303601" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303602" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of fremovexattr syscall by root">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25303602" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303603" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of fremovexattr syscall by root">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25303603" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303700" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of lremovexattr syscall">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25303700" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303701" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of lremovexattr syscall">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25303701" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303702" version="2" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of lremovexattr syscall by root">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25303702" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303703" version="2" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of lremovexattr syscall by root">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25303703" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303800" version="1" check="all" comment="Audit 32-bit invocations of the removexattr system call.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25303800" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303801" version="1" check="all" comment="Audit 64-bit invocations of the removexattr system call.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25303801" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303802" version="1" check="all" comment="Audit 32-bit invocations of the removexattr system call by root user.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25303802" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303803" version="1" check="all" comment="Audit 64-bit invocations of the removexattr system call by root user.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25303803" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25725800" version="1" check="all" comment="The system terminates idle user sessions.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25725800" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25725800" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25778700" version="2" check_existence="all_exist" check="all" comment="/etc/grub2.cfg:superusers exists and has a name.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25778700" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25778700" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25778701" version="1" check_existence="all_exist" check="all" comment="/boot/grub2/user.cfg:GRUB2_PASSWORD exists and has a PBKDF2/SHA512 password assigned.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25778701" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25778701" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25778800" version="1" check="all" comment="BLS options contain systemd.confirm_spawn">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25779300" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25778800" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25778801" version="1" check="all" comment="The GRUB_CMDLINE_LINUX arguments in /etc/default/grub contain systemd.confirm_spawn">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25779301" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25778800" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25779300" version="1" check_existence="at_least_one_exists" check="all" comment="BLS options contain page_poison=1">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25779300" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25779300" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25779301" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/default/grub page_poison=1">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25779301" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25779300" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25780400" version="2" check="all" comment="/etc/modprobe.conf contains a file that contains 'install atm /bin/false'">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25780400" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25780401" version="1" check="all" comment="/etc/modprobe.conf contains a file that contains 'blacklist atm'">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25780401" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25780600" version="1" check="all" comment="/etc/modprobe.conf contains 'install firewire-core /bin/false'">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25780600" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25780601" version="1" check="all" comment="/etc/modprobe.conf contains 'blacklist firewire-core'">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25780601" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25780700" version="1" check="all" comment="/etc/modprobe.conf contains 'install sctp /bin/false'">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25780700" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25780701" version="1" check="all" comment="/etc/modprobe.conf contains 'blacklist sctp'">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25780701" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25782000" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/dnf/dnf.conf gpgcheck=1">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25782000" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25782000" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25785400" version="1" check_existence="at_least_one_exists" check="all" comment="NFS mounts are present">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25785400" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25785401" version="1" check_existence="at_least_one_exists" check="all" comment="NFS mounts are mounted with nodev">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25785400" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25785400" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25786900" version="1" check="all" comment="/var is configured in /etc/fstab with the nodev option.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25786900" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25785400" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25794900" version="2" check_existence="at_least_one_exists" check="all" state_operator="OR" comment="DNS setting exists in NetworkManager.conf and is default, none or systemd-resolved">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25794900" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25794901" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25794902" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25794903" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25794901" version="1" check_existence="at_least_one_exists" check="all" comment="DNS setting exists in NetworkManager.conf main section">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25794901" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25794900" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25798100" version="3" check_existence="at_least_one_exists" check="all" comment="/etc/ssh/sshd_config:banner == /etc/issue">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25798102" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25798100" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25798101" version="1" check_existence="none_exist" check="all" comment="/etc/ssh/sshd_config:banner == none">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25798105" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25798300" version="1" check="all" comment="/etc/ssh/sshd_config.d: PubkeyAuthentication is set to yes">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25798300" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000016" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25798301" version="1" check="all" comment="/etc/ssh/sshd_config: PubkeyAuthentication is set to yes">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25798301" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000016" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25798400" version="3" check_existence="at_least_one_exists" check="all" comment="/etc/ssh/sshd_config or /etc/ssh/sshd_config.d/*:PermitEmptyPasswords == no">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25798400" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000017" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25798600" version="2" check="all" comment="/etc/ssh/sshd_config or /etc/ssh/sshd_config.d/*:UsePAM == yes">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25798600" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000023" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25798800" version="1" check_existence="at_least_one_exists" check="at least one" comment="sshd_config includes crypto-policies">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25798800" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25798800" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25798801" version="1" check_existence="at_least_one_exists" check="at least one" comment="sshd_config includes sshd_config.d">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25798800" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25798801" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25798802" version="1" check_existence="at_least_one_exists" check="at least one" comment="sshd_config.d includes crypto-policies">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25798801" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25798800" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25798900" version="1" check_existence="at_least_one_exists" check="all" state_operator="OR" comment="openssh.config ciphers correct">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25798900" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25798900" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25798901" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25799100" version="2" check_existence="at_least_one_exists" check="all" state_operator="OR" comment="/etc/crypto-policies/back-ends/openssh.config: MACs use FIPS 140-3 validated cryptographic hash algorithms">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25799100" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25799100" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25799101" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25799200" version="1" check_existence="at_least_one_exists" check="all" comment="HostbasedAuthentication option is not set to yes in /etc/ssh/sshd_config and /etc/ssh/sshd_config.d/*.conf.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25799200" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000017" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25799600" version="1" check_existence="at_least_one_exists" check="all" state_operator="AND" comment="/etc/ssh/sshd_config or /etc/ssh/sshd_config.d/.*:ClientAliveInterval == 600">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25799602" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25799600" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25799601" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25800200" version="2" check_existence="at_least_one_exists" check="all" state_operator="OR" comment="/etc/ssh/sshd_config or /etc/ssh/sshd_config.d/.*: Compression == no or Compression == delayed">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25800202" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000017" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25294300" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25800400" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/ssh/sshd_config + sshd_config.d:KerberosAuthentication == no">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25800401" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000017" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25800401" version="1" check_existence="all_exist" check="all" comment="/etc/ssh/sshd_config:KerberosAuthentication == no">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25800402" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000017" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25800500" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/ssh/sshd_config:IgnoreRhosts == yes">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25800500" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000016" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25800600" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/ssh/sshd_config:IgnoreUserKnownHosts == yes">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25800600" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000016" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25800601" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/ssh/sshd_config.d:IgnoreUserKnownHosts == yes">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25800601" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000016" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25800900" version="1" check="all" comment="/etc/ssh/sshd_config.d: PrintLastLog is set to yes">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25800900" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000016" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25801300" version="1" check_existence="at_least_one_exists" check="all" comment="/org/gnome/login-screen/banner-message-enable in dconf user database locks directories exists">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25801300" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25801400" version="1" check="all" comment="The system disables the GUI automount feature.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25801400" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000000" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25801500" version="1" check="all" comment="/org/gnome/desktop/media-handling/automount-open in /etc/dconf/db/local.d/locks/*">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25801500" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25801700" version="4" check_existence="at_least_one_exists" check="all" comment="check that /etc/dconf/profile/user:system-db is at minimum set to local">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25801700" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25801701" version="1" check_existence="at_least_one_exists" check="all" comment="Check that the automount setting is locked from nonprivileged user modification">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25801701" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25802000" version="1" check_existence="at_least_one_exists" check="all" comment="/org/gnome/settings-daemon/peripherals/smartcard/removal-action in dconf user database locks directories exists">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25802000" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25802600" version="1" check_existence="at_least_one_exists" check="all" comment="dconf user database(s) exist">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25802600" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25802601" version="1" check_existence="at_least_one_exists" check="all" comment="/org/gnome/desktop/screensaver/lock-delay in dconf user database locks directories exists">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25802601" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25802900" version="1" check_existence="at_least_one_exists" check="at least one" comment="dconf disable-restart-buttons true">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25802900" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25802900" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25803000" version="1" check_existence="at_least_one_exists" check="all" comment="Check that the disable-restart-button setting is locked from nonprivileged user modification">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25803000" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25803200" version="1" check_existence="at_least_one_exists" check="all" comment="/org/gnome/settings-daemon/plugins/media-keys/logout is locked in /etc/dconf/db/local.d/locks/*">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25803200" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25804100" version="1" check="all" comment="PASS_MAX_DAYS is less than or equal to 60 but greater than 0.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25804100" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000015" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25804100" />
+        </textfilecontent54_test>
+        <variable_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25804500" version="1" check_existence="at_least_one_exists" check="all" comment="UIDs are unique">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25804501" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25804500" />
+        </variable_test>
+        <variable_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25806100" version="1" check_existence="at_least_one_exists" check="all" comment="GIDs are unique">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25806101" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25806100" />
+        </variable_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25807200" version="1" check_existence="all_exist" check="all" comment="UMASK is set to 077 in /etc/bashrc">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25807200" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000025" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25807500" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/profile:umask == 077">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25807500" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000025" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25808000" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/security/faillock.conf dir option exists">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25808000" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25808600" version="1" check_existence="none_exist" check="all" comment="'!authenticate' does not exist in /etc/sudoers">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25808600" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25808601" version="1" check_existence="none_exist" check="all" comment="'!authenticate' does not exist in /etc/sudoers.d">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25808601" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25808700" version="1" check_existence="none_exist" check="all" comment="ALL does not exist /etc/sudoers">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25808700" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25808701" version="1" check_existence="none_exist" check="all" comment="ALL does not exist in /etc/sudoers.d">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25808701" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25808800" version="1" check="all" comment="Users must be members of the wheel group to run the su command.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25808800" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25809900" version="2" check="all" comment="The pam_unix module is included in password-auth and configured for 100000 or more rounds.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25809900" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25810000" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25810000" version="2" check="all" comment="The pam_unix module is included in system-auth and configured for 100000 or more rounds.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25810000" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25810000" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25810100" version="1" check="all" comment="Password complexity rules are enforced for the root account">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25810100" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25811800" version="1" check_existence="none_exist" check="all" comment="pam_succeed_if is not present in /etc/pam.d/sudo">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25811800" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25812100" version="1" check="all" comment="/etc/opensc.conf: card_drivers = cac">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25812100" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25812100" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25812200" version="2" check_existence="at_least_one_exists" check="all" comment="sssd.conf: pam_cert_auth = True">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25812202" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25812200" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25812300" version="1" check_existence="at_least_one_exists" check="all" comment="sssd config: certificate_verification: ocsp_dgst=sha512">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25812302" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25812300" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25812900" version="1" check_existence="at_least_one_exists" check="all" comment="/usr/lib/systemd/system/rescue.service:ExecStart is set to -/usr/lib/systemd/systemd-sulogin-shell rescue">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25812900" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25812901" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/systemd/system/rescue.service.d/*.conf:ExecStart is set to -/usr/lib/systemd/systemd-sulogin-shell rescue">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25812901" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25814300" version="1" check_existence="none_exist" check="all" comment="no remote log acceptance">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25814300" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25814400" version="1" check="all" comment="rsyslog: auth.* is configured to be logged">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25814400" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25814401" version="1" check="all" comment="rsyslog: authpriv.* is configured to be logged">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25814401" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25814402" version="1" check="all" comment="rsyslog: daemon.* is configured to be logged">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25814402" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25814500" version="1" check="all" comment="/etc/audit/plugins.d/syslog.conf: active = yes">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25814500" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000023" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25814600" version="1" check_existence="at_least_one_exists" check="all" comment="ActionSendStreamDriverAuthMode == x509/name">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25814600" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25814600" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25814800" version="1" check_existence="at_least_one_exists" check="all" comment="DefaultNetstreamDriver == gtls">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25814800" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25814800" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25814900" version="1" check_existence="at_least_one_exists" check="all" comment="remote TCP logging">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25814900" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25814900" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25814901" version="2" check_existence="at_least_one_exists" check="at least one" comment="remote TCP logging (advanced syntax)">
+          <object object_ref="oval:mil.disa.stig.ind:obj:20000002" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000027" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25814902" />
+        </textfilecontent54_test>
+        <variable_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25815500" version="1" check_existence="all_exist" check="all" comment="Audit file system total space &gt;= 10GiB">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25815500" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25815500" />
+        </variable_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25815800" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/audit/auditd.conf: admin_space_left = 5%">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25815800" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25815800" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25815900" version="1" check="all" comment="/etc/audit/auditd.conf: admin_space_left_action = SINGLE">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25815900" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:23039001" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25816000" version="1" check="all" state_operator="OR" comment="/etc/audit/auditd.conf: max_log_file_action is ROTATE or SINGLE">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25816000" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25816000" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25816001" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25816800" version="1" check_existence="at_least_one_exists" check="all" state_operator="AND" comment="/etc/audit/auditd.conf: freq = 1-100">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25816800" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25816800" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25816801" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25817000" version="1" check="all" comment="/etc/audit/auditd.conf: write_logs = yes">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25817000" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000022" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25821100" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/sbin/init">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25821100" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25821200" version="1" check="all" comment="Audit invocations of /usr/sbin/poweroff">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25821200" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25821300" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/sbin/reboot">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25821300" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25821400" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/sbin/shutdown">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25821400" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25821500" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of umount syscall">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25821500" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25821600" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of umount2 syscall">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25821600" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25821601" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of umount2 syscall">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25821601" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25822400" version="1" check="all" comment="Audit modifications to /var/log/faillock">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25822400" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25822700" version="1" check="all" comment="/etc/audit/audit.rules: -f 2 option is present">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25822700" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25823000" version="1" check_existence="all_exist" check="all" comment="fips_enabled == 1">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25823000" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25823200" version="1" check_existence="at_least_one_exists" check="at least one" comment="ipsec.conf includes crypto-policy">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25823200" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25823200" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25823201" version="1" check_existence="at_least_one_exists" check="at least one" comment="ipsec.conf includes /etc/ipsec.d/*.conf">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25823200" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25823201" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25823202" version="1" check_existence="at_least_one_exists" check="at least one" comment="/etc/ipsec.d/*.conf includes crypto-policy">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25823201" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25823200" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25824201" version="1" check_existence="at_least_one_exists" check="at least one" comment="named.conf includes crypto-policy">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25824201" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25824200" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:27017700" version="1" check="all" state_operator="OR" comment="openssh.config ciphers correct">
+          <object object_ref="oval:mil.disa.stig.ind:obj:27017700" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25798900" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25798901" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:27017800" version="1" check_existence="at_least_one_exists" check="all" state_operator="OR" comment="/etc/crypto-policies/back-ends/openssh.config: MACs use FIPS 140-3 validated cryptographic hash algorithms">
+          <object object_ref="oval:mil.disa.stig.ind:obj:27017800" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25799100" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25799101" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:27143800" version="2" check_existence="at_least_one_exists" check="all" comment="The Oracle Linux 9 minor version is supported.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:27143800" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000019" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:27170900" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/ssh/sshd_config:ClientAliveCountMax = 1">
+          <object object_ref="oval:mil.disa.stig.ind:obj:27170902" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:27172000" version="1" check_existence="at_least_one_exists" check="all" comment="The PermitUserEnvironment option is not set to yes in /etc/ssh/sshd_config and /etc/ssh/sshd_config.d/*.conf.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:27172000" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000017" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:27173400" version="1" check="all" comment="BLS options contain slub_debug=P">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25779300" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:27173400" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:27173401" version="1" check="all" comment="The GRUB_CMDLINE_LINUX arguments in /etc/default/grub contain slub_debug=P">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25779301" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:27173400" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:27175000" version="1" check_existence="at_least_one_exists" check="all" comment="TMOUT option is set to 900 or less in /etc/profile and /etc/profile.d/*.sh.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:27175000" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:27175000" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:27487000" version="1" check_existence="all_exist" check="all" comment="Audit modifications to /etc/cron.d">
+          <object object_ref="oval:mil.disa.stig.ind:obj:27487000" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:27487001" version="1" check_existence="all_exist" check="all" comment="Audit modifications to /var/spool/cron">
+          <object object_ref="oval:mil.disa.stig.ind:obj:27487001" />
+        </textfilecontent54_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:10000500" version="1" check_existence="all_exist" check="all" comment="Gnome is installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:10000500" />
+        </rpminfo_test>
+        <dpkginfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:10000501" version="1" check_existence="all_exist" check="all" comment="Gnome is installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:10000501" />
+        </dpkginfo_test>
+        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:10001600" version="1" check_existence="at_least_one_exists" check="all" comment="/boot/efi is mounted with the VFAT file type">
+          <object object_ref="oval:mil.disa.stig.linux:obj:10001600" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:10001600" />
+        </partition_test>
+        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23024000" version="1" check_existence="at_least_one_exists" check="all" comment="selinux is active">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23024000" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:23024000" />
+        </partition_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23024100" version="1" check_existence="all_exist" check="all" comment="package policycoreutils is installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23024100" />
+        </rpminfo_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23027300" version="1" check_existence="all_exist" check="all" comment="package openssl-pkcs11 is installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23027300" />
+        </rpminfo_test>
+        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23028501" version="2" check_existence="at_least_one_exists" check="all" comment="rngd.service is active">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23028501" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000003" />
+        </systemdunitproperty_test>
+        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23029200" version="1" check_existence="all_exist" check="all" comment="There is a separate file system for /var.">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23029200" />
+        </partition_test>
+        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23029300" version="1" check_existence="all_exist" check="all" comment="There is a separate file system for /var/log.">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23029300" />
+        </partition_test>
+        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23029400" version="1" check_existence="all_exist" check="all" comment="There is a separate file system for audit data directory.">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23029400" />
+        </partition_test>
+        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23029500" version="1" check_existence="all_exist" check="all" comment="There is a separate file system for /tmp.">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23029500" />
+        </partition_test>
+        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23029900" version="1" check="all" comment="/home is mounted with the nosuid option.">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23032800" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000002" />
+        </partition_test>
+        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23030000" version="1" check_existence="any_exist" check="all" comment="If /boot is mounted, it is mounted with the nosuid option">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23030000" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000002" />
+        </partition_test>
+        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23030100" version="2" check_existence="any_exist" check="all" comment="Device files are mounted with the nodev option.  Mounts on '/', and vfat mounts, are ignored.">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23030100" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000001" />
+        </partition_test>
+        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23031000" version="2" check_existence="any_exist" check="all" comment="kdump.service LoadState is masked if it exists.">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23031000" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000005" />
+        </systemdunitproperty_test>
+        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23031001" version="2" check_existence="any_exist" check="all" comment="kdump.service UnitFileState is masked if it exists.">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23031001" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000005" />
+        </systemdunitproperty_test>
+        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23031002" version="1" check_existence="any_exist" check="all" comment="kdump.service ActiveState is inactive if it exists.">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23031002" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000007" />
+        </systemdunitproperty_test>
+        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23031200" version="2" check_existence="any_exist" check="all" comment="systemd-coredump.socket LoadState is masked if exists">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23031200" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000005" />
+        </systemdunitproperty_test>
+        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23031201" version="2" check_existence="any_exist" check="all" comment="systemd-coredump.socket UnitFileState is masked if exists">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23031201" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000005" />
+        </systemdunitproperty_test>
+        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23032800" version="1" check_existence="all_exist" check="all" comment="A separate operating system filesystem is used for user home directories">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23032800" />
+        </partition_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23041100" version="1" check_existence="all_exist" check="all" comment="package audit is installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23041100" />
+        </rpminfo_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23047700" version="1" check_existence="all_exist" check="all" comment="The rsyslog package is installed.">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23047700" />
+        </rpminfo_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23047800" version="1" check_existence="all_exist" check="all" comment="package rsyslog-gnutls is installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23047800" />
+        </rpminfo_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23048700" version="1" check_existence="none_exist" check="all" comment="package telnet-server is NOT installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23048700" />
+        </rpminfo_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23048900" version="1" check_existence="none_exist" check="all" comment="package sendmail is NOT installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23048900" />
+        </rpminfo_test>
+        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23050200" version="1" check_existence="any_exist" check="all" comment="autofs.service ActiveState is inactive if it exists.">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23050200" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000007" />
+        </systemdunitproperty_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23050500" version="1" check="all" comment="firewalld package is installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23050500" />
+        </rpminfo_test>
+        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23050800" version="1" check_existence="any_exist" check="all" comment="If /dev/shm is mounted, it is mounted with the nodev option.">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23050900" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000001" />
+        </partition_test>
+        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23050900" version="1" check_existence="any_exist" check="all" comment="If /dev/shm is mounted, it is mounted with the nosuid option">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23050900" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:23050900" />
+        </partition_test>
+        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23051000" version="1" check_existence="any_exist" check="all" comment="If /dev/shm is mounted, it is mounted with the noexec option">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23051000" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000000" />
+        </partition_test>
+        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23051100" version="1" check="all" comment="/tmp is mounted with the nodev option">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23051100" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000001" />
+        </partition_test>
+        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23051200" version="1" check="all" comment="/tmp is mounted with the nosuid option">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23051200" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000002" />
+        </partition_test>
+        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23051300" version="1" check="all" comment="/tmp is mounted with the noexec option">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23029500" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000000" />
+        </partition_test>
+        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23051400" version="1" check="all" comment="/var/log is mounted with the nodev option">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23051400" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000001" />
+        </partition_test>
+        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23051500" version="1" check="all" comment="/var/log is mounted with the nosuid option">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23051500" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000002" />
+        </partition_test>
+        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23051600" version="1" check="all" comment="/var/log is mounted with the noexec option">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23051600" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:23051600" />
+        </partition_test>
+        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23051700" version="1" check="all" comment="/var/log/audit is mounted with the nodev option">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23051700" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000001" />
+        </partition_test>
+        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23051800" version="1" check="all" comment="/var/log/audit is mounted with the nosuid option.">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23051700" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000002" />
+        </partition_test>
+        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23051900" version="1" check="all" comment="/var/log/audit is mounted with the noexec option">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23051900" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000000" />
+        </partition_test>
+        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23052000" version="1" check_existence="any_exist" check="all" comment="If /var/tmp is mounted, it is mounted with the nodev option">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23052000" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000001" />
+        </partition_test>
+        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23052100" version="1" check_existence="any_exist" check="all" comment="If /var/tmp is mounted, it is mounted with the nosuid option">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23052100" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000002" />
+        </partition_test>
+        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23052200" version="1" check="all" comment="/var/tmp is mounted with the noexec option">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23052200" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000000" />
+        </partition_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23053300" version="1" check_existence="none_exist" check="all" comment="The tftp-server package is absent.">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23053300" />
+        </rpminfo_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23055000" version="1" check="all" comment="The postfix package is installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23055000" />
+        </rpminfo_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23055300" version="1" check_existence="none_exist" check="all" comment="The graphical display manager is absent.">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23055300" />
+        </rpminfo_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23055900" version="1" check_existence="none_exist" check="all" comment="gssproxy">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23055900" />
+        </rpminfo_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23056000" version="1" check_existence="none_exist" check="all" comment="package iprutils is NOT installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23056000" />
+        </rpminfo_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23056100" version="1" check="all" comment="tuned package is installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23056100" />
+        </rpminfo_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:24452700" version="1" check="all" comment="The rng-tools package is installed.">
+          <object object_ref="oval:mil.disa.stig.linux:obj:24452700" />
+        </rpminfo_test>
+        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:24452900" version="1" check_existence="at_least_one_exists" check="all" comment="/var/tmp is mounted">
+          <object object_ref="oval:mil.disa.stig.linux:obj:24452900" />
+        </partition_test>
+        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:24453000" version="2" check_existence="at_least_one_exists" check="all" comment="If /boot/efi is mounted, it is mounted with the nosuid option">
+          <object object_ref="oval:mil.disa.stig.linux:obj:24453000" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000002" />
+        </partition_test>
+        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:24454500" version="1" check_existence="at_least_one_exists" check="all" comment="fapolicyd.service is active">
+          <object object_ref="oval:mil.disa.stig.linux:obj:24454500" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000003" />
+        </systemdunitproperty_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:24454900" version="1" check_existence="at_least_one_exists" check="all" comment="openssh-server package is installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:24454900" />
+        </rpminfo_test>
+        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25778300" version="1" check="all" comment="The systemd-journald service is active.">
+          <object object_ref="oval:mil.disa.stig.linux:obj:25778300" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000003" />
+        </systemdunitproperty_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25782600" version="1" check_existence="none_exist" check="all" comment="No File Transfer Protocol (FTP) server packages are installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:25782600" />
+        </rpminfo_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25782800" version="3" check="all" comment="nfs-utils package is installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:25782800" />
+        </rpminfo_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25783600" version="1" check_existence="none_exist" check="all" comment="The quagga package is not installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:25783600" />
+        </rpminfo_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25783900" version="1" check_existence="at_least_one_exists" check="all" comment="gnutls-utils">
+          <object object_ref="oval:mil.disa.stig.linux:obj:25783900" />
+        </rpminfo_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25784000" version="1" check_existence="at_least_one_exists" check="all" comment="package nss-tools is installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:25784000" />
+        </rpminfo_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25784200" version="1" check="all" comment="The s-nail package is installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:25784200" />
+        </rpminfo_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25784900" version="1" check="all" comment="The autofs package is installed.">
+          <object object_ref="oval:mil.disa.stig.linux:obj:25784900" />
+        </rpminfo_test>
+        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25785000" version="2" check="all" comment="/home is mounted with the noexec option">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23032800" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000001" />
+        </partition_test>
+        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25785200" version="2" check_existence="at_least_one_exists" check="all" comment="/home has noexec option">
+          <object object_ref="oval:mil.disa.stig.linux:obj:25785200" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000000" />
+        </partition_test>
+        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25786000" version="2" check_existence="at_least_one_exists" check="all" comment="/boot has nodev option">
+          <object object_ref="oval:mil.disa.stig.linux:obj:25786000" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000001" />
+        </partition_test>
+        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25786900" version="1" check="all" comment="/var is mounted with the nodev option.">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23029200" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000001" />
+        </partition_test>
+        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25793600" version="1" check_existence="at_least_one_exists" check="all" comment="Check if firewalld is in 'active' state">
+          <object object_ref="oval:mil.disa.stig.linux:obj:25793600" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000003" />
+        </systemdunitproperty_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25794300" version="1" check="all" comment="The chrony package is installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:25794300" />
+        </rpminfo_test>
+        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25794400" version="1" check_existence="at_least_one_exists" check="all" comment="chronyd service is active">
+          <object object_ref="oval:mil.disa.stig.linux:obj:25794400" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000003" />
+        </systemdunitproperty_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25795201" version="1" check_existence="at_least_one_exists" check="all" comment="The tftp-server package is iinstalled.">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23053300" />
+        </rpminfo_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25795400" version="1" check_existence="at_least_one_exists" check="all" comment="libreswan package is installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:25795400" />
+        </rpminfo_test>
+        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25797900" version="1" check_existence="at_least_one_exists" check="all" comment="Check if SSH is in 'active' state">
+          <object object_ref="oval:mil.disa.stig.linux:obj:25797900" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000003" />
+        </systemdunitproperty_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25798000" version="1" check_existence="at_least_one_exists" check="all" comment="openssh-clients package is installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:25798000" />
+        </rpminfo_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25803500" version="1" check_existence="at_least_one_exists" check="all" comment="usbguard package is installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:25803500" />
+        </rpminfo_test>
+        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25803600" version="1" check_existence="at_least_one_exists" check="all" comment="usbguard.service is active">
+          <object object_ref="oval:mil.disa.stig.linux:obj:25803600" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:25803600" />
+        </systemdunitproperty_test>
+        <selinuxsecuritycontext_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25808000" version="1" check_existence="at_least_one_exists" check="all" comment="configured faillock directory has correct selinux context">
+          <object object_ref="oval:mil.disa.stig.linux:obj:25808000" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:25808000" />
+        </selinuxsecuritycontext_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25808200" version="1" check="all" comment="The policycoreutils-python-utils package is installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:25808200" />
+        </rpminfo_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25808300" version="1" check_existence="at_least_one_exists" check="all" comment="sudo package is installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:25808300" />
+        </rpminfo_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25808900" version="1" check_existence="at_least_one_exists" check="all" comment="fapolicyd package is installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:25808900" />
+        </rpminfo_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25812400" version="1" check_existence="at_least_one_exists" check="all" comment="package pcsc-lite is installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:25812400" />
+        </rpminfo_test>
+        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25812500" version="2" check="all" comment="The pcscd socket is active.">
+          <object object_ref="oval:mil.disa.stig.linux:obj:25812500" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000003" />
+        </systemdunitproperty_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25812600" version="1" check_existence="at_least_one_exists" check="all" comment="opensc package is installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:25812600" />
+        </rpminfo_test>
+        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25814200" version="2" check_existence="at_least_one_exists" check="all" comment="rsyslog.service is active">
+          <object object_ref="oval:mil.disa.stig.linux:obj:25814200" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000003" />
+        </systemdunitproperty_test>
+        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25815200" version="1" check_existence="at_least_one_exists" check="all" comment="auditd.service is active">
+          <object object_ref="oval:mil.disa.stig.linux:obj:25815200" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000003" />
+        </systemdunitproperty_test>
+        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25815201" version="1" check_existence="at_least_one_exists" check="all" comment="auditd.service is running">
+          <object object_ref="oval:mil.disa.stig.linux:obj:25815201" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000004" />
+        </systemdunitproperty_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25817500" version="1" check_existence="at_least_one_exists" check="all" comment="audispd-plugins package is installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:25817500" />
+        </rpminfo_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25823400" version="2" check_existence="at_least_one_exists" check="all" comment="crypto-policies package is installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:25823400" />
+        </rpminfo_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25824200" version="1" check_existence="at_least_one_exists" check="all" comment="BIND installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:25824200" />
+        </rpminfo_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:27149300" version="1" check="all" comment="The sssd package is installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:27149300" />
+        </rpminfo_test>
+        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:27149400" version="1" check_existence="at_least_one_exists" check="all" comment="sssd.service is active">
+          <object object_ref="oval:mil.disa.stig.linux:obj:27149400" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000003" />
+        </systemdunitproperty_test>
+        <systemdunitproperty_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:27149401" version="1" check_existence="at_least_one_exists" check="all" comment="sssd.service is enabled">
+          <object object_ref="oval:mil.disa.stig.linux:obj:27149401" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:20000006" />
+        </systemdunitproperty_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:27150500" version="2" check_existence="at_least_one_exists" check="all" comment="oracle-linux-manager-client package is installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:27150500" />
+        </rpminfo_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:28513400" version="1" check_existence="at_least_one_exists" check="all" comment="aide package is installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:28513400" />
+        </rpminfo_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:2582320000" version="1" check_existence="at_least_one_exists" check="all" comment="The libreswan package is installed.">
+          <object object_ref="oval:mil.disa.stig.linux:obj:2582320000" />
+        </rpminfo_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:10000602" version="1" check_existence="all_exist" check="all" comment="/sys/firmware/efi exists">
+          <object object_ref="oval:mil.disa.stig.unix:obj:10000602" />
+        </file_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:10001200" version="1" check_existence="all_exist" check="all" comment="net.ipv6.conf.all.disable_ipv6 setting in kernel is set to 1">
+          <object object_ref="oval:mil.disa.stig.unix:obj:10001200" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
+        </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:20461100" version="2" check_existence="all_exist" check="all" comment="net.ipv4.conf.default.rp_filter setting in kernel is set to 1">
+          <object object_ref="oval:mil.disa.stig.unix:obj:20461100" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
+        </sysctl_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23024500" version="1" check="all" comment="/var/log/messages file has mode 0640 or less permissive">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23024500" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000007" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23024600" version="1" check="all" comment="/var/log/messages file is owned by root">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23024600" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23024700" version="2" check="all" comment="/var/log/messages file is owned by root">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23024700" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000006" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23024800" version="1" check="all" comment="/var/log directory has mode 0755 or less permissive.">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23024800" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000008" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23024900" version="1" check="all" comment="/var/log directory is owned by root">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23024900" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23025000" version="1" check="all" comment="/var/log directory is group-owned by root.">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23025000" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000006" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23026100" version="1" check_existence="none_exist" check="all" comment="The operating system library files are owned by root">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23026100" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23026200" version="2" check_existence="none_exist" check="all" comment="The operating system library files are group owned by root">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23026200" />
+        </file_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23026600" version="1" check_existence="all_exist" check="all" comment="kernel.kexec_load_disabled setting in kernel is set to 1">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23026600" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
+        </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23028000" version="2" check_existence="all_exist" check="all" comment="kernel.randomize_va_space setting in kernel is set to 2">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23028000" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000011" />
+        </sysctl_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23028300" version="1" check_existence="none_exist" check="all" comment="There must be no shosts.equiv files on the system.">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23028300" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23028400" version="1" check_existence="none_exist" check="all" comment="There are no .shosts files on the system.">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23028400" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23028600" version="1" check_existence="any_exist" check="all" comment="The SSH daemon public host key files have mode 0644 or less permissive">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23028600" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000001" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23028700" version="1" check_existence="all_exist" check="all" comment="SSH private key files mode 640 or less permissive">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23028700" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000007" />
+        </file_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23031100" version="2" check_existence="all_exist" check="all" comment="kernel.core_pattern setting in kernel is set to |/bin/false">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23031100" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:23031100" />
+        </sysctl_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23032500" version="2" check_existence="any_exist" check="all" comment="The home directories of non-system users have mode 0740 or less permissive.">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23032500" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000020" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23032501" version="1" check="all" comment="The home directory of the root user has mode 0740 or less permissive.">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23032501" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000020" />
+        </file_test>
+        <password_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23036401" version="1" check_existence="none_exist" check="all" comment="Non-system users do not have a minimum password age of 0 or blank">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23036401" />
+        </password_test>
+        <shadow_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23036700" version="1" check_existence="any_exist" check="all" comment="No password in /etc/shadow has a maximum password age of 0 or greater than 60">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23036700" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:23036700" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:23036701" />
+        </shadow_test>
+        <shadow_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23036701" version="1" check_existence="all_exist" check="all" comment="Root password in /etc/shadow does not have a maximum password age of 0 or greater than 60">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23036702" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:23036700" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:23036701" />
+        </shadow_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23039600" version="1" check="all" comment="Audit log is mode 0600 or less permissive">
+          <object object_ref="oval:mil.disa.stig.unix:obj:20000011" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000004" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23039800" version="2" check="all" comment="audit logs are group-owned by root">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23039700" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000006" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23039900" version="1" check_existence="all_exist" check="all" comment="audit log directories are owned by root">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23040100" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23047100" version="1" check="all" comment="/etc/audit/auditd.conf has mode 0640 or less permissive">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23047100" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000007" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23047101" version="1" check="all" comment=".rules files in /etc/audit/rules.d have mode 0640 or less permissive">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23047101" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000007" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23047200" version="1" check_existence="all_exist" check="all" comment="audit tools have a mode of 0755 or less permissive.">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23047200" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000008" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23047300" version="1" check_existence="all_exist" check="all" comment="audit tools are owned by root">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23047200" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23047400" version="1" check="all" comment="The audit tools are group-owned by root.">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23047200" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000006" />
+        </file_test>
+        <symlink_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23052900" version="2" check="all" comment="The ctrl-alt-del.target unit is masked.">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23052900" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000013" />
+        </symlink_test>
+        <symlink_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23053200" version="2" check_existence="at_least_one_exists" check="all" comment="debug-shell.service is masked">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23053200" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000013" />
+        </symlink_test>
+        <password_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23053400" version="1" check="all" comment="Only the root account has a UID of zero.">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23053400" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:23053400" />
+        </password_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23053500" version="1" check="all" comment="net.ipv6.conf.default.accept_redirects is set to 0 in kernel">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23053500" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
+        </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23053600" version="2" check_existence="all_exist" check="all" comment="net.ipv4.conf.all.send_redirects setting in kernel is set to 0">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23053600" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
+        </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23053700" version="1" check="all" comment="net.ipv4.icmp_echo_ignore_broadcasts is set to 1 in kernel">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23053700" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
+        </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23053800" version="1" check_existence="all_exist" check="all" comment="net.ipv6.conf.all.accept_source_route setting in kernel is set to 0">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23053800" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
+        </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23054000" version="1" check_existence="all_exist" check="all" comment="net.ipv6.conf.all.forwarding setting in kernel is set to 0">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23054000" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
+        </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23054300" version="2" check="all" comment="net.ipv4.conf.default.send_redirects is set to 0 in kernel">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23054300" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
+        </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23054400" version="1" check_existence="all_exist" check="all" comment="net.ipv6.conf.all.accept_redirects setting in kernel is set to 0">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23054400" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
+        </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23054500" version="2" check_existence="all_exist" check="all" comment="kernel.unprivileged_bpf_disabled setting in kernel is set to 1">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23054500" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
+        </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23054600" version="1" check_existence="all_exist" check="all" comment="kernel.yama.ptrace_scope setting in kernel is set to 1">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23054600" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
+        </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23054800" version="1" check="all" comment="user.max_user_namespaces is set to 0 in kernel">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23054800" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
+        </sysctl_test>
+        <interface_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23055400" version="1" check_existence="any_exist" check="all" comment="no network interfaces are in promiscuous mode">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23055400" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:23055400" />
+        </interface_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23833300" version="1" check_existence="all_exist" check="all" comment="net.ipv4.tcp_syncookies setting in kernel is set to 1">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23833300" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
+        </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:24455000" version="1" check_existence="all_exist" check="all" comment="net.ipv4.conf.default.accept_redirects setting in kernel is set to 0">
+          <object object_ref="oval:mil.disa.stig.unix:obj:24455000" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
+        </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:24455200" version="1" check_existence="all_exist" check="all" comment="net.ipv4.conf.default.accept_source_route setting in kernel is set to 0">
+          <object object_ref="oval:mil.disa.stig.unix:obj:24455200" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
+        </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:24455300" version="1" check="all" comment="net.ipv4.conf.all.accept_redirects is set to 0 in kernel">
+          <object object_ref="oval:mil.disa.stig.unix:obj:24455300" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
+        </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:24455400" version="1" check="all" comment="net.core.bpf_jit_harden is set to 2 in kernel">
+          <object object_ref="oval:mil.disa.stig.unix:obj:24455400" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000011" />
+        </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:24857700" version="1" check_existence="all_exist" check="all" comment="fs.protected_symlinks setting in kernel is set to 1">
+          <object object_ref="oval:mil.disa.stig.unix:obj:24857700" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
+        </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:24857800" version="2" check_existence="all_exist" check="all" comment="fs.protected_hardlinks setting in kernel is set to 1">
+          <object object_ref="oval:mil.disa.stig.unix:obj:24857800" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
+        </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:24857900" version="1" check_existence="all_exist" check="all" comment="kernel.dmesg_restrict setting in kernel is set to 1">
+          <object object_ref="oval:mil.disa.stig.unix:obj:24857900" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
+        </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:24858000" version="1" check_existence="all_exist" check="all" comment="kernel.perf_event_paranoid setting in kernel is set to 2">
+          <object object_ref="oval:mil.disa.stig.unix:obj:24858000" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000011" />
+        </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:24888202" version="1" check_existence="all_exist" check="all" comment="net.ipv6.conf.default.accept_source_route setting in kernel is set to 0">
+          <object object_ref="oval:mil.disa.stig.unix:obj:24888204" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
+        </sysctl_test>
+        <symlink_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25171800" version="1" check_existence="all_exist" check="all" comment="default.target is symlinked to multi-user.target">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25171800" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:25171800" />
+        </symlink_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25312000" version="1" check_existence="all_exist" check="all" comment="net.ipv6.conf.default.accept_ra setting in kernel is set to 0">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25312000" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
+        </sysctl_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25779000" version="2" check="all" comment="/boot/grub2/grub.cfg file is group-owned by root">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25779000" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000006" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25779100" version="1" check="all" comment="/boot/grub2/grub.cfg file is owned by root">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25779100" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
+        </file_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25780000" version="2" check="all" comment="kernel.kptr_restrict is set to 1">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23054700" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
+        </sysctl_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25788800" version="2" check_existence="all_exist" check="all" comment="cron configuration directories have a mode of 700 or less permissive.">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25792601" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000014" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25789000" version="2" check_existence="any_exist" check="all" comment="All local interactive user home directories are 0750 or less">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25789001" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000022" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25789100" version="1" check_existence="any_exist" check="all" comment="The /etc/group file has mode 0644 or less permissive">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25789100" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000001" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25789200" version="1" check_existence="any_exist" check="all" comment="The /etc/group- file has mode 0644 or less permissive">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25789200" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000001" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25789300" version="1" check_existence="any_exist" check="all" comment="The /etc/gshadow file has mode 0000 or less permissive">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25789300" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000012" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25789400" version="1" check_existence="any_exist" check="all" comment="The /etc/gshadow- file has mode 0000 or less permissive">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25789400" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000012" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25789500" version="1" check="all" comment="The /etc/passwd file has mode 0644 or less permissive.">
+          <object object_ref="oval:mil.disa.stig.unix:obj:20000013" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000001" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25789600" version="1" check_existence="any_exist" check="all" comment="The /etc/passwd- file has mode 0644 or less permissive">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25789600" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000001" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25789700" version="1" check_existence="any_exist" check="all" comment="The /etc/shadow- file has mode 0000 or less permissive">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25789700" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000012" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25789800" version="1" check="all" comment="/etc/group file is owned by root">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25789800" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25789900" version="1" check="all" comment="/etc/group file is owned by root">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25789900" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000006" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25790000" version="1" check="all" comment="/etc/group- file is owned by root">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25790000" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25790100" version="1" check="all" comment="The /etc/group- file is group-owned by root.">
+          <object object_ref="oval:mil.disa.stig.unix:obj:20000014" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000006" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25790200" version="1" check="all" comment="/etc/gshadow file is owned by root">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25790200" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25790300" version="1" check="all" comment="/etc/gshadow file is owned by root">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25790300" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25790400" version="1" check="all" comment="/etc/gshadow- file is owned by root">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25790400" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25790500" version="1" check="all" comment="/etc/gshadow- file is owned by root">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25790500" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000006" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25790600" version="1" check="all" comment="/etc/passwd file is owned by root">
+          <object object_ref="oval:mil.disa.stig.unix:obj:20000013" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25790700" version="1" check="all" comment="The /etc/passwd file is group-owned by root.">
+          <object object_ref="oval:mil.disa.stig.unix:obj:20000013" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000006" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25790800" version="1" check="all" comment="/etc/passwd- file is owned by root">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25790800" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25790900" version="2" check="all" comment="/etc/passwd- file is group-owned by root">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25790800" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000006" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25791000" version="1" check="all" comment="/etc/shadow file is owned by root.">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25791000" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25791100" version="1" check="all" comment="/etc/shadow file is owned by root">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25791100" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000006" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25791200" version="1" check="all" comment="/etc/shadow- file is owned by root.">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25791200" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25791300" version="1" check="all" comment="The /etc/shadow- file is group-owned by root.">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25789700" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000006" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25792600" version="1" check_existence="any_exist" check="all" comment="/etc/cron* files owned by root">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25792600" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25792601" version="1" check_existence="any_exist" check="all" comment="/etc/cron* directories owned by root">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25792601" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25792700" version="2" check="all" comment="cron configuration files are group-owned by root">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25792700" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000006" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25793300" version="3" check_existence="any_exist" check="all" comment="The /etc/crontab file has mode 0600">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25793300" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:25793300" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25793400" version="2" check_existence="any_exist" check="all" comment="The /etc/shadow file has mode 0000 or less permissive">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25791100" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000012" />
+        </file_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25795900" version="2" check_existence="all_exist" check="all" comment="net.ipv4.conf.all.accept_source_routesetting in kernel is set to 0">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25795900" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
+        </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25796000" version="1" check_existence="all_exist" check="all" comment="net.ipv4.conf.all.log_martians setting in kernel is set to 1">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25796000" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
+        </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25796100" version="2" check_existence="all_exist" check="all" comment="net.ipv4.conf.default.log_martians setting in kernel is set to 1">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25796100" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
+        </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25796700" version="2" check_existence="all_exist" check="all" comment="net.ipv4.icmp_ignore_bogus_error_responses setting in kernel is set to 1">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25796700" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
+        </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25797000" version="1" check_existence="all_exist" check="all" comment="net.ipv4.conf.all.forwarding setting in kernel is set to 0">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25797000" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
+        </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25797100" version="2" check_existence="all_exist" check="all" comment="net.ipv6.conf.all.accept_ra setting in kernel is set to 0">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25797100" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
+        </sysctl_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25798800" version="1" check_existence="at_least_one_exists" check="all" comment="50-redhat.conf exists">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25798800" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25799700" version="1" check="all" comment="The /etc/ssh/sshd_config file is group-owned by root.">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25799900" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000006" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25799701" version="2" check="all" comment="The /etc/ssh/sshd_config.d directory and sub-directories are group-owned by root.">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25799901" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000006" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25799702" version="1" check="all" comment="The /etc/ssh/sshd_config.d files are group-owned by root.">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25799902" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000006" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25799800" version="1" check="all" comment="The /etc/ssh/sshd_config file is owned by root.">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25799900" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25799801" version="2" check="all" comment="The /etc/ssh/sshd_config.d directory and sub-directories are owned by root.">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25799901" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25799802" version="1" check="all" comment="The /etc/ssh/sshd_config.d files are owned by root.">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25799902" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25799900" version="2" check_existence="any_exist" check="all" comment="The /etc/ssh/sshd_config file has mode 0600 or less permissive">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25799900" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000004" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25799901" version="2" check_existence="any_exist" check="all" comment="The /etc/ssh/sshd_config.d directory and sub-directories has mode 0600 or less permissive">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25799901" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000004" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25799902" version="2" check_existence="any_exist" check="all" comment="The /etc/ssh/sshd_config.d files have mode 0600 or less permissive">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25799902" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000004" />
+        </file_test>
+        <password_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25804600" version="2" check="all" comment="The system accounts in /etc/passwd use /sbin/nologin.">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25804601" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:25804600" />
+        </password_test>
+        <password_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25804800" version="1" check_existence="all_exist" check="all" comment="All local users have valid GID">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25804800" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:25804800" />
+        </password_test>
+        <password_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25805100" version="1" check_existence="all_exist" check="all" comment="check for users without a home directory not defined">
+          <object object_ref="oval:mil.disa.stig.unix:obj:20000017" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000016" />
+        </password_test>
+        <password_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25805101" version="1" check_existence="all_exist" check="all" comment="check if root's home directory is not defined">
+          <object object_ref="oval:mil.disa.stig.unix:obj:20000018" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000016" />
+        </password_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25817200" version="1" check_existence="all_exist" check="all" comment="auditd.conf 0640 or less">
+          <object object_ref="oval:mil.disa.stig.unix:obj:25817200" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000007" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:26048700" version="1" check_existence="none_exist" check="all" comment="no operating system library regular files have the SUID special permission set">
+          <object object_ref="oval:mil.disa.stig.unix:obj:26048700" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:26048701" version="1" check_existence="none_exist" check="all" comment="no operating system library regular files have the SGID special permission set">
+          <object object_ref="oval:mil.disa.stig.unix:obj:26048701" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:26048702" version="1" check_existence="none_exist" check="all" comment="no operating system library regular files have the sticky bit set">
+          <object object_ref="oval:mil.disa.stig.unix:obj:26048702" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:26048703" version="1" check_existence="none_exist" check="all" comment="no operating system library regular files are group-writable">
+          <object object_ref="oval:mil.disa.stig.unix:obj:26048703" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:26048704" version="1" check_existence="none_exist" check="all" comment="no operating system library regular files are world-writable">
+          <object object_ref="oval:mil.disa.stig.unix:obj:26048704" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:27177300" version="1" check_existence="none_exist" check="all" comment="No system commands exist, except for those group-owned by root or a system account.">
+          <object object_ref="oval:mil.disa.stig.unix:obj:27177300" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:27177400" version="1" check_existence="none_exist" check="all" comment="No system command files exist except those owned by root">
+          <object object_ref="oval:mil.disa.stig.unix:obj:27177400" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:27177500" version="1" check_existence="none_exist" check="all" comment="There are no group-writable system command files">
+          <object object_ref="oval:mil.disa.stig.unix:obj:27177500" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:27177501" version="1" check_existence="none_exist" check="all" comment="There are no world-writable system command files">
+          <object object_ref="oval:mil.disa.stig.unix:obj:27177501" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:27178600" version="1" check_existence="none_exist" check="all" comment="No system-wide library directories exist except for those group-owned by root">
+          <object object_ref="oval:mil.disa.stig.unix:obj:27178600" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:27178700" version="1" check_existence="none_exist" check="all" comment="No system-wide library directories exist except those owned by root">
+          <object object_ref="oval:mil.disa.stig.unix:obj:27178700" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:27178800" version="1" check_existence="none_exist" check="all" comment="No group-writable library directories exist.">
+          <object object_ref="oval:mil.disa.stig.unix:obj:27178800" />
+        </file_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:27178801" version="1" check_existence="none_exist" check="all" comment="No world-writable library directories exist.">
+          <object object_ref="oval:mil.disa.stig.unix:obj:27178801" />
+        </file_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:27186800" version="1" check_existence="all_exist" check="all" comment="net.ipv4.conf.all.rp_filter setting in kernel is set to 1">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23054900" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
+        </sysctl_test>
+        <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:28513401" version="2" check_existence="at_least_one_exists" check="all" comment="/var/lib/aide/aide.db.gz exists and is not empty">
+          <object object_ref="oval:mil.disa.stig.unix:obj:28513401" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:28513400" />
+        </file_test>
+      </tests>
+      <objects>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:230345" version="1">
+          <filepath datatype="string">/etc/security/faillock.conf</filepath>
+          <pattern datatype="string" operation="pattern match">^\s*even_deny_root\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:10001201" version="1" comment="/etc/sysctl.conf">
+          <filepath>/etc/sysctl.conf</filepath>
+          <pattern operation="pattern match">(?:^|\.*\n)\s*net\.ipv6\.conf\.all\.disable_ipv6\s*=\s*(\d+)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:10001202" version="1" comment="other sysctl configuration files">
+          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
+          <filename operation="pattern match">\.conf$</filename>
+          <pattern operation="pattern match">(?:^|\.*\n)\s*net\.ipv6\.conf\.all\.disable_ipv6\s*=\s*(\d+)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:10001203" version="1" comment="all sysctl configuration files">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:10001201</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:10001202</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:10001204" version="1" comment="/proc/cmdline contains ipv6.disable=1">
+          <filepath>/proc/cmdline</filepath>
+          <pattern operation="pattern match">\bipv6\.disable=1\b</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:10001601" version="1">
+          <filepath>/etc/fstab</filepath>
+          <pattern operation="pattern match">^\s*[^#\s]+\s+/boot/efi\s+(\S+)\s+\S+\s+\S+\s+\S+\s*$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:20000001" version="1" comment="Audit log file">
+          <filepath>/etc/audit/auditd.conf</filepath>
+          <pattern operation="pattern match">^\s*log_file\s*=\s*(\S+)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:20000002" version="1" comment="rsyslog: action for all messages">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:20000003</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:20000004</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:20000003" version="3" comment="rsyslog.conf: action for all messages">
+          <behaviors ignore_case="true" />
+          <filepath datatype="string">/etc/rsyslog.conf</filepath>
+          <pattern operation="pattern match">^\*\.\*\s+action\((\s*(?:[^#\)]*(?:#.*$)?\n)*[^#\)]*)\)</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:20000004" version="3" comment="rsyslog.d/*.conf: action for all messages">
+          <behaviors ignore_case="true" />
+          <path>/etc/rsyslog.d</path>
+          <filename operation="pattern match">^.*\.conf$</filename>
+          <pattern operation="pattern match">^\*\.\*\s+action\((\s*(?:[^#\)]*(?:#.*$)?\n)*[^#\)]*)\)</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:20441700" version="4" comment="/etc/libuser.conf defaults section with crypt_style">
+          <filepath>/etc/libuser.conf</filepath>
+          <pattern operation="pattern match">^\[defaults]((?:\r?\n(?:[^[\r\n].*)?)*)</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:20441701" version="3" comment="/etc/libuser.conf defaults section with crypt_style">
+          <filepath>/etc/libuser.conf</filepath>
+          <pattern operation="pattern match">^\s*crypt_style\s*=\s*(\S+)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23023100" version="1" comment="/etc/login.defs:ENCRYPT_METHOD">
+          <filepath>/etc/login.defs</filepath>
+          <pattern operation="pattern match">^\s*ENCRYPT_METHOD\s+([^#\r\n]*)</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23023200" version="1" comment="Extract password hashes from /etc/shadow.">
+          <filepath datatype="string">/etc/shadow</filepath>
+          <pattern operation="pattern match">^[^:]+:([^:]*):</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23023201" version="1" comment="Filter out acceptable shadow password entries.">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <object_reference>oval:mil.disa.stig.ind:obj:23023200</object_reference>
+            <filter action="exclude">oval:mil.disa.stig.ind:ste:23023200</filter>
+            <filter action="exclude">oval:mil.disa.stig.ind:ste:23023201</filter>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23023300" version="1">
+          <filepath>/etc/login.defs</filepath>
+          <pattern operation="pattern match">^\s*SHA_CRYPT_MIN_ROUNDS\s+(\d+)\b</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23023301" version="1">
+          <filepath>/etc/login.defs</filepath>
+          <pattern operation="pattern match">^\s*SHA_CRYPT_MAX_ROUNDS\s+(\d+)\b</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23023700" version="1">
+          <path datatype="string">/etc/pam.d</path>
+          <filename datatype="string">password-auth</filename>
+          <pattern operation="pattern match">^[ \t]*password[ \t]+sufficient[ \t]+pam_unix\.so(?:[ \t]+|(?:[ \t][^#\r\f\n]+[ \t]))sha512(?:[ \t]|$)</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23024000" version="2" comment="/sys/fs/selinux/enforce value">
+          <filepath>/sys/fs/selinux/enforce</filepath>
+          <pattern operation="pattern match">^(\d+)$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23024001" version="2" comment="/etc/selinux/config:SELINUX value">
+          <filepath>/etc/selinux/config</filepath>
+          <pattern operation="pattern match">^SELINUX=(.*)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026400" version="1">
+          <path>/etc/yum.repos.d</path>
+          <filename operation="pattern match">\.repo$</filename>
+          <pattern operation="pattern match">^\s*\[[^]]+\]\s*\n(?:[^[]*\n)*</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026500" version="2">
+          <filepath>/etc/dnf/dnf.conf</filepath>
+          <pattern operation="pattern match">^\s*localpkg_gpgcheck\s*=\s*(\w+)\b$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026601" version="1" comment="/etc/sysctl.conf">
+          <path>/etc</path>
+          <filename operation="equals">sysctl.conf</filename>
+          <pattern operation="pattern match">(?:^|\.*\n)\s*kernel\.kexec_load_disabled\s*=\s*(\d+)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026602" version="1" comment="other sysctl configuration files">
+          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
+          <filename operation="pattern match">\.conf$</filename>
+          <pattern operation="pattern match">(?:^|\.*\n)\s*kernel\.kexec_load_disabled\s*=\s*(\d+)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026603" version="1" comment="all sysctl configuration files">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:23026601</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:23026602</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23027100" version="1">
+          <behaviors ignore_case="true" />
+          <filepath>/etc/sudoers</filepath>
+          <pattern operation="pattern match">^(?!#).*\s+NOPASSWD.*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23027101" version="1">
+          <behaviors ignore_case="true" recurse_direction="down" />
+          <path>/etc/sudoers.d</path>
+          <filename operation="pattern match">^.*$</filename>
+          <pattern operation="pattern match">^(?!#).*\s+NOPASSWD.*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23028100" version="1">
+          <filepath>/etc/dnf/dnf.conf</filepath>
+          <pattern operation="pattern match">^[ \t]*clean_requirements_on_remove[ \t]*=[ \t]*(?:True|1|yes)[ \t]*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23028200" version="1">
+          <filepath>/etc/selinux/config</filepath>
+          <pattern operation="pattern match">^\s*SELINUXTYPE\s*=\s*(\w+)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23028800" version="1">
+          <filepath>/etc/ssh/sshd_config</filepath>
+          <pattern operation="pattern match">^\s*(?i)StrictModes(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23028801" version="1">
+          <path>/etc/ssh/sshd_config.d</path>
+          <filename operation="pattern match">.+</filename>
+          <pattern operation="pattern match">^\s*(?i)StrictModes(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23028802" version="1">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:23028800</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:23028801</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23029201" version="1">
+          <filepath>/etc/fstab</filepath>
+          <pattern datatype="string" operation="pattern match">^[^# \t]+\s+/var\s+</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23029401" version="1">
+          <filepath>/etc/fstab</filepath>
+          <pattern datatype="string" operation="pattern match" var_ref="oval:mil.disa.stig.defs:var:23029401" var_check="at least one" />
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23029402" version="2">
+          <behaviors ignore_case="true" />
+          <filepath>/etc/audit/auditd.conf</filepath>
+          <pattern datatype="string" operation="pattern match">^\s*log_file\s*=\s*(\S+)/\S+\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23029500" version="1">
+          <filepath>/etc/fstab</filepath>
+          <pattern datatype="string" operation="pattern match">^[^# \t]+\s+/tmp\s+</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23029600" version="1">
+          <filepath>/etc/ssh/sshd_config</filepath>
+          <pattern operation="pattern match">^\s*(?i)PermitRootLogin(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23029601" version="1">
+          <path>/etc/ssh/sshd_config.d</path>
+          <filename operation="pattern match">.+</filename>
+          <pattern operation="pattern match">^\s*(?i)PermitRootLogin(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23029602" version="2" comment="all sshd_config and sshd_config.d/* files">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:23029600</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:23029601</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23030001" version="1">
+          <filepath>/etc/fstab</filepath>
+          <pattern operation="pattern match">^\s*[^#\s]+\s+/boot\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23030101" version="2">
+          <filepath>/etc/fstab</filepath>
+          <pattern operation="pattern match">^\s*/dev\S*\s+/\S+\s+(?!vfat\s+)\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23030600" version="1">
+          <filepath>/etc/fstab</filepath>
+          <pattern operation="pattern match">^\s*\[?[\.\w:-]+\]?:[/\w-]+\s+[/\w-]+\s+nfs[4]?\s+(.*)$</pattern>
+          <instance datatype="int" operation="not equal">0</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23030601" version="1">
+          <filepath>/etc/mtab</filepath>
+          <pattern operation="pattern match">^\s*\[?[\.\w:-]+\]?:[/\w-]+\s+[/\w-]+\s+nfs[4]?\s+(.*)$</pattern>
+          <instance datatype="int" operation="not equal">0</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031300" version="1">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:23031302</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:23031303</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031301" version="1">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:23031304</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:23031305</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031302" version="1">
+          <filepath>/etc/security/limits.conf</filepath>
+          <pattern operation="pattern match">^[ \t]*\*[ \t]+(?:hard|soft|-)[ \t]+core[ \t]+(\d+)[ \t]*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031303" version="1">
+          <path>/etc/security/limits.d</path>
+          <filename operation="pattern match">\.conf$</filename>
+          <pattern operation="pattern match">^[ \t]*\*[ \t]+(?:hard|soft|-)[ \t]+core[ \t]+(\d+)[ \t]*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031304" version="1">
+          <filepath>/etc/security/limits.conf</filepath>
+          <pattern operation="pattern match">^[ \t]*[^#*\s]+[ \t]+(?:hard|soft|-)[ \t]+core[ \t]+(\d+)[ \t]*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031305" version="1">
+          <path>/etc/security/limits.d</path>
+          <filename operation="pattern match">\.conf$</filename>
+          <pattern operation="pattern match">^[ \t]*[^#*\s]+[ \t]+(?:hard|soft|-)[ \t]+core[ \t]+(\d+)[ \t]*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031400" version="1">
+          <filepath>/etc/systemd/coredump.conf</filepath>
+          <pattern operation="pattern match">^\s*Storage\s*=\s*(\w*)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031500" version="1">
+          <filepath>/etc/systemd/coredump.conf</filepath>
+          <pattern operation="pattern match">^\s*ProcessSizeMax\s*=\s*(\w*)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031600" version="2" comment="/etc/nsswitch.conf hosts entry">
+          <filepath>/etc/nsswitch.conf</filepath>
+          <pattern operation="pattern match">^\s*hosts:\s*(.*)$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <variable_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031601" version="1" comment="count of unique name servers">
+          <var_ref>oval:mil.disa.stig.ind:var:23031600</var_ref>
+        </variable_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031602" version="2" comment="/etc/resolv.conf nameserver entries">
+          <filepath>/etc/resolv.conf</filepath>
+          <pattern operation="pattern match">^nameserver\s+(.*)$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23032400" version="1">
+          <filepath>/etc/login.defs</filepath>
+          <pattern operation="pattern match">^\s*CREATE_HOME\s+([^#\s]+)</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23032900" version="2">
+          <filepath>/etc/gdm/custom.conf</filepath>
+          <pattern operation="pattern match">^\s*\[daemon\]\s+[#\s\w=]*^\s*AutomaticLoginEnable=(\w+)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23033300" version="1">
+          <filepath datatype="string">/etc/security/faillock.conf</filepath>
+          <pattern datatype="string" operation="pattern match">^\s*deny\s*=\s*([\d]+)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23033500" version="1">
+          <filepath datatype="string">/etc/security/faillock.conf</filepath>
+          <pattern datatype="string" operation="pattern match">^\s*fail_interval\s*=\s*([\d]+)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23033700" version="2">
+          <filepath datatype="string">/etc/security/faillock.conf</filepath>
+          <pattern datatype="string" operation="pattern match">^\s*unlock_time\s*=\s*([\d]+)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23033900" version="1">
+          <filepath>/etc/security/faillock.conf</filepath>
+          <pattern operation="pattern match">^\s*dir\s*=\s*(\S+)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23034300" version="1">
+          <filepath datatype="string">/etc/security/faillock.conf</filepath>
+          <pattern datatype="string" operation="pattern match">^\s*audit\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23034600" version="1" comment="all default maxlogins settings in /etc/security/limits.conf and /etc/security/limits.d/*.conf">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:23034601</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:23034602</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23034601" version="1" comment="default maxlogins in /etc/security/limits.conf">
+          <filepath>/etc/security/limits.conf</filepath>
+          <pattern operation="pattern match">^\s*\*\s+(?:(?:hard)|(?:-))\s+maxlogins\s+(\d+)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23034602" version="1" comment="default maxlogins in /etc/security/limits.d/*.conf">
+          <path>/etc/security/limits.d</path>
+          <filename operation="pattern match">.*\.conf$</filename>
+          <pattern operation="pattern match">^\s*\*\s+(?:(?:hard)|(?:-))\s+maxlogins\s+(\d+)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23034603" version="1" comment="all non-default maxlogins settings in /etc/security/limits.conf and /etc/security/limits.d/*.conf">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:23034604</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:23034605</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23034604" version="1" comment="non-default maxlogins in /etc/security/limits.conf">
+          <filepath>/etc/security/limits.conf</filepath>
+          <pattern operation="pattern match">^\s*[^#*\s]+\s+(?:(?:hard)|(?:-))\s+maxlogins\s+(\d+)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23034605" version="1" comment="non-default maxlogins in /etc/security/limits.d/*.conf">
+          <path>/etc/security/limits.d</path>
+          <filename operation="pattern match">.*\.conf$</filename>
+          <pattern operation="pattern match">^\s*[^#*\s]+\s+(?:(?:hard)|(?:-))\s+maxlogins\s+(\d+)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23035100" version="4" comment="dconf org/gnome/settings-daemon/peripherals/smartcard sections">
+          <path datatype="string" var_ref="oval:mil.disa.stig.defs:var:23035100" var_check="at least one" />
+          <filename datatype="string" operation="pattern match">.*</filename>
+          <pattern operation="pattern match">^\[org/gnome/settings-daemon/peripherals/smartcard](?:\r?\n(?:[^[\r\n].*)?)*</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23035600" version="1">
+          <filepath>/etc/pam.d/password-auth</filepath>
+          <pattern operation="pattern match">^\s*password\s+(?:required|requisite)\s+pam_pwquality\.so\b</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23035700" version="2">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:23035701</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:23035702</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23035701" version="2">
+          <filepath>/etc/security/pwquality.conf</filepath>
+          <pattern operation="pattern match">^\s*ucredit\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23035702" version="2">
+          <behaviors recurse_direction="down" />
+          <path>/etc/security/pwquality.conf.d</path>
+          <filename operation="pattern match">\.conf$</filename>
+          <pattern operation="pattern match">^\s*ucredit\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23035800" version="3">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:23035801</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:23035802</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23035801" version="1">
+          <filepath>/etc/security/pwquality.conf</filepath>
+          <pattern operation="pattern match">^\s*lcredit\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23035802" version="1">
+          <behaviors recurse_direction="down" />
+          <path>/etc/security/pwquality.conf.d</path>
+          <filename operation="pattern match">\.conf$</filename>
+          <pattern operation="pattern match">^\s*lcredit\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23035900" version="1">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:23035901</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:23035902</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23035901" version="2">
+          <filepath>/etc/security/pwquality.conf</filepath>
+          <pattern operation="pattern match">^\s*dcredit\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23035902" version="2">
+          <behaviors recurse_direction="down" />
+          <path>/etc/security/pwquality.conf.d</path>
+          <filename operation="pattern match">\.conf$</filename>
+          <pattern operation="pattern match">^\s*dcredit\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036000" version="1">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:23036001</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:23036002</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036001" version="1">
+          <filepath>/etc/security/pwquality.conf</filepath>
+          <pattern operation="pattern match">^\s*maxclassrepeat\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036002" version="1">
+          <behaviors recurse_direction="down" />
+          <path>/etc/security/pwquality.conf.d</path>
+          <filename operation="pattern match">\.conf$</filename>
+          <pattern operation="pattern match">^\s*maxclassrepeat\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036100" version="1">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:23036101</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:23036102</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036101" version="1">
+          <filepath>/etc/security/pwquality.conf</filepath>
+          <pattern operation="pattern match">^\s*maxrepeat\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036102" version="1">
+          <behaviors recurse_direction="down" />
+          <path>/etc/security/pwquality.conf.d</path>
+          <filename operation="pattern match">\.conf$</filename>
+          <pattern operation="pattern match">^\s*maxrepeat\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036200" version="1">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:23036201</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:23036202</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036201" version="1">
+          <filepath>/etc/security/pwquality.conf</filepath>
+          <pattern operation="pattern match">^\s*minclass\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036202" version="1">
+          <behaviors recurse_direction="down" />
+          <path>/etc/security/pwquality.conf.d</path>
+          <filename operation="pattern match">\.conf$</filename>
+          <pattern operation="pattern match">^\s*minclass\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036300" version="2">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:23036301</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:23036302</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036301" version="2">
+          <filepath>/etc/security/pwquality.conf</filepath>
+          <pattern operation="pattern match">^\s*difok\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036302" version="2">
+          <behaviors recurse_direction="down" />
+          <path>/etc/security/pwquality.conf.d</path>
+          <filename operation="pattern match">\.conf$</filename>
+          <pattern operation="pattern match">^\s*difok\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036400" version="1">
+          <filepath datatype="string">/etc/shadow</filepath>
+          <pattern operation="pattern match">^root:[^:]*:[^:]*:0*:</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036402" version="1">
+          <filepath datatype="string">/etc/shadow</filepath>
+          <pattern operation="pattern match">^([^:]*):[^:]*:[^:]*:0*:</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036403" version="1">
+          <filepath datatype="string">/etc/passwd</filepath>
+          <pattern datatype="string" operation="pattern match">^nobody:[^:]*:([0-9]+):</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036500" version="1">
+          <filepath>/etc/login.defs</filepath>
+          <pattern operation="pattern match">^\s*PASS_MIN_DAYS\s+(\d*)</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036900" version="1">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:23036901</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:23036902</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036901" version="2">
+          <filepath>/etc/security/pwquality.conf</filepath>
+          <pattern operation="pattern match">^\s*minlen\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23036902" version="2">
+          <behaviors recurse_direction="down" />
+          <path>/etc/security/pwquality.conf.d</path>
+          <filename operation="pattern match">\.conf$</filename>
+          <pattern operation="pattern match">^\s*minlen\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23037300" version="1">
+          <filepath>/etc/default/useradd</filepath>
+          <pattern operation="pattern match">(?i)^\s*INACTIVE\s*=\s*(-?\d+)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23037500" version="2">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:23037501</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:23037502</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23037501" version="1">
+          <filepath>/etc/security/pwquality.conf</filepath>
+          <pattern operation="pattern match">^\s*ocredit\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23037502" version="1">
+          <behaviors recurse_direction="down" />
+          <path>/etc/security/pwquality.conf.d</path>
+          <filename operation="pattern match">\.conf$</filename>
+          <pattern operation="pattern match">^\s*ocredit\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23037600" version="2">
+          <behaviors ignore_case="true" />
+          <filepath>/etc/sssd/sssd.conf</filepath>
+          <pattern operation="pattern match">^\s*cache_credentials\s*=\s*true\b$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23037602" version="1">
+          <filepath>/etc/sssd/sssd.conf</filepath>
+          <pattern operation="pattern match">^\s*offline_credentials_expiration\s*=\s*(\d*)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23037603" version="2">
+          <behaviors ignore_case="true" max_depth="-1" recurse_direction="down" />
+          <path>/etc/sssd/conf.d</path>
+          <filename operation="pattern match">^.+\.conf$</filename>
+          <pattern operation="pattern match">^\s*cache_credentials\s*=\s*true\b$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23037605" version="1">
+          <behaviors max_depth="-1" recurse_direction="down" />
+          <path>/etc/sssd/conf.d</path>
+          <filename operation="pattern match">^.+\.conf$</filename>
+          <pattern operation="pattern match">^\s*offline_credentials_expiration\s*=\s*(\d*)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23037606" version="1">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:23037600</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:23037603</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23037608" version="1">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:23037602</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:23037605</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23037700" version="1" comment="all pwquality configuration files">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:23037701</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:23037702</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23037701" version="2">
+          <filepath>/etc/security/pwquality.conf</filepath>
+          <pattern operation="pattern match">^\s*dictcheck\s*=\s*([-\d]+)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23037702" version="2">
+          <path>/etc/security/pwquality.conf.d</path>
+          <filename operation="pattern match">\.conf$</filename>
+          <pattern operation="pattern match">^\s*dictcheck\s*=\s*([-\d]+)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23037800" version="1">
+          <filepath>/etc/login.defs</filepath>
+          <pattern operation="pattern match">^\s*FAIL_DELAY\s+(\d+)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23038200" version="1">
+          <filepath>/etc/ssh/sshd_config</filepath>
+          <pattern operation="pattern match">^\s*(?i)PrintLastLog(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23038300" version="1">
+          <filepath>/etc/login.defs</filepath>
+          <pattern operation="pattern match">^\s*UMASK\s+([^#\s]+)</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23038501" version="1">
+          <filepath>/etc/csh.cshrc</filepath>
+          <pattern operation="pattern match">^\s*(?i)umask\s*(\d+)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23038600" version="1" comment="32-bit execve syscall uid comparison">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+-S\s+execve\s+-C\s+uid!=euid\s+-F\s+euid=0\s*((\s+-k\s+|-F\s+key=)\S+\s*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23038601" version="1" comment="64-bit execve syscall uid comparison">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+-S\s+execve\s+-C\s+uid!=euid\s+-F\s+euid=0\s*((\s+-k\s+|-F\s+key=)\S+\s*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23038602" version="1" comment="32-bit execve syscall gid comparison">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+-S\s+execve\s+-C\s+gid!=egid\s+-F\s+egid=0\s*((\s+-k\s+|-F\s+key=)\S+\s*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23038603" version="1" comment="64-bit execve syscall gid comparison">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+-S\s+execve\s+-C\s+gid!=egid\s+-F\s+egid=0\s*((\s+-k\s+|-F\s+key=)\S+\s*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23038800" version="1">
+          <filepath>/etc/audit/auditd.conf</filepath>
+          <pattern operation="pattern match">(?i)^\s*action_mail_acct\s*=\s*(\w+)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23038900" version="2">
+          <path>/etc/</path>
+          <filename operation="pattern match">aliases</filename>
+          <pattern operation="pattern match">^\s*postmaster:\s*root\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23039000" version="1">
+          <filepath>/etc/audit/auditd.conf</filepath>
+          <pattern operation="pattern match">(?i)^\s*disk_error_action\s*=\s*(\w+)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23039200" version="1">
+          <filepath>/etc/audit/auditd.conf</filepath>
+          <pattern operation="pattern match">(?i)^\s*disk_full_action\s*=\s*(\w+)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23039300" version="1">
+          <filepath>/etc/audit/auditd.conf</filepath>
+          <pattern operation="pattern match">(?i)^\s*local_events\s*=\s*(\w+)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23039400" version="1">
+          <filepath>/etc/audit/auditd.conf</filepath>
+          <pattern operation="pattern match">(?i)^\s*name_format\s*=\s*(\w+)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23039500" version="1">
+          <filepath>/etc/audit/auditd.conf</filepath>
+          <pattern operation="pattern match">(?i)^\s*log_format\s*=\s*(\w+)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23039701" version="1">
+          <filepath>/etc/audit/auditd.conf</filepath>
+          <pattern operation="pattern match">^\s*log_file\s*=\s*(\S+)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23040200" version="1">
+          <behaviors multiline="false" />
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">\n[ \t]*-e[ \t]+2\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23040300" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^--loginuid-immutable$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23040400" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-w\s+/etc/shadow(\s+-p\s*([rx]*w[rx]*a[rx]*|[rx]*a[rx]*w[rx]*))?(\s+(-k\s+|-F\s+key=)\w+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23040500" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-w\s+/etc/security/opasswd(\s+-p\s*([rx]*w[rx]*a[rx]*|[rx]*a[rx]*w[rx]*))?(\s+(-k\s+|-F\s+key=)\w+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23040600" version="2">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-w\s+/etc/passwd(\s+-p\s*([rx]*w[rx]*a[rx]*|[rx]*a[rx]*w[rx]*))?(\s+(-k\s+|-F\s+key=)[\w-]+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23040700" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-w\s+/etc/gshadow(\s+-p\s*([rx]*w[rx]*a[rx]*|[rx]*a[rx]*w[rx]*))?(\s+(-k\s+|-F\s+key=)\w+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23040800" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-w\s+/etc/group(\s+-p\s*([rx]*w[rx]*a[rx]*|[rx]*a[rx]*w[rx]*))?(\s+(-k\s+|-F\s+key=)\w+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23040900" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-w\s+/etc/sudoers(\s+-p\s*([rx]*w[rx]*a[rx]*|[rx]*a[rx]*w[rx]*))?(\s+(-k\s+|-F\s+key=)\w+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23041000" version="3">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-w\s+/etc/sudoers.d/?(\s+-p\s*([rx]*w[rx]*a[rx]*|[rx]*a[rx]*w[rx]*))?(\s+(-k\s+|-F\s+key=)[\w-]+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23041200" version="2">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/bin/su\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23041300" version="1" comment="32-bit setxattr syscall">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+setxattr\s+|(\s+|,)setxattr(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23041301" version="1" comment="64-bit setxattr syscall">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+setxattr\s+|(\s+|,)setxattr(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23041302" version="1" comment="32-bit setxattr syscall">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+setxattr\s+|(\s+|,)setxattr(\s+|,))).*-F\s+auid=0(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23041303" version="1" comment="64-bit setxattr syscall">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+setxattr\s+|(\s+|,)setxattr(\s+|,))).*-F\s+auid=0(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23041800" version="2">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/bin/chage\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23041900" version="3">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=\/usr\/bin\/chcon\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23042100" version="2">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/bin/ssh-agent\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23042200" version="2">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/bin/passwd\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23042300" version="2">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/bin/mount\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23042400" version="2">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/bin/umount\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23042600" version="2">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/sbin/unix_update\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23042700" version="2">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/sbin/postdrop\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23042800" version="2">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/sbin/postqueue\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23042900" version="2">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/sbin/semanage\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23043000" version="2">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/sbin/setfiles\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23043100" version="2">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/sbin/userhelper\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23043200" version="2">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/sbin/setsebool\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23043300" version="2">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/sbin/unix_chkpwd\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23043400" version="2">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/libexec/openssh/ssh-keysign\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23043500" version="2">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/bin/setfacl\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23043600" version="2">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/sbin/pam_timestamp_check\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23043700" version="2">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/bin/newgrp\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23043800" version="1" comment="32-bit init_module syscall">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+init_module\s+|(\s+|,)init_module(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23043801" version="1" comment="64-bit init_module syscall">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+init_module\s+|(\s+|,)init_module(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23043802" version="1" comment="32-bit finit_module syscall">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+finit_module\s+|(\s+|,)finit_module(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23043803" version="1" comment="64-bit finit_module syscall">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+finit_module\s+|(\s+|,)finit_module(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044400" version="2">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/bin/gpasswd\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044600" version="2">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+delete_module\s+|(\s+|,)delete_module(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044601" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+delete_module\s+|(\s+|,)delete_module(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044700" version="2">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/bin/crontab\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044800" version="2">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/bin/chsh\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044900" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+truncate\s+|(\s+|,)truncate(\s+|,))).*-F\s+exit=-EPERM\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044901" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+truncate\s+|(\s+|,)truncate(\s+|,))).*-F\s+exit=-EPERM\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044902" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+truncate\s+|(\s+|,)truncate(\s+|,))).*-F\s+exit=-EACCES\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044903" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+truncate\s+|(\s+|,)truncate(\s+|,))).*-F\s+exit=-EACCES\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044904" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+ftruncate\s+|(\s+|,)ftruncate(\s+|,))).*-F\s+exit=-EPERM\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044905" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+ftruncate\s+|(\s+|,)ftruncate(\s+|,))).*-F\s+exit=-EPERM\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044906" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+ftruncate\s+|(\s+|,)ftruncate(\s+|,))).*-F\s+exit=-EACCES\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044907" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+ftruncate\s+|(\s+|,)ftruncate(\s+|,))).*-F\s+exit=-EACCES\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044908" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+creat\s+|(\s+|,)creat(\s+|,))).*-F\s+exit=-EPERM\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044909" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+creat\s+|(\s+|,)creat(\s+|,))).*-F\s+exit=-EPERM\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044910" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+creat\s+|(\s+|,)creat(\s+|,))).*-F\s+exit=-EACCES\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044911" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+creat\s+|(\s+|,)creat(\s+|,))).*-F\s+exit=-EACCES\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044912" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+open\s+|(\s+|,)open(\s+|,))).*-F\s+exit=-EPERM\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044913" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+open\s+|(\s+|,)open(\s+|,))).*-F\s+exit=-EPERM\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044914" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+open\s+|(\s+|,)open(\s+|,))).*-F\s+exit=-EACCES\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044915" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+open\s+|(\s+|,)open(\s+|,))).*-F\s+exit=-EACCES\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044916" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+openat\s+|(\s+|,)openat(\s+|,))).*-F\s+exit=-EPERM\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044917" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+openat\s+|(\s+|,)openat(\s+|,))).*-F\s+exit=-EPERM\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044918" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+openat\s+|(\s+|,)openat(\s+|,))).*-F\s+exit=-EACCES\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044919" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+openat\s+|(\s+|,)openat(\s+|,))).*-F\s+exit=-EACCES\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044920" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+open_by_handle_at\s+|(\s+|,)open_by_handle_at(\s+|,))).*-F\s+exit=-EPERM\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044921" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+open_by_handle_at\s+|(\s+|,)open_by_handle_at(\s+|,))).*-F\s+exit=-EPERM\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044922" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+open_by_handle_at\s+|(\s+|,)open_by_handle_at(\s+|,))).*-F\s+exit=-EACCES\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23044923" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+open_by_handle_at\s+|(\s+|,)open_by_handle_at(\s+|,))).*-F\s+exit=-EACCES\s+-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23045500" version="1" comment="32-bit chown syscall">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+chown\s+|(\s+|,)chown(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23045501" version="1" comment="64-bit chown syscall">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+chown\s+|(\s+|,)chown(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23045502" version="1" comment="32-bit lchown syscall">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+lchown\s+|(\s+|,)lchown(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23045503" version="1" comment="64-bit lchown syscall">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+lchown\s+|(\s+|,)lchown(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23045504" version="1" comment="32-bit fchownat syscall">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+fchownat\s+|(\s+|,)fchownat(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23045505" version="1" comment="64-bit fchownat syscall">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+fchownat\s+|(\s+|,)fchownat(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23045506" version="1" comment="32-bit fchown syscall">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+fchown\s+|(\s+|,)fchown(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23045507" version="1" comment="64-bit fchown syscall">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+fchown\s+|(\s+|,)fchown(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23045600" version="1" comment="32-bit chmod syscall">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+chmod\s+|(\s+|,)chmod(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23045601" version="1" comment="64-bit chmod syscall">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+chmod\s+|(\s+|,)chmod(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23045602" version="1" comment="32-bit fchmod syscall">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+fchmod\s+|(\s+|,)fchmod(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23045603" version="1" comment="64-bit fchmod syscall">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+fchmod\s+|(\s+|,)fchmod(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23045604" version="1" comment="32-bit fchmodat syscall">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+fchmodat\s+|(\s+|,)fchmodat(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23045605" version="1" comment="64-bit fchmodat syscall">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+fchmodat\s+|(\s+|,)fchmodat(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23046200" version="3">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/bin/sudo\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23046300" version="2">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/sbin/usermod\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23046400" version="2">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/bin/chacl\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23046500" version="2">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/bin/kmod\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23046700" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-w\s+/var/log/lastlog(\s+-p\s*([rx]*w[rx]*a[rx]*|[rx]*a[rx]*w[rx]*))?(\s+(-k\s+|-F\s+key=)\w+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23046900" version="2">
+          <path>/boot/loader/entries</path>
+          <filename operation="pattern match">^.*\.conf$</filename>
+          <pattern operation="pattern match">^options\s+.*\baudit_backlog_limit=(\d+)\b</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23046901" version="3">
+          <filepath>/etc/default/grub</filepath>
+          <pattern operation="pattern match">^GRUB_CMDLINE_LINUX=".*\baudit_backlog_limit=(\d+)\b.*"</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23047000" version="1">
+          <filepath>/etc/usbguard/usbguard-daemon.conf</filepath>
+          <pattern operation="pattern match">^\s*AuditBackend\s*=\s*(\w+)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23047500" version="1">
+          <filepath>/etc/aide.conf</filepath>
+          <pattern operation="pattern match">^\s*/usr/sbin/auditctl\s+\S+</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23047501" version="1">
+          <filepath>/etc/aide.conf</filepath>
+          <pattern operation="pattern match">^\s*/usr/sbin/auditd\s+\S+</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23047502" version="1">
+          <filepath>/etc/aide.conf</filepath>
+          <pattern operation="pattern match">^\s*/usr/sbin/ausearch\s+\S+</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23047503" version="1">
+          <filepath>/etc/aide.conf</filepath>
+          <pattern operation="pattern match">^\s*/usr/sbin/aureport\s+\S+</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23047504" version="1">
+          <filepath>/etc/aide.conf</filepath>
+          <pattern operation="pattern match">^\s*/usr/sbin/autrace\s+\S+</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23047505" version="1">
+          <filepath>/etc/aide.conf</filepath>
+          <pattern operation="pattern match">^\s*/usr/sbin/augenrules\s+\S+</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23048000" version="1">
+          <filepath>/etc/audit/auditd.conf</filepath>
+          <pattern operation="pattern match">(?i)^\s*overflow_action\s*=\s*(\w+)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23048100" version="1" comment="ActionSendStreamDriverMode">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:23048101</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:23048102</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23048101" version="1" comment="rsyslog.conf: ActionSendStreamDriverMode">
+          <behaviors ignore_case="true" />
+          <filepath datatype="string">/etc/rsyslog.conf</filepath>
+          <pattern operation="pattern match">^\$ActionSendStreamDriverMode\s+(\S+)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23048102" version="1" comment="rsyslog.d/*.conf: ActionSendStreamDriverMode">
+          <behaviors ignore_case="true" />
+          <path>/etc/rsyslog.d</path>
+          <filename operation="pattern match">^.*\.conf$</filename>
+          <pattern operation="pattern match">^\$ActionSendStreamDriverMode\s+(\S+)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23048300" version="2">
+          <filepath>/etc/audit/auditd.conf</filepath>
+          <pattern operation="pattern match">(?i)^\s*space_left\s*=\s*([\d]+)%\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23048500" version="1">
+          <filepath>/etc/chrony.conf</filepath>
+          <pattern operation="pattern match">^[ \t]*port[ \t]+(\d+)[ \t]*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23048600" version="1">
+          <filepath>/etc/chrony.conf</filepath>
+          <pattern operation="pattern match">^[ \t]*cmdport[ \t]+0[ \t]*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23049400" version="2">
+          <path>/etc/modprobe.d</path>
+          <filename operation="pattern match">.*</filename>
+          <pattern operation="pattern match">^[ \t]*install[ \t]+atm[ \t]+/bin/false[ \t]*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23049401" version="1">
+          <path>/etc/modprobe.d</path>
+          <filename operation="pattern match">.*</filename>
+          <pattern operation="pattern match">^[ \t]*blacklist[ \t]+atm[ \t]*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23049501" version="1">
+          <path>/etc/modprobe.d</path>
+          <filename operation="pattern match">.*</filename>
+          <pattern operation="pattern match">^[ \t]*blacklist[ \t]+can[ \t]*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23049600" version="2">
+          <path>/etc/modprobe.d</path>
+          <filename operation="pattern match">.*</filename>
+          <pattern operation="pattern match">^[ \t]*install[ \t]+sctp[ \t]+/bin/false[ \t]*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23049601" version="1">
+          <path>/etc/modprobe.d</path>
+          <filename operation="pattern match">.*</filename>
+          <pattern operation="pattern match">^[ \t]*blacklist[ \t]+sctp[ \t]*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23049700" version="2">
+          <path>/etc/modprobe.d</path>
+          <filename operation="pattern match">.*</filename>
+          <pattern operation="pattern match">^[ \t]*install[ \t]+tipc[ \t]+/bin/false[ \t]*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23049701" version="1">
+          <path>/etc/modprobe.d</path>
+          <filename operation="pattern match">.*</filename>
+          <pattern operation="pattern match">^[ \t]*blacklist[ \t]+tipc[ \t]*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23049800" version="2">
+          <path>/etc/modprobe.d</path>
+          <filename operation="pattern match">.*</filename>
+          <pattern operation="pattern match">^[ \t]*install[ \t]+cramfs[ \t]+/bin/false[ \t]*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23049801" version="1">
+          <path>/etc/modprobe.d</path>
+          <filename operation="pattern match">.*</filename>
+          <pattern operation="pattern match">^[ \t]*blacklist[ \t]+cramfs[ \t]*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23049802" version="1">
+          <filepath>/etc/modprobe.conf</filepath>
+          <pattern operation="pattern match">^[ \t]*install[ \t]+cramfs[ \t]+/bin/false[ \t]*$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23049803" version="1">
+          <filepath>/etc/modprobe.conf</filepath>
+          <pattern operation="pattern match">^[ \t]*blacklist[ \t]+cramfs[ \t]*$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23049900" version="2">
+          <path>/etc/modprobe.d</path>
+          <filename operation="pattern match">.*</filename>
+          <pattern operation="pattern match">^[ \t]*install[ \t]+firewire-core[ \t]+/bin/false[ \t]*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23049901" version="1">
+          <path>/etc/modprobe.d</path>
+          <filename operation="pattern match">.*</filename>
+          <pattern operation="pattern match">^[ \t]*blacklist[ \t]+firewire-core[ \t]*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23050300" version="2">
+          <path>/etc/modprobe.d</path>
+          <filename operation="pattern match">.*</filename>
+          <pattern operation="pattern match">^[ \t]*install[ \t]+usb-storage[ \t]+/bin/false[ \t]*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23050301" version="1">
+          <path>/etc/modprobe.d</path>
+          <filename operation="pattern match">.*</filename>
+          <pattern operation="pattern match">^[ \t]*blacklist[ \t]+usb-storage[ \t]*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23050700" version="1">
+          <path>/etc/modprobe.d</path>
+          <filename operation="pattern match">.*</filename>
+          <pattern operation="pattern match">^[ \t]*install[ \t]+bluetooth[ \t]+/bin/false[ \t]*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23050701" version="1">
+          <path>/etc/modprobe.d</path>
+          <filename operation="pattern match">.*</filename>
+          <pattern operation="pattern match">^[ \t]*blacklist[ \t]+bluetooth[ \t]*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23050900" version="1">
+          <filepath>/etc/fstab</filepath>
+          <pattern operation="pattern match">^\s*[^#\s]+\s+/dev/shm\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23051001" version="1">
+          <filepath>/etc/fstab</filepath>
+          <pattern operation="pattern match">^\s*[^#\s]+\s+/dev/shm\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <variable_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23051101" version="1">
+          <var_ref>oval:mil.disa.stig.linux:var:23051100</var_ref>
+        </variable_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23051102" version="1">
+          <filepath>/etc/fstab</filepath>
+          <pattern operation="pattern match">^\s*[^#\s]+\s+/tmp\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23051201" version="1">
+          <filepath>/etc/fstab</filepath>
+          <pattern operation="pattern match">^\s*[^#\s]+\s+/tmp\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <variable_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23051401" version="1">
+          <var_ref>oval:mil.disa.stig.ind:var:23051400</var_ref>
+        </variable_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23051402" version="1">
+          <filepath>/etc/fstab</filepath>
+          <pattern operation="pattern match">^\s*[^#\s]+\s+/var/log\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <variable_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23051501" version="1">
+          <var_ref>oval:mil.disa.stig.ind:var:23051500</var_ref>
+        </variable_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23051502" version="1">
+          <filepath>/etc/fstab</filepath>
+          <pattern operation="pattern match">^\s*[^#\s]+\s+/var/log\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <variable_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23051600" version="1">
+          <var_ref>oval:mil.disa.stig.defs:var:23051600</var_ref>
+        </variable_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23051601" version="1">
+          <filepath>/etc/fstab</filepath>
+          <pattern operation="pattern match">^\s*[^#\s]+\s+/var/log\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <variable_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23051701" version="1">
+          <var_ref>oval:mil.disa.stig.linux:var:23051700</var_ref>
+        </variable_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23051702" version="1">
+          <filepath>/etc/fstab</filepath>
+          <pattern operation="pattern match">^\s*[^#\s]+\s+/var/log/audit\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23051901" version="1">
+          <filepath>/etc/fstab</filepath>
+          <pattern operation="pattern match">^\s*[^#\s]+\s+/var/log/audit\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23052001" version="1">
+          <filepath>/etc/fstab</filepath>
+          <pattern operation="pattern match">^\s*[^#\s]+\s+/var/tmp\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23052101" version="1">
+          <filepath>/etc/fstab</filepath>
+          <pattern operation="pattern match">^\s*[^#\s]+\s+/var/tmp\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23052500" version="1">
+          <filepath>/etc/firewalld/firewalld.conf</filepath>
+          <pattern operation="pattern match">^\s*FirewallBackend\s*=\s*(\w+)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23052700" version="3">
+          <behaviors ignore_case="true" />
+          <filepath>/etc/ssh/sshd_config</filepath>
+          <pattern operation="pattern match">^\s*RekeyLimit\s+\d+[kmg]?\s+\d+[smdhw]?\s*</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23052701" version="3">
+          <behaviors ignore_case="true" />
+          <path>/etc/ssh/sshd_config.d</path>
+          <filename operation="pattern match">^.+\.conf$</filename>
+          <pattern operation="pattern match">^\s*RekeyLimit\s+\d+[kmg]?\s+\d+[smdhw]?\s*</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23055001" version="1">
+          <filepath>/etc/postfix/main.cf</filepath>
+          <pattern operation="pattern match">^smtpd_client_restrictions[ \t]*=[ \t]*permit_mynetworks[, \t]+reject[ \t]*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23055500" version="2" comment="X11Forwarding in /etc/ssh/sshd_config and /etc/ssh/sshd_config.d/*">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:23055501</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:23055502</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23055501" version="1">
+          <filepath>/etc/ssh/sshd_config</filepath>
+          <pattern operation="pattern match">^\s*(?i)X11Forwarding[ \t]+([^\s#]*)[ \t]*(?:|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23055502" version="1">
+          <path>/etc/ssh/sshd_config.d</path>
+          <filename operation="pattern match">.+</filename>
+          <pattern operation="pattern match">^\s*(?i)X11Forwarding[ \t]+([^\s#]*)[ \t]*(?:|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23055600" version="2" comment="sshd_config X11UseLocalhost">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:23055601</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:23055602</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23055601" version="4" comment="sshd_config X11UseLocalhost">
+          <filepath datatype="string">/etc/ssh/sshd_config</filepath>
+          <pattern operation="pattern match">^\s*(?i)X11useLocalhost(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23055602" version="4">
+          <behaviors max_depth="-1" recurse_direction="down" />
+          <path>/etc/ssh/sshd_config.d</path>
+          <filename operation="pattern match">^.+\.conf$</filename>
+          <pattern operation="pattern match">^\s*(?i)X11useLocalhost(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23481500" version="1" comment="Pull value of /etc/ssh/sshd_config:LogLevel">
+          <filepath>/etc/ssh/sshd_config</filepath>
+          <pattern operation="pattern match">^\s*(?i)LogLevel(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23481501" version="1" comment="Pull value of /etc/ssh/sshd_config.d:LogLevel">
+          <path>/etc/ssh/sshd_config.d</path>
+          <filename operation="pattern match">.+</filename>
+          <pattern operation="pattern match">^\s*(?i)LogLevel(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23481502" version="1" comment="all sshd_config and sshd_config.d/* files">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:23481500</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:23481501</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23499000" version="1" comment="CtrlAltDelBurstAction in /etc/systemd/system.conf and /etc/systemd/system.conf.d/*">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:23499001</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:23499002</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23499001" version="1">
+          <filepath datatype="string">/etc/systemd/system.conf</filepath>
+          <pattern operation="pattern match">^\s*CtrlAltDelBurstAction\s*=\s*(\S+)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23499002" version="1">
+          <path datatype="string">/etc/systemd/system.conf.d</path>
+          <filename operation="pattern match">^.+\.conf$</filename>
+          <pattern operation="pattern match">^\s*CtrlAltDelBurstAction\s*=\s*(\S+)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23764200" version="1" comment="/etc/sudoers Defaults !targetpw">
+          <filepath datatype="string">/etc/sudoers</filepath>
+          <pattern operation="pattern match">^\s*Defaults\s+!targetpw\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23764201" version="2" comment="/etc/sudoers includedir">
+          <filepath datatype="string">/etc/sudoers</filepath>
+          <pattern operation="pattern match">^\s*[#@]includedir\s+(\S+)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23764202" version="1" comment="/etc/sudoers.d Defaults !targetpw">
+          <filepath var_ref="oval:mil.disa.stig.defs:var:23764200" var_check="at least one" />
+          <pattern operation="pattern match">^\s*Defaults\s+!targetpw\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23764203" version="1" comment="/etc/sudoers Defaults !rootpw">
+          <filepath datatype="string">/etc/sudoers</filepath>
+          <pattern operation="pattern match">^\s*Defaults\s+!rootpw\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23764204" version="1" comment="/etc/sudoers.d Defaults !rootpw">
+          <filepath var_ref="oval:mil.disa.stig.defs:var:23764200" var_check="at least one" />
+          <pattern operation="pattern match">^\s*Defaults\s+!rootpw\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23764205" version="1" comment="/etc/sudoers Defaults !runaspw">
+          <filepath datatype="string">/etc/sudoers</filepath>
+          <pattern operation="pattern match">^\s*Defaults\s+!runaspw\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23764206" version="1" comment="/etc/sudoers.d Defaults !runaspw">
+          <filepath var_ref="oval:mil.disa.stig.defs:var:23764200" var_check="at least one" />
+          <pattern operation="pattern match">^\s*Defaults\s+!runaspw\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23764300" version="1">
+          <behaviors ignore_case="true" />
+          <filepath>/etc/sudoers</filepath>
+          <pattern operation="pattern match">^\s*Defaults\s+timestamp_timeout\s*=\s*([-\d]+)\s*$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23764301" version="1">
+          <behaviors ignore_case="true" max_depth="-1" recurse_direction="down" />
+          <path>/etc/sudoers.d</path>
+          <filename operation="pattern match">^.*$</filename>
+          <pattern operation="pattern match">^\s*Defaults\s+timestamp_timeout\s*=\s*([-\d]+)\s*$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23764302" version="1">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:23764300</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:23764301</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23827800" version="2">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/bin/sudoedit\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23828500" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-w\s+/var/log/tallylog(\s+-p\s*([rx]*w[rx]*a[rx]*|[rx]*a[rx]*w[rx]*))?(\s+(-k\s+|-F\s+key=)[\w-]+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24451900" version="1">
+          <path datatype="string">/etc/dconf/db/local.d</path>
+          <filename datatype="string" operation="pattern match">.*</filename>
+          <pattern operation="pattern match">^\s*banner-message-enable\s*=\s*(\w+)$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24452300" version="1" comment="/usr/lib/systemd/system/emergency.service ExecStart">
+          <filepath datatype="string">/usr/lib/systemd/system/emergency.service</filepath>
+          <pattern operation="pattern match">^ExecStart=(.*)$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24452800" version="1">
+          <behaviors ignore_case="true" />
+          <path>/etc/ssh/sshd_config.d</path>
+          <filename operation="pattern match">^.+\.conf$</filename>
+          <pattern operation="pattern match">^\s*(?i)GSSAPIAuthentication(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24452801" version="1">
+          <behaviors ignore_case="true" />
+          <filepath>/etc/ssh/sshd_config</filepath>
+          <pattern operation="pattern match">^\s*(?i)GSSAPIAuthentication(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24453001" version="2">
+          <filepath>/etc/fstab</filepath>
+          <pattern operation="pattern match">^\s*[^#\s]+\s+/boot/efi\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24453801" version="1" comment="Check that the idle-delay setting is locked from nonprivileged user modification">
+          <path>/etc/dconf/db/local.d/locks</path>
+          <filename operation="pattern match">^.*$</filename>
+          <pattern datatype="string" operation="pattern match">^\s*\/org\/gnome\/desktop\/session\/idle-delay$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24453900" version="1">
+          <path>/etc/dconf/db/local.d/locks</path>
+          <filename operation="pattern match">.*</filename>
+          <pattern operation="pattern match">^/org/gnome/desktop/screensaver/lock-enabled$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24454000" version="1">
+          <filepath>/etc/pam.d/system-auth</filepath>
+          <pattern operation="pattern match">\bnullok\b</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24454100" version="1">
+          <filepath>/etc/pam.d/password-auth</filepath>
+          <pattern operation="pattern match">\bnullok\b</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24454300" version="1">
+          <filepath>/etc/audit/auditd.conf</filepath>
+          <pattern operation="pattern match">(?i)^\s*space_left_action\s*=\s*(\w+)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24877400" version="1" comment="Audit 32-bit invocations of rmdir">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+rmdir\s+|(\s+|,)rmdir(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24877401" version="1" comment="Audit 64-bit invocations of rmdir">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+rmdir\s+|(\s+|,)rmdir(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25170600" version="1">
+          <filepath>/etc/shadow</filepath>
+          <pattern operation="pattern match">^[^:]+::[^:]*:[^:]*:</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25171300" version="2" comment="system-auth password required, requisite">
+          <behaviors ignore_case="true" />
+          <filepath datatype="string">/etc/pam.d/system-auth</filepath>
+          <pattern operation="pattern match">^\s*password\s+(?:required|requisite)\s+(.*)$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25171400" version="1" comment="in /etc/pam.d/system-auth check for pam_pwquality.so retry equals value">
+          <filepath>/etc/pam.d/system-auth</filepath>
+          <pattern operation="pattern match">^[ \t]*password[ \t]+(?:(?:required)|(?:requisite))[ \t]+pam_pwquality\.so(?:[ \t]+|(?:[ \t][^#\r\f\n]+[ \t]+))retry=([0-9]+)(?:\s|$)</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25299700" version="2" comment="32-bit rename command">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+rename\s+|(\s+|,)rename(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25299701" version="2" comment="64-bit rename command">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+rename\s+|(\s+|,)rename(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25299800" version="1" comment="32-bit renameat command">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+renameat\s+|(\s+|,)renameat(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25299801" version="1" comment="64-bit renameat command">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+renameat\s+|(\s+|,)renameat(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25300000" version="2" comment="32-bit unlink command">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+unlink\s+|(\s+|,)unlink(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25300001" version="2" comment="64-bit unlink command">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+unlink\s+|(\s+|,)unlink(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25300100" version="1" comment="32-bit unlinkat command">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+unlinkat\s+|(\s+|,)unlinkat(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25300101" version="1" comment="64-bit unlinkat command">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+unlinkat\s+|(\s+|,)unlinkat(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303400" version="1" comment="32-bit fsetxattr syscall">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+fsetxattr\s+|(\s+|,)fsetxattr(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303401" version="1" comment="64-bit fsetxattr syscall">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+fsetxattr\s+|(\s+|,)fsetxattr(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303402" version="1" comment="32-bit fsetxattr syscall">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+fsetxattr\s+|(\s+|,)fsetxattr(\s+|,))).*-F\s+auid=0(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303403" version="1" comment="64-bit fsetxattr syscall">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+fsetxattr\s+|(\s+|,)fsetxattr(\s+|,))).*-F\s+auid=0(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303500" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match" var_ref="oval:mil.disa.stig.defs:var:25303500" />
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303501" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match" var_ref="oval:mil.disa.stig.defs:var:25303501" />
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303502" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match" var_ref="oval:mil.disa.stig.defs:var:25303502" />
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303503" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match" var_ref="oval:mil.disa.stig.defs:var:25303503" />
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303600" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+fremovexattr\s+|(\s+|,)fremovexattr(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303601" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+fremovexattr\s+|(\s+|,)fremovexattr(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303602" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+fremovexattr\s+|(\s+|,)fremovexattr(\s+|,))).*-F\s+auid=0(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303603" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+fremovexattr\s+|(\s+|,)fremovexattr(\s+|,))).*-F\s+auid=0(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303700" version="3" comment="32-bit lremovexattr syscall">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+lremovexattr\s+|(\s+|,)lremovexattr(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303701" version="3" comment="64-bit lremovexattr syscall">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+lremovexattr\s+|(\s+|,)lremovexattr(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303702" version="3" comment="32-bit lremovexattr syscall (invoked by root)">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+lremovexattr\s+|(\s+|,)lremovexattr(\s+|,))).*-F\s+auid=0(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303703" version="3" comment="64-bit lremovexattr syscall (invoked by root)">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+lremovexattr\s+|(\s+|,)lremovexattr(\s+|,))).*-F\s+auid=0(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303800" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match" var_ref="oval:mil.disa.stig.defs:var:25303800" />
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303801" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match" var_ref="oval:mil.disa.stig.defs:var:25303801" />
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303802" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match" var_ref="oval:mil.disa.stig.defs:var:25303802" />
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25303803" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match" var_ref="oval:mil.disa.stig.defs:var:25303803" />
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25725800" version="3">
+          <filepath>/etc/systemd/logind.conf</filepath>
+          <pattern operation="pattern match">^\s*StopIdleSessionSec\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25778700" version="3" comment="/etc/grub2.cfg:superusers">
+          <filepath datatype="string">/etc/grub2.cfg</filepath>
+          <pattern operation="pattern match">^\s*set\s+superusers\s*=\s*"(\S+)"\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25778701" version="1" comment="/boot/grub2/grubenv:kernelopts">
+          <filepath datatype="string">/boot/grub2/user.cfg</filepath>
+          <pattern operation="pattern match">^\s*GRUB2_PASSWORD=(\S+)\b</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25779300" version="1" comment="BLS options">
+          <path>/boot/loader/entries</path>
+          <filename operation="pattern match">^.*\.conf$</filename>
+          <pattern operation="pattern match">^options\s+(.*)$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25779301" version="1" comment="/etc/default/grub GRUB_CMDLINE_LINUX">
+          <filepath>/etc/default/grub</filepath>
+          <pattern operation="pattern match">^GRUB_CMDLINE_LINUX="(.*)"</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25780400" version="1">
+          <filepath>/etc/modprobe.conf</filepath>
+          <pattern operation="pattern match">^[ \t]*install[ \t]+atm[ \t]+/bin/false[ \t]*$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25780401" version="1">
+          <filepath>/etc/modprobe.conf</filepath>
+          <pattern operation="pattern match">^[ \t]*blacklist[ \t]+atm[ \t]*$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25780600" version="1">
+          <filepath>/etc/modprobe.conf</filepath>
+          <pattern operation="pattern match">^[ \t]*install[ \t]+firewire-core[ \t]+/bin/false[ \t]*$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25780601" version="1">
+          <filepath>/etc/modprobe.conf</filepath>
+          <pattern operation="pattern match">^[ \t]*blacklist[ \t]+firewire-core[ \t]*$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25780700" version="1">
+          <filepath>/etc/modprobe.conf</filepath>
+          <pattern operation="pattern match">^[ \t]*install[ \t]+sctp[ \t]+/bin/false[ \t]*$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25780701" version="1">
+          <filepath>/etc/modprobe.conf</filepath>
+          <pattern operation="pattern match">^[ \t]*blacklist[ \t]+sctp[ \t]*$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25782000" version="1" comment="/etc/dnf/dnf.conf gpgcheck">
+          <filepath>/etc/dnf/dnf.conf</filepath>
+          <pattern operation="pattern match">^gpgcheck=(.*)$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25785400" version="2" comment="/etc/fstab, uncommented, nfs, capturing options">
+          <filepath>/etc/fstab</filepath>
+          <pattern operation="pattern match">^\s*[^#\s][^\s]*\s+[^\s]+\s+nfs[^\s]*\s+([^\s]+)</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25786900" version="1">
+          <filepath>/etc/fstab</filepath>
+          <pattern operation="pattern match">^\s*[^#\s]+\s+/var\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25794900" version="1" comment="NetworkManager.conf dns setting">
+          <filepath>/etc/NetworkManager/NetworkManager.conf</filepath>
+          <pattern operation="pattern match">^dns=(\S*)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25794901" version="1" comment="NetworkManager.conf main section">
+          <filepath>/etc/NetworkManager/NetworkManager.conf</filepath>
+          <pattern operation="pattern match">^\[main\]((?:\r?\n(?:[^[\r\n].*)?)*)</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798100" version="1" comment="Pull value of /etc/ssh/sshd_config:banner">
+          <filepath>/etc/ssh/sshd_config</filepath>
+          <pattern operation="pattern match">^\s*(?i)banner(?-i)[ \t\"]+([\w\/]+)[\"\s]*(?:|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798101" version="1" comment="Pull value of /etc/ssh/sshd_config.d:banner">
+          <path>/etc/ssh/sshd_config.d</path>
+          <filename operation="pattern match">.+</filename>
+          <pattern operation="pattern match">^\s*(?i)banner(?-i)[ \t\"]+([\w\/]+)[\"\s]*(?:|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798102" version="1" comment="all sshd_config and sshd_config.d/* files">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:25798100</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:25798101</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798103" version="1" comment="Pull value of /etc/ssh/sshd_config:banner">
+          <filepath>/etc/ssh/sshd_config</filepath>
+          <pattern operation="pattern match">^\s*(?i)banner(?-i)[ \t]*(?:none[\s]*|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798104" version="1" comment="Pull value of /etc/ssh/sshd_config.d:banner">
+          <path>/etc/ssh/sshd_config.d</path>
+          <filename operation="pattern match">.+</filename>
+          <pattern operation="pattern match">^\s*(?i)banner(?-i)[ \t]*(?:none[\s]*|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798105" version="1" comment="all sshd_config and sshd_config.d/* files">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:25798103</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:25798104</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798300" version="2">
+          <behaviors ignore_case="true" />
+          <path>/etc/ssh/sshd_config.d</path>
+          <filename operation="pattern match">^.+\.conf$</filename>
+          <pattern operation="pattern match">^\s*(?i)PubkeyAuthentication(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798301" version="1">
+          <behaviors ignore_case="true" />
+          <filepath>/etc/ssh/sshd_config</filepath>
+          <pattern operation="pattern match">^\s*(?i)PubkeyAuthentication(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798400" version="2" comment="PermitEmptyPasswords in all sshd_config and sshd_config.d/* files">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:25798401</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:25798402</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798401" version="1">
+          <filepath>/etc/ssh/sshd_config</filepath>
+          <pattern operation="pattern match">^(?i)\s*PermitEmptyPasswords\s+(\w+)$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798402" version="1">
+          <path>/etc/ssh/sshd_config.d</path>
+          <filename operation="pattern match">.+</filename>
+          <pattern operation="pattern match">^(?i)\s*PermitEmptyPasswords\s+(\w+)$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798600" version="2" comment="UsePAM in all sshd_config and sshd_config.d/* files">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:25798601</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:25798602</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798601" version="1">
+          <filepath>/etc/ssh/sshd_config</filepath>
+          <pattern operation="pattern match">^\s*UsePAM\s+(\w*)</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798602" version="2">
+          <path>/etc/ssh/sshd_config.d</path>
+          <filename operation="pattern match">^.+\.conf$</filename>
+          <pattern operation="pattern match">^\s*UsePAM\s+(\w*)</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798800" version="1" comment="sshd_config includes">
+          <behaviors ignore_case="true" />
+          <filepath datatype="string">/etc/ssh/sshd_config</filepath>
+          <pattern operation="pattern match">^\s*include\s+(.*)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798801" version="1" comment="sshd_config.d includes">
+          <behaviors ignore_case="true" />
+          <path datatype="string">/etc/ssh/sshd_config.d</path>
+          <filename datatype="string" operation="pattern match">^.+\.conf$</filename>
+          <pattern operation="pattern match">^\s*include\s+(.*)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798900" version="3">
+          <filepath>/etc/crypto-policies/back-ends/opensshserver.config</filepath>
+          <pattern operation="pattern match">^\s*(?i)Ciphers(?-i)[ \t]+(\S+)[\s]*(?:|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25799100" version="2">
+          <filepath>/etc/crypto-policies/back-ends/opensshserver.config</filepath>
+          <pattern operation="pattern match">^\s*MACs\s+(\S+)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25799200" version="1">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:25799201</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:25799202</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25799201" version="1">
+          <filepath>/etc/ssh/sshd_config</filepath>
+          <pattern operation="pattern match">^(?i)\s*HostbasedAuthentication\s+(\w+)$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25799202" version="1">
+          <behaviors max_depth="-1" recurse_direction="down" />
+          <path>/etc/ssh/sshd_config.d</path>
+          <filename operation="pattern match">^.+\.conf$</filename>
+          <pattern operation="pattern match">^(?i)\s*HostbasedAuthentication\s+(\w+)$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25799600" version="1">
+          <filepath>/etc/ssh/sshd_config</filepath>
+          <pattern operation="pattern match">^\s*(?i)ClientAliveInterval(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25799601" version="2">
+          <path>/etc/ssh/sshd_config.d</path>
+          <filename operation="pattern match">.+</filename>
+          <pattern operation="pattern match">^\s*(?i)ClientAliveInterval(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25799602" version="1">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:25799600</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:25799601</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25800200" version="1">
+          <filepath>/etc/ssh/sshd_config</filepath>
+          <pattern operation="pattern match">^\s*(?i)Compression(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25800201" version="1">
+          <path>/etc/ssh/sshd_config.d</path>
+          <filename operation="pattern match">.+</filename>
+          <pattern operation="pattern match">^\s*(?i)Compression(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25800202" version="1">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:25800200</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:25800201</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25800400" version="2">
+          <path>/etc/ssh/sshd_config.d</path>
+          <filename operation="pattern match">^.*\.conf$</filename>
+          <pattern operation="pattern match">^\s*(?i)KerberosAuthentication(?-i)\s+("?\w+"?)\s*(?:|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25800401" version="2">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:25800402</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:25800400</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25800402" version="2">
+          <filepath>/etc/ssh/sshd_config</filepath>
+          <pattern operation="pattern match">^\s*(?i)KerberosAuthentication(?-i)\s+("?\w+"?)\s*(?:|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25800500" version="1" comment="Ignore Rhosts is set to 'yes' in both /etc/ssh/sshd_config and /etc/ssh/sshd_config.d/*">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:25800501</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:25800502</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25800501" version="1" comment="Pull value of /etc/ssh/sshd_config:IgnoreRhosts">
+          <filepath>/etc/ssh/sshd_config</filepath>
+          <pattern operation="pattern match">^\s*(?i)IgnoreRhosts(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25800502" version="1" comment="Pull value of /etc/ssh/sshd_config.d:IgnoreRhosts">
+          <path>/etc/ssh/sshd_config.d</path>
+          <filename operation="pattern match">^.*$</filename>
+          <pattern operation="pattern match">^\s*(?i)IgnoreRhosts(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25800600" version="1">
+          <filepath>/etc/ssh/sshd_config</filepath>
+          <pattern operation="pattern match">^\s*(?i)IgnoreUserKnownHosts(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25800601" version="1">
+          <path>/etc/ssh/sshd_config.d</path>
+          <filename datatype="string" operation="pattern match">^.+\.conf$</filename>
+          <pattern operation="pattern match">^\s*(?i)IgnoreUserKnownHosts(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25800900" version="2">
+          <behaviors ignore_case="true" />
+          <path>/etc/ssh/sshd_config.d</path>
+          <filename operation="pattern match">^.+\.conf$</filename>
+          <pattern operation="pattern match">^\s*(?i)PrintLastLog(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25801300" version="1" comment="/org/gnome/login-screen/banner-message-enable in dconf user database locks directories">
+          <path var_ref="oval:mil.disa.stig.defs:var:25802600" var_check="at least one" />
+          <filename operation="pattern match">.*</filename>
+          <pattern operation="pattern match">^/org/gnome/login-screen/banner-message-enable$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25801400" version="1">
+          <path>/etc/dconf/db/local.d</path>
+          <filename>00-security-settings</filename>
+          <pattern operation="pattern match">^\s*\[org\/gnome\/desktop\/media-handling]\s*\n+[^\[]*automount-open\s*=\s*(\w+)$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25801500" version="1">
+          <path>/etc/dconf/db/local.d/locks</path>
+          <filename operation="pattern match">.*</filename>
+          <pattern operation="pattern match">^/org/gnome/desktop/media-handling/automount-open$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25801700" version="3" comment="check that /etc/dconf/profile/user:system-db is at minimum set to local">
+          <filepath>/etc/dconf/profile/user</filepath>
+          <pattern operation="pattern match">^\s*system-db\s*:\s*local\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25801701" version="1" comment="Check that the automount setting is locked from nonprivileged user modification">
+          <path>/etc/dconf/db/local.d/locks</path>
+          <filename operation="pattern match">^.*$</filename>
+          <pattern datatype="string" operation="pattern match">^\s*\/org\/gnome\/desktop\/media-handling\/autorun-never$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25802000" version="1" comment="/org/gnome/settings-daemon/peripherals/smartcard/removal-action in dconf user database locks directories">
+          <path var_ref="oval:mil.disa.stig.defs:var:25802600" var_check="at least one" />
+          <filename operation="pattern match">.*</filename>
+          <pattern operation="pattern match">^/org/gnome/settings-daemon/peripherals/smartcard/removal-action$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25802600" version="2" comment="dconf user databases">
+          <filepath>/etc/dconf/profile/user</filepath>
+          <pattern operation="pattern match">^system-db:(\S+)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25802601" version="1" comment="/org/gnome/desktop/screensaver/lock-delay in dconf user database locks directories">
+          <path var_ref="oval:mil.disa.stig.defs:var:25802600" var_check="at least one" />
+          <filename operation="pattern match">.*</filename>
+          <pattern operation="pattern match">^/org/gnome/desktop/screensaver/lock-delay$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25802900" version="1" comment="dconf org/gnome/login-screen sections">
+          <path datatype="string" var_ref="oval:mil.disa.stig.defs:var:23035100" var_check="at least one" />
+          <filename datatype="string" operation="pattern match">.*</filename>
+          <pattern operation="pattern match">^\[org/gnome/login-screen](?:\r?\n(?:[^[\r\n].*)?)*</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25803000" version="1" comment="Check that the disable-restart-button setting is locked from nonprivileged user modification">
+          <path>/etc/dconf/db/local.d/locks</path>
+          <filename operation="pattern match">^.*$</filename>
+          <pattern datatype="string" operation="pattern match">^\s*\/org\/gnome\/login-screen\/disable-restart-buttons$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25803200" version="1" comment="/org/gnome/settings-daemon/plugins/media-keys/logout in /etc/dconf/db/local.d/locks/*">
+          <path>/etc/dconf/db/local.d/locks</path>
+          <filename operation="pattern match">.*</filename>
+          <pattern operation="pattern match">^/org/gnome/settings-daemon/plugins/media-keys/logout$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25804100" version="1">
+          <filepath>/etc/login.defs</filepath>
+          <pattern operation="pattern match">^\s*PASS_MAX_DAYS\s+(\d+)</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <variable_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25804501" version="1" comment="count of passwd entries">
+          <var_ref>oval:mil.disa.stig.defs:var:25804500</var_ref>
+        </variable_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25804800" version="1" comment="/etc/group ids">
+          <filepath>/etc/group</filepath>
+          <pattern operation="pattern match">^[^:#]*:[^:]*:(\d+)</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25806100" version="1" comment="/etc/group GIDs">
+          <filepath>/etc/group</filepath>
+          <pattern operation="pattern match">^[^:]*:[^:]*:([^:]+):</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <variable_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25806101" version="1" comment="count of group entries">
+          <var_ref>oval:mil.disa.stig.defs:var:25806100</var_ref>
+        </variable_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25807200" version="2">
+          <filepath>/etc/bashrc</filepath>
+          <pattern operation="pattern match">^[^#]*\s*(?i)umask\s*(\d+)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25807500" version="1">
+          <filepath>/etc/profile</filepath>
+          <pattern operation="pattern match">^(?i)\s*umask\s+([^#\s]+)</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25808000" version="1" comment="/etc/security/faillock.conf dir">
+          <filepath>/etc/security/faillock.conf</filepath>
+          <pattern operation="pattern match">^\s*dir\s*=\s*(.*)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25808600" version="4">
+          <behaviors ignore_case="true" />
+          <filepath>/etc/sudoers</filepath>
+          <pattern operation="pattern match">^(?!#).*\s+!\s*authenticate.*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25808601" version="5">
+          <behaviors ignore_case="true" recurse_direction="down" />
+          <path>/etc/sudoers.d</path>
+          <filename operation="pattern match">^.*$</filename>
+          <pattern operation="pattern match">^(?!#).*\s+!\s*authenticate.*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25808700" version="2">
+          <behaviors ignore_case="true" />
+          <filepath>/etc/sudoers</filepath>
+          <pattern operation="pattern match">^\s*ALL\s+ALL\=\(ALL(?:|\:ALL)\)\s+ALL\s*$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25808701" version="2">
+          <behaviors ignore_case="true" recurse_direction="down" />
+          <path>/etc/sudoers.d</path>
+          <filename operation="pattern match">^.*$</filename>
+          <pattern operation="pattern match">^\s*ALL\s+ALL\=\(ALL(?:|\:ALL)\)\s+ALL\s*$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25808800" version="1">
+          <filepath>/etc/pam.d/su</filepath>
+          <pattern operation="pattern match">^\s*auth\s+(?:required|requisite)\s+pam_wheel\.so(?:\s|$)</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25809900" version="1">
+          <filepath>/etc/pam.d/password-auth</filepath>
+          <pattern operation="pattern match">^\s*password\s+sufficient\s+pam_unix\.so\s+[^#\n]*\brounds=(\d+)\b</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25810000" version="1">
+          <filepath>/etc/pam.d/system-auth</filepath>
+          <pattern operation="pattern match">^\s*password\s+sufficient\s+pam_unix\.so\s+[^#\n]*\brounds=(\d+)\b</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25810100" version="1">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:25810101</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:25810102</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25810101" version="1">
+          <filepath>/etc/security/pwquality.conf</filepath>
+          <pattern operation="pattern match">^\s*enforce_for_root\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25810102" version="1">
+          <behaviors recurse_direction="down" />
+          <path>/etc/security/pwquality.conf.d</path>
+          <filename operation="pattern match">\.conf$</filename>
+          <pattern operation="pattern match">^\s*enforce_for_root\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25811800" version="1">
+          <filepath>/etc/pam.d/sudo</filepath>
+          <pattern operation="pattern match">^\s*[^#\n]*\bpam_succeed_if\b</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25812100" version="2">
+          <filepath>/etc/opensc.conf</filepath>
+          <pattern operation="pattern match">(?i)^\s*card_drivers\s*=(.*);</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25812200" version="1" comment="sssd.conf: pam_cert_auth">
+          <filepath datatype="string">/etc/sssd/sssd.conf</filepath>
+          <pattern operation="pattern match">^\s*pam_cert_auth\s*=\s*(.*)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25812201" version="1" comment="/etc/sssd/conf.d: pam_cert_auth">
+          <behaviors recurse_direction="down" />
+          <path datatype="string">/etc/sssd/conf.d</path>
+          <filename datatype="string" operation="pattern match">.+</filename>
+          <pattern operation="pattern match">^\s*pam_cert_auth\s*=\s*(.*)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25812202" version="1">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:25812200</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:25812201</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25812300" version="1" comment="sssd.conf: certificate_verification">
+          <filepath datatype="string">/etc/sssd/sssd.conf</filepath>
+          <pattern operation="pattern match">^\s*certificate_verification\s*=\s*(.*)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25812301" version="1" comment="/etc/sssd/conf.d/*.conf: certificate_verification">
+          <path datatype="string">/etc/sssd/conf.d</path>
+          <filename datatype="string" operation="pattern match">^[^.].*\.conf$</filename>
+          <pattern operation="pattern match">^\s*certificate_verification\s*=\s*(.*)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25812302" version="1" comment="sssd config: certificate_verification">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:25812300</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:25812301</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25812900" version="1">
+          <path datatype="string" operation="equals">/usr/lib/systemd/system</path>
+          <filename datatype="string" operation="equals">rescue.service</filename>
+          <pattern datatype="string" operation="pattern match">^\s*ExecStart=-\/usr\/lib\/systemd\/systemd-sulogin-shell\srescue$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25812901" version="1">
+          <path datatype="string" operation="equals">/etc/systemd/system/rescue.service.d</path>
+          <filename datatype="string" operation="pattern match">^.+\.conf$</filename>
+          <pattern datatype="string" operation="pattern match">^\s*ExecStart=-\/usr\/lib\/systemd\/systemd-sulogin-shell\srescue$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814300" version="1" comment="remote log acceptance config">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:25814301</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:25814302</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814301" version="1" comment="rsyslog.conf: remote log acceptance config">
+          <behaviors ignore_case="true" />
+          <filepath datatype="string">/etc/rsyslog.conf</filepath>
+          <pattern operation="pattern match" var_ref="oval:mil.disa.stig.defs:var:25814300" var_check="at least one" />
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814302" version="1" comment="rsyslog.d/*.conf: remote log acceptance config">
+          <behaviors ignore_case="true" />
+          <path>/etc/rsyslog.d</path>
+          <filename operation="pattern match">^.*\.conf$</filename>
+          <pattern operation="pattern match" var_ref="oval:mil.disa.stig.defs:var:25814300" var_check="at least one" />
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814400" version="1">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:25814403</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:25814406</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814401" version="1">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:25814404</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:25814407</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814402" version="1">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:25814405</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:25814408</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814403" version="1">
+          <filepath>/etc/rsyslog.conf</filepath>
+          <pattern operation="pattern match">^[ \t]*(?:\S+;auth\.\*|auth\.\*;\S+|auth\.\*|\S+;auth\.\*;\S+)[ \t]+\S+\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814404" version="1">
+          <filepath>/etc/rsyslog.conf</filepath>
+          <pattern operation="pattern match">^[ \t]*(?:\S+;authpriv\.\*|authpriv\.\*;\S+|authpriv\.\*|\S+;authpriv\.\*;\S+)[ \t]+\S+\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814405" version="1">
+          <filepath>/etc/rsyslog.conf</filepath>
+          <pattern operation="pattern match">^[ \t]*(?:\S+;daemon\.\*|daemon\.\*;\S+|daemon\.\*|\S+;daemon\.\*;\S+)[ \t]+\S+\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814406" version="1">
+          <path>/etc/rsyslog.d</path>
+          <filename operation="pattern match">^.*\.conf$</filename>
+          <pattern operation="pattern match">^[ \t]*(?:\S+;auth\.\*|auth\.\*;\S+|auth\.\*|\S+;auth\.\*;\S+)[ \t]+\S+\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814407" version="1">
+          <path>/etc/rsyslog.d</path>
+          <filename operation="pattern match">^.*\.conf$</filename>
+          <pattern operation="pattern match">^[ \t]*(?:\S+;authpriv\.\*|authpriv\.\*;\S+|authpriv\.\*|\S+;authpriv\.\*;\S+)[ \t]+\S+\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814408" version="1">
+          <path>/etc/rsyslog.d</path>
+          <filename operation="pattern match">^.*\.conf$</filename>
+          <pattern operation="pattern match">^[ \t]*(?:\S+;daemon\.\*|daemon\.\*;\S+|daemon\.\*|\S+;daemon\.\*;\S+)[ \t]+\S+\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814500" version="1">
+          <filepath>/etc/audit/plugins.d/syslog.conf</filepath>
+          <pattern operation="pattern match">^\s*active\s*=\s*(\w+)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814600" version="1" comment="ActionSendStreamDriverAuthMode">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:25814601</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:25814602</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814601" version="1" comment="rsyslog.conf: ActionSendStreamDriverAuthMode">
+          <behaviors ignore_case="true" />
+          <filepath datatype="string">/etc/rsyslog.conf</filepath>
+          <pattern operation="pattern match">^\$ActionSendStreamDriverAuthMode\s+(\S+)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814602" version="1" comment="rsyslog.d/*.conf: ActionSendStreamDriverAuthMode">
+          <behaviors ignore_case="true" />
+          <path>/etc/rsyslog.d</path>
+          <filename operation="pattern match">^.*\.conf$</filename>
+          <pattern operation="pattern match">^\$ActionSendStreamDriverAuthMode\s+(\S+)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814800" version="1" comment="DefaultNetstreamDriver">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:25814801</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:25814802</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814801" version="1" comment="rsyslog.conf: DefaultNetstreamDriver">
+          <behaviors ignore_case="true" />
+          <filepath datatype="string">/etc/rsyslog.conf</filepath>
+          <pattern operation="pattern match">^\$DefaultNetstreamDriver\s+(\S+)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814802" version="1" comment="rsyslog.d/*.conf: DefaultNetstreamDriver">
+          <behaviors ignore_case="true" />
+          <path>/etc/rsyslog.d</path>
+          <filename operation="pattern match">^.*\.conf$</filename>
+          <pattern operation="pattern match">^\$DefaultNetstreamDriver\s+(\S+)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814900" version="1" comment="remote TCP logging">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:25814901</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:25814902</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814901" version="1" comment="rsyslog.conf: remote TCP logging">
+          <behaviors ignore_case="true" />
+          <filepath datatype="string">/etc/rsyslog.conf</filepath>
+          <pattern operation="pattern match">^\*\.\*\s+@@(\S+)</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814902" version="1" comment="rsyslog.d/*.conf: remote TCP logging">
+          <behaviors ignore_case="true" />
+          <path>/etc/rsyslog.d</path>
+          <filename operation="pattern match">^.*\.conf$</filename>
+          <pattern operation="pattern match">^\*\.\*\s+@@(\S+)</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <variable_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25815500" version="1">
+          <var_ref>oval:mil.disa.stig.defs:var:25815500</var_ref>
+        </variable_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25815800" version="1">
+          <filepath>/etc/audit/auditd.conf</filepath>
+          <pattern operation="pattern match">(?i)^\s*admin_space_left\s*=\s*(\S+)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25815900" version="1">
+          <filepath>/etc/audit/auditd.conf</filepath>
+          <pattern operation="pattern match">(?i)^\s*admin_space_left_action\s*=\s*(\w+)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25816000" version="1">
+          <filepath>/etc/audit/auditd.conf</filepath>
+          <pattern operation="pattern match">(?i)^\s*max_log_file_action\s*=\s*(\S+)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25816800" version="1">
+          <filepath>/etc/audit/auditd.conf</filepath>
+          <pattern operation="pattern match">(?i)^\s*freq\s*=\s*(\S+)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25817000" version="1">
+          <filepath>/etc/audit/auditd.conf</filepath>
+          <pattern operation="pattern match">(?i)^\s*write_logs\s*=\s*(\w+)\s*(?:#.*)?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25821100" version="2">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/sbin/init\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25821200" version="3">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/sbin/poweroff\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25821300" version="2">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/sbin/reboot\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25821400" version="2">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/sbin/shutdown\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25821500" version="1" comment="32-bit umount syscall">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+umount\s+|(\s+|,)umount(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25821600" version="1" comment="32-bit umount2 syscall">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+umount2\s+|(\s+|,)umount2(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25821601" version="1" comment="64-bit umount2 syscall">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+umount2\s+|(\s+|,)umount2(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25822400" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-w\s+/var/log/faillock(\s+-p\s*([rx]*w[rx]*a[rx]*|[rx]*a[rx]*w[rx]*))?(\s+(-k\s+|-F\s+key=)[\w-]+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25822700" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^[ \t]*-f[ \t]+2\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25823000" version="1" comment="/proc/sys/crypto/fips_enabled">
+          <filepath datatype="string">/proc/sys/crypto/fips_enabled</filepath>
+          <pattern operation="pattern match">^(\d+)$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25823200" version="1" comment="/etc/ipsec.conf includes">
+          <filepath>/etc/ipsec.conf</filepath>
+          <pattern operation="pattern match">^\s*include\s+(.*)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25823201" version="1" comment="/etc/ipsec.d/*.conf includes">
+          <path>/etc/ipsec.d</path>
+          <filename operation="pattern match">^.*\.conf$</filename>
+          <pattern operation="pattern match">^\s*include\s+(.*)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25824201" version="1" comment="named.conf includes">
+          <filepath>/etc/named.conf</filepath>
+          <pattern operation="pattern match">^\s*include\s+"(.*)"\s*;\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27017700" version="1">
+          <filepath>/etc/crypto-policies/back-ends/openssh.config</filepath>
+          <pattern operation="pattern match">^\s*(?i)Ciphers(?-i)[ \t]+(\S+)[\s]*(?:|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27017800" version="2">
+          <filepath>/etc/crypto-policies/back-ends/openssh.config</filepath>
+          <pattern operation="pattern match">^\s*MACs\s+(\S+)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27143800" version="1">
+          <path>/etc</path>
+          <filename>oracle-release</filename>
+          <pattern operation="pattern match">^\s*Oracle Linux Server release 9\.(\d+)\b</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27170900" version="1">
+          <filepath>/etc/ssh/sshd_config</filepath>
+          <pattern operation="pattern match">^\s*(?i)ClientAliveCountMax(?-i)\s+"?(\d+)"?\s*(?:|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27170901" version="1">
+          <path>/etc/ssh/sshd_config.d</path>
+          <filename operation="pattern match">.+</filename>
+          <pattern operation="pattern match">^\s*(?i)ClientAliveCountMax(?-i)\s+"?(\d+)"?\s*(?:|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27170902" version="2" comment="all sshd_config and sshd_config.d/* files">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:27170900</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:27170901</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27172000" version="1">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:27172001</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:27172002</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27172001" version="1">
+          <filepath>/etc/ssh/sshd_config</filepath>
+          <pattern operation="pattern match">^(?i)\s*PermitUserEnvironment\s+(\w+)$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27172002" version="1">
+          <behaviors max_depth="-1" recurse_direction="down" />
+          <path>/etc/ssh/sshd_config.d</path>
+          <filename operation="pattern match">^.+\.conf$</filename>
+          <pattern operation="pattern match">^(?i)\s*PermitUserEnvironment\s+(\w+)$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27175000" version="1">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:27175001</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:27175002</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27175001" version="1">
+          <filepath>/etc/profile</filepath>
+          <pattern operation="pattern match">^[^#]*\s*TMOUT=(\d+)\s*$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27175002" version="1">
+          <behaviors max_depth="-1" recurse_direction="down" />
+          <path>/etc/profile.d</path>
+          <filename operation="pattern match">^.+\.sh$</filename>
+          <pattern operation="pattern match">^[^#]*\s*TMOUT=(\d+)\s*$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27487000" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-w\s+/etc/cron\.d(\s+-p\s*([rx]*w[rx]*a[rx]*|[rx]*a[rx]*w[rx]*))?(\s+(-k\s+|-F\s+key=)\w+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27487001" version="1">
+          <filepath>/etc/audit/audit.rules</filepath>
+          <pattern operation="pattern match">^\s*-w\s+/var/spool/cron(\s+-p\s*([rx]*w[rx]*a[rx]*|[rx]*a[rx]*w[rx]*))?(\s+(-k\s+|-F\s+key=)\w+)?\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:10000500" version="1">
+          <name>gnome-shell</name>
+        </rpminfo_object>
+        <dpkginfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:10000501" version="1">
+          <name>gnome-shell</name>
+        </dpkginfo_object>
+        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:10001600" version="1">
+          <mount_point>/boot/efi</mount_point>
+        </partition_object>
+        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23024000" version="1" comment="/sys/fs/selinux">
+          <mount_point>/sys/fs/selinux</mount_point>
+        </partition_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23024100" version="1">
+          <name>policycoreutils</name>
+        </rpminfo_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23027300" version="1">
+          <name>openssl-pkcs11</name>
+        </rpminfo_object>
+        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23028501" version="2">
+          <unit>rngd.service</unit>
+          <property>ActiveState</property>
+        </systemdunitproperty_object>
+        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23029200" version="1">
+          <mount_point>/var</mount_point>
+        </partition_object>
+        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23029300" version="1">
+          <mount_point>/var/log</mount_point>
+        </partition_object>
+        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23029400" version="1">
+          <mount_point datatype="string" var_ref="oval:mil.disa.stig.defs:var:23029400" var_check="at least one" />
+        </partition_object>
+        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23029500" version="1">
+          <mount_point>/tmp</mount_point>
+        </partition_object>
+        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23030000" version="1">
+          <mount_point>/boot</mount_point>
+        </partition_object>
+        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23030100" version="2">
+          <mount_point operation="pattern match">^/\S+$</mount_point>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="exclude">oval:mil.disa.stig.linux:ste:23030103</filter>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.linux:ste:23030102</filter>
+        </partition_object>
+        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23031000" version="1">
+          <unit>kdump.service</unit>
+          <property>LoadState</property>
+        </systemdunitproperty_object>
+        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23031001" version="1">
+          <unit>kdump.service</unit>
+          <property>UnitFileState</property>
+        </systemdunitproperty_object>
+        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23031002" version="1">
+          <unit>kdump.service</unit>
+          <property>ActiveState</property>
+        </systemdunitproperty_object>
+        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23031200" version="1" comment="systemd-coredump.socket LoadState">
+          <unit>systemd-coredump.socket</unit>
+          <property>LoadState</property>
+        </systemdunitproperty_object>
+        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23031201" version="1" comment="systemd-coredump.socket UnitFileState">
+          <unit>systemd-coredump.socket</unit>
+          <property>UnitFileState</property>
+        </systemdunitproperty_object>
+        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23032800" version="2">
+          <mount_point operation="pattern match">.*\/home</mount_point>
+        </partition_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23041100" version="1">
+          <name>audit</name>
+        </rpminfo_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23047700" version="1">
+          <name>rsyslog</name>
+        </rpminfo_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23047800" version="1">
+          <name>rsyslog-gnutls</name>
+        </rpminfo_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23048700" version="1">
+          <name>telnet-server</name>
+        </rpminfo_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23048900" version="1">
+          <name>sendmail</name>
+        </rpminfo_object>
+        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23050200" version="1">
+          <unit>autofs.service</unit>
+          <property>ActiveState</property>
+        </systemdunitproperty_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23050500" version="1">
+          <name>firewalld</name>
+        </rpminfo_object>
+        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23050900" version="1">
+          <mount_point>/dev/shm</mount_point>
+        </partition_object>
+        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23051000" version="1">
+          <mount_point>/dev/shm</mount_point>
+        </partition_object>
+        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23051100" version="1">
+          <mount_point>/tmp</mount_point>
+        </partition_object>
+        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23051200" version="1">
+          <mount_point>/tmp</mount_point>
+        </partition_object>
+        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23051400" version="1">
+          <mount_point>/var/log</mount_point>
+        </partition_object>
+        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23051500" version="1">
+          <mount_point>/var/log</mount_point>
+        </partition_object>
+        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23051600" version="1">
+          <mount_point>/var/log</mount_point>
+        </partition_object>
+        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23051700" version="1">
+          <mount_point>/var/log/audit</mount_point>
+        </partition_object>
+        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23051900" version="1">
+          <mount_point>/var/log/audit</mount_point>
+        </partition_object>
+        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23052000" version="1">
+          <mount_point>/var/tmp</mount_point>
+        </partition_object>
+        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23052100" version="1">
+          <mount_point>/var/tmp</mount_point>
+        </partition_object>
+        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23052200" version="1">
+          <mount_point>/var/tmp</mount_point>
+        </partition_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23053300" version="1">
+          <name>tftp-server</name>
+        </rpminfo_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23055000" version="1">
+          <name>postfix</name>
+        </rpminfo_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23055300" version="3">
+          <name>xorg-x11-server-common</name>
+        </rpminfo_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23055900" version="1">
+          <name>gssproxy</name>
+        </rpminfo_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23056000" version="1">
+          <name>iprutils</name>
+        </rpminfo_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23056100" version="1">
+          <name>tuned</name>
+        </rpminfo_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:24452700" version="1">
+          <name>rng-tools</name>
+        </rpminfo_object>
+        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:24452900" version="1" comment="/var/tmp">
+          <mount_point>/var/tmp</mount_point>
+        </partition_object>
+        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:24453000" version="1">
+          <mount_point>/boot/efi</mount_point>
+        </partition_object>
+        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:24454500" version="1" comment="fapolicyd.service ActiveState">
+          <unit>fapolicyd.service</unit>
+          <property>ActiveState</property>
+        </systemdunitproperty_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:24454900" version="1">
+          <name>openssh-server</name>
+        </rpminfo_object>
+        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25778300" version="1">
+          <unit>systemd-journald.service</unit>
+          <property>ActiveState</property>
+        </systemdunitproperty_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25782600" version="1">
+          <name operation="pattern match">ftp</name>
+        </rpminfo_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25782800" version="1">
+          <name>nfs-utils</name>
+        </rpminfo_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25783600" version="1">
+          <name>quagga</name>
+        </rpminfo_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25783900" version="1">
+          <name>gnutls-utils</name>
+        </rpminfo_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25784000" version="1">
+          <name>nss-tools</name>
+        </rpminfo_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25784200" version="1">
+          <name>s-nail</name>
+        </rpminfo_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25784900" version="1">
+          <name>autofs</name>
+        </rpminfo_object>
+        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25785200" version="2" comment="/home">
+          <mount_point operation="pattern match">.*\/home</mount_point>
+        </partition_object>
+        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25786000" version="1" comment="/boot">
+          <mount_point>/boot</mount_point>
+        </partition_object>
+        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25793600" version="1" comment="firewalld.service ActiveState">
+          <unit>firewalld.service</unit>
+          <property>ActiveState</property>
+        </systemdunitproperty_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25794300" version="1">
+          <name>chrony</name>
+        </rpminfo_object>
+        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25794400" version="1">
+          <unit>chronyd.service</unit>
+          <property>ActiveState</property>
+        </systemdunitproperty_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25795400" version="1">
+          <name>libreswan</name>
+        </rpminfo_object>
+        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25797900" version="1" comment="sshd.service ActiveState">
+          <unit>sshd.service</unit>
+          <property>ActiveState</property>
+        </systemdunitproperty_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25798000" version="1">
+          <name>openssh-clients</name>
+        </rpminfo_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25803500" version="1">
+          <name>usbguard</name>
+        </rpminfo_object>
+        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25803600" version="1" comment="usbguard.service ActiveState">
+          <unit>usbguard.service</unit>
+          <property>ActiveState</property>
+        </systemdunitproperty_object>
+        <selinuxsecuritycontext_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25808000" version="1" comment="configured faillock directory selinux context">
+          <path var_ref="oval:mil.disa.stig.defs:var:25808000" />
+          <filename xsi:nil="true" />
+        </selinuxsecuritycontext_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25808200" version="1">
+          <name>policycoreutils-python-utils</name>
+        </rpminfo_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25808300" version="1">
+          <name>sudo</name>
+        </rpminfo_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25808900" version="1">
+          <name>fapolicyd</name>
+        </rpminfo_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25812400" version="1">
+          <name>pcsc-lite</name>
+        </rpminfo_object>
+        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25812500" version="2">
+          <unit>pcscd.socket</unit>
+          <property>ActiveState</property>
+        </systemdunitproperty_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25812600" version="1">
+          <name>opensc</name>
+        </rpminfo_object>
+        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25814200" version="2">
+          <unit>rsyslog.service</unit>
+          <property>ActiveState</property>
+        </systemdunitproperty_object>
+        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25815200" version="1">
+          <unit>auditd.service</unit>
+          <property>ActiveState</property>
+        </systemdunitproperty_object>
+        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25815201" version="1">
+          <unit>auditd.service</unit>
+          <property>SubState</property>
+        </systemdunitproperty_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25817500" version="1">
+          <name>audispd-plugins</name>
+        </rpminfo_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25823400" version="1">
+          <name>crypto-policies</name>
+        </rpminfo_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25824200" version="1" comment="bind">
+          <name>bind</name>
+        </rpminfo_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:27149300" version="1">
+          <name>sssd</name>
+        </rpminfo_object>
+        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:27149400" version="1">
+          <unit>sssd.service</unit>
+          <property>ActiveState</property>
+        </systemdunitproperty_object>
+        <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:27149401" version="1">
+          <unit>sssd.service</unit>
+          <property>UnitFileState</property>
+        </systemdunitproperty_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:27150500" version="2">
+          <name operation="pattern match">oracle-linux-manager-client.*</name>
+        </rpminfo_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:28513400" version="1">
+          <name>aide</name>
+        </rpminfo_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:2582320000" version="1">
+          <name>libreswan</name>
+        </rpminfo_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:10000602" version="2">
+          <path datatype="string">/sys/firmware/efi</path>
+          <filename xsi:nil="true" />
+        </file_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:10001200" version="1">
+          <name>net.ipv6.conf.all.disable_ipv6</name>
+        </sysctl_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:20000011" version="1" comment="Audit log file location">
+          <filepath var_ref="oval:mil.disa.stig.defs:var:20000004" />
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:20000013" version="1">
+          <filepath>/etc/passwd</filepath>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:20000014" version="1">
+          <filepath>/etc/group-</filepath>
+        </file_object>
+        <password_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:20000016" version="1" comment="Users with an username">
+          <username datatype="string" operation="pattern match">[\w]+</username>
+        </password_object>
+        <password_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:20000017" version="1" comment="only non-system users (uid&gt;999) home-dirs">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="COMPLEMENT">
+            <object_reference>oval:mil.disa.stig.unix:obj:20000016</object_reference>
+            <filter>oval:mil.disa.stig.unix:ste:20000017</filter>
+          </set>
+        </password_object>
+        <password_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:20000018" version="1" comment="only root users (uid=0) home-dirs">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="COMPLEMENT">
+            <object_reference>oval:mil.disa.stig.unix:obj:20000016</object_reference>
+            <filter>oval:mil.disa.stig.unix:ste:20000018</filter>
+          </set>
+        </password_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:20461100" version="1">
+          <name>net.ipv4.conf.default.rp_filter</name>
+        </sysctl_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23024500" version="1">
+          <filepath>/var/log/messages</filepath>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23024600" version="1">
+          <filepath>/var/log/messages</filepath>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23024700" version="1">
+          <filepath>/var/log/messages</filepath>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23024800" version="1">
+          <path>/var/log</path>
+          <filename xsi:nil="true" />
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23024900" version="1">
+          <path>/var/log</path>
+          <filename xsi:nil="true" />
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23025000" version="1" comment="/var/log directory">
+          <path>/var/log</path>
+          <filename xsi:nil="true" />
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23026100" version="5">
+          <behaviors recurse_direction="down" />
+          <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
+          <filename operation="pattern match">\.so(\S+)*$</filename>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.stig.unix:ste:20000005</filter>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23026200" version="3">
+          <behaviors recurse_direction="down" />
+          <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
+          <filename operation="pattern match">(\.so\S*)$</filename>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.stig.unix:ste:20000006</filter>
+        </file_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23026600" version="1">
+          <name>kernel.kexec_load_disabled</name>
+        </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23028000" version="1">
+          <name>kernel.randomize_va_space</name>
+        </sysctl_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23028300" version="1">
+          <behaviors max_depth="-1" recurse="directories" recurse_direction="down" recurse_file_system="local" />
+          <path>/</path>
+          <filename>shosts.equiv</filename>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23028400" version="1">
+          <behaviors max_depth="-1" recurse="directories" recurse_direction="down" recurse_file_system="local" />
+          <path>/</path>
+          <filename>.shosts</filename>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23028600" version="1">
+          <behaviors max_depth="-1" recurse_direction="down" />
+          <path>/etc/ssh</path>
+          <filename operation="pattern match">^.*\.pub$</filename>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23028700" version="1" comment="SSH private key files">
+          <path>/etc/ssh</path>
+          <filename operation="pattern match">^ssh_host_.*_key$</filename>
+        </file_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23031100" version="1">
+          <name>kernel.core_pattern</name>
+        </sysctl_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23032500" version="3" comment="local initialization files of non-system users.">
+          <behaviors max_depth="1" recurse="symlinks" recurse_direction="down" />
+          <path var_ref="oval:mil.disa.stig.defs:var:23032500" var_check="at least one" />
+          <filename operation="pattern match">^\.[^\s\.]+</filename>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23032501" version="3" comment="local initialization files of root user.">
+          <behaviors max_depth="1" recurse="symlinks" recurse_direction="down" />
+          <path var_ref="oval:mil.disa.stig.defs:var:23032501" var_check="at least one" />
+          <filename operation="pattern match">^\.[^\s\.]+</filename>
+        </file_object>
+        <password_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23032502" version="1" comment="only non-system users (uid&gt;999) home-dirs excluding root directory">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="COMPLEMENT">
+            <object_reference>oval:mil.disa.stig.unix:obj:20000016</object_reference>
+            <filter>oval:mil.disa.stig.unix:ste:20000017</filter>
+            <filter>oval:mil.disa.stig.unix:ste:23032500</filter>
+          </set>
+        </password_object>
+        <password_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23032503" version="1" comment="only root users (uid=0) home-dirs excluding root directory">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="COMPLEMENT">
+            <object_reference>oval:mil.disa.stig.unix:obj:20000016</object_reference>
+            <filter>oval:mil.disa.stig.unix:ste:20000018</filter>
+            <filter>oval:mil.disa.stig.unix:ste:23032500</filter>
+          </set>
+        </password_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23035100" version="2" comment="dconf database directories">
+          <behaviors max_depth="1" recurse_direction="down" />
+          <path>/etc/dconf/db</path>
+          <filename xsi:nil="true" />
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:23035100</filter>
+        </file_object>
+        <password_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23036401" version="2" comment="Users with a password age of zero minus system users">
+          <username datatype="string" operation="equals" var_ref="oval:mil.disa.stig.defs:var:23036400" var_check="at least one" />
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.stig.unix:ste:23036400</filter>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.stig.unix:ste:23036401</filter>
+        </password_object>
+        <shadow_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23036700" version="3" comment="/etc/shadow max password ages for non-system users">
+          <username datatype="string" operation="pattern match">.+</username>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:23036702</filter>
+        </shadow_object>
+        <password_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23036701" version="3" comment="interactive non-anonymous users">
+          <username datatype="string" operation="pattern match">.*</username>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:23036704</filter>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:23036703</filter>
+        </password_object>
+        <shadow_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23036702" version="1" comment="/etc/shadow max password age for root">
+          <username datatype="string">root</username>
+        </shadow_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23039700" version="2" comment="Audit log file location">
+          <filepath var_ref="oval:mil.disa.stig.defs:var:23039700" />
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23040100" version="1" comment="Audit log directory">
+          <path var_ref="oval:mil.disa.stig.defs:var:23029400" />
+          <filename xsi:nil="true" />
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23047100" version="1">
+          <filepath>/etc/audit/auditd.conf</filepath>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23047101" version="1">
+          <path>/etc/audit/rules.d</path>
+          <filename operation="pattern match">.rules$</filename>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23047200" version="1" comment="audit tools">
+          <filepath datatype="string" var_ref="oval:mil.disa.stig.defs:var:23047200" var_check="at least one" />
+        </file_object>
+        <symlink_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23052900" version="1">
+          <filepath>/etc/systemd/system/ctrl-alt-del.target</filepath>
+        </symlink_object>
+        <symlink_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23053200" version="1" comment="debug-shell.service file">
+          <filepath>/etc/systemd/system/debug-shell.service</filepath>
+        </symlink_object>
+        <password_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23053400" version="1">
+          <username operation="not equal">root</username>
+        </password_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23053500" version="1">
+          <name>net.ipv6.conf.default.accept_redirects</name>
+        </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23053600" version="1">
+          <name>net.ipv4.conf.all.send_redirects</name>
+        </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23053700" version="1">
+          <name>net.ipv4.icmp_echo_ignore_broadcasts</name>
+        </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23053800" version="1">
+          <name>net.ipv6.conf.all.accept_source_route</name>
+        </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23054000" version="1">
+          <name>net.ipv6.conf.all.forwarding</name>
+        </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23054300" version="2">
+          <name>net.ipv4.conf.default.send_redirects</name>
+        </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23054400" version="1">
+          <name>net.ipv6.conf.all.accept_redirects</name>
+        </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23054500" version="1">
+          <name>kernel.unprivileged_bpf_disabled</name>
+        </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23054600" version="1">
+          <name>kernel.yama.ptrace_scope</name>
+        </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23054700" version="1">
+          <name>kernel.kptr_restrict</name>
+        </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23054800" version="1">
+          <name>user.max_user_namespaces</name>
+        </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23054900" version="1">
+          <name>net.ipv4.conf.all.rp_filter</name>
+        </sysctl_object>
+        <interface_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23055400" version="1" comment="All Interfaces">
+          <name operation="pattern match">.*</name>
+        </interface_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23764200" version="1" comment="/etc/sudoers.d config files, excluding files ending with ~ or containing .">
+          <path>/etc/sudoers.d</path>
+          <filename operation="pattern match">^[^.]*[^.~]$</filename>
+        </file_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23833300" version="1">
+          <name>net.ipv4.tcp_syncookies</name>
+        </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:24455000" version="1">
+          <name>net.ipv4.conf.default.accept_redirects</name>
+        </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:24455200" version="1">
+          <name>net.ipv4.conf.default.accept_source_route</name>
+        </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:24455300" version="1">
+          <name>net.ipv4.conf.all.accept_redirects</name>
+        </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:24455400" version="1">
+          <name>net.core.bpf_jit_harden</name>
+        </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:24857700" version="1">
+          <name>fs.protected_symlinks</name>
+        </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:24857800" version="1">
+          <name>fs.protected_hardlinks</name>
+        </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:24857900" version="1">
+          <name>kernel.dmesg_restrict</name>
+        </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:24858000" version="1">
+          <name>kernel.perf_event_paranoid</name>
+        </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:24888204" version="1">
+          <name>net.ipv6.conf.default.accept_source_route</name>
+        </sysctl_object>
+        <symlink_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25171800" version="1">
+          <filepath>/etc/systemd/system/default.target</filepath>
+        </symlink_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25312000" version="1">
+          <name>net.ipv6.conf.default.accept_ra</name>
+        </sysctl_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25779000" version="1">
+          <filepath>/boot/grub2/grub.cfg</filepath>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25779100" version="1">
+          <filepath>/boot/grub2/grub.cfg</filepath>
+        </file_object>
+        <password_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25789000" version="5" comment="Local interactive users without nologin">
+          <username operation="pattern match">.*</username>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="exclude">oval:mil.disa.stig.unix:ste:25789000</filter>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="exclude">oval:mil.disa.stig.unix:ste:25789002</filter>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="exclude">oval:mil.disa.stig.unix:ste:25789003</filter>
+        </password_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25789001" version="1" comment="home directories of local interactive users without nologin">
+          <path var_ref="oval:mil.disa.stig.defs:var:25789000" var_check="at least one" />
+          <filename xsi:nil="true" />
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25789100" version="1">
+          <filepath>/etc/group</filepath>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25789200" version="1">
+          <filepath>/etc/group-</filepath>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25789300" version="1">
+          <filepath>/etc/gshadow</filepath>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25789400" version="1">
+          <filepath>/etc/gshadow-</filepath>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25789600" version="1">
+          <filepath>/etc/passwd-</filepath>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25789700" version="1">
+          <filepath>/etc/shadow-</filepath>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25789800" version="1">
+          <filepath>/etc/group</filepath>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25789900" version="1">
+          <filepath>/etc/group</filepath>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25790000" version="1">
+          <filepath>/etc/group-</filepath>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25790200" version="1">
+          <filepath>/etc/gshadow</filepath>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25790300" version="1">
+          <filepath>/etc/gshadow</filepath>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25790400" version="2">
+          <path>/etc</path>
+          <filename>gshadow-</filename>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25790500" version="1">
+          <filepath>/etc/gshadow-</filepath>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25790800" version="1">
+          <filepath>/etc/passwd-</filepath>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25791000" version="2" comment="/etc/shadow file">
+          <path>/etc</path>
+          <filename>shadow</filename>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25791100" version="1">
+          <filepath>/etc/shadow</filepath>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25791200" version="2" comment="/etc/shadow- file">
+          <path>/etc</path>
+          <filename>shadow-</filename>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25792600" version="1" comment="/etc/cron* files">
+          <path>/etc</path>
+          <filename operation="pattern match">^cron.*$</filename>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25792601" version="1" comment="/etc/cron* directories">
+          <path operation="pattern match">^/etc/cron.*$</path>
+          <filename xsi:nil="true" />
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25792700" version="4">
+          <behaviors max_depth="-1" recurse_direction="down" />
+          <path>/etc</path>
+          <filename operation="pattern match">^cron.*</filename>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25793300" version="1">
+          <filepath>/etc/crontab</filepath>
+        </file_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25795900" version="1">
+          <name>net.ipv4.conf.all.accept_source_route</name>
+        </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25796000" version="1">
+          <name>net.ipv4.conf.all.log_martians</name>
+        </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25796100" version="1">
+          <name>net.ipv4.conf.default.log_martians</name>
+        </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25796700" version="1">
+          <name>net.ipv4.icmp_ignore_bogus_error_responses</name>
+        </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25797000" version="1">
+          <name>net.ipv4.conf.all.forwarding</name>
+        </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25797100" version="1">
+          <name>net.ipv6.conf.all.accept_ra</name>
+        </sysctl_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25798800" version="1" comment="/etc/ssh/sshd_config.d/50-redhat.conf">
+          <filepath datatype="string">/etc/ssh/sshd_config.d/50-redhat.conf</filepath>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25799900" version="1">
+          <filepath>/etc/ssh/sshd_config</filepath>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25799901" version="2">
+          <behaviors recurse="directories" recurse_direction="down" />
+          <path>/etc/ssh/sshd_config.d</path>
+          <filename xsi:nil="true" />
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25799902" version="2">
+          <behaviors recurse="directories" recurse_direction="down" />
+          <path>/etc/ssh/sshd_config.d</path>
+          <filename operation="pattern match">.*</filename>
+        </file_object>
+        <password_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25804500" version="1" comment="Interactive Users">
+          <username operation="pattern match">.*</username>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:25804500</filter>
+        </password_object>
+        <password_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25804600" version="1">
+          <username operation="pattern match">.+</username>
+        </password_object>
+        <password_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25804601" version="1" comment="only system accounts">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.unix:obj:25804600</object_reference>
+            <filter action="exclude">oval:mil.disa.stig.unix:ste:25804601</filter>
+            <filter action="exclude">oval:mil.disa.stig.unix:ste:25804602</filter>
+          </set>
+        </password_object>
+        <password_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25804800" version="1" comment="All password entries">
+          <username operation="pattern match">.*</username>
+        </password_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25817200" version="1" comment="/etc/audit/auditd.conf">
+          <filepath>/etc/audit/auditd.conf</filepath>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048700" version="3">
+          <behaviors recurse_direction="down" />
+          <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
+          <filename operation="pattern match">\.so\S*$</filename>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:26048700</filter>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048701" version="3">
+          <behaviors recurse_direction="down" />
+          <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
+          <filename operation="pattern match">\.so\S*$</filename>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:26048701</filter>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048702" version="3">
+          <behaviors recurse_direction="down" />
+          <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
+          <filename operation="pattern match">\.so\S*$</filename>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:26048702</filter>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048703" version="3">
+          <behaviors recurse_direction="down" />
+          <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
+          <filename operation="pattern match">\.so\S*$</filename>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:26048703</filter>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048704" version="3">
+          <behaviors recurse_direction="down" />
+          <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
+          <filename operation="pattern match">\.so\S*$</filename>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:26048704</filter>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:27177300" version="2" comment="All files in system command directories, less files group-owned by root or a system account">
+          <behaviors recurse_direction="down" />
+          <path var_ref="oval:mil.disa.stig.defs:var:20000019" var_check="at least one" />
+          <filename operation="pattern match">.*</filename>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.stig.unix:ste:20000023</filter>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:27177400" version="2" comment="All files in system command directories, less files owned by root">
+          <behaviors recurse_direction="down" />
+          <path var_ref="oval:mil.disa.stig.defs:var:20000019" var_check="at least one" />
+          <filename operation="pattern match">.*</filename>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.stig.unix:ste:20000005</filter>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:27177500" version="1" comment="Group-writable files in system command directories">
+          <behaviors recurse_direction="down" />
+          <path datatype="string" var_ref="oval:mil.disa.stig.defs:var:20000019" var_check="at least one" />
+          <filename datatype="string" operation="pattern match">.*</filename>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.stig.unix:ste:20000024</filter>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.stig.unix:ste:20000002</filter>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:27177501" version="1" comment="World-writable files in system command directories">
+          <behaviors recurse_direction="down" />
+          <path datatype="string" var_ref="oval:mil.disa.stig.defs:var:20000019" var_check="at least one" />
+          <filename datatype="string" operation="pattern match">.*</filename>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.stig.unix:ste:20000025</filter>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.stig.unix:ste:20000002</filter>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:27178600" version="1" comment="All system-wide library directories">
+          <behaviors recurse_direction="down" />
+          <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
+          <filename xsi:nil="true" />
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000021</filter>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="exclude">oval:mil.disa.stig.unix:ste:20000006</filter>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:27178700" version="1" comment="All system-wide library directories">
+          <behaviors recurse_direction="down" />
+          <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
+          <filename xsi:nil="true" />
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000021</filter>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="exclude">oval:mil.disa.stig.unix:ste:20000005</filter>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:27178800" version="1" comment="All group-writable system-wide library directories">
+          <behaviors recurse_direction="down" />
+          <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
+          <filename xsi:nil="true" />
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000021</filter>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="exclude">oval:mil.disa.stig.unix:ste:20000024</filter>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:27178801" version="1" comment="All world-writable system-wide library directories">
+          <behaviors recurse_direction="down" />
+          <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
+          <filename xsi:nil="true" />
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000021</filter>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="exclude">oval:mil.disa.stig.unix:ste:20000025</filter>
+        </file_object>
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:28513401" version="1">
+          <filepath>/var/lib/aide/aide.db.gz</filepath>
+        </file_object>
+      </objects>
+      <states>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:2303001" version="1">
+          <subexpression operation="pattern match">(?:^nosuid$|^nosuid,|,nosuid$|,nosuid,)</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:2445301" version="1">
+          <subexpression operation="pattern match">(?:^nosuid$|^nosuid,|,nosuid$|,nosuid,)</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:10001601" version="1">
+          <subexpression>vfat</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000000" version="1">
+          <subexpression>false</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000001" version="1">
+          <subexpression>true</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000002" version="1">
+          <subexpression datatype="int" operation="equals">0</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000003" version="1">
+          <subexpression datatype="int" operation="equals">1</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000014" version="1">
+          <subexpression datatype="string" operation="equals">none</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000015" version="1">
+          <subexpression datatype="int" operation="greater than">0</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000016" version="1">
+          <subexpression datatype="string" operation="pattern match">^(yes|"yes")$</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000017" version="1">
+          <subexpression datatype="string" operation="pattern match">^(no|"no")$</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000018" version="1">
+          <subexpression datatype="string" operation="pattern match">^[123]$</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000019" version="2">
+          <subexpression datatype="int" operation="greater than or equal">0</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000020" version="2">
+          <subexpression datatype="int" operation="less than">0</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000021" version="2">
+          <subexpression datatype="string" operation="pattern match">^(True|1|yes)$</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000022" version="1">
+          <subexpression datatype="string" operation="pattern match">(?i)^yes$</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000023" version="1">
+          <subexpression>yes</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000024" version="1">
+          <subexpression datatype="int" operation="not equal">0</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000025" version="1">
+          <subexpression datatype="string" operation="equals">077</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000027" version="2">
+          <subexpression datatype="string" operation="pattern match">(?i)(?:^|\n)[^#]*\btype\s*=\s*"omfwd"</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20441700" version="2" comment="defaults/crypt_style">
+          <subexpression datatype="string" operation="pattern match">\n\s*crypt_style\s*=\s*(\S*)\s*(\n|$)</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20441701" version="3" comment="sha512">
+          <subexpression datatype="string">sha512</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23023100" version="1">
+          <subexpression datatype="string" operation="equals">SHA512</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23023200" version="1" comment="Exclude inactive/locked hashes (with leading '!' or '*').">
+          <subexpression datatype="string" operation="pattern match">^[!*]</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23023201" version="2" comment="Exclude hashes with leading '$6$'.">
+          <subexpression datatype="string" operation="pattern match">^[$][6][$]</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23023300" version="2">
+          <subexpression datatype="int" operation="greater than or equal">100000</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23024000" version="1" comment="/sys/fs/selinux/enforce != 0">
+          <subexpression datatype="int" operation="not equal">0</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23024001" version="1" comment="/etc/selinux/config:SELINUX=enforcing">
+          <subexpression datatype="string">enforcing</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23026400" version="1">
+          <text datatype="string" operation="pattern match">\n\s*gpgcheck\s*=\s*(True|1|yes)\s*(\n|$)</text>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23026401" version="1">
+          <text datatype="string" operation="pattern match">\n\s*gpgcheck\s*=\s*(False|0|no)\s*(\n|$)</text>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23027800" version="1">
+          <subexpression operation="pattern match">(^|\s)vsyscall=none(\s|$)</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23028200" version="1">
+          <subexpression>targeted</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23030100" version="1">
+          <subexpression operation="pattern match">(?:^nodev$|^nodev,|,nodev$|,nodev,)</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23030600" version="1">
+          <subexpression operation="pattern match">^.*noexec.*$</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23030800" version="1">
+          <subexpression operation="pattern match">(^|,)nosuid(,|$)</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23031300" version="1">
+          <subexpression datatype="int">0</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23031500" version="1">
+          <subexpression>0</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23031600" version="2" comment="hosts entry contains dns">
+          <subexpression operation="pattern match">(^|\s)dns(\s|$)</subexpression>
+        </textfilecontent54_state>
+        <variable_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23031601" version="2" comment="/etc/resolv.conf is configured with at least two name servers">
+          <value datatype="int" operation="greater than or equal">2</value>
+        </variable_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23033300" version="1">
+          <subexpression datatype="int" operation="less than or equal">3</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23033500" version="1">
+          <subexpression datatype="int" operation="less than or equal">900</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23033900" version="1">
+          <subexpression>/var/log/faillock</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23034600" version="1">
+          <subexpression datatype="int" operation="less than or equal">10</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23035100" version="1">
+          <text datatype="string" operation="pattern match">\nremoval-action='lock-screen'\s*(\n|$)</text>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23036000" version="1">
+          <subexpression datatype="int" operation="less than or equal">4</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23036100" version="1">
+          <subexpression datatype="int" operation="less than or equal">3</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23036200" version="1">
+          <subexpression datatype="int" operation="greater than or equal">4</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23036300" version="1">
+          <subexpression datatype="int" operation="greater than or equal">8</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23036500" version="1">
+          <subexpression datatype="int" operation="greater than or equal">1</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23036900" version="1">
+          <subexpression datatype="int" operation="greater than or equal">15</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23037300" version="1">
+          <subexpression datatype="int" operation="less than or equal">35</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23037800" version="1">
+          <subexpression datatype="int" operation="greater than or equal">4</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23038300" version="1">
+          <subexpression datatype="string" operation="equals">077</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23038500" version="1">
+          <subexpression datatype="string" operation="equals">077</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23038800" version="1">
+          <subexpression operation="pattern match">(?i)^root$</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23039000" version="1">
+          <subexpression operation="pattern match">(?i)^syslog$</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23039001" version="1">
+          <subexpression operation="pattern match">(?i)^single$</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23039002" version="1">
+          <subexpression operation="pattern match">(?i)^halt$</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23039200" version="1">
+          <subexpression operation="pattern match">(?i)^syslog$</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23039201" version="1">
+          <subexpression operation="pattern match">(?i)^single$</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23039202" version="1">
+          <subexpression operation="pattern match">(?i)^halt$</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23039400" version="1">
+          <subexpression operation="pattern match">(?i)^hostname$</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23039401" version="1">
+          <subexpression operation="pattern match">(?i)^fqd$</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23039402" version="1">
+          <subexpression operation="pattern match">(?i)^numeric$</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23039500" version="1">
+          <subexpression operation="pattern match">(?i)^enriched$</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23046800" version="2">
+          <subexpression operation="pattern match">(^|\s)audit=1(\s|$)</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23046900" version="2">
+          <subexpression datatype="int" operation="greater than or equal">8192</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23047000" version="1">
+          <subexpression>LinuxAudit</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23048300" version="2">
+          <subexpression datatype="int" operation="greater than or equal">25</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23048301" version="1">
+          <subexpression datatype="int" operation="less than">100</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23049100" version="1">
+          <subexpression operation="pattern match">(^|\s)pti=on(\s|$)</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23050900" version="1">
+          <subexpression operation="pattern match">(?:^nosuid$|^nosuid,|,nosuid$|,nosuid,)</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23051001" version="1">
+          <subexpression operation="pattern match">(?:^noexec$|^noexec,|,noexec$|,noexec,)</subexpression>
+        </textfilecontent54_state>
+        <variable_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23051100" version="1">
+          <value entity_check="at least one">nodev</value>
+        </variable_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23051200" version="1">
+          <subexpression operation="pattern match">^.*nosuid.*$</subexpression>
+        </textfilecontent54_state>
+        <variable_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23051400" version="1">
+          <value entity_check="at least one">nodev</value>
+        </variable_state>
+        <variable_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23051500" version="1">
+          <value entity_check="at least one">nosuid</value>
+        </variable_state>
+        <variable_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23051600" version="1">
+          <value entity_check="at least one">noexec</value>
+        </variable_state>
+        <variable_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23051700" version="1">
+          <value entity_check="at least one">nodev</value>
+        </variable_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23051900" version="1">
+          <subexpression operation="pattern match">^.*noexec.*$</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23052000" version="1">
+          <subexpression operation="pattern match">(?:^nodev$|^nodev,|,nodev$|,nodev,)</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23052101" version="1">
+          <subexpression operation="pattern match">(?:^nosuid$|^nosuid,|,nosuid$|,nosuid,)</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23052500" version="1">
+          <subexpression>nftables</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23052700" version="1">
+          <text datatype="string" operation="pattern match">^(?i)\s*RekeyLimit\s+[1-9][0-9]*[kmg]?\s+([1-9][0-9]*[smhdw]?)+\s*$</text>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23481500" version="1" comment="LogLevel value is set to VERBOSE">
+          <subexpression datatype="string" operation="pattern match">^VERBOSE$|^"VERBOSE"$</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23764200" version="1">
+          <subexpression datatype="string" operation="equals">/etc/sudoers.d</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:24452300" version="1" comment="emergency.service ExecStart">
+          <subexpression>-/usr/lib/systemd/systemd-sulogin-shell emergency</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:24454300" version="1">
+          <subexpression operation="pattern match">(?i)^email$</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25171300" version="1">
+          <subexpression datatype="string" operation="pattern match">^pam_pwquality.so(\s|$)</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25294300" version="1">
+          <subexpression datatype="string" operation="pattern match">^(delayed|"delayed")$</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25725800" version="2">
+          <subexpression datatype="int">600</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25778700" version="1" comment="GRUB superuser name">
+          <subexpression datatype="string" operation="pattern match">^\S+$</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25778701" version="2" comment="GRUB superuser password">
+          <subexpression datatype="string" operation="pattern match">^grub\.pbkdf2\.sha512\.</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25778800" version="1">
+          <subexpression operation="pattern match">(^|\s)systemd\.confirm_spawn(\s|$)</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25779300" version="1">
+          <subexpression operation="pattern match">(^|\s)page_poison=1(\s|$)</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25782000" version="1" comment="/etc/dnf/dnf.conf gpgcheck=1">
+          <subexpression datatype="string" operation="equals">1</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25785400" version="1" comment="nodev option">
+          <subexpression datatype="string" operation="pattern match">(^|,)nodev(,|$)</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25794900" version="1">
+          <subexpression datatype="string" operation="pattern match">\ndns=</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25794901" version="1">
+          <subexpression datatype="string" operation="equals">none</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25794902" version="1">
+          <subexpression datatype="string" operation="equals">default</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25794903" version="1">
+          <subexpression datatype="string" operation="equals">systemd-resolved</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25798100" version="3" comment="banner value is set to /etc/issue">
+          <subexpression datatype="string" operation="pattern match">^\/.+$</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25798800" version="1">
+          <subexpression datatype="string" operation="equals">/etc/crypto-policies/back-ends/opensshserver.config</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25798801" version="1">
+          <subexpression datatype="string" operation="equals">/etc/ssh/sshd_config.d/*.conf</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25798900" version="2">
+          <subexpression datatype="string">aes256-gcm@openssh.com,aes256-ctr,aes128-gcm@openssh.com,aes128-ctr</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25798901" version="2">
+          <subexpression datatype="string">"aes256-gcm@openssh.com,aes256-ctr,aes128-gcm@openssh.com,aes128-ctr"</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25799100" version="2">
+          <subexpression>hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25799101" version="1">
+          <subexpression>"hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512"</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25799600" version="1">
+          <subexpression datatype="int" operation="less than or equal">600</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25799601" version="1">
+          <subexpression datatype="int" operation="greater than">0</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25802900" version="3">
+          <text datatype="string" operation="pattern match">\ndisable-restart-buttons=(true|'true')\s*(\n|$)</text>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25804100" version="1">
+          <subexpression datatype="int" operation="less than or equal">60</subexpression>
+        </textfilecontent54_state>
+        <variable_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25804500" version="1" comment="count of passwd UIDs">
+          <value datatype="int" var_ref="oval:mil.disa.stig.defs:var:25804501" />
+        </variable_state>
+        <variable_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25806100" version="1" comment="count of unique GIDs">
+          <value datatype="int" var_ref="oval:mil.disa.stig.defs:var:25806101" />
+        </variable_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25810000" version="2">
+          <subexpression datatype="int" operation="greater than or equal">100000</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25812100" version="2">
+          <subexpression operation="pattern match">(?i)\bcac\b</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25812200" version="1">
+          <subexpression datatype="string" operation="case insensitive equals">true</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25812300" version="1">
+          <subexpression datatype="string" operation="pattern match">(?i)(^|,)ocsp_dgst=sha512(,|$)</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25814600" version="1">
+          <subexpression datatype="string" operation="equals">x509/name</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25814800" version="1">
+          <subexpression datatype="string" operation="equals">gtls</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25814900" version="1">
+          <subexpression datatype="string" operation="pattern match">^.+$</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25814902" version="4">
+          <subexpression datatype="string" operation="pattern match">(?i)(?:^|\n)[^#]*\bprotocol\s*=\s*"tcp"</subexpression>
+        </textfilecontent54_state>
+        <variable_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25815500" version="1" comment="10GiB">
+          <value datatype="int" operation="greater than or equal">10737418240</value>
+        </variable_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25815800" version="1">
+          <subexpression datatype="string">5%</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25816000" version="2">
+          <subexpression datatype="string" operation="case insensitive equals">ROTATE</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25816001" version="2">
+          <subexpression datatype="string" operation="case insensitive equals">SINGLE</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25816800" version="1">
+          <subexpression datatype="int" operation="greater than or equal">1</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25816801" version="1">
+          <subexpression datatype="int" operation="less than or equal">100</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25823200" version="1">
+          <subexpression>/etc/crypto-policies/back-ends/libreswan.config</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25823201" version="1">
+          <subexpression>/etc/ipsec.d/*.conf</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25824200" version="1">
+          <subexpression>/etc/crypto-policies/back-ends/bind.config</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:27173400" version="1">
+          <subexpression operation="pattern match">(^|\s)slub_debug=P(\s|$)</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:27175000" version="1">
+          <subexpression datatype="int" operation="less than or equal">900</subexpression>
+        </textfilecontent54_state>
+        <partition_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:10001600" version="2">
+          <fs_type>vfat</fs_type>
+        </partition_state>
+        <partition_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:20000000" version="1">
+          <mount_options entity_check="at least one">noexec</mount_options>
+        </partition_state>
+        <partition_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:20000001" version="1">
+          <mount_options entity_check="at least one">nodev</mount_options>
+        </partition_state>
+        <partition_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:20000002" version="1">
+          <mount_options entity_check="at least one">nosuid</mount_options>
+        </partition_state>
+        <systemdunitproperty_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:20000003" version="1">
+          <value>active</value>
+        </systemdunitproperty_state>
+        <systemdunitproperty_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:20000004" version="1">
+          <value>running</value>
+        </systemdunitproperty_state>
+        <systemdunitproperty_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:20000005" version="1">
+          <value>masked</value>
+        </systemdunitproperty_state>
+        <systemdunitproperty_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:20000006" version="1">
+          <value>enabled</value>
+        </systemdunitproperty_state>
+        <systemdunitproperty_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:20000007" version="1">
+          <value>inactive</value>
+        </systemdunitproperty_state>
+        <partition_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:23024000" version="2">
+          <fs_type>selinuxfs</fs_type>
+        </partition_state>
+        <partition_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:23030102" version="1">
+          <device operation="pattern match">^/dev\S*$</device>
+        </partition_state>
+        <partition_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:23030103" version="1">
+          <fs_type>vfat</fs_type>
+        </partition_state>
+        <partition_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:23050900" version="1">
+          <mount_options entity_check="at least one">nosuid</mount_options>
+        </partition_state>
+        <partition_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:23051600" version="1">
+          <mount_options entity_check="at least one">noexec</mount_options>
+        </partition_state>
+        <systemdunitproperty_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:25803600" version="1" comment="usbguard.service active">
+          <value>active</value>
+        </systemdunitproperty_state>
+        <selinuxsecuritycontext_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:25808000" version="2" comment="configured faillock directory selinux context correct">
+          <type>faillog_t</type>
+        </selinuxsecuritycontext_state>
+        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000001" version="1" comment="File permissions is 644 or more restrictive">
+          <suid datatype="boolean">false</suid>
+          <sgid datatype="boolean">false</sgid>
+          <sticky datatype="boolean">false</sticky>
+          <uexec datatype="boolean">false</uexec>
+          <gwrite datatype="boolean">false</gwrite>
+          <gexec datatype="boolean">false</gexec>
+          <owrite datatype="boolean">false</owrite>
+          <oexec datatype="boolean">false</oexec>
+        </file_state>
+        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000002" version="1" comment="symbolic links">
+          <type entity_check="all" datatype="string" operation="equals">symbolic link</type>
+        </file_state>
+        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000004" version="1" comment="Mode 0600 or less permissive">
+          <suid datatype="boolean">false</suid>
+          <sgid datatype="boolean">false</sgid>
+          <sticky datatype="boolean">false</sticky>
+          <uexec datatype="boolean">false</uexec>
+          <gread datatype="boolean">false</gread>
+          <gwrite datatype="boolean">false</gwrite>
+          <gexec datatype="boolean">false</gexec>
+          <oread datatype="boolean">false</oread>
+          <owrite datatype="boolean">false</owrite>
+          <oexec datatype="boolean">false</oexec>
+        </file_state>
+        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000005" version="1" comment="owned by root">
+          <user_id datatype="int">0</user_id>
+        </file_state>
+        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000006" version="1" comment="group-owned by root">
+          <group_id datatype="int">0</group_id>
+        </file_state>
+        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000007" version="1" comment="mode 0640 or less permissive">
+          <suid datatype="boolean">false</suid>
+          <sgid datatype="boolean">false</sgid>
+          <sticky datatype="boolean">false</sticky>
+          <uexec datatype="boolean">false</uexec>
+          <gwrite datatype="boolean">false</gwrite>
+          <gexec datatype="boolean">false</gexec>
+          <oread datatype="boolean">false</oread>
+          <owrite datatype="boolean">false</owrite>
+          <oexec datatype="boolean">false</oexec>
+        </file_state>
+        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000008" version="1" comment="mode 0755 or less permissive">
+          <suid datatype="boolean">false</suid>
+          <sgid datatype="boolean">false</sgid>
+          <sticky datatype="boolean">false</sticky>
+          <gwrite datatype="boolean">false</gwrite>
+          <owrite datatype="boolean">false</owrite>
+        </file_state>
+        <sysctl_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000009" version="1">
+          <value datatype="int" operation="equals">0</value>
+        </sysctl_state>
+        <sysctl_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000010" version="1">
+          <value datatype="int" operation="equals">1</value>
+        </sysctl_state>
+        <sysctl_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000011" version="1">
+          <value datatype="int" operation="equals">2</value>
+        </sysctl_state>
+        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000012" version="1" comment="mode 0000 or less permissive">
+          <suid datatype="boolean">false</suid>
+          <sgid datatype="boolean">false</sgid>
+          <sticky datatype="boolean">false</sticky>
+          <uread datatype="boolean">false</uread>
+          <uwrite datatype="boolean">false</uwrite>
+          <uexec datatype="boolean">false</uexec>
+          <gread datatype="boolean">false</gread>
+          <gwrite datatype="boolean">false</gwrite>
+          <gexec datatype="boolean">false</gexec>
+          <oread datatype="boolean">false</oread>
+          <owrite datatype="boolean">false</owrite>
+          <oexec datatype="boolean">false</oexec>
+        </file_state>
+        <symlink_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000013" version="1">
+          <canonical_path>/dev/null</canonical_path>
+        </symlink_state>
+        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000014" version="1" comment="mode 700 or less permissive">
+          <gread datatype="boolean">false</gread>
+          <gwrite datatype="boolean">false</gwrite>
+          <gexec datatype="boolean">false</gexec>
+          <oread datatype="boolean">false</oread>
+          <owrite datatype="boolean">false</owrite>
+          <oexec datatype="boolean">false</oexec>
+        </file_state>
+        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000015" version="1">
+          <type>regular</type>
+        </file_state>
+        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000016" version="1" comment="only users with the home directory defined">
+          <home_dir datatype="string" operation="pattern match">.+</home_dir>
+        </password_state>
+        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000017" version="1" comment="only uids &lt; 1000">
+          <user_id entity_check="all" datatype="int" operation="less than">1000</user_id>
+        </password_state>
+        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000018" version="1" comment="only uids &gt; 0">
+          <user_id entity_check="all" datatype="int" operation="greater than">0</user_id>
+        </password_state>
+        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000020" version="2" comment="mode 0740 or less permissive">
+          <suid datatype="boolean">false</suid>
+          <sgid datatype="boolean">false</sgid>
+          <sticky datatype="boolean">false</sticky>
+          <gwrite datatype="boolean">false</gwrite>
+          <gexec datatype="boolean">false</gexec>
+          <oread datatype="boolean">false</oread>
+          <owrite datatype="boolean">false</owrite>
+          <oexec datatype="boolean">false</oexec>
+        </file_state>
+        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000021" version="1">
+          <type>directory</type>
+        </file_state>
+        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000022" version="1" comment="mode 0750 or less permissive">
+          <suid datatype="boolean">false</suid>
+          <sgid datatype="boolean">false</sgid>
+          <sticky datatype="boolean">false</sticky>
+          <gwrite datatype="boolean">false</gwrite>
+          <oread datatype="boolean">false</oread>
+          <owrite datatype="boolean">false</owrite>
+          <oexec datatype="boolean">false</oexec>
+        </file_state>
+        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000023" version="1">
+          <group_id datatype="int" operation="less than">1000</group_id>
+        </file_state>
+        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000024" version="1" comment="Not group-writable">
+          <gwrite datatype="boolean">false</gwrite>
+        </file_state>
+        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:20000025" version="1" comment="Not world-writable">
+          <owrite datatype="boolean">false</owrite>
+        </file_state>
+        <sysctl_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23031100" version="1">
+          <value datatype="string" operation="equals">|/bin/false</value>
+        </sysctl_state>
+        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23032500" version="1" comment="root directory">
+          <home_dir>/</home_dir>
+        </password_state>
+        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23035100" version="1" comment="dconf database directories">
+          <path operation="pattern match">^/etc/dconf/db/.*\.d$</path>
+        </file_state>
+        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23036400" version="1">
+          <user_id datatype="int" operation="less than">1000</user_id>
+        </password_state>
+        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23036401" version="1">
+          <user_id datatype="int" operation="equals" var_ref="oval:mil.disa.stig.defs:var:23036401" var_check="all" />
+        </password_state>
+        <shadow_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23036700" version="1" comment="greater than zero">
+          <chg_req datatype="int" operation="greater than">0</chg_req>
+        </shadow_state>
+        <shadow_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23036701" version="1" comment="less than or equal to sixty">
+          <chg_req datatype="int" operation="less than or equal">60</chg_req>
+        </shadow_state>
+        <shadow_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23036702" version="1" comment="Lines starting with usernames of system users">
+          <username datatype="string" operation="pattern match" var_ref="oval:mil.disa.stig.defs:var:23036700" var_check="at least one" />
+        </shadow_state>
+        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23036703" version="2" comment="anonymous users">
+          <user_id datatype="int" operation="not equal" var_ref="oval:mil.disa.stig.defs:var:23036701" var_check="all" />
+        </password_state>
+        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23036704" version="2">
+          <user_id datatype="int" operation="greater than or equal">1000</user_id>
+        </password_state>
+        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23053400" version="1">
+          <user_id datatype="int" operation="not equal">0</user_id>
+        </password_state>
+        <interface_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23055400" version="1" comment="Interface is not in PROMISC mode">
+          <flag entity_check="none satisfy" operation="pattern match">(^|\s)PROMISC(\s|$)</flag>
+        </interface_state>
+        <symlink_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:25171800" version="1">
+          <canonical_path operation="pattern match">[\S]*\/multi\-user\.target$</canonical_path>
+        </symlink_state>
+        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:25789000" version="3" comment="nologin shell">
+          <login_shell operation="pattern match">^.*nologin.*$</login_shell>
+        </password_state>
+        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:25789002" version="2" comment="uid &lt; 1000">
+          <user_id datatype="int" operation="less than">1000</user_id>
+        </password_state>
+        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:25789003" version="1" comment="uid = 65534 (nobody)">
+          <user_id datatype="int">65534</user_id>
+        </password_state>
+        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:25793300" version="1" comment="mode 0600">
+          <suid datatype="boolean">false</suid>
+          <sgid datatype="boolean">false</sgid>
+          <sticky datatype="boolean">false</sticky>
+          <uread datatype="boolean">true</uread>
+          <uwrite datatype="boolean">true</uwrite>
+          <uexec datatype="boolean">false</uexec>
+          <gread datatype="boolean">false</gread>
+          <gwrite datatype="boolean">false</gwrite>
+          <gexec datatype="boolean">false</gexec>
+          <oread datatype="boolean">false</oread>
+          <owrite datatype="boolean">false</owrite>
+          <oexec datatype="boolean">false</oexec>
+        </file_state>
+        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:25804500" version="1" comment="Interactive Users">
+          <user_id datatype="int" operation="greater than or equal">1000</user_id>
+        </password_state>
+        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:25804600" version="2">
+          <login_shell datatype="string" operation="pattern match">/sbin/nologin|/usr/sbin/nologin</login_shell>
+        </password_state>
+        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:25804601" version="2">
+          <user_id datatype="int" operation="greater than or equal">1000</user_id>
+        </password_state>
+        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:25804602" version="2">
+          <user_id datatype="int" operation="equals">0</user_id>
+        </password_state>
+        <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:25804800" version="1" comment="Valid Local GIDs">
+          <group_id datatype="int" var_ref="oval:mil.disa.stig.defs:var:25804800" var_check="at least one" />
+        </password_state>
+        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:26048700" version="1">
+          <suid datatype="boolean">true</suid>
+        </file_state>
+        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:26048701" version="1">
+          <sgid datatype="boolean">true</sgid>
+        </file_state>
+        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:26048702" version="1">
+          <sticky datatype="boolean">true</sticky>
+        </file_state>
+        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:26048703" version="1">
+          <gwrite datatype="boolean">true</gwrite>
+        </file_state>
+        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:26048704" version="1">
+          <owrite datatype="boolean">true</owrite>
+        </file_state>
+        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:28513400" version="1" comment="not empty">
+          <size datatype="int" operation="greater than">0</size>
+        </file_state>
+      </states>
+      <variables>
+        <local_variable id="oval:mil.disa.stig.defs:var:20000004" version="1" datatype="string" comment="Audit log location from /etc/audit/auditd.conf">
+          <object_component object_ref="oval:mil.disa.stig.ind:obj:20000001" item_field="subexpression" />
+        </local_variable>
+        <constant_variable id="oval:mil.disa.stig.defs:var:20000005" version="2" datatype="string" comment="Directories containing sysctl configuration files">
+          <value>/etc/sysctl.d</value>
+          <value>/run/sysctl.d</value>
+          <value>/lib/sysctl.d</value>
+          <value>/usr/lib/sysctl.d</value>
+          <value>/usr/local/lib/sysctl.d</value>
+        </constant_variable>
+        <constant_variable id="oval:mil.disa.stig.defs:var:20000006" version="2" datatype="string" comment="Append an audit rule">
+          <value>^\s*-a\s+(?:always,exit|exit,always)</value>
+        </constant_variable>
+        <constant_variable id="oval:mil.disa.stig.defs:var:20000007" version="2" datatype="string" comment="Audit 32-bit architecture">
+          <value>\s+-F\s+arch=b32</value>
+        </constant_variable>
+        <constant_variable id="oval:mil.disa.stig.defs:var:20000008" version="2" datatype="string" comment="Audit 64-bit architecture">
+          <value>\s+-F\s+arch=b64</value>
+        </constant_variable>
+        <constant_variable id="oval:mil.disa.stig.defs:var:20000009" version="2" datatype="string" comment="Allow for multiple -S fields">
+          <value>\s+(?:-S\s+[,\w]+\s+)*</value>
+        </constant_variable>
+        <constant_variable id="oval:mil.disa.stig.defs:var:20000010" version="2" datatype="string" comment="Allow for leading syscalls">
+          <value>-S\s+[,\w]*\b</value>
+        </constant_variable>
+        <constant_variable id="oval:mil.disa.stig.defs:var:20000011" version="2" datatype="string" comment="Allow for trailing syscalls">
+          <value>\b[,\w]*</value>
+        </constant_variable>
+        <constant_variable id="oval:mil.disa.stig.defs:var:20000012" version="2" datatype="string" comment="Filter out system UIDs">
+          <value>-F\s+auid&gt;=1000\s+-F\s+auid!=(?:4294967295|-1|unset)</value>
+        </constant_variable>
+        <constant_variable id="oval:mil.disa.stig.defs:var:20000013" version="2" datatype="string" comment="Key field">
+          <value>(?:\s+(?:-k\s+|-F\s+key=)[-\w]+)*\s*$</value>
+        </constant_variable>
+        <constant_variable id="oval:mil.disa.stig.defs:var:20000016" version="1" datatype="string" comment="Filter out non-root UIDs.">
+          <value>-F\s+auid=0</value>
+        </constant_variable>
+        <constant_variable id="oval:mil.disa.stig.defs:var:20000018" version="1" datatype="string" comment="system-wide shared library files directories">
+          <value>/lib</value>
+          <value>/lib64</value>
+          <value>/usr/lib</value>
+          <value>/usr/lib64</value>
+        </constant_variable>
+        <constant_variable id="oval:mil.disa.stig.defs:var:20000019" version="1" datatype="string" comment="system command directories (including /usr/libexec)">
+          <value>/bin</value>
+          <value>/sbin</value>
+          <value>/usr/bin</value>
+          <value>/usr/sbin</value>
+          <value>/usr/libexec</value>
+          <value>/usr/local/bin</value>
+          <value>/usr/local/sbin</value>
+        </constant_variable>
+        <local_variable id="oval:mil.disa.stig.defs:var:23029400" version="1" datatype="string" comment="audit data directory from /etc/audit/auditd.conf">
+          <object_component object_ref="oval:mil.disa.stig.ind:obj:23029402" item_field="subexpression" />
+        </local_variable>
+        <local_variable id="oval:mil.disa.stig.defs:var:23029401" version="1" datatype="string" comment="regex to find audit data partition in /etc/fstab">
+          <concat>
+            <literal_component>^[^# \t]+\s+</literal_component>
+            <object_component object_ref="oval:mil.disa.stig.ind:obj:23029402" item_field="subexpression" />
+            <literal_component>\s+</literal_component>
+          </concat>
+        </local_variable>
+        <local_variable id="oval:mil.disa.stig.defs:var:23032500" version="2" datatype="string" comment="The home directories of non-system users.">
+          <object_component object_ref="oval:mil.disa.stig.unix:obj:23032502" item_field="home_dir" />
+        </local_variable>
+        <local_variable id="oval:mil.disa.stig.defs:var:23032501" version="2" datatype="string" comment="The home directory of the root user.">
+          <object_component object_ref="oval:mil.disa.stig.unix:obj:23032503" item_field="home_dir" />
+        </local_variable>
+        <local_variable id="oval:mil.disa.stig.defs:var:23035100" version="1" datatype="string" comment="dconf database directories">
+          <object_component object_ref="oval:mil.disa.stig.unix:obj:23035100" item_field="path" />
+        </local_variable>
+        <local_variable id="oval:mil.disa.stig.defs:var:23036400" version="1" datatype="string" comment="Usernames of users with a minimum password age of 0 or blank">
+          <object_component object_ref="oval:mil.disa.stig.ind:obj:23036402" item_field="subexpression" />
+        </local_variable>
+        <local_variable id="oval:mil.disa.stig.defs:var:23036401" version="1" datatype="int" comment="UID for user nobody">
+          <object_component object_ref="oval:mil.disa.stig.ind:obj:23036403" item_field="subexpression" />
+        </local_variable>
+        <local_variable id="oval:mil.disa.stig.defs:var:23036700" version="2" datatype="string" comment="Pattern to match lines starting with usernames of system users">
+          <concat>
+            <literal_component datatype="string">^</literal_component>
+            <object_component object_ref="oval:mil.disa.stig.unix:obj:23036701" item_field="username" />
+            <literal_component datatype="string">$</literal_component>
+          </concat>
+        </local_variable>
+        <constant_variable id="oval:mil.disa.stig.defs:var:23036701" version="1" datatype="int" comment="anonymous UIDs">
+          <value>65534</value>
+          <value>65535</value>
+          <value>4294967294</value>
+          <value>4294967295</value>
+        </constant_variable>
+        <local_variable id="oval:mil.disa.stig.defs:var:23039700" version="1" datatype="string" comment="audit data directory from /etc/audit/auditd.conf">
+          <object_component object_ref="oval:mil.disa.stig.ind:obj:23039701" item_field="subexpression" />
+        </local_variable>
+        <constant_variable id="oval:mil.disa.stig.defs:var:23047200" version="1" datatype="string" comment="audit tools">
+          <value>/sbin/auditctl</value>
+          <value>/sbin/aureport</value>
+          <value>/sbin/ausearch</value>
+          <value>/sbin/autrace</value>
+          <value>/sbin/auditd</value>
+          <value>/sbin/rsyslogd</value>
+          <value>/sbin/augenrules</value>
+        </constant_variable>
+        <local_variable id="oval:mil.disa.stig.defs:var:23051600" version="1" datatype="string" comment="Mount options for /var/log in /etc/fstab">
+          <split delimiter=",">
+            <object_component object_ref="oval:mil.disa.stig.ind:obj:23051601" item_field="subexpression" />
+          </split>
+        </local_variable>
+        <local_variable id="oval:mil.disa.stig.defs:var:23764200" version="1" datatype="string" comment="sudoers.d config files">
+          <object_component object_ref="oval:mil.disa.stig.unix:obj:23764200" item_field="filepath" />
+        </local_variable>
+        <local_variable id="oval:mil.disa.stig.defs:var:25303500" version="1" datatype="string" comment="Pattern for audit rule for 32-bit invocations of lsetxattr system call.">
+          <concat>
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000006" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000007" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000009" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000010" />
+            <literal_component>lsetxattr</literal_component>
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000011" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000009" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000012" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000013" />
+          </concat>
+        </local_variable>
+        <local_variable id="oval:mil.disa.stig.defs:var:25303501" version="1" datatype="string" comment="Pattern for audit rule for 64-bit invocations of lsetxattr system call.">
+          <concat>
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000006" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000008" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000009" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000010" />
+            <literal_component>lsetxattr</literal_component>
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000011" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000009" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000012" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000013" />
+          </concat>
+        </local_variable>
+        <local_variable id="oval:mil.disa.stig.defs:var:25303502" version="1" datatype="string" comment="Pattern for audit rule for 32-bit invocations of lsetxattr system call by root user.">
+          <concat>
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000006" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000007" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000009" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000010" />
+            <literal_component>lsetxattr</literal_component>
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000011" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000009" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000016" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000013" />
+          </concat>
+        </local_variable>
+        <local_variable id="oval:mil.disa.stig.defs:var:25303503" version="1" datatype="string" comment="Pattern for audit rule for 32-bit invocations of lsetxattr system call by root user.">
+          <concat>
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000006" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000007" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000009" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000010" />
+            <literal_component>lsetxattr</literal_component>
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000011" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000009" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000016" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000013" />
+          </concat>
+        </local_variable>
+        <local_variable id="oval:mil.disa.stig.defs:var:25303800" version="1" datatype="string" comment="Pattern for audit rule for 32-bit invocations of removexattr system call.">
+          <concat>
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000006" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000007" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000009" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000010" />
+            <literal_component>removexattr</literal_component>
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000011" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000009" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000012" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000013" />
+          </concat>
+        </local_variable>
+        <local_variable id="oval:mil.disa.stig.defs:var:25303801" version="1" datatype="string" comment="Pattern for audit rule for 64-bit invocations of removexattr system call.">
+          <concat>
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000006" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000008" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000009" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000010" />
+            <literal_component>removexattr</literal_component>
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000011" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000009" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000012" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000013" />
+          </concat>
+        </local_variable>
+        <local_variable id="oval:mil.disa.stig.defs:var:25303802" version="1" datatype="string" comment="Pattern for audit rule for 32-bit invocations of removexattr system call by root user.">
+          <concat>
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000006" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000007" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000009" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000010" />
+            <literal_component>removexattr</literal_component>
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000011" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000009" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000016" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000013" />
+          </concat>
+        </local_variable>
+        <local_variable id="oval:mil.disa.stig.defs:var:25303803" version="1" datatype="string" comment="Pattern for audit rule for 32-bit invocations of removexattr system call by root user.">
+          <concat>
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000006" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000007" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000009" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000010" />
+            <literal_component>removexattr</literal_component>
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000011" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000009" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000016" />
+            <variable_component var_ref="oval:mil.disa.stig.defs:var:20000013" />
+          </concat>
+        </local_variable>
+        <local_variable id="oval:mil.disa.stig.defs:var:25789000" version="1" datatype="string" comment="home directories of local interactive users without nologin">
+          <object_component object_ref="oval:mil.disa.stig.unix:obj:25789000" item_field="home_dir" />
+        </local_variable>
+        <local_variable id="oval:mil.disa.stig.defs:var:25802600" version="2" datatype="string" comment="dconf user database locks directories">
+          <concat>
+            <literal_component>/etc/dconf/db/</literal_component>
+            <object_component object_ref="oval:mil.disa.stig.ind:obj:25802600" item_field="subexpression" />
+            <literal_component>.d/locks</literal_component>
+          </concat>
+        </local_variable>
+        <local_variable id="oval:mil.disa.stig.defs:var:25804500" version="1" datatype="int" comment="count of passwd entries">
+          <count>
+            <object_component object_ref="oval:mil.disa.stig.unix:obj:25804500" item_field="user_id" />
+          </count>
+        </local_variable>
+        <local_variable id="oval:mil.disa.stig.defs:var:25804501" version="1" datatype="int" comment="count of unique UIDs">
+          <count>
+            <unique>
+              <object_component object_ref="oval:mil.disa.stig.unix:obj:25804500" item_field="user_id" />
+            </unique>
+          </count>
+        </local_variable>
+        <local_variable id="oval:mil.disa.stig.defs:var:25804800" version="1" datatype="int" comment="Valid Local GIDs">
+          <object_component object_ref="oval:mil.disa.stig.ind:obj:25804800" item_field="subexpression" />
+        </local_variable>
+        <local_variable id="oval:mil.disa.stig.defs:var:25806100" version="1" datatype="int" comment="count of group entries">
+          <count>
+            <object_component object_ref="oval:mil.disa.stig.ind:obj:25806100" item_field="subexpression" />
+          </count>
+        </local_variable>
+        <local_variable id="oval:mil.disa.stig.defs:var:25806101" version="1" datatype="int" comment="count of unique GIDs">
+          <count>
+            <unique>
+              <object_component object_ref="oval:mil.disa.stig.ind:obj:25806100" item_field="subexpression" />
+            </unique>
+          </count>
+        </local_variable>
+        <local_variable id="oval:mil.disa.stig.defs:var:25808000" version="1" datatype="string" comment="faillock directory">
+          <object_component object_ref="oval:mil.disa.stig.ind:obj:25808000" item_field="subexpression" />
+        </local_variable>
+        <constant_variable id="oval:mil.disa.stig.defs:var:25814300" version="4" datatype="string" comment="Patterns for remote log acceptance config">
+          <value>^[^#]*InputTCPServerRun</value>
+          <value>^[^#]*UDPServerRun</value>
+          <value>^[^#]*RELPServerRun</value>
+          <value>^[^#]*module\s*\(.*\bload\s*=\s*"imtcp".*\)</value>
+          <value>^[^#]*module\s*\(.*\bload\s*=\s*"imudp".*\)</value>
+          <value>^[^#]*module\s*\(.*\bload\s*=\s*"imrelp".*\)</value>
+          <value>^[^#]*input\s*\(.*\btype\b\s*=\s*"imtcp"\s*\bport\b\s*=\s*"514".*\)</value>
+          <value>^[^#]*input\s*\(.*\btype\b\s*=\s*"imudp"\s*\bport\b\s*=\s*"514".*\)</value>
+          <value>^[^#]*input\s*\(.*\btype\b\s*=\s*"imrelp"\s*\bport\b\s*=\s*"514".*\)</value>
+        </constant_variable>
+        <local_variable id="oval:mil.disa.stig.defs:var:25815500" version="1" datatype="string" comment="audit partition total size in bytes">
+          <arithmetic arithmetic_operation="multiply">
+            <object_component object_ref="oval:mil.disa.stig.linux:obj:23029400" item_field="block_size" />
+            <object_component object_ref="oval:mil.disa.stig.linux:obj:23029400" item_field="total_space" />
+          </arithmetic>
+        </local_variable>
+        <local_variable id="oval:mil.disa.stig.ind:var:23031600" version="1" datatype="int" comment="count of unique name servers">
+          <count>
+            <unique>
+              <object_component object_ref="oval:mil.disa.stig.ind:obj:23031602" item_field="subexpression" />
+            </unique>
+          </count>
+        </local_variable>
+        <local_variable id="oval:mil.disa.stig.ind:var:23051400" version="1" datatype="string" comment="Mount options for /var/log in /etc/fstab">
+          <split delimiter=",">
+            <object_component object_ref="oval:mil.disa.stig.ind:obj:23051402" item_field="subexpression" />
+          </split>
+        </local_variable>
+        <local_variable id="oval:mil.disa.stig.ind:var:23051500" version="1" datatype="string" comment="Mount options for /var/log in /etc/fstab">
+          <split delimiter=",">
+            <object_component object_ref="oval:mil.disa.stig.ind:obj:23051502" item_field="subexpression" />
+          </split>
+        </local_variable>
+        <local_variable id="oval:mil.disa.stig.linux:var:23051100" version="1" datatype="string" comment="Mount options for /tmp in /etc/fstab">
+          <split delimiter=",">
+            <object_component object_ref="oval:mil.disa.stig.ind:obj:23051102" item_field="subexpression" />
+          </split>
+        </local_variable>
+        <local_variable id="oval:mil.disa.stig.linux:var:23051700" version="1" datatype="string" comment="Mount options for /var/log/audit in /etc/fstab">
+          <split delimiter=",">
+            <object_component object_ref="oval:mil.disa.stig.ind:obj:23051702" item_field="subexpression" />
+          </split>
+        </local_variable>
+      </variables>
+    </oval_definitions>
+  </component>
+  <component id="scap_mil.disa.stig_comp_U_Oracle_Linux_9_V1R2_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" timestamp="2026-01-05T14:26:56.568-05:00">
+    <oval_definitions xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5">
+      <generator>
+        <oval:product_name>Security Content Tool 1.7.0</oval:product_name>
+        <oval:schema_version>5.11</oval:schema_version>
+        <oval:timestamp>2026-01-05T02:26:56</oval:timestamp>
+      </generator>
+      <definitions>
+        <definition id="oval:mil.disa.stig.ol9os:def:1" version="1" class="inventory">
+          <metadata>
+            <title>Oracle Linux 9 is installed.</title>
+            <affected family="unix">
+              <platform>Oracle Linux 9</platform>
+            </affected>
+            <reference source="CPE" ref_id="cpe:/o:oracle:linux:9:-" />
+            <description>Oracle Linux 9 is installed.</description>
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:10000008" comment="The oraclelinux-release package is version 9" />
+          </criteria>
+        </definition>
+      </definitions>
+      <tests>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:10000008" version="1" check_existence="all_exist" check="all" comment="The oraclelinux-release package is version 9.">
+          <object object_ref="oval:mil.disa.stig.linux:obj:10000003" />
+          <state state_ref="oval:mil.disa.stig.linux:ste:10000005" />
+        </rpminfo_test>
+      </tests>
+      <objects>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:10000003" version="1">
+          <name>oraclelinux-release</name>
+        </rpminfo_object>
+      </objects>
+      <states>
+        <rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:10000005" version="1">
+          <version operation="pattern match">^9\.\d+$</version>
+        </rpminfo_state>
+      </states>
+    </oval_definitions>
+  </component>
+</data-stream-collection>
diff --git a/shared/references/disa-stig-ol9-v1r3-xccdf-manual.xml b/shared/references/disa-stig-ol9-v1r4-xccdf-manual.xml
similarity index 87%
rename from shared/references/disa-stig-ol9-v1r3-xccdf-manual.xml
rename to shared/references/disa-stig-ol9-v1r4-xccdf-manual.xml
index 16e82f7e4465..83ecb4015e1e 100644
--- a/shared/references/disa-stig-ol9-v1r3-xccdf-manual.xml
+++ b/shared/references/disa-stig-ol9-v1r4-xccdf-manual.xml
@@ -1,4 +1,4 @@
-<?xml version="1.0" encoding="utf-8"?><?xml-stylesheet type='text/xsl' href='STIG_unclass.xsl'?><Benchmark xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.1 http://nvd.nist.gov/schema/xccdf-1.1.4.xsd http://cpe.mitre.org/dictionary/2.0 http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd" id="Oracle_Linux_9_STIG" xml:lang="en" xmlns="http://checklists.nist.gov/xccdf/1.1"><status date="2025-08-27">accepted</status><title>Oracle Linux 9 Security Technical Implementation Guide</title><description>This Security Technical Implementation Guide is published as a tool to improve the security of Department of Defense (DOD) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.</description><notice id="terms-of-use" xml:lang="en"></notice><front-matter xml:lang="en"></front-matter><rear-matter xml:lang="en"></rear-matter><reference href="https://cyber.mil"><dc:publisher>DISA</dc:publisher><dc:source>STIG.DOD.MIL</dc:source></reference><plain-text id="release-info">Release: 3 Benchmark Date: 01 Oct 2025</plain-text><plain-text id="generator">3.5.1</plain-text><plain-text id="conventionsVersion">1.10.0</plain-text><version>1</version><Profile id="MAC-1_Classified"><title>I - Mission Critical Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-271431" selected="true" /><select idref="V-271432" selected="true" /><select idref="V-271433" selected="true" /><select idref="V-271434" selected="true" /><select idref="V-271435" selected="true" /><select idref="V-271436" selected="true" /><select idref="V-271437" selected="true" /><select idref="V-271438" selected="true" /><select idref="V-271439" selected="true" /><select idref="V-271440" selected="true" /><select idref="V-271441" selected="true" /><select idref="V-271442" selected="true" /><select idref="V-271443" selected="true" /><select idref="V-271444" selected="true" /><select idref="V-271445" selected="true" /><select idref="V-271446" selected="true" /><select idref="V-271447" selected="true" /><select idref="V-271448" selected="true" /><select idref="V-271449" selected="true" /><select idref="V-271450" selected="true" /><select idref="V-271451" selected="true" /><select idref="V-271452" selected="true" /><select idref="V-271453" selected="true" /><select idref="V-271454" selected="true" /><select idref="V-271455" selected="true" /><select idref="V-271456" selected="true" /><select idref="V-271457" selected="true" /><select idref="V-271458" selected="true" /><select idref="V-271459" selected="true" /><select idref="V-271460" selected="true" /><select idref="V-271461" selected="true" /><select idref="V-271462" selected="true" /><select idref="V-271463" selected="true" /><select idref="V-271464" selected="true" /><select idref="V-271465" selected="true" /><select idref="V-271466" selected="true" /><select idref="V-271467" selected="true" /><select idref="V-271468" selected="true" /><select idref="V-271469" selected="true" /><select idref="V-271470" selected="true" /><select idref="V-271471" selected="true" /><select idref="V-271472" selected="true" /><select idref="V-271473" selected="true" /><select idref="V-271474" selected="true" /><select idref="V-271475" selected="true" /><select idref="V-271476" selected="true" /><select idref="V-271477" selected="true" /><select idref="V-271478" selected="true" /><select idref="V-271479" selected="true" /><select idref="V-271480" selected="true" /><select idref="V-271481" selected="true" /><select idref="V-271482" selected="true" /><select idref="V-271483" selected="true" /><select idref="V-271484" selected="true" /><select idref="V-271485" selected="true" /><select idref="V-271486" selected="true" /><select idref="V-271487" selected="true" /><select idref="V-271488" selected="true" /><select idref="V-271489" selected="true" /><select idref="V-271490" selected="true" /><select idref="V-271491" selected="true" /><select idref="V-271492" selected="true" /><select idref="V-271493" selected="true" /><select idref="V-271494" selected="true" /><select idref="V-271495" selected="true" /><select idref="V-271496" selected="true" /><select idref="V-271497" selected="true" /><select idref="V-271498" selected="true" /><select idref="V-271499" selected="true" /><select idref="V-271500" selected="true" /><select idref="V-271501" selected="true" /><select idref="V-271502" selected="true" /><select idref="V-271503" selected="true" /><select idref="V-271504" selected="true" /><select idref="V-271505" selected="true" /><select idref="V-271506" selected="true" /><select idref="V-271507" selected="true" /><select idref="V-271508" selected="true" /><select idref="V-271509" selected="true" /><select idref="V-271510" selected="true" /><select idref="V-271511" selected="true" /><select idref="V-271512" selected="true" /><select idref="V-271513" selected="true" /><select idref="V-271514" selected="true" /><select idref="V-271515" selected="true" /><select idref="V-271516" selected="true" /><select idref="V-271517" selected="true" /><select idref="V-271518" selected="true" /><select idref="V-271519" selected="true" /><select idref="V-271520" selected="true" /><select idref="V-271521" selected="true" /><select idref="V-271522" selected="true" /><select idref="V-271523" selected="true" /><select idref="V-271524" selected="true" /><select idref="V-271525" selected="true" /><select idref="V-271526" selected="true" /><select idref="V-271527" selected="true" /><select idref="V-271528" selected="true" /><select idref="V-271529" selected="true" /><select idref="V-271530" selected="true" /><select idref="V-271531" selected="true" /><select idref="V-271532" selected="true" /><select idref="V-271533" selected="true" /><select idref="V-271534" selected="true" /><select idref="V-271535" selected="true" /><select idref="V-271536" selected="true" /><select idref="V-271537" selected="true" /><select idref="V-271538" selected="true" /><select idref="V-271539" selected="true" /><select idref="V-271540" selected="true" /><select idref="V-271541" selected="true" /><select idref="V-271542" selected="true" /><select idref="V-271543" selected="true" /><select idref="V-271544" selected="true" /><select idref="V-271545" selected="true" /><select idref="V-271546" selected="true" /><select idref="V-271547" selected="true" /><select idref="V-271548" selected="true" /><select idref="V-271549" selected="true" /><select idref="V-271550" selected="true" /><select idref="V-271551" selected="true" /><select idref="V-271552" selected="true" /><select idref="V-271553" selected="true" /><select idref="V-271554" selected="true" /><select idref="V-271555" selected="true" /><select idref="V-271556" selected="true" /><select idref="V-271557" selected="true" /><select idref="V-271558" selected="true" /><select idref="V-271559" selected="true" /><select idref="V-271560" selected="true" /><select idref="V-271561" selected="true" /><select idref="V-271562" selected="true" /><select idref="V-271563" selected="true" /><select idref="V-271564" selected="true" /><select idref="V-271565" selected="true" /><select idref="V-271566" selected="true" /><select idref="V-271567" selected="true" /><select idref="V-271568" selected="true" /><select idref="V-271569" selected="true" /><select idref="V-271570" selected="true" /><select idref="V-271571" selected="true" /><select idref="V-271572" selected="true" /><select idref="V-271573" selected="true" /><select idref="V-271574" selected="true" /><select idref="V-271575" selected="true" /><select idref="V-271576" selected="true" /><select idref="V-271577" selected="true" /><select idref="V-271578" selected="true" /><select idref="V-271579" selected="true" /><select idref="V-271580" selected="true" /><select idref="V-271581" selected="true" /><select idref="V-271582" selected="true" /><select idref="V-271583" selected="true" /><select idref="V-271584" selected="true" /><select idref="V-271585" selected="true" /><select idref="V-271586" selected="true" /><select idref="V-271587" selected="true" /><select idref="V-271588" selected="true" /><select idref="V-271589" selected="true" /><select idref="V-271590" selected="true" /><select idref="V-271591" selected="true" /><select idref="V-271592" selected="true" /><select idref="V-271593" selected="true" /><select idref="V-271594" selected="true" /><select idref="V-271595" selected="true" /><select idref="V-271596" selected="true" /><select idref="V-271597" selected="true" /><select idref="V-271598" selected="true" /><select idref="V-271599" selected="true" /><select idref="V-271600" selected="true" /><select idref="V-271601" selected="true" /><select idref="V-271602" selected="true" /><select idref="V-271603" selected="true" /><select idref="V-271604" selected="true" /><select idref="V-271605" selected="true" /><select idref="V-271606" selected="true" /><select idref="V-271607" selected="true" /><select idref="V-271608" selected="true" /><select idref="V-271609" selected="true" /><select idref="V-271610" selected="true" /><select idref="V-271611" selected="true" /><select idref="V-271612" selected="true" /><select idref="V-271613" selected="true" /><select idref="V-271614" selected="true" /><select idref="V-271615" selected="true" /><select idref="V-271616" selected="true" /><select idref="V-271617" selected="true" /><select idref="V-271618" selected="true" /><select idref="V-271619" selected="true" /><select idref="V-271620" selected="true" /><select idref="V-271621" selected="true" /><select idref="V-271622" selected="true" /><select idref="V-271623" selected="true" /><select idref="V-271624" selected="true" /><select idref="V-271625" selected="true" /><select idref="V-271626" selected="true" /><select idref="V-271627" selected="true" /><select idref="V-271628" selected="true" /><select idref="V-271629" selected="true" /><select idref="V-271630" selected="true" /><select idref="V-271631" selected="true" /><select idref="V-271632" selected="true" /><select idref="V-271633" selected="true" /><select idref="V-271634" selected="true" /><select idref="V-271635" selected="true" /><select idref="V-271636" selected="true" /><select idref="V-271637" selected="true" /><select idref="V-271638" selected="true" /><select idref="V-271639" selected="true" /><select idref="V-271640" selected="true" /><select idref="V-271641" selected="true" /><select idref="V-271642" selected="true" /><select idref="V-271643" selected="true" /><select idref="V-271644" selected="true" /><select idref="V-271645" selected="true" /><select idref="V-271646" selected="true" /><select idref="V-271647" selected="true" /><select idref="V-271648" selected="true" /><select idref="V-271649" selected="true" /><select idref="V-271650" selected="true" /><select idref="V-271651" selected="true" /><select idref="V-271652" selected="true" /><select idref="V-271653" selected="true" /><select idref="V-271654" selected="true" /><select idref="V-271655" selected="true" /><select idref="V-271656" selected="true" /><select idref="V-271657" selected="true" /><select idref="V-271658" selected="true" /><select idref="V-271659" selected="true" /><select idref="V-271660" selected="true" /><select idref="V-271661" selected="true" /><select idref="V-271662" selected="true" /><select idref="V-271663" selected="true" /><select idref="V-271664" selected="true" /><select idref="V-271665" selected="true" /><select idref="V-271666" selected="true" /><select idref="V-271667" selected="true" /><select idref="V-271668" selected="true" /><select idref="V-271669" selected="true" /><select idref="V-271670" selected="true" /><select idref="V-271671" selected="true" /><select idref="V-271672" selected="true" /><select idref="V-271673" selected="true" /><select idref="V-271674" selected="true" /><select idref="V-271676" selected="true" /><select idref="V-271677" selected="true" /><select idref="V-271678" selected="true" /><select idref="V-271679" selected="true" /><select idref="V-271680" selected="true" /><select idref="V-271681" selected="true" /><select idref="V-271682" selected="true" /><select idref="V-271683" selected="true" /><select idref="V-271684" selected="true" /><select idref="V-271685" selected="true" /><select idref="V-271686" selected="true" /><select idref="V-271687" selected="true" /><select idref="V-271688" selected="true" /><select idref="V-271689" selected="true" /><select idref="V-271690" selected="true" /><select idref="V-271691" selected="true" /><select idref="V-271692" selected="true" /><select idref="V-271693" selected="true" /><select idref="V-271694" selected="true" /><select idref="V-271695" selected="true" /><select idref="V-271696" selected="true" /><select idref="V-271697" selected="true" /><select idref="V-271698" selected="true" /><select idref="V-271699" selected="true" /><select idref="V-271700" selected="true" /><select idref="V-271701" selected="true" /><select idref="V-271703" selected="true" /><select idref="V-271704" selected="true" /><select idref="V-271705" selected="true" /><select idref="V-271706" selected="true" /><select idref="V-271707" selected="true" /><select idref="V-271708" selected="true" /><select idref="V-271709" selected="true" /><select idref="V-271710" selected="true" /><select idref="V-271711" selected="true" /><select idref="V-271712" selected="true" /><select idref="V-271713" selected="true" /><select idref="V-271714" selected="true" /><select idref="V-271715" selected="true" /><select idref="V-271716" selected="true" /><select idref="V-271717" selected="true" /><select idref="V-271718" selected="true" /><select idref="V-271719" selected="true" /><select idref="V-271720" selected="true" /><select idref="V-271721" selected="true" /><select idref="V-271722" selected="true" /><select idref="V-271723" selected="true" /><select idref="V-271724" selected="true" /><select idref="V-271725" selected="true" /><select idref="V-271726" selected="true" /><select idref="V-271727" selected="true" /><select idref="V-271728" selected="true" /><select idref="V-271729" selected="true" /><select idref="V-271730" selected="true" /><select idref="V-271731" selected="true" /><select idref="V-271732" selected="true" /><select idref="V-271733" selected="true" /><select idref="V-271734" selected="true" /><select idref="V-271735" selected="true" /><select idref="V-271736" selected="true" /><select idref="V-271737" selected="true" /><select idref="V-271738" selected="true" /><select idref="V-271739" selected="true" /><select idref="V-271740" selected="true" /><select idref="V-271741" selected="true" /><select idref="V-271742" selected="true" /><select idref="V-271743" selected="true" /><select idref="V-271744" selected="true" /><select idref="V-271745" selected="true" /><select idref="V-271746" selected="true" /><select idref="V-271747" selected="true" /><select idref="V-271748" selected="true" /><select idref="V-271749" selected="true" /><select idref="V-271750" selected="true" /><select idref="V-271751" selected="true" /><select idref="V-271752" selected="true" /><select idref="V-271753" selected="true" /><select idref="V-271754" selected="true" /><select idref="V-271755" selected="true" /><select idref="V-271756" selected="true" /><select idref="V-271757" selected="true" /><select idref="V-271758" selected="true" /><select idref="V-271759" selected="true" /><select idref="V-271760" selected="true" /><select idref="V-271761" selected="true" /><select idref="V-271762" selected="true" /><select idref="V-271763" selected="true" /><select idref="V-271764" selected="true" /><select idref="V-271765" selected="true" /><select idref="V-271766" selected="true" /><select idref="V-271768" selected="true" /><select idref="V-271769" selected="true" /><select idref="V-271770" selected="true" /><select idref="V-271771" selected="true" /><select idref="V-271772" selected="true" /><select idref="V-271773" selected="true" /><select idref="V-271774" selected="true" /><select idref="V-271775" selected="true" /><select idref="V-271776" selected="true" /><select idref="V-271777" selected="true" /><select idref="V-271778" selected="true" /><select idref="V-271779" selected="true" /><select idref="V-271780" selected="true" /><select idref="V-271781" selected="true" /><select idref="V-271782" selected="true" /><select idref="V-271783" selected="true" /><select idref="V-271784" selected="true" /><select idref="V-271785" selected="true" /><select idref="V-271786" selected="true" /><select idref="V-271787" selected="true" /><select idref="V-271788" selected="true" /><select idref="V-271789" selected="true" /><select idref="V-271790" selected="true" /><select idref="V-271791" selected="true" /><select idref="V-271792" selected="true" /><select idref="V-271793" selected="true" /><select idref="V-271794" selected="true" /><select idref="V-271795" selected="true" /><select idref="V-271796" selected="true" /><select idref="V-271797" selected="true" /><select idref="V-271798" selected="true" /><select idref="V-271799" selected="true" /><select idref="V-271800" selected="true" /><select idref="V-271801" selected="true" /><select idref="V-271802" selected="true" /><select idref="V-271803" selected="true" /><select idref="V-271804" selected="true" /><select idref="V-271805" selected="true" /><select idref="V-271806" selected="true" /><select idref="V-271807" selected="true" /><select idref="V-271808" selected="true" /><select idref="V-271809" selected="true" /><select idref="V-271810" selected="true" /><select idref="V-271811" selected="true" /><select idref="V-271812" selected="true" /><select idref="V-271813" selected="true" /><select idref="V-271814" selected="true" /><select idref="V-271815" selected="true" /><select idref="V-271816" selected="true" /><select idref="V-271817" selected="true" /><select idref="V-271818" selected="true" /><select idref="V-271819" selected="true" /><select idref="V-271820" selected="true" /><select idref="V-271821" selected="true" /><select idref="V-271822" selected="true" /><select idref="V-271823" selected="true" /><select idref="V-271824" selected="true" /><select idref="V-271825" selected="true" /><select idref="V-271826" selected="true" /><select idref="V-271827" selected="true" /><select idref="V-271828" selected="true" /><select idref="V-271829" selected="true" /><select idref="V-271830" selected="true" /><select idref="V-271831" selected="true" /><select idref="V-271832" selected="true" /><select idref="V-271833" selected="true" /><select idref="V-271834" selected="true" /><select idref="V-271835" selected="true" /><select idref="V-271836" selected="true" /><select idref="V-271837" selected="true" /><select idref="V-271838" selected="true" /><select idref="V-271839" selected="true" /><select idref="V-271840" selected="true" /><select idref="V-271841" selected="true" /><select idref="V-271842" selected="true" /><select idref="V-271843" selected="true" /><select idref="V-271844" selected="true" /><select idref="V-271845" selected="true" /><select idref="V-271846" selected="true" /><select idref="V-271847" selected="true" /><select idref="V-271848" selected="true" /><select idref="V-271849" selected="true" /><select idref="V-271850" selected="true" /><select idref="V-271851" selected="true" /><select idref="V-271852" selected="true" /><select idref="V-271853" selected="true" /><select idref="V-271854" selected="true" /><select idref="V-271855" selected="true" /><select idref="V-271856" selected="true" /><select idref="V-271857" selected="true" /><select idref="V-271858" selected="true" /><select idref="V-271859" selected="true" /><select idref="V-271860" selected="true" /><select idref="V-271861" selected="true" /><select idref="V-271862" selected="true" /><select idref="V-271863" selected="true" /><select idref="V-271864" selected="true" /><select idref="V-271865" selected="true" /><select idref="V-271866" selected="true" /><select idref="V-271867" selected="true" /><select idref="V-271868" selected="true" /><select idref="V-271869" selected="true" /><select idref="V-271870" selected="true" /><select idref="V-271871" selected="true" /><select idref="V-271872" selected="true" /><select idref="V-271873" selected="true" /><select idref="V-271874" selected="true" /><select idref="V-271875" selected="true" /><select idref="V-271876" selected="true" /><select idref="V-271877" selected="true" /><select idref="V-271878" selected="true" /><select idref="V-271879" selected="true" /><select idref="V-271880" selected="true" /><select idref="V-271881" selected="true" /><select idref="V-271882" selected="true" /><select idref="V-271883" selected="true" /><select idref="V-271884" selected="true" /><select idref="V-271885" selected="true" /><select idref="V-271886" selected="true" /><select idref="V-271901" selected="true" /><select idref="V-278952" selected="true" /></Profile><Profile id="MAC-1_Public"><title>I - Mission Critical Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-271431" selected="true" /><select idref="V-271432" selected="true" /><select idref="V-271433" selected="true" /><select idref="V-271434" selected="true" /><select idref="V-271435" selected="true" /><select idref="V-271436" selected="true" /><select idref="V-271437" selected="true" /><select idref="V-271438" selected="true" /><select idref="V-271439" selected="true" /><select idref="V-271440" selected="true" /><select idref="V-271441" selected="true" /><select idref="V-271442" selected="true" /><select idref="V-271443" selected="true" /><select idref="V-271444" selected="true" /><select idref="V-271445" selected="true" /><select idref="V-271446" selected="true" /><select idref="V-271447" selected="true" /><select idref="V-271448" selected="true" /><select idref="V-271449" selected="true" /><select idref="V-271450" selected="true" /><select idref="V-271451" selected="true" /><select idref="V-271452" selected="true" /><select idref="V-271453" selected="true" /><select idref="V-271454" selected="true" /><select idref="V-271455" selected="true" /><select idref="V-271456" selected="true" /><select idref="V-271457" selected="true" /><select idref="V-271458" selected="true" /><select idref="V-271459" selected="true" /><select idref="V-271460" selected="true" /><select idref="V-271461" selected="true" /><select idref="V-271462" selected="true" /><select idref="V-271463" selected="true" /><select idref="V-271464" selected="true" /><select idref="V-271465" selected="true" /><select idref="V-271466" selected="true" /><select idref="V-271467" selected="true" /><select idref="V-271468" selected="true" /><select idref="V-271469" selected="true" /><select idref="V-271470" selected="true" /><select idref="V-271471" selected="true" /><select idref="V-271472" selected="true" /><select idref="V-271473" selected="true" /><select idref="V-271474" selected="true" /><select idref="V-271475" selected="true" /><select idref="V-271476" selected="true" /><select idref="V-271477" selected="true" /><select idref="V-271478" selected="true" /><select idref="V-271479" selected="true" /><select idref="V-271480" selected="true" /><select idref="V-271481" selected="true" /><select idref="V-271482" selected="true" /><select idref="V-271483" selected="true" /><select idref="V-271484" selected="true" /><select idref="V-271485" selected="true" /><select idref="V-271486" selected="true" /><select idref="V-271487" selected="true" /><select idref="V-271488" selected="true" /><select idref="V-271489" selected="true" /><select idref="V-271490" selected="true" /><select idref="V-271491" selected="true" /><select idref="V-271492" selected="true" /><select idref="V-271493" selected="true" /><select idref="V-271494" selected="true" /><select idref="V-271495" selected="true" /><select idref="V-271496" selected="true" /><select idref="V-271497" selected="true" /><select idref="V-271498" selected="true" /><select idref="V-271499" selected="true" /><select idref="V-271500" selected="true" /><select idref="V-271501" selected="true" /><select idref="V-271502" selected="true" /><select idref="V-271503" selected="true" /><select idref="V-271504" selected="true" /><select idref="V-271505" selected="true" /><select idref="V-271506" selected="true" /><select idref="V-271507" selected="true" /><select idref="V-271508" selected="true" /><select idref="V-271509" selected="true" /><select idref="V-271510" selected="true" /><select idref="V-271511" selected="true" /><select idref="V-271512" selected="true" /><select idref="V-271513" selected="true" /><select idref="V-271514" selected="true" /><select idref="V-271515" selected="true" /><select idref="V-271516" selected="true" /><select idref="V-271517" selected="true" /><select idref="V-271518" selected="true" /><select idref="V-271519" selected="true" /><select idref="V-271520" selected="true" /><select idref="V-271521" selected="true" /><select idref="V-271522" selected="true" /><select idref="V-271523" selected="true" /><select idref="V-271524" selected="true" /><select idref="V-271525" selected="true" /><select idref="V-271526" selected="true" /><select idref="V-271527" selected="true" /><select idref="V-271528" selected="true" /><select idref="V-271529" selected="true" /><select idref="V-271530" selected="true" /><select idref="V-271531" selected="true" /><select idref="V-271532" selected="true" /><select idref="V-271533" selected="true" /><select idref="V-271534" selected="true" /><select idref="V-271535" selected="true" /><select idref="V-271536" selected="true" /><select idref="V-271537" selected="true" /><select idref="V-271538" selected="true" /><select idref="V-271539" selected="true" /><select idref="V-271540" selected="true" /><select idref="V-271541" selected="true" /><select idref="V-271542" selected="true" /><select idref="V-271543" selected="true" /><select idref="V-271544" selected="true" /><select idref="V-271545" selected="true" /><select idref="V-271546" selected="true" /><select idref="V-271547" selected="true" /><select idref="V-271548" selected="true" /><select idref="V-271549" selected="true" /><select idref="V-271550" selected="true" /><select idref="V-271551" selected="true" /><select idref="V-271552" selected="true" /><select idref="V-271553" selected="true" /><select idref="V-271554" selected="true" /><select idref="V-271555" selected="true" /><select idref="V-271556" selected="true" /><select idref="V-271557" selected="true" /><select idref="V-271558" selected="true" /><select idref="V-271559" selected="true" /><select idref="V-271560" selected="true" /><select idref="V-271561" selected="true" /><select idref="V-271562" selected="true" /><select idref="V-271563" selected="true" /><select idref="V-271564" selected="true" /><select idref="V-271565" selected="true" /><select idref="V-271566" selected="true" /><select idref="V-271567" selected="true" /><select idref="V-271568" selected="true" /><select idref="V-271569" selected="true" /><select idref="V-271570" selected="true" /><select idref="V-271571" selected="true" /><select idref="V-271572" selected="true" /><select idref="V-271573" selected="true" /><select idref="V-271574" selected="true" /><select idref="V-271575" selected="true" /><select idref="V-271576" selected="true" /><select idref="V-271577" selected="true" /><select idref="V-271578" selected="true" /><select idref="V-271579" selected="true" /><select idref="V-271580" selected="true" /><select idref="V-271581" selected="true" /><select idref="V-271582" selected="true" /><select idref="V-271583" selected="true" /><select idref="V-271584" selected="true" /><select idref="V-271585" selected="true" /><select idref="V-271586" selected="true" /><select idref="V-271587" selected="true" /><select idref="V-271588" selected="true" /><select idref="V-271589" selected="true" /><select idref="V-271590" selected="true" /><select idref="V-271591" selected="true" /><select idref="V-271592" selected="true" /><select idref="V-271593" selected="true" /><select idref="V-271594" selected="true" /><select idref="V-271595" selected="true" /><select idref="V-271596" selected="true" /><select idref="V-271597" selected="true" /><select idref="V-271598" selected="true" /><select idref="V-271599" selected="true" /><select idref="V-271600" selected="true" /><select idref="V-271601" selected="true" /><select idref="V-271602" selected="true" /><select idref="V-271603" selected="true" /><select idref="V-271604" selected="true" /><select idref="V-271605" selected="true" /><select idref="V-271606" selected="true" /><select idref="V-271607" selected="true" /><select idref="V-271608" selected="true" /><select idref="V-271609" selected="true" /><select idref="V-271610" selected="true" /><select idref="V-271611" selected="true" /><select idref="V-271612" selected="true" /><select idref="V-271613" selected="true" /><select idref="V-271614" selected="true" /><select idref="V-271615" selected="true" /><select idref="V-271616" selected="true" /><select idref="V-271617" selected="true" /><select idref="V-271618" selected="true" /><select idref="V-271619" selected="true" /><select idref="V-271620" selected="true" /><select idref="V-271621" selected="true" /><select idref="V-271622" selected="true" /><select idref="V-271623" selected="true" /><select idref="V-271624" selected="true" /><select idref="V-271625" selected="true" /><select idref="V-271626" selected="true" /><select idref="V-271627" selected="true" /><select idref="V-271628" selected="true" /><select idref="V-271629" selected="true" /><select idref="V-271630" selected="true" /><select idref="V-271631" selected="true" /><select idref="V-271632" selected="true" /><select idref="V-271633" selected="true" /><select idref="V-271634" selected="true" /><select idref="V-271635" selected="true" /><select idref="V-271636" selected="true" /><select idref="V-271637" selected="true" /><select idref="V-271638" selected="true" /><select idref="V-271639" selected="true" /><select idref="V-271640" selected="true" /><select idref="V-271641" selected="true" /><select idref="V-271642" selected="true" /><select idref="V-271643" selected="true" /><select idref="V-271644" selected="true" /><select idref="V-271645" selected="true" /><select idref="V-271646" selected="true" /><select idref="V-271647" selected="true" /><select idref="V-271648" selected="true" /><select idref="V-271649" selected="true" /><select idref="V-271650" selected="true" /><select idref="V-271651" selected="true" /><select idref="V-271652" selected="true" /><select idref="V-271653" selected="true" /><select idref="V-271654" selected="true" /><select idref="V-271655" selected="true" /><select idref="V-271656" selected="true" /><select idref="V-271657" selected="true" /><select idref="V-271658" selected="true" /><select idref="V-271659" selected="true" /><select idref="V-271660" selected="true" /><select idref="V-271661" selected="true" /><select idref="V-271662" selected="true" /><select idref="V-271663" selected="true" /><select idref="V-271664" selected="true" /><select idref="V-271665" selected="true" /><select idref="V-271666" selected="true" /><select idref="V-271667" selected="true" /><select idref="V-271668" selected="true" /><select idref="V-271669" selected="true" /><select idref="V-271670" selected="true" /><select idref="V-271671" selected="true" /><select idref="V-271672" selected="true" /><select idref="V-271673" selected="true" /><select idref="V-271674" selected="true" /><select idref="V-271676" selected="true" /><select idref="V-271677" selected="true" /><select idref="V-271678" selected="true" /><select idref="V-271679" selected="true" /><select idref="V-271680" selected="true" /><select idref="V-271681" selected="true" /><select idref="V-271682" selected="true" /><select idref="V-271683" selected="true" /><select idref="V-271684" selected="true" /><select idref="V-271685" selected="true" /><select idref="V-271686" selected="true" /><select idref="V-271687" selected="true" /><select idref="V-271688" selected="true" /><select idref="V-271689" selected="true" /><select idref="V-271690" selected="true" /><select idref="V-271691" selected="true" /><select idref="V-271692" selected="true" /><select idref="V-271693" selected="true" /><select idref="V-271694" selected="true" /><select idref="V-271695" selected="true" /><select idref="V-271696" selected="true" /><select idref="V-271697" selected="true" /><select idref="V-271698" selected="true" /><select idref="V-271699" selected="true" /><select idref="V-271700" selected="true" /><select idref="V-271701" selected="true" /><select idref="V-271703" selected="true" /><select idref="V-271704" selected="true" /><select idref="V-271705" selected="true" /><select idref="V-271706" selected="true" /><select idref="V-271707" selected="true" /><select idref="V-271708" selected="true" /><select idref="V-271709" selected="true" /><select idref="V-271710" selected="true" /><select idref="V-271711" selected="true" /><select idref="V-271712" selected="true" /><select idref="V-271713" selected="true" /><select idref="V-271714" selected="true" /><select idref="V-271715" selected="true" /><select idref="V-271716" selected="true" /><select idref="V-271717" selected="true" /><select idref="V-271718" selected="true" /><select idref="V-271719" selected="true" /><select idref="V-271720" selected="true" /><select idref="V-271721" selected="true" /><select idref="V-271722" selected="true" /><select idref="V-271723" selected="true" /><select idref="V-271724" selected="true" /><select idref="V-271725" selected="true" /><select idref="V-271726" selected="true" /><select idref="V-271727" selected="true" /><select idref="V-271728" selected="true" /><select idref="V-271729" selected="true" /><select idref="V-271730" selected="true" /><select idref="V-271731" selected="true" /><select idref="V-271732" selected="true" /><select idref="V-271733" selected="true" /><select idref="V-271734" selected="true" /><select idref="V-271735" selected="true" /><select idref="V-271736" selected="true" /><select idref="V-271737" selected="true" /><select idref="V-271738" selected="true" /><select idref="V-271739" selected="true" /><select idref="V-271740" selected="true" /><select idref="V-271741" selected="true" /><select idref="V-271742" selected="true" /><select idref="V-271743" selected="true" /><select idref="V-271744" selected="true" /><select idref="V-271745" selected="true" /><select idref="V-271746" selected="true" /><select idref="V-271747" selected="true" /><select idref="V-271748" selected="true" /><select idref="V-271749" selected="true" /><select idref="V-271750" selected="true" /><select idref="V-271751" selected="true" /><select idref="V-271752" selected="true" /><select idref="V-271753" selected="true" /><select idref="V-271754" selected="true" /><select idref="V-271755" selected="true" /><select idref="V-271756" selected="true" /><select idref="V-271757" selected="true" /><select idref="V-271758" selected="true" /><select idref="V-271759" selected="true" /><select idref="V-271760" selected="true" /><select idref="V-271761" selected="true" /><select idref="V-271762" selected="true" /><select idref="V-271763" selected="true" /><select idref="V-271764" selected="true" /><select idref="V-271765" selected="true" /><select idref="V-271766" selected="true" /><select idref="V-271768" selected="true" /><select idref="V-271769" selected="true" /><select idref="V-271770" selected="true" /><select idref="V-271771" selected="true" /><select idref="V-271772" selected="true" /><select idref="V-271773" selected="true" /><select idref="V-271774" selected="true" /><select idref="V-271775" selected="true" /><select idref="V-271776" selected="true" /><select idref="V-271777" selected="true" /><select idref="V-271778" selected="true" /><select idref="V-271779" selected="true" /><select idref="V-271780" selected="true" /><select idref="V-271781" selected="true" /><select idref="V-271782" selected="true" /><select idref="V-271783" selected="true" /><select idref="V-271784" selected="true" /><select idref="V-271785" selected="true" /><select idref="V-271786" selected="true" /><select idref="V-271787" selected="true" /><select idref="V-271788" selected="true" /><select idref="V-271789" selected="true" /><select idref="V-271790" selected="true" /><select idref="V-271791" selected="true" /><select idref="V-271792" selected="true" /><select idref="V-271793" selected="true" /><select idref="V-271794" selected="true" /><select idref="V-271795" selected="true" /><select idref="V-271796" selected="true" /><select idref="V-271797" selected="true" /><select idref="V-271798" selected="true" /><select idref="V-271799" selected="true" /><select idref="V-271800" selected="true" /><select idref="V-271801" selected="true" /><select idref="V-271802" selected="true" /><select idref="V-271803" selected="true" /><select idref="V-271804" selected="true" /><select idref="V-271805" selected="true" /><select idref="V-271806" selected="true" /><select idref="V-271807" selected="true" /><select idref="V-271808" selected="true" /><select idref="V-271809" selected="true" /><select idref="V-271810" selected="true" /><select idref="V-271811" selected="true" /><select idref="V-271812" selected="true" /><select idref="V-271813" selected="true" /><select idref="V-271814" selected="true" /><select idref="V-271815" selected="true" /><select idref="V-271816" selected="true" /><select idref="V-271817" selected="true" /><select idref="V-271818" selected="true" /><select idref="V-271819" selected="true" /><select idref="V-271820" selected="true" /><select idref="V-271821" selected="true" /><select idref="V-271822" selected="true" /><select idref="V-271823" selected="true" /><select idref="V-271824" selected="true" /><select idref="V-271825" selected="true" /><select idref="V-271826" selected="true" /><select idref="V-271827" selected="true" /><select idref="V-271828" selected="true" /><select idref="V-271829" selected="true" /><select idref="V-271830" selected="true" /><select idref="V-271831" selected="true" /><select idref="V-271832" selected="true" /><select idref="V-271833" selected="true" /><select idref="V-271834" selected="true" /><select idref="V-271835" selected="true" /><select idref="V-271836" selected="true" /><select idref="V-271837" selected="true" /><select idref="V-271838" selected="true" /><select idref="V-271839" selected="true" /><select idref="V-271840" selected="true" /><select idref="V-271841" selected="true" /><select idref="V-271842" selected="true" /><select idref="V-271843" selected="true" /><select idref="V-271844" selected="true" /><select idref="V-271845" selected="true" /><select idref="V-271846" selected="true" /><select idref="V-271847" selected="true" /><select idref="V-271848" selected="true" /><select idref="V-271849" selected="true" /><select idref="V-271850" selected="true" /><select idref="V-271851" selected="true" /><select idref="V-271852" selected="true" /><select idref="V-271853" selected="true" /><select idref="V-271854" selected="true" /><select idref="V-271855" selected="true" /><select idref="V-271856" selected="true" /><select idref="V-271857" selected="true" /><select idref="V-271858" selected="true" /><select idref="V-271859" selected="true" /><select idref="V-271860" selected="true" /><select idref="V-271861" selected="true" /><select idref="V-271862" selected="true" /><select idref="V-271863" selected="true" /><select idref="V-271864" selected="true" /><select idref="V-271865" selected="true" /><select idref="V-271866" selected="true" /><select idref="V-271867" selected="true" /><select idref="V-271868" selected="true" /><select idref="V-271869" selected="true" /><select idref="V-271870" selected="true" /><select idref="V-271871" selected="true" /><select idref="V-271872" selected="true" /><select idref="V-271873" selected="true" /><select idref="V-271874" selected="true" /><select idref="V-271875" selected="true" /><select idref="V-271876" selected="true" /><select idref="V-271877" selected="true" /><select idref="V-271878" selected="true" /><select idref="V-271879" selected="true" /><select idref="V-271880" selected="true" /><select idref="V-271881" selected="true" /><select idref="V-271882" selected="true" /><select idref="V-271883" selected="true" /><select idref="V-271884" selected="true" /><select idref="V-271885" selected="true" /><select idref="V-271886" selected="true" /><select idref="V-271901" selected="true" /><select idref="V-278952" selected="true" /></Profile><Profile id="MAC-1_Sensitive"><title>I - Mission Critical Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-271431" selected="true" /><select idref="V-271432" selected="true" /><select idref="V-271433" selected="true" /><select idref="V-271434" selected="true" /><select idref="V-271435" selected="true" /><select idref="V-271436" selected="true" /><select idref="V-271437" selected="true" /><select idref="V-271438" selected="true" /><select idref="V-271439" selected="true" /><select idref="V-271440" selected="true" /><select idref="V-271441" selected="true" /><select idref="V-271442" selected="true" /><select idref="V-271443" selected="true" /><select idref="V-271444" selected="true" /><select idref="V-271445" selected="true" /><select idref="V-271446" selected="true" /><select idref="V-271447" selected="true" /><select idref="V-271448" selected="true" /><select idref="V-271449" selected="true" /><select idref="V-271450" selected="true" /><select idref="V-271451" selected="true" /><select idref="V-271452" selected="true" /><select idref="V-271453" selected="true" /><select idref="V-271454" selected="true" /><select idref="V-271455" selected="true" /><select idref="V-271456" selected="true" /><select idref="V-271457" selected="true" /><select idref="V-271458" selected="true" /><select idref="V-271459" selected="true" /><select idref="V-271460" selected="true" /><select idref="V-271461" selected="true" /><select idref="V-271462" selected="true" /><select idref="V-271463" selected="true" /><select idref="V-271464" selected="true" /><select idref="V-271465" selected="true" /><select idref="V-271466" selected="true" /><select idref="V-271467" selected="true" /><select idref="V-271468" selected="true" /><select idref="V-271469" selected="true" /><select idref="V-271470" selected="true" /><select idref="V-271471" selected="true" /><select idref="V-271472" selected="true" /><select idref="V-271473" selected="true" /><select idref="V-271474" selected="true" /><select idref="V-271475" selected="true" /><select idref="V-271476" selected="true" /><select idref="V-271477" selected="true" /><select idref="V-271478" selected="true" /><select idref="V-271479" selected="true" /><select idref="V-271480" selected="true" /><select idref="V-271481" selected="true" /><select idref="V-271482" selected="true" /><select idref="V-271483" selected="true" /><select idref="V-271484" selected="true" /><select idref="V-271485" selected="true" /><select idref="V-271486" selected="true" /><select idref="V-271487" selected="true" /><select idref="V-271488" selected="true" /><select idref="V-271489" selected="true" /><select idref="V-271490" selected="true" /><select idref="V-271491" selected="true" /><select idref="V-271492" selected="true" /><select idref="V-271493" selected="true" /><select idref="V-271494" selected="true" /><select idref="V-271495" selected="true" /><select idref="V-271496" selected="true" /><select idref="V-271497" selected="true" /><select idref="V-271498" selected="true" /><select idref="V-271499" selected="true" /><select idref="V-271500" selected="true" /><select idref="V-271501" selected="true" /><select idref="V-271502" selected="true" /><select idref="V-271503" selected="true" /><select idref="V-271504" selected="true" /><select idref="V-271505" selected="true" /><select idref="V-271506" selected="true" /><select idref="V-271507" selected="true" /><select idref="V-271508" selected="true" /><select idref="V-271509" selected="true" /><select idref="V-271510" selected="true" /><select idref="V-271511" selected="true" /><select idref="V-271512" selected="true" /><select idref="V-271513" selected="true" /><select idref="V-271514" selected="true" /><select idref="V-271515" selected="true" /><select idref="V-271516" selected="true" /><select idref="V-271517" selected="true" /><select idref="V-271518" selected="true" /><select idref="V-271519" selected="true" /><select idref="V-271520" selected="true" /><select idref="V-271521" selected="true" /><select idref="V-271522" selected="true" /><select idref="V-271523" selected="true" /><select idref="V-271524" selected="true" /><select idref="V-271525" selected="true" /><select idref="V-271526" selected="true" /><select idref="V-271527" selected="true" /><select idref="V-271528" selected="true" /><select idref="V-271529" selected="true" /><select idref="V-271530" selected="true" /><select idref="V-271531" selected="true" /><select idref="V-271532" selected="true" /><select idref="V-271533" selected="true" /><select idref="V-271534" selected="true" /><select idref="V-271535" selected="true" /><select idref="V-271536" selected="true" /><select idref="V-271537" selected="true" /><select idref="V-271538" selected="true" /><select idref="V-271539" selected="true" /><select idref="V-271540" selected="true" /><select idref="V-271541" selected="true" /><select idref="V-271542" selected="true" /><select idref="V-271543" selected="true" /><select idref="V-271544" selected="true" /><select idref="V-271545" selected="true" /><select idref="V-271546" selected="true" /><select idref="V-271547" selected="true" /><select idref="V-271548" selected="true" /><select idref="V-271549" selected="true" /><select idref="V-271550" selected="true" /><select idref="V-271551" selected="true" /><select idref="V-271552" selected="true" /><select idref="V-271553" selected="true" /><select idref="V-271554" selected="true" /><select idref="V-271555" selected="true" /><select idref="V-271556" selected="true" /><select idref="V-271557" selected="true" /><select idref="V-271558" selected="true" /><select idref="V-271559" selected="true" /><select idref="V-271560" selected="true" /><select idref="V-271561" selected="true" /><select idref="V-271562" selected="true" /><select idref="V-271563" selected="true" /><select idref="V-271564" selected="true" /><select idref="V-271565" selected="true" /><select idref="V-271566" selected="true" /><select idref="V-271567" selected="true" /><select idref="V-271568" selected="true" /><select idref="V-271569" selected="true" /><select idref="V-271570" selected="true" /><select idref="V-271571" selected="true" /><select idref="V-271572" selected="true" /><select idref="V-271573" selected="true" /><select idref="V-271574" selected="true" /><select idref="V-271575" selected="true" /><select idref="V-271576" selected="true" /><select idref="V-271577" selected="true" /><select idref="V-271578" selected="true" /><select idref="V-271579" selected="true" /><select idref="V-271580" selected="true" /><select idref="V-271581" selected="true" /><select idref="V-271582" selected="true" /><select idref="V-271583" selected="true" /><select idref="V-271584" selected="true" /><select idref="V-271585" selected="true" /><select idref="V-271586" selected="true" /><select idref="V-271587" selected="true" /><select idref="V-271588" selected="true" /><select idref="V-271589" selected="true" /><select idref="V-271590" selected="true" /><select idref="V-271591" selected="true" /><select idref="V-271592" selected="true" /><select idref="V-271593" selected="true" /><select idref="V-271594" selected="true" /><select idref="V-271595" selected="true" /><select idref="V-271596" selected="true" /><select idref="V-271597" selected="true" /><select idref="V-271598" selected="true" /><select idref="V-271599" selected="true" /><select idref="V-271600" selected="true" /><select idref="V-271601" selected="true" /><select idref="V-271602" selected="true" /><select idref="V-271603" selected="true" /><select idref="V-271604" selected="true" /><select idref="V-271605" selected="true" /><select idref="V-271606" selected="true" /><select idref="V-271607" selected="true" /><select idref="V-271608" selected="true" /><select idref="V-271609" selected="true" /><select idref="V-271610" selected="true" /><select idref="V-271611" selected="true" /><select idref="V-271612" selected="true" /><select idref="V-271613" selected="true" /><select idref="V-271614" selected="true" /><select idref="V-271615" selected="true" /><select idref="V-271616" selected="true" /><select idref="V-271617" selected="true" /><select idref="V-271618" selected="true" /><select idref="V-271619" selected="true" /><select idref="V-271620" selected="true" /><select idref="V-271621" selected="true" /><select idref="V-271622" selected="true" /><select idref="V-271623" selected="true" /><select idref="V-271624" selected="true" /><select idref="V-271625" selected="true" /><select idref="V-271626" selected="true" /><select idref="V-271627" selected="true" /><select idref="V-271628" selected="true" /><select idref="V-271629" selected="true" /><select idref="V-271630" selected="true" /><select idref="V-271631" selected="true" /><select idref="V-271632" selected="true" /><select idref="V-271633" selected="true" /><select idref="V-271634" selected="true" /><select idref="V-271635" selected="true" /><select idref="V-271636" selected="true" /><select idref="V-271637" selected="true" /><select idref="V-271638" selected="true" /><select idref="V-271639" selected="true" /><select idref="V-271640" selected="true" /><select idref="V-271641" selected="true" /><select idref="V-271642" selected="true" /><select idref="V-271643" selected="true" /><select idref="V-271644" selected="true" /><select idref="V-271645" selected="true" /><select idref="V-271646" selected="true" /><select idref="V-271647" selected="true" /><select idref="V-271648" selected="true" /><select idref="V-271649" selected="true" /><select idref="V-271650" selected="true" /><select idref="V-271651" selected="true" /><select idref="V-271652" selected="true" /><select idref="V-271653" selected="true" /><select idref="V-271654" selected="true" /><select idref="V-271655" selected="true" /><select idref="V-271656" selected="true" /><select idref="V-271657" selected="true" /><select idref="V-271658" selected="true" /><select idref="V-271659" selected="true" /><select idref="V-271660" selected="true" /><select idref="V-271661" selected="true" /><select idref="V-271662" selected="true" /><select idref="V-271663" selected="true" /><select idref="V-271664" selected="true" /><select idref="V-271665" selected="true" /><select idref="V-271666" selected="true" /><select idref="V-271667" selected="true" /><select idref="V-271668" selected="true" /><select idref="V-271669" selected="true" /><select idref="V-271670" selected="true" /><select idref="V-271671" selected="true" /><select idref="V-271672" selected="true" /><select idref="V-271673" selected="true" /><select idref="V-271674" selected="true" /><select idref="V-271676" selected="true" /><select idref="V-271677" selected="true" /><select idref="V-271678" selected="true" /><select idref="V-271679" selected="true" /><select idref="V-271680" selected="true" /><select idref="V-271681" selected="true" /><select idref="V-271682" selected="true" /><select idref="V-271683" selected="true" /><select idref="V-271684" selected="true" /><select idref="V-271685" selected="true" /><select idref="V-271686" selected="true" /><select idref="V-271687" selected="true" /><select idref="V-271688" selected="true" /><select idref="V-271689" selected="true" /><select idref="V-271690" selected="true" /><select idref="V-271691" selected="true" /><select idref="V-271692" selected="true" /><select idref="V-271693" selected="true" /><select idref="V-271694" selected="true" /><select idref="V-271695" selected="true" /><select idref="V-271696" selected="true" /><select idref="V-271697" selected="true" /><select idref="V-271698" selected="true" /><select idref="V-271699" selected="true" /><select idref="V-271700" selected="true" /><select idref="V-271701" selected="true" /><select idref="V-271703" selected="true" /><select idref="V-271704" selected="true" /><select idref="V-271705" selected="true" /><select idref="V-271706" selected="true" /><select idref="V-271707" selected="true" /><select idref="V-271708" selected="true" /><select idref="V-271709" selected="true" /><select idref="V-271710" selected="true" /><select idref="V-271711" selected="true" /><select idref="V-271712" selected="true" /><select idref="V-271713" selected="true" /><select idref="V-271714" selected="true" /><select idref="V-271715" selected="true" /><select idref="V-271716" selected="true" /><select idref="V-271717" selected="true" /><select idref="V-271718" selected="true" /><select idref="V-271719" selected="true" /><select idref="V-271720" selected="true" /><select idref="V-271721" selected="true" /><select idref="V-271722" selected="true" /><select idref="V-271723" selected="true" /><select idref="V-271724" selected="true" /><select idref="V-271725" selected="true" /><select idref="V-271726" selected="true" /><select idref="V-271727" selected="true" /><select idref="V-271728" selected="true" /><select idref="V-271729" selected="true" /><select idref="V-271730" selected="true" /><select idref="V-271731" selected="true" /><select idref="V-271732" selected="true" /><select idref="V-271733" selected="true" /><select idref="V-271734" selected="true" /><select idref="V-271735" selected="true" /><select idref="V-271736" selected="true" /><select idref="V-271737" selected="true" /><select idref="V-271738" selected="true" /><select idref="V-271739" selected="true" /><select idref="V-271740" selected="true" /><select idref="V-271741" selected="true" /><select idref="V-271742" selected="true" /><select idref="V-271743" selected="true" /><select idref="V-271744" selected="true" /><select idref="V-271745" selected="true" /><select idref="V-271746" selected="true" /><select idref="V-271747" selected="true" /><select idref="V-271748" selected="true" /><select idref="V-271749" selected="true" /><select idref="V-271750" selected="true" /><select idref="V-271751" selected="true" /><select idref="V-271752" selected="true" /><select idref="V-271753" selected="true" /><select idref="V-271754" selected="true" /><select idref="V-271755" selected="true" /><select idref="V-271756" selected="true" /><select idref="V-271757" selected="true" /><select idref="V-271758" selected="true" /><select idref="V-271759" selected="true" /><select idref="V-271760" selected="true" /><select idref="V-271761" selected="true" /><select idref="V-271762" selected="true" /><select idref="V-271763" selected="true" /><select idref="V-271764" selected="true" /><select idref="V-271765" selected="true" /><select idref="V-271766" selected="true" /><select idref="V-271768" selected="true" /><select idref="V-271769" selected="true" /><select idref="V-271770" selected="true" /><select idref="V-271771" selected="true" /><select idref="V-271772" selected="true" /><select idref="V-271773" selected="true" /><select idref="V-271774" selected="true" /><select idref="V-271775" selected="true" /><select idref="V-271776" selected="true" /><select idref="V-271777" selected="true" /><select idref="V-271778" selected="true" /><select idref="V-271779" selected="true" /><select idref="V-271780" selected="true" /><select idref="V-271781" selected="true" /><select idref="V-271782" selected="true" /><select idref="V-271783" selected="true" /><select idref="V-271784" selected="true" /><select idref="V-271785" selected="true" /><select idref="V-271786" selected="true" /><select idref="V-271787" selected="true" /><select idref="V-271788" selected="true" /><select idref="V-271789" selected="true" /><select idref="V-271790" selected="true" /><select idref="V-271791" selected="true" /><select idref="V-271792" selected="true" /><select idref="V-271793" selected="true" /><select idref="V-271794" selected="true" /><select idref="V-271795" selected="true" /><select idref="V-271796" selected="true" /><select idref="V-271797" selected="true" /><select idref="V-271798" selected="true" /><select idref="V-271799" selected="true" /><select idref="V-271800" selected="true" /><select idref="V-271801" selected="true" /><select idref="V-271802" selected="true" /><select idref="V-271803" selected="true" /><select idref="V-271804" selected="true" /><select idref="V-271805" selected="true" /><select idref="V-271806" selected="true" /><select idref="V-271807" selected="true" /><select idref="V-271808" selected="true" /><select idref="V-271809" selected="true" /><select idref="V-271810" selected="true" /><select idref="V-271811" selected="true" /><select idref="V-271812" selected="true" /><select idref="V-271813" selected="true" /><select idref="V-271814" selected="true" /><select idref="V-271815" selected="true" /><select idref="V-271816" selected="true" /><select idref="V-271817" selected="true" /><select idref="V-271818" selected="true" /><select idref="V-271819" selected="true" /><select idref="V-271820" selected="true" /><select idref="V-271821" selected="true" /><select idref="V-271822" selected="true" /><select idref="V-271823" selected="true" /><select idref="V-271824" selected="true" /><select idref="V-271825" selected="true" /><select idref="V-271826" selected="true" /><select idref="V-271827" selected="true" /><select idref="V-271828" selected="true" /><select idref="V-271829" selected="true" /><select idref="V-271830" selected="true" /><select idref="V-271831" selected="true" /><select idref="V-271832" selected="true" /><select idref="V-271833" selected="true" /><select idref="V-271834" selected="true" /><select idref="V-271835" selected="true" /><select idref="V-271836" selected="true" /><select idref="V-271837" selected="true" /><select idref="V-271838" selected="true" /><select idref="V-271839" selected="true" /><select idref="V-271840" selected="true" /><select idref="V-271841" selected="true" /><select idref="V-271842" selected="true" /><select idref="V-271843" selected="true" /><select idref="V-271844" selected="true" /><select idref="V-271845" selected="true" /><select idref="V-271846" selected="true" /><select idref="V-271847" selected="true" /><select idref="V-271848" selected="true" /><select idref="V-271849" selected="true" /><select idref="V-271850" selected="true" /><select idref="V-271851" selected="true" /><select idref="V-271852" selected="true" /><select idref="V-271853" selected="true" /><select idref="V-271854" selected="true" /><select idref="V-271855" selected="true" /><select idref="V-271856" selected="true" /><select idref="V-271857" selected="true" /><select idref="V-271858" selected="true" /><select idref="V-271859" selected="true" /><select idref="V-271860" selected="true" /><select idref="V-271861" selected="true" /><select idref="V-271862" selected="true" /><select idref="V-271863" selected="true" /><select idref="V-271864" selected="true" /><select idref="V-271865" selected="true" /><select idref="V-271866" selected="true" /><select idref="V-271867" selected="true" /><select idref="V-271868" selected="true" /><select idref="V-271869" selected="true" /><select idref="V-271870" selected="true" /><select idref="V-271871" selected="true" /><select idref="V-271872" selected="true" /><select idref="V-271873" selected="true" /><select idref="V-271874" selected="true" /><select idref="V-271875" selected="true" /><select idref="V-271876" selected="true" /><select idref="V-271877" selected="true" /><select idref="V-271878" selected="true" /><select idref="V-271879" selected="true" /><select idref="V-271880" selected="true" /><select idref="V-271881" selected="true" /><select idref="V-271882" selected="true" /><select idref="V-271883" selected="true" /><select idref="V-271884" selected="true" /><select idref="V-271885" selected="true" /><select idref="V-271886" selected="true" /><select idref="V-271901" selected="true" /><select idref="V-278952" selected="true" /></Profile><Profile id="MAC-2_Classified"><title>II - Mission Support Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-271431" selected="true" /><select idref="V-271432" selected="true" /><select idref="V-271433" selected="true" /><select idref="V-271434" selected="true" /><select idref="V-271435" selected="true" /><select idref="V-271436" selected="true" /><select idref="V-271437" selected="true" /><select idref="V-271438" selected="true" /><select idref="V-271439" selected="true" /><select idref="V-271440" selected="true" /><select idref="V-271441" selected="true" /><select idref="V-271442" selected="true" /><select idref="V-271443" selected="true" /><select idref="V-271444" selected="true" /><select idref="V-271445" selected="true" /><select idref="V-271446" selected="true" /><select idref="V-271447" selected="true" /><select idref="V-271448" selected="true" /><select idref="V-271449" selected="true" /><select idref="V-271450" selected="true" /><select idref="V-271451" selected="true" /><select idref="V-271452" selected="true" /><select idref="V-271453" selected="true" /><select idref="V-271454" selected="true" /><select idref="V-271455" selected="true" /><select idref="V-271456" selected="true" /><select idref="V-271457" selected="true" /><select idref="V-271458" selected="true" /><select idref="V-271459" selected="true" /><select idref="V-271460" selected="true" /><select idref="V-271461" selected="true" /><select idref="V-271462" selected="true" /><select idref="V-271463" selected="true" /><select idref="V-271464" selected="true" /><select idref="V-271465" selected="true" /><select idref="V-271466" selected="true" /><select idref="V-271467" selected="true" /><select idref="V-271468" selected="true" /><select idref="V-271469" selected="true" /><select idref="V-271470" selected="true" /><select idref="V-271471" selected="true" /><select idref="V-271472" selected="true" /><select idref="V-271473" selected="true" /><select idref="V-271474" selected="true" /><select idref="V-271475" selected="true" /><select idref="V-271476" selected="true" /><select idref="V-271477" selected="true" /><select idref="V-271478" selected="true" /><select idref="V-271479" selected="true" /><select idref="V-271480" selected="true" /><select idref="V-271481" selected="true" /><select idref="V-271482" selected="true" /><select idref="V-271483" selected="true" /><select idref="V-271484" selected="true" /><select idref="V-271485" selected="true" /><select idref="V-271486" selected="true" /><select idref="V-271487" selected="true" /><select idref="V-271488" selected="true" /><select idref="V-271489" selected="true" /><select idref="V-271490" selected="true" /><select idref="V-271491" selected="true" /><select idref="V-271492" selected="true" /><select idref="V-271493" selected="true" /><select idref="V-271494" selected="true" /><select idref="V-271495" selected="true" /><select idref="V-271496" selected="true" /><select idref="V-271497" selected="true" /><select idref="V-271498" selected="true" /><select idref="V-271499" selected="true" /><select idref="V-271500" selected="true" /><select idref="V-271501" selected="true" /><select idref="V-271502" selected="true" /><select idref="V-271503" selected="true" /><select idref="V-271504" selected="true" /><select idref="V-271505" selected="true" /><select idref="V-271506" selected="true" /><select idref="V-271507" selected="true" /><select idref="V-271508" selected="true" /><select idref="V-271509" selected="true" /><select idref="V-271510" selected="true" /><select idref="V-271511" selected="true" /><select idref="V-271512" selected="true" /><select idref="V-271513" selected="true" /><select idref="V-271514" selected="true" /><select idref="V-271515" selected="true" /><select idref="V-271516" selected="true" /><select idref="V-271517" selected="true" /><select idref="V-271518" selected="true" /><select idref="V-271519" selected="true" /><select idref="V-271520" selected="true" /><select idref="V-271521" selected="true" /><select idref="V-271522" selected="true" /><select idref="V-271523" selected="true" /><select idref="V-271524" selected="true" /><select idref="V-271525" selected="true" /><select idref="V-271526" selected="true" /><select idref="V-271527" selected="true" /><select idref="V-271528" selected="true" /><select idref="V-271529" selected="true" /><select idref="V-271530" selected="true" /><select idref="V-271531" selected="true" /><select idref="V-271532" selected="true" /><select idref="V-271533" selected="true" /><select idref="V-271534" selected="true" /><select idref="V-271535" selected="true" /><select idref="V-271536" selected="true" /><select idref="V-271537" selected="true" /><select idref="V-271538" selected="true" /><select idref="V-271539" selected="true" /><select idref="V-271540" selected="true" /><select idref="V-271541" selected="true" /><select idref="V-271542" selected="true" /><select idref="V-271543" selected="true" /><select idref="V-271544" selected="true" /><select idref="V-271545" selected="true" /><select idref="V-271546" selected="true" /><select idref="V-271547" selected="true" /><select idref="V-271548" selected="true" /><select idref="V-271549" selected="true" /><select idref="V-271550" selected="true" /><select idref="V-271551" selected="true" /><select idref="V-271552" selected="true" /><select idref="V-271553" selected="true" /><select idref="V-271554" selected="true" /><select idref="V-271555" selected="true" /><select idref="V-271556" selected="true" /><select idref="V-271557" selected="true" /><select idref="V-271558" selected="true" /><select idref="V-271559" selected="true" /><select idref="V-271560" selected="true" /><select idref="V-271561" selected="true" /><select idref="V-271562" selected="true" /><select idref="V-271563" selected="true" /><select idref="V-271564" selected="true" /><select idref="V-271565" selected="true" /><select idref="V-271566" selected="true" /><select idref="V-271567" selected="true" /><select idref="V-271568" selected="true" /><select idref="V-271569" selected="true" /><select idref="V-271570" selected="true" /><select idref="V-271571" selected="true" /><select idref="V-271572" selected="true" /><select idref="V-271573" selected="true" /><select idref="V-271574" selected="true" /><select idref="V-271575" selected="true" /><select idref="V-271576" selected="true" /><select idref="V-271577" selected="true" /><select idref="V-271578" selected="true" /><select idref="V-271579" selected="true" /><select idref="V-271580" selected="true" /><select idref="V-271581" selected="true" /><select idref="V-271582" selected="true" /><select idref="V-271583" selected="true" /><select idref="V-271584" selected="true" /><select idref="V-271585" selected="true" /><select idref="V-271586" selected="true" /><select idref="V-271587" selected="true" /><select idref="V-271588" selected="true" /><select idref="V-271589" selected="true" /><select idref="V-271590" selected="true" /><select idref="V-271591" selected="true" /><select idref="V-271592" selected="true" /><select idref="V-271593" selected="true" /><select idref="V-271594" selected="true" /><select idref="V-271595" selected="true" /><select idref="V-271596" selected="true" /><select idref="V-271597" selected="true" /><select idref="V-271598" selected="true" /><select idref="V-271599" selected="true" /><select idref="V-271600" selected="true" /><select idref="V-271601" selected="true" /><select idref="V-271602" selected="true" /><select idref="V-271603" selected="true" /><select idref="V-271604" selected="true" /><select idref="V-271605" selected="true" /><select idref="V-271606" selected="true" /><select idref="V-271607" selected="true" /><select idref="V-271608" selected="true" /><select idref="V-271609" selected="true" /><select idref="V-271610" selected="true" /><select idref="V-271611" selected="true" /><select idref="V-271612" selected="true" /><select idref="V-271613" selected="true" /><select idref="V-271614" selected="true" /><select idref="V-271615" selected="true" /><select idref="V-271616" selected="true" /><select idref="V-271617" selected="true" /><select idref="V-271618" selected="true" /><select idref="V-271619" selected="true" /><select idref="V-271620" selected="true" /><select idref="V-271621" selected="true" /><select idref="V-271622" selected="true" /><select idref="V-271623" selected="true" /><select idref="V-271624" selected="true" /><select idref="V-271625" selected="true" /><select idref="V-271626" selected="true" /><select idref="V-271627" selected="true" /><select idref="V-271628" selected="true" /><select idref="V-271629" selected="true" /><select idref="V-271630" selected="true" /><select idref="V-271631" selected="true" /><select idref="V-271632" selected="true" /><select idref="V-271633" selected="true" /><select idref="V-271634" selected="true" /><select idref="V-271635" selected="true" /><select idref="V-271636" selected="true" /><select idref="V-271637" selected="true" /><select idref="V-271638" selected="true" /><select idref="V-271639" selected="true" /><select idref="V-271640" selected="true" /><select idref="V-271641" selected="true" /><select idref="V-271642" selected="true" /><select idref="V-271643" selected="true" /><select idref="V-271644" selected="true" /><select idref="V-271645" selected="true" /><select idref="V-271646" selected="true" /><select idref="V-271647" selected="true" /><select idref="V-271648" selected="true" /><select idref="V-271649" selected="true" /><select idref="V-271650" selected="true" /><select idref="V-271651" selected="true" /><select idref="V-271652" selected="true" /><select idref="V-271653" selected="true" /><select idref="V-271654" selected="true" /><select idref="V-271655" selected="true" /><select idref="V-271656" selected="true" /><select idref="V-271657" selected="true" /><select idref="V-271658" selected="true" /><select idref="V-271659" selected="true" /><select idref="V-271660" selected="true" /><select idref="V-271661" selected="true" /><select idref="V-271662" selected="true" /><select idref="V-271663" selected="true" /><select idref="V-271664" selected="true" /><select idref="V-271665" selected="true" /><select idref="V-271666" selected="true" /><select idref="V-271667" selected="true" /><select idref="V-271668" selected="true" /><select idref="V-271669" selected="true" /><select idref="V-271670" selected="true" /><select idref="V-271671" selected="true" /><select idref="V-271672" selected="true" /><select idref="V-271673" selected="true" /><select idref="V-271674" selected="true" /><select idref="V-271676" selected="true" /><select idref="V-271677" selected="true" /><select idref="V-271678" selected="true" /><select idref="V-271679" selected="true" /><select idref="V-271680" selected="true" /><select idref="V-271681" selected="true" /><select idref="V-271682" selected="true" /><select idref="V-271683" selected="true" /><select idref="V-271684" selected="true" /><select idref="V-271685" selected="true" /><select idref="V-271686" selected="true" /><select idref="V-271687" selected="true" /><select idref="V-271688" selected="true" /><select idref="V-271689" selected="true" /><select idref="V-271690" selected="true" /><select idref="V-271691" selected="true" /><select idref="V-271692" selected="true" /><select idref="V-271693" selected="true" /><select idref="V-271694" selected="true" /><select idref="V-271695" selected="true" /><select idref="V-271696" selected="true" /><select idref="V-271697" selected="true" /><select idref="V-271698" selected="true" /><select idref="V-271699" selected="true" /><select idref="V-271700" selected="true" /><select idref="V-271701" selected="true" /><select idref="V-271703" selected="true" /><select idref="V-271704" selected="true" /><select idref="V-271705" selected="true" /><select idref="V-271706" selected="true" /><select idref="V-271707" selected="true" /><select idref="V-271708" selected="true" /><select idref="V-271709" selected="true" /><select idref="V-271710" selected="true" /><select idref="V-271711" selected="true" /><select idref="V-271712" selected="true" /><select idref="V-271713" selected="true" /><select idref="V-271714" selected="true" /><select idref="V-271715" selected="true" /><select idref="V-271716" selected="true" /><select idref="V-271717" selected="true" /><select idref="V-271718" selected="true" /><select idref="V-271719" selected="true" /><select idref="V-271720" selected="true" /><select idref="V-271721" selected="true" /><select idref="V-271722" selected="true" /><select idref="V-271723" selected="true" /><select idref="V-271724" selected="true" /><select idref="V-271725" selected="true" /><select idref="V-271726" selected="true" /><select idref="V-271727" selected="true" /><select idref="V-271728" selected="true" /><select idref="V-271729" selected="true" /><select idref="V-271730" selected="true" /><select idref="V-271731" selected="true" /><select idref="V-271732" selected="true" /><select idref="V-271733" selected="true" /><select idref="V-271734" selected="true" /><select idref="V-271735" selected="true" /><select idref="V-271736" selected="true" /><select idref="V-271737" selected="true" /><select idref="V-271738" selected="true" /><select idref="V-271739" selected="true" /><select idref="V-271740" selected="true" /><select idref="V-271741" selected="true" /><select idref="V-271742" selected="true" /><select idref="V-271743" selected="true" /><select idref="V-271744" selected="true" /><select idref="V-271745" selected="true" /><select idref="V-271746" selected="true" /><select idref="V-271747" selected="true" /><select idref="V-271748" selected="true" /><select idref="V-271749" selected="true" /><select idref="V-271750" selected="true" /><select idref="V-271751" selected="true" /><select idref="V-271752" selected="true" /><select idref="V-271753" selected="true" /><select idref="V-271754" selected="true" /><select idref="V-271755" selected="true" /><select idref="V-271756" selected="true" /><select idref="V-271757" selected="true" /><select idref="V-271758" selected="true" /><select idref="V-271759" selected="true" /><select idref="V-271760" selected="true" /><select idref="V-271761" selected="true" /><select idref="V-271762" selected="true" /><select idref="V-271763" selected="true" /><select idref="V-271764" selected="true" /><select idref="V-271765" selected="true" /><select idref="V-271766" selected="true" /><select idref="V-271768" selected="true" /><select idref="V-271769" selected="true" /><select idref="V-271770" selected="true" /><select idref="V-271771" selected="true" /><select idref="V-271772" selected="true" /><select idref="V-271773" selected="true" /><select idref="V-271774" selected="true" /><select idref="V-271775" selected="true" /><select idref="V-271776" selected="true" /><select idref="V-271777" selected="true" /><select idref="V-271778" selected="true" /><select idref="V-271779" selected="true" /><select idref="V-271780" selected="true" /><select idref="V-271781" selected="true" /><select idref="V-271782" selected="true" /><select idref="V-271783" selected="true" /><select idref="V-271784" selected="true" /><select idref="V-271785" selected="true" /><select idref="V-271786" selected="true" /><select idref="V-271787" selected="true" /><select idref="V-271788" selected="true" /><select idref="V-271789" selected="true" /><select idref="V-271790" selected="true" /><select idref="V-271791" selected="true" /><select idref="V-271792" selected="true" /><select idref="V-271793" selected="true" /><select idref="V-271794" selected="true" /><select idref="V-271795" selected="true" /><select idref="V-271796" selected="true" /><select idref="V-271797" selected="true" /><select idref="V-271798" selected="true" /><select idref="V-271799" selected="true" /><select idref="V-271800" selected="true" /><select idref="V-271801" selected="true" /><select idref="V-271802" selected="true" /><select idref="V-271803" selected="true" /><select idref="V-271804" selected="true" /><select idref="V-271805" selected="true" /><select idref="V-271806" selected="true" /><select idref="V-271807" selected="true" /><select idref="V-271808" selected="true" /><select idref="V-271809" selected="true" /><select idref="V-271810" selected="true" /><select idref="V-271811" selected="true" /><select idref="V-271812" selected="true" /><select idref="V-271813" selected="true" /><select idref="V-271814" selected="true" /><select idref="V-271815" selected="true" /><select idref="V-271816" selected="true" /><select idref="V-271817" selected="true" /><select idref="V-271818" selected="true" /><select idref="V-271819" selected="true" /><select idref="V-271820" selected="true" /><select idref="V-271821" selected="true" /><select idref="V-271822" selected="true" /><select idref="V-271823" selected="true" /><select idref="V-271824" selected="true" /><select idref="V-271825" selected="true" /><select idref="V-271826" selected="true" /><select idref="V-271827" selected="true" /><select idref="V-271828" selected="true" /><select idref="V-271829" selected="true" /><select idref="V-271830" selected="true" /><select idref="V-271831" selected="true" /><select idref="V-271832" selected="true" /><select idref="V-271833" selected="true" /><select idref="V-271834" selected="true" /><select idref="V-271835" selected="true" /><select idref="V-271836" selected="true" /><select idref="V-271837" selected="true" /><select idref="V-271838" selected="true" /><select idref="V-271839" selected="true" /><select idref="V-271840" selected="true" /><select idref="V-271841" selected="true" /><select idref="V-271842" selected="true" /><select idref="V-271843" selected="true" /><select idref="V-271844" selected="true" /><select idref="V-271845" selected="true" /><select idref="V-271846" selected="true" /><select idref="V-271847" selected="true" /><select idref="V-271848" selected="true" /><select idref="V-271849" selected="true" /><select idref="V-271850" selected="true" /><select idref="V-271851" selected="true" /><select idref="V-271852" selected="true" /><select idref="V-271853" selected="true" /><select idref="V-271854" selected="true" /><select idref="V-271855" selected="true" /><select idref="V-271856" selected="true" /><select idref="V-271857" selected="true" /><select idref="V-271858" selected="true" /><select idref="V-271859" selected="true" /><select idref="V-271860" selected="true" /><select idref="V-271861" selected="true" /><select idref="V-271862" selected="true" /><select idref="V-271863" selected="true" /><select idref="V-271864" selected="true" /><select idref="V-271865" selected="true" /><select idref="V-271866" selected="true" /><select idref="V-271867" selected="true" /><select idref="V-271868" selected="true" /><select idref="V-271869" selected="true" /><select idref="V-271870" selected="true" /><select idref="V-271871" selected="true" /><select idref="V-271872" selected="true" /><select idref="V-271873" selected="true" /><select idref="V-271874" selected="true" /><select idref="V-271875" selected="true" /><select idref="V-271876" selected="true" /><select idref="V-271877" selected="true" /><select idref="V-271878" selected="true" /><select idref="V-271879" selected="true" /><select idref="V-271880" selected="true" /><select idref="V-271881" selected="true" /><select idref="V-271882" selected="true" /><select idref="V-271883" selected="true" /><select idref="V-271884" selected="true" /><select idref="V-271885" selected="true" /><select idref="V-271886" selected="true" /><select idref="V-271901" selected="true" /><select idref="V-278952" selected="true" /></Profile><Profile id="MAC-2_Public"><title>II - Mission Support Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-271431" selected="true" /><select idref="V-271432" selected="true" /><select idref="V-271433" selected="true" /><select idref="V-271434" selected="true" /><select idref="V-271435" selected="true" /><select idref="V-271436" selected="true" /><select idref="V-271437" selected="true" /><select idref="V-271438" selected="true" /><select idref="V-271439" selected="true" /><select idref="V-271440" selected="true" /><select idref="V-271441" selected="true" /><select idref="V-271442" selected="true" /><select idref="V-271443" selected="true" /><select idref="V-271444" selected="true" /><select idref="V-271445" selected="true" /><select idref="V-271446" selected="true" /><select idref="V-271447" selected="true" /><select idref="V-271448" selected="true" /><select idref="V-271449" selected="true" /><select idref="V-271450" selected="true" /><select idref="V-271451" selected="true" /><select idref="V-271452" selected="true" /><select idref="V-271453" selected="true" /><select idref="V-271454" selected="true" /><select idref="V-271455" selected="true" /><select idref="V-271456" selected="true" /><select idref="V-271457" selected="true" /><select idref="V-271458" selected="true" /><select idref="V-271459" selected="true" /><select idref="V-271460" selected="true" /><select idref="V-271461" selected="true" /><select idref="V-271462" selected="true" /><select idref="V-271463" selected="true" /><select idref="V-271464" selected="true" /><select idref="V-271465" selected="true" /><select idref="V-271466" selected="true" /><select idref="V-271467" selected="true" /><select idref="V-271468" selected="true" /><select idref="V-271469" selected="true" /><select idref="V-271470" selected="true" /><select idref="V-271471" selected="true" /><select idref="V-271472" selected="true" /><select idref="V-271473" selected="true" /><select idref="V-271474" selected="true" /><select idref="V-271475" selected="true" /><select idref="V-271476" selected="true" /><select idref="V-271477" selected="true" /><select idref="V-271478" selected="true" /><select idref="V-271479" selected="true" /><select idref="V-271480" selected="true" /><select idref="V-271481" selected="true" /><select idref="V-271482" selected="true" /><select idref="V-271483" selected="true" /><select idref="V-271484" selected="true" /><select idref="V-271485" selected="true" /><select idref="V-271486" selected="true" /><select idref="V-271487" selected="true" /><select idref="V-271488" selected="true" /><select idref="V-271489" selected="true" /><select idref="V-271490" selected="true" /><select idref="V-271491" selected="true" /><select idref="V-271492" selected="true" /><select idref="V-271493" selected="true" /><select idref="V-271494" selected="true" /><select idref="V-271495" selected="true" /><select idref="V-271496" selected="true" /><select idref="V-271497" selected="true" /><select idref="V-271498" selected="true" /><select idref="V-271499" selected="true" /><select idref="V-271500" selected="true" /><select idref="V-271501" selected="true" /><select idref="V-271502" selected="true" /><select idref="V-271503" selected="true" /><select idref="V-271504" selected="true" /><select idref="V-271505" selected="true" /><select idref="V-271506" selected="true" /><select idref="V-271507" selected="true" /><select idref="V-271508" selected="true" /><select idref="V-271509" selected="true" /><select idref="V-271510" selected="true" /><select idref="V-271511" selected="true" /><select idref="V-271512" selected="true" /><select idref="V-271513" selected="true" /><select idref="V-271514" selected="true" /><select idref="V-271515" selected="true" /><select idref="V-271516" selected="true" /><select idref="V-271517" selected="true" /><select idref="V-271518" selected="true" /><select idref="V-271519" selected="true" /><select idref="V-271520" selected="true" /><select idref="V-271521" selected="true" /><select idref="V-271522" selected="true" /><select idref="V-271523" selected="true" /><select idref="V-271524" selected="true" /><select idref="V-271525" selected="true" /><select idref="V-271526" selected="true" /><select idref="V-271527" selected="true" /><select idref="V-271528" selected="true" /><select idref="V-271529" selected="true" /><select idref="V-271530" selected="true" /><select idref="V-271531" selected="true" /><select idref="V-271532" selected="true" /><select idref="V-271533" selected="true" /><select idref="V-271534" selected="true" /><select idref="V-271535" selected="true" /><select idref="V-271536" selected="true" /><select idref="V-271537" selected="true" /><select idref="V-271538" selected="true" /><select idref="V-271539" selected="true" /><select idref="V-271540" selected="true" /><select idref="V-271541" selected="true" /><select idref="V-271542" selected="true" /><select idref="V-271543" selected="true" /><select idref="V-271544" selected="true" /><select idref="V-271545" selected="true" /><select idref="V-271546" selected="true" /><select idref="V-271547" selected="true" /><select idref="V-271548" selected="true" /><select idref="V-271549" selected="true" /><select idref="V-271550" selected="true" /><select idref="V-271551" selected="true" /><select idref="V-271552" selected="true" /><select idref="V-271553" selected="true" /><select idref="V-271554" selected="true" /><select idref="V-271555" selected="true" /><select idref="V-271556" selected="true" /><select idref="V-271557" selected="true" /><select idref="V-271558" selected="true" /><select idref="V-271559" selected="true" /><select idref="V-271560" selected="true" /><select idref="V-271561" selected="true" /><select idref="V-271562" selected="true" /><select idref="V-271563" selected="true" /><select idref="V-271564" selected="true" /><select idref="V-271565" selected="true" /><select idref="V-271566" selected="true" /><select idref="V-271567" selected="true" /><select idref="V-271568" selected="true" /><select idref="V-271569" selected="true" /><select idref="V-271570" selected="true" /><select idref="V-271571" selected="true" /><select idref="V-271572" selected="true" /><select idref="V-271573" selected="true" /><select idref="V-271574" selected="true" /><select idref="V-271575" selected="true" /><select idref="V-271576" selected="true" /><select idref="V-271577" selected="true" /><select idref="V-271578" selected="true" /><select idref="V-271579" selected="true" /><select idref="V-271580" selected="true" /><select idref="V-271581" selected="true" /><select idref="V-271582" selected="true" /><select idref="V-271583" selected="true" /><select idref="V-271584" selected="true" /><select idref="V-271585" selected="true" /><select idref="V-271586" selected="true" /><select idref="V-271587" selected="true" /><select idref="V-271588" selected="true" /><select idref="V-271589" selected="true" /><select idref="V-271590" selected="true" /><select idref="V-271591" selected="true" /><select idref="V-271592" selected="true" /><select idref="V-271593" selected="true" /><select idref="V-271594" selected="true" /><select idref="V-271595" selected="true" /><select idref="V-271596" selected="true" /><select idref="V-271597" selected="true" /><select idref="V-271598" selected="true" /><select idref="V-271599" selected="true" /><select idref="V-271600" selected="true" /><select idref="V-271601" selected="true" /><select idref="V-271602" selected="true" /><select idref="V-271603" selected="true" /><select idref="V-271604" selected="true" /><select idref="V-271605" selected="true" /><select idref="V-271606" selected="true" /><select idref="V-271607" selected="true" /><select idref="V-271608" selected="true" /><select idref="V-271609" selected="true" /><select idref="V-271610" selected="true" /><select idref="V-271611" selected="true" /><select idref="V-271612" selected="true" /><select idref="V-271613" selected="true" /><select idref="V-271614" selected="true" /><select idref="V-271615" selected="true" /><select idref="V-271616" selected="true" /><select idref="V-271617" selected="true" /><select idref="V-271618" selected="true" /><select idref="V-271619" selected="true" /><select idref="V-271620" selected="true" /><select idref="V-271621" selected="true" /><select idref="V-271622" selected="true" /><select idref="V-271623" selected="true" /><select idref="V-271624" selected="true" /><select idref="V-271625" selected="true" /><select idref="V-271626" selected="true" /><select idref="V-271627" selected="true" /><select idref="V-271628" selected="true" /><select idref="V-271629" selected="true" /><select idref="V-271630" selected="true" /><select idref="V-271631" selected="true" /><select idref="V-271632" selected="true" /><select idref="V-271633" selected="true" /><select idref="V-271634" selected="true" /><select idref="V-271635" selected="true" /><select idref="V-271636" selected="true" /><select idref="V-271637" selected="true" /><select idref="V-271638" selected="true" /><select idref="V-271639" selected="true" /><select idref="V-271640" selected="true" /><select idref="V-271641" selected="true" /><select idref="V-271642" selected="true" /><select idref="V-271643" selected="true" /><select idref="V-271644" selected="true" /><select idref="V-271645" selected="true" /><select idref="V-271646" selected="true" /><select idref="V-271647" selected="true" /><select idref="V-271648" selected="true" /><select idref="V-271649" selected="true" /><select idref="V-271650" selected="true" /><select idref="V-271651" selected="true" /><select idref="V-271652" selected="true" /><select idref="V-271653" selected="true" /><select idref="V-271654" selected="true" /><select idref="V-271655" selected="true" /><select idref="V-271656" selected="true" /><select idref="V-271657" selected="true" /><select idref="V-271658" selected="true" /><select idref="V-271659" selected="true" /><select idref="V-271660" selected="true" /><select idref="V-271661" selected="true" /><select idref="V-271662" selected="true" /><select idref="V-271663" selected="true" /><select idref="V-271664" selected="true" /><select idref="V-271665" selected="true" /><select idref="V-271666" selected="true" /><select idref="V-271667" selected="true" /><select idref="V-271668" selected="true" /><select idref="V-271669" selected="true" /><select idref="V-271670" selected="true" /><select idref="V-271671" selected="true" /><select idref="V-271672" selected="true" /><select idref="V-271673" selected="true" /><select idref="V-271674" selected="true" /><select idref="V-271676" selected="true" /><select idref="V-271677" selected="true" /><select idref="V-271678" selected="true" /><select idref="V-271679" selected="true" /><select idref="V-271680" selected="true" /><select idref="V-271681" selected="true" /><select idref="V-271682" selected="true" /><select idref="V-271683" selected="true" /><select idref="V-271684" selected="true" /><select idref="V-271685" selected="true" /><select idref="V-271686" selected="true" /><select idref="V-271687" selected="true" /><select idref="V-271688" selected="true" /><select idref="V-271689" selected="true" /><select idref="V-271690" selected="true" /><select idref="V-271691" selected="true" /><select idref="V-271692" selected="true" /><select idref="V-271693" selected="true" /><select idref="V-271694" selected="true" /><select idref="V-271695" selected="true" /><select idref="V-271696" selected="true" /><select idref="V-271697" selected="true" /><select idref="V-271698" selected="true" /><select idref="V-271699" selected="true" /><select idref="V-271700" selected="true" /><select idref="V-271701" selected="true" /><select idref="V-271703" selected="true" /><select idref="V-271704" selected="true" /><select idref="V-271705" selected="true" /><select idref="V-271706" selected="true" /><select idref="V-271707" selected="true" /><select idref="V-271708" selected="true" /><select idref="V-271709" selected="true" /><select idref="V-271710" selected="true" /><select idref="V-271711" selected="true" /><select idref="V-271712" selected="true" /><select idref="V-271713" selected="true" /><select idref="V-271714" selected="true" /><select idref="V-271715" selected="true" /><select idref="V-271716" selected="true" /><select idref="V-271717" selected="true" /><select idref="V-271718" selected="true" /><select idref="V-271719" selected="true" /><select idref="V-271720" selected="true" /><select idref="V-271721" selected="true" /><select idref="V-271722" selected="true" /><select idref="V-271723" selected="true" /><select idref="V-271724" selected="true" /><select idref="V-271725" selected="true" /><select idref="V-271726" selected="true" /><select idref="V-271727" selected="true" /><select idref="V-271728" selected="true" /><select idref="V-271729" selected="true" /><select idref="V-271730" selected="true" /><select idref="V-271731" selected="true" /><select idref="V-271732" selected="true" /><select idref="V-271733" selected="true" /><select idref="V-271734" selected="true" /><select idref="V-271735" selected="true" /><select idref="V-271736" selected="true" /><select idref="V-271737" selected="true" /><select idref="V-271738" selected="true" /><select idref="V-271739" selected="true" /><select idref="V-271740" selected="true" /><select idref="V-271741" selected="true" /><select idref="V-271742" selected="true" /><select idref="V-271743" selected="true" /><select idref="V-271744" selected="true" /><select idref="V-271745" selected="true" /><select idref="V-271746" selected="true" /><select idref="V-271747" selected="true" /><select idref="V-271748" selected="true" /><select idref="V-271749" selected="true" /><select idref="V-271750" selected="true" /><select idref="V-271751" selected="true" /><select idref="V-271752" selected="true" /><select idref="V-271753" selected="true" /><select idref="V-271754" selected="true" /><select idref="V-271755" selected="true" /><select idref="V-271756" selected="true" /><select idref="V-271757" selected="true" /><select idref="V-271758" selected="true" /><select idref="V-271759" selected="true" /><select idref="V-271760" selected="true" /><select idref="V-271761" selected="true" /><select idref="V-271762" selected="true" /><select idref="V-271763" selected="true" /><select idref="V-271764" selected="true" /><select idref="V-271765" selected="true" /><select idref="V-271766" selected="true" /><select idref="V-271768" selected="true" /><select idref="V-271769" selected="true" /><select idref="V-271770" selected="true" /><select idref="V-271771" selected="true" /><select idref="V-271772" selected="true" /><select idref="V-271773" selected="true" /><select idref="V-271774" selected="true" /><select idref="V-271775" selected="true" /><select idref="V-271776" selected="true" /><select idref="V-271777" selected="true" /><select idref="V-271778" selected="true" /><select idref="V-271779" selected="true" /><select idref="V-271780" selected="true" /><select idref="V-271781" selected="true" /><select idref="V-271782" selected="true" /><select idref="V-271783" selected="true" /><select idref="V-271784" selected="true" /><select idref="V-271785" selected="true" /><select idref="V-271786" selected="true" /><select idref="V-271787" selected="true" /><select idref="V-271788" selected="true" /><select idref="V-271789" selected="true" /><select idref="V-271790" selected="true" /><select idref="V-271791" selected="true" /><select idref="V-271792" selected="true" /><select idref="V-271793" selected="true" /><select idref="V-271794" selected="true" /><select idref="V-271795" selected="true" /><select idref="V-271796" selected="true" /><select idref="V-271797" selected="true" /><select idref="V-271798" selected="true" /><select idref="V-271799" selected="true" /><select idref="V-271800" selected="true" /><select idref="V-271801" selected="true" /><select idref="V-271802" selected="true" /><select idref="V-271803" selected="true" /><select idref="V-271804" selected="true" /><select idref="V-271805" selected="true" /><select idref="V-271806" selected="true" /><select idref="V-271807" selected="true" /><select idref="V-271808" selected="true" /><select idref="V-271809" selected="true" /><select idref="V-271810" selected="true" /><select idref="V-271811" selected="true" /><select idref="V-271812" selected="true" /><select idref="V-271813" selected="true" /><select idref="V-271814" selected="true" /><select idref="V-271815" selected="true" /><select idref="V-271816" selected="true" /><select idref="V-271817" selected="true" /><select idref="V-271818" selected="true" /><select idref="V-271819" selected="true" /><select idref="V-271820" selected="true" /><select idref="V-271821" selected="true" /><select idref="V-271822" selected="true" /><select idref="V-271823" selected="true" /><select idref="V-271824" selected="true" /><select idref="V-271825" selected="true" /><select idref="V-271826" selected="true" /><select idref="V-271827" selected="true" /><select idref="V-271828" selected="true" /><select idref="V-271829" selected="true" /><select idref="V-271830" selected="true" /><select idref="V-271831" selected="true" /><select idref="V-271832" selected="true" /><select idref="V-271833" selected="true" /><select idref="V-271834" selected="true" /><select idref="V-271835" selected="true" /><select idref="V-271836" selected="true" /><select idref="V-271837" selected="true" /><select idref="V-271838" selected="true" /><select idref="V-271839" selected="true" /><select idref="V-271840" selected="true" /><select idref="V-271841" selected="true" /><select idref="V-271842" selected="true" /><select idref="V-271843" selected="true" /><select idref="V-271844" selected="true" /><select idref="V-271845" selected="true" /><select idref="V-271846" selected="true" /><select idref="V-271847" selected="true" /><select idref="V-271848" selected="true" /><select idref="V-271849" selected="true" /><select idref="V-271850" selected="true" /><select idref="V-271851" selected="true" /><select idref="V-271852" selected="true" /><select idref="V-271853" selected="true" /><select idref="V-271854" selected="true" /><select idref="V-271855" selected="true" /><select idref="V-271856" selected="true" /><select idref="V-271857" selected="true" /><select idref="V-271858" selected="true" /><select idref="V-271859" selected="true" /><select idref="V-271860" selected="true" /><select idref="V-271861" selected="true" /><select idref="V-271862" selected="true" /><select idref="V-271863" selected="true" /><select idref="V-271864" selected="true" /><select idref="V-271865" selected="true" /><select idref="V-271866" selected="true" /><select idref="V-271867" selected="true" /><select idref="V-271868" selected="true" /><select idref="V-271869" selected="true" /><select idref="V-271870" selected="true" /><select idref="V-271871" selected="true" /><select idref="V-271872" selected="true" /><select idref="V-271873" selected="true" /><select idref="V-271874" selected="true" /><select idref="V-271875" selected="true" /><select idref="V-271876" selected="true" /><select idref="V-271877" selected="true" /><select idref="V-271878" selected="true" /><select idref="V-271879" selected="true" /><select idref="V-271880" selected="true" /><select idref="V-271881" selected="true" /><select idref="V-271882" selected="true" /><select idref="V-271883" selected="true" /><select idref="V-271884" selected="true" /><select idref="V-271885" selected="true" /><select idref="V-271886" selected="true" /><select idref="V-271901" selected="true" /><select idref="V-278952" selected="true" /></Profile><Profile id="MAC-2_Sensitive"><title>II - Mission Support Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-271431" selected="true" /><select idref="V-271432" selected="true" /><select idref="V-271433" selected="true" /><select idref="V-271434" selected="true" /><select idref="V-271435" selected="true" /><select idref="V-271436" selected="true" /><select idref="V-271437" selected="true" /><select idref="V-271438" selected="true" /><select idref="V-271439" selected="true" /><select idref="V-271440" selected="true" /><select idref="V-271441" selected="true" /><select idref="V-271442" selected="true" /><select idref="V-271443" selected="true" /><select idref="V-271444" selected="true" /><select idref="V-271445" selected="true" /><select idref="V-271446" selected="true" /><select idref="V-271447" selected="true" /><select idref="V-271448" selected="true" /><select idref="V-271449" selected="true" /><select idref="V-271450" selected="true" /><select idref="V-271451" selected="true" /><select idref="V-271452" selected="true" /><select idref="V-271453" selected="true" /><select idref="V-271454" selected="true" /><select idref="V-271455" selected="true" /><select idref="V-271456" selected="true" /><select idref="V-271457" selected="true" /><select idref="V-271458" selected="true" /><select idref="V-271459" selected="true" /><select idref="V-271460" selected="true" /><select idref="V-271461" selected="true" /><select idref="V-271462" selected="true" /><select idref="V-271463" selected="true" /><select idref="V-271464" selected="true" /><select idref="V-271465" selected="true" /><select idref="V-271466" selected="true" /><select idref="V-271467" selected="true" /><select idref="V-271468" selected="true" /><select idref="V-271469" selected="true" /><select idref="V-271470" selected="true" /><select idref="V-271471" selected="true" /><select idref="V-271472" selected="true" /><select idref="V-271473" selected="true" /><select idref="V-271474" selected="true" /><select idref="V-271475" selected="true" /><select idref="V-271476" selected="true" /><select idref="V-271477" selected="true" /><select idref="V-271478" selected="true" /><select idref="V-271479" selected="true" /><select idref="V-271480" selected="true" /><select idref="V-271481" selected="true" /><select idref="V-271482" selected="true" /><select idref="V-271483" selected="true" /><select idref="V-271484" selected="true" /><select idref="V-271485" selected="true" /><select idref="V-271486" selected="true" /><select idref="V-271487" selected="true" /><select idref="V-271488" selected="true" /><select idref="V-271489" selected="true" /><select idref="V-271490" selected="true" /><select idref="V-271491" selected="true" /><select idref="V-271492" selected="true" /><select idref="V-271493" selected="true" /><select idref="V-271494" selected="true" /><select idref="V-271495" selected="true" /><select idref="V-271496" selected="true" /><select idref="V-271497" selected="true" /><select idref="V-271498" selected="true" /><select idref="V-271499" selected="true" /><select idref="V-271500" selected="true" /><select idref="V-271501" selected="true" /><select idref="V-271502" selected="true" /><select idref="V-271503" selected="true" /><select idref="V-271504" selected="true" /><select idref="V-271505" selected="true" /><select idref="V-271506" selected="true" /><select idref="V-271507" selected="true" /><select idref="V-271508" selected="true" /><select idref="V-271509" selected="true" /><select idref="V-271510" selected="true" /><select idref="V-271511" selected="true" /><select idref="V-271512" selected="true" /><select idref="V-271513" selected="true" /><select idref="V-271514" selected="true" /><select idref="V-271515" selected="true" /><select idref="V-271516" selected="true" /><select idref="V-271517" selected="true" /><select idref="V-271518" selected="true" /><select idref="V-271519" selected="true" /><select idref="V-271520" selected="true" /><select idref="V-271521" selected="true" /><select idref="V-271522" selected="true" /><select idref="V-271523" selected="true" /><select idref="V-271524" selected="true" /><select idref="V-271525" selected="true" /><select idref="V-271526" selected="true" /><select idref="V-271527" selected="true" /><select idref="V-271528" selected="true" /><select idref="V-271529" selected="true" /><select idref="V-271530" selected="true" /><select idref="V-271531" selected="true" /><select idref="V-271532" selected="true" /><select idref="V-271533" selected="true" /><select idref="V-271534" selected="true" /><select idref="V-271535" selected="true" /><select idref="V-271536" selected="true" /><select idref="V-271537" selected="true" /><select idref="V-271538" selected="true" /><select idref="V-271539" selected="true" /><select idref="V-271540" selected="true" /><select idref="V-271541" selected="true" /><select idref="V-271542" selected="true" /><select idref="V-271543" selected="true" /><select idref="V-271544" selected="true" /><select idref="V-271545" selected="true" /><select idref="V-271546" selected="true" /><select idref="V-271547" selected="true" /><select idref="V-271548" selected="true" /><select idref="V-271549" selected="true" /><select idref="V-271550" selected="true" /><select idref="V-271551" selected="true" /><select idref="V-271552" selected="true" /><select idref="V-271553" selected="true" /><select idref="V-271554" selected="true" /><select idref="V-271555" selected="true" /><select idref="V-271556" selected="true" /><select idref="V-271557" selected="true" /><select idref="V-271558" selected="true" /><select idref="V-271559" selected="true" /><select idref="V-271560" selected="true" /><select idref="V-271561" selected="true" /><select idref="V-271562" selected="true" /><select idref="V-271563" selected="true" /><select idref="V-271564" selected="true" /><select idref="V-271565" selected="true" /><select idref="V-271566" selected="true" /><select idref="V-271567" selected="true" /><select idref="V-271568" selected="true" /><select idref="V-271569" selected="true" /><select idref="V-271570" selected="true" /><select idref="V-271571" selected="true" /><select idref="V-271572" selected="true" /><select idref="V-271573" selected="true" /><select idref="V-271574" selected="true" /><select idref="V-271575" selected="true" /><select idref="V-271576" selected="true" /><select idref="V-271577" selected="true" /><select idref="V-271578" selected="true" /><select idref="V-271579" selected="true" /><select idref="V-271580" selected="true" /><select idref="V-271581" selected="true" /><select idref="V-271582" selected="true" /><select idref="V-271583" selected="true" /><select idref="V-271584" selected="true" /><select idref="V-271585" selected="true" /><select idref="V-271586" selected="true" /><select idref="V-271587" selected="true" /><select idref="V-271588" selected="true" /><select idref="V-271589" selected="true" /><select idref="V-271590" selected="true" /><select idref="V-271591" selected="true" /><select idref="V-271592" selected="true" /><select idref="V-271593" selected="true" /><select idref="V-271594" selected="true" /><select idref="V-271595" selected="true" /><select idref="V-271596" selected="true" /><select idref="V-271597" selected="true" /><select idref="V-271598" selected="true" /><select idref="V-271599" selected="true" /><select idref="V-271600" selected="true" /><select idref="V-271601" selected="true" /><select idref="V-271602" selected="true" /><select idref="V-271603" selected="true" /><select idref="V-271604" selected="true" /><select idref="V-271605" selected="true" /><select idref="V-271606" selected="true" /><select idref="V-271607" selected="true" /><select idref="V-271608" selected="true" /><select idref="V-271609" selected="true" /><select idref="V-271610" selected="true" /><select idref="V-271611" selected="true" /><select idref="V-271612" selected="true" /><select idref="V-271613" selected="true" /><select idref="V-271614" selected="true" /><select idref="V-271615" selected="true" /><select idref="V-271616" selected="true" /><select idref="V-271617" selected="true" /><select idref="V-271618" selected="true" /><select idref="V-271619" selected="true" /><select idref="V-271620" selected="true" /><select idref="V-271621" selected="true" /><select idref="V-271622" selected="true" /><select idref="V-271623" selected="true" /><select idref="V-271624" selected="true" /><select idref="V-271625" selected="true" /><select idref="V-271626" selected="true" /><select idref="V-271627" selected="true" /><select idref="V-271628" selected="true" /><select idref="V-271629" selected="true" /><select idref="V-271630" selected="true" /><select idref="V-271631" selected="true" /><select idref="V-271632" selected="true" /><select idref="V-271633" selected="true" /><select idref="V-271634" selected="true" /><select idref="V-271635" selected="true" /><select idref="V-271636" selected="true" /><select idref="V-271637" selected="true" /><select idref="V-271638" selected="true" /><select idref="V-271639" selected="true" /><select idref="V-271640" selected="true" /><select idref="V-271641" selected="true" /><select idref="V-271642" selected="true" /><select idref="V-271643" selected="true" /><select idref="V-271644" selected="true" /><select idref="V-271645" selected="true" /><select idref="V-271646" selected="true" /><select idref="V-271647" selected="true" /><select idref="V-271648" selected="true" /><select idref="V-271649" selected="true" /><select idref="V-271650" selected="true" /><select idref="V-271651" selected="true" /><select idref="V-271652" selected="true" /><select idref="V-271653" selected="true" /><select idref="V-271654" selected="true" /><select idref="V-271655" selected="true" /><select idref="V-271656" selected="true" /><select idref="V-271657" selected="true" /><select idref="V-271658" selected="true" /><select idref="V-271659" selected="true" /><select idref="V-271660" selected="true" /><select idref="V-271661" selected="true" /><select idref="V-271662" selected="true" /><select idref="V-271663" selected="true" /><select idref="V-271664" selected="true" /><select idref="V-271665" selected="true" /><select idref="V-271666" selected="true" /><select idref="V-271667" selected="true" /><select idref="V-271668" selected="true" /><select idref="V-271669" selected="true" /><select idref="V-271670" selected="true" /><select idref="V-271671" selected="true" /><select idref="V-271672" selected="true" /><select idref="V-271673" selected="true" /><select idref="V-271674" selected="true" /><select idref="V-271676" selected="true" /><select idref="V-271677" selected="true" /><select idref="V-271678" selected="true" /><select idref="V-271679" selected="true" /><select idref="V-271680" selected="true" /><select idref="V-271681" selected="true" /><select idref="V-271682" selected="true" /><select idref="V-271683" selected="true" /><select idref="V-271684" selected="true" /><select idref="V-271685" selected="true" /><select idref="V-271686" selected="true" /><select idref="V-271687" selected="true" /><select idref="V-271688" selected="true" /><select idref="V-271689" selected="true" /><select idref="V-271690" selected="true" /><select idref="V-271691" selected="true" /><select idref="V-271692" selected="true" /><select idref="V-271693" selected="true" /><select idref="V-271694" selected="true" /><select idref="V-271695" selected="true" /><select idref="V-271696" selected="true" /><select idref="V-271697" selected="true" /><select idref="V-271698" selected="true" /><select idref="V-271699" selected="true" /><select idref="V-271700" selected="true" /><select idref="V-271701" selected="true" /><select idref="V-271703" selected="true" /><select idref="V-271704" selected="true" /><select idref="V-271705" selected="true" /><select idref="V-271706" selected="true" /><select idref="V-271707" selected="true" /><select idref="V-271708" selected="true" /><select idref="V-271709" selected="true" /><select idref="V-271710" selected="true" /><select idref="V-271711" selected="true" /><select idref="V-271712" selected="true" /><select idref="V-271713" selected="true" /><select idref="V-271714" selected="true" /><select idref="V-271715" selected="true" /><select idref="V-271716" selected="true" /><select idref="V-271717" selected="true" /><select idref="V-271718" selected="true" /><select idref="V-271719" selected="true" /><select idref="V-271720" selected="true" /><select idref="V-271721" selected="true" /><select idref="V-271722" selected="true" /><select idref="V-271723" selected="true" /><select idref="V-271724" selected="true" /><select idref="V-271725" selected="true" /><select idref="V-271726" selected="true" /><select idref="V-271727" selected="true" /><select idref="V-271728" selected="true" /><select idref="V-271729" selected="true" /><select idref="V-271730" selected="true" /><select idref="V-271731" selected="true" /><select idref="V-271732" selected="true" /><select idref="V-271733" selected="true" /><select idref="V-271734" selected="true" /><select idref="V-271735" selected="true" /><select idref="V-271736" selected="true" /><select idref="V-271737" selected="true" /><select idref="V-271738" selected="true" /><select idref="V-271739" selected="true" /><select idref="V-271740" selected="true" /><select idref="V-271741" selected="true" /><select idref="V-271742" selected="true" /><select idref="V-271743" selected="true" /><select idref="V-271744" selected="true" /><select idref="V-271745" selected="true" /><select idref="V-271746" selected="true" /><select idref="V-271747" selected="true" /><select idref="V-271748" selected="true" /><select idref="V-271749" selected="true" /><select idref="V-271750" selected="true" /><select idref="V-271751" selected="true" /><select idref="V-271752" selected="true" /><select idref="V-271753" selected="true" /><select idref="V-271754" selected="true" /><select idref="V-271755" selected="true" /><select idref="V-271756" selected="true" /><select idref="V-271757" selected="true" /><select idref="V-271758" selected="true" /><select idref="V-271759" selected="true" /><select idref="V-271760" selected="true" /><select idref="V-271761" selected="true" /><select idref="V-271762" selected="true" /><select idref="V-271763" selected="true" /><select idref="V-271764" selected="true" /><select idref="V-271765" selected="true" /><select idref="V-271766" selected="true" /><select idref="V-271768" selected="true" /><select idref="V-271769" selected="true" /><select idref="V-271770" selected="true" /><select idref="V-271771" selected="true" /><select idref="V-271772" selected="true" /><select idref="V-271773" selected="true" /><select idref="V-271774" selected="true" /><select idref="V-271775" selected="true" /><select idref="V-271776" selected="true" /><select idref="V-271777" selected="true" /><select idref="V-271778" selected="true" /><select idref="V-271779" selected="true" /><select idref="V-271780" selected="true" /><select idref="V-271781" selected="true" /><select idref="V-271782" selected="true" /><select idref="V-271783" selected="true" /><select idref="V-271784" selected="true" /><select idref="V-271785" selected="true" /><select idref="V-271786" selected="true" /><select idref="V-271787" selected="true" /><select idref="V-271788" selected="true" /><select idref="V-271789" selected="true" /><select idref="V-271790" selected="true" /><select idref="V-271791" selected="true" /><select idref="V-271792" selected="true" /><select idref="V-271793" selected="true" /><select idref="V-271794" selected="true" /><select idref="V-271795" selected="true" /><select idref="V-271796" selected="true" /><select idref="V-271797" selected="true" /><select idref="V-271798" selected="true" /><select idref="V-271799" selected="true" /><select idref="V-271800" selected="true" /><select idref="V-271801" selected="true" /><select idref="V-271802" selected="true" /><select idref="V-271803" selected="true" /><select idref="V-271804" selected="true" /><select idref="V-271805" selected="true" /><select idref="V-271806" selected="true" /><select idref="V-271807" selected="true" /><select idref="V-271808" selected="true" /><select idref="V-271809" selected="true" /><select idref="V-271810" selected="true" /><select idref="V-271811" selected="true" /><select idref="V-271812" selected="true" /><select idref="V-271813" selected="true" /><select idref="V-271814" selected="true" /><select idref="V-271815" selected="true" /><select idref="V-271816" selected="true" /><select idref="V-271817" selected="true" /><select idref="V-271818" selected="true" /><select idref="V-271819" selected="true" /><select idref="V-271820" selected="true" /><select idref="V-271821" selected="true" /><select idref="V-271822" selected="true" /><select idref="V-271823" selected="true" /><select idref="V-271824" selected="true" /><select idref="V-271825" selected="true" /><select idref="V-271826" selected="true" /><select idref="V-271827" selected="true" /><select idref="V-271828" selected="true" /><select idref="V-271829" selected="true" /><select idref="V-271830" selected="true" /><select idref="V-271831" selected="true" /><select idref="V-271832" selected="true" /><select idref="V-271833" selected="true" /><select idref="V-271834" selected="true" /><select idref="V-271835" selected="true" /><select idref="V-271836" selected="true" /><select idref="V-271837" selected="true" /><select idref="V-271838" selected="true" /><select idref="V-271839" selected="true" /><select idref="V-271840" selected="true" /><select idref="V-271841" selected="true" /><select idref="V-271842" selected="true" /><select idref="V-271843" selected="true" /><select idref="V-271844" selected="true" /><select idref="V-271845" selected="true" /><select idref="V-271846" selected="true" /><select idref="V-271847" selected="true" /><select idref="V-271848" selected="true" /><select idref="V-271849" selected="true" /><select idref="V-271850" selected="true" /><select idref="V-271851" selected="true" /><select idref="V-271852" selected="true" /><select idref="V-271853" selected="true" /><select idref="V-271854" selected="true" /><select idref="V-271855" selected="true" /><select idref="V-271856" selected="true" /><select idref="V-271857" selected="true" /><select idref="V-271858" selected="true" /><select idref="V-271859" selected="true" /><select idref="V-271860" selected="true" /><select idref="V-271861" selected="true" /><select idref="V-271862" selected="true" /><select idref="V-271863" selected="true" /><select idref="V-271864" selected="true" /><select idref="V-271865" selected="true" /><select idref="V-271866" selected="true" /><select idref="V-271867" selected="true" /><select idref="V-271868" selected="true" /><select idref="V-271869" selected="true" /><select idref="V-271870" selected="true" /><select idref="V-271871" selected="true" /><select idref="V-271872" selected="true" /><select idref="V-271873" selected="true" /><select idref="V-271874" selected="true" /><select idref="V-271875" selected="true" /><select idref="V-271876" selected="true" /><select idref="V-271877" selected="true" /><select idref="V-271878" selected="true" /><select idref="V-271879" selected="true" /><select idref="V-271880" selected="true" /><select idref="V-271881" selected="true" /><select idref="V-271882" selected="true" /><select idref="V-271883" selected="true" /><select idref="V-271884" selected="true" /><select idref="V-271885" selected="true" /><select idref="V-271886" selected="true" /><select idref="V-271901" selected="true" /><select idref="V-278952" selected="true" /></Profile><Profile id="MAC-3_Classified"><title>III - Administrative Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-271431" selected="true" /><select idref="V-271432" selected="true" /><select idref="V-271433" selected="true" /><select idref="V-271434" selected="true" /><select idref="V-271435" selected="true" /><select idref="V-271436" selected="true" /><select idref="V-271437" selected="true" /><select idref="V-271438" selected="true" /><select idref="V-271439" selected="true" /><select idref="V-271440" selected="true" /><select idref="V-271441" selected="true" /><select idref="V-271442" selected="true" /><select idref="V-271443" selected="true" /><select idref="V-271444" selected="true" /><select idref="V-271445" selected="true" /><select idref="V-271446" selected="true" /><select idref="V-271447" selected="true" /><select idref="V-271448" selected="true" /><select idref="V-271449" selected="true" /><select idref="V-271450" selected="true" /><select idref="V-271451" selected="true" /><select idref="V-271452" selected="true" /><select idref="V-271453" selected="true" /><select idref="V-271454" selected="true" /><select idref="V-271455" selected="true" /><select idref="V-271456" selected="true" /><select idref="V-271457" selected="true" /><select idref="V-271458" selected="true" /><select idref="V-271459" selected="true" /><select idref="V-271460" selected="true" /><select idref="V-271461" selected="true" /><select idref="V-271462" selected="true" /><select idref="V-271463" selected="true" /><select idref="V-271464" selected="true" /><select idref="V-271465" selected="true" /><select idref="V-271466" selected="true" /><select idref="V-271467" selected="true" /><select idref="V-271468" selected="true" /><select idref="V-271469" selected="true" /><select idref="V-271470" selected="true" /><select idref="V-271471" selected="true" /><select idref="V-271472" selected="true" /><select idref="V-271473" selected="true" /><select idref="V-271474" selected="true" /><select idref="V-271475" selected="true" /><select idref="V-271476" selected="true" /><select idref="V-271477" selected="true" /><select idref="V-271478" selected="true" /><select idref="V-271479" selected="true" /><select idref="V-271480" selected="true" /><select idref="V-271481" selected="true" /><select idref="V-271482" selected="true" /><select idref="V-271483" selected="true" /><select idref="V-271484" selected="true" /><select idref="V-271485" selected="true" /><select idref="V-271486" selected="true" /><select idref="V-271487" selected="true" /><select idref="V-271488" selected="true" /><select idref="V-271489" selected="true" /><select idref="V-271490" selected="true" /><select idref="V-271491" selected="true" /><select idref="V-271492" selected="true" /><select idref="V-271493" selected="true" /><select idref="V-271494" selected="true" /><select idref="V-271495" selected="true" /><select idref="V-271496" selected="true" /><select idref="V-271497" selected="true" /><select idref="V-271498" selected="true" /><select idref="V-271499" selected="true" /><select idref="V-271500" selected="true" /><select idref="V-271501" selected="true" /><select idref="V-271502" selected="true" /><select idref="V-271503" selected="true" /><select idref="V-271504" selected="true" /><select idref="V-271505" selected="true" /><select idref="V-271506" selected="true" /><select idref="V-271507" selected="true" /><select idref="V-271508" selected="true" /><select idref="V-271509" selected="true" /><select idref="V-271510" selected="true" /><select idref="V-271511" selected="true" /><select idref="V-271512" selected="true" /><select idref="V-271513" selected="true" /><select idref="V-271514" selected="true" /><select idref="V-271515" selected="true" /><select idref="V-271516" selected="true" /><select idref="V-271517" selected="true" /><select idref="V-271518" selected="true" /><select idref="V-271519" selected="true" /><select idref="V-271520" selected="true" /><select idref="V-271521" selected="true" /><select idref="V-271522" selected="true" /><select idref="V-271523" selected="true" /><select idref="V-271524" selected="true" /><select idref="V-271525" selected="true" /><select idref="V-271526" selected="true" /><select idref="V-271527" selected="true" /><select idref="V-271528" selected="true" /><select idref="V-271529" selected="true" /><select idref="V-271530" selected="true" /><select idref="V-271531" selected="true" /><select idref="V-271532" selected="true" /><select idref="V-271533" selected="true" /><select idref="V-271534" selected="true" /><select idref="V-271535" selected="true" /><select idref="V-271536" selected="true" /><select idref="V-271537" selected="true" /><select idref="V-271538" selected="true" /><select idref="V-271539" selected="true" /><select idref="V-271540" selected="true" /><select idref="V-271541" selected="true" /><select idref="V-271542" selected="true" /><select idref="V-271543" selected="true" /><select idref="V-271544" selected="true" /><select idref="V-271545" selected="true" /><select idref="V-271546" selected="true" /><select idref="V-271547" selected="true" /><select idref="V-271548" selected="true" /><select idref="V-271549" selected="true" /><select idref="V-271550" selected="true" /><select idref="V-271551" selected="true" /><select idref="V-271552" selected="true" /><select idref="V-271553" selected="true" /><select idref="V-271554" selected="true" /><select idref="V-271555" selected="true" /><select idref="V-271556" selected="true" /><select idref="V-271557" selected="true" /><select idref="V-271558" selected="true" /><select idref="V-271559" selected="true" /><select idref="V-271560" selected="true" /><select idref="V-271561" selected="true" /><select idref="V-271562" selected="true" /><select idref="V-271563" selected="true" /><select idref="V-271564" selected="true" /><select idref="V-271565" selected="true" /><select idref="V-271566" selected="true" /><select idref="V-271567" selected="true" /><select idref="V-271568" selected="true" /><select idref="V-271569" selected="true" /><select idref="V-271570" selected="true" /><select idref="V-271571" selected="true" /><select idref="V-271572" selected="true" /><select idref="V-271573" selected="true" /><select idref="V-271574" selected="true" /><select idref="V-271575" selected="true" /><select idref="V-271576" selected="true" /><select idref="V-271577" selected="true" /><select idref="V-271578" selected="true" /><select idref="V-271579" selected="true" /><select idref="V-271580" selected="true" /><select idref="V-271581" selected="true" /><select idref="V-271582" selected="true" /><select idref="V-271583" selected="true" /><select idref="V-271584" selected="true" /><select idref="V-271585" selected="true" /><select idref="V-271586" selected="true" /><select idref="V-271587" selected="true" /><select idref="V-271588" selected="true" /><select idref="V-271589" selected="true" /><select idref="V-271590" selected="true" /><select idref="V-271591" selected="true" /><select idref="V-271592" selected="true" /><select idref="V-271593" selected="true" /><select idref="V-271594" selected="true" /><select idref="V-271595" selected="true" /><select idref="V-271596" selected="true" /><select idref="V-271597" selected="true" /><select idref="V-271598" selected="true" /><select idref="V-271599" selected="true" /><select idref="V-271600" selected="true" /><select idref="V-271601" selected="true" /><select idref="V-271602" selected="true" /><select idref="V-271603" selected="true" /><select idref="V-271604" selected="true" /><select idref="V-271605" selected="true" /><select idref="V-271606" selected="true" /><select idref="V-271607" selected="true" /><select idref="V-271608" selected="true" /><select idref="V-271609" selected="true" /><select idref="V-271610" selected="true" /><select idref="V-271611" selected="true" /><select idref="V-271612" selected="true" /><select idref="V-271613" selected="true" /><select idref="V-271614" selected="true" /><select idref="V-271615" selected="true" /><select idref="V-271616" selected="true" /><select idref="V-271617" selected="true" /><select idref="V-271618" selected="true" /><select idref="V-271619" selected="true" /><select idref="V-271620" selected="true" /><select idref="V-271621" selected="true" /><select idref="V-271622" selected="true" /><select idref="V-271623" selected="true" /><select idref="V-271624" selected="true" /><select idref="V-271625" selected="true" /><select idref="V-271626" selected="true" /><select idref="V-271627" selected="true" /><select idref="V-271628" selected="true" /><select idref="V-271629" selected="true" /><select idref="V-271630" selected="true" /><select idref="V-271631" selected="true" /><select idref="V-271632" selected="true" /><select idref="V-271633" selected="true" /><select idref="V-271634" selected="true" /><select idref="V-271635" selected="true" /><select idref="V-271636" selected="true" /><select idref="V-271637" selected="true" /><select idref="V-271638" selected="true" /><select idref="V-271639" selected="true" /><select idref="V-271640" selected="true" /><select idref="V-271641" selected="true" /><select idref="V-271642" selected="true" /><select idref="V-271643" selected="true" /><select idref="V-271644" selected="true" /><select idref="V-271645" selected="true" /><select idref="V-271646" selected="true" /><select idref="V-271647" selected="true" /><select idref="V-271648" selected="true" /><select idref="V-271649" selected="true" /><select idref="V-271650" selected="true" /><select idref="V-271651" selected="true" /><select idref="V-271652" selected="true" /><select idref="V-271653" selected="true" /><select idref="V-271654" selected="true" /><select idref="V-271655" selected="true" /><select idref="V-271656" selected="true" /><select idref="V-271657" selected="true" /><select idref="V-271658" selected="true" /><select idref="V-271659" selected="true" /><select idref="V-271660" selected="true" /><select idref="V-271661" selected="true" /><select idref="V-271662" selected="true" /><select idref="V-271663" selected="true" /><select idref="V-271664" selected="true" /><select idref="V-271665" selected="true" /><select idref="V-271666" selected="true" /><select idref="V-271667" selected="true" /><select idref="V-271668" selected="true" /><select idref="V-271669" selected="true" /><select idref="V-271670" selected="true" /><select idref="V-271671" selected="true" /><select idref="V-271672" selected="true" /><select idref="V-271673" selected="true" /><select idref="V-271674" selected="true" /><select idref="V-271676" selected="true" /><select idref="V-271677" selected="true" /><select idref="V-271678" selected="true" /><select idref="V-271679" selected="true" /><select idref="V-271680" selected="true" /><select idref="V-271681" selected="true" /><select idref="V-271682" selected="true" /><select idref="V-271683" selected="true" /><select idref="V-271684" selected="true" /><select idref="V-271685" selected="true" /><select idref="V-271686" selected="true" /><select idref="V-271687" selected="true" /><select idref="V-271688" selected="true" /><select idref="V-271689" selected="true" /><select idref="V-271690" selected="true" /><select idref="V-271691" selected="true" /><select idref="V-271692" selected="true" /><select idref="V-271693" selected="true" /><select idref="V-271694" selected="true" /><select idref="V-271695" selected="true" /><select idref="V-271696" selected="true" /><select idref="V-271697" selected="true" /><select idref="V-271698" selected="true" /><select idref="V-271699" selected="true" /><select idref="V-271700" selected="true" /><select idref="V-271701" selected="true" /><select idref="V-271703" selected="true" /><select idref="V-271704" selected="true" /><select idref="V-271705" selected="true" /><select idref="V-271706" selected="true" /><select idref="V-271707" selected="true" /><select idref="V-271708" selected="true" /><select idref="V-271709" selected="true" /><select idref="V-271710" selected="true" /><select idref="V-271711" selected="true" /><select idref="V-271712" selected="true" /><select idref="V-271713" selected="true" /><select idref="V-271714" selected="true" /><select idref="V-271715" selected="true" /><select idref="V-271716" selected="true" /><select idref="V-271717" selected="true" /><select idref="V-271718" selected="true" /><select idref="V-271719" selected="true" /><select idref="V-271720" selected="true" /><select idref="V-271721" selected="true" /><select idref="V-271722" selected="true" /><select idref="V-271723" selected="true" /><select idref="V-271724" selected="true" /><select idref="V-271725" selected="true" /><select idref="V-271726" selected="true" /><select idref="V-271727" selected="true" /><select idref="V-271728" selected="true" /><select idref="V-271729" selected="true" /><select idref="V-271730" selected="true" /><select idref="V-271731" selected="true" /><select idref="V-271732" selected="true" /><select idref="V-271733" selected="true" /><select idref="V-271734" selected="true" /><select idref="V-271735" selected="true" /><select idref="V-271736" selected="true" /><select idref="V-271737" selected="true" /><select idref="V-271738" selected="true" /><select idref="V-271739" selected="true" /><select idref="V-271740" selected="true" /><select idref="V-271741" selected="true" /><select idref="V-271742" selected="true" /><select idref="V-271743" selected="true" /><select idref="V-271744" selected="true" /><select idref="V-271745" selected="true" /><select idref="V-271746" selected="true" /><select idref="V-271747" selected="true" /><select idref="V-271748" selected="true" /><select idref="V-271749" selected="true" /><select idref="V-271750" selected="true" /><select idref="V-271751" selected="true" /><select idref="V-271752" selected="true" /><select idref="V-271753" selected="true" /><select idref="V-271754" selected="true" /><select idref="V-271755" selected="true" /><select idref="V-271756" selected="true" /><select idref="V-271757" selected="true" /><select idref="V-271758" selected="true" /><select idref="V-271759" selected="true" /><select idref="V-271760" selected="true" /><select idref="V-271761" selected="true" /><select idref="V-271762" selected="true" /><select idref="V-271763" selected="true" /><select idref="V-271764" selected="true" /><select idref="V-271765" selected="true" /><select idref="V-271766" selected="true" /><select idref="V-271768" selected="true" /><select idref="V-271769" selected="true" /><select idref="V-271770" selected="true" /><select idref="V-271771" selected="true" /><select idref="V-271772" selected="true" /><select idref="V-271773" selected="true" /><select idref="V-271774" selected="true" /><select idref="V-271775" selected="true" /><select idref="V-271776" selected="true" /><select idref="V-271777" selected="true" /><select idref="V-271778" selected="true" /><select idref="V-271779" selected="true" /><select idref="V-271780" selected="true" /><select idref="V-271781" selected="true" /><select idref="V-271782" selected="true" /><select idref="V-271783" selected="true" /><select idref="V-271784" selected="true" /><select idref="V-271785" selected="true" /><select idref="V-271786" selected="true" /><select idref="V-271787" selected="true" /><select idref="V-271788" selected="true" /><select idref="V-271789" selected="true" /><select idref="V-271790" selected="true" /><select idref="V-271791" selected="true" /><select idref="V-271792" selected="true" /><select idref="V-271793" selected="true" /><select idref="V-271794" selected="true" /><select idref="V-271795" selected="true" /><select idref="V-271796" selected="true" /><select idref="V-271797" selected="true" /><select idref="V-271798" selected="true" /><select idref="V-271799" selected="true" /><select idref="V-271800" selected="true" /><select idref="V-271801" selected="true" /><select idref="V-271802" selected="true" /><select idref="V-271803" selected="true" /><select idref="V-271804" selected="true" /><select idref="V-271805" selected="true" /><select idref="V-271806" selected="true" /><select idref="V-271807" selected="true" /><select idref="V-271808" selected="true" /><select idref="V-271809" selected="true" /><select idref="V-271810" selected="true" /><select idref="V-271811" selected="true" /><select idref="V-271812" selected="true" /><select idref="V-271813" selected="true" /><select idref="V-271814" selected="true" /><select idref="V-271815" selected="true" /><select idref="V-271816" selected="true" /><select idref="V-271817" selected="true" /><select idref="V-271818" selected="true" /><select idref="V-271819" selected="true" /><select idref="V-271820" selected="true" /><select idref="V-271821" selected="true" /><select idref="V-271822" selected="true" /><select idref="V-271823" selected="true" /><select idref="V-271824" selected="true" /><select idref="V-271825" selected="true" /><select idref="V-271826" selected="true" /><select idref="V-271827" selected="true" /><select idref="V-271828" selected="true" /><select idref="V-271829" selected="true" /><select idref="V-271830" selected="true" /><select idref="V-271831" selected="true" /><select idref="V-271832" selected="true" /><select idref="V-271833" selected="true" /><select idref="V-271834" selected="true" /><select idref="V-271835" selected="true" /><select idref="V-271836" selected="true" /><select idref="V-271837" selected="true" /><select idref="V-271838" selected="true" /><select idref="V-271839" selected="true" /><select idref="V-271840" selected="true" /><select idref="V-271841" selected="true" /><select idref="V-271842" selected="true" /><select idref="V-271843" selected="true" /><select idref="V-271844" selected="true" /><select idref="V-271845" selected="true" /><select idref="V-271846" selected="true" /><select idref="V-271847" selected="true" /><select idref="V-271848" selected="true" /><select idref="V-271849" selected="true" /><select idref="V-271850" selected="true" /><select idref="V-271851" selected="true" /><select idref="V-271852" selected="true" /><select idref="V-271853" selected="true" /><select idref="V-271854" selected="true" /><select idref="V-271855" selected="true" /><select idref="V-271856" selected="true" /><select idref="V-271857" selected="true" /><select idref="V-271858" selected="true" /><select idref="V-271859" selected="true" /><select idref="V-271860" selected="true" /><select idref="V-271861" selected="true" /><select idref="V-271862" selected="true" /><select idref="V-271863" selected="true" /><select idref="V-271864" selected="true" /><select idref="V-271865" selected="true" /><select idref="V-271866" selected="true" /><select idref="V-271867" selected="true" /><select idref="V-271868" selected="true" /><select idref="V-271869" selected="true" /><select idref="V-271870" selected="true" /><select idref="V-271871" selected="true" /><select idref="V-271872" selected="true" /><select idref="V-271873" selected="true" /><select idref="V-271874" selected="true" /><select idref="V-271875" selected="true" /><select idref="V-271876" selected="true" /><select idref="V-271877" selected="true" /><select idref="V-271878" selected="true" /><select idref="V-271879" selected="true" /><select idref="V-271880" selected="true" /><select idref="V-271881" selected="true" /><select idref="V-271882" selected="true" /><select idref="V-271883" selected="true" /><select idref="V-271884" selected="true" /><select idref="V-271885" selected="true" /><select idref="V-271886" selected="true" /><select idref="V-271901" selected="true" /><select idref="V-278952" selected="true" /></Profile><Profile id="MAC-3_Public"><title>III - Administrative Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-271431" selected="true" /><select idref="V-271432" selected="true" /><select idref="V-271433" selected="true" /><select idref="V-271434" selected="true" /><select idref="V-271435" selected="true" /><select idref="V-271436" selected="true" /><select idref="V-271437" selected="true" /><select idref="V-271438" selected="true" /><select idref="V-271439" selected="true" /><select idref="V-271440" selected="true" /><select idref="V-271441" selected="true" /><select idref="V-271442" selected="true" /><select idref="V-271443" selected="true" /><select idref="V-271444" selected="true" /><select idref="V-271445" selected="true" /><select idref="V-271446" selected="true" /><select idref="V-271447" selected="true" /><select idref="V-271448" selected="true" /><select idref="V-271449" selected="true" /><select idref="V-271450" selected="true" /><select idref="V-271451" selected="true" /><select idref="V-271452" selected="true" /><select idref="V-271453" selected="true" /><select idref="V-271454" selected="true" /><select idref="V-271455" selected="true" /><select idref="V-271456" selected="true" /><select idref="V-271457" selected="true" /><select idref="V-271458" selected="true" /><select idref="V-271459" selected="true" /><select idref="V-271460" selected="true" /><select idref="V-271461" selected="true" /><select idref="V-271462" selected="true" /><select idref="V-271463" selected="true" /><select idref="V-271464" selected="true" /><select idref="V-271465" selected="true" /><select idref="V-271466" selected="true" /><select idref="V-271467" selected="true" /><select idref="V-271468" selected="true" /><select idref="V-271469" selected="true" /><select idref="V-271470" selected="true" /><select idref="V-271471" selected="true" /><select idref="V-271472" selected="true" /><select idref="V-271473" selected="true" /><select idref="V-271474" selected="true" /><select idref="V-271475" selected="true" /><select idref="V-271476" selected="true" /><select idref="V-271477" selected="true" /><select idref="V-271478" selected="true" /><select idref="V-271479" selected="true" /><select idref="V-271480" selected="true" /><select idref="V-271481" selected="true" /><select idref="V-271482" selected="true" /><select idref="V-271483" selected="true" /><select idref="V-271484" selected="true" /><select idref="V-271485" selected="true" /><select idref="V-271486" selected="true" /><select idref="V-271487" selected="true" /><select idref="V-271488" selected="true" /><select idref="V-271489" selected="true" /><select idref="V-271490" selected="true" /><select idref="V-271491" selected="true" /><select idref="V-271492" selected="true" /><select idref="V-271493" selected="true" /><select idref="V-271494" selected="true" /><select idref="V-271495" selected="true" /><select idref="V-271496" selected="true" /><select idref="V-271497" selected="true" /><select idref="V-271498" selected="true" /><select idref="V-271499" selected="true" /><select idref="V-271500" selected="true" /><select idref="V-271501" selected="true" /><select idref="V-271502" selected="true" /><select idref="V-271503" selected="true" /><select idref="V-271504" selected="true" /><select idref="V-271505" selected="true" /><select idref="V-271506" selected="true" /><select idref="V-271507" selected="true" /><select idref="V-271508" selected="true" /><select idref="V-271509" selected="true" /><select idref="V-271510" selected="true" /><select idref="V-271511" selected="true" /><select idref="V-271512" selected="true" /><select idref="V-271513" selected="true" /><select idref="V-271514" selected="true" /><select idref="V-271515" selected="true" /><select idref="V-271516" selected="true" /><select idref="V-271517" selected="true" /><select idref="V-271518" selected="true" /><select idref="V-271519" selected="true" /><select idref="V-271520" selected="true" /><select idref="V-271521" selected="true" /><select idref="V-271522" selected="true" /><select idref="V-271523" selected="true" /><select idref="V-271524" selected="true" /><select idref="V-271525" selected="true" /><select idref="V-271526" selected="true" /><select idref="V-271527" selected="true" /><select idref="V-271528" selected="true" /><select idref="V-271529" selected="true" /><select idref="V-271530" selected="true" /><select idref="V-271531" selected="true" /><select idref="V-271532" selected="true" /><select idref="V-271533" selected="true" /><select idref="V-271534" selected="true" /><select idref="V-271535" selected="true" /><select idref="V-271536" selected="true" /><select idref="V-271537" selected="true" /><select idref="V-271538" selected="true" /><select idref="V-271539" selected="true" /><select idref="V-271540" selected="true" /><select idref="V-271541" selected="true" /><select idref="V-271542" selected="true" /><select idref="V-271543" selected="true" /><select idref="V-271544" selected="true" /><select idref="V-271545" selected="true" /><select idref="V-271546" selected="true" /><select idref="V-271547" selected="true" /><select idref="V-271548" selected="true" /><select idref="V-271549" selected="true" /><select idref="V-271550" selected="true" /><select idref="V-271551" selected="true" /><select idref="V-271552" selected="true" /><select idref="V-271553" selected="true" /><select idref="V-271554" selected="true" /><select idref="V-271555" selected="true" /><select idref="V-271556" selected="true" /><select idref="V-271557" selected="true" /><select idref="V-271558" selected="true" /><select idref="V-271559" selected="true" /><select idref="V-271560" selected="true" /><select idref="V-271561" selected="true" /><select idref="V-271562" selected="true" /><select idref="V-271563" selected="true" /><select idref="V-271564" selected="true" /><select idref="V-271565" selected="true" /><select idref="V-271566" selected="true" /><select idref="V-271567" selected="true" /><select idref="V-271568" selected="true" /><select idref="V-271569" selected="true" /><select idref="V-271570" selected="true" /><select idref="V-271571" selected="true" /><select idref="V-271572" selected="true" /><select idref="V-271573" selected="true" /><select idref="V-271574" selected="true" /><select idref="V-271575" selected="true" /><select idref="V-271576" selected="true" /><select idref="V-271577" selected="true" /><select idref="V-271578" selected="true" /><select idref="V-271579" selected="true" /><select idref="V-271580" selected="true" /><select idref="V-271581" selected="true" /><select idref="V-271582" selected="true" /><select idref="V-271583" selected="true" /><select idref="V-271584" selected="true" /><select idref="V-271585" selected="true" /><select idref="V-271586" selected="true" /><select idref="V-271587" selected="true" /><select idref="V-271588" selected="true" /><select idref="V-271589" selected="true" /><select idref="V-271590" selected="true" /><select idref="V-271591" selected="true" /><select idref="V-271592" selected="true" /><select idref="V-271593" selected="true" /><select idref="V-271594" selected="true" /><select idref="V-271595" selected="true" /><select idref="V-271596" selected="true" /><select idref="V-271597" selected="true" /><select idref="V-271598" selected="true" /><select idref="V-271599" selected="true" /><select idref="V-271600" selected="true" /><select idref="V-271601" selected="true" /><select idref="V-271602" selected="true" /><select idref="V-271603" selected="true" /><select idref="V-271604" selected="true" /><select idref="V-271605" selected="true" /><select idref="V-271606" selected="true" /><select idref="V-271607" selected="true" /><select idref="V-271608" selected="true" /><select idref="V-271609" selected="true" /><select idref="V-271610" selected="true" /><select idref="V-271611" selected="true" /><select idref="V-271612" selected="true" /><select idref="V-271613" selected="true" /><select idref="V-271614" selected="true" /><select idref="V-271615" selected="true" /><select idref="V-271616" selected="true" /><select idref="V-271617" selected="true" /><select idref="V-271618" selected="true" /><select idref="V-271619" selected="true" /><select idref="V-271620" selected="true" /><select idref="V-271621" selected="true" /><select idref="V-271622" selected="true" /><select idref="V-271623" selected="true" /><select idref="V-271624" selected="true" /><select idref="V-271625" selected="true" /><select idref="V-271626" selected="true" /><select idref="V-271627" selected="true" /><select idref="V-271628" selected="true" /><select idref="V-271629" selected="true" /><select idref="V-271630" selected="true" /><select idref="V-271631" selected="true" /><select idref="V-271632" selected="true" /><select idref="V-271633" selected="true" /><select idref="V-271634" selected="true" /><select idref="V-271635" selected="true" /><select idref="V-271636" selected="true" /><select idref="V-271637" selected="true" /><select idref="V-271638" selected="true" /><select idref="V-271639" selected="true" /><select idref="V-271640" selected="true" /><select idref="V-271641" selected="true" /><select idref="V-271642" selected="true" /><select idref="V-271643" selected="true" /><select idref="V-271644" selected="true" /><select idref="V-271645" selected="true" /><select idref="V-271646" selected="true" /><select idref="V-271647" selected="true" /><select idref="V-271648" selected="true" /><select idref="V-271649" selected="true" /><select idref="V-271650" selected="true" /><select idref="V-271651" selected="true" /><select idref="V-271652" selected="true" /><select idref="V-271653" selected="true" /><select idref="V-271654" selected="true" /><select idref="V-271655" selected="true" /><select idref="V-271656" selected="true" /><select idref="V-271657" selected="true" /><select idref="V-271658" selected="true" /><select idref="V-271659" selected="true" /><select idref="V-271660" selected="true" /><select idref="V-271661" selected="true" /><select idref="V-271662" selected="true" /><select idref="V-271663" selected="true" /><select idref="V-271664" selected="true" /><select idref="V-271665" selected="true" /><select idref="V-271666" selected="true" /><select idref="V-271667" selected="true" /><select idref="V-271668" selected="true" /><select idref="V-271669" selected="true" /><select idref="V-271670" selected="true" /><select idref="V-271671" selected="true" /><select idref="V-271672" selected="true" /><select idref="V-271673" selected="true" /><select idref="V-271674" selected="true" /><select idref="V-271676" selected="true" /><select idref="V-271677" selected="true" /><select idref="V-271678" selected="true" /><select idref="V-271679" selected="true" /><select idref="V-271680" selected="true" /><select idref="V-271681" selected="true" /><select idref="V-271682" selected="true" /><select idref="V-271683" selected="true" /><select idref="V-271684" selected="true" /><select idref="V-271685" selected="true" /><select idref="V-271686" selected="true" /><select idref="V-271687" selected="true" /><select idref="V-271688" selected="true" /><select idref="V-271689" selected="true" /><select idref="V-271690" selected="true" /><select idref="V-271691" selected="true" /><select idref="V-271692" selected="true" /><select idref="V-271693" selected="true" /><select idref="V-271694" selected="true" /><select idref="V-271695" selected="true" /><select idref="V-271696" selected="true" /><select idref="V-271697" selected="true" /><select idref="V-271698" selected="true" /><select idref="V-271699" selected="true" /><select idref="V-271700" selected="true" /><select idref="V-271701" selected="true" /><select idref="V-271703" selected="true" /><select idref="V-271704" selected="true" /><select idref="V-271705" selected="true" /><select idref="V-271706" selected="true" /><select idref="V-271707" selected="true" /><select idref="V-271708" selected="true" /><select idref="V-271709" selected="true" /><select idref="V-271710" selected="true" /><select idref="V-271711" selected="true" /><select idref="V-271712" selected="true" /><select idref="V-271713" selected="true" /><select idref="V-271714" selected="true" /><select idref="V-271715" selected="true" /><select idref="V-271716" selected="true" /><select idref="V-271717" selected="true" /><select idref="V-271718" selected="true" /><select idref="V-271719" selected="true" /><select idref="V-271720" selected="true" /><select idref="V-271721" selected="true" /><select idref="V-271722" selected="true" /><select idref="V-271723" selected="true" /><select idref="V-271724" selected="true" /><select idref="V-271725" selected="true" /><select idref="V-271726" selected="true" /><select idref="V-271727" selected="true" /><select idref="V-271728" selected="true" /><select idref="V-271729" selected="true" /><select idref="V-271730" selected="true" /><select idref="V-271731" selected="true" /><select idref="V-271732" selected="true" /><select idref="V-271733" selected="true" /><select idref="V-271734" selected="true" /><select idref="V-271735" selected="true" /><select idref="V-271736" selected="true" /><select idref="V-271737" selected="true" /><select idref="V-271738" selected="true" /><select idref="V-271739" selected="true" /><select idref="V-271740" selected="true" /><select idref="V-271741" selected="true" /><select idref="V-271742" selected="true" /><select idref="V-271743" selected="true" /><select idref="V-271744" selected="true" /><select idref="V-271745" selected="true" /><select idref="V-271746" selected="true" /><select idref="V-271747" selected="true" /><select idref="V-271748" selected="true" /><select idref="V-271749" selected="true" /><select idref="V-271750" selected="true" /><select idref="V-271751" selected="true" /><select idref="V-271752" selected="true" /><select idref="V-271753" selected="true" /><select idref="V-271754" selected="true" /><select idref="V-271755" selected="true" /><select idref="V-271756" selected="true" /><select idref="V-271757" selected="true" /><select idref="V-271758" selected="true" /><select idref="V-271759" selected="true" /><select idref="V-271760" selected="true" /><select idref="V-271761" selected="true" /><select idref="V-271762" selected="true" /><select idref="V-271763" selected="true" /><select idref="V-271764" selected="true" /><select idref="V-271765" selected="true" /><select idref="V-271766" selected="true" /><select idref="V-271768" selected="true" /><select idref="V-271769" selected="true" /><select idref="V-271770" selected="true" /><select idref="V-271771" selected="true" /><select idref="V-271772" selected="true" /><select idref="V-271773" selected="true" /><select idref="V-271774" selected="true" /><select idref="V-271775" selected="true" /><select idref="V-271776" selected="true" /><select idref="V-271777" selected="true" /><select idref="V-271778" selected="true" /><select idref="V-271779" selected="true" /><select idref="V-271780" selected="true" /><select idref="V-271781" selected="true" /><select idref="V-271782" selected="true" /><select idref="V-271783" selected="true" /><select idref="V-271784" selected="true" /><select idref="V-271785" selected="true" /><select idref="V-271786" selected="true" /><select idref="V-271787" selected="true" /><select idref="V-271788" selected="true" /><select idref="V-271789" selected="true" /><select idref="V-271790" selected="true" /><select idref="V-271791" selected="true" /><select idref="V-271792" selected="true" /><select idref="V-271793" selected="true" /><select idref="V-271794" selected="true" /><select idref="V-271795" selected="true" /><select idref="V-271796" selected="true" /><select idref="V-271797" selected="true" /><select idref="V-271798" selected="true" /><select idref="V-271799" selected="true" /><select idref="V-271800" selected="true" /><select idref="V-271801" selected="true" /><select idref="V-271802" selected="true" /><select idref="V-271803" selected="true" /><select idref="V-271804" selected="true" /><select idref="V-271805" selected="true" /><select idref="V-271806" selected="true" /><select idref="V-271807" selected="true" /><select idref="V-271808" selected="true" /><select idref="V-271809" selected="true" /><select idref="V-271810" selected="true" /><select idref="V-271811" selected="true" /><select idref="V-271812" selected="true" /><select idref="V-271813" selected="true" /><select idref="V-271814" selected="true" /><select idref="V-271815" selected="true" /><select idref="V-271816" selected="true" /><select idref="V-271817" selected="true" /><select idref="V-271818" selected="true" /><select idref="V-271819" selected="true" /><select idref="V-271820" selected="true" /><select idref="V-271821" selected="true" /><select idref="V-271822" selected="true" /><select idref="V-271823" selected="true" /><select idref="V-271824" selected="true" /><select idref="V-271825" selected="true" /><select idref="V-271826" selected="true" /><select idref="V-271827" selected="true" /><select idref="V-271828" selected="true" /><select idref="V-271829" selected="true" /><select idref="V-271830" selected="true" /><select idref="V-271831" selected="true" /><select idref="V-271832" selected="true" /><select idref="V-271833" selected="true" /><select idref="V-271834" selected="true" /><select idref="V-271835" selected="true" /><select idref="V-271836" selected="true" /><select idref="V-271837" selected="true" /><select idref="V-271838" selected="true" /><select idref="V-271839" selected="true" /><select idref="V-271840" selected="true" /><select idref="V-271841" selected="true" /><select idref="V-271842" selected="true" /><select idref="V-271843" selected="true" /><select idref="V-271844" selected="true" /><select idref="V-271845" selected="true" /><select idref="V-271846" selected="true" /><select idref="V-271847" selected="true" /><select idref="V-271848" selected="true" /><select idref="V-271849" selected="true" /><select idref="V-271850" selected="true" /><select idref="V-271851" selected="true" /><select idref="V-271852" selected="true" /><select idref="V-271853" selected="true" /><select idref="V-271854" selected="true" /><select idref="V-271855" selected="true" /><select idref="V-271856" selected="true" /><select idref="V-271857" selected="true" /><select idref="V-271858" selected="true" /><select idref="V-271859" selected="true" /><select idref="V-271860" selected="true" /><select idref="V-271861" selected="true" /><select idref="V-271862" selected="true" /><select idref="V-271863" selected="true" /><select idref="V-271864" selected="true" /><select idref="V-271865" selected="true" /><select idref="V-271866" selected="true" /><select idref="V-271867" selected="true" /><select idref="V-271868" selected="true" /><select idref="V-271869" selected="true" /><select idref="V-271870" selected="true" /><select idref="V-271871" selected="true" /><select idref="V-271872" selected="true" /><select idref="V-271873" selected="true" /><select idref="V-271874" selected="true" /><select idref="V-271875" selected="true" /><select idref="V-271876" selected="true" /><select idref="V-271877" selected="true" /><select idref="V-271878" selected="true" /><select idref="V-271879" selected="true" /><select idref="V-271880" selected="true" /><select idref="V-271881" selected="true" /><select idref="V-271882" selected="true" /><select idref="V-271883" selected="true" /><select idref="V-271884" selected="true" /><select idref="V-271885" selected="true" /><select idref="V-271886" selected="true" /><select idref="V-271901" selected="true" /><select idref="V-278952" selected="true" /></Profile><Profile id="MAC-3_Sensitive"><title>III - Administrative Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-271431" selected="true" /><select idref="V-271432" selected="true" /><select idref="V-271433" selected="true" /><select idref="V-271434" selected="true" /><select idref="V-271435" selected="true" /><select idref="V-271436" selected="true" /><select idref="V-271437" selected="true" /><select idref="V-271438" selected="true" /><select idref="V-271439" selected="true" /><select idref="V-271440" selected="true" /><select idref="V-271441" selected="true" /><select idref="V-271442" selected="true" /><select idref="V-271443" selected="true" /><select idref="V-271444" selected="true" /><select idref="V-271445" selected="true" /><select idref="V-271446" selected="true" /><select idref="V-271447" selected="true" /><select idref="V-271448" selected="true" /><select idref="V-271449" selected="true" /><select idref="V-271450" selected="true" /><select idref="V-271451" selected="true" /><select idref="V-271452" selected="true" /><select idref="V-271453" selected="true" /><select idref="V-271454" selected="true" /><select idref="V-271455" selected="true" /><select idref="V-271456" selected="true" /><select idref="V-271457" selected="true" /><select idref="V-271458" selected="true" /><select idref="V-271459" selected="true" /><select idref="V-271460" selected="true" /><select idref="V-271461" selected="true" /><select idref="V-271462" selected="true" /><select idref="V-271463" selected="true" /><select idref="V-271464" selected="true" /><select idref="V-271465" selected="true" /><select idref="V-271466" selected="true" /><select idref="V-271467" selected="true" /><select idref="V-271468" selected="true" /><select idref="V-271469" selected="true" /><select idref="V-271470" selected="true" /><select idref="V-271471" selected="true" /><select idref="V-271472" selected="true" /><select idref="V-271473" selected="true" /><select idref="V-271474" selected="true" /><select idref="V-271475" selected="true" /><select idref="V-271476" selected="true" /><select idref="V-271477" selected="true" /><select idref="V-271478" selected="true" /><select idref="V-271479" selected="true" /><select idref="V-271480" selected="true" /><select idref="V-271481" selected="true" /><select idref="V-271482" selected="true" /><select idref="V-271483" selected="true" /><select idref="V-271484" selected="true" /><select idref="V-271485" selected="true" /><select idref="V-271486" selected="true" /><select idref="V-271487" selected="true" /><select idref="V-271488" selected="true" /><select idref="V-271489" selected="true" /><select idref="V-271490" selected="true" /><select idref="V-271491" selected="true" /><select idref="V-271492" selected="true" /><select idref="V-271493" selected="true" /><select idref="V-271494" selected="true" /><select idref="V-271495" selected="true" /><select idref="V-271496" selected="true" /><select idref="V-271497" selected="true" /><select idref="V-271498" selected="true" /><select idref="V-271499" selected="true" /><select idref="V-271500" selected="true" /><select idref="V-271501" selected="true" /><select idref="V-271502" selected="true" /><select idref="V-271503" selected="true" /><select idref="V-271504" selected="true" /><select idref="V-271505" selected="true" /><select idref="V-271506" selected="true" /><select idref="V-271507" selected="true" /><select idref="V-271508" selected="true" /><select idref="V-271509" selected="true" /><select idref="V-271510" selected="true" /><select idref="V-271511" selected="true" /><select idref="V-271512" selected="true" /><select idref="V-271513" selected="true" /><select idref="V-271514" selected="true" /><select idref="V-271515" selected="true" /><select idref="V-271516" selected="true" /><select idref="V-271517" selected="true" /><select idref="V-271518" selected="true" /><select idref="V-271519" selected="true" /><select idref="V-271520" selected="true" /><select idref="V-271521" selected="true" /><select idref="V-271522" selected="true" /><select idref="V-271523" selected="true" /><select idref="V-271524" selected="true" /><select idref="V-271525" selected="true" /><select idref="V-271526" selected="true" /><select idref="V-271527" selected="true" /><select idref="V-271528" selected="true" /><select idref="V-271529" selected="true" /><select idref="V-271530" selected="true" /><select idref="V-271531" selected="true" /><select idref="V-271532" selected="true" /><select idref="V-271533" selected="true" /><select idref="V-271534" selected="true" /><select idref="V-271535" selected="true" /><select idref="V-271536" selected="true" /><select idref="V-271537" selected="true" /><select idref="V-271538" selected="true" /><select idref="V-271539" selected="true" /><select idref="V-271540" selected="true" /><select idref="V-271541" selected="true" /><select idref="V-271542" selected="true" /><select idref="V-271543" selected="true" /><select idref="V-271544" selected="true" /><select idref="V-271545" selected="true" /><select idref="V-271546" selected="true" /><select idref="V-271547" selected="true" /><select idref="V-271548" selected="true" /><select idref="V-271549" selected="true" /><select idref="V-271550" selected="true" /><select idref="V-271551" selected="true" /><select idref="V-271552" selected="true" /><select idref="V-271553" selected="true" /><select idref="V-271554" selected="true" /><select idref="V-271555" selected="true" /><select idref="V-271556" selected="true" /><select idref="V-271557" selected="true" /><select idref="V-271558" selected="true" /><select idref="V-271559" selected="true" /><select idref="V-271560" selected="true" /><select idref="V-271561" selected="true" /><select idref="V-271562" selected="true" /><select idref="V-271563" selected="true" /><select idref="V-271564" selected="true" /><select idref="V-271565" selected="true" /><select idref="V-271566" selected="true" /><select idref="V-271567" selected="true" /><select idref="V-271568" selected="true" /><select idref="V-271569" selected="true" /><select idref="V-271570" selected="true" /><select idref="V-271571" selected="true" /><select idref="V-271572" selected="true" /><select idref="V-271573" selected="true" /><select idref="V-271574" selected="true" /><select idref="V-271575" selected="true" /><select idref="V-271576" selected="true" /><select idref="V-271577" selected="true" /><select idref="V-271578" selected="true" /><select idref="V-271579" selected="true" /><select idref="V-271580" selected="true" /><select idref="V-271581" selected="true" /><select idref="V-271582" selected="true" /><select idref="V-271583" selected="true" /><select idref="V-271584" selected="true" /><select idref="V-271585" selected="true" /><select idref="V-271586" selected="true" /><select idref="V-271587" selected="true" /><select idref="V-271588" selected="true" /><select idref="V-271589" selected="true" /><select idref="V-271590" selected="true" /><select idref="V-271591" selected="true" /><select idref="V-271592" selected="true" /><select idref="V-271593" selected="true" /><select idref="V-271594" selected="true" /><select idref="V-271595" selected="true" /><select idref="V-271596" selected="true" /><select idref="V-271597" selected="true" /><select idref="V-271598" selected="true" /><select idref="V-271599" selected="true" /><select idref="V-271600" selected="true" /><select idref="V-271601" selected="true" /><select idref="V-271602" selected="true" /><select idref="V-271603" selected="true" /><select idref="V-271604" selected="true" /><select idref="V-271605" selected="true" /><select idref="V-271606" selected="true" /><select idref="V-271607" selected="true" /><select idref="V-271608" selected="true" /><select idref="V-271609" selected="true" /><select idref="V-271610" selected="true" /><select idref="V-271611" selected="true" /><select idref="V-271612" selected="true" /><select idref="V-271613" selected="true" /><select idref="V-271614" selected="true" /><select idref="V-271615" selected="true" /><select idref="V-271616" selected="true" /><select idref="V-271617" selected="true" /><select idref="V-271618" selected="true" /><select idref="V-271619" selected="true" /><select idref="V-271620" selected="true" /><select idref="V-271621" selected="true" /><select idref="V-271622" selected="true" /><select idref="V-271623" selected="true" /><select idref="V-271624" selected="true" /><select idref="V-271625" selected="true" /><select idref="V-271626" selected="true" /><select idref="V-271627" selected="true" /><select idref="V-271628" selected="true" /><select idref="V-271629" selected="true" /><select idref="V-271630" selected="true" /><select idref="V-271631" selected="true" /><select idref="V-271632" selected="true" /><select idref="V-271633" selected="true" /><select idref="V-271634" selected="true" /><select idref="V-271635" selected="true" /><select idref="V-271636" selected="true" /><select idref="V-271637" selected="true" /><select idref="V-271638" selected="true" /><select idref="V-271639" selected="true" /><select idref="V-271640" selected="true" /><select idref="V-271641" selected="true" /><select idref="V-271642" selected="true" /><select idref="V-271643" selected="true" /><select idref="V-271644" selected="true" /><select idref="V-271645" selected="true" /><select idref="V-271646" selected="true" /><select idref="V-271647" selected="true" /><select idref="V-271648" selected="true" /><select idref="V-271649" selected="true" /><select idref="V-271650" selected="true" /><select idref="V-271651" selected="true" /><select idref="V-271652" selected="true" /><select idref="V-271653" selected="true" /><select idref="V-271654" selected="true" /><select idref="V-271655" selected="true" /><select idref="V-271656" selected="true" /><select idref="V-271657" selected="true" /><select idref="V-271658" selected="true" /><select idref="V-271659" selected="true" /><select idref="V-271660" selected="true" /><select idref="V-271661" selected="true" /><select idref="V-271662" selected="true" /><select idref="V-271663" selected="true" /><select idref="V-271664" selected="true" /><select idref="V-271665" selected="true" /><select idref="V-271666" selected="true" /><select idref="V-271667" selected="true" /><select idref="V-271668" selected="true" /><select idref="V-271669" selected="true" /><select idref="V-271670" selected="true" /><select idref="V-271671" selected="true" /><select idref="V-271672" selected="true" /><select idref="V-271673" selected="true" /><select idref="V-271674" selected="true" /><select idref="V-271676" selected="true" /><select idref="V-271677" selected="true" /><select idref="V-271678" selected="true" /><select idref="V-271679" selected="true" /><select idref="V-271680" selected="true" /><select idref="V-271681" selected="true" /><select idref="V-271682" selected="true" /><select idref="V-271683" selected="true" /><select idref="V-271684" selected="true" /><select idref="V-271685" selected="true" /><select idref="V-271686" selected="true" /><select idref="V-271687" selected="true" /><select idref="V-271688" selected="true" /><select idref="V-271689" selected="true" /><select idref="V-271690" selected="true" /><select idref="V-271691" selected="true" /><select idref="V-271692" selected="true" /><select idref="V-271693" selected="true" /><select idref="V-271694" selected="true" /><select idref="V-271695" selected="true" /><select idref="V-271696" selected="true" /><select idref="V-271697" selected="true" /><select idref="V-271698" selected="true" /><select idref="V-271699" selected="true" /><select idref="V-271700" selected="true" /><select idref="V-271701" selected="true" /><select idref="V-271703" selected="true" /><select idref="V-271704" selected="true" /><select idref="V-271705" selected="true" /><select idref="V-271706" selected="true" /><select idref="V-271707" selected="true" /><select idref="V-271708" selected="true" /><select idref="V-271709" selected="true" /><select idref="V-271710" selected="true" /><select idref="V-271711" selected="true" /><select idref="V-271712" selected="true" /><select idref="V-271713" selected="true" /><select idref="V-271714" selected="true" /><select idref="V-271715" selected="true" /><select idref="V-271716" selected="true" /><select idref="V-271717" selected="true" /><select idref="V-271718" selected="true" /><select idref="V-271719" selected="true" /><select idref="V-271720" selected="true" /><select idref="V-271721" selected="true" /><select idref="V-271722" selected="true" /><select idref="V-271723" selected="true" /><select idref="V-271724" selected="true" /><select idref="V-271725" selected="true" /><select idref="V-271726" selected="true" /><select idref="V-271727" selected="true" /><select idref="V-271728" selected="true" /><select idref="V-271729" selected="true" /><select idref="V-271730" selected="true" /><select idref="V-271731" selected="true" /><select idref="V-271732" selected="true" /><select idref="V-271733" selected="true" /><select idref="V-271734" selected="true" /><select idref="V-271735" selected="true" /><select idref="V-271736" selected="true" /><select idref="V-271737" selected="true" /><select idref="V-271738" selected="true" /><select idref="V-271739" selected="true" /><select idref="V-271740" selected="true" /><select idref="V-271741" selected="true" /><select idref="V-271742" selected="true" /><select idref="V-271743" selected="true" /><select idref="V-271744" selected="true" /><select idref="V-271745" selected="true" /><select idref="V-271746" selected="true" /><select idref="V-271747" selected="true" /><select idref="V-271748" selected="true" /><select idref="V-271749" selected="true" /><select idref="V-271750" selected="true" /><select idref="V-271751" selected="true" /><select idref="V-271752" selected="true" /><select idref="V-271753" selected="true" /><select idref="V-271754" selected="true" /><select idref="V-271755" selected="true" /><select idref="V-271756" selected="true" /><select idref="V-271757" selected="true" /><select idref="V-271758" selected="true" /><select idref="V-271759" selected="true" /><select idref="V-271760" selected="true" /><select idref="V-271761" selected="true" /><select idref="V-271762" selected="true" /><select idref="V-271763" selected="true" /><select idref="V-271764" selected="true" /><select idref="V-271765" selected="true" /><select idref="V-271766" selected="true" /><select idref="V-271768" selected="true" /><select idref="V-271769" selected="true" /><select idref="V-271770" selected="true" /><select idref="V-271771" selected="true" /><select idref="V-271772" selected="true" /><select idref="V-271773" selected="true" /><select idref="V-271774" selected="true" /><select idref="V-271775" selected="true" /><select idref="V-271776" selected="true" /><select idref="V-271777" selected="true" /><select idref="V-271778" selected="true" /><select idref="V-271779" selected="true" /><select idref="V-271780" selected="true" /><select idref="V-271781" selected="true" /><select idref="V-271782" selected="true" /><select idref="V-271783" selected="true" /><select idref="V-271784" selected="true" /><select idref="V-271785" selected="true" /><select idref="V-271786" selected="true" /><select idref="V-271787" selected="true" /><select idref="V-271788" selected="true" /><select idref="V-271789" selected="true" /><select idref="V-271790" selected="true" /><select idref="V-271791" selected="true" /><select idref="V-271792" selected="true" /><select idref="V-271793" selected="true" /><select idref="V-271794" selected="true" /><select idref="V-271795" selected="true" /><select idref="V-271796" selected="true" /><select idref="V-271797" selected="true" /><select idref="V-271798" selected="true" /><select idref="V-271799" selected="true" /><select idref="V-271800" selected="true" /><select idref="V-271801" selected="true" /><select idref="V-271802" selected="true" /><select idref="V-271803" selected="true" /><select idref="V-271804" selected="true" /><select idref="V-271805" selected="true" /><select idref="V-271806" selected="true" /><select idref="V-271807" selected="true" /><select idref="V-271808" selected="true" /><select idref="V-271809" selected="true" /><select idref="V-271810" selected="true" /><select idref="V-271811" selected="true" /><select idref="V-271812" selected="true" /><select idref="V-271813" selected="true" /><select idref="V-271814" selected="true" /><select idref="V-271815" selected="true" /><select idref="V-271816" selected="true" /><select idref="V-271817" selected="true" /><select idref="V-271818" selected="true" /><select idref="V-271819" selected="true" /><select idref="V-271820" selected="true" /><select idref="V-271821" selected="true" /><select idref="V-271822" selected="true" /><select idref="V-271823" selected="true" /><select idref="V-271824" selected="true" /><select idref="V-271825" selected="true" /><select idref="V-271826" selected="true" /><select idref="V-271827" selected="true" /><select idref="V-271828" selected="true" /><select idref="V-271829" selected="true" /><select idref="V-271830" selected="true" /><select idref="V-271831" selected="true" /><select idref="V-271832" selected="true" /><select idref="V-271833" selected="true" /><select idref="V-271834" selected="true" /><select idref="V-271835" selected="true" /><select idref="V-271836" selected="true" /><select idref="V-271837" selected="true" /><select idref="V-271838" selected="true" /><select idref="V-271839" selected="true" /><select idref="V-271840" selected="true" /><select idref="V-271841" selected="true" /><select idref="V-271842" selected="true" /><select idref="V-271843" selected="true" /><select idref="V-271844" selected="true" /><select idref="V-271845" selected="true" /><select idref="V-271846" selected="true" /><select idref="V-271847" selected="true" /><select idref="V-271848" selected="true" /><select idref="V-271849" selected="true" /><select idref="V-271850" selected="true" /><select idref="V-271851" selected="true" /><select idref="V-271852" selected="true" /><select idref="V-271853" selected="true" /><select idref="V-271854" selected="true" /><select idref="V-271855" selected="true" /><select idref="V-271856" selected="true" /><select idref="V-271857" selected="true" /><select idref="V-271858" selected="true" /><select idref="V-271859" selected="true" /><select idref="V-271860" selected="true" /><select idref="V-271861" selected="true" /><select idref="V-271862" selected="true" /><select idref="V-271863" selected="true" /><select idref="V-271864" selected="true" /><select idref="V-271865" selected="true" /><select idref="V-271866" selected="true" /><select idref="V-271867" selected="true" /><select idref="V-271868" selected="true" /><select idref="V-271869" selected="true" /><select idref="V-271870" selected="true" /><select idref="V-271871" selected="true" /><select idref="V-271872" selected="true" /><select idref="V-271873" selected="true" /><select idref="V-271874" selected="true" /><select idref="V-271875" selected="true" /><select idref="V-271876" selected="true" /><select idref="V-271877" selected="true" /><select idref="V-271878" selected="true" /><select idref="V-271879" selected="true" /><select idref="V-271880" selected="true" /><select idref="V-271881" selected="true" /><select idref="V-271882" selected="true" /><select idref="V-271883" selected="true" /><select idref="V-271884" selected="true" /><select idref="V-271885" selected="true" /><select idref="V-271886" selected="true" /><select idref="V-271901" selected="true" /><select idref="V-278952" selected="true" /></Profile><Group id="V-271431"><title>SRG-OS-000780-GPOS-00240</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271431r1092616_rule" weight="10.0" severity="medium"><version>OL09-00-000001</version><title>The OL 9 operating system must implement cryptographic mechanisms to prevent unauthorized modification of all information at rest.</title><description>&lt;VulnDiscussion&gt;Operating systems handling data requiring "data at rest" protections must employ cryptographic mechanisms to prevent unauthorized disclosure and modification of the information at rest. 
+<?xml version="1.0" encoding="utf-8"?><?xml-stylesheet type='text/xsl' href='STIG_unclass.xsl'?><Benchmark xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.1 http://nvd.nist.gov/schema/xccdf-1.1.4.xsd http://cpe.mitre.org/dictionary/2.0 http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd" id="Oracle_Linux_9_STIG" xml:lang="en" xmlns="http://checklists.nist.gov/xccdf/1.1"><status date="2025-12-22">accepted</status><title>Oracle Linux 9 Security Technical Implementation Guide</title><description>This Security Technical Implementation Guide is published as a tool to improve the security of Department of Defense (DOD) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.</description><notice id="terms-of-use" xml:lang="en"></notice><front-matter xml:lang="en"></front-matter><rear-matter xml:lang="en"></rear-matter><reference href="https://cyber.mil"><dc:publisher>DISA</dc:publisher><dc:source>STIG.DOD.MIL</dc:source></reference><plain-text id="release-info">Release: 4 Benchmark Date: 05 Jan 2026</plain-text><plain-text id="generator">3.5.2</plain-text><plain-text id="conventionsVersion">1.10.0</plain-text><version>1</version><Profile id="MAC-1_Classified"><title>I - Mission Critical Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-271431" selected="true" /><select idref="V-271432" selected="true" /><select idref="V-271433" selected="true" /><select idref="V-271434" selected="true" /><select idref="V-271435" selected="true" /><select idref="V-271436" selected="true" /><select idref="V-271437" selected="true" /><select idref="V-271438" selected="true" /><select idref="V-271439" selected="true" /><select idref="V-271440" selected="true" /><select idref="V-271441" selected="true" /><select idref="V-271442" selected="true" /><select idref="V-271443" selected="true" /><select idref="V-271444" selected="true" /><select idref="V-271445" selected="true" /><select idref="V-271446" selected="true" /><select idref="V-271447" selected="true" /><select idref="V-271448" selected="true" /><select idref="V-271449" selected="true" /><select idref="V-271450" selected="true" /><select idref="V-271451" selected="true" /><select idref="V-271452" selected="true" /><select idref="V-271453" selected="true" /><select idref="V-271454" selected="true" /><select idref="V-271455" selected="true" /><select idref="V-271456" selected="true" /><select idref="V-271457" selected="true" /><select idref="V-271458" selected="true" /><select idref="V-271459" selected="true" /><select idref="V-271460" selected="true" /><select idref="V-271461" selected="true" /><select idref="V-271462" selected="true" /><select idref="V-271463" selected="true" /><select idref="V-271464" selected="true" /><select idref="V-271465" selected="true" /><select idref="V-271466" selected="true" /><select idref="V-271467" selected="true" /><select idref="V-271468" selected="true" /><select idref="V-271469" selected="true" /><select idref="V-271470" selected="true" /><select idref="V-271471" selected="true" /><select idref="V-271472" selected="true" /><select idref="V-271473" selected="true" /><select idref="V-271474" selected="true" /><select idref="V-271475" selected="true" /><select idref="V-271476" selected="true" /><select idref="V-271477" selected="true" /><select idref="V-271478" selected="true" /><select idref="V-271479" selected="true" /><select idref="V-271480" selected="true" /><select idref="V-271481" selected="true" /><select idref="V-271482" selected="true" /><select idref="V-271483" selected="true" /><select idref="V-271484" selected="true" /><select idref="V-271485" selected="true" /><select idref="V-271486" selected="true" /><select idref="V-271487" selected="true" /><select idref="V-271488" selected="true" /><select idref="V-271489" selected="true" /><select idref="V-271490" selected="true" /><select idref="V-271491" selected="true" /><select idref="V-271492" selected="true" /><select idref="V-271493" selected="true" /><select idref="V-271494" selected="true" /><select idref="V-271495" selected="true" /><select idref="V-271496" selected="true" /><select idref="V-271497" selected="true" /><select idref="V-271498" selected="true" /><select idref="V-271499" selected="true" /><select idref="V-271500" selected="true" /><select idref="V-271501" selected="true" /><select idref="V-271502" selected="true" /><select idref="V-271503" selected="true" /><select idref="V-271504" selected="true" /><select idref="V-271505" selected="true" /><select idref="V-271506" selected="true" /><select idref="V-271507" selected="true" /><select idref="V-271508" selected="true" /><select idref="V-271509" selected="true" /><select idref="V-271510" selected="true" /><select idref="V-271511" selected="true" /><select idref="V-271512" selected="true" /><select idref="V-271513" selected="true" /><select idref="V-271514" selected="true" /><select idref="V-271515" selected="true" /><select idref="V-271516" selected="true" /><select idref="V-271517" selected="true" /><select idref="V-271518" selected="true" /><select idref="V-271519" selected="true" /><select idref="V-271520" selected="true" /><select idref="V-271521" selected="true" /><select idref="V-271522" selected="true" /><select idref="V-271523" selected="true" /><select idref="V-271524" selected="true" /><select idref="V-271525" selected="true" /><select idref="V-271526" selected="true" /><select idref="V-271527" selected="true" /><select idref="V-271528" selected="true" /><select idref="V-271529" selected="true" /><select idref="V-271530" selected="true" /><select idref="V-271531" selected="true" /><select idref="V-271532" selected="true" /><select idref="V-271533" selected="true" /><select idref="V-271534" selected="true" /><select idref="V-271535" selected="true" /><select idref="V-271536" selected="true" /><select idref="V-271537" selected="true" /><select idref="V-271538" selected="true" /><select idref="V-271539" selected="true" /><select idref="V-271540" selected="true" /><select idref="V-271541" selected="true" /><select idref="V-271542" selected="true" /><select idref="V-271543" selected="true" /><select idref="V-271544" selected="true" /><select idref="V-271545" selected="true" /><select idref="V-271546" selected="true" /><select idref="V-271547" selected="true" /><select idref="V-271548" selected="true" /><select idref="V-271549" selected="true" /><select idref="V-271550" selected="true" /><select idref="V-271551" selected="true" /><select idref="V-271552" selected="true" /><select idref="V-271553" selected="true" /><select idref="V-271554" selected="true" /><select idref="V-271555" selected="true" /><select idref="V-271556" selected="true" /><select idref="V-271557" selected="true" /><select idref="V-271558" selected="true" /><select idref="V-271559" selected="true" /><select idref="V-271560" selected="true" /><select idref="V-271561" selected="true" /><select idref="V-271562" selected="true" /><select idref="V-271563" selected="true" /><select idref="V-271564" selected="true" /><select idref="V-271565" selected="true" /><select idref="V-271566" selected="true" /><select idref="V-271567" selected="true" /><select idref="V-271568" selected="true" /><select idref="V-271569" selected="true" /><select idref="V-271570" selected="true" /><select idref="V-271571" selected="true" /><select idref="V-271572" selected="true" /><select idref="V-271573" selected="true" /><select idref="V-271574" selected="true" /><select idref="V-271575" selected="true" /><select idref="V-271576" selected="true" /><select idref="V-271577" selected="true" /><select idref="V-271578" selected="true" /><select idref="V-271579" selected="true" /><select idref="V-271580" selected="true" /><select idref="V-271581" selected="true" /><select idref="V-271582" selected="true" /><select idref="V-271583" selected="true" /><select idref="V-271584" selected="true" /><select idref="V-271585" selected="true" /><select idref="V-271586" selected="true" /><select idref="V-271587" selected="true" /><select idref="V-271588" selected="true" /><select idref="V-271589" selected="true" /><select idref="V-271590" selected="true" /><select idref="V-271591" selected="true" /><select idref="V-271592" selected="true" /><select idref="V-271593" selected="true" /><select idref="V-271594" selected="true" /><select idref="V-271595" selected="true" /><select idref="V-271596" selected="true" /><select idref="V-271597" selected="true" /><select idref="V-271598" selected="true" /><select idref="V-271599" selected="true" /><select idref="V-271600" selected="true" /><select idref="V-271601" selected="true" /><select idref="V-271602" selected="true" /><select idref="V-271603" selected="true" /><select idref="V-271604" selected="true" /><select idref="V-271605" selected="true" /><select idref="V-271606" selected="true" /><select idref="V-271607" selected="true" /><select idref="V-271608" selected="true" /><select idref="V-271609" selected="true" /><select idref="V-271610" selected="true" /><select idref="V-271611" selected="true" /><select idref="V-271612" selected="true" /><select idref="V-271613" selected="true" /><select idref="V-271614" selected="true" /><select idref="V-271615" selected="true" /><select idref="V-271616" selected="true" /><select idref="V-271617" selected="true" /><select idref="V-271618" selected="true" /><select idref="V-271619" selected="true" /><select idref="V-271620" selected="true" /><select idref="V-271621" selected="true" /><select idref="V-271622" selected="true" /><select idref="V-271623" selected="true" /><select idref="V-271624" selected="true" /><select idref="V-271625" selected="true" /><select idref="V-271626" selected="true" /><select idref="V-271627" selected="true" /><select idref="V-271628" selected="true" /><select idref="V-271629" selected="true" /><select idref="V-271630" selected="true" /><select idref="V-271631" selected="true" /><select idref="V-271632" selected="true" /><select idref="V-271633" selected="true" /><select idref="V-271634" selected="true" /><select idref="V-271635" selected="true" /><select idref="V-271636" selected="true" /><select idref="V-271637" selected="true" /><select idref="V-271638" selected="true" /><select idref="V-271639" selected="true" /><select idref="V-271641" selected="true" /><select idref="V-271642" selected="true" /><select idref="V-271643" selected="true" /><select idref="V-271644" selected="true" /><select idref="V-271645" selected="true" /><select idref="V-271646" selected="true" /><select idref="V-271647" selected="true" /><select idref="V-271648" selected="true" /><select idref="V-271649" selected="true" /><select idref="V-271650" selected="true" /><select idref="V-271651" selected="true" /><select idref="V-271652" selected="true" /><select idref="V-271653" selected="true" /><select idref="V-271654" selected="true" /><select idref="V-271655" selected="true" /><select idref="V-271656" selected="true" /><select idref="V-271657" selected="true" /><select idref="V-271658" selected="true" /><select idref="V-271659" selected="true" /><select idref="V-271660" selected="true" /><select idref="V-271661" selected="true" /><select idref="V-271662" selected="true" /><select idref="V-271663" selected="true" /><select idref="V-271664" selected="true" /><select idref="V-271665" selected="true" /><select idref="V-271666" selected="true" /><select idref="V-271667" selected="true" /><select idref="V-271668" selected="true" /><select idref="V-271669" selected="true" /><select idref="V-271670" selected="true" /><select idref="V-271671" selected="true" /><select idref="V-271672" selected="true" /><select idref="V-271673" selected="true" /><select idref="V-271674" selected="true" /><select idref="V-271676" selected="true" /><select idref="V-271677" selected="true" /><select idref="V-271678" selected="true" /><select idref="V-271679" selected="true" /><select idref="V-271680" selected="true" /><select idref="V-271681" selected="true" /><select idref="V-271682" selected="true" /><select idref="V-271683" selected="true" /><select idref="V-271684" selected="true" /><select idref="V-271685" selected="true" /><select idref="V-271686" selected="true" /><select idref="V-271687" selected="true" /><select idref="V-271688" selected="true" /><select idref="V-271689" selected="true" /><select idref="V-271690" selected="true" /><select idref="V-271691" selected="true" /><select idref="V-271692" selected="true" /><select idref="V-271693" selected="true" /><select idref="V-271694" selected="true" /><select idref="V-271695" selected="true" /><select idref="V-271696" selected="true" /><select idref="V-271697" selected="true" /><select idref="V-271698" selected="true" /><select idref="V-271699" selected="true" /><select idref="V-271700" selected="true" /><select idref="V-271701" selected="true" /><select idref="V-271703" selected="true" /><select idref="V-271704" selected="true" /><select idref="V-271705" selected="true" /><select idref="V-271706" selected="true" /><select idref="V-271707" selected="true" /><select idref="V-271708" selected="true" /><select idref="V-271709" selected="true" /><select idref="V-271710" selected="true" /><select idref="V-271711" selected="true" /><select idref="V-271712" selected="true" /><select idref="V-271713" selected="true" /><select idref="V-271714" selected="true" /><select idref="V-271715" selected="true" /><select idref="V-271716" selected="true" /><select idref="V-271717" selected="true" /><select idref="V-271718" selected="true" /><select idref="V-271719" selected="true" /><select idref="V-271720" selected="true" /><select idref="V-271721" selected="true" /><select idref="V-271722" selected="true" /><select idref="V-271723" selected="true" /><select idref="V-271724" selected="true" /><select idref="V-271725" selected="true" /><select idref="V-271726" selected="true" /><select idref="V-271727" selected="true" /><select idref="V-271728" selected="true" /><select idref="V-271729" selected="true" /><select idref="V-271730" selected="true" /><select idref="V-271731" selected="true" /><select idref="V-271732" selected="true" /><select idref="V-271733" selected="true" /><select idref="V-271734" selected="true" /><select idref="V-271735" selected="true" /><select idref="V-271736" selected="true" /><select idref="V-271737" selected="true" /><select idref="V-271738" selected="true" /><select idref="V-271739" selected="true" /><select idref="V-271740" selected="true" /><select idref="V-271741" selected="true" /><select idref="V-271742" selected="true" /><select idref="V-271743" selected="true" /><select idref="V-271744" selected="true" /><select idref="V-271745" selected="true" /><select idref="V-271746" selected="true" /><select idref="V-271747" selected="true" /><select idref="V-271748" selected="true" /><select idref="V-271749" selected="true" /><select idref="V-271750" selected="true" /><select idref="V-271751" selected="true" /><select idref="V-271752" selected="true" /><select idref="V-271753" selected="true" /><select idref="V-271754" selected="true" /><select idref="V-271755" selected="true" /><select idref="V-271756" selected="true" /><select idref="V-271757" selected="true" /><select idref="V-271758" selected="true" /><select idref="V-271759" selected="true" /><select idref="V-271760" selected="true" /><select idref="V-271761" selected="true" /><select idref="V-271763" selected="true" /><select idref="V-271764" selected="true" /><select idref="V-271766" selected="true" /><select idref="V-271768" selected="true" /><select idref="V-271769" selected="true" /><select idref="V-271770" selected="true" /><select idref="V-271771" selected="true" /><select idref="V-271772" selected="true" /><select idref="V-271773" selected="true" /><select idref="V-271774" selected="true" /><select idref="V-271775" selected="true" /><select idref="V-271776" selected="true" /><select idref="V-271777" selected="true" /><select idref="V-271778" selected="true" /><select idref="V-271779" selected="true" /><select idref="V-271780" selected="true" /><select idref="V-271781" selected="true" /><select idref="V-271782" selected="true" /><select idref="V-271783" selected="true" /><select idref="V-271784" selected="true" /><select idref="V-271785" selected="true" /><select idref="V-271786" selected="true" /><select idref="V-271787" selected="true" /><select idref="V-271788" selected="true" /><select idref="V-271789" selected="true" /><select idref="V-271790" selected="true" /><select idref="V-271791" selected="true" /><select idref="V-271792" selected="true" /><select idref="V-271793" selected="true" /><select idref="V-271794" selected="true" /><select idref="V-271795" selected="true" /><select idref="V-271796" selected="true" /><select idref="V-271797" selected="true" /><select idref="V-271798" selected="true" /><select idref="V-271799" selected="true" /><select idref="V-271800" selected="true" /><select idref="V-271801" selected="true" /><select idref="V-271802" selected="true" /><select idref="V-271803" selected="true" /><select idref="V-271804" selected="true" /><select idref="V-271805" selected="true" /><select idref="V-271806" selected="true" /><select idref="V-271807" selected="true" /><select idref="V-271808" selected="true" /><select idref="V-271809" selected="true" /><select idref="V-271810" selected="true" /><select idref="V-271811" selected="true" /><select idref="V-271812" selected="true" /><select idref="V-271813" selected="true" /><select idref="V-271814" selected="true" /><select idref="V-271815" selected="true" /><select idref="V-271816" selected="true" /><select idref="V-271817" selected="true" /><select idref="V-271818" selected="true" /><select idref="V-271819" selected="true" /><select idref="V-271820" selected="true" /><select idref="V-271821" selected="true" /><select idref="V-271822" selected="true" /><select idref="V-271823" selected="true" /><select idref="V-271824" selected="true" /><select idref="V-271825" selected="true" /><select idref="V-271826" selected="true" /><select idref="V-271827" selected="true" /><select idref="V-271828" selected="true" /><select idref="V-271829" selected="true" /><select idref="V-271830" selected="true" /><select idref="V-271831" selected="true" /><select idref="V-271832" selected="true" /><select idref="V-271833" selected="true" /><select idref="V-271834" selected="true" /><select idref="V-271835" selected="true" /><select idref="V-271836" selected="true" /><select idref="V-271837" selected="true" /><select idref="V-271838" selected="true" /><select idref="V-271839" selected="true" /><select idref="V-271840" selected="true" /><select idref="V-271841" selected="true" /><select idref="V-271842" selected="true" /><select idref="V-271843" selected="true" /><select idref="V-271844" selected="true" /><select idref="V-271845" selected="true" /><select idref="V-271846" selected="true" /><select idref="V-271847" selected="true" /><select idref="V-271848" selected="true" /><select idref="V-271849" selected="true" /><select idref="V-271850" selected="true" /><select idref="V-271851" selected="true" /><select idref="V-271852" selected="true" /><select idref="V-271853" selected="true" /><select idref="V-271854" selected="true" /><select idref="V-271855" selected="true" /><select idref="V-271856" selected="true" /><select idref="V-271857" selected="true" /><select idref="V-271858" selected="true" /><select idref="V-271859" selected="true" /><select idref="V-271860" selected="true" /><select idref="V-271861" selected="true" /><select idref="V-271862" selected="true" /><select idref="V-271863" selected="true" /><select idref="V-271864" selected="true" /><select idref="V-271865" selected="true" /><select idref="V-271866" selected="true" /><select idref="V-271867" selected="true" /><select idref="V-271868" selected="true" /><select idref="V-271869" selected="true" /><select idref="V-271870" selected="true" /><select idref="V-271871" selected="true" /><select idref="V-271872" selected="true" /><select idref="V-271873" selected="true" /><select idref="V-271874" selected="true" /><select idref="V-271875" selected="true" /><select idref="V-271876" selected="true" /><select idref="V-271877" selected="true" /><select idref="V-271878" selected="true" /><select idref="V-271879" selected="true" /><select idref="V-271880" selected="true" /><select idref="V-271881" selected="true" /><select idref="V-271882" selected="true" /><select idref="V-271883" selected="true" /><select idref="V-271884" selected="true" /><select idref="V-271885" selected="true" /><select idref="V-271886" selected="true" /><select idref="V-271901" selected="true" /><select idref="V-278952" selected="true" /><select idref="V-279935" selected="true" /></Profile><Profile id="MAC-1_Public"><title>I - Mission Critical Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-271431" selected="true" /><select idref="V-271432" selected="true" /><select idref="V-271433" selected="true" /><select idref="V-271434" selected="true" /><select idref="V-271435" selected="true" /><select idref="V-271436" selected="true" /><select idref="V-271437" selected="true" /><select idref="V-271438" selected="true" /><select idref="V-271439" selected="true" /><select idref="V-271440" selected="true" /><select idref="V-271441" selected="true" /><select idref="V-271442" selected="true" /><select idref="V-271443" selected="true" /><select idref="V-271444" selected="true" /><select idref="V-271445" selected="true" /><select idref="V-271446" selected="true" /><select idref="V-271447" selected="true" /><select idref="V-271448" selected="true" /><select idref="V-271449" selected="true" /><select idref="V-271450" selected="true" /><select idref="V-271451" selected="true" /><select idref="V-271452" selected="true" /><select idref="V-271453" selected="true" /><select idref="V-271454" selected="true" /><select idref="V-271455" selected="true" /><select idref="V-271456" selected="true" /><select idref="V-271457" selected="true" /><select idref="V-271458" selected="true" /><select idref="V-271459" selected="true" /><select idref="V-271460" selected="true" /><select idref="V-271461" selected="true" /><select idref="V-271462" selected="true" /><select idref="V-271463" selected="true" /><select idref="V-271464" selected="true" /><select idref="V-271465" selected="true" /><select idref="V-271466" selected="true" /><select idref="V-271467" selected="true" /><select idref="V-271468" selected="true" /><select idref="V-271469" selected="true" /><select idref="V-271470" selected="true" /><select idref="V-271471" selected="true" /><select idref="V-271472" selected="true" /><select idref="V-271473" selected="true" /><select idref="V-271474" selected="true" /><select idref="V-271475" selected="true" /><select idref="V-271476" selected="true" /><select idref="V-271477" selected="true" /><select idref="V-271478" selected="true" /><select idref="V-271479" selected="true" /><select idref="V-271480" selected="true" /><select idref="V-271481" selected="true" /><select idref="V-271482" selected="true" /><select idref="V-271483" selected="true" /><select idref="V-271484" selected="true" /><select idref="V-271485" selected="true" /><select idref="V-271486" selected="true" /><select idref="V-271487" selected="true" /><select idref="V-271488" selected="true" /><select idref="V-271489" selected="true" /><select idref="V-271490" selected="true" /><select idref="V-271491" selected="true" /><select idref="V-271492" selected="true" /><select idref="V-271493" selected="true" /><select idref="V-271494" selected="true" /><select idref="V-271495" selected="true" /><select idref="V-271496" selected="true" /><select idref="V-271497" selected="true" /><select idref="V-271498" selected="true" /><select idref="V-271499" selected="true" /><select idref="V-271500" selected="true" /><select idref="V-271501" selected="true" /><select idref="V-271502" selected="true" /><select idref="V-271503" selected="true" /><select idref="V-271504" selected="true" /><select idref="V-271505" selected="true" /><select idref="V-271506" selected="true" /><select idref="V-271507" selected="true" /><select idref="V-271508" selected="true" /><select idref="V-271509" selected="true" /><select idref="V-271510" selected="true" /><select idref="V-271511" selected="true" /><select idref="V-271512" selected="true" /><select idref="V-271513" selected="true" /><select idref="V-271514" selected="true" /><select idref="V-271515" selected="true" /><select idref="V-271516" selected="true" /><select idref="V-271517" selected="true" /><select idref="V-271518" selected="true" /><select idref="V-271519" selected="true" /><select idref="V-271520" selected="true" /><select idref="V-271521" selected="true" /><select idref="V-271522" selected="true" /><select idref="V-271523" selected="true" /><select idref="V-271524" selected="true" /><select idref="V-271525" selected="true" /><select idref="V-271526" selected="true" /><select idref="V-271527" selected="true" /><select idref="V-271528" selected="true" /><select idref="V-271529" selected="true" /><select idref="V-271530" selected="true" /><select idref="V-271531" selected="true" /><select idref="V-271532" selected="true" /><select idref="V-271533" selected="true" /><select idref="V-271534" selected="true" /><select idref="V-271535" selected="true" /><select idref="V-271536" selected="true" /><select idref="V-271537" selected="true" /><select idref="V-271538" selected="true" /><select idref="V-271539" selected="true" /><select idref="V-271540" selected="true" /><select idref="V-271541" selected="true" /><select idref="V-271542" selected="true" /><select idref="V-271543" selected="true" /><select idref="V-271544" selected="true" /><select idref="V-271545" selected="true" /><select idref="V-271546" selected="true" /><select idref="V-271547" selected="true" /><select idref="V-271548" selected="true" /><select idref="V-271549" selected="true" /><select idref="V-271550" selected="true" /><select idref="V-271551" selected="true" /><select idref="V-271552" selected="true" /><select idref="V-271553" selected="true" /><select idref="V-271554" selected="true" /><select idref="V-271555" selected="true" /><select idref="V-271556" selected="true" /><select idref="V-271557" selected="true" /><select idref="V-271558" selected="true" /><select idref="V-271559" selected="true" /><select idref="V-271560" selected="true" /><select idref="V-271561" selected="true" /><select idref="V-271562" selected="true" /><select idref="V-271563" selected="true" /><select idref="V-271564" selected="true" /><select idref="V-271565" selected="true" /><select idref="V-271566" selected="true" /><select idref="V-271567" selected="true" /><select idref="V-271568" selected="true" /><select idref="V-271569" selected="true" /><select idref="V-271570" selected="true" /><select idref="V-271571" selected="true" /><select idref="V-271572" selected="true" /><select idref="V-271573" selected="true" /><select idref="V-271574" selected="true" /><select idref="V-271575" selected="true" /><select idref="V-271576" selected="true" /><select idref="V-271577" selected="true" /><select idref="V-271578" selected="true" /><select idref="V-271579" selected="true" /><select idref="V-271580" selected="true" /><select idref="V-271581" selected="true" /><select idref="V-271582" selected="true" /><select idref="V-271583" selected="true" /><select idref="V-271584" selected="true" /><select idref="V-271585" selected="true" /><select idref="V-271586" selected="true" /><select idref="V-271587" selected="true" /><select idref="V-271588" selected="true" /><select idref="V-271589" selected="true" /><select idref="V-271590" selected="true" /><select idref="V-271591" selected="true" /><select idref="V-271592" selected="true" /><select idref="V-271593" selected="true" /><select idref="V-271594" selected="true" /><select idref="V-271595" selected="true" /><select idref="V-271596" selected="true" /><select idref="V-271597" selected="true" /><select idref="V-271598" selected="true" /><select idref="V-271599" selected="true" /><select idref="V-271600" selected="true" /><select idref="V-271601" selected="true" /><select idref="V-271602" selected="true" /><select idref="V-271603" selected="true" /><select idref="V-271604" selected="true" /><select idref="V-271605" selected="true" /><select idref="V-271606" selected="true" /><select idref="V-271607" selected="true" /><select idref="V-271608" selected="true" /><select idref="V-271609" selected="true" /><select idref="V-271610" selected="true" /><select idref="V-271611" selected="true" /><select idref="V-271612" selected="true" /><select idref="V-271613" selected="true" /><select idref="V-271614" selected="true" /><select idref="V-271615" selected="true" /><select idref="V-271616" selected="true" /><select idref="V-271617" selected="true" /><select idref="V-271618" selected="true" /><select idref="V-271619" selected="true" /><select idref="V-271620" selected="true" /><select idref="V-271621" selected="true" /><select idref="V-271622" selected="true" /><select idref="V-271623" selected="true" /><select idref="V-271624" selected="true" /><select idref="V-271625" selected="true" /><select idref="V-271626" selected="true" /><select idref="V-271627" selected="true" /><select idref="V-271628" selected="true" /><select idref="V-271629" selected="true" /><select idref="V-271630" selected="true" /><select idref="V-271631" selected="true" /><select idref="V-271632" selected="true" /><select idref="V-271633" selected="true" /><select idref="V-271634" selected="true" /><select idref="V-271635" selected="true" /><select idref="V-271636" selected="true" /><select idref="V-271637" selected="true" /><select idref="V-271638" selected="true" /><select idref="V-271639" selected="true" /><select idref="V-271641" selected="true" /><select idref="V-271642" selected="true" /><select idref="V-271643" selected="true" /><select idref="V-271644" selected="true" /><select idref="V-271645" selected="true" /><select idref="V-271646" selected="true" /><select idref="V-271647" selected="true" /><select idref="V-271648" selected="true" /><select idref="V-271649" selected="true" /><select idref="V-271650" selected="true" /><select idref="V-271651" selected="true" /><select idref="V-271652" selected="true" /><select idref="V-271653" selected="true" /><select idref="V-271654" selected="true" /><select idref="V-271655" selected="true" /><select idref="V-271656" selected="true" /><select idref="V-271657" selected="true" /><select idref="V-271658" selected="true" /><select idref="V-271659" selected="true" /><select idref="V-271660" selected="true" /><select idref="V-271661" selected="true" /><select idref="V-271662" selected="true" /><select idref="V-271663" selected="true" /><select idref="V-271664" selected="true" /><select idref="V-271665" selected="true" /><select idref="V-271666" selected="true" /><select idref="V-271667" selected="true" /><select idref="V-271668" selected="true" /><select idref="V-271669" selected="true" /><select idref="V-271670" selected="true" /><select idref="V-271671" selected="true" /><select idref="V-271672" selected="true" /><select idref="V-271673" selected="true" /><select idref="V-271674" selected="true" /><select idref="V-271676" selected="true" /><select idref="V-271677" selected="true" /><select idref="V-271678" selected="true" /><select idref="V-271679" selected="true" /><select idref="V-271680" selected="true" /><select idref="V-271681" selected="true" /><select idref="V-271682" selected="true" /><select idref="V-271683" selected="true" /><select idref="V-271684" selected="true" /><select idref="V-271685" selected="true" /><select idref="V-271686" selected="true" /><select idref="V-271687" selected="true" /><select idref="V-271688" selected="true" /><select idref="V-271689" selected="true" /><select idref="V-271690" selected="true" /><select idref="V-271691" selected="true" /><select idref="V-271692" selected="true" /><select idref="V-271693" selected="true" /><select idref="V-271694" selected="true" /><select idref="V-271695" selected="true" /><select idref="V-271696" selected="true" /><select idref="V-271697" selected="true" /><select idref="V-271698" selected="true" /><select idref="V-271699" selected="true" /><select idref="V-271700" selected="true" /><select idref="V-271701" selected="true" /><select idref="V-271703" selected="true" /><select idref="V-271704" selected="true" /><select idref="V-271705" selected="true" /><select idref="V-271706" selected="true" /><select idref="V-271707" selected="true" /><select idref="V-271708" selected="true" /><select idref="V-271709" selected="true" /><select idref="V-271710" selected="true" /><select idref="V-271711" selected="true" /><select idref="V-271712" selected="true" /><select idref="V-271713" selected="true" /><select idref="V-271714" selected="true" /><select idref="V-271715" selected="true" /><select idref="V-271716" selected="true" /><select idref="V-271717" selected="true" /><select idref="V-271718" selected="true" /><select idref="V-271719" selected="true" /><select idref="V-271720" selected="true" /><select idref="V-271721" selected="true" /><select idref="V-271722" selected="true" /><select idref="V-271723" selected="true" /><select idref="V-271724" selected="true" /><select idref="V-271725" selected="true" /><select idref="V-271726" selected="true" /><select idref="V-271727" selected="true" /><select idref="V-271728" selected="true" /><select idref="V-271729" selected="true" /><select idref="V-271730" selected="true" /><select idref="V-271731" selected="true" /><select idref="V-271732" selected="true" /><select idref="V-271733" selected="true" /><select idref="V-271734" selected="true" /><select idref="V-271735" selected="true" /><select idref="V-271736" selected="true" /><select idref="V-271737" selected="true" /><select idref="V-271738" selected="true" /><select idref="V-271739" selected="true" /><select idref="V-271740" selected="true" /><select idref="V-271741" selected="true" /><select idref="V-271742" selected="true" /><select idref="V-271743" selected="true" /><select idref="V-271744" selected="true" /><select idref="V-271745" selected="true" /><select idref="V-271746" selected="true" /><select idref="V-271747" selected="true" /><select idref="V-271748" selected="true" /><select idref="V-271749" selected="true" /><select idref="V-271750" selected="true" /><select idref="V-271751" selected="true" /><select idref="V-271752" selected="true" /><select idref="V-271753" selected="true" /><select idref="V-271754" selected="true" /><select idref="V-271755" selected="true" /><select idref="V-271756" selected="true" /><select idref="V-271757" selected="true" /><select idref="V-271758" selected="true" /><select idref="V-271759" selected="true" /><select idref="V-271760" selected="true" /><select idref="V-271761" selected="true" /><select idref="V-271763" selected="true" /><select idref="V-271764" selected="true" /><select idref="V-271766" selected="true" /><select idref="V-271768" selected="true" /><select idref="V-271769" selected="true" /><select idref="V-271770" selected="true" /><select idref="V-271771" selected="true" /><select idref="V-271772" selected="true" /><select idref="V-271773" selected="true" /><select idref="V-271774" selected="true" /><select idref="V-271775" selected="true" /><select idref="V-271776" selected="true" /><select idref="V-271777" selected="true" /><select idref="V-271778" selected="true" /><select idref="V-271779" selected="true" /><select idref="V-271780" selected="true" /><select idref="V-271781" selected="true" /><select idref="V-271782" selected="true" /><select idref="V-271783" selected="true" /><select idref="V-271784" selected="true" /><select idref="V-271785" selected="true" /><select idref="V-271786" selected="true" /><select idref="V-271787" selected="true" /><select idref="V-271788" selected="true" /><select idref="V-271789" selected="true" /><select idref="V-271790" selected="true" /><select idref="V-271791" selected="true" /><select idref="V-271792" selected="true" /><select idref="V-271793" selected="true" /><select idref="V-271794" selected="true" /><select idref="V-271795" selected="true" /><select idref="V-271796" selected="true" /><select idref="V-271797" selected="true" /><select idref="V-271798" selected="true" /><select idref="V-271799" selected="true" /><select idref="V-271800" selected="true" /><select idref="V-271801" selected="true" /><select idref="V-271802" selected="true" /><select idref="V-271803" selected="true" /><select idref="V-271804" selected="true" /><select idref="V-271805" selected="true" /><select idref="V-271806" selected="true" /><select idref="V-271807" selected="true" /><select idref="V-271808" selected="true" /><select idref="V-271809" selected="true" /><select idref="V-271810" selected="true" /><select idref="V-271811" selected="true" /><select idref="V-271812" selected="true" /><select idref="V-271813" selected="true" /><select idref="V-271814" selected="true" /><select idref="V-271815" selected="true" /><select idref="V-271816" selected="true" /><select idref="V-271817" selected="true" /><select idref="V-271818" selected="true" /><select idref="V-271819" selected="true" /><select idref="V-271820" selected="true" /><select idref="V-271821" selected="true" /><select idref="V-271822" selected="true" /><select idref="V-271823" selected="true" /><select idref="V-271824" selected="true" /><select idref="V-271825" selected="true" /><select idref="V-271826" selected="true" /><select idref="V-271827" selected="true" /><select idref="V-271828" selected="true" /><select idref="V-271829" selected="true" /><select idref="V-271830" selected="true" /><select idref="V-271831" selected="true" /><select idref="V-271832" selected="true" /><select idref="V-271833" selected="true" /><select idref="V-271834" selected="true" /><select idref="V-271835" selected="true" /><select idref="V-271836" selected="true" /><select idref="V-271837" selected="true" /><select idref="V-271838" selected="true" /><select idref="V-271839" selected="true" /><select idref="V-271840" selected="true" /><select idref="V-271841" selected="true" /><select idref="V-271842" selected="true" /><select idref="V-271843" selected="true" /><select idref="V-271844" selected="true" /><select idref="V-271845" selected="true" /><select idref="V-271846" selected="true" /><select idref="V-271847" selected="true" /><select idref="V-271848" selected="true" /><select idref="V-271849" selected="true" /><select idref="V-271850" selected="true" /><select idref="V-271851" selected="true" /><select idref="V-271852" selected="true" /><select idref="V-271853" selected="true" /><select idref="V-271854" selected="true" /><select idref="V-271855" selected="true" /><select idref="V-271856" selected="true" /><select idref="V-271857" selected="true" /><select idref="V-271858" selected="true" /><select idref="V-271859" selected="true" /><select idref="V-271860" selected="true" /><select idref="V-271861" selected="true" /><select idref="V-271862" selected="true" /><select idref="V-271863" selected="true" /><select idref="V-271864" selected="true" /><select idref="V-271865" selected="true" /><select idref="V-271866" selected="true" /><select idref="V-271867" selected="true" /><select idref="V-271868" selected="true" /><select idref="V-271869" selected="true" /><select idref="V-271870" selected="true" /><select idref="V-271871" selected="true" /><select idref="V-271872" selected="true" /><select idref="V-271873" selected="true" /><select idref="V-271874" selected="true" /><select idref="V-271875" selected="true" /><select idref="V-271876" selected="true" /><select idref="V-271877" selected="true" /><select idref="V-271878" selected="true" /><select idref="V-271879" selected="true" /><select idref="V-271880" selected="true" /><select idref="V-271881" selected="true" /><select idref="V-271882" selected="true" /><select idref="V-271883" selected="true" /><select idref="V-271884" selected="true" /><select idref="V-271885" selected="true" /><select idref="V-271886" selected="true" /><select idref="V-271901" selected="true" /><select idref="V-278952" selected="true" /><select idref="V-279935" selected="true" /></Profile><Profile id="MAC-1_Sensitive"><title>I - Mission Critical Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-271431" selected="true" /><select idref="V-271432" selected="true" /><select idref="V-271433" selected="true" /><select idref="V-271434" selected="true" /><select idref="V-271435" selected="true" /><select idref="V-271436" selected="true" /><select idref="V-271437" selected="true" /><select idref="V-271438" selected="true" /><select idref="V-271439" selected="true" /><select idref="V-271440" selected="true" /><select idref="V-271441" selected="true" /><select idref="V-271442" selected="true" /><select idref="V-271443" selected="true" /><select idref="V-271444" selected="true" /><select idref="V-271445" selected="true" /><select idref="V-271446" selected="true" /><select idref="V-271447" selected="true" /><select idref="V-271448" selected="true" /><select idref="V-271449" selected="true" /><select idref="V-271450" selected="true" /><select idref="V-271451" selected="true" /><select idref="V-271452" selected="true" /><select idref="V-271453" selected="true" /><select idref="V-271454" selected="true" /><select idref="V-271455" selected="true" /><select idref="V-271456" selected="true" /><select idref="V-271457" selected="true" /><select idref="V-271458" selected="true" /><select idref="V-271459" selected="true" /><select idref="V-271460" selected="true" /><select idref="V-271461" selected="true" /><select idref="V-271462" selected="true" /><select idref="V-271463" selected="true" /><select idref="V-271464" selected="true" /><select idref="V-271465" selected="true" /><select idref="V-271466" selected="true" /><select idref="V-271467" selected="true" /><select idref="V-271468" selected="true" /><select idref="V-271469" selected="true" /><select idref="V-271470" selected="true" /><select idref="V-271471" selected="true" /><select idref="V-271472" selected="true" /><select idref="V-271473" selected="true" /><select idref="V-271474" selected="true" /><select idref="V-271475" selected="true" /><select idref="V-271476" selected="true" /><select idref="V-271477" selected="true" /><select idref="V-271478" selected="true" /><select idref="V-271479" selected="true" /><select idref="V-271480" selected="true" /><select idref="V-271481" selected="true" /><select idref="V-271482" selected="true" /><select idref="V-271483" selected="true" /><select idref="V-271484" selected="true" /><select idref="V-271485" selected="true" /><select idref="V-271486" selected="true" /><select idref="V-271487" selected="true" /><select idref="V-271488" selected="true" /><select idref="V-271489" selected="true" /><select idref="V-271490" selected="true" /><select idref="V-271491" selected="true" /><select idref="V-271492" selected="true" /><select idref="V-271493" selected="true" /><select idref="V-271494" selected="true" /><select idref="V-271495" selected="true" /><select idref="V-271496" selected="true" /><select idref="V-271497" selected="true" /><select idref="V-271498" selected="true" /><select idref="V-271499" selected="true" /><select idref="V-271500" selected="true" /><select idref="V-271501" selected="true" /><select idref="V-271502" selected="true" /><select idref="V-271503" selected="true" /><select idref="V-271504" selected="true" /><select idref="V-271505" selected="true" /><select idref="V-271506" selected="true" /><select idref="V-271507" selected="true" /><select idref="V-271508" selected="true" /><select idref="V-271509" selected="true" /><select idref="V-271510" selected="true" /><select idref="V-271511" selected="true" /><select idref="V-271512" selected="true" /><select idref="V-271513" selected="true" /><select idref="V-271514" selected="true" /><select idref="V-271515" selected="true" /><select idref="V-271516" selected="true" /><select idref="V-271517" selected="true" /><select idref="V-271518" selected="true" /><select idref="V-271519" selected="true" /><select idref="V-271520" selected="true" /><select idref="V-271521" selected="true" /><select idref="V-271522" selected="true" /><select idref="V-271523" selected="true" /><select idref="V-271524" selected="true" /><select idref="V-271525" selected="true" /><select idref="V-271526" selected="true" /><select idref="V-271527" selected="true" /><select idref="V-271528" selected="true" /><select idref="V-271529" selected="true" /><select idref="V-271530" selected="true" /><select idref="V-271531" selected="true" /><select idref="V-271532" selected="true" /><select idref="V-271533" selected="true" /><select idref="V-271534" selected="true" /><select idref="V-271535" selected="true" /><select idref="V-271536" selected="true" /><select idref="V-271537" selected="true" /><select idref="V-271538" selected="true" /><select idref="V-271539" selected="true" /><select idref="V-271540" selected="true" /><select idref="V-271541" selected="true" /><select idref="V-271542" selected="true" /><select idref="V-271543" selected="true" /><select idref="V-271544" selected="true" /><select idref="V-271545" selected="true" /><select idref="V-271546" selected="true" /><select idref="V-271547" selected="true" /><select idref="V-271548" selected="true" /><select idref="V-271549" selected="true" /><select idref="V-271550" selected="true" /><select idref="V-271551" selected="true" /><select idref="V-271552" selected="true" /><select idref="V-271553" selected="true" /><select idref="V-271554" selected="true" /><select idref="V-271555" selected="true" /><select idref="V-271556" selected="true" /><select idref="V-271557" selected="true" /><select idref="V-271558" selected="true" /><select idref="V-271559" selected="true" /><select idref="V-271560" selected="true" /><select idref="V-271561" selected="true" /><select idref="V-271562" selected="true" /><select idref="V-271563" selected="true" /><select idref="V-271564" selected="true" /><select idref="V-271565" selected="true" /><select idref="V-271566" selected="true" /><select idref="V-271567" selected="true" /><select idref="V-271568" selected="true" /><select idref="V-271569" selected="true" /><select idref="V-271570" selected="true" /><select idref="V-271571" selected="true" /><select idref="V-271572" selected="true" /><select idref="V-271573" selected="true" /><select idref="V-271574" selected="true" /><select idref="V-271575" selected="true" /><select idref="V-271576" selected="true" /><select idref="V-271577" selected="true" /><select idref="V-271578" selected="true" /><select idref="V-271579" selected="true" /><select idref="V-271580" selected="true" /><select idref="V-271581" selected="true" /><select idref="V-271582" selected="true" /><select idref="V-271583" selected="true" /><select idref="V-271584" selected="true" /><select idref="V-271585" selected="true" /><select idref="V-271586" selected="true" /><select idref="V-271587" selected="true" /><select idref="V-271588" selected="true" /><select idref="V-271589" selected="true" /><select idref="V-271590" selected="true" /><select idref="V-271591" selected="true" /><select idref="V-271592" selected="true" /><select idref="V-271593" selected="true" /><select idref="V-271594" selected="true" /><select idref="V-271595" selected="true" /><select idref="V-271596" selected="true" /><select idref="V-271597" selected="true" /><select idref="V-271598" selected="true" /><select idref="V-271599" selected="true" /><select idref="V-271600" selected="true" /><select idref="V-271601" selected="true" /><select idref="V-271602" selected="true" /><select idref="V-271603" selected="true" /><select idref="V-271604" selected="true" /><select idref="V-271605" selected="true" /><select idref="V-271606" selected="true" /><select idref="V-271607" selected="true" /><select idref="V-271608" selected="true" /><select idref="V-271609" selected="true" /><select idref="V-271610" selected="true" /><select idref="V-271611" selected="true" /><select idref="V-271612" selected="true" /><select idref="V-271613" selected="true" /><select idref="V-271614" selected="true" /><select idref="V-271615" selected="true" /><select idref="V-271616" selected="true" /><select idref="V-271617" selected="true" /><select idref="V-271618" selected="true" /><select idref="V-271619" selected="true" /><select idref="V-271620" selected="true" /><select idref="V-271621" selected="true" /><select idref="V-271622" selected="true" /><select idref="V-271623" selected="true" /><select idref="V-271624" selected="true" /><select idref="V-271625" selected="true" /><select idref="V-271626" selected="true" /><select idref="V-271627" selected="true" /><select idref="V-271628" selected="true" /><select idref="V-271629" selected="true" /><select idref="V-271630" selected="true" /><select idref="V-271631" selected="true" /><select idref="V-271632" selected="true" /><select idref="V-271633" selected="true" /><select idref="V-271634" selected="true" /><select idref="V-271635" selected="true" /><select idref="V-271636" selected="true" /><select idref="V-271637" selected="true" /><select idref="V-271638" selected="true" /><select idref="V-271639" selected="true" /><select idref="V-271641" selected="true" /><select idref="V-271642" selected="true" /><select idref="V-271643" selected="true" /><select idref="V-271644" selected="true" /><select idref="V-271645" selected="true" /><select idref="V-271646" selected="true" /><select idref="V-271647" selected="true" /><select idref="V-271648" selected="true" /><select idref="V-271649" selected="true" /><select idref="V-271650" selected="true" /><select idref="V-271651" selected="true" /><select idref="V-271652" selected="true" /><select idref="V-271653" selected="true" /><select idref="V-271654" selected="true" /><select idref="V-271655" selected="true" /><select idref="V-271656" selected="true" /><select idref="V-271657" selected="true" /><select idref="V-271658" selected="true" /><select idref="V-271659" selected="true" /><select idref="V-271660" selected="true" /><select idref="V-271661" selected="true" /><select idref="V-271662" selected="true" /><select idref="V-271663" selected="true" /><select idref="V-271664" selected="true" /><select idref="V-271665" selected="true" /><select idref="V-271666" selected="true" /><select idref="V-271667" selected="true" /><select idref="V-271668" selected="true" /><select idref="V-271669" selected="true" /><select idref="V-271670" selected="true" /><select idref="V-271671" selected="true" /><select idref="V-271672" selected="true" /><select idref="V-271673" selected="true" /><select idref="V-271674" selected="true" /><select idref="V-271676" selected="true" /><select idref="V-271677" selected="true" /><select idref="V-271678" selected="true" /><select idref="V-271679" selected="true" /><select idref="V-271680" selected="true" /><select idref="V-271681" selected="true" /><select idref="V-271682" selected="true" /><select idref="V-271683" selected="true" /><select idref="V-271684" selected="true" /><select idref="V-271685" selected="true" /><select idref="V-271686" selected="true" /><select idref="V-271687" selected="true" /><select idref="V-271688" selected="true" /><select idref="V-271689" selected="true" /><select idref="V-271690" selected="true" /><select idref="V-271691" selected="true" /><select idref="V-271692" selected="true" /><select idref="V-271693" selected="true" /><select idref="V-271694" selected="true" /><select idref="V-271695" selected="true" /><select idref="V-271696" selected="true" /><select idref="V-271697" selected="true" /><select idref="V-271698" selected="true" /><select idref="V-271699" selected="true" /><select idref="V-271700" selected="true" /><select idref="V-271701" selected="true" /><select idref="V-271703" selected="true" /><select idref="V-271704" selected="true" /><select idref="V-271705" selected="true" /><select idref="V-271706" selected="true" /><select idref="V-271707" selected="true" /><select idref="V-271708" selected="true" /><select idref="V-271709" selected="true" /><select idref="V-271710" selected="true" /><select idref="V-271711" selected="true" /><select idref="V-271712" selected="true" /><select idref="V-271713" selected="true" /><select idref="V-271714" selected="true" /><select idref="V-271715" selected="true" /><select idref="V-271716" selected="true" /><select idref="V-271717" selected="true" /><select idref="V-271718" selected="true" /><select idref="V-271719" selected="true" /><select idref="V-271720" selected="true" /><select idref="V-271721" selected="true" /><select idref="V-271722" selected="true" /><select idref="V-271723" selected="true" /><select idref="V-271724" selected="true" /><select idref="V-271725" selected="true" /><select idref="V-271726" selected="true" /><select idref="V-271727" selected="true" /><select idref="V-271728" selected="true" /><select idref="V-271729" selected="true" /><select idref="V-271730" selected="true" /><select idref="V-271731" selected="true" /><select idref="V-271732" selected="true" /><select idref="V-271733" selected="true" /><select idref="V-271734" selected="true" /><select idref="V-271735" selected="true" /><select idref="V-271736" selected="true" /><select idref="V-271737" selected="true" /><select idref="V-271738" selected="true" /><select idref="V-271739" selected="true" /><select idref="V-271740" selected="true" /><select idref="V-271741" selected="true" /><select idref="V-271742" selected="true" /><select idref="V-271743" selected="true" /><select idref="V-271744" selected="true" /><select idref="V-271745" selected="true" /><select idref="V-271746" selected="true" /><select idref="V-271747" selected="true" /><select idref="V-271748" selected="true" /><select idref="V-271749" selected="true" /><select idref="V-271750" selected="true" /><select idref="V-271751" selected="true" /><select idref="V-271752" selected="true" /><select idref="V-271753" selected="true" /><select idref="V-271754" selected="true" /><select idref="V-271755" selected="true" /><select idref="V-271756" selected="true" /><select idref="V-271757" selected="true" /><select idref="V-271758" selected="true" /><select idref="V-271759" selected="true" /><select idref="V-271760" selected="true" /><select idref="V-271761" selected="true" /><select idref="V-271763" selected="true" /><select idref="V-271764" selected="true" /><select idref="V-271766" selected="true" /><select idref="V-271768" selected="true" /><select idref="V-271769" selected="true" /><select idref="V-271770" selected="true" /><select idref="V-271771" selected="true" /><select idref="V-271772" selected="true" /><select idref="V-271773" selected="true" /><select idref="V-271774" selected="true" /><select idref="V-271775" selected="true" /><select idref="V-271776" selected="true" /><select idref="V-271777" selected="true" /><select idref="V-271778" selected="true" /><select idref="V-271779" selected="true" /><select idref="V-271780" selected="true" /><select idref="V-271781" selected="true" /><select idref="V-271782" selected="true" /><select idref="V-271783" selected="true" /><select idref="V-271784" selected="true" /><select idref="V-271785" selected="true" /><select idref="V-271786" selected="true" /><select idref="V-271787" selected="true" /><select idref="V-271788" selected="true" /><select idref="V-271789" selected="true" /><select idref="V-271790" selected="true" /><select idref="V-271791" selected="true" /><select idref="V-271792" selected="true" /><select idref="V-271793" selected="true" /><select idref="V-271794" selected="true" /><select idref="V-271795" selected="true" /><select idref="V-271796" selected="true" /><select idref="V-271797" selected="true" /><select idref="V-271798" selected="true" /><select idref="V-271799" selected="true" /><select idref="V-271800" selected="true" /><select idref="V-271801" selected="true" /><select idref="V-271802" selected="true" /><select idref="V-271803" selected="true" /><select idref="V-271804" selected="true" /><select idref="V-271805" selected="true" /><select idref="V-271806" selected="true" /><select idref="V-271807" selected="true" /><select idref="V-271808" selected="true" /><select idref="V-271809" selected="true" /><select idref="V-271810" selected="true" /><select idref="V-271811" selected="true" /><select idref="V-271812" selected="true" /><select idref="V-271813" selected="true" /><select idref="V-271814" selected="true" /><select idref="V-271815" selected="true" /><select idref="V-271816" selected="true" /><select idref="V-271817" selected="true" /><select idref="V-271818" selected="true" /><select idref="V-271819" selected="true" /><select idref="V-271820" selected="true" /><select idref="V-271821" selected="true" /><select idref="V-271822" selected="true" /><select idref="V-271823" selected="true" /><select idref="V-271824" selected="true" /><select idref="V-271825" selected="true" /><select idref="V-271826" selected="true" /><select idref="V-271827" selected="true" /><select idref="V-271828" selected="true" /><select idref="V-271829" selected="true" /><select idref="V-271830" selected="true" /><select idref="V-271831" selected="true" /><select idref="V-271832" selected="true" /><select idref="V-271833" selected="true" /><select idref="V-271834" selected="true" /><select idref="V-271835" selected="true" /><select idref="V-271836" selected="true" /><select idref="V-271837" selected="true" /><select idref="V-271838" selected="true" /><select idref="V-271839" selected="true" /><select idref="V-271840" selected="true" /><select idref="V-271841" selected="true" /><select idref="V-271842" selected="true" /><select idref="V-271843" selected="true" /><select idref="V-271844" selected="true" /><select idref="V-271845" selected="true" /><select idref="V-271846" selected="true" /><select idref="V-271847" selected="true" /><select idref="V-271848" selected="true" /><select idref="V-271849" selected="true" /><select idref="V-271850" selected="true" /><select idref="V-271851" selected="true" /><select idref="V-271852" selected="true" /><select idref="V-271853" selected="true" /><select idref="V-271854" selected="true" /><select idref="V-271855" selected="true" /><select idref="V-271856" selected="true" /><select idref="V-271857" selected="true" /><select idref="V-271858" selected="true" /><select idref="V-271859" selected="true" /><select idref="V-271860" selected="true" /><select idref="V-271861" selected="true" /><select idref="V-271862" selected="true" /><select idref="V-271863" selected="true" /><select idref="V-271864" selected="true" /><select idref="V-271865" selected="true" /><select idref="V-271866" selected="true" /><select idref="V-271867" selected="true" /><select idref="V-271868" selected="true" /><select idref="V-271869" selected="true" /><select idref="V-271870" selected="true" /><select idref="V-271871" selected="true" /><select idref="V-271872" selected="true" /><select idref="V-271873" selected="true" /><select idref="V-271874" selected="true" /><select idref="V-271875" selected="true" /><select idref="V-271876" selected="true" /><select idref="V-271877" selected="true" /><select idref="V-271878" selected="true" /><select idref="V-271879" selected="true" /><select idref="V-271880" selected="true" /><select idref="V-271881" selected="true" /><select idref="V-271882" selected="true" /><select idref="V-271883" selected="true" /><select idref="V-271884" selected="true" /><select idref="V-271885" selected="true" /><select idref="V-271886" selected="true" /><select idref="V-271901" selected="true" /><select idref="V-278952" selected="true" /><select idref="V-279935" selected="true" /></Profile><Profile id="MAC-2_Classified"><title>II - Mission Support Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-271431" selected="true" /><select idref="V-271432" selected="true" /><select idref="V-271433" selected="true" /><select idref="V-271434" selected="true" /><select idref="V-271435" selected="true" /><select idref="V-271436" selected="true" /><select idref="V-271437" selected="true" /><select idref="V-271438" selected="true" /><select idref="V-271439" selected="true" /><select idref="V-271440" selected="true" /><select idref="V-271441" selected="true" /><select idref="V-271442" selected="true" /><select idref="V-271443" selected="true" /><select idref="V-271444" selected="true" /><select idref="V-271445" selected="true" /><select idref="V-271446" selected="true" /><select idref="V-271447" selected="true" /><select idref="V-271448" selected="true" /><select idref="V-271449" selected="true" /><select idref="V-271450" selected="true" /><select idref="V-271451" selected="true" /><select idref="V-271452" selected="true" /><select idref="V-271453" selected="true" /><select idref="V-271454" selected="true" /><select idref="V-271455" selected="true" /><select idref="V-271456" selected="true" /><select idref="V-271457" selected="true" /><select idref="V-271458" selected="true" /><select idref="V-271459" selected="true" /><select idref="V-271460" selected="true" /><select idref="V-271461" selected="true" /><select idref="V-271462" selected="true" /><select idref="V-271463" selected="true" /><select idref="V-271464" selected="true" /><select idref="V-271465" selected="true" /><select idref="V-271466" selected="true" /><select idref="V-271467" selected="true" /><select idref="V-271468" selected="true" /><select idref="V-271469" selected="true" /><select idref="V-271470" selected="true" /><select idref="V-271471" selected="true" /><select idref="V-271472" selected="true" /><select idref="V-271473" selected="true" /><select idref="V-271474" selected="true" /><select idref="V-271475" selected="true" /><select idref="V-271476" selected="true" /><select idref="V-271477" selected="true" /><select idref="V-271478" selected="true" /><select idref="V-271479" selected="true" /><select idref="V-271480" selected="true" /><select idref="V-271481" selected="true" /><select idref="V-271482" selected="true" /><select idref="V-271483" selected="true" /><select idref="V-271484" selected="true" /><select idref="V-271485" selected="true" /><select idref="V-271486" selected="true" /><select idref="V-271487" selected="true" /><select idref="V-271488" selected="true" /><select idref="V-271489" selected="true" /><select idref="V-271490" selected="true" /><select idref="V-271491" selected="true" /><select idref="V-271492" selected="true" /><select idref="V-271493" selected="true" /><select idref="V-271494" selected="true" /><select idref="V-271495" selected="true" /><select idref="V-271496" selected="true" /><select idref="V-271497" selected="true" /><select idref="V-271498" selected="true" /><select idref="V-271499" selected="true" /><select idref="V-271500" selected="true" /><select idref="V-271501" selected="true" /><select idref="V-271502" selected="true" /><select idref="V-271503" selected="true" /><select idref="V-271504" selected="true" /><select idref="V-271505" selected="true" /><select idref="V-271506" selected="true" /><select idref="V-271507" selected="true" /><select idref="V-271508" selected="true" /><select idref="V-271509" selected="true" /><select idref="V-271510" selected="true" /><select idref="V-271511" selected="true" /><select idref="V-271512" selected="true" /><select idref="V-271513" selected="true" /><select idref="V-271514" selected="true" /><select idref="V-271515" selected="true" /><select idref="V-271516" selected="true" /><select idref="V-271517" selected="true" /><select idref="V-271518" selected="true" /><select idref="V-271519" selected="true" /><select idref="V-271520" selected="true" /><select idref="V-271521" selected="true" /><select idref="V-271522" selected="true" /><select idref="V-271523" selected="true" /><select idref="V-271524" selected="true" /><select idref="V-271525" selected="true" /><select idref="V-271526" selected="true" /><select idref="V-271527" selected="true" /><select idref="V-271528" selected="true" /><select idref="V-271529" selected="true" /><select idref="V-271530" selected="true" /><select idref="V-271531" selected="true" /><select idref="V-271532" selected="true" /><select idref="V-271533" selected="true" /><select idref="V-271534" selected="true" /><select idref="V-271535" selected="true" /><select idref="V-271536" selected="true" /><select idref="V-271537" selected="true" /><select idref="V-271538" selected="true" /><select idref="V-271539" selected="true" /><select idref="V-271540" selected="true" /><select idref="V-271541" selected="true" /><select idref="V-271542" selected="true" /><select idref="V-271543" selected="true" /><select idref="V-271544" selected="true" /><select idref="V-271545" selected="true" /><select idref="V-271546" selected="true" /><select idref="V-271547" selected="true" /><select idref="V-271548" selected="true" /><select idref="V-271549" selected="true" /><select idref="V-271550" selected="true" /><select idref="V-271551" selected="true" /><select idref="V-271552" selected="true" /><select idref="V-271553" selected="true" /><select idref="V-271554" selected="true" /><select idref="V-271555" selected="true" /><select idref="V-271556" selected="true" /><select idref="V-271557" selected="true" /><select idref="V-271558" selected="true" /><select idref="V-271559" selected="true" /><select idref="V-271560" selected="true" /><select idref="V-271561" selected="true" /><select idref="V-271562" selected="true" /><select idref="V-271563" selected="true" /><select idref="V-271564" selected="true" /><select idref="V-271565" selected="true" /><select idref="V-271566" selected="true" /><select idref="V-271567" selected="true" /><select idref="V-271568" selected="true" /><select idref="V-271569" selected="true" /><select idref="V-271570" selected="true" /><select idref="V-271571" selected="true" /><select idref="V-271572" selected="true" /><select idref="V-271573" selected="true" /><select idref="V-271574" selected="true" /><select idref="V-271575" selected="true" /><select idref="V-271576" selected="true" /><select idref="V-271577" selected="true" /><select idref="V-271578" selected="true" /><select idref="V-271579" selected="true" /><select idref="V-271580" selected="true" /><select idref="V-271581" selected="true" /><select idref="V-271582" selected="true" /><select idref="V-271583" selected="true" /><select idref="V-271584" selected="true" /><select idref="V-271585" selected="true" /><select idref="V-271586" selected="true" /><select idref="V-271587" selected="true" /><select idref="V-271588" selected="true" /><select idref="V-271589" selected="true" /><select idref="V-271590" selected="true" /><select idref="V-271591" selected="true" /><select idref="V-271592" selected="true" /><select idref="V-271593" selected="true" /><select idref="V-271594" selected="true" /><select idref="V-271595" selected="true" /><select idref="V-271596" selected="true" /><select idref="V-271597" selected="true" /><select idref="V-271598" selected="true" /><select idref="V-271599" selected="true" /><select idref="V-271600" selected="true" /><select idref="V-271601" selected="true" /><select idref="V-271602" selected="true" /><select idref="V-271603" selected="true" /><select idref="V-271604" selected="true" /><select idref="V-271605" selected="true" /><select idref="V-271606" selected="true" /><select idref="V-271607" selected="true" /><select idref="V-271608" selected="true" /><select idref="V-271609" selected="true" /><select idref="V-271610" selected="true" /><select idref="V-271611" selected="true" /><select idref="V-271612" selected="true" /><select idref="V-271613" selected="true" /><select idref="V-271614" selected="true" /><select idref="V-271615" selected="true" /><select idref="V-271616" selected="true" /><select idref="V-271617" selected="true" /><select idref="V-271618" selected="true" /><select idref="V-271619" selected="true" /><select idref="V-271620" selected="true" /><select idref="V-271621" selected="true" /><select idref="V-271622" selected="true" /><select idref="V-271623" selected="true" /><select idref="V-271624" selected="true" /><select idref="V-271625" selected="true" /><select idref="V-271626" selected="true" /><select idref="V-271627" selected="true" /><select idref="V-271628" selected="true" /><select idref="V-271629" selected="true" /><select idref="V-271630" selected="true" /><select idref="V-271631" selected="true" /><select idref="V-271632" selected="true" /><select idref="V-271633" selected="true" /><select idref="V-271634" selected="true" /><select idref="V-271635" selected="true" /><select idref="V-271636" selected="true" /><select idref="V-271637" selected="true" /><select idref="V-271638" selected="true" /><select idref="V-271639" selected="true" /><select idref="V-271641" selected="true" /><select idref="V-271642" selected="true" /><select idref="V-271643" selected="true" /><select idref="V-271644" selected="true" /><select idref="V-271645" selected="true" /><select idref="V-271646" selected="true" /><select idref="V-271647" selected="true" /><select idref="V-271648" selected="true" /><select idref="V-271649" selected="true" /><select idref="V-271650" selected="true" /><select idref="V-271651" selected="true" /><select idref="V-271652" selected="true" /><select idref="V-271653" selected="true" /><select idref="V-271654" selected="true" /><select idref="V-271655" selected="true" /><select idref="V-271656" selected="true" /><select idref="V-271657" selected="true" /><select idref="V-271658" selected="true" /><select idref="V-271659" selected="true" /><select idref="V-271660" selected="true" /><select idref="V-271661" selected="true" /><select idref="V-271662" selected="true" /><select idref="V-271663" selected="true" /><select idref="V-271664" selected="true" /><select idref="V-271665" selected="true" /><select idref="V-271666" selected="true" /><select idref="V-271667" selected="true" /><select idref="V-271668" selected="true" /><select idref="V-271669" selected="true" /><select idref="V-271670" selected="true" /><select idref="V-271671" selected="true" /><select idref="V-271672" selected="true" /><select idref="V-271673" selected="true" /><select idref="V-271674" selected="true" /><select idref="V-271676" selected="true" /><select idref="V-271677" selected="true" /><select idref="V-271678" selected="true" /><select idref="V-271679" selected="true" /><select idref="V-271680" selected="true" /><select idref="V-271681" selected="true" /><select idref="V-271682" selected="true" /><select idref="V-271683" selected="true" /><select idref="V-271684" selected="true" /><select idref="V-271685" selected="true" /><select idref="V-271686" selected="true" /><select idref="V-271687" selected="true" /><select idref="V-271688" selected="true" /><select idref="V-271689" selected="true" /><select idref="V-271690" selected="true" /><select idref="V-271691" selected="true" /><select idref="V-271692" selected="true" /><select idref="V-271693" selected="true" /><select idref="V-271694" selected="true" /><select idref="V-271695" selected="true" /><select idref="V-271696" selected="true" /><select idref="V-271697" selected="true" /><select idref="V-271698" selected="true" /><select idref="V-271699" selected="true" /><select idref="V-271700" selected="true" /><select idref="V-271701" selected="true" /><select idref="V-271703" selected="true" /><select idref="V-271704" selected="true" /><select idref="V-271705" selected="true" /><select idref="V-271706" selected="true" /><select idref="V-271707" selected="true" /><select idref="V-271708" selected="true" /><select idref="V-271709" selected="true" /><select idref="V-271710" selected="true" /><select idref="V-271711" selected="true" /><select idref="V-271712" selected="true" /><select idref="V-271713" selected="true" /><select idref="V-271714" selected="true" /><select idref="V-271715" selected="true" /><select idref="V-271716" selected="true" /><select idref="V-271717" selected="true" /><select idref="V-271718" selected="true" /><select idref="V-271719" selected="true" /><select idref="V-271720" selected="true" /><select idref="V-271721" selected="true" /><select idref="V-271722" selected="true" /><select idref="V-271723" selected="true" /><select idref="V-271724" selected="true" /><select idref="V-271725" selected="true" /><select idref="V-271726" selected="true" /><select idref="V-271727" selected="true" /><select idref="V-271728" selected="true" /><select idref="V-271729" selected="true" /><select idref="V-271730" selected="true" /><select idref="V-271731" selected="true" /><select idref="V-271732" selected="true" /><select idref="V-271733" selected="true" /><select idref="V-271734" selected="true" /><select idref="V-271735" selected="true" /><select idref="V-271736" selected="true" /><select idref="V-271737" selected="true" /><select idref="V-271738" selected="true" /><select idref="V-271739" selected="true" /><select idref="V-271740" selected="true" /><select idref="V-271741" selected="true" /><select idref="V-271742" selected="true" /><select idref="V-271743" selected="true" /><select idref="V-271744" selected="true" /><select idref="V-271745" selected="true" /><select idref="V-271746" selected="true" /><select idref="V-271747" selected="true" /><select idref="V-271748" selected="true" /><select idref="V-271749" selected="true" /><select idref="V-271750" selected="true" /><select idref="V-271751" selected="true" /><select idref="V-271752" selected="true" /><select idref="V-271753" selected="true" /><select idref="V-271754" selected="true" /><select idref="V-271755" selected="true" /><select idref="V-271756" selected="true" /><select idref="V-271757" selected="true" /><select idref="V-271758" selected="true" /><select idref="V-271759" selected="true" /><select idref="V-271760" selected="true" /><select idref="V-271761" selected="true" /><select idref="V-271763" selected="true" /><select idref="V-271764" selected="true" /><select idref="V-271766" selected="true" /><select idref="V-271768" selected="true" /><select idref="V-271769" selected="true" /><select idref="V-271770" selected="true" /><select idref="V-271771" selected="true" /><select idref="V-271772" selected="true" /><select idref="V-271773" selected="true" /><select idref="V-271774" selected="true" /><select idref="V-271775" selected="true" /><select idref="V-271776" selected="true" /><select idref="V-271777" selected="true" /><select idref="V-271778" selected="true" /><select idref="V-271779" selected="true" /><select idref="V-271780" selected="true" /><select idref="V-271781" selected="true" /><select idref="V-271782" selected="true" /><select idref="V-271783" selected="true" /><select idref="V-271784" selected="true" /><select idref="V-271785" selected="true" /><select idref="V-271786" selected="true" /><select idref="V-271787" selected="true" /><select idref="V-271788" selected="true" /><select idref="V-271789" selected="true" /><select idref="V-271790" selected="true" /><select idref="V-271791" selected="true" /><select idref="V-271792" selected="true" /><select idref="V-271793" selected="true" /><select idref="V-271794" selected="true" /><select idref="V-271795" selected="true" /><select idref="V-271796" selected="true" /><select idref="V-271797" selected="true" /><select idref="V-271798" selected="true" /><select idref="V-271799" selected="true" /><select idref="V-271800" selected="true" /><select idref="V-271801" selected="true" /><select idref="V-271802" selected="true" /><select idref="V-271803" selected="true" /><select idref="V-271804" selected="true" /><select idref="V-271805" selected="true" /><select idref="V-271806" selected="true" /><select idref="V-271807" selected="true" /><select idref="V-271808" selected="true" /><select idref="V-271809" selected="true" /><select idref="V-271810" selected="true" /><select idref="V-271811" selected="true" /><select idref="V-271812" selected="true" /><select idref="V-271813" selected="true" /><select idref="V-271814" selected="true" /><select idref="V-271815" selected="true" /><select idref="V-271816" selected="true" /><select idref="V-271817" selected="true" /><select idref="V-271818" selected="true" /><select idref="V-271819" selected="true" /><select idref="V-271820" selected="true" /><select idref="V-271821" selected="true" /><select idref="V-271822" selected="true" /><select idref="V-271823" selected="true" /><select idref="V-271824" selected="true" /><select idref="V-271825" selected="true" /><select idref="V-271826" selected="true" /><select idref="V-271827" selected="true" /><select idref="V-271828" selected="true" /><select idref="V-271829" selected="true" /><select idref="V-271830" selected="true" /><select idref="V-271831" selected="true" /><select idref="V-271832" selected="true" /><select idref="V-271833" selected="true" /><select idref="V-271834" selected="true" /><select idref="V-271835" selected="true" /><select idref="V-271836" selected="true" /><select idref="V-271837" selected="true" /><select idref="V-271838" selected="true" /><select idref="V-271839" selected="true" /><select idref="V-271840" selected="true" /><select idref="V-271841" selected="true" /><select idref="V-271842" selected="true" /><select idref="V-271843" selected="true" /><select idref="V-271844" selected="true" /><select idref="V-271845" selected="true" /><select idref="V-271846" selected="true" /><select idref="V-271847" selected="true" /><select idref="V-271848" selected="true" /><select idref="V-271849" selected="true" /><select idref="V-271850" selected="true" /><select idref="V-271851" selected="true" /><select idref="V-271852" selected="true" /><select idref="V-271853" selected="true" /><select idref="V-271854" selected="true" /><select idref="V-271855" selected="true" /><select idref="V-271856" selected="true" /><select idref="V-271857" selected="true" /><select idref="V-271858" selected="true" /><select idref="V-271859" selected="true" /><select idref="V-271860" selected="true" /><select idref="V-271861" selected="true" /><select idref="V-271862" selected="true" /><select idref="V-271863" selected="true" /><select idref="V-271864" selected="true" /><select idref="V-271865" selected="true" /><select idref="V-271866" selected="true" /><select idref="V-271867" selected="true" /><select idref="V-271868" selected="true" /><select idref="V-271869" selected="true" /><select idref="V-271870" selected="true" /><select idref="V-271871" selected="true" /><select idref="V-271872" selected="true" /><select idref="V-271873" selected="true" /><select idref="V-271874" selected="true" /><select idref="V-271875" selected="true" /><select idref="V-271876" selected="true" /><select idref="V-271877" selected="true" /><select idref="V-271878" selected="true" /><select idref="V-271879" selected="true" /><select idref="V-271880" selected="true" /><select idref="V-271881" selected="true" /><select idref="V-271882" selected="true" /><select idref="V-271883" selected="true" /><select idref="V-271884" selected="true" /><select idref="V-271885" selected="true" /><select idref="V-271886" selected="true" /><select idref="V-271901" selected="true" /><select idref="V-278952" selected="true" /><select idref="V-279935" selected="true" /></Profile><Profile id="MAC-2_Public"><title>II - Mission Support Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-271431" selected="true" /><select idref="V-271432" selected="true" /><select idref="V-271433" selected="true" /><select idref="V-271434" selected="true" /><select idref="V-271435" selected="true" /><select idref="V-271436" selected="true" /><select idref="V-271437" selected="true" /><select idref="V-271438" selected="true" /><select idref="V-271439" selected="true" /><select idref="V-271440" selected="true" /><select idref="V-271441" selected="true" /><select idref="V-271442" selected="true" /><select idref="V-271443" selected="true" /><select idref="V-271444" selected="true" /><select idref="V-271445" selected="true" /><select idref="V-271446" selected="true" /><select idref="V-271447" selected="true" /><select idref="V-271448" selected="true" /><select idref="V-271449" selected="true" /><select idref="V-271450" selected="true" /><select idref="V-271451" selected="true" /><select idref="V-271452" selected="true" /><select idref="V-271453" selected="true" /><select idref="V-271454" selected="true" /><select idref="V-271455" selected="true" /><select idref="V-271456" selected="true" /><select idref="V-271457" selected="true" /><select idref="V-271458" selected="true" /><select idref="V-271459" selected="true" /><select idref="V-271460" selected="true" /><select idref="V-271461" selected="true" /><select idref="V-271462" selected="true" /><select idref="V-271463" selected="true" /><select idref="V-271464" selected="true" /><select idref="V-271465" selected="true" /><select idref="V-271466" selected="true" /><select idref="V-271467" selected="true" /><select idref="V-271468" selected="true" /><select idref="V-271469" selected="true" /><select idref="V-271470" selected="true" /><select idref="V-271471" selected="true" /><select idref="V-271472" selected="true" /><select idref="V-271473" selected="true" /><select idref="V-271474" selected="true" /><select idref="V-271475" selected="true" /><select idref="V-271476" selected="true" /><select idref="V-271477" selected="true" /><select idref="V-271478" selected="true" /><select idref="V-271479" selected="true" /><select idref="V-271480" selected="true" /><select idref="V-271481" selected="true" /><select idref="V-271482" selected="true" /><select idref="V-271483" selected="true" /><select idref="V-271484" selected="true" /><select idref="V-271485" selected="true" /><select idref="V-271486" selected="true" /><select idref="V-271487" selected="true" /><select idref="V-271488" selected="true" /><select idref="V-271489" selected="true" /><select idref="V-271490" selected="true" /><select idref="V-271491" selected="true" /><select idref="V-271492" selected="true" /><select idref="V-271493" selected="true" /><select idref="V-271494" selected="true" /><select idref="V-271495" selected="true" /><select idref="V-271496" selected="true" /><select idref="V-271497" selected="true" /><select idref="V-271498" selected="true" /><select idref="V-271499" selected="true" /><select idref="V-271500" selected="true" /><select idref="V-271501" selected="true" /><select idref="V-271502" selected="true" /><select idref="V-271503" selected="true" /><select idref="V-271504" selected="true" /><select idref="V-271505" selected="true" /><select idref="V-271506" selected="true" /><select idref="V-271507" selected="true" /><select idref="V-271508" selected="true" /><select idref="V-271509" selected="true" /><select idref="V-271510" selected="true" /><select idref="V-271511" selected="true" /><select idref="V-271512" selected="true" /><select idref="V-271513" selected="true" /><select idref="V-271514" selected="true" /><select idref="V-271515" selected="true" /><select idref="V-271516" selected="true" /><select idref="V-271517" selected="true" /><select idref="V-271518" selected="true" /><select idref="V-271519" selected="true" /><select idref="V-271520" selected="true" /><select idref="V-271521" selected="true" /><select idref="V-271522" selected="true" /><select idref="V-271523" selected="true" /><select idref="V-271524" selected="true" /><select idref="V-271525" selected="true" /><select idref="V-271526" selected="true" /><select idref="V-271527" selected="true" /><select idref="V-271528" selected="true" /><select idref="V-271529" selected="true" /><select idref="V-271530" selected="true" /><select idref="V-271531" selected="true" /><select idref="V-271532" selected="true" /><select idref="V-271533" selected="true" /><select idref="V-271534" selected="true" /><select idref="V-271535" selected="true" /><select idref="V-271536" selected="true" /><select idref="V-271537" selected="true" /><select idref="V-271538" selected="true" /><select idref="V-271539" selected="true" /><select idref="V-271540" selected="true" /><select idref="V-271541" selected="true" /><select idref="V-271542" selected="true" /><select idref="V-271543" selected="true" /><select idref="V-271544" selected="true" /><select idref="V-271545" selected="true" /><select idref="V-271546" selected="true" /><select idref="V-271547" selected="true" /><select idref="V-271548" selected="true" /><select idref="V-271549" selected="true" /><select idref="V-271550" selected="true" /><select idref="V-271551" selected="true" /><select idref="V-271552" selected="true" /><select idref="V-271553" selected="true" /><select idref="V-271554" selected="true" /><select idref="V-271555" selected="true" /><select idref="V-271556" selected="true" /><select idref="V-271557" selected="true" /><select idref="V-271558" selected="true" /><select idref="V-271559" selected="true" /><select idref="V-271560" selected="true" /><select idref="V-271561" selected="true" /><select idref="V-271562" selected="true" /><select idref="V-271563" selected="true" /><select idref="V-271564" selected="true" /><select idref="V-271565" selected="true" /><select idref="V-271566" selected="true" /><select idref="V-271567" selected="true" /><select idref="V-271568" selected="true" /><select idref="V-271569" selected="true" /><select idref="V-271570" selected="true" /><select idref="V-271571" selected="true" /><select idref="V-271572" selected="true" /><select idref="V-271573" selected="true" /><select idref="V-271574" selected="true" /><select idref="V-271575" selected="true" /><select idref="V-271576" selected="true" /><select idref="V-271577" selected="true" /><select idref="V-271578" selected="true" /><select idref="V-271579" selected="true" /><select idref="V-271580" selected="true" /><select idref="V-271581" selected="true" /><select idref="V-271582" selected="true" /><select idref="V-271583" selected="true" /><select idref="V-271584" selected="true" /><select idref="V-271585" selected="true" /><select idref="V-271586" selected="true" /><select idref="V-271587" selected="true" /><select idref="V-271588" selected="true" /><select idref="V-271589" selected="true" /><select idref="V-271590" selected="true" /><select idref="V-271591" selected="true" /><select idref="V-271592" selected="true" /><select idref="V-271593" selected="true" /><select idref="V-271594" selected="true" /><select idref="V-271595" selected="true" /><select idref="V-271596" selected="true" /><select idref="V-271597" selected="true" /><select idref="V-271598" selected="true" /><select idref="V-271599" selected="true" /><select idref="V-271600" selected="true" /><select idref="V-271601" selected="true" /><select idref="V-271602" selected="true" /><select idref="V-271603" selected="true" /><select idref="V-271604" selected="true" /><select idref="V-271605" selected="true" /><select idref="V-271606" selected="true" /><select idref="V-271607" selected="true" /><select idref="V-271608" selected="true" /><select idref="V-271609" selected="true" /><select idref="V-271610" selected="true" /><select idref="V-271611" selected="true" /><select idref="V-271612" selected="true" /><select idref="V-271613" selected="true" /><select idref="V-271614" selected="true" /><select idref="V-271615" selected="true" /><select idref="V-271616" selected="true" /><select idref="V-271617" selected="true" /><select idref="V-271618" selected="true" /><select idref="V-271619" selected="true" /><select idref="V-271620" selected="true" /><select idref="V-271621" selected="true" /><select idref="V-271622" selected="true" /><select idref="V-271623" selected="true" /><select idref="V-271624" selected="true" /><select idref="V-271625" selected="true" /><select idref="V-271626" selected="true" /><select idref="V-271627" selected="true" /><select idref="V-271628" selected="true" /><select idref="V-271629" selected="true" /><select idref="V-271630" selected="true" /><select idref="V-271631" selected="true" /><select idref="V-271632" selected="true" /><select idref="V-271633" selected="true" /><select idref="V-271634" selected="true" /><select idref="V-271635" selected="true" /><select idref="V-271636" selected="true" /><select idref="V-271637" selected="true" /><select idref="V-271638" selected="true" /><select idref="V-271639" selected="true" /><select idref="V-271641" selected="true" /><select idref="V-271642" selected="true" /><select idref="V-271643" selected="true" /><select idref="V-271644" selected="true" /><select idref="V-271645" selected="true" /><select idref="V-271646" selected="true" /><select idref="V-271647" selected="true" /><select idref="V-271648" selected="true" /><select idref="V-271649" selected="true" /><select idref="V-271650" selected="true" /><select idref="V-271651" selected="true" /><select idref="V-271652" selected="true" /><select idref="V-271653" selected="true" /><select idref="V-271654" selected="true" /><select idref="V-271655" selected="true" /><select idref="V-271656" selected="true" /><select idref="V-271657" selected="true" /><select idref="V-271658" selected="true" /><select idref="V-271659" selected="true" /><select idref="V-271660" selected="true" /><select idref="V-271661" selected="true" /><select idref="V-271662" selected="true" /><select idref="V-271663" selected="true" /><select idref="V-271664" selected="true" /><select idref="V-271665" selected="true" /><select idref="V-271666" selected="true" /><select idref="V-271667" selected="true" /><select idref="V-271668" selected="true" /><select idref="V-271669" selected="true" /><select idref="V-271670" selected="true" /><select idref="V-271671" selected="true" /><select idref="V-271672" selected="true" /><select idref="V-271673" selected="true" /><select idref="V-271674" selected="true" /><select idref="V-271676" selected="true" /><select idref="V-271677" selected="true" /><select idref="V-271678" selected="true" /><select idref="V-271679" selected="true" /><select idref="V-271680" selected="true" /><select idref="V-271681" selected="true" /><select idref="V-271682" selected="true" /><select idref="V-271683" selected="true" /><select idref="V-271684" selected="true" /><select idref="V-271685" selected="true" /><select idref="V-271686" selected="true" /><select idref="V-271687" selected="true" /><select idref="V-271688" selected="true" /><select idref="V-271689" selected="true" /><select idref="V-271690" selected="true" /><select idref="V-271691" selected="true" /><select idref="V-271692" selected="true" /><select idref="V-271693" selected="true" /><select idref="V-271694" selected="true" /><select idref="V-271695" selected="true" /><select idref="V-271696" selected="true" /><select idref="V-271697" selected="true" /><select idref="V-271698" selected="true" /><select idref="V-271699" selected="true" /><select idref="V-271700" selected="true" /><select idref="V-271701" selected="true" /><select idref="V-271703" selected="true" /><select idref="V-271704" selected="true" /><select idref="V-271705" selected="true" /><select idref="V-271706" selected="true" /><select idref="V-271707" selected="true" /><select idref="V-271708" selected="true" /><select idref="V-271709" selected="true" /><select idref="V-271710" selected="true" /><select idref="V-271711" selected="true" /><select idref="V-271712" selected="true" /><select idref="V-271713" selected="true" /><select idref="V-271714" selected="true" /><select idref="V-271715" selected="true" /><select idref="V-271716" selected="true" /><select idref="V-271717" selected="true" /><select idref="V-271718" selected="true" /><select idref="V-271719" selected="true" /><select idref="V-271720" selected="true" /><select idref="V-271721" selected="true" /><select idref="V-271722" selected="true" /><select idref="V-271723" selected="true" /><select idref="V-271724" selected="true" /><select idref="V-271725" selected="true" /><select idref="V-271726" selected="true" /><select idref="V-271727" selected="true" /><select idref="V-271728" selected="true" /><select idref="V-271729" selected="true" /><select idref="V-271730" selected="true" /><select idref="V-271731" selected="true" /><select idref="V-271732" selected="true" /><select idref="V-271733" selected="true" /><select idref="V-271734" selected="true" /><select idref="V-271735" selected="true" /><select idref="V-271736" selected="true" /><select idref="V-271737" selected="true" /><select idref="V-271738" selected="true" /><select idref="V-271739" selected="true" /><select idref="V-271740" selected="true" /><select idref="V-271741" selected="true" /><select idref="V-271742" selected="true" /><select idref="V-271743" selected="true" /><select idref="V-271744" selected="true" /><select idref="V-271745" selected="true" /><select idref="V-271746" selected="true" /><select idref="V-271747" selected="true" /><select idref="V-271748" selected="true" /><select idref="V-271749" selected="true" /><select idref="V-271750" selected="true" /><select idref="V-271751" selected="true" /><select idref="V-271752" selected="true" /><select idref="V-271753" selected="true" /><select idref="V-271754" selected="true" /><select idref="V-271755" selected="true" /><select idref="V-271756" selected="true" /><select idref="V-271757" selected="true" /><select idref="V-271758" selected="true" /><select idref="V-271759" selected="true" /><select idref="V-271760" selected="true" /><select idref="V-271761" selected="true" /><select idref="V-271763" selected="true" /><select idref="V-271764" selected="true" /><select idref="V-271766" selected="true" /><select idref="V-271768" selected="true" /><select idref="V-271769" selected="true" /><select idref="V-271770" selected="true" /><select idref="V-271771" selected="true" /><select idref="V-271772" selected="true" /><select idref="V-271773" selected="true" /><select idref="V-271774" selected="true" /><select idref="V-271775" selected="true" /><select idref="V-271776" selected="true" /><select idref="V-271777" selected="true" /><select idref="V-271778" selected="true" /><select idref="V-271779" selected="true" /><select idref="V-271780" selected="true" /><select idref="V-271781" selected="true" /><select idref="V-271782" selected="true" /><select idref="V-271783" selected="true" /><select idref="V-271784" selected="true" /><select idref="V-271785" selected="true" /><select idref="V-271786" selected="true" /><select idref="V-271787" selected="true" /><select idref="V-271788" selected="true" /><select idref="V-271789" selected="true" /><select idref="V-271790" selected="true" /><select idref="V-271791" selected="true" /><select idref="V-271792" selected="true" /><select idref="V-271793" selected="true" /><select idref="V-271794" selected="true" /><select idref="V-271795" selected="true" /><select idref="V-271796" selected="true" /><select idref="V-271797" selected="true" /><select idref="V-271798" selected="true" /><select idref="V-271799" selected="true" /><select idref="V-271800" selected="true" /><select idref="V-271801" selected="true" /><select idref="V-271802" selected="true" /><select idref="V-271803" selected="true" /><select idref="V-271804" selected="true" /><select idref="V-271805" selected="true" /><select idref="V-271806" selected="true" /><select idref="V-271807" selected="true" /><select idref="V-271808" selected="true" /><select idref="V-271809" selected="true" /><select idref="V-271810" selected="true" /><select idref="V-271811" selected="true" /><select idref="V-271812" selected="true" /><select idref="V-271813" selected="true" /><select idref="V-271814" selected="true" /><select idref="V-271815" selected="true" /><select idref="V-271816" selected="true" /><select idref="V-271817" selected="true" /><select idref="V-271818" selected="true" /><select idref="V-271819" selected="true" /><select idref="V-271820" selected="true" /><select idref="V-271821" selected="true" /><select idref="V-271822" selected="true" /><select idref="V-271823" selected="true" /><select idref="V-271824" selected="true" /><select idref="V-271825" selected="true" /><select idref="V-271826" selected="true" /><select idref="V-271827" selected="true" /><select idref="V-271828" selected="true" /><select idref="V-271829" selected="true" /><select idref="V-271830" selected="true" /><select idref="V-271831" selected="true" /><select idref="V-271832" selected="true" /><select idref="V-271833" selected="true" /><select idref="V-271834" selected="true" /><select idref="V-271835" selected="true" /><select idref="V-271836" selected="true" /><select idref="V-271837" selected="true" /><select idref="V-271838" selected="true" /><select idref="V-271839" selected="true" /><select idref="V-271840" selected="true" /><select idref="V-271841" selected="true" /><select idref="V-271842" selected="true" /><select idref="V-271843" selected="true" /><select idref="V-271844" selected="true" /><select idref="V-271845" selected="true" /><select idref="V-271846" selected="true" /><select idref="V-271847" selected="true" /><select idref="V-271848" selected="true" /><select idref="V-271849" selected="true" /><select idref="V-271850" selected="true" /><select idref="V-271851" selected="true" /><select idref="V-271852" selected="true" /><select idref="V-271853" selected="true" /><select idref="V-271854" selected="true" /><select idref="V-271855" selected="true" /><select idref="V-271856" selected="true" /><select idref="V-271857" selected="true" /><select idref="V-271858" selected="true" /><select idref="V-271859" selected="true" /><select idref="V-271860" selected="true" /><select idref="V-271861" selected="true" /><select idref="V-271862" selected="true" /><select idref="V-271863" selected="true" /><select idref="V-271864" selected="true" /><select idref="V-271865" selected="true" /><select idref="V-271866" selected="true" /><select idref="V-271867" selected="true" /><select idref="V-271868" selected="true" /><select idref="V-271869" selected="true" /><select idref="V-271870" selected="true" /><select idref="V-271871" selected="true" /><select idref="V-271872" selected="true" /><select idref="V-271873" selected="true" /><select idref="V-271874" selected="true" /><select idref="V-271875" selected="true" /><select idref="V-271876" selected="true" /><select idref="V-271877" selected="true" /><select idref="V-271878" selected="true" /><select idref="V-271879" selected="true" /><select idref="V-271880" selected="true" /><select idref="V-271881" selected="true" /><select idref="V-271882" selected="true" /><select idref="V-271883" selected="true" /><select idref="V-271884" selected="true" /><select idref="V-271885" selected="true" /><select idref="V-271886" selected="true" /><select idref="V-271901" selected="true" /><select idref="V-278952" selected="true" /><select idref="V-279935" selected="true" /></Profile><Profile id="MAC-2_Sensitive"><title>II - Mission Support Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-271431" selected="true" /><select idref="V-271432" selected="true" /><select idref="V-271433" selected="true" /><select idref="V-271434" selected="true" /><select idref="V-271435" selected="true" /><select idref="V-271436" selected="true" /><select idref="V-271437" selected="true" /><select idref="V-271438" selected="true" /><select idref="V-271439" selected="true" /><select idref="V-271440" selected="true" /><select idref="V-271441" selected="true" /><select idref="V-271442" selected="true" /><select idref="V-271443" selected="true" /><select idref="V-271444" selected="true" /><select idref="V-271445" selected="true" /><select idref="V-271446" selected="true" /><select idref="V-271447" selected="true" /><select idref="V-271448" selected="true" /><select idref="V-271449" selected="true" /><select idref="V-271450" selected="true" /><select idref="V-271451" selected="true" /><select idref="V-271452" selected="true" /><select idref="V-271453" selected="true" /><select idref="V-271454" selected="true" /><select idref="V-271455" selected="true" /><select idref="V-271456" selected="true" /><select idref="V-271457" selected="true" /><select idref="V-271458" selected="true" /><select idref="V-271459" selected="true" /><select idref="V-271460" selected="true" /><select idref="V-271461" selected="true" /><select idref="V-271462" selected="true" /><select idref="V-271463" selected="true" /><select idref="V-271464" selected="true" /><select idref="V-271465" selected="true" /><select idref="V-271466" selected="true" /><select idref="V-271467" selected="true" /><select idref="V-271468" selected="true" /><select idref="V-271469" selected="true" /><select idref="V-271470" selected="true" /><select idref="V-271471" selected="true" /><select idref="V-271472" selected="true" /><select idref="V-271473" selected="true" /><select idref="V-271474" selected="true" /><select idref="V-271475" selected="true" /><select idref="V-271476" selected="true" /><select idref="V-271477" selected="true" /><select idref="V-271478" selected="true" /><select idref="V-271479" selected="true" /><select idref="V-271480" selected="true" /><select idref="V-271481" selected="true" /><select idref="V-271482" selected="true" /><select idref="V-271483" selected="true" /><select idref="V-271484" selected="true" /><select idref="V-271485" selected="true" /><select idref="V-271486" selected="true" /><select idref="V-271487" selected="true" /><select idref="V-271488" selected="true" /><select idref="V-271489" selected="true" /><select idref="V-271490" selected="true" /><select idref="V-271491" selected="true" /><select idref="V-271492" selected="true" /><select idref="V-271493" selected="true" /><select idref="V-271494" selected="true" /><select idref="V-271495" selected="true" /><select idref="V-271496" selected="true" /><select idref="V-271497" selected="true" /><select idref="V-271498" selected="true" /><select idref="V-271499" selected="true" /><select idref="V-271500" selected="true" /><select idref="V-271501" selected="true" /><select idref="V-271502" selected="true" /><select idref="V-271503" selected="true" /><select idref="V-271504" selected="true" /><select idref="V-271505" selected="true" /><select idref="V-271506" selected="true" /><select idref="V-271507" selected="true" /><select idref="V-271508" selected="true" /><select idref="V-271509" selected="true" /><select idref="V-271510" selected="true" /><select idref="V-271511" selected="true" /><select idref="V-271512" selected="true" /><select idref="V-271513" selected="true" /><select idref="V-271514" selected="true" /><select idref="V-271515" selected="true" /><select idref="V-271516" selected="true" /><select idref="V-271517" selected="true" /><select idref="V-271518" selected="true" /><select idref="V-271519" selected="true" /><select idref="V-271520" selected="true" /><select idref="V-271521" selected="true" /><select idref="V-271522" selected="true" /><select idref="V-271523" selected="true" /><select idref="V-271524" selected="true" /><select idref="V-271525" selected="true" /><select idref="V-271526" selected="true" /><select idref="V-271527" selected="true" /><select idref="V-271528" selected="true" /><select idref="V-271529" selected="true" /><select idref="V-271530" selected="true" /><select idref="V-271531" selected="true" /><select idref="V-271532" selected="true" /><select idref="V-271533" selected="true" /><select idref="V-271534" selected="true" /><select idref="V-271535" selected="true" /><select idref="V-271536" selected="true" /><select idref="V-271537" selected="true" /><select idref="V-271538" selected="true" /><select idref="V-271539" selected="true" /><select idref="V-271540" selected="true" /><select idref="V-271541" selected="true" /><select idref="V-271542" selected="true" /><select idref="V-271543" selected="true" /><select idref="V-271544" selected="true" /><select idref="V-271545" selected="true" /><select idref="V-271546" selected="true" /><select idref="V-271547" selected="true" /><select idref="V-271548" selected="true" /><select idref="V-271549" selected="true" /><select idref="V-271550" selected="true" /><select idref="V-271551" selected="true" /><select idref="V-271552" selected="true" /><select idref="V-271553" selected="true" /><select idref="V-271554" selected="true" /><select idref="V-271555" selected="true" /><select idref="V-271556" selected="true" /><select idref="V-271557" selected="true" /><select idref="V-271558" selected="true" /><select idref="V-271559" selected="true" /><select idref="V-271560" selected="true" /><select idref="V-271561" selected="true" /><select idref="V-271562" selected="true" /><select idref="V-271563" selected="true" /><select idref="V-271564" selected="true" /><select idref="V-271565" selected="true" /><select idref="V-271566" selected="true" /><select idref="V-271567" selected="true" /><select idref="V-271568" selected="true" /><select idref="V-271569" selected="true" /><select idref="V-271570" selected="true" /><select idref="V-271571" selected="true" /><select idref="V-271572" selected="true" /><select idref="V-271573" selected="true" /><select idref="V-271574" selected="true" /><select idref="V-271575" selected="true" /><select idref="V-271576" selected="true" /><select idref="V-271577" selected="true" /><select idref="V-271578" selected="true" /><select idref="V-271579" selected="true" /><select idref="V-271580" selected="true" /><select idref="V-271581" selected="true" /><select idref="V-271582" selected="true" /><select idref="V-271583" selected="true" /><select idref="V-271584" selected="true" /><select idref="V-271585" selected="true" /><select idref="V-271586" selected="true" /><select idref="V-271587" selected="true" /><select idref="V-271588" selected="true" /><select idref="V-271589" selected="true" /><select idref="V-271590" selected="true" /><select idref="V-271591" selected="true" /><select idref="V-271592" selected="true" /><select idref="V-271593" selected="true" /><select idref="V-271594" selected="true" /><select idref="V-271595" selected="true" /><select idref="V-271596" selected="true" /><select idref="V-271597" selected="true" /><select idref="V-271598" selected="true" /><select idref="V-271599" selected="true" /><select idref="V-271600" selected="true" /><select idref="V-271601" selected="true" /><select idref="V-271602" selected="true" /><select idref="V-271603" selected="true" /><select idref="V-271604" selected="true" /><select idref="V-271605" selected="true" /><select idref="V-271606" selected="true" /><select idref="V-271607" selected="true" /><select idref="V-271608" selected="true" /><select idref="V-271609" selected="true" /><select idref="V-271610" selected="true" /><select idref="V-271611" selected="true" /><select idref="V-271612" selected="true" /><select idref="V-271613" selected="true" /><select idref="V-271614" selected="true" /><select idref="V-271615" selected="true" /><select idref="V-271616" selected="true" /><select idref="V-271617" selected="true" /><select idref="V-271618" selected="true" /><select idref="V-271619" selected="true" /><select idref="V-271620" selected="true" /><select idref="V-271621" selected="true" /><select idref="V-271622" selected="true" /><select idref="V-271623" selected="true" /><select idref="V-271624" selected="true" /><select idref="V-271625" selected="true" /><select idref="V-271626" selected="true" /><select idref="V-271627" selected="true" /><select idref="V-271628" selected="true" /><select idref="V-271629" selected="true" /><select idref="V-271630" selected="true" /><select idref="V-271631" selected="true" /><select idref="V-271632" selected="true" /><select idref="V-271633" selected="true" /><select idref="V-271634" selected="true" /><select idref="V-271635" selected="true" /><select idref="V-271636" selected="true" /><select idref="V-271637" selected="true" /><select idref="V-271638" selected="true" /><select idref="V-271639" selected="true" /><select idref="V-271641" selected="true" /><select idref="V-271642" selected="true" /><select idref="V-271643" selected="true" /><select idref="V-271644" selected="true" /><select idref="V-271645" selected="true" /><select idref="V-271646" selected="true" /><select idref="V-271647" selected="true" /><select idref="V-271648" selected="true" /><select idref="V-271649" selected="true" /><select idref="V-271650" selected="true" /><select idref="V-271651" selected="true" /><select idref="V-271652" selected="true" /><select idref="V-271653" selected="true" /><select idref="V-271654" selected="true" /><select idref="V-271655" selected="true" /><select idref="V-271656" selected="true" /><select idref="V-271657" selected="true" /><select idref="V-271658" selected="true" /><select idref="V-271659" selected="true" /><select idref="V-271660" selected="true" /><select idref="V-271661" selected="true" /><select idref="V-271662" selected="true" /><select idref="V-271663" selected="true" /><select idref="V-271664" selected="true" /><select idref="V-271665" selected="true" /><select idref="V-271666" selected="true" /><select idref="V-271667" selected="true" /><select idref="V-271668" selected="true" /><select idref="V-271669" selected="true" /><select idref="V-271670" selected="true" /><select idref="V-271671" selected="true" /><select idref="V-271672" selected="true" /><select idref="V-271673" selected="true" /><select idref="V-271674" selected="true" /><select idref="V-271676" selected="true" /><select idref="V-271677" selected="true" /><select idref="V-271678" selected="true" /><select idref="V-271679" selected="true" /><select idref="V-271680" selected="true" /><select idref="V-271681" selected="true" /><select idref="V-271682" selected="true" /><select idref="V-271683" selected="true" /><select idref="V-271684" selected="true" /><select idref="V-271685" selected="true" /><select idref="V-271686" selected="true" /><select idref="V-271687" selected="true" /><select idref="V-271688" selected="true" /><select idref="V-271689" selected="true" /><select idref="V-271690" selected="true" /><select idref="V-271691" selected="true" /><select idref="V-271692" selected="true" /><select idref="V-271693" selected="true" /><select idref="V-271694" selected="true" /><select idref="V-271695" selected="true" /><select idref="V-271696" selected="true" /><select idref="V-271697" selected="true" /><select idref="V-271698" selected="true" /><select idref="V-271699" selected="true" /><select idref="V-271700" selected="true" /><select idref="V-271701" selected="true" /><select idref="V-271703" selected="true" /><select idref="V-271704" selected="true" /><select idref="V-271705" selected="true" /><select idref="V-271706" selected="true" /><select idref="V-271707" selected="true" /><select idref="V-271708" selected="true" /><select idref="V-271709" selected="true" /><select idref="V-271710" selected="true" /><select idref="V-271711" selected="true" /><select idref="V-271712" selected="true" /><select idref="V-271713" selected="true" /><select idref="V-271714" selected="true" /><select idref="V-271715" selected="true" /><select idref="V-271716" selected="true" /><select idref="V-271717" selected="true" /><select idref="V-271718" selected="true" /><select idref="V-271719" selected="true" /><select idref="V-271720" selected="true" /><select idref="V-271721" selected="true" /><select idref="V-271722" selected="true" /><select idref="V-271723" selected="true" /><select idref="V-271724" selected="true" /><select idref="V-271725" selected="true" /><select idref="V-271726" selected="true" /><select idref="V-271727" selected="true" /><select idref="V-271728" selected="true" /><select idref="V-271729" selected="true" /><select idref="V-271730" selected="true" /><select idref="V-271731" selected="true" /><select idref="V-271732" selected="true" /><select idref="V-271733" selected="true" /><select idref="V-271734" selected="true" /><select idref="V-271735" selected="true" /><select idref="V-271736" selected="true" /><select idref="V-271737" selected="true" /><select idref="V-271738" selected="true" /><select idref="V-271739" selected="true" /><select idref="V-271740" selected="true" /><select idref="V-271741" selected="true" /><select idref="V-271742" selected="true" /><select idref="V-271743" selected="true" /><select idref="V-271744" selected="true" /><select idref="V-271745" selected="true" /><select idref="V-271746" selected="true" /><select idref="V-271747" selected="true" /><select idref="V-271748" selected="true" /><select idref="V-271749" selected="true" /><select idref="V-271750" selected="true" /><select idref="V-271751" selected="true" /><select idref="V-271752" selected="true" /><select idref="V-271753" selected="true" /><select idref="V-271754" selected="true" /><select idref="V-271755" selected="true" /><select idref="V-271756" selected="true" /><select idref="V-271757" selected="true" /><select idref="V-271758" selected="true" /><select idref="V-271759" selected="true" /><select idref="V-271760" selected="true" /><select idref="V-271761" selected="true" /><select idref="V-271763" selected="true" /><select idref="V-271764" selected="true" /><select idref="V-271766" selected="true" /><select idref="V-271768" selected="true" /><select idref="V-271769" selected="true" /><select idref="V-271770" selected="true" /><select idref="V-271771" selected="true" /><select idref="V-271772" selected="true" /><select idref="V-271773" selected="true" /><select idref="V-271774" selected="true" /><select idref="V-271775" selected="true" /><select idref="V-271776" selected="true" /><select idref="V-271777" selected="true" /><select idref="V-271778" selected="true" /><select idref="V-271779" selected="true" /><select idref="V-271780" selected="true" /><select idref="V-271781" selected="true" /><select idref="V-271782" selected="true" /><select idref="V-271783" selected="true" /><select idref="V-271784" selected="true" /><select idref="V-271785" selected="true" /><select idref="V-271786" selected="true" /><select idref="V-271787" selected="true" /><select idref="V-271788" selected="true" /><select idref="V-271789" selected="true" /><select idref="V-271790" selected="true" /><select idref="V-271791" selected="true" /><select idref="V-271792" selected="true" /><select idref="V-271793" selected="true" /><select idref="V-271794" selected="true" /><select idref="V-271795" selected="true" /><select idref="V-271796" selected="true" /><select idref="V-271797" selected="true" /><select idref="V-271798" selected="true" /><select idref="V-271799" selected="true" /><select idref="V-271800" selected="true" /><select idref="V-271801" selected="true" /><select idref="V-271802" selected="true" /><select idref="V-271803" selected="true" /><select idref="V-271804" selected="true" /><select idref="V-271805" selected="true" /><select idref="V-271806" selected="true" /><select idref="V-271807" selected="true" /><select idref="V-271808" selected="true" /><select idref="V-271809" selected="true" /><select idref="V-271810" selected="true" /><select idref="V-271811" selected="true" /><select idref="V-271812" selected="true" /><select idref="V-271813" selected="true" /><select idref="V-271814" selected="true" /><select idref="V-271815" selected="true" /><select idref="V-271816" selected="true" /><select idref="V-271817" selected="true" /><select idref="V-271818" selected="true" /><select idref="V-271819" selected="true" /><select idref="V-271820" selected="true" /><select idref="V-271821" selected="true" /><select idref="V-271822" selected="true" /><select idref="V-271823" selected="true" /><select idref="V-271824" selected="true" /><select idref="V-271825" selected="true" /><select idref="V-271826" selected="true" /><select idref="V-271827" selected="true" /><select idref="V-271828" selected="true" /><select idref="V-271829" selected="true" /><select idref="V-271830" selected="true" /><select idref="V-271831" selected="true" /><select idref="V-271832" selected="true" /><select idref="V-271833" selected="true" /><select idref="V-271834" selected="true" /><select idref="V-271835" selected="true" /><select idref="V-271836" selected="true" /><select idref="V-271837" selected="true" /><select idref="V-271838" selected="true" /><select idref="V-271839" selected="true" /><select idref="V-271840" selected="true" /><select idref="V-271841" selected="true" /><select idref="V-271842" selected="true" /><select idref="V-271843" selected="true" /><select idref="V-271844" selected="true" /><select idref="V-271845" selected="true" /><select idref="V-271846" selected="true" /><select idref="V-271847" selected="true" /><select idref="V-271848" selected="true" /><select idref="V-271849" selected="true" /><select idref="V-271850" selected="true" /><select idref="V-271851" selected="true" /><select idref="V-271852" selected="true" /><select idref="V-271853" selected="true" /><select idref="V-271854" selected="true" /><select idref="V-271855" selected="true" /><select idref="V-271856" selected="true" /><select idref="V-271857" selected="true" /><select idref="V-271858" selected="true" /><select idref="V-271859" selected="true" /><select idref="V-271860" selected="true" /><select idref="V-271861" selected="true" /><select idref="V-271862" selected="true" /><select idref="V-271863" selected="true" /><select idref="V-271864" selected="true" /><select idref="V-271865" selected="true" /><select idref="V-271866" selected="true" /><select idref="V-271867" selected="true" /><select idref="V-271868" selected="true" /><select idref="V-271869" selected="true" /><select idref="V-271870" selected="true" /><select idref="V-271871" selected="true" /><select idref="V-271872" selected="true" /><select idref="V-271873" selected="true" /><select idref="V-271874" selected="true" /><select idref="V-271875" selected="true" /><select idref="V-271876" selected="true" /><select idref="V-271877" selected="true" /><select idref="V-271878" selected="true" /><select idref="V-271879" selected="true" /><select idref="V-271880" selected="true" /><select idref="V-271881" selected="true" /><select idref="V-271882" selected="true" /><select idref="V-271883" selected="true" /><select idref="V-271884" selected="true" /><select idref="V-271885" selected="true" /><select idref="V-271886" selected="true" /><select idref="V-271901" selected="true" /><select idref="V-278952" selected="true" /><select idref="V-279935" selected="true" /></Profile><Profile id="MAC-3_Classified"><title>III - Administrative Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-271431" selected="true" /><select idref="V-271432" selected="true" /><select idref="V-271433" selected="true" /><select idref="V-271434" selected="true" /><select idref="V-271435" selected="true" /><select idref="V-271436" selected="true" /><select idref="V-271437" selected="true" /><select idref="V-271438" selected="true" /><select idref="V-271439" selected="true" /><select idref="V-271440" selected="true" /><select idref="V-271441" selected="true" /><select idref="V-271442" selected="true" /><select idref="V-271443" selected="true" /><select idref="V-271444" selected="true" /><select idref="V-271445" selected="true" /><select idref="V-271446" selected="true" /><select idref="V-271447" selected="true" /><select idref="V-271448" selected="true" /><select idref="V-271449" selected="true" /><select idref="V-271450" selected="true" /><select idref="V-271451" selected="true" /><select idref="V-271452" selected="true" /><select idref="V-271453" selected="true" /><select idref="V-271454" selected="true" /><select idref="V-271455" selected="true" /><select idref="V-271456" selected="true" /><select idref="V-271457" selected="true" /><select idref="V-271458" selected="true" /><select idref="V-271459" selected="true" /><select idref="V-271460" selected="true" /><select idref="V-271461" selected="true" /><select idref="V-271462" selected="true" /><select idref="V-271463" selected="true" /><select idref="V-271464" selected="true" /><select idref="V-271465" selected="true" /><select idref="V-271466" selected="true" /><select idref="V-271467" selected="true" /><select idref="V-271468" selected="true" /><select idref="V-271469" selected="true" /><select idref="V-271470" selected="true" /><select idref="V-271471" selected="true" /><select idref="V-271472" selected="true" /><select idref="V-271473" selected="true" /><select idref="V-271474" selected="true" /><select idref="V-271475" selected="true" /><select idref="V-271476" selected="true" /><select idref="V-271477" selected="true" /><select idref="V-271478" selected="true" /><select idref="V-271479" selected="true" /><select idref="V-271480" selected="true" /><select idref="V-271481" selected="true" /><select idref="V-271482" selected="true" /><select idref="V-271483" selected="true" /><select idref="V-271484" selected="true" /><select idref="V-271485" selected="true" /><select idref="V-271486" selected="true" /><select idref="V-271487" selected="true" /><select idref="V-271488" selected="true" /><select idref="V-271489" selected="true" /><select idref="V-271490" selected="true" /><select idref="V-271491" selected="true" /><select idref="V-271492" selected="true" /><select idref="V-271493" selected="true" /><select idref="V-271494" selected="true" /><select idref="V-271495" selected="true" /><select idref="V-271496" selected="true" /><select idref="V-271497" selected="true" /><select idref="V-271498" selected="true" /><select idref="V-271499" selected="true" /><select idref="V-271500" selected="true" /><select idref="V-271501" selected="true" /><select idref="V-271502" selected="true" /><select idref="V-271503" selected="true" /><select idref="V-271504" selected="true" /><select idref="V-271505" selected="true" /><select idref="V-271506" selected="true" /><select idref="V-271507" selected="true" /><select idref="V-271508" selected="true" /><select idref="V-271509" selected="true" /><select idref="V-271510" selected="true" /><select idref="V-271511" selected="true" /><select idref="V-271512" selected="true" /><select idref="V-271513" selected="true" /><select idref="V-271514" selected="true" /><select idref="V-271515" selected="true" /><select idref="V-271516" selected="true" /><select idref="V-271517" selected="true" /><select idref="V-271518" selected="true" /><select idref="V-271519" selected="true" /><select idref="V-271520" selected="true" /><select idref="V-271521" selected="true" /><select idref="V-271522" selected="true" /><select idref="V-271523" selected="true" /><select idref="V-271524" selected="true" /><select idref="V-271525" selected="true" /><select idref="V-271526" selected="true" /><select idref="V-271527" selected="true" /><select idref="V-271528" selected="true" /><select idref="V-271529" selected="true" /><select idref="V-271530" selected="true" /><select idref="V-271531" selected="true" /><select idref="V-271532" selected="true" /><select idref="V-271533" selected="true" /><select idref="V-271534" selected="true" /><select idref="V-271535" selected="true" /><select idref="V-271536" selected="true" /><select idref="V-271537" selected="true" /><select idref="V-271538" selected="true" /><select idref="V-271539" selected="true" /><select idref="V-271540" selected="true" /><select idref="V-271541" selected="true" /><select idref="V-271542" selected="true" /><select idref="V-271543" selected="true" /><select idref="V-271544" selected="true" /><select idref="V-271545" selected="true" /><select idref="V-271546" selected="true" /><select idref="V-271547" selected="true" /><select idref="V-271548" selected="true" /><select idref="V-271549" selected="true" /><select idref="V-271550" selected="true" /><select idref="V-271551" selected="true" /><select idref="V-271552" selected="true" /><select idref="V-271553" selected="true" /><select idref="V-271554" selected="true" /><select idref="V-271555" selected="true" /><select idref="V-271556" selected="true" /><select idref="V-271557" selected="true" /><select idref="V-271558" selected="true" /><select idref="V-271559" selected="true" /><select idref="V-271560" selected="true" /><select idref="V-271561" selected="true" /><select idref="V-271562" selected="true" /><select idref="V-271563" selected="true" /><select idref="V-271564" selected="true" /><select idref="V-271565" selected="true" /><select idref="V-271566" selected="true" /><select idref="V-271567" selected="true" /><select idref="V-271568" selected="true" /><select idref="V-271569" selected="true" /><select idref="V-271570" selected="true" /><select idref="V-271571" selected="true" /><select idref="V-271572" selected="true" /><select idref="V-271573" selected="true" /><select idref="V-271574" selected="true" /><select idref="V-271575" selected="true" /><select idref="V-271576" selected="true" /><select idref="V-271577" selected="true" /><select idref="V-271578" selected="true" /><select idref="V-271579" selected="true" /><select idref="V-271580" selected="true" /><select idref="V-271581" selected="true" /><select idref="V-271582" selected="true" /><select idref="V-271583" selected="true" /><select idref="V-271584" selected="true" /><select idref="V-271585" selected="true" /><select idref="V-271586" selected="true" /><select idref="V-271587" selected="true" /><select idref="V-271588" selected="true" /><select idref="V-271589" selected="true" /><select idref="V-271590" selected="true" /><select idref="V-271591" selected="true" /><select idref="V-271592" selected="true" /><select idref="V-271593" selected="true" /><select idref="V-271594" selected="true" /><select idref="V-271595" selected="true" /><select idref="V-271596" selected="true" /><select idref="V-271597" selected="true" /><select idref="V-271598" selected="true" /><select idref="V-271599" selected="true" /><select idref="V-271600" selected="true" /><select idref="V-271601" selected="true" /><select idref="V-271602" selected="true" /><select idref="V-271603" selected="true" /><select idref="V-271604" selected="true" /><select idref="V-271605" selected="true" /><select idref="V-271606" selected="true" /><select idref="V-271607" selected="true" /><select idref="V-271608" selected="true" /><select idref="V-271609" selected="true" /><select idref="V-271610" selected="true" /><select idref="V-271611" selected="true" /><select idref="V-271612" selected="true" /><select idref="V-271613" selected="true" /><select idref="V-271614" selected="true" /><select idref="V-271615" selected="true" /><select idref="V-271616" selected="true" /><select idref="V-271617" selected="true" /><select idref="V-271618" selected="true" /><select idref="V-271619" selected="true" /><select idref="V-271620" selected="true" /><select idref="V-271621" selected="true" /><select idref="V-271622" selected="true" /><select idref="V-271623" selected="true" /><select idref="V-271624" selected="true" /><select idref="V-271625" selected="true" /><select idref="V-271626" selected="true" /><select idref="V-271627" selected="true" /><select idref="V-271628" selected="true" /><select idref="V-271629" selected="true" /><select idref="V-271630" selected="true" /><select idref="V-271631" selected="true" /><select idref="V-271632" selected="true" /><select idref="V-271633" selected="true" /><select idref="V-271634" selected="true" /><select idref="V-271635" selected="true" /><select idref="V-271636" selected="true" /><select idref="V-271637" selected="true" /><select idref="V-271638" selected="true" /><select idref="V-271639" selected="true" /><select idref="V-271641" selected="true" /><select idref="V-271642" selected="true" /><select idref="V-271643" selected="true" /><select idref="V-271644" selected="true" /><select idref="V-271645" selected="true" /><select idref="V-271646" selected="true" /><select idref="V-271647" selected="true" /><select idref="V-271648" selected="true" /><select idref="V-271649" selected="true" /><select idref="V-271650" selected="true" /><select idref="V-271651" selected="true" /><select idref="V-271652" selected="true" /><select idref="V-271653" selected="true" /><select idref="V-271654" selected="true" /><select idref="V-271655" selected="true" /><select idref="V-271656" selected="true" /><select idref="V-271657" selected="true" /><select idref="V-271658" selected="true" /><select idref="V-271659" selected="true" /><select idref="V-271660" selected="true" /><select idref="V-271661" selected="true" /><select idref="V-271662" selected="true" /><select idref="V-271663" selected="true" /><select idref="V-271664" selected="true" /><select idref="V-271665" selected="true" /><select idref="V-271666" selected="true" /><select idref="V-271667" selected="true" /><select idref="V-271668" selected="true" /><select idref="V-271669" selected="true" /><select idref="V-271670" selected="true" /><select idref="V-271671" selected="true" /><select idref="V-271672" selected="true" /><select idref="V-271673" selected="true" /><select idref="V-271674" selected="true" /><select idref="V-271676" selected="true" /><select idref="V-271677" selected="true" /><select idref="V-271678" selected="true" /><select idref="V-271679" selected="true" /><select idref="V-271680" selected="true" /><select idref="V-271681" selected="true" /><select idref="V-271682" selected="true" /><select idref="V-271683" selected="true" /><select idref="V-271684" selected="true" /><select idref="V-271685" selected="true" /><select idref="V-271686" selected="true" /><select idref="V-271687" selected="true" /><select idref="V-271688" selected="true" /><select idref="V-271689" selected="true" /><select idref="V-271690" selected="true" /><select idref="V-271691" selected="true" /><select idref="V-271692" selected="true" /><select idref="V-271693" selected="true" /><select idref="V-271694" selected="true" /><select idref="V-271695" selected="true" /><select idref="V-271696" selected="true" /><select idref="V-271697" selected="true" /><select idref="V-271698" selected="true" /><select idref="V-271699" selected="true" /><select idref="V-271700" selected="true" /><select idref="V-271701" selected="true" /><select idref="V-271703" selected="true" /><select idref="V-271704" selected="true" /><select idref="V-271705" selected="true" /><select idref="V-271706" selected="true" /><select idref="V-271707" selected="true" /><select idref="V-271708" selected="true" /><select idref="V-271709" selected="true" /><select idref="V-271710" selected="true" /><select idref="V-271711" selected="true" /><select idref="V-271712" selected="true" /><select idref="V-271713" selected="true" /><select idref="V-271714" selected="true" /><select idref="V-271715" selected="true" /><select idref="V-271716" selected="true" /><select idref="V-271717" selected="true" /><select idref="V-271718" selected="true" /><select idref="V-271719" selected="true" /><select idref="V-271720" selected="true" /><select idref="V-271721" selected="true" /><select idref="V-271722" selected="true" /><select idref="V-271723" selected="true" /><select idref="V-271724" selected="true" /><select idref="V-271725" selected="true" /><select idref="V-271726" selected="true" /><select idref="V-271727" selected="true" /><select idref="V-271728" selected="true" /><select idref="V-271729" selected="true" /><select idref="V-271730" selected="true" /><select idref="V-271731" selected="true" /><select idref="V-271732" selected="true" /><select idref="V-271733" selected="true" /><select idref="V-271734" selected="true" /><select idref="V-271735" selected="true" /><select idref="V-271736" selected="true" /><select idref="V-271737" selected="true" /><select idref="V-271738" selected="true" /><select idref="V-271739" selected="true" /><select idref="V-271740" selected="true" /><select idref="V-271741" selected="true" /><select idref="V-271742" selected="true" /><select idref="V-271743" selected="true" /><select idref="V-271744" selected="true" /><select idref="V-271745" selected="true" /><select idref="V-271746" selected="true" /><select idref="V-271747" selected="true" /><select idref="V-271748" selected="true" /><select idref="V-271749" selected="true" /><select idref="V-271750" selected="true" /><select idref="V-271751" selected="true" /><select idref="V-271752" selected="true" /><select idref="V-271753" selected="true" /><select idref="V-271754" selected="true" /><select idref="V-271755" selected="true" /><select idref="V-271756" selected="true" /><select idref="V-271757" selected="true" /><select idref="V-271758" selected="true" /><select idref="V-271759" selected="true" /><select idref="V-271760" selected="true" /><select idref="V-271761" selected="true" /><select idref="V-271763" selected="true" /><select idref="V-271764" selected="true" /><select idref="V-271766" selected="true" /><select idref="V-271768" selected="true" /><select idref="V-271769" selected="true" /><select idref="V-271770" selected="true" /><select idref="V-271771" selected="true" /><select idref="V-271772" selected="true" /><select idref="V-271773" selected="true" /><select idref="V-271774" selected="true" /><select idref="V-271775" selected="true" /><select idref="V-271776" selected="true" /><select idref="V-271777" selected="true" /><select idref="V-271778" selected="true" /><select idref="V-271779" selected="true" /><select idref="V-271780" selected="true" /><select idref="V-271781" selected="true" /><select idref="V-271782" selected="true" /><select idref="V-271783" selected="true" /><select idref="V-271784" selected="true" /><select idref="V-271785" selected="true" /><select idref="V-271786" selected="true" /><select idref="V-271787" selected="true" /><select idref="V-271788" selected="true" /><select idref="V-271789" selected="true" /><select idref="V-271790" selected="true" /><select idref="V-271791" selected="true" /><select idref="V-271792" selected="true" /><select idref="V-271793" selected="true" /><select idref="V-271794" selected="true" /><select idref="V-271795" selected="true" /><select idref="V-271796" selected="true" /><select idref="V-271797" selected="true" /><select idref="V-271798" selected="true" /><select idref="V-271799" selected="true" /><select idref="V-271800" selected="true" /><select idref="V-271801" selected="true" /><select idref="V-271802" selected="true" /><select idref="V-271803" selected="true" /><select idref="V-271804" selected="true" /><select idref="V-271805" selected="true" /><select idref="V-271806" selected="true" /><select idref="V-271807" selected="true" /><select idref="V-271808" selected="true" /><select idref="V-271809" selected="true" /><select idref="V-271810" selected="true" /><select idref="V-271811" selected="true" /><select idref="V-271812" selected="true" /><select idref="V-271813" selected="true" /><select idref="V-271814" selected="true" /><select idref="V-271815" selected="true" /><select idref="V-271816" selected="true" /><select idref="V-271817" selected="true" /><select idref="V-271818" selected="true" /><select idref="V-271819" selected="true" /><select idref="V-271820" selected="true" /><select idref="V-271821" selected="true" /><select idref="V-271822" selected="true" /><select idref="V-271823" selected="true" /><select idref="V-271824" selected="true" /><select idref="V-271825" selected="true" /><select idref="V-271826" selected="true" /><select idref="V-271827" selected="true" /><select idref="V-271828" selected="true" /><select idref="V-271829" selected="true" /><select idref="V-271830" selected="true" /><select idref="V-271831" selected="true" /><select idref="V-271832" selected="true" /><select idref="V-271833" selected="true" /><select idref="V-271834" selected="true" /><select idref="V-271835" selected="true" /><select idref="V-271836" selected="true" /><select idref="V-271837" selected="true" /><select idref="V-271838" selected="true" /><select idref="V-271839" selected="true" /><select idref="V-271840" selected="true" /><select idref="V-271841" selected="true" /><select idref="V-271842" selected="true" /><select idref="V-271843" selected="true" /><select idref="V-271844" selected="true" /><select idref="V-271845" selected="true" /><select idref="V-271846" selected="true" /><select idref="V-271847" selected="true" /><select idref="V-271848" selected="true" /><select idref="V-271849" selected="true" /><select idref="V-271850" selected="true" /><select idref="V-271851" selected="true" /><select idref="V-271852" selected="true" /><select idref="V-271853" selected="true" /><select idref="V-271854" selected="true" /><select idref="V-271855" selected="true" /><select idref="V-271856" selected="true" /><select idref="V-271857" selected="true" /><select idref="V-271858" selected="true" /><select idref="V-271859" selected="true" /><select idref="V-271860" selected="true" /><select idref="V-271861" selected="true" /><select idref="V-271862" selected="true" /><select idref="V-271863" selected="true" /><select idref="V-271864" selected="true" /><select idref="V-271865" selected="true" /><select idref="V-271866" selected="true" /><select idref="V-271867" selected="true" /><select idref="V-271868" selected="true" /><select idref="V-271869" selected="true" /><select idref="V-271870" selected="true" /><select idref="V-271871" selected="true" /><select idref="V-271872" selected="true" /><select idref="V-271873" selected="true" /><select idref="V-271874" selected="true" /><select idref="V-271875" selected="true" /><select idref="V-271876" selected="true" /><select idref="V-271877" selected="true" /><select idref="V-271878" selected="true" /><select idref="V-271879" selected="true" /><select idref="V-271880" selected="true" /><select idref="V-271881" selected="true" /><select idref="V-271882" selected="true" /><select idref="V-271883" selected="true" /><select idref="V-271884" selected="true" /><select idref="V-271885" selected="true" /><select idref="V-271886" selected="true" /><select idref="V-271901" selected="true" /><select idref="V-278952" selected="true" /><select idref="V-279935" selected="true" /></Profile><Profile id="MAC-3_Public"><title>III - Administrative Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-271431" selected="true" /><select idref="V-271432" selected="true" /><select idref="V-271433" selected="true" /><select idref="V-271434" selected="true" /><select idref="V-271435" selected="true" /><select idref="V-271436" selected="true" /><select idref="V-271437" selected="true" /><select idref="V-271438" selected="true" /><select idref="V-271439" selected="true" /><select idref="V-271440" selected="true" /><select idref="V-271441" selected="true" /><select idref="V-271442" selected="true" /><select idref="V-271443" selected="true" /><select idref="V-271444" selected="true" /><select idref="V-271445" selected="true" /><select idref="V-271446" selected="true" /><select idref="V-271447" selected="true" /><select idref="V-271448" selected="true" /><select idref="V-271449" selected="true" /><select idref="V-271450" selected="true" /><select idref="V-271451" selected="true" /><select idref="V-271452" selected="true" /><select idref="V-271453" selected="true" /><select idref="V-271454" selected="true" /><select idref="V-271455" selected="true" /><select idref="V-271456" selected="true" /><select idref="V-271457" selected="true" /><select idref="V-271458" selected="true" /><select idref="V-271459" selected="true" /><select idref="V-271460" selected="true" /><select idref="V-271461" selected="true" /><select idref="V-271462" selected="true" /><select idref="V-271463" selected="true" /><select idref="V-271464" selected="true" /><select idref="V-271465" selected="true" /><select idref="V-271466" selected="true" /><select idref="V-271467" selected="true" /><select idref="V-271468" selected="true" /><select idref="V-271469" selected="true" /><select idref="V-271470" selected="true" /><select idref="V-271471" selected="true" /><select idref="V-271472" selected="true" /><select idref="V-271473" selected="true" /><select idref="V-271474" selected="true" /><select idref="V-271475" selected="true" /><select idref="V-271476" selected="true" /><select idref="V-271477" selected="true" /><select idref="V-271478" selected="true" /><select idref="V-271479" selected="true" /><select idref="V-271480" selected="true" /><select idref="V-271481" selected="true" /><select idref="V-271482" selected="true" /><select idref="V-271483" selected="true" /><select idref="V-271484" selected="true" /><select idref="V-271485" selected="true" /><select idref="V-271486" selected="true" /><select idref="V-271487" selected="true" /><select idref="V-271488" selected="true" /><select idref="V-271489" selected="true" /><select idref="V-271490" selected="true" /><select idref="V-271491" selected="true" /><select idref="V-271492" selected="true" /><select idref="V-271493" selected="true" /><select idref="V-271494" selected="true" /><select idref="V-271495" selected="true" /><select idref="V-271496" selected="true" /><select idref="V-271497" selected="true" /><select idref="V-271498" selected="true" /><select idref="V-271499" selected="true" /><select idref="V-271500" selected="true" /><select idref="V-271501" selected="true" /><select idref="V-271502" selected="true" /><select idref="V-271503" selected="true" /><select idref="V-271504" selected="true" /><select idref="V-271505" selected="true" /><select idref="V-271506" selected="true" /><select idref="V-271507" selected="true" /><select idref="V-271508" selected="true" /><select idref="V-271509" selected="true" /><select idref="V-271510" selected="true" /><select idref="V-271511" selected="true" /><select idref="V-271512" selected="true" /><select idref="V-271513" selected="true" /><select idref="V-271514" selected="true" /><select idref="V-271515" selected="true" /><select idref="V-271516" selected="true" /><select idref="V-271517" selected="true" /><select idref="V-271518" selected="true" /><select idref="V-271519" selected="true" /><select idref="V-271520" selected="true" /><select idref="V-271521" selected="true" /><select idref="V-271522" selected="true" /><select idref="V-271523" selected="true" /><select idref="V-271524" selected="true" /><select idref="V-271525" selected="true" /><select idref="V-271526" selected="true" /><select idref="V-271527" selected="true" /><select idref="V-271528" selected="true" /><select idref="V-271529" selected="true" /><select idref="V-271530" selected="true" /><select idref="V-271531" selected="true" /><select idref="V-271532" selected="true" /><select idref="V-271533" selected="true" /><select idref="V-271534" selected="true" /><select idref="V-271535" selected="true" /><select idref="V-271536" selected="true" /><select idref="V-271537" selected="true" /><select idref="V-271538" selected="true" /><select idref="V-271539" selected="true" /><select idref="V-271540" selected="true" /><select idref="V-271541" selected="true" /><select idref="V-271542" selected="true" /><select idref="V-271543" selected="true" /><select idref="V-271544" selected="true" /><select idref="V-271545" selected="true" /><select idref="V-271546" selected="true" /><select idref="V-271547" selected="true" /><select idref="V-271548" selected="true" /><select idref="V-271549" selected="true" /><select idref="V-271550" selected="true" /><select idref="V-271551" selected="true" /><select idref="V-271552" selected="true" /><select idref="V-271553" selected="true" /><select idref="V-271554" selected="true" /><select idref="V-271555" selected="true" /><select idref="V-271556" selected="true" /><select idref="V-271557" selected="true" /><select idref="V-271558" selected="true" /><select idref="V-271559" selected="true" /><select idref="V-271560" selected="true" /><select idref="V-271561" selected="true" /><select idref="V-271562" selected="true" /><select idref="V-271563" selected="true" /><select idref="V-271564" selected="true" /><select idref="V-271565" selected="true" /><select idref="V-271566" selected="true" /><select idref="V-271567" selected="true" /><select idref="V-271568" selected="true" /><select idref="V-271569" selected="true" /><select idref="V-271570" selected="true" /><select idref="V-271571" selected="true" /><select idref="V-271572" selected="true" /><select idref="V-271573" selected="true" /><select idref="V-271574" selected="true" /><select idref="V-271575" selected="true" /><select idref="V-271576" selected="true" /><select idref="V-271577" selected="true" /><select idref="V-271578" selected="true" /><select idref="V-271579" selected="true" /><select idref="V-271580" selected="true" /><select idref="V-271581" selected="true" /><select idref="V-271582" selected="true" /><select idref="V-271583" selected="true" /><select idref="V-271584" selected="true" /><select idref="V-271585" selected="true" /><select idref="V-271586" selected="true" /><select idref="V-271587" selected="true" /><select idref="V-271588" selected="true" /><select idref="V-271589" selected="true" /><select idref="V-271590" selected="true" /><select idref="V-271591" selected="true" /><select idref="V-271592" selected="true" /><select idref="V-271593" selected="true" /><select idref="V-271594" selected="true" /><select idref="V-271595" selected="true" /><select idref="V-271596" selected="true" /><select idref="V-271597" selected="true" /><select idref="V-271598" selected="true" /><select idref="V-271599" selected="true" /><select idref="V-271600" selected="true" /><select idref="V-271601" selected="true" /><select idref="V-271602" selected="true" /><select idref="V-271603" selected="true" /><select idref="V-271604" selected="true" /><select idref="V-271605" selected="true" /><select idref="V-271606" selected="true" /><select idref="V-271607" selected="true" /><select idref="V-271608" selected="true" /><select idref="V-271609" selected="true" /><select idref="V-271610" selected="true" /><select idref="V-271611" selected="true" /><select idref="V-271612" selected="true" /><select idref="V-271613" selected="true" /><select idref="V-271614" selected="true" /><select idref="V-271615" selected="true" /><select idref="V-271616" selected="true" /><select idref="V-271617" selected="true" /><select idref="V-271618" selected="true" /><select idref="V-271619" selected="true" /><select idref="V-271620" selected="true" /><select idref="V-271621" selected="true" /><select idref="V-271622" selected="true" /><select idref="V-271623" selected="true" /><select idref="V-271624" selected="true" /><select idref="V-271625" selected="true" /><select idref="V-271626" selected="true" /><select idref="V-271627" selected="true" /><select idref="V-271628" selected="true" /><select idref="V-271629" selected="true" /><select idref="V-271630" selected="true" /><select idref="V-271631" selected="true" /><select idref="V-271632" selected="true" /><select idref="V-271633" selected="true" /><select idref="V-271634" selected="true" /><select idref="V-271635" selected="true" /><select idref="V-271636" selected="true" /><select idref="V-271637" selected="true" /><select idref="V-271638" selected="true" /><select idref="V-271639" selected="true" /><select idref="V-271641" selected="true" /><select idref="V-271642" selected="true" /><select idref="V-271643" selected="true" /><select idref="V-271644" selected="true" /><select idref="V-271645" selected="true" /><select idref="V-271646" selected="true" /><select idref="V-271647" selected="true" /><select idref="V-271648" selected="true" /><select idref="V-271649" selected="true" /><select idref="V-271650" selected="true" /><select idref="V-271651" selected="true" /><select idref="V-271652" selected="true" /><select idref="V-271653" selected="true" /><select idref="V-271654" selected="true" /><select idref="V-271655" selected="true" /><select idref="V-271656" selected="true" /><select idref="V-271657" selected="true" /><select idref="V-271658" selected="true" /><select idref="V-271659" selected="true" /><select idref="V-271660" selected="true" /><select idref="V-271661" selected="true" /><select idref="V-271662" selected="true" /><select idref="V-271663" selected="true" /><select idref="V-271664" selected="true" /><select idref="V-271665" selected="true" /><select idref="V-271666" selected="true" /><select idref="V-271667" selected="true" /><select idref="V-271668" selected="true" /><select idref="V-271669" selected="true" /><select idref="V-271670" selected="true" /><select idref="V-271671" selected="true" /><select idref="V-271672" selected="true" /><select idref="V-271673" selected="true" /><select idref="V-271674" selected="true" /><select idref="V-271676" selected="true" /><select idref="V-271677" selected="true" /><select idref="V-271678" selected="true" /><select idref="V-271679" selected="true" /><select idref="V-271680" selected="true" /><select idref="V-271681" selected="true" /><select idref="V-271682" selected="true" /><select idref="V-271683" selected="true" /><select idref="V-271684" selected="true" /><select idref="V-271685" selected="true" /><select idref="V-271686" selected="true" /><select idref="V-271687" selected="true" /><select idref="V-271688" selected="true" /><select idref="V-271689" selected="true" /><select idref="V-271690" selected="true" /><select idref="V-271691" selected="true" /><select idref="V-271692" selected="true" /><select idref="V-271693" selected="true" /><select idref="V-271694" selected="true" /><select idref="V-271695" selected="true" /><select idref="V-271696" selected="true" /><select idref="V-271697" selected="true" /><select idref="V-271698" selected="true" /><select idref="V-271699" selected="true" /><select idref="V-271700" selected="true" /><select idref="V-271701" selected="true" /><select idref="V-271703" selected="true" /><select idref="V-271704" selected="true" /><select idref="V-271705" selected="true" /><select idref="V-271706" selected="true" /><select idref="V-271707" selected="true" /><select idref="V-271708" selected="true" /><select idref="V-271709" selected="true" /><select idref="V-271710" selected="true" /><select idref="V-271711" selected="true" /><select idref="V-271712" selected="true" /><select idref="V-271713" selected="true" /><select idref="V-271714" selected="true" /><select idref="V-271715" selected="true" /><select idref="V-271716" selected="true" /><select idref="V-271717" selected="true" /><select idref="V-271718" selected="true" /><select idref="V-271719" selected="true" /><select idref="V-271720" selected="true" /><select idref="V-271721" selected="true" /><select idref="V-271722" selected="true" /><select idref="V-271723" selected="true" /><select idref="V-271724" selected="true" /><select idref="V-271725" selected="true" /><select idref="V-271726" selected="true" /><select idref="V-271727" selected="true" /><select idref="V-271728" selected="true" /><select idref="V-271729" selected="true" /><select idref="V-271730" selected="true" /><select idref="V-271731" selected="true" /><select idref="V-271732" selected="true" /><select idref="V-271733" selected="true" /><select idref="V-271734" selected="true" /><select idref="V-271735" selected="true" /><select idref="V-271736" selected="true" /><select idref="V-271737" selected="true" /><select idref="V-271738" selected="true" /><select idref="V-271739" selected="true" /><select idref="V-271740" selected="true" /><select idref="V-271741" selected="true" /><select idref="V-271742" selected="true" /><select idref="V-271743" selected="true" /><select idref="V-271744" selected="true" /><select idref="V-271745" selected="true" /><select idref="V-271746" selected="true" /><select idref="V-271747" selected="true" /><select idref="V-271748" selected="true" /><select idref="V-271749" selected="true" /><select idref="V-271750" selected="true" /><select idref="V-271751" selected="true" /><select idref="V-271752" selected="true" /><select idref="V-271753" selected="true" /><select idref="V-271754" selected="true" /><select idref="V-271755" selected="true" /><select idref="V-271756" selected="true" /><select idref="V-271757" selected="true" /><select idref="V-271758" selected="true" /><select idref="V-271759" selected="true" /><select idref="V-271760" selected="true" /><select idref="V-271761" selected="true" /><select idref="V-271763" selected="true" /><select idref="V-271764" selected="true" /><select idref="V-271766" selected="true" /><select idref="V-271768" selected="true" /><select idref="V-271769" selected="true" /><select idref="V-271770" selected="true" /><select idref="V-271771" selected="true" /><select idref="V-271772" selected="true" /><select idref="V-271773" selected="true" /><select idref="V-271774" selected="true" /><select idref="V-271775" selected="true" /><select idref="V-271776" selected="true" /><select idref="V-271777" selected="true" /><select idref="V-271778" selected="true" /><select idref="V-271779" selected="true" /><select idref="V-271780" selected="true" /><select idref="V-271781" selected="true" /><select idref="V-271782" selected="true" /><select idref="V-271783" selected="true" /><select idref="V-271784" selected="true" /><select idref="V-271785" selected="true" /><select idref="V-271786" selected="true" /><select idref="V-271787" selected="true" /><select idref="V-271788" selected="true" /><select idref="V-271789" selected="true" /><select idref="V-271790" selected="true" /><select idref="V-271791" selected="true" /><select idref="V-271792" selected="true" /><select idref="V-271793" selected="true" /><select idref="V-271794" selected="true" /><select idref="V-271795" selected="true" /><select idref="V-271796" selected="true" /><select idref="V-271797" selected="true" /><select idref="V-271798" selected="true" /><select idref="V-271799" selected="true" /><select idref="V-271800" selected="true" /><select idref="V-271801" selected="true" /><select idref="V-271802" selected="true" /><select idref="V-271803" selected="true" /><select idref="V-271804" selected="true" /><select idref="V-271805" selected="true" /><select idref="V-271806" selected="true" /><select idref="V-271807" selected="true" /><select idref="V-271808" selected="true" /><select idref="V-271809" selected="true" /><select idref="V-271810" selected="true" /><select idref="V-271811" selected="true" /><select idref="V-271812" selected="true" /><select idref="V-271813" selected="true" /><select idref="V-271814" selected="true" /><select idref="V-271815" selected="true" /><select idref="V-271816" selected="true" /><select idref="V-271817" selected="true" /><select idref="V-271818" selected="true" /><select idref="V-271819" selected="true" /><select idref="V-271820" selected="true" /><select idref="V-271821" selected="true" /><select idref="V-271822" selected="true" /><select idref="V-271823" selected="true" /><select idref="V-271824" selected="true" /><select idref="V-271825" selected="true" /><select idref="V-271826" selected="true" /><select idref="V-271827" selected="true" /><select idref="V-271828" selected="true" /><select idref="V-271829" selected="true" /><select idref="V-271830" selected="true" /><select idref="V-271831" selected="true" /><select idref="V-271832" selected="true" /><select idref="V-271833" selected="true" /><select idref="V-271834" selected="true" /><select idref="V-271835" selected="true" /><select idref="V-271836" selected="true" /><select idref="V-271837" selected="true" /><select idref="V-271838" selected="true" /><select idref="V-271839" selected="true" /><select idref="V-271840" selected="true" /><select idref="V-271841" selected="true" /><select idref="V-271842" selected="true" /><select idref="V-271843" selected="true" /><select idref="V-271844" selected="true" /><select idref="V-271845" selected="true" /><select idref="V-271846" selected="true" /><select idref="V-271847" selected="true" /><select idref="V-271848" selected="true" /><select idref="V-271849" selected="true" /><select idref="V-271850" selected="true" /><select idref="V-271851" selected="true" /><select idref="V-271852" selected="true" /><select idref="V-271853" selected="true" /><select idref="V-271854" selected="true" /><select idref="V-271855" selected="true" /><select idref="V-271856" selected="true" /><select idref="V-271857" selected="true" /><select idref="V-271858" selected="true" /><select idref="V-271859" selected="true" /><select idref="V-271860" selected="true" /><select idref="V-271861" selected="true" /><select idref="V-271862" selected="true" /><select idref="V-271863" selected="true" /><select idref="V-271864" selected="true" /><select idref="V-271865" selected="true" /><select idref="V-271866" selected="true" /><select idref="V-271867" selected="true" /><select idref="V-271868" selected="true" /><select idref="V-271869" selected="true" /><select idref="V-271870" selected="true" /><select idref="V-271871" selected="true" /><select idref="V-271872" selected="true" /><select idref="V-271873" selected="true" /><select idref="V-271874" selected="true" /><select idref="V-271875" selected="true" /><select idref="V-271876" selected="true" /><select idref="V-271877" selected="true" /><select idref="V-271878" selected="true" /><select idref="V-271879" selected="true" /><select idref="V-271880" selected="true" /><select idref="V-271881" selected="true" /><select idref="V-271882" selected="true" /><select idref="V-271883" selected="true" /><select idref="V-271884" selected="true" /><select idref="V-271885" selected="true" /><select idref="V-271886" selected="true" /><select idref="V-271901" selected="true" /><select idref="V-278952" selected="true" /><select idref="V-279935" selected="true" /></Profile><Profile id="MAC-3_Sensitive"><title>III - Administrative Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-271431" selected="true" /><select idref="V-271432" selected="true" /><select idref="V-271433" selected="true" /><select idref="V-271434" selected="true" /><select idref="V-271435" selected="true" /><select idref="V-271436" selected="true" /><select idref="V-271437" selected="true" /><select idref="V-271438" selected="true" /><select idref="V-271439" selected="true" /><select idref="V-271440" selected="true" /><select idref="V-271441" selected="true" /><select idref="V-271442" selected="true" /><select idref="V-271443" selected="true" /><select idref="V-271444" selected="true" /><select idref="V-271445" selected="true" /><select idref="V-271446" selected="true" /><select idref="V-271447" selected="true" /><select idref="V-271448" selected="true" /><select idref="V-271449" selected="true" /><select idref="V-271450" selected="true" /><select idref="V-271451" selected="true" /><select idref="V-271452" selected="true" /><select idref="V-271453" selected="true" /><select idref="V-271454" selected="true" /><select idref="V-271455" selected="true" /><select idref="V-271456" selected="true" /><select idref="V-271457" selected="true" /><select idref="V-271458" selected="true" /><select idref="V-271459" selected="true" /><select idref="V-271460" selected="true" /><select idref="V-271461" selected="true" /><select idref="V-271462" selected="true" /><select idref="V-271463" selected="true" /><select idref="V-271464" selected="true" /><select idref="V-271465" selected="true" /><select idref="V-271466" selected="true" /><select idref="V-271467" selected="true" /><select idref="V-271468" selected="true" /><select idref="V-271469" selected="true" /><select idref="V-271470" selected="true" /><select idref="V-271471" selected="true" /><select idref="V-271472" selected="true" /><select idref="V-271473" selected="true" /><select idref="V-271474" selected="true" /><select idref="V-271475" selected="true" /><select idref="V-271476" selected="true" /><select idref="V-271477" selected="true" /><select idref="V-271478" selected="true" /><select idref="V-271479" selected="true" /><select idref="V-271480" selected="true" /><select idref="V-271481" selected="true" /><select idref="V-271482" selected="true" /><select idref="V-271483" selected="true" /><select idref="V-271484" selected="true" /><select idref="V-271485" selected="true" /><select idref="V-271486" selected="true" /><select idref="V-271487" selected="true" /><select idref="V-271488" selected="true" /><select idref="V-271489" selected="true" /><select idref="V-271490" selected="true" /><select idref="V-271491" selected="true" /><select idref="V-271492" selected="true" /><select idref="V-271493" selected="true" /><select idref="V-271494" selected="true" /><select idref="V-271495" selected="true" /><select idref="V-271496" selected="true" /><select idref="V-271497" selected="true" /><select idref="V-271498" selected="true" /><select idref="V-271499" selected="true" /><select idref="V-271500" selected="true" /><select idref="V-271501" selected="true" /><select idref="V-271502" selected="true" /><select idref="V-271503" selected="true" /><select idref="V-271504" selected="true" /><select idref="V-271505" selected="true" /><select idref="V-271506" selected="true" /><select idref="V-271507" selected="true" /><select idref="V-271508" selected="true" /><select idref="V-271509" selected="true" /><select idref="V-271510" selected="true" /><select idref="V-271511" selected="true" /><select idref="V-271512" selected="true" /><select idref="V-271513" selected="true" /><select idref="V-271514" selected="true" /><select idref="V-271515" selected="true" /><select idref="V-271516" selected="true" /><select idref="V-271517" selected="true" /><select idref="V-271518" selected="true" /><select idref="V-271519" selected="true" /><select idref="V-271520" selected="true" /><select idref="V-271521" selected="true" /><select idref="V-271522" selected="true" /><select idref="V-271523" selected="true" /><select idref="V-271524" selected="true" /><select idref="V-271525" selected="true" /><select idref="V-271526" selected="true" /><select idref="V-271527" selected="true" /><select idref="V-271528" selected="true" /><select idref="V-271529" selected="true" /><select idref="V-271530" selected="true" /><select idref="V-271531" selected="true" /><select idref="V-271532" selected="true" /><select idref="V-271533" selected="true" /><select idref="V-271534" selected="true" /><select idref="V-271535" selected="true" /><select idref="V-271536" selected="true" /><select idref="V-271537" selected="true" /><select idref="V-271538" selected="true" /><select idref="V-271539" selected="true" /><select idref="V-271540" selected="true" /><select idref="V-271541" selected="true" /><select idref="V-271542" selected="true" /><select idref="V-271543" selected="true" /><select idref="V-271544" selected="true" /><select idref="V-271545" selected="true" /><select idref="V-271546" selected="true" /><select idref="V-271547" selected="true" /><select idref="V-271548" selected="true" /><select idref="V-271549" selected="true" /><select idref="V-271550" selected="true" /><select idref="V-271551" selected="true" /><select idref="V-271552" selected="true" /><select idref="V-271553" selected="true" /><select idref="V-271554" selected="true" /><select idref="V-271555" selected="true" /><select idref="V-271556" selected="true" /><select idref="V-271557" selected="true" /><select idref="V-271558" selected="true" /><select idref="V-271559" selected="true" /><select idref="V-271560" selected="true" /><select idref="V-271561" selected="true" /><select idref="V-271562" selected="true" /><select idref="V-271563" selected="true" /><select idref="V-271564" selected="true" /><select idref="V-271565" selected="true" /><select idref="V-271566" selected="true" /><select idref="V-271567" selected="true" /><select idref="V-271568" selected="true" /><select idref="V-271569" selected="true" /><select idref="V-271570" selected="true" /><select idref="V-271571" selected="true" /><select idref="V-271572" selected="true" /><select idref="V-271573" selected="true" /><select idref="V-271574" selected="true" /><select idref="V-271575" selected="true" /><select idref="V-271576" selected="true" /><select idref="V-271577" selected="true" /><select idref="V-271578" selected="true" /><select idref="V-271579" selected="true" /><select idref="V-271580" selected="true" /><select idref="V-271581" selected="true" /><select idref="V-271582" selected="true" /><select idref="V-271583" selected="true" /><select idref="V-271584" selected="true" /><select idref="V-271585" selected="true" /><select idref="V-271586" selected="true" /><select idref="V-271587" selected="true" /><select idref="V-271588" selected="true" /><select idref="V-271589" selected="true" /><select idref="V-271590" selected="true" /><select idref="V-271591" selected="true" /><select idref="V-271592" selected="true" /><select idref="V-271593" selected="true" /><select idref="V-271594" selected="true" /><select idref="V-271595" selected="true" /><select idref="V-271596" selected="true" /><select idref="V-271597" selected="true" /><select idref="V-271598" selected="true" /><select idref="V-271599" selected="true" /><select idref="V-271600" selected="true" /><select idref="V-271601" selected="true" /><select idref="V-271602" selected="true" /><select idref="V-271603" selected="true" /><select idref="V-271604" selected="true" /><select idref="V-271605" selected="true" /><select idref="V-271606" selected="true" /><select idref="V-271607" selected="true" /><select idref="V-271608" selected="true" /><select idref="V-271609" selected="true" /><select idref="V-271610" selected="true" /><select idref="V-271611" selected="true" /><select idref="V-271612" selected="true" /><select idref="V-271613" selected="true" /><select idref="V-271614" selected="true" /><select idref="V-271615" selected="true" /><select idref="V-271616" selected="true" /><select idref="V-271617" selected="true" /><select idref="V-271618" selected="true" /><select idref="V-271619" selected="true" /><select idref="V-271620" selected="true" /><select idref="V-271621" selected="true" /><select idref="V-271622" selected="true" /><select idref="V-271623" selected="true" /><select idref="V-271624" selected="true" /><select idref="V-271625" selected="true" /><select idref="V-271626" selected="true" /><select idref="V-271627" selected="true" /><select idref="V-271628" selected="true" /><select idref="V-271629" selected="true" /><select idref="V-271630" selected="true" /><select idref="V-271631" selected="true" /><select idref="V-271632" selected="true" /><select idref="V-271633" selected="true" /><select idref="V-271634" selected="true" /><select idref="V-271635" selected="true" /><select idref="V-271636" selected="true" /><select idref="V-271637" selected="true" /><select idref="V-271638" selected="true" /><select idref="V-271639" selected="true" /><select idref="V-271641" selected="true" /><select idref="V-271642" selected="true" /><select idref="V-271643" selected="true" /><select idref="V-271644" selected="true" /><select idref="V-271645" selected="true" /><select idref="V-271646" selected="true" /><select idref="V-271647" selected="true" /><select idref="V-271648" selected="true" /><select idref="V-271649" selected="true" /><select idref="V-271650" selected="true" /><select idref="V-271651" selected="true" /><select idref="V-271652" selected="true" /><select idref="V-271653" selected="true" /><select idref="V-271654" selected="true" /><select idref="V-271655" selected="true" /><select idref="V-271656" selected="true" /><select idref="V-271657" selected="true" /><select idref="V-271658" selected="true" /><select idref="V-271659" selected="true" /><select idref="V-271660" selected="true" /><select idref="V-271661" selected="true" /><select idref="V-271662" selected="true" /><select idref="V-271663" selected="true" /><select idref="V-271664" selected="true" /><select idref="V-271665" selected="true" /><select idref="V-271666" selected="true" /><select idref="V-271667" selected="true" /><select idref="V-271668" selected="true" /><select idref="V-271669" selected="true" /><select idref="V-271670" selected="true" /><select idref="V-271671" selected="true" /><select idref="V-271672" selected="true" /><select idref="V-271673" selected="true" /><select idref="V-271674" selected="true" /><select idref="V-271676" selected="true" /><select idref="V-271677" selected="true" /><select idref="V-271678" selected="true" /><select idref="V-271679" selected="true" /><select idref="V-271680" selected="true" /><select idref="V-271681" selected="true" /><select idref="V-271682" selected="true" /><select idref="V-271683" selected="true" /><select idref="V-271684" selected="true" /><select idref="V-271685" selected="true" /><select idref="V-271686" selected="true" /><select idref="V-271687" selected="true" /><select idref="V-271688" selected="true" /><select idref="V-271689" selected="true" /><select idref="V-271690" selected="true" /><select idref="V-271691" selected="true" /><select idref="V-271692" selected="true" /><select idref="V-271693" selected="true" /><select idref="V-271694" selected="true" /><select idref="V-271695" selected="true" /><select idref="V-271696" selected="true" /><select idref="V-271697" selected="true" /><select idref="V-271698" selected="true" /><select idref="V-271699" selected="true" /><select idref="V-271700" selected="true" /><select idref="V-271701" selected="true" /><select idref="V-271703" selected="true" /><select idref="V-271704" selected="true" /><select idref="V-271705" selected="true" /><select idref="V-271706" selected="true" /><select idref="V-271707" selected="true" /><select idref="V-271708" selected="true" /><select idref="V-271709" selected="true" /><select idref="V-271710" selected="true" /><select idref="V-271711" selected="true" /><select idref="V-271712" selected="true" /><select idref="V-271713" selected="true" /><select idref="V-271714" selected="true" /><select idref="V-271715" selected="true" /><select idref="V-271716" selected="true" /><select idref="V-271717" selected="true" /><select idref="V-271718" selected="true" /><select idref="V-271719" selected="true" /><select idref="V-271720" selected="true" /><select idref="V-271721" selected="true" /><select idref="V-271722" selected="true" /><select idref="V-271723" selected="true" /><select idref="V-271724" selected="true" /><select idref="V-271725" selected="true" /><select idref="V-271726" selected="true" /><select idref="V-271727" selected="true" /><select idref="V-271728" selected="true" /><select idref="V-271729" selected="true" /><select idref="V-271730" selected="true" /><select idref="V-271731" selected="true" /><select idref="V-271732" selected="true" /><select idref="V-271733" selected="true" /><select idref="V-271734" selected="true" /><select idref="V-271735" selected="true" /><select idref="V-271736" selected="true" /><select idref="V-271737" selected="true" /><select idref="V-271738" selected="true" /><select idref="V-271739" selected="true" /><select idref="V-271740" selected="true" /><select idref="V-271741" selected="true" /><select idref="V-271742" selected="true" /><select idref="V-271743" selected="true" /><select idref="V-271744" selected="true" /><select idref="V-271745" selected="true" /><select idref="V-271746" selected="true" /><select idref="V-271747" selected="true" /><select idref="V-271748" selected="true" /><select idref="V-271749" selected="true" /><select idref="V-271750" selected="true" /><select idref="V-271751" selected="true" /><select idref="V-271752" selected="true" /><select idref="V-271753" selected="true" /><select idref="V-271754" selected="true" /><select idref="V-271755" selected="true" /><select idref="V-271756" selected="true" /><select idref="V-271757" selected="true" /><select idref="V-271758" selected="true" /><select idref="V-271759" selected="true" /><select idref="V-271760" selected="true" /><select idref="V-271761" selected="true" /><select idref="V-271763" selected="true" /><select idref="V-271764" selected="true" /><select idref="V-271766" selected="true" /><select idref="V-271768" selected="true" /><select idref="V-271769" selected="true" /><select idref="V-271770" selected="true" /><select idref="V-271771" selected="true" /><select idref="V-271772" selected="true" /><select idref="V-271773" selected="true" /><select idref="V-271774" selected="true" /><select idref="V-271775" selected="true" /><select idref="V-271776" selected="true" /><select idref="V-271777" selected="true" /><select idref="V-271778" selected="true" /><select idref="V-271779" selected="true" /><select idref="V-271780" selected="true" /><select idref="V-271781" selected="true" /><select idref="V-271782" selected="true" /><select idref="V-271783" selected="true" /><select idref="V-271784" selected="true" /><select idref="V-271785" selected="true" /><select idref="V-271786" selected="true" /><select idref="V-271787" selected="true" /><select idref="V-271788" selected="true" /><select idref="V-271789" selected="true" /><select idref="V-271790" selected="true" /><select idref="V-271791" selected="true" /><select idref="V-271792" selected="true" /><select idref="V-271793" selected="true" /><select idref="V-271794" selected="true" /><select idref="V-271795" selected="true" /><select idref="V-271796" selected="true" /><select idref="V-271797" selected="true" /><select idref="V-271798" selected="true" /><select idref="V-271799" selected="true" /><select idref="V-271800" selected="true" /><select idref="V-271801" selected="true" /><select idref="V-271802" selected="true" /><select idref="V-271803" selected="true" /><select idref="V-271804" selected="true" /><select idref="V-271805" selected="true" /><select idref="V-271806" selected="true" /><select idref="V-271807" selected="true" /><select idref="V-271808" selected="true" /><select idref="V-271809" selected="true" /><select idref="V-271810" selected="true" /><select idref="V-271811" selected="true" /><select idref="V-271812" selected="true" /><select idref="V-271813" selected="true" /><select idref="V-271814" selected="true" /><select idref="V-271815" selected="true" /><select idref="V-271816" selected="true" /><select idref="V-271817" selected="true" /><select idref="V-271818" selected="true" /><select idref="V-271819" selected="true" /><select idref="V-271820" selected="true" /><select idref="V-271821" selected="true" /><select idref="V-271822" selected="true" /><select idref="V-271823" selected="true" /><select idref="V-271824" selected="true" /><select idref="V-271825" selected="true" /><select idref="V-271826" selected="true" /><select idref="V-271827" selected="true" /><select idref="V-271828" selected="true" /><select idref="V-271829" selected="true" /><select idref="V-271830" selected="true" /><select idref="V-271831" selected="true" /><select idref="V-271832" selected="true" /><select idref="V-271833" selected="true" /><select idref="V-271834" selected="true" /><select idref="V-271835" selected="true" /><select idref="V-271836" selected="true" /><select idref="V-271837" selected="true" /><select idref="V-271838" selected="true" /><select idref="V-271839" selected="true" /><select idref="V-271840" selected="true" /><select idref="V-271841" selected="true" /><select idref="V-271842" selected="true" /><select idref="V-271843" selected="true" /><select idref="V-271844" selected="true" /><select idref="V-271845" selected="true" /><select idref="V-271846" selected="true" /><select idref="V-271847" selected="true" /><select idref="V-271848" selected="true" /><select idref="V-271849" selected="true" /><select idref="V-271850" selected="true" /><select idref="V-271851" selected="true" /><select idref="V-271852" selected="true" /><select idref="V-271853" selected="true" /><select idref="V-271854" selected="true" /><select idref="V-271855" selected="true" /><select idref="V-271856" selected="true" /><select idref="V-271857" selected="true" /><select idref="V-271858" selected="true" /><select idref="V-271859" selected="true" /><select idref="V-271860" selected="true" /><select idref="V-271861" selected="true" /><select idref="V-271862" selected="true" /><select idref="V-271863" selected="true" /><select idref="V-271864" selected="true" /><select idref="V-271865" selected="true" /><select idref="V-271866" selected="true" /><select idref="V-271867" selected="true" /><select idref="V-271868" selected="true" /><select idref="V-271869" selected="true" /><select idref="V-271870" selected="true" /><select idref="V-271871" selected="true" /><select idref="V-271872" selected="true" /><select idref="V-271873" selected="true" /><select idref="V-271874" selected="true" /><select idref="V-271875" selected="true" /><select idref="V-271876" selected="true" /><select idref="V-271877" selected="true" /><select idref="V-271878" selected="true" /><select idref="V-271879" selected="true" /><select idref="V-271880" selected="true" /><select idref="V-271881" selected="true" /><select idref="V-271882" selected="true" /><select idref="V-271883" selected="true" /><select idref="V-271884" selected="true" /><select idref="V-271885" selected="true" /><select idref="V-271886" selected="true" /><select idref="V-271901" selected="true" /><select idref="V-278952" selected="true" /><select idref="V-279935" selected="true" /></Profile><Group id="V-271431"><title>SRG-OS-000780-GPOS-00240</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271431r1092616_rule" weight="10.0" severity="medium"><version>OL09-00-000001</version><title>The OL 9 operating system must implement cryptographic mechanisms to prevent unauthorized modification of all information at rest.</title><description>&lt;VulnDiscussion&gt;Operating systems handling data requiring "data at rest" protections must employ cryptographic mechanisms to prevent unauthorized disclosure and modification of the information at rest. 
  
 Selection of a cryptographic mechanism is based on the need to protect the integrity of organizational information. The strength of the mechanism is commensurate with the security category and/or classification of the information. Organizations have the flexibility to either encrypt all information on storage devices (i.e., full disk encryption) or encrypt specific data structures (e.g., files, records, or fields).&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-004910</ident><fixtext fixref="F-75388r1092615_fix">Configure the OL 9 operating system to implement cryptographic mechanisms to prevent unauthorized modification of all information at rest.
 
@@ -63,12 +63,16 @@ If a separate entry for "/var/log" is not in use, this is a finding.</check-cont
 $ mount | grep /var/tmp
 UUID=c274f65f-c5b5-4379-b017-bee96feb7a34 /var/log xfs noatime 1 2
 
-If a separate entry for "/var/tmp" is not in use, this is a finding.</check-content></check></Rule></Group><Group id="V-271438"><title>SRG-OS-000439-GPOS-00195</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271438r1117152_rule" weight="10.0" severity="high"><version>OL09-00-000010</version><title>OL 9 must be a vendor supported release.</title><description>&lt;VulnDiscussion&gt;An operating system release is considered "supported" if the vendor continues to provide security patches for the product. With an unsupported release, it will not be possible to resolve security issues discovered in the system software.
+If a separate entry for "/var/tmp" is not in use, this is a finding.</check-content></check></Rule></Group><Group id="V-271438"><title>SRG-OS-000439-GPOS-00195</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271438r1155341_rule" weight="10.0" severity="high"><version>OL09-00-000010</version><title>OL 9 must be a vendor supported release.</title><description>&lt;VulnDiscussion&gt;An operating system release is considered "supported" if the vendor continues to provide security patches for the product. With an unsupported release, it will not be possible to resolve security issues discovered in the system software.
 
-Oracle offers Oracle Linux Premier Support, for a fee, for those customers who wish to standardize on a specific minor release for an extended period.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-002605</ident><fixtext fixref="F-75395r1091025_fix">Upgrade OL 9 to a supported version.</fixtext><fix id="F-75395r1091025_fix" /><check system="C-75488r1091024_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify that OL 9 is vendor supported with the following command:
+End Of Life dates for Oracle Linux 9 releases are as follows:
+Current end of Premier Support for Oracle Linux 9 is June 2032.
+Current end of Extended Support for Oracle Linux 9 is June 2035. 
+
+Each minor version reaches end of life when the new version is released.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-002605</ident><fixtext fixref="F-75395r1091025_fix">Upgrade OL 9 to a supported version.</fixtext><fix id="F-75395r1091025_fix" /><check system="C-75488r1155340_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify OL 9 is vendor supported with the following command:
 
 $ cat /etc/oracle-release 
-Oracle Linux Server release 9.5
+Oracle Linux Server release 9.6
 
 If the installed version of OL 9 is not supported, this is a finding.</check-content></check></Rule></Group><Group id="V-271439"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271439r1091029_rule" weight="10.0" severity="medium"><version>OL09-00-000015</version><title>OL 9 vendor packaged system security patches and updates must be installed and up to date.</title><description>&lt;VulnDiscussion&gt;Installing software updates is a fundamental mitigation against the exploitation of publicly known vulnerabilities. If the most recent security patches and updates are not installed, unauthorized users may take advantage of weaknesses in the unpatched software. The lack of prompt attention to patching could result in a system compromise.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-75396r1091028_fix">Install OL 9 security patches and updates at the organizationally defined frequency. If system updates are installed via a centralized repository that is configured on the system, all updates can be installed with the following command:
 
@@ -99,7 +103,7 @@ If there is an operational requirement for a graphical user interface, document
 $ systemctl get-default
 multi-user.target
 
-If the system default target is not set to "multi-user.target" and the information system security officer (ISSO) lacks a documented requirement for a graphical user interface, this is a finding.</check-content></check></Rule></Group><Group id="V-271441"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271441r1117265_rule" weight="10.0" severity="medium"><version>OL09-00-000025</version><title>OL 9 must require authentication to access emergency mode.</title><description>&lt;VulnDiscussion&gt;To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DOD-approved PKIs, all DOD systems (e.g., web servers and web portals) must be properly configured to incorporate access control methods that do not rely solely on the possession of a certificate for access. Successful authentication must not automatically give an entity access to an asset or security boundary. Authorization procedures and controls must be implemented to ensure each authenticated entity also has a validated and current authorization. Authorization is the process of determining whether an entity, once authenticated, is permitted to access a specific asset. Information systems use access control policies and enforcement mechanisms to implement this requirement.
+If the system default target is not set to "multi-user.target" and the information system security officer (ISSO) lacks a documented requirement for a graphical user interface, this is a finding.</check-content></check></Rule></Group><Group id="V-271441"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271441r1137691_rule" weight="10.0" severity="medium"><version>OL09-00-000025</version><title>OL 9 must require authentication to access emergency mode.</title><description>&lt;VulnDiscussion&gt;To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DOD-approved PKIs, all DOD systems (e.g., web servers and web portals) must be properly configured to incorporate access control methods that do not rely solely on the possession of a certificate for access. Successful authentication must not automatically give an entity access to an asset or security boundary. Authorization procedures and controls must be implemented to ensure each authenticated entity also has a validated and current authorization. Authorization is the process of determining whether an entity, once authenticated, is permitted to access a specific asset. Information systems use access control policies and enforcement mechanisms to implement this requirement.
 
 This requirement prevents attackers with physical access from trivially bypassing security on the machine and gaining root access. Such accesses are further prevented by configuring the bootloader password.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-75398r1091034_fix">Configure OL 9 to require authentication for emergency mode.
 
@@ -110,7 +114,7 @@ ExecStart=-/usr/lib/systemd/systemd-sulogin-shell emergency</fixtext><fix id="F-
 $ grep sulogin-shell /usr/lib/systemd/system/emergency.service 
 ExecStart=-/usr/lib/systemd/systemd-sulogin-shell emergency
 
-If this line is not returned, or is commented out, this is a finding. If the output is different, this is a finding.</check-content></check></Rule></Group><Group id="V-271442"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271442r1117265_rule" weight="10.0" severity="medium"><version>OL09-00-000030</version><title>OL 9 must require authentication to access single-user mode.</title><description>&lt;VulnDiscussion&gt;To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DOD-approved PKIs, all DOD systems (e.g., web servers and web portals) must be properly configured to incorporate access control methods that do not rely solely on the possession of a certificate for access. Successful authentication must not automatically give an entity access to an asset or security boundary. Authorization procedures and controls must be implemented to ensure each authenticated entity also has a validated and current authorization. Authorization is the process of determining whether an entity, once authenticated, is permitted to access a specific asset. Information systems use access control policies and enforcement mechanisms to implement this requirement.
+If this line is not returned, or is commented out, this is a finding. If the output is different, this is a finding.</check-content></check></Rule></Group><Group id="V-271442"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271442r1137691_rule" weight="10.0" severity="medium"><version>OL09-00-000030</version><title>OL 9 must require authentication to access single-user mode.</title><description>&lt;VulnDiscussion&gt;To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DOD-approved PKIs, all DOD systems (e.g., web servers and web portals) must be properly configured to incorporate access control methods that do not rely solely on the possession of a certificate for access. Successful authentication must not automatically give an entity access to an asset or security boundary. Authorization procedures and controls must be implemented to ensure each authenticated entity also has a validated and current authorization. Authorization is the process of determining whether an entity, once authenticated, is permitted to access a specific asset. Information systems use access control policies and enforcement mechanisms to implement this requirement.
 
 This requirement prevents attackers with physical access from trivially bypassing security on the machine and gaining root access. Such accesses are further prevented by configuring the bootloader password.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-75399r1091037_fix">Configure OL 9 to require authentication for single-user mode.
 
@@ -154,21 +158,22 @@ $ grep -r firewire-core /etc/modprobe.conf /etc/modprobe.d/*
 install firewire-core /bin/true
 blacklist firewire-core
 
-If the command does not return any output, or the line is commented out, and use of firewire-core is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-271446"><title>SRG-OS-000095-GPOS-00049</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271446r1091050_rule" weight="10.0" severity="medium"><version>OL09-00-000043</version><title>OL 9 must disable the Stream Control Transmission Protocol (SCTP) kernel module.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+If the command does not return any output, or the line is commented out, and use of firewire-core is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-271446"><title>SRG-OS-000095-GPOS-00049</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271446r1155293_rule" weight="10.0" severity="medium"><version>OL09-00-000043</version><title>OL 9 must disable the Stream Control Transmission Protocol (SCTP) kernel module.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
 Failing to disconnect unused protocols can result in a system compromise.
 
-The SCTP is a transport layer protocol, designed to support the idea of message-oriented communication, with several streams of messages within one connection. Disabling SCTP protects the system against exploitation of any flaws in its implementation.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000381</ident><fixtext fixref="F-75403r1091049_fix">Configure OL 9 to prevent the sctp kernel module from being loaded.
+The SCTP is a transport layer protocol, designed to support the idea of message-oriented communication, with several streams of messages within one connection. Disabling SCTP protects the system against exploitation of any flaws in its implementation.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000381</ident><fixtext fixref="F-75403r1155292_fix">Configure OL 9 to prevent the sctp kernel module from being loaded.
 
 Add the following line to the file /etc/modprobe.d/sctp.conf (or create sctp.conf if it does not exist):
 
-install sctp/bin/false
-blacklist sctp</fixtext><fix id="F-75403r1091049_fix" /><check system="C-75496r1091048_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify that OL 9 disables the ability to load the sctp kernel module with the following command:
+install sctp /bin/false
+blacklist sctp</fixtext><fix id="F-75403r1155292_fix" /><check system="C-75496r1155291_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify OL 9 disables the ability to load the sctp kernel module with the following command:
 
-$ grep -r sctp /etc/modprobe.conf /etc/modprobe.d/* 
-blacklist sctp
+$ grep -irs sctp /etc/modprobe.conf /etc/modprobe.d/*
+/etc/modprobe.d/sctp.conf:install sctp /bin/false
+/etc/modprobe.d/sctp.conf:blacklist sctp
 
-If the command does not return any output, or the line is commented out, and use of sctp is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-271447"><title>SRG-OS-000095-GPOS-00049</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271447r1092464_rule" weight="10.0" severity="medium"><version>OL09-00-000044</version><title>OL 9 must disable the Transparent Inter Process Communication (TIPC) kernel module.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+If the command does not return any output, or the line is commented out, and use of sctp is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-271447"><title>SRG-OS-000095-GPOS-00049</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271447r1155295_rule" weight="10.0" severity="medium"><version>OL09-00-000044</version><title>OL 9 must disable the Transparent Inter Process Communication (TIPC) kernel module.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
 Failing to disconnect unused protocols can result in a system compromise.
 
@@ -177,12 +182,13 @@ The TIPC is a protocol that is specially designed for intra-cluster communicatio
 Add the following line to the file /etc/modprobe.d/tipc.conf (or create tipc.conf if it does not exist):
 
 install tipc /bin/false
-blacklist tipc</fixtext><fix id="F-75404r1091052_fix" /><check system="C-75497r1091051_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify that OL 9 disables the ability to load the tipc kernel module with the following command:
+blacklist tipc</fixtext><fix id="F-75404r1091052_fix" /><check system="C-75497r1155294_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify OL 9 disables the ability to load the tipc kernel module with the following command:
 
-$ grep -r tipc /etc/modprobe.conf /etc/modprobe.d/* 
-blacklist tipc
+$ grep -irs tipc /etc/modprobe.conf /etc/modprobe.d/*
+/etc/modprobe.d/tipc.conf:install tipc /bin/false
+/etc/modprobe.d/tipc.conf:blacklist tipc
 
-If the command does not return any output, or the line is commented out, and use of TIPC is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-271448"><title>SRG-OS-000095-GPOS-00049</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271448r1091056_rule" weight="10.0" severity="low"><version>OL09-00-000045</version><title>OL 9 must disable mounting of cramfs.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+If the command does not return any output, or the line is commented out, and use of TIPC is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-271448"><title>SRG-OS-000095-GPOS-00049</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271448r1155297_rule" weight="10.0" severity="low"><version>OL09-00-000045</version><title>OL 9 must disable mounting of cramfs.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
 Removing support for unneeded filesystem types reduces the local attack surface of the server.
 
@@ -193,21 +199,13 @@ Add the following line to the file /etc/modprobe.d/cramfs.conf (or create blackl
 install cramfs /bin/false
 blacklist cramfs
 
-Reboot the system for the settings to take effect.</fixtext><fix id="F-75405r1091055_fix" /><check system="C-75498r1091054_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify that OL 9 disables the ability to load the cramfs kernel module with the following command:
-
-$ grep -ri cramfs /etc/modprobe.d/* | grep -i "/bin/false"
-install cramfs /bin/false
-
-If the command does not return any output, or the line is commented out, and use of the cramfs protocol is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.
+Reboot the system for the settings to take effect.</fixtext><fix id="F-75405r1091055_fix" /><check system="C-75498r1155296_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify OL 9 disables the ability to load the cramfs kernel module with the following command:
 
-Verify the operating system disables the ability to use the cramfs kernel module.
+$ grep -irs cramfs /etc/modprobe.conf /etc/modprobe.d/*
+/etc/modprobe.d/blacklist.conf:install cramfs /bin/false
+/etc/modprobe.d/blacklist.conf:blacklist cramfs
 
-Determine if the cramfs kernel module is disabled with the following command:
-
-$ grep -ri cramfs /etc/modprobe.d/* | grep -i "blacklist"
-blacklist cramfs
-
-If the command does not return any output or the output is not "blacklist cramfs", and use of the cramfs kernel module is not documented with the ISSO as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-271449"><title>SRG-OS-000095-GPOS-00049</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271449r1091059_rule" weight="10.0" severity="medium"><version>OL09-00-000046</version><title>OL 9 Bluetooth must be disabled.</title><description>&lt;VulnDiscussion&gt;This requirement applies to wireless peripheral technologies (e.g., wireless mice, keyboards, displays, etc.) used with OL 9 systems. Wireless peripherals (e.g., Wi-Fi/Bluetooth/IR keyboards, mice and pointing devices, and near field communications [NFC]) present a unique challenge by creating an open, unsecured port on a computer. Wireless peripherals must meet DOD requirements for wireless data transmission and be approved for use by the authorizing official (AO). Even though some wireless peripherals, such as mice and pointing devices, do not ordinarily carry information that need to be protected, modification of communications with these wireless peripherals may be used to compromise the OL 9 operating system.
+If the command does not return any output, or the line is commented out, and use of the cramfs protocol is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-271449"><title>SRG-OS-000095-GPOS-00049</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271449r1091059_rule" weight="10.0" severity="medium"><version>OL09-00-000046</version><title>OL 9 Bluetooth must be disabled.</title><description>&lt;VulnDiscussion&gt;This requirement applies to wireless peripheral technologies (e.g., wireless mice, keyboards, displays, etc.) used with OL 9 systems. Wireless peripherals (e.g., Wi-Fi/Bluetooth/IR keyboards, mice and pointing devices, and near field communications [NFC]) present a unique challenge by creating an open, unsecured port on a computer. Wireless peripherals must meet DOD requirements for wireless data transmission and be approved for use by the authorizing official (AO). Even though some wireless peripherals, such as mice and pointing devices, do not ordinarily carry information that need to be protected, modification of communications with these wireless peripherals may be used to compromise the OL 9 operating system.
 
 Satisfies: SRG-OS-000095-GPOS-00049, SRG-OS-000300-GPOS-00118&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000381</ident><ident system="http://cyber.mil/cci">CCI-001443</ident><fixtext fixref="F-75406r1091058_fix">Configure OL 9 to disable the Bluetooth adapter when not in use.
 
@@ -235,7 +233,7 @@ $ grep -r usb-storage /etc/modprobe.conf /etc/modprobe.d/*
 install usb-storage /bin/false
 blacklist usb-storage
 
-If the command does not return any output, or the line is commented out, and use of USB Storage is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-271451"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271451r1117265_rule" weight="10.0" severity="high"><version>OL09-00-000050</version><title>OL 9 must require a unique superuser's name upon booting into single-user and maintenance modes.</title><description>&lt;VulnDiscussion&gt;Having a nondefault grub superuser username makes password-guessing attacks less effective.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-75408r1091064_fix">Configure OL 9 to have a unique username for the grub superuser account.
+If the command does not return any output, or the line is commented out, and use of USB Storage is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-271451"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271451r1137691_rule" weight="10.0" severity="high"><version>OL09-00-000050</version><title>OL 9 must require a unique superuser's name upon booting into single-user and maintenance modes.</title><description>&lt;VulnDiscussion&gt;Having a nondefault grub superuser username makes password-guessing attacks less effective.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-75408r1091064_fix">Configure OL 9 to have a unique username for the grub superuser account.
 
 Edit the "/etc/grub.d/01_users" file and add or modify the following lines in the "### BEGIN /etc/grub.d/01_users ###" section:
 
@@ -773,7 +771,7 @@ List files on the system that have file hashes different from what is expected b
 
 $ sudo rpm -Va --noconfig | awk '$1 ~ /..5/ &amp;&amp; $2 != "c"' 
 
-If there is output, this is a finding.</check-content></check></Rule></Group><Group id="V-271481"><title>SRG-OS-000478-GPOS-00223</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271481r1117272_rule" weight="10.0" severity="high"><version>OL09-00-000244</version><title>OL 9 cryptographic policy files must match files shipped with the operating system.</title><description>&lt;VulnDiscussion&gt;The OL 9 package crypto-policies defines the cryptography policies for the system.
+If there is output, this is a finding.</check-content></check></Rule></Group><Group id="V-271481"><title>SRG-OS-000478-GPOS-00223</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271481r1137699_rule" weight="10.0" severity="high"><version>OL09-00-000244</version><title>OL 9 cryptographic policy files must match files shipped with the operating system.</title><description>&lt;VulnDiscussion&gt;The OL 9 package crypto-policies defines the cryptography policies for the system.
 
 If the files are changed from those shipped with the operating system, it may be possible for OL 9 to use cryptographic functions that are not FIPS 140-3 approved.
 
@@ -2352,7 +2350,7 @@ $ sudo service auditd restart</fixtext><fix id="F-75525r1092555_fix" /><check sy
 $ sudo auditctl -l | grep umount
 -a always,exit -F path=/usr/bin/umount -F perm=x -F auid&gt;=1000 -F auid!=unset -k privileged-mount
 
-If the command does not return an audit rule for umount or any of the lines returned are commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-271569"><title>SRG-OS-000256-GPOS-00097</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271569r1091419_rule" weight="10.0" severity="medium"><version>OL09-00-000710</version><title>OL 9 must use cryptographic mechanisms to protect the integrity of audit tools.</title><description>&lt;VulnDiscussion&gt;Protecting the integrity of the tools used for auditing purposes is a critical step toward ensuring the integrity of audit information. Audit information includes all information (e.g., audit records, audit settings, and audit reports) needed to successfully audit information system activity.
+If the command does not return an audit rule for umount or any of the lines returned are commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-271569"><title>SRG-OS-000256-GPOS-00097</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271569r1155308_rule" weight="10.0" severity="medium"><version>OL09-00-000710</version><title>OL 9 must use cryptographic mechanisms to protect the integrity of audit tools.</title><description>&lt;VulnDiscussion&gt;Protecting the integrity of the tools used for auditing purposes is a critical step toward ensuring the integrity of audit information. Audit information includes all information (e.g., audit records, audit settings, and audit reports) needed to successfully audit information system activity.
 
 Audit tools include, but are not limited to, vendor-provided and open-source audit tools needed to successfully view and manipulate audit information system activity and records. Audit tools include custom queries and report generators.
 
@@ -2360,7 +2358,7 @@ It is not uncommon for attackers to replace the audit tools or inject code into
 
 To address this risk, audit tools must be cryptographically signed to provide the capability to identify when the audit tools have been modified, manipulated, or replaced. An example is a checksum hash of the file or files.
 
-Satisfies: SRG-OS-000256-GPOS-00097, SRG-OS-000257-GPOS-00098, SRG-OS-000258-GPOS-00099, SRG-OS-000278-GPOS-00108&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001493</ident><ident system="http://cyber.mil/cci">CCI-001494</ident><ident system="http://cyber.mil/cci">CCI-001495</ident><ident system="http://cyber.mil/cci">CCI-001496</ident><fixtext fixref="F-75526r1091418_fix">Configure OL 9 to protect the integrity of the audit tools.
+Satisfies: SRG-OS-000256-GPOS-00097, SRG-OS-000257-GPOS-00098, SRG-OS-000258-GPOS-00099, SRG-OS-000278-GPOS-00108&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001493</ident><ident system="http://cyber.mil/cci">CCI-001494</ident><ident system="http://cyber.mil/cci">CCI-001495</ident><ident system="http://cyber.mil/cci">CCI-001496</ident><fixtext fixref="F-75526r1155307_fix">Configure OL 9 to protect the integrity of the audit tools.
 
 Add or update the following lines to /etc/aide.conf:
  
@@ -2369,8 +2367,7 @@ Add or update the following lines to /etc/aide.conf:
 /usr/sbin/ausearch p+i+n+u+g+s+b+acl+xattrs+sha512
 /usr/sbin/aureport p+i+n+u+g+s+b+acl+xattrs+sha512
 /usr/sbin/autrace p+i+n+u+g+s+b+acl+xattrs+sha512
-/usr/sbin/autrace p+i+n+u+g+s+b+acl+xattrs+sha512
-/usr/sbin/augenrules p+i+n+u+g+s+b+acl+xattrs+sha512</fixtext><fix id="F-75526r1091418_fix" /><check system="C-75619r1091417_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify that OL 9 uses cryptographic mechanisms to protect the integrity of the audit tools with the following command:
+/usr/sbin/augenrules p+i+n+u+g+s+b+acl+xattrs+sha512</fixtext><fix id="F-75526r1155307_fix" /><check system="C-75619r1155306_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify OL 9 uses cryptographic mechanisms to protect the integrity of the audit tools with the following command:
 
 $ sudo cat /etc/aide.conf | grep /usr/sbin/au
 /usr/sbin/auditctl p+i+n+u+g+s+b+acl+xattrs+sha512
@@ -2378,7 +2375,6 @@ $ sudo cat /etc/aide.conf | grep /usr/sbin/au
 /usr/sbin/ausearch p+i+n+u+g+s+b+acl+xattrs+sha512
 /usr/sbin/aureport p+i+n+u+g+s+b+acl+xattrs+sha512
 /usr/sbin/autrace p+i+n+u+g+s+b+acl+xattrs+sha512
-/usr/sbin/autrace p+i+n+u+g+s+b+acl+xattrs+sha512
 /usr/sbin/augenrules p+i+n+u+g+s+b+acl+xattrs+sha512
  
 If AIDE is not installed, ask the system administrator (SA) how file integrity checks are performed on the system.
@@ -2768,7 +2764,7 @@ $ sudo service auditd restart</fixtext><fix id="F-75550r1092579_fix" /><check sy
 $ sudo grep log_format /etc/audit/auditd.conf
 log_format = ENRICHED
 
-If the "log_format" option is not "ENRICHED", or the line is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-271594"><title>SRG-OS-000037-GPOS-00015</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271594r1092582_rule" weight="10.0" severity="medium"><version>OL09-00-000840</version><title>OL 9 must be configured so that successful/unsuccessful uses of the umount system call generate an audit record.</title><description>&lt;VulnDiscussion&gt;The changing of file permissions could indicate that a user is attempting to gain access to information that would otherwise be disallowed. Auditing DAC modifications can facilitate the identification of patterns of abuse among both authorized and unauthorized users.
+If the "log_format" option is not "ENRICHED", or the line is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-271594"><title>SRG-OS-000037-GPOS-00015</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271594r1155314_rule" weight="10.0" severity="medium"><version>OL09-00-000840</version><title>OL 9 must be configured so that successful/unsuccessful uses of the umount system call generate an audit record.</title><description>&lt;VulnDiscussion&gt;The changing of file permissions could indicate that a user is attempting to gain access to information that would otherwise be disallowed. Auditing DAC modifications can facilitate the identification of patterns of abuse among both authorized and unauthorized users.
 
 Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000130</ident><ident system="http://cyber.mil/cci">CCI-000169</ident><ident system="http://cyber.mil/cci">CCI-002884</ident><ident system="http://cyber.mil/cci">CCI-000172</ident><fixtext fixref="F-75551r1092581_fix">Configure the audit system to generate an audit event for any successful/unsuccessful use of the umount system call by adding or updating the following rules in "/etc/audit/audit.rules" and adding the following rules to "/etc/audit/rules.d/perm_mod.rules" or updating the existing rules in files in the "/etc/audit/rules.d/" directory:
 
@@ -2777,17 +2773,13 @@ Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPO
 The audit daemon must be restarted for the changes to take effect.
 
 Restart auditd:
-$ sudo service auditd restart</fixtext><fix id="F-75551r1092581_fix" /><check system="C-75644r1091492_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify that OL 9 generates an audit record for all uses of the umount system call with the following commands:
-
-$ sudo grep "umount" /etc/audit/audit.* 
+$ sudo service auditd restart</fixtext><fix id="F-75551r1092581_fix" /><check system="C-75644r1155313_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify OL 9 is configured to audit the execution of the "umount" command with the following command:
 
-$ sudo grep umount /etc/audit/audit.rules
- 
-If the system is configured to audit this activity, it will return a line like the following:
+$ sudo auditctl -l | grep umount
 
--a always,exit -F arch=b32 -S umount -F auid&gt;=1000 -F auid!=unset -k privileged-umount
+-a always,exit -F arch=b32 -S umount -F auid&gt;=1000 -F auid!=-1 -F key=privileged-umount
 
-If the command does not return a line or the line is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-271595"><title>SRG-OS-000037-GPOS-00015</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271595r1092584_rule" weight="10.0" severity="medium"><version>OL09-00-000845</version><title>OL 9 must be configured so that successful/unsuccessful uses of the umount2 system call generate an audit record.</title><description>&lt;VulnDiscussion&gt;The changing of file permissions could indicate that a user is attempting to gain access to information that would otherwise be disallowed. Auditing discretionary access control (DAC) modifications can facilitate the identification of patterns of abuse among both authorized and unauthorized users.
+If the command does not return an audit rule for "umount" or any of the lines returned are commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-271595"><title>SRG-OS-000037-GPOS-00015</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271595r1155316_rule" weight="10.0" severity="medium"><version>OL09-00-000845</version><title>OL 9 must be configured so that successful/unsuccessful uses of the umount2 system call generate an audit record.</title><description>&lt;VulnDiscussion&gt;The changing of file permissions could indicate that a user is attempting to gain access to information that would otherwise be disallowed. Auditing discretionary access control (DAC) modifications can facilitate the identification of patterns of abuse among both authorized and unauthorized users.
 
 Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000130</ident><ident system="http://cyber.mil/cci">CCI-000169</ident><ident system="http://cyber.mil/cci">CCI-002884</ident><ident system="http://cyber.mil/cci">CCI-000172</ident><fixtext fixref="F-75552r1092583_fix">Configure the audit system to generate an audit event for any successful/unsuccessful use of the umount2 system call by adding the following rules to a rules file in /etc/audit/rules.d/ directory: (Example /etc/audit/rules.d/audit.rules)
 
@@ -2797,15 +2789,14 @@ Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPO
 The audit daemon must be restarted for the changes to take effect.
 
 Restart auditd:
-$ sudo service auditd restart</fixtext><fix id="F-75552r1092583_fix" /><check system="C-75645r1091495_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify that OL 9 generates an audit record for all uses of the umount2 system call with the following commands:
+$ sudo service auditd restart</fixtext><fix id="F-75552r1092583_fix" /><check system="C-75645r1155315_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify OL 9 generates an audit record for all uses of the umount2 system call with the following commands:
 
-$ sudo grep "umount2" /etc/audit/audit.rules 
+$ sudo auditctl -l | grep umount2
 
-$ sudo sh -c 'grep "umount2" /etc/audit/audit.rules' 
+-a always,exit -F arch=b32 -S umount2 -F auid&gt;=1000 -F auid!=-1 -F key=privileged-umount
+-a always,exit -F arch=b64 -S umount2 -F auid&gt;=1000 -F auid!=-1 -F key=privileged-umount
 
-If the system is configured to audit this activity, it will return a line.
-
-If no line is returned, this is a finding.</check-content></check></Rule></Group><Group id="V-271596"><title>SRG-OS-000341-GPOS-00132</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271596r1091500_rule" weight="10.0" severity="medium"><version>OL09-00-000850</version><title>OL 9 must allocate audit record storage capacity to store at least one week's worth of audit records.</title><description>&lt;VulnDiscussion&gt;To ensure OL 9 systems have a sufficient storage capacity in which to write the audit logs, OL 9 needs to be able to allocate audit record storage capacity.
+If the command does not return an audit rule for "umount2" or any of the lines returned are commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-271596"><title>SRG-OS-000341-GPOS-00132</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271596r1091500_rule" weight="10.0" severity="medium"><version>OL09-00-000850</version><title>OL 9 must allocate audit record storage capacity to store at least one week's worth of audit records.</title><description>&lt;VulnDiscussion&gt;To ensure OL 9 systems have a sufficient storage capacity in which to write the audit logs, OL 9 needs to be able to allocate audit record storage capacity.
 
 The task of allocating audit record storage capacity is usually performed during initial installation of OL 9.
 
@@ -3342,7 +3333,7 @@ Note: Manual changes to the listed file may be overwritten by the "authselect" p
 
 $ grep -i nullok /etc/pam.d/system-auth /etc/pam.d/password-auth
 
-If output is produced, this is a finding.</check-content></check></Rule></Group><Group id="V-271635"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271635r1117265_rule" weight="10.0" severity="medium"><version>OL09-00-001115</version><title>OL 9 must require a boot loader superuser password.</title><description>&lt;VulnDiscussion&gt;To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DOD-approved PKIs, all DOD systems (e.g., web servers and web portals) must be properly configured to incorporate access control methods that do not rely solely on the possession of a certificate for access. Successful authentication must not automatically give an entity access to an asset or security boundary. Authorization procedures and controls must be implemented to ensure each authenticated entity also has a validated and current authorization. Authorization is the process of determining whether an entity, once authenticated, is permitted to access a specific asset. Information systems use access control policies and enforcement mechanisms to implement this requirement.
+If output is produced, this is a finding.</check-content></check></Rule></Group><Group id="V-271635"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271635r1137691_rule" weight="10.0" severity="medium"><version>OL09-00-001115</version><title>OL 9 must require a boot loader superuser password.</title><description>&lt;VulnDiscussion&gt;To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DOD-approved PKIs, all DOD systems (e.g., web servers and web portals) must be properly configured to incorporate access control methods that do not rely solely on the possession of a certificate for access. Successful authentication must not automatically give an entity access to an asset or security boundary. Authorization procedures and controls must be implemented to ensure each authenticated entity also has a validated and current authorization. Authorization is the process of determining whether an entity, once authenticated, is permitted to access a specific asset. Information systems use access control policies and enforcement mechanisms to implement this requirement.
 
 Password protection on the boot loader configuration ensures users with physical access cannot trivially alter important bootloader settings. These include which kernel to use, and whether to enter single-user mode.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-75592r1091616_fix">Configure OL 9 to require a grub bootloader password for the grub superuser account.
 
@@ -3404,16 +3395,7 @@ $ sudo systemctl mask --now autofs.service</fixtext><fix id="F-75596r1091628_fix
 $ systemctl is-enabled  autofs
 masked
 
-If the returned value is not "masked" and is not documented as operational requirement with the information system security officer (ISSO), this is a finding.</check-content></check></Rule></Group><Group id="V-271640"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271640r1091632_rule" weight="10.0" severity="medium"><version>OL09-00-002010</version><title>OL 9 must be configured so that the Network File System (NFS) is configured to use RPCSEC_GSS.</title><description>&lt;VulnDiscussion&gt;When an NFS server is configured to use RPCSEC_SYS, a selected userid and groupid are used to handle requests from the remote user. The userid and groupid could mistakenly or maliciously be set incorrectly. The RPCSEC_GSS method of authentication uses certificates on the server and client systems to authenticate the remote mount request more securely.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-75597r1091631_fix">Update the "/etc/fstab" file so the option "sec" is defined for each NFS mounted file system and the "sec" option does not have the "sys" setting. 
-
-Ensure the "sec" option is defined as "krb5p:krb5i:krb5".</fixtext><fix id="F-75597r1091631_fix" /><check system="C-75690r1091630_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>If no NFS mounts are configured, this requirement is Not Applicable.
-
-Verify that OL 9 has the "sec" option configured for all NFS mounts with the following command:
-
-$ cat /etc/fstab | grep nfs
-192.168.22.2:/mnt/export /data nfs4 rw,nosuid,nodev,noexec,sync,soft,sec=krb5p:krb5i:krb5
-
-If the system is mounting file systems via NFS and has the sec option without the "krb5:krb5i:krb5p" settings, the "sec" option has the "sys" setting, or the "sec" option is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-271641"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271641r1091635_rule" weight="10.0" severity="medium"><version>OL09-00-002011</version><title>OL 9 must prevent special devices on file systems that are imported via Network File System (NFS).</title><description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-75598r1091634_fix">Update each NFS mounted file system to use the "nodev" option on file systems that are being imported via NFS.</fixtext><fix id="F-75598r1091634_fix" /><check system="C-75691r1091633_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>If no NFS mounts are configured, this requirement is Not Applicable.
+If the returned value is not "masked" and is not documented as operational requirement with the information system security officer (ISSO), this is a finding.</check-content></check></Rule></Group><Group id="V-271641"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271641r1091635_rule" weight="10.0" severity="medium"><version>OL09-00-002011</version><title>OL 9 must prevent special devices on file systems that are imported via Network File System (NFS).</title><description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-75598r1091634_fix">Update each NFS mounted file system to use the "nodev" option on file systems that are being imported via NFS.</fixtext><fix id="F-75598r1091634_fix" /><check system="C-75691r1091633_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>If no NFS mounts are configured, this requirement is Not Applicable.
 
 Verify that OL 9 has the "nodev" option configured for all NFS mounts with the following command:
 
@@ -3467,11 +3449,11 @@ Verify that the /boot directory is mounted with the "nosuid" option with the fol
 $ mount | grep '\s/boot\s'
 /dev/sda1 on /boot type xfs (rw,nosuid,relatime,seclabe,attr2,inode64,noquota)
 
-If the /boot file system does not have the "nosuid" option set, this is a finding.</check-content></check></Rule></Group><Group id="V-271649"><title>SRG-OS-000368-GPOS-00154</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271649r1091659_rule" weight="10.0" severity="medium"><version>OL09-00-002032</version><title>OL 9 must prevent files with the setuid and setgid bit set from being executed on the /boot/efi directory.</title><description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system not to execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001764</ident><fixtext fixref="F-75606r1091658_fix">Configure OL 9 to prevent files with the setuid and setgid bit set from being executed on the /boot/efi directory.
+If the /boot file system does not have the "nosuid" option set, this is a finding.</check-content></check></Rule></Group><Group id="V-271649"><title>SRG-OS-000368-GPOS-00154</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271649r1155334_rule" weight="10.0" severity="medium"><version>OL09-00-002032</version><title>OL 9 must prevent files with the setuid and setgid bit set from being executed on the /boot/efi directory.</title><description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system not to execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001764</ident><fixtext fixref="F-75606r1091658_fix">Configure OL 9 to prevent files with the setuid and setgid bit set from being executed on the /boot/efi directory.
 
-Modify "/etc/fstab" to use the "nosuid" option on the "/boot/efi" directory.</fixtext><fix id="F-75606r1091658_fix" /><check system="C-75699r1091657_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>For systems that use BIOS, this requirement is Not Applicable.
+Modify "/etc/fstab" to use the "nosuid" option on the "/boot/efi" directory.</fixtext><fix id="F-75606r1091658_fix" /><check system="C-75699r1155333_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Note: For systems using vfat file systems.or systems that use BIOS, this requirement is Not Applicable.
 
-Verify that OL 9 /boot/efi directory is mounted with the "nosuid" option with the following command:
+Verify OL 9 /boot/efi directory is mounted with the "nosuid" option with the following command:
 
 $ mount | grep '\s/boot/efi\s'
 /dev/sda1 on /boot/efi type vfat (rw,nosuid,relatime,fmask=0077,dmask=0077,codepage=437,iocharset=ascii,shortname=winnt,errors=remount-ro)
@@ -3667,9 +3649,11 @@ Note: If a separate file system has not been created for the user home directori
 $ mount | grep /home
 tmpfs on /home type xfs (rw,nodev,nosuid,noexec,seclabel)
 
-If the "/home" file system is mounted without the "noexec" option, this is a finding.</check-content></check></Rule></Group><Group id="V-271669"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271669r1091719_rule" weight="10.0" severity="medium"><version>OL09-00-002080</version><title>OL 9 must prevent special devices on nonroot local partitions.</title><description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
+If the "/home" file system is mounted without the "noexec" option, this is a finding.</check-content></check></Rule></Group><Group id="V-271669"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271669r1155336_rule" weight="10.0" severity="medium"><version>OL09-00-002080</version><title>OL 9 must prevent special devices on nonroot local partitions.</title><description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
 
-The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-75626r1091718_fix">Configure the "/etc/fstab" to use the "nodev" option on all nonroot local partitions.</fixtext><fix id="F-75626r1091718_fix" /><check system="C-75719r1091717_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify that OL 9 prevents special devices on nonroot local partitions.
+The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-75626r1091718_fix">Configure the "/etc/fstab" to use the "nodev" option on all nonroot local partitions.</fixtext><fix id="F-75626r1091718_fix" /><check system="C-75719r1155335_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Note: This control is not applicable to vfat file systems.
+
+Verify OL 9 prevents special devices on nonroot local partitions.
 
 Verify all nonroot local partitions are mounted with the "nodev" option with the following command:
 
@@ -3755,30 +3739,30 @@ Verify that OL 9 initiates a session lock for graphical user interfaces when the
 $ gsettings get org.gnome.desktop.screensaver lock-delay
 uint32 5
 
-If the "uint32" setting is not set to "5" or less, or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-271674"><title>SRG-OS-000029-GPOS-00010</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271674r1091734_rule" weight="10.0" severity="medium"><version>OL09-00-002104</version><title>OL 9 must automatically lock graphical user sessions after 15 minutes of inactivity.</title><description>&lt;VulnDiscussion&gt;A session time-out lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not logout because of the temporary nature of the absence. Rather than relying on the user to manually lock their operating system session prior to vacating the vicinity, the GNOME desktop can be configured to identify when a user's session has idled and take action to initiate a session lock.
+If the "uint32" setting is not set to "5" or less, or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-271674"><title>SRG-OS-000029-GPOS-00010</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271674r1155332_rule" weight="10.0" severity="medium"><version>OL09-00-002104</version><title>OL 9 must automatically lock graphical user sessions after 15 minutes of inactivity.</title><description>&lt;VulnDiscussion&gt;A session time-out lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not logout because of the temporary nature of the absence. Rather than relying on the user to manually lock their operating system session prior to vacating the vicinity, the GNOME desktop can be configured to identify when a user's session has idled and take action to initiate a session lock.
 
-Satisfies: SRG-OS-000029-GPOS-00010, SRG-OS-000031-GPOS-00012&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000057</ident><ident system="http://cyber.mil/cci">CCI-000060</ident><fixtext fixref="F-75631r1091733_fix">Configure OL 9 to initiate a screensaver after a 15-minute period of inactivity for graphical user interfaces.
+Satisfies: SRG-OS-000029-GPOS-00010, SRG-OS-000031-GPOS-00012&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000057</ident><ident system="http://cyber.mil/cci">CCI-000060</ident><fixtext fixref="F-75631r1155331_fix">Configure OL 9 to initiate a screensaver after a 10-minute period of inactivity for graphical user interfaces.
 
-Create a database to contain the system-wide screensaver settings (if it does not already exist) with the following command:
+Create a database to contain the systemwide screensaver settings (if it does not already exist) with the following command:
 
 $ sudo touch /etc/dconf/db/local.d/00-screensaver
 
 Edit /etc/dconf/db/local.d/00-screensaver and add or update the following lines:
 
 [org/gnome/desktop/session]
-# Set the lock time out to 900 seconds before the session is considered idle
-idle-delay=uint32 900
+# Set the lock time out to 600 seconds before the session is considered idle
+idle-delay=uint32 600
 
 Update the system databases:
 
-$ sudo dconf update</fixtext><fix id="F-75631r1091733_fix" /><check system="C-75724r1091732_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>This requirement assumes the use of the OL 9 default graphical user interface—the GNOME desktop environment. If the system does not have any graphical user interface installed, this requirement is Not Applicable.
+$ sudo dconf update</fixtext><fix id="F-75631r1155331_fix" /><check system="C-75724r1155330_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>This requirement assumes the use of the OL 9 default graphical user interface—the GNOME desktop environment. If the system does not have any graphical user interface installed, this requirement is Not Applicable.
 
-Verify that OL 9 initiates a session lock after a 15-minute period of inactivity for graphical user interfaces with the following command:
+Verify OL 9 initiates a session lock after a 10-minute period of inactivity for graphical user interfaces with the following command:
 
 $ gsettings get org.gnome.desktop.session idle-delay
-uint32 900
+uint32 600
 
-If "idle-delay" is set to "0" or a value greater than "900", this is a finding.</check-content></check></Rule></Group><Group id="V-271676"><title>SRG-OS-000031-GPOS-00012</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271676r1091740_rule" weight="10.0" severity="medium"><version>OL09-00-002106</version><title>OL 9 must conceal, via the session lock, information previously visible on the display with a publicly viewable image.</title><description>&lt;VulnDiscussion&gt;Setting the screensaver mode to blank-only conceals the contents of the display from passersby.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000060</ident><fixtext fixref="F-75633r1091739_fix">Configure OL 9 to conceal, via the session lock, information previously visible on the display with a publicly viewable image.
+If "idle-delay" is set to "0" or a value greater than "600", this is a finding.</check-content></check></Rule></Group><Group id="V-271676"><title>SRG-OS-000031-GPOS-00012</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271676r1091740_rule" weight="10.0" severity="medium"><version>OL09-00-002106</version><title>OL 9 must conceal, via the session lock, information previously visible on the display with a publicly viewable image.</title><description>&lt;VulnDiscussion&gt;Setting the screensaver mode to blank-only conceals the contents of the display from passersby.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000060</ident><fixtext fixref="F-75633r1091739_fix">Configure OL 9 to conceal, via the session lock, information previously visible on the display with a publicly viewable image.
 
 The dconf settings can be edited in the /etc/dconf/db/* location.
 
@@ -4656,19 +4640,19 @@ Verify that "/etc/sudoers" has no occurrences of "!authenticate" with the follow
 
 $ sudo grep -ri '!authenticate' /etc/sudoers /etc/sudoers.d/*
 
-If any occurrences of "!authenticate" are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-271725"><title>SRG-OS-000327-GPOS-00127</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271725r1091887_rule" weight="10.0" severity="medium"><version>OL09-00-002363</version><title>OL 9 must require users to provide a password for privilege escalation.</title><description>&lt;VulnDiscussion&gt;Without reauthentication, users may access resources or perform tasks for which they do not have authorization.
+If any occurrences of "!authenticate" are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-271725"><title>SRG-OS-000327-GPOS-00127</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271725r1155318_rule" weight="10.0" severity="medium"><version>OL09-00-002363</version><title>OL 9 must require users to provide a password for privilege escalation.</title><description>&lt;VulnDiscussion&gt;Without reauthentication, users may access resources or perform tasks for which they do not have authorization.
 
 When operating systems provide the capability to escalate a functional capability, it is critical that the user reauthenticate.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-002234</ident><fixtext fixref="F-75682r1091886_fix">Configure OL 9 to not allow users to execute privileged actions without authenticating with a password.
 
 Remove any occurrence of "NOPASSWD" found in "/etc/sudoers" file or files in the "/etc/sudoers.d" directory.
 
-$ sudo sed -i '/NOPASSWD/ s/^/# /g' /etc/sudoers /etc/sudoers.d/*</fixtext><fix id="F-75682r1091886_fix" /><check system="C-75775r1091885_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify that OL 9 requires users to provide a password for privilege escalation.
+$ sudo sed -i '/NOPASSWD/ s/^/# /g' /etc/sudoers /etc/sudoers.d/*</fixtext><fix id="F-75682r1091886_fix" /><check system="C-75775r1155317_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify OL 9 requires users to provide a password for privilege escalation.
 
-Verify that "/etc/sudoers" has no occurrences of "NOPASSWD" with the following command:
+Verify "/etc/sudoers" has no occurrences of "NOPASSWD" with the following command:
 
-$ sudo grep -ri nopasswd /etc/sudoers /etc/sudoers.d/*
+$ sudo grep -iR nopasswd /etc/sudoers /etc/sudoers.d/
 
-If any occurrences of "NOPASSWD" are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-271726"><title>SRG-OS-000327-GPOS-00127</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271726r1091890_rule" weight="10.0" severity="medium"><version>OL09-00-002364</version><title>OL 9 must not be configured to bypass password requirements for privilege escalation.</title><description>&lt;VulnDiscussion&gt;Without reauthentication, users may access resources or perform tasks for which they do not have authorization. When operating systems provide the capability to escalate a functional capability, it is critical the user reauthenticate.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-002234</ident><fixtext fixref="F-75683r1091889_fix">Configure the operating system to require users to supply a password for privilege escalation.
+If any occurrences of "NOPASSWD" are returned from the command and have not been documented with the information system security officer (ISSO) as an organizationally defined administrative group using multifactor authentication (MFA), this is a finding.</check-content></check></Rule></Group><Group id="V-271726"><title>SRG-OS-000327-GPOS-00127</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271726r1091890_rule" weight="10.0" severity="medium"><version>OL09-00-002364</version><title>OL 9 must not be configured to bypass password requirements for privilege escalation.</title><description>&lt;VulnDiscussion&gt;Without reauthentication, users may access resources or perform tasks for which they do not have authorization. When operating systems provide the capability to escalate a functional capability, it is critical the user reauthenticate.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-002234</ident><fixtext fixref="F-75683r1091889_fix">Configure the operating system to require users to supply a password for privilege escalation.
 
 Remove any occurrences of " pam_succeed_if " in the  "/etc/pam.d/sudo" file.</fixtext><fix id="F-75683r1091889_fix" /><check system="C-75776r1091888_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify that OL 9 is not configured to bypass password requirements for privilege escalation with the following command:
 
@@ -4702,38 +4686,49 @@ $ sudo sysctl --system</fixtext><fix id="F-75685r1091895_fix" /><check system="C
 $ sysctl kernel.core_pattern
 kernel.core_pattern = |/bin/false
 
-If the returned line does not have a value of "|/bin/false", or a line is not returned and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-271729"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271729r1091899_rule" weight="10.0" severity="medium"><version>OL09-00-002381</version><title>OL 9 must disable core dump backtraces.</title><description>&lt;VulnDiscussion&gt;A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers or system operators trying to debug problems.
+If the returned line does not have a value of "|/bin/false", or a line is not returned and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-271729"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271729r1155325_rule" weight="10.0" severity="medium"><version>OL09-00-002381</version><title>OL 9 must disable core dump backtraces.</title><description>&lt;VulnDiscussion&gt;A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers or system operators trying to debug problems.
 
 Enabling core dumps on production systems is not recommended; however, there may be overriding operational requirements to enable advanced debugging. Permitting temporary enablement of core dumps during such situations must be reviewed through local needs and policy.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-75686r1091898_fix">Configure the operating system to disable core dump backtraces.
 
 Add or modify the following line in /etc/systemd/coredump.conf:
 
-ProcessSizeMax=0</fixtext><fix id="F-75686r1091898_fix" /><check system="C-75779r1091897_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify that OL 9 disables core dump backtraces by issuing the following command:
+ProcessSizeMax=0</fixtext><fix id="F-75686r1091898_fix" /><check system="C-75779r1155324_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Note: If kernel dumps are disabled in accordance with OL09-00-002380, this requirement is not applicable.
+
+Verify OL 9 disables core dump backtraces by issuing the following command:
 
 $ grep -i process /etc/systemd/coredump.conf
 ProcessSizeMax=0
 
-If the "ProcessSizeMax" item is missing, commented out, or the value is anything other than "0" and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement for all domains that have the "core" item assigned, this is a finding.</check-content></check></Rule></Group><Group id="V-271730"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271730r1091902_rule" weight="10.0" severity="medium"><version>OL09-00-002382</version><title>OL 9 must disable storing core dumps.</title><description>&lt;VulnDiscussion&gt;A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers or system operators trying to debug problems. Enabling core dumps on production systems is not recommended; however, there may be overriding operational requirements to enable advanced debugging. Permitting temporary enablement of core dumps during such situations must be reviewed through local needs and policy.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-75687r1091901_fix">Configure the operating system to disable storing core dumps for all users.
+If the "ProcessSizeMax" item is missing, commented out, or the value is anything other than "0" and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement for all domains that have the "core" item assigned, this is a finding.</check-content></check></Rule></Group><Group id="V-271730"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271730r1155327_rule" weight="10.0" severity="medium"><version>OL09-00-002382</version><title>OL 9 must disable storing core dumps.</title><description>&lt;VulnDiscussion&gt;A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers or system operators trying to debug problems. Enabling core dumps on production systems is not recommended; however, there may be overriding operational requirements to enable advanced debugging. Permitting temporary enablement of core dumps during such situations must be reviewed through local needs and policy.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-75687r1091901_fix">Configure the operating system to disable storing core dumps for all users.
 
 Add or modify the following line in /etc/systemd/coredump.conf:
 
-Storage=none</fixtext><fix id="F-75687r1091901_fix" /><check system="C-75780r1091900_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify that OL 9 disables storing core dumps for all users by issuing the following command:
+Storage=none</fixtext><fix id="F-75687r1091901_fix" /><check system="C-75780r1155326_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Note: If kernel dumps are disabled in accordance with OL09-00-002380, this requirement is not applicable.
+
+Verify OL 9 disables storing core dumps for all users by issuing the following command:
 
 $ grep -i storage /etc/systemd/coredump.conf
 Storage=none
 
-If the "Storage" item is missing, commented out, or the value is anything other than "none" and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement for all domains that have the "core" item assigned, this is a finding.</check-content></check></Rule></Group><Group id="V-271731"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271731r1091905_rule" weight="10.0" severity="medium"><version>OL09-00-002383</version><title>OL 9 must disable core dumps for all users.</title><description>&lt;VulnDiscussion&gt;A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-75688r1091904_fix">Configure the operating system to disable core dumps for all users.
+If the "Storage" item is missing, commented out, or the value is anything other than "none" and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement for all domains that have the "core" item assigned, this is a finding.</check-content></check></Rule></Group><Group id="V-271731"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271731r1155302_rule" weight="10.0" severity="medium"><version>OL09-00-002383</version><title>OL 9 must disable core dumps for all users.</title><description>&lt;VulnDiscussion&gt;A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-75688r1155301_fix">Configure OL 9 to disable core dumps for all users.
 
 Add the following line to the top of the /etc/security/limits.conf or in a single ".conf" file defined in /etc/security/limits.d/:
 
-* hard core 0</fixtext><fix id="F-75688r1091904_fix" /><check system="C-75781r1091903_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify that OL 9 disables core dumps for all users by issuing the following command:
+* hard core 0
+
+Remove or comment out any entries for users or groups with a value set to anything other than "0".</fixtext><fix id="F-75688r1155301_fix" /><check system="C-75781r1155300_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Note: If kernel dumps are disabled in accordance with OL09-00-002380, this requirement is not applicable.
+
+Verify OL 9 disables core dumps for all users by issuing the following command:
 
 $ grep -r -s core /etc/security/limits.conf /etc/security/limits.d/*.conf
+
 /etc/security/limits.conf:* hard core 0
 
 This can be set as a global domain (with the * wildcard) but may be set differently for multiple domains.
 
-If the "core" item is missing, commented out, or the value is anything other than "0" and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement for all domains that have the "core" item assigned, this is a finding.</check-content></check></Rule></Group><Group id="V-271732"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271732r1091908_rule" weight="10.0" severity="medium"><version>OL09-00-002384</version><title>OL 9 must disable acquiring, saving, and processing core dumps.</title><description>&lt;VulnDiscussion&gt;A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-75689r1091907_fix">Configure the system to disable the systemd-coredump.socket with the following command:
+If the "core" item is missing or commented out, or the value is anything other than "0", and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement for all domains that have the "core" item assigned, this is a finding.
+
+If entries exist for users or groups with a value set to anything other than "0", this is a finding.</check-content></check></Rule></Group><Group id="V-271732"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271732r1155329_rule" weight="10.0" severity="medium"><version>OL09-00-002384</version><title>OL 9 must disable acquiring, saving, and processing core dumps.</title><description>&lt;VulnDiscussion&gt;A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-75689r1091907_fix">Configure the system to disable the systemd-coredump.socket with the following command:
 
 $ sudo systemctl mask --now systemd-coredump.socket
 
@@ -4741,7 +4736,9 @@ Created symlink /etc/systemd/system/systemd-coredump.socket -&gt; /dev/null
 
 Reload the daemon for this change to take effect.
 
-$ sudo systemctl daemon-reload</fixtext><fix id="F-75689r1091907_fix" /><check system="C-75782r1091906_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify that OL 9 is not configured to acquire, save, or process core dumps with the following command:
+$ sudo systemctl daemon-reload</fixtext><fix id="F-75689r1091907_fix" /><check system="C-75782r1155328_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Note: If kernel dumps are disabled in accordance with OL09-00-002380, this requirement is not applicable.
+
+Verify OL 9 is not configured to acquire, save, or process core dumps with the following command:
 
 $ systemctl status systemd-coredump.socket
 systemd-coredump.socket
@@ -5046,16 +5043,22 @@ declare -xr TMOUT=900</fixtext><fix id="F-75707r1091961_fix" /><check system="C-
 $ grep -i tmout /etc/profile /etc/profile.d/*.sh
 /etc/profile.d/tmout.sh:declare -xr TMOUT=900
 
-If "TMOUT" is not set to "900" or less in a script located in the "/etc/'profile.d/ directory, is missing or is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-271751"><title>SRG-OS-000324-GPOS-00125</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271751r1091965_rule" weight="10.0" severity="high"><version>OL09-00-002412</version><title>OL 9 must be configured so that the systemd Ctrl-Alt-Delete burst key sequence is disabled.</title><description>&lt;VulnDiscussion&gt;A locally logged-on user who presses Ctrl-Alt-Delete when at the console can reboot the system. If accidentally pressed, as could happen in the case of a mixed OS environment, this can create the risk of short-term loss of availability of systems due to unintentional reboot. In a graphical user environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is reduced because the user will be prompted before any action is taken.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-002235</ident><fixtext fixref="F-75708r1091964_fix">Configure the system to disable the CtrlAltDelBurstAction by added or modifying the following line in the "/etc/systemd/system.conf" configuration file:
+If "TMOUT" is not set to "900" or less in a script located in the "/etc/'profile.d/ directory, is missing or is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-271751"><title>SRG-OS-000324-GPOS-00125</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271751r1155321_rule" weight="10.0" severity="high"><version>OL09-00-002412</version><title>OL 9 must be configured so that the systemd Ctrl-Alt-Delete burst key sequence is disabled.</title><description>&lt;VulnDiscussion&gt;A locally logged-on user who presses Ctrl-Alt-Delete when at the console can reboot the system. If accidentally pressed, as could happen in the case of a mixed OS environment, this can create the risk of short-term loss of availability of systems due to unintentional reboot. In a graphical user environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is reduced because the user will be prompted before any action is taken.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-002235</ident><fixtext fixref="F-75708r1155320_fix">Configure OL 9 to disable the CtrlAltDelBurstAction by adding it to a drop file in a "/etc/systemd/system.conf.d/" configuration file:
+
+If no drop file exists, create one with the following command:
+
+$ sudo mkdir -p /etc/systemd/system.conf.d &amp;&amp; sudo vi /etc/systemd/system.conf.d/55-CtrlAltDel-BurstAction
+
+Edit the file to contain the setting by adding the following text:
 
 CtrlAltDelBurstAction=none
 
 Reload the daemon for this change to take effect.
 
-$ sudo systemctl daemon-reload</fixtext><fix id="F-75708r1091964_fix" /><check system="C-75801r1091963_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify that OL 9 is configured to not reboot the system when Ctrl-Alt-Delete is pressed seven times within two seconds with the following command:
+$ sudo systemctl daemon-reload</fixtext><fix id="F-75708r1155320_fix" /><check system="C-75801r1155319_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify OL 9 is configured to not reboot the system when Ctrl-Alt-Delete is pressed seven times within two seconds with the following command:
 
-$ grep -i ctrl /etc/systemd/system.conf
-CtrlAltDelBurstAction=none
+$ sudo grep -iR CtrlAltDelBurstAction /etc/systemd/system*
+/etc/systemd/system.conf.d/55-CtrlAltDel-BurstAction:CtrlAltDelBurstAction=none
 
 If the "CtrlAltDelBurstAction" is not set to "none", commented out, or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-271752"><title>SRG-OS-000324-GPOS-00125</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271752r1091968_rule" weight="10.0" severity="high"><version>OL09-00-002413</version><title>OL 9 must be configured so that the x86 Ctrl-Alt-Delete key sequence is disabled.</title><description>&lt;VulnDiscussion&gt;A locally logged-on user who presses Ctrl-Alt-Delete when at the console can reboot the system. If accidentally pressed, as could happen in the case of a mixed OS environment, this can create the risk of short-term loss of availability of systems due to unintentional reboot. In a graphical user environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is reduced because the user will be prompted before any action is taken.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-002235</ident><fixtext fixref="F-75709r1091967_fix">Configure OL 9 to disable the ctrl-alt-del.target with the following command:
 
@@ -5176,20 +5179,7 @@ $ sudo sysctl --system</fixtext><fix id="F-75718r1091994_fix" /><check system="C
 $ sysctl kernel.randomize_va_space
 kernel.randomize_va_space = 2
 
-If "kernel.randomize_va_space" is not set to "2" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-271762"><title>SRG-OS-000120-GPOS-00061</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271762r1091998_rule" weight="10.0" severity="medium"><version>OL09-00-002424</version><title>OL 9 must use mechanisms meeting the requirements of applicable federal laws, executive orders, directives, policies, regulations, standards, and guidance for authentication to a cryptographic module.</title><description>&lt;VulnDiscussion&gt;Overriding the system crypto policy makes the behavior of Kerberos violate expectations and makes system configuration more fragmented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000803</ident><fixtext fixref="F-75719r1091997_fix">Configure Kerberos to use system crypto policy.
-
-Remove incorrect symlink if it exists using the following command:
-
-$ sudo rm /etc/crypto-policies/back-ends/krb5.config
-
-Create a symlink pointing to system crypto policy in the Kerberos configuration using the following command:
-
-$ sudo ln -s /usr/share/crypto-policies/FIPS/krb5.txt /etc/crypto-policies/back-ends/krb5.config</fixtext><fix id="F-75719r1091997_fix" /><check system="C-75812r1091996_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify that OL 9 configures Kerberos to use the systemwide crypto policy with the following command:
-
-$ file /etc/crypto-policies/back-ends/krb5.config
-/etc/crypto-policies/back-ends/krb5.config: symbolic link to  /usr/share/crypto-policies/FIPS/krb5.txt
-
-If the symlink does not exist or points to a different target, this is a finding.</check-content></check></Rule></Group><Group id="V-271763"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271763r1092001_rule" weight="10.0" severity="medium"><version>OL09-00-002425</version><title>OL 9 must be configured to prevent unrestricted mail relaying.</title><description>&lt;VulnDiscussion&gt;If unrestricted mail relaying is permitted, unauthorized senders could use this host as a mail relay for the purpose of sending spam or other unauthorized activity.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-75720r1092000_fix">Modify the postfix configuration file to restrict client connections to the local network with the following command:
+If "kernel.randomize_va_space" is not set to "2" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-271763"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271763r1092001_rule" weight="10.0" severity="medium"><version>OL09-00-002425</version><title>OL 9 must be configured to prevent unrestricted mail relaying.</title><description>&lt;VulnDiscussion&gt;If unrestricted mail relaying is permitted, unauthorized senders could use this host as a mail relay for the purpose of sending spam or other unauthorized activity.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-75720r1092000_fix">Modify the postfix configuration file to restrict client connections to the local network with the following command:
 
 $ sudo postconf -e 'smtpd_client_restrictions = permit_mynetworks,reject'</fixtext><fix id="F-75720r1092000_fix" /><check system="C-75813r1091999_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Note: If postfix is not installed, this requirement is Not Applicable.
 
@@ -5222,17 +5212,7 @@ If a TFTP server is installed, check for the server arguments with the following
 $ systemctl cat tftp | grep ExecStart
 ExecStart=/usr/sbin/in.tftpd -s /var/lib/tftpboot
 
-If the "ExecStart" line does not have a "-s" option, and a subdirectory is not assigned, this is a finding.</check-content></check></Rule></Group><Group id="V-271765"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271765r1092007_rule" weight="10.0" severity="medium"><version>OL09-00-002427</version><title>OL 9 must be configured so that local initialization files do not execute world-writable programs.</title><description>&lt;VulnDiscussion&gt;If user start-up files execute world-writable programs, especially in unprotected directories, they could be maliciously modified to destroy user files or otherwise compromise the system at the user level. If the system is compromised at the user level, it is easier to elevate privileges to eventually compromise the system at the root and network level.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-75722r1092006_fix">Configure OL 9 so that local initialization files do not execute world-writable programs.
-
-Set the mode on files being executed by the local initialization files with the following command:
-
-$ sudo chmod 0755 &lt;file&gt;</fixtext><fix id="F-75722r1092006_fix" /><check system="C-75815r1092005_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify that OL 9 is configured so that local initialization files do not execute world-writable programs with the following command:
-
-Note: The example will be for a system that is configured to create user home directories in the "/home" directory.
-
-$ sudo find /home -perm -002 -type f -name ".[^.]*" -exec ls -ld {} \; 
-
-If any local initialization files are found to reference world-writable files, this is a finding.</check-content></check></Rule></Group><Group id="V-271766"><title>SRG-OS-000366-GPOS-00153</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271766r1092010_rule" weight="10.0" severity="medium"><version>OL09-00-002428</version><title>OL 9 must prevent the loading of a new kernel for later execution.</title><description>&lt;VulnDiscussion&gt;Changes to any software components can have significant effects on the overall security of the operating system. This requirement ensures the software has not been tampered with and that it has been provided by a trusted vendor.
+If the "ExecStart" line does not have a "-s" option, and a subdirectory is not assigned, this is a finding.</check-content></check></Rule></Group><Group id="V-271766"><title>SRG-OS-000366-GPOS-00153</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271766r1092010_rule" weight="10.0" severity="medium"><version>OL09-00-002428</version><title>OL 9 must prevent the loading of a new kernel for later execution.</title><description>&lt;VulnDiscussion&gt;Changes to any software components can have significant effects on the overall security of the operating system. This requirement ensures the software has not been tampered with and that it has been provided by a trusted vendor.
 
 Disabling kexec_load prevents an unsigned kernel image (that could be a windows kernel or modified vulnerable kernel) from being loaded. Kexec can be used subvert the entire secureboot process and should be avoided at all costs especially since it can load unsigned kernel images.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-003992</ident><fixtext fixref="F-75723r1092009_fix">Configure OL 9 to prevent the loading of a new kernel for later execution.
 
@@ -5327,15 +5307,15 @@ $ sudo stat -c "%a %n" /etc/ssh/*.pub
 644 /etc/ssh/ssh_host_ed25519_key.pub
 644 /etc/ssh/ssh_host_rsa_key.pub
 
-If any key.pub file has a mode more permissive than "0644", this is a finding.</check-content></check></Rule></Group><Group id="V-271773"><title>SRG-OS-000259-GPOS-00100</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271773r1092031_rule" weight="10.0" severity="medium"><version>OL09-00-002504</version><title>OL 9 system commands must be group-owned by root or a system account.</title><description>&lt;VulnDiscussion&gt;If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
+If any key.pub file has a mode more permissive than "0644", this is a finding.</check-content></check></Rule></Group><Group id="V-271773"><title>SRG-OS-000259-GPOS-00100</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271773r1155299_rule" weight="10.0" severity="medium"><version>OL09-00-002504</version><title>OL 9 system commands must be group-owned by root or a system account.</title><description>&lt;VulnDiscussion&gt;If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
 
 This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001499</ident><fixtext fixref="F-75730r1092030_fix">Configure the system commands to be protected from unauthorized access.
 
 Run the following command, replacing "[FILE]" with any system command file not group-owned by "root" or a required system account.
 
-$ sudo chgrp root [FILE]</fixtext><fix id="F-75730r1092030_fix" /><check system="C-75823r1092029_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify that OL 9 system commands contained in the following directories are group-owned by "root", or a required system account, with the following command:
+$ sudo chgrp root [FILE]</fixtext><fix id="F-75730r1092030_fix" /><check system="C-75823r1155298_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify OL 9 system commands contained in the following directories are group-owned by "root", or a required system account, with the following command:
 
-$ sudo find -L /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin ! -group root -exec ls -l {} \;
+$ sudo find -L /bin /sbin /usr/bin /usr/sbin /usr/libexec /usr/local/bin /usr/local/sbin ! -group root -exec ls -l {} \;
 
 If any system commands are returned and is not group-owned by a required system account, this is a finding.</check-content></check></Rule></Group><Group id="V-271774"><title>SRG-OS-000259-GPOS-00100</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271774r1092034_rule" weight="10.0" severity="medium"><version>OL09-00-002505</version><title>OL 9 system commands must be owned by root.</title><description>&lt;VulnDiscussion&gt;If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
 
@@ -5378,7 +5358,7 @@ $ sudo chmod 0600 /etc/ssh/sshd_config</fixtext><fix id="F-75735r1092045_fix" />
 $ ls -al /etc/ssh/sshd_config
 rw-------. 1 root root 3669 Feb 22 11:34 /etc/ssh/sshd_config
 
-If the "/etc/ssh/sshd_config" permissions are not "0600", this is a finding.</check-content></check></Rule></Group><Group id="V-271779"><title>SRG-OS-000138-GPOS-00069</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271779r1117267_rule" weight="10.0" severity="medium"><version>OL09-00-002510</version><title>OL 9 must be configured so that a sticky bit must be set on all public directories.</title><description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
+If the "/etc/ssh/sshd_config" permissions are not "0600", this is a finding.</check-content></check></Rule></Group><Group id="V-271779"><title>SRG-OS-000138-GPOS-00069</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271779r1137695_rule" weight="10.0" severity="medium"><version>OL09-00-002510</version><title>OL 9 must be configured so that a sticky bit must be set on all public directories.</title><description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
 
 This requirement generally applies to the design of an information technology product, but it can also apply to the configuration of particular information system components that are, or use, such products. This can be verified by acceptance/validation processes in DOD or other government agencies.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001090</ident><fixtext fixref="F-75736r1092048_fix">Configure all world-writable directories to have the sticky bit set to prevent unauthorized and unintended information transferred via shared system resources.
 
@@ -5447,17 +5427,17 @@ Note: This may miss interactive users that have been assigned a privileged user
 $ sudo ls -ld $(awk -F: '($3&gt;=1000)&amp;&amp;($7 !~ /nologin/){print $6}' /etc/passwd)
 drwxr-x--- 2 wadea admin 4096 Jun 5 12:41 wadea
 
-If home directories referenced in "/etc/passwd" do not have a mode of "0750" or less permissive, this is a finding.</check-content></check></Rule></Group><Group id="V-271785"><title>SRG-OS-000138-GPOS-00069</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271785r1117267_rule" weight="10.0" severity="medium"><version>OL09-00-002516</version><title>OL 9 world-writable directories must be owned by root, sys, bin, or an application user.</title><description>&lt;VulnDiscussion&gt;If a world-writable directory is not owned by root, sys, bin, or an application user identifier (UID), unauthorized users may be able to modify files created by others.
+If home directories referenced in "/etc/passwd" do not have a mode of "0750" or less permissive, this is a finding.</check-content></check></Rule></Group><Group id="V-271785"><title>SRG-OS-000138-GPOS-00069</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271785r1155290_rule" weight="10.0" severity="medium"><version>OL09-00-002516</version><title>OL 9 world-writable directories must be owned by root, sys, bin, or an application user.</title><description>&lt;VulnDiscussion&gt;If a world-writable directory is not owned by root, sys, bin, or an application user identifier (UID), unauthorized users may be able to modify files created by others.
 
-The only authorized public directories are those temporary directories supplied with the system or those designed to be temporary file repositories. The setting is normally reserved for directories used by the system and by users for temporary file storage, (e.g., /tmp), and for directories requiring global read/write access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001090</ident><fixtext fixref="F-75742r1092066_fix">Configure all public directories to be owned by root or a system account to prevent unauthorized and unintended information transferred via shared system resources.
+The only authorized public directories are those temporary directories supplied with the system or those designed to be temporary file repositories. The setting is normally reserved for directories used by the system and by users for temporary file storage, (e.g., /tmp), and for directories requiring global read/write access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001090</ident><fixtext fixref="F-75742r1155289_fix">Configure all OL 9 public directories to be owned by root or a system account to prevent unauthorized and unintended information transferred via shared system resources.
 
-Set the owner of all public directories as root or a system account using the command, replace "[Public Directory]" with any directory path not owned by root or a system account:
+Use the following command template to set ownership of public directories to root or a system account:
 
-$ sudo chown root [Public Directory]</fixtext><fix id="F-75742r1092066_fix" /><check system="C-75835r1092065_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify that OL 9 configures world writable directories to be owned by root, a system account, or an application account with the following command. It will discover and print world-writable directories that are not owned by root. Run it once for each local partition [PART]:
+$ sudo chown [root or system account] [Public Directory]</fixtext><fix id="F-75742r1155289_fix" /><check system="C-75835r1155288_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify OL 9 world writable directories are owned by root, a system account, or an application account with the following command:
 
-$ sudo find  [PART]  -xdev -type d -perm -0002 -uid +0 -print 
+$ sudo find / -xdev -type d -perm -0002 -uid +999 -exec stat -c "%U, %u, %A, %n" {} \; 2&gt;/dev/null
 
-If there is output, this is a finding.</check-content></check></Rule></Group><Group id="V-271786"><title>SRG-OS-000259-GPOS-00100</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271786r1092070_rule" weight="10.0" severity="medium"><version>OL09-00-002520</version><title>OL 9 library directories must be group-owned by root or a system account.</title><description>&lt;VulnDiscussion&gt;If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
+If there is output that indicates world-writable directories are owned by any account other than root or an approved system account, this is a finding.</check-content></check></Rule></Group><Group id="V-271786"><title>SRG-OS-000259-GPOS-00100</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271786r1092070_rule" weight="10.0" severity="medium"><version>OL09-00-002520</version><title>OL 9 library directories must be group-owned by root or a system account.</title><description>&lt;VulnDiscussion&gt;If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
 
 This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001499</ident><fixtext fixref="F-75743r1092069_fix">Configure the system-wide shared library directories (/lib, /lib64, /usr/lib and /usr/lib64) to be protected from unauthorized access.
 
@@ -5477,17 +5457,17 @@ $ sudo chown root [DIRECTORY]</fixtext><fix id="F-75744r1092072_fix" /><check sy
 
 $ sudo find /lib /lib64 /usr/lib /usr/lib64 ! -user root -type d -exec stat -c "%n %U" '{}' \;
 
-If any system-wide shared library directory is not owned by root, this is a finding.</check-content></check></Rule></Group><Group id="V-271788"><title>SRG-OS-000259-GPOS-00100</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271788r1092076_rule" weight="10.0" severity="medium"><version>OL09-00-002522</version><title>OL 9 library directories must have mode 755 or less permissive.</title><description>&lt;VulnDiscussion&gt;If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
+If any system-wide shared library directory is not owned by root, this is a finding.</check-content></check></Rule></Group><Group id="V-271788"><title>SRG-OS-000259-GPOS-00100</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271788r1155305_rule" weight="10.0" severity="medium"><version>OL09-00-002522</version><title>OL 9 library directories must have mode 755 or less permissive.</title><description>&lt;VulnDiscussion&gt;If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
 
-This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001499</ident><fixtext fixref="F-75745r1092075_fix">Configure the system-wide shared library directories (/lib, /lib64, /usr/lib and /usr/lib64) to be protected from unauthorized access. 
+This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001499</ident><fixtext fixref="F-75745r1155304_fix">Configure the systemwide shared library directories (/lib, /lib64, /usr/lib and /usr/lib64) to be protected from unauthorized access. 
 
 Run the following command, replacing "[DIRECTORY]" with any library directory with a mode more permissive than 755.
 
-$ sudo chmod 755 [DIRECTORY]</fixtext><fix id="F-75745r1092075_fix" /><check system="C-75838r1092074_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify that OL 9 system-wide shared library directories have mode "755" or less permissive with the following command:
+$ sudo chmod 755 [DIRECTORY]</fixtext><fix id="F-75745r1155304_fix" /><check system="C-75838r1155303_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify OL 9 systemwide shared library directories have mode "755" or less permissive with the following command:
 
 $ sudo find -L /lib /lib64 /usr/lib /usr/lib64 -perm /022 -type d -exec ls -l {} \;
 
-If any system-wide shared library file is found to be group-writable or world-writable, this is a finding.</check-content></check></Rule></Group><Group id="V-271789"><title>SRG-OS-000259-GPOS-00100</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271789r1134863_rule" weight="10.0" severity="medium"><version>OL09-00-002523</version><title>OL 9 library files must be group owned by root or a system account.</title><description>&lt;VulnDiscussion&gt;If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
+If any systemwide shared library directory is found to be group-writable or world-writable, this is a finding.</check-content></check></Rule></Group><Group id="V-271789"><title>SRG-OS-000259-GPOS-00100</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271789r1134863_rule" weight="10.0" severity="medium"><version>OL09-00-002523</version><title>OL 9 library files must be group owned by root or a system account.</title><description>&lt;VulnDiscussion&gt;If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
 
 This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001499</ident><fixtext fixref="F-75746r1134862_fix">Configure the OL 9 systemwide shared library files contained in the directories "/lib", "/lib64", "/usr/lib", and "/usr/lib64" to be group owned by root with the following command:
 
@@ -6203,34 +6183,38 @@ $DefaultNetstreamDriver gtls</fixtext><fix id="F-75813r1092279_fix" /><check sys
 $ grep -i '$DefaultNetstreamDriver' /etc/rsyslog.conf /etc/rsyslog.d/*.conf 
 /etc/rsyslog.conf:$DefaultNetstreamDriver gtls 
 
-If the value of the "$DefaultNetstreamDriver" option is not set to "gtls" or the line is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-271857"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271857r1092283_rule" weight="10.0" severity="medium"><version>OL09-00-005030</version><title>OL 9 must be configured so that the rsyslog daemon does not accept log messages from other servers unless the server is being used for log aggregation.</title><description>&lt;VulnDiscussion&gt;Unintentionally running a rsyslog server accepting remote messages puts the system at increased risk. Malicious rsyslog messages sent to the server could exploit vulnerabilities in the server software itself, could introduce misleading information into the system's logs, or could fill the system's storage leading to a denial of service.
+If the value of the "$DefaultNetstreamDriver" option is not set to "gtls" or the line is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-271857"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271857r1155339_rule" weight="10.0" severity="medium"><version>OL09-00-005030</version><title>OL 9 must be configured so that the rsyslog daemon does not accept log messages from other servers unless the server is being used for log aggregation.</title><description>&lt;VulnDiscussion&gt;Unintentionally running a rsyslog server accepting remote messages puts the system at increased risk. Malicious rsyslog messages sent to the server could exploit vulnerabilities in the server software itself, could introduce misleading information into the system's logs, or could fill the system's storage leading to a denial of service.
 
-If the system is intended to be a log aggregation server, its use must be documented with the information system security officer (ISSO).&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-75814r1092282_fix">Configure OL 9 to not receive remote logs using rsyslog.
+If the system is intended to be a log aggregation server, its use must be documented with the information system security officer (ISSO).&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-75814r1155338_fix">Configure OL 9 to not receive remote logs using rsyslog.
 
 Remove the lines in /etc/rsyslog.conf and any files in the /etc/rsyslog.d directory that match any of the following:
-
-$ModLoad imtcp
-$ModLoad imudp
-$ModLoad imrelp
-$InputTCPServerRun [0-9]*
-$UDPServerRun [0-9]*
-$InputRELPServerRun [0-9]*
+InputTCPServerRun
+UDPServerRun
+RELPServerRun
+module(load="imtcp")
+module(load="imudp")
+module(load="imrelp")
+input(type="imudp" port="514")
+input(type="imtcp" port="514")
+input(type="imrelp" port="514")
 
 The rsyslog daemon must be restarted for the changes to take effect:
 
-$ sudo systemctl restart rsyslog.service</fixtext><fix id="F-75814r1092282_fix" /><check system="C-75907r1092281_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify that OL 9 is not configured to receive remote logs using rsyslog with the following commands:
+$ sudo systemctl restart rsyslog.service</fixtext><fix id="F-75814r1155338_fix" /><check system="C-75907r1155337_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Note: If the system administrator can demonstrate that another tool (e.g., SPLUNK) is being used to manage log offload and aggregation in lieu of rsyslog, this check is not applicable.
 
-$ grep -i modload /etc/rsyslog.conf /etc/rsyslog.d/*
-$ModLoad imtcp
-$ModLoad imrelp
+Verify OL 9 is not configured to receive remote logs using rsyslog with the following commands:
 
-$ grep -i serverrun /etc/rsyslog.conf /etc/rsyslog.d/*
-$InputTCPServerRun 514
-$InputRELPServerRun 514
+$ ss -tulnp | grep rsyslog
 
-Note: An error about no files or directories may be returned. This is not a finding.
+If no output is returned, rsyslog is not listening for remote messages, and is compliant.
 
-If any lines are returned by the command, then rsyslog is configured to receive remote messages, and this is a finding.</check-content></check></Rule></Group><Group id="V-271858"><title>SRG-OS-000420-GPOS-00186</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271858r1092286_rule" weight="10.0" severity="medium"><version>OL09-00-006000</version><title>OL 9 must protect against or limit the effects of denial-of-service (DoS) attacks by ensuring rate-limiting measures on impacted network interfaces are implemented.</title><description>&lt;VulnDiscussion&gt;DoS is a condition when a resource is not available for legitimate users. When this occurs, the organization either cannot accomplish its mission or must operate at degraded capacity.
+If output appears, check for configured ports (514 is the default for syslog).
+
+Check for remote logging configuration in rsyslog by examining the rsyslog configuration files:
+
+$ sudo grep -E 'InputTCPServerRun | UDPServerRun | RELPServerRun | imtcp | imudp | imrelp' /etc/rsyslog.conf /etc/rsyslog.d/*
+
+If this command returns uncommented lines enabling network listeners, the system is accepting remote logs. If this system is not documented and authorized as a log aggregation server, this is a finding.</check-content></check></Rule></Group><Group id="V-271858"><title>SRG-OS-000420-GPOS-00186</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271858r1092286_rule" weight="10.0" severity="medium"><version>OL09-00-006000</version><title>OL 9 must protect against or limit the effects of denial-of-service (DoS) attacks by ensuring rate-limiting measures on impacted network interfaces are implemented.</title><description>&lt;VulnDiscussion&gt;DoS is a condition when a resource is not available for legitimate users. When this occurs, the organization either cannot accomplish its mission or must operate at degraded capacity.
 
 This requirement addresses the configuration of OL 9 to mitigate the impact of DoS attacks that have occurred or are ongoing on system availability. For each system, known and potential DoS attacks must be identified and solutions for each type implemented. A variety of technologies exists to limit or, in some cases, eliminate the effects of DoS attacks (e.g., limiting processes or establishing memory partitions). Employing increased capacity and bandwidth, combined with service redundancy, may reduce the susceptibility to some DoS attacks.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-002385</ident><fixtext fixref="F-75815r1092285_fix">Configure "nftables" to be the default "firewallbackend" for "firewalld" by adding or editing the following line in "/etc/firewalld/firewalld.conf":
 
@@ -6382,7 +6366,7 @@ Check the value of the accept source route variable with the following command:
 $ sysctl net.ipv4.conf.default.log_martians
 net.ipv4.conf.default.log_martians = 1
 
-If the returned line does not have a value of "1", a line is not returned, or the line is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-271868"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271868r1092316_rule" weight="10.0" severity="medium"><version>OL09-00-006024</version><title>OL 9 must use reverse path filtering on all IPv4 interfaces.</title><description>&lt;VulnDiscussion&gt;Enabling reverse path filtering drops packets with source addresses that should not have been able to be received on the interface on which they were received. It must not be used on systems that are routers for complicated networks but is helpful for end hosts and routers serving small networks.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-75825r1092315_fix">Configure OL 9 to use reverse path filtering on all IPv4 interfaces. 
+If the returned line does not have a value of "1", a line is not returned, or the line is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-271868"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271868r1172845_rule" weight="10.0" severity="medium"><version>OL09-00-006024</version><title>OL 9 must use reverse path filtering on all IPv4 interfaces.</title><description>&lt;VulnDiscussion&gt;Enabling reverse path filtering drops packets with source addresses that should not have been able to be received on the interface on which they were received. It must not be used on systems that are routers for complicated networks but is helpful for end hosts and routers serving small networks.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-75825r1092315_fix">Configure OL 9 to use reverse path filtering on all IPv4 interfaces. 
 
 Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
@@ -6390,11 +6374,11 @@ net.ipv4.conf.all.rp_filter = 1
 
 The system configuration files need to be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
 
-$ sudo sysctl --system</fixtext><fix id="F-75825r1092315_fix" /><check system="C-75918r1092314_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify that OL 9 uses reverse path filtering on all IPv4 interfaces with the following commands:
-
-$ sysctl net.ipv4.conf.all.rp_filter
-net.ipv4.conf.all.rp_filter = 1
-
+$ sudo sysctl --system</fixtext><fix id="F-75825r1092315_fix" /><check system="C-75918r1172844_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify OL 9 uses reverse path filtering on all IPv4 interfaces with the following commands:
+
+$ sysctl net.ipv4.conf.all.rp_filter
+net.ipv4.conf.all.rp_filter = 1
+
 If the returned line does not have a value of "1", or a line is not returned, this is a finding.</check-content></check></Rule></Group><Group id="V-271869"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271869r1092319_rule" weight="10.0" severity="medium"><version>OL09-00-006025</version><title>OL 9 must prevent IPv4 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</title><description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
 
 This feature of the IPv4 protocol has few legitimate uses. It must be disabled unless absolutely required.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-75826r1092318_fix">Configure OL 9 to prevent IPv4 ICMP redirect messages from being accepted.
@@ -6429,7 +6413,7 @@ Check the value of the accept source route variable with the following command:
 $ sysctl net.ipv4.conf.default.accept_source_route
 net.ipv4.conf.default.accept_source_route = 0
 
-If the returned line does not have a value of "0", a line is not returned, or the line is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-271871"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271871r1092325_rule" weight="10.0" severity="medium"><version>OL09-00-006027</version><title>OL 9 must use a reverse-path filter for IPv4 network traffic, when possible, by default.</title><description>&lt;VulnDiscussion&gt;Enabling reverse path filtering drops packets with source addresses that should not have been able to be received on the interface on which they were received. It must not be used on systems that are routers for complicated networks but is helpful for end hosts and routers serving small networks.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-75828r1092324_fix">Configure OL 9 to use reverse path filtering on IPv4 interfaces by default.
+If the returned line does not have a value of "0", a line is not returned, or the line is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-271871"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271871r1172843_rule" weight="10.0" severity="medium"><version>OL09-00-006027</version><title>OL 9 must use a reverse-path filter for IPv4 network traffic, when possible, by default.</title><description>&lt;VulnDiscussion&gt;Enabling reverse path filtering drops packets with source addresses that should not have been able to be received on the interface on which they were received. It must not be used on systems that are routers for complicated networks but is helpful for end hosts and routers serving small networks.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-75828r1092324_fix">Configure OL 9 to use reverse path filtering on IPv4 interfaces by default.
 
 Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
@@ -6437,11 +6421,11 @@ net.ipv4.conf.default.rp_filter = 1
 
 Load settings from all system configuration files with the following command:
 
-$ sudo sysctl --system</fixtext><fix id="F-75828r1092324_fix" /><check system="C-75921r1092323_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify that OL 9 uses reverse path filtering on IPv4 interfaces with the following commands:
-
-$ sysctl net.ipv4.conf.default.rp_filter
-net.ipv4.conf.default.rp_filter = 1
-
+$ sudo sysctl --system</fixtext><fix id="F-75828r1092324_fix" /><check system="C-75921r1172842_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify OL 9 uses reverse path filtering on IPv4 interfaces with the following commands:
+
+$ sysctl net.ipv4.conf.default.rp_filter
+net.ipv4.conf.default.rp_filter = 1
+
 If the returned line does not have a value of "1", or a line is not returned, this is a finding.</check-content></check></Rule></Group><Group id="V-271872"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-271872r1092328_rule" weight="10.0" severity="medium"><version>OL09-00-006028</version><title>OL 9 must not enable IPv4 packet forwarding unless the system is a router.</title><description>&lt;VulnDiscussion&gt;Routing protocol daemons are typically used on routers to exchange network topology information with other routers. If this capability is used when not required, system network information may be unnecessarily transmitted across the network.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-75829r1092327_fix">Configure OL 9 to not allow IPv4 packet forwarding unless the system is a router.
 
 Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
@@ -6746,4 +6730,16 @@ $ sudo auditctl -l | grep /etc/cron.d
 $ sudo auditctl -l | grep /var/spool/cron
 -w /var/spool/cron -p wa -k cronjobs
 
-If either of these commands do not return the expected output, or the lines are commented out, this is a finding.</check-content></check></Rule></Group></Benchmark>
\ No newline at end of file
+If either of these commands do not return the expected output, or the lines are commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-279935"><title>SRG-OS-000163-GPOS-00072</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-279935r1156358_rule" weight="10.0" severity="medium"><version>OL09-00-002376</version><title>OL 9 must terminate idle user sessions.</title><description>&lt;VulnDiscussion&gt;Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a management session enabled on the console or console port that has been left unattended.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Oracle Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Oracle Linux 9</dc:subject><dc:identifier>5680</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001134</ident><fixtext fixref="F-84400r1156357_fix">Configure OL 9 to log out idle sessions by editing the /etc/systemd/logind.conf file with the following line:
+
+StopIdleSessionSec=600
+
+The "logind" service must be restarted for the changes to take effect. To restart the "logind" service, run the following command:
+
+$ sudo systemctl restart systemd-logind</fixtext><fix id="F-84400r1156357_fix" /><check system="C-84495r1156356_chk"><check-content-ref href="Oracle_Linux_9_STIG.xml" name="M" /><check-content>Verify that OL 9 logs out sessions that are idle for 10 minutes with the following command:
+
+$ sudo grep -i ^StopIdleSessionSec /etc/systemd/logind.conf
+
+StopIdleSessionSec=600
+
+If "StopIdleSessionSec" is not configured to "600" seconds, this is a finding.</check-content></check></Rule></Group></Benchmark>
\ No newline at end of file
diff --git a/shared/references/disa-stig-rhel8-v2r5-xccdf-manual.xml b/shared/references/disa-stig-rhel8-v2r6-xccdf-manual.xml
similarity index 85%
rename from shared/references/disa-stig-rhel8-v2r5-xccdf-manual.xml
rename to shared/references/disa-stig-rhel8-v2r6-xccdf-manual.xml
index 18f982203062..a12c07ca4b8a 100644
--- a/shared/references/disa-stig-rhel8-v2r5-xccdf-manual.xml
+++ b/shared/references/disa-stig-rhel8-v2r6-xccdf-manual.xml
@@ -1,4 +1,4 @@
-<?xml version="1.0" encoding="utf-8"?><?xml-stylesheet type='text/xsl' href='STIG_unclass.xsl'?><Benchmark xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.1 http://nvd.nist.gov/schema/xccdf-1.1.4.xsd http://cpe.mitre.org/dictionary/2.0 http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd" id="RHEL_8_STIG" xml:lang="en" xmlns="http://checklists.nist.gov/xccdf/1.1"><status date="2025-08-19">accepted</status><title>Red Hat Enterprise Linux 8 Security Technical Implementation Guide</title><description>This Security Technical Implementation Guide is published as a tool to improve the security of Department of Defense (DOD) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.</description><notice id="terms-of-use" xml:lang="en"></notice><front-matter xml:lang="en"></front-matter><rear-matter xml:lang="en"></rear-matter><reference href="https://cyber.mil"><dc:publisher>DISA</dc:publisher><dc:source>STIG.DOD.MIL</dc:source></reference><plain-text id="release-info">Release: 5 Benchmark Date: 01 Oct 2025</plain-text><plain-text id="generator">3.5.1</plain-text><plain-text id="conventionsVersion">1.10.0</plain-text><version>2</version><Profile id="MAC-1_Classified"><title>I - Mission Critical Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-230221" selected="true" /><select idref="V-230222" selected="true" /><select idref="V-230223" selected="true" /><select idref="V-230224" selected="true" /><select idref="V-230225" selected="true" /><select idref="V-230226" selected="true" /><select idref="V-230227" selected="true" /><select idref="V-230228" selected="true" /><select idref="V-230229" selected="true" /><select idref="V-230230" selected="true" /><select idref="V-230231" selected="true" /><select idref="V-230232" selected="true" /><select idref="V-230233" selected="true" /><select idref="V-230234" selected="true" /><select idref="V-230235" selected="true" /><select idref="V-230236" selected="true" /><select idref="V-230237" selected="true" /><select idref="V-230238" selected="true" /><select idref="V-230239" selected="true" /><select idref="V-230240" selected="true" /><select idref="V-230241" selected="true" /><select idref="V-230243" selected="true" /><select idref="V-230244" selected="true" /><select idref="V-230245" selected="true" /><select idref="V-230246" selected="true" /><select idref="V-230247" selected="true" /><select idref="V-230248" selected="true" /><select idref="V-230249" selected="true" /><select idref="V-230250" selected="true" /><select idref="V-230251" selected="true" /><select idref="V-230252" selected="true" /><select idref="V-230253" selected="true" /><select idref="V-230254" selected="true" /><select idref="V-230255" selected="true" /><select idref="V-230256" selected="true" /><select idref="V-230257" selected="true" /><select idref="V-230258" selected="true" /><select idref="V-230259" selected="true" /><select idref="V-230260" selected="true" /><select idref="V-230261" selected="true" /><select idref="V-230262" selected="true" /><select idref="V-230263" selected="true" /><select idref="V-230264" selected="true" /><select idref="V-230265" selected="true" /><select idref="V-230266" selected="true" /><select idref="V-230267" selected="true" /><select idref="V-230268" selected="true" /><select idref="V-230269" selected="true" /><select idref="V-230270" selected="true" /><select idref="V-230271" selected="true" /><select idref="V-230272" selected="true" /><select idref="V-230273" selected="true" /><select idref="V-230274" selected="true" /><select idref="V-230275" selected="true" /><select idref="V-230276" selected="true" /><select idref="V-230277" selected="true" /><select idref="V-230278" selected="true" /><select idref="V-230279" selected="true" /><select idref="V-230280" selected="true" /><select idref="V-230281" selected="true" /><select idref="V-230282" selected="true" /><select idref="V-230283" selected="true" /><select idref="V-230284" selected="true" /><select idref="V-230285" selected="true" /><select idref="V-230286" selected="true" /><select idref="V-230287" selected="true" /><select idref="V-230288" selected="true" /><select idref="V-230290" selected="true" /><select idref="V-230291" selected="true" /><select idref="V-230292" selected="true" /><select idref="V-230293" selected="true" /><select idref="V-230294" selected="true" /><select idref="V-230295" selected="true" /><select idref="V-230296" selected="true" /><select idref="V-230298" selected="true" /><select idref="V-230299" selected="true" /><select idref="V-230300" selected="true" /><select idref="V-230301" selected="true" /><select idref="V-230302" selected="true" /><select idref="V-230303" selected="true" /><select idref="V-230304" selected="true" /><select idref="V-230305" selected="true" /><select idref="V-230306" selected="true" /><select idref="V-230307" selected="true" /><select idref="V-230308" selected="true" /><select idref="V-230309" selected="true" /><select idref="V-230310" selected="true" /><select idref="V-230311" selected="true" /><select idref="V-230312" selected="true" /><select idref="V-230313" selected="true" /><select idref="V-230314" selected="true" /><select idref="V-230315" selected="true" /><select idref="V-230316" selected="true" /><select idref="V-230317" selected="true" /><select idref="V-230318" selected="true" /><select idref="V-230319" selected="true" /><select idref="V-230320" selected="true" /><select idref="V-230321" selected="true" /><select idref="V-230322" selected="true" /><select idref="V-230323" selected="true" /><select idref="V-230324" selected="true" /><select idref="V-230325" selected="true" /><select idref="V-230326" selected="true" /><select idref="V-230327" selected="true" /><select idref="V-230328" selected="true" /><select idref="V-230329" selected="true" /><select idref="V-230330" selected="true" /><select idref="V-230332" selected="true" /><select idref="V-230333" selected="true" /><select idref="V-230334" selected="true" /><select idref="V-230335" selected="true" /><select idref="V-230336" selected="true" /><select idref="V-230337" selected="true" /><select idref="V-230338" selected="true" /><select idref="V-230339" selected="true" /><select idref="V-230340" selected="true" /><select idref="V-230341" selected="true" /><select idref="V-230342" selected="true" /><select idref="V-230343" selected="true" /><select idref="V-230344" selected="true" /><select idref="V-230345" selected="true" /><select idref="V-230346" selected="true" /><select idref="V-230347" selected="true" /><select idref="V-230351" selected="true" /><select idref="V-230352" selected="true" /><select idref="V-230354" selected="true" /><select idref="V-230355" selected="true" /><select idref="V-230356" selected="true" /><select idref="V-230357" selected="true" /><select idref="V-230358" selected="true" /><select idref="V-230359" selected="true" /><select idref="V-230360" selected="true" /><select idref="V-230361" selected="true" /><select idref="V-230362" selected="true" /><select idref="V-230363" selected="true" /><select idref="V-230364" selected="true" /><select idref="V-230365" selected="true" /><select idref="V-230366" selected="true" /><select idref="V-230367" selected="true" /><select idref="V-230369" selected="true" /><select idref="V-230370" selected="true" /><select idref="V-230371" selected="true" /><select idref="V-230372" selected="true" /><select idref="V-230373" selected="true" /><select idref="V-230374" selected="true" /><select idref="V-230375" selected="true" /><select idref="V-230376" selected="true" /><select idref="V-230377" selected="true" /><select idref="V-230378" selected="true" /><select idref="V-230379" selected="true" /><select idref="V-230380" selected="true" /><select idref="V-230381" selected="true" /><select idref="V-230382" selected="true" /><select idref="V-230383" selected="true" /><select idref="V-230384" selected="true" /><select idref="V-230385" selected="true" /><select idref="V-230386" selected="true" /><select idref="V-230387" selected="true" /><select idref="V-230388" selected="true" /><select idref="V-230389" selected="true" /><select idref="V-230390" selected="true" /><select idref="V-230392" selected="true" /><select idref="V-230393" selected="true" /><select idref="V-230394" selected="true" /><select idref="V-230395" selected="true" /><select idref="V-230396" selected="true" /><select idref="V-230397" selected="true" /><select idref="V-230398" selected="true" /><select idref="V-230399" selected="true" /><select idref="V-230400" selected="true" /><select idref="V-230401" selected="true" /><select idref="V-230402" selected="true" /><select idref="V-230403" selected="true" /><select idref="V-230404" selected="true" /><select idref="V-230405" selected="true" /><select idref="V-230406" selected="true" /><select idref="V-230407" selected="true" /><select idref="V-230408" selected="true" /><select idref="V-230409" selected="true" /><select idref="V-230410" selected="true" /><select idref="V-230411" selected="true" /><select idref="V-230412" selected="true" /><select idref="V-230413" selected="true" /><select idref="V-230418" selected="true" /><select idref="V-230419" selected="true" /><select idref="V-230421" selected="true" /><select idref="V-230422" selected="true" /><select idref="V-230423" selected="true" /><select idref="V-230424" selected="true" /><select idref="V-230425" selected="true" /><select idref="V-230426" selected="true" /><select idref="V-230427" selected="true" /><select idref="V-230428" selected="true" /><select idref="V-230429" selected="true" /><select idref="V-230430" selected="true" /><select idref="V-230431" selected="true" /><select idref="V-230432" selected="true" /><select idref="V-230433" selected="true" /><select idref="V-230434" selected="true" /><select idref="V-230435" selected="true" /><select idref="V-230436" selected="true" /><select idref="V-230437" selected="true" /><select idref="V-230438" selected="true" /><select idref="V-230439" selected="true" /><select idref="V-230444" selected="true" /><select idref="V-230446" selected="true" /><select idref="V-230447" selected="true" /><select idref="V-230448" selected="true" /><select idref="V-230449" selected="true" /><select idref="V-230455" selected="true" /><select idref="V-230456" selected="true" /><select idref="V-230462" selected="true" /><select idref="V-230463" selected="true" /><select idref="V-230464" selected="true" /><select idref="V-230465" selected="true" /><select idref="V-230466" selected="true" /><select idref="V-230467" selected="true" /><select idref="V-230468" selected="true" /><select idref="V-230469" selected="true" /><select idref="V-230470" selected="true" /><select idref="V-230471" selected="true" /><select idref="V-230472" selected="true" /><select idref="V-230473" selected="true" /><select idref="V-230474" selected="true" /><select idref="V-230475" selected="true" /><select idref="V-230476" selected="true" /><select idref="V-230477" selected="true" /><select idref="V-230478" selected="true" /><select idref="V-230479" selected="true" /><select idref="V-230480" selected="true" /><select idref="V-230481" selected="true" /><select idref="V-230482" selected="true" /><select idref="V-230483" selected="true" /><select idref="V-230484" selected="true" /><select idref="V-230485" selected="true" /><select idref="V-230486" selected="true" /><select idref="V-230487" selected="true" /><select idref="V-230488" selected="true" /><select idref="V-230489" selected="true" /><select idref="V-230491" selected="true" /><select idref="V-230492" selected="true" /><select idref="V-230493" selected="true" /><select idref="V-230494" selected="true" /><select idref="V-230495" selected="true" /><select idref="V-230496" selected="true" /><select idref="V-230497" selected="true" /><select idref="V-230498" selected="true" /><select idref="V-230499" selected="true" /><select idref="V-230500" selected="true" /><select idref="V-230502" selected="true" /><select idref="V-230503" selected="true" /><select idref="V-230504" selected="true" /><select idref="V-230505" selected="true" /><select idref="V-230506" selected="true" /><select idref="V-230507" selected="true" /><select idref="V-230508" selected="true" /><select idref="V-230509" selected="true" /><select idref="V-230510" selected="true" /><select idref="V-230511" selected="true" /><select idref="V-230512" selected="true" /><select idref="V-230513" selected="true" /><select idref="V-230514" selected="true" /><select idref="V-230515" selected="true" /><select idref="V-230516" selected="true" /><select idref="V-230517" selected="true" /><select idref="V-230518" selected="true" /><select idref="V-230519" selected="true" /><select idref="V-230520" selected="true" /><select idref="V-230521" selected="true" /><select idref="V-230522" selected="true" /><select idref="V-230523" selected="true" /><select idref="V-230524" selected="true" /><select idref="V-230525" selected="true" /><select idref="V-230526" selected="true" /><select idref="V-230527" selected="true" /><select idref="V-230529" selected="true" /><select idref="V-230530" selected="true" /><select idref="V-230531" selected="true" /><select idref="V-230532" selected="true" /><select idref="V-230533" selected="true" /><select idref="V-230534" selected="true" /><select idref="V-230535" selected="true" /><select idref="V-230536" selected="true" /><select idref="V-230537" selected="true" /><select idref="V-230538" selected="true" /><select idref="V-230539" selected="true" /><select idref="V-230540" selected="true" /><select idref="V-230541" selected="true" /><select idref="V-230542" selected="true" /><select idref="V-230543" selected="true" /><select idref="V-230544" selected="true" /><select idref="V-230545" selected="true" /><select idref="V-230546" selected="true" /><select idref="V-230547" selected="true" /><select idref="V-230548" selected="true" /><select idref="V-230549" selected="true" /><select idref="V-230550" selected="true" /><select idref="V-230551" selected="true" /><select idref="V-230552" selected="true" /><select idref="V-230553" selected="true" /><select idref="V-230554" selected="true" /><select idref="V-230555" selected="true" /><select idref="V-230556" selected="true" /><select idref="V-230557" selected="true" /><select idref="V-230558" selected="true" /><select idref="V-230559" selected="true" /><select idref="V-230560" selected="true" /><select idref="V-230561" selected="true" /><select idref="V-237640" selected="true" /><select idref="V-237641" selected="true" /><select idref="V-237642" selected="true" /><select idref="V-237643" selected="true" /><select idref="V-244519" selected="true" /><select idref="V-244521" selected="true" /><select idref="V-244522" selected="true" /><select idref="V-244523" selected="true" /><select idref="V-244524" selected="true" /><select idref="V-244525" selected="true" /><select idref="V-244526" selected="true" /><select idref="V-244527" selected="true" /><select idref="V-244528" selected="true" /><select idref="V-244529" selected="true" /><select idref="V-244530" selected="true" /><select idref="V-244531" selected="true" /><select idref="V-244532" selected="true" /><select idref="V-244533" selected="true" /><select idref="V-244534" selected="true" /><select idref="V-244535" selected="true" /><select idref="V-244536" selected="true" /><select idref="V-244538" selected="true" /><select idref="V-244539" selected="true" /><select idref="V-244541" selected="true" /><select idref="V-244542" selected="true" /><select idref="V-244543" selected="true" /><select idref="V-244544" selected="true" /><select idref="V-244545" selected="true" /><select idref="V-244546" selected="true" /><select idref="V-244547" selected="true" /><select idref="V-244548" selected="true" /><select idref="V-244549" selected="true" /><select idref="V-244550" selected="true" /><select idref="V-244551" selected="true" /><select idref="V-244552" selected="true" /><select idref="V-244553" selected="true" /><select idref="V-244554" selected="true" /><select idref="V-250315" selected="true" /><select idref="V-250316" selected="true" /><select idref="V-250317" selected="true" /><select idref="V-251706" selected="true" /><select idref="V-251707" selected="true" /><select idref="V-251708" selected="true" /><select idref="V-251709" selected="true" /><select idref="V-251710" selected="true" /><select idref="V-251711" selected="true" /><select idref="V-251712" selected="true" /><select idref="V-251713" selected="true" /><select idref="V-251716" selected="true" /><select idref="V-251718" selected="true" /><select idref="V-254520" selected="true" /><select idref="V-255924" selected="true" /><select idref="V-256973" selected="true" /><select idref="V-256974" selected="true" /><select idref="V-257258" selected="true" /><select idref="V-268322" selected="true" /><select idref="V-272482" selected="true" /><select idref="V-272483" selected="true" /><select idref="V-272484" selected="true" /><select idref="V-274877" selected="true" /></Profile><Profile id="MAC-1_Public"><title>I - Mission Critical Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-230221" selected="true" /><select idref="V-230222" selected="true" /><select idref="V-230223" selected="true" /><select idref="V-230224" selected="true" /><select idref="V-230225" selected="true" /><select idref="V-230226" selected="true" /><select idref="V-230227" selected="true" /><select idref="V-230228" selected="true" /><select idref="V-230229" selected="true" /><select idref="V-230230" selected="true" /><select idref="V-230231" selected="true" /><select idref="V-230232" selected="true" /><select idref="V-230233" selected="true" /><select idref="V-230234" selected="true" /><select idref="V-230235" selected="true" /><select idref="V-230236" selected="true" /><select idref="V-230237" selected="true" /><select idref="V-230238" selected="true" /><select idref="V-230239" selected="true" /><select idref="V-230240" selected="true" /><select idref="V-230241" selected="true" /><select idref="V-230243" selected="true" /><select idref="V-230244" selected="true" /><select idref="V-230245" selected="true" /><select idref="V-230246" selected="true" /><select idref="V-230247" selected="true" /><select idref="V-230248" selected="true" /><select idref="V-230249" selected="true" /><select idref="V-230250" selected="true" /><select idref="V-230251" selected="true" /><select idref="V-230252" selected="true" /><select idref="V-230253" selected="true" /><select idref="V-230254" selected="true" /><select idref="V-230255" selected="true" /><select idref="V-230256" selected="true" /><select idref="V-230257" selected="true" /><select idref="V-230258" selected="true" /><select idref="V-230259" selected="true" /><select idref="V-230260" selected="true" /><select idref="V-230261" selected="true" /><select idref="V-230262" selected="true" /><select idref="V-230263" selected="true" /><select idref="V-230264" selected="true" /><select idref="V-230265" selected="true" /><select idref="V-230266" selected="true" /><select idref="V-230267" selected="true" /><select idref="V-230268" selected="true" /><select idref="V-230269" selected="true" /><select idref="V-230270" selected="true" /><select idref="V-230271" selected="true" /><select idref="V-230272" selected="true" /><select idref="V-230273" selected="true" /><select idref="V-230274" selected="true" /><select idref="V-230275" selected="true" /><select idref="V-230276" selected="true" /><select idref="V-230277" selected="true" /><select idref="V-230278" selected="true" /><select idref="V-230279" selected="true" /><select idref="V-230280" selected="true" /><select idref="V-230281" selected="true" /><select idref="V-230282" selected="true" /><select idref="V-230283" selected="true" /><select idref="V-230284" selected="true" /><select idref="V-230285" selected="true" /><select idref="V-230286" selected="true" /><select idref="V-230287" selected="true" /><select idref="V-230288" selected="true" /><select idref="V-230290" selected="true" /><select idref="V-230291" selected="true" /><select idref="V-230292" selected="true" /><select idref="V-230293" selected="true" /><select idref="V-230294" selected="true" /><select idref="V-230295" selected="true" /><select idref="V-230296" selected="true" /><select idref="V-230298" selected="true" /><select idref="V-230299" selected="true" /><select idref="V-230300" selected="true" /><select idref="V-230301" selected="true" /><select idref="V-230302" selected="true" /><select idref="V-230303" selected="true" /><select idref="V-230304" selected="true" /><select idref="V-230305" selected="true" /><select idref="V-230306" selected="true" /><select idref="V-230307" selected="true" /><select idref="V-230308" selected="true" /><select idref="V-230309" selected="true" /><select idref="V-230310" selected="true" /><select idref="V-230311" selected="true" /><select idref="V-230312" selected="true" /><select idref="V-230313" selected="true" /><select idref="V-230314" selected="true" /><select idref="V-230315" selected="true" /><select idref="V-230316" selected="true" /><select idref="V-230317" selected="true" /><select idref="V-230318" selected="true" /><select idref="V-230319" selected="true" /><select idref="V-230320" selected="true" /><select idref="V-230321" selected="true" /><select idref="V-230322" selected="true" /><select idref="V-230323" selected="true" /><select idref="V-230324" selected="true" /><select idref="V-230325" selected="true" /><select idref="V-230326" selected="true" /><select idref="V-230327" selected="true" /><select idref="V-230328" selected="true" /><select idref="V-230329" selected="true" /><select idref="V-230330" selected="true" /><select idref="V-230332" selected="true" /><select idref="V-230333" selected="true" /><select idref="V-230334" selected="true" /><select idref="V-230335" selected="true" /><select idref="V-230336" selected="true" /><select idref="V-230337" selected="true" /><select idref="V-230338" selected="true" /><select idref="V-230339" selected="true" /><select idref="V-230340" selected="true" /><select idref="V-230341" selected="true" /><select idref="V-230342" selected="true" /><select idref="V-230343" selected="true" /><select idref="V-230344" selected="true" /><select idref="V-230345" selected="true" /><select idref="V-230346" selected="true" /><select idref="V-230347" selected="true" /><select idref="V-230351" selected="true" /><select idref="V-230352" selected="true" /><select idref="V-230354" selected="true" /><select idref="V-230355" selected="true" /><select idref="V-230356" selected="true" /><select idref="V-230357" selected="true" /><select idref="V-230358" selected="true" /><select idref="V-230359" selected="true" /><select idref="V-230360" selected="true" /><select idref="V-230361" selected="true" /><select idref="V-230362" selected="true" /><select idref="V-230363" selected="true" /><select idref="V-230364" selected="true" /><select idref="V-230365" selected="true" /><select idref="V-230366" selected="true" /><select idref="V-230367" selected="true" /><select idref="V-230369" selected="true" /><select idref="V-230370" selected="true" /><select idref="V-230371" selected="true" /><select idref="V-230372" selected="true" /><select idref="V-230373" selected="true" /><select idref="V-230374" selected="true" /><select idref="V-230375" selected="true" /><select idref="V-230376" selected="true" /><select idref="V-230377" selected="true" /><select idref="V-230378" selected="true" /><select idref="V-230379" selected="true" /><select idref="V-230380" selected="true" /><select idref="V-230381" selected="true" /><select idref="V-230382" selected="true" /><select idref="V-230383" selected="true" /><select idref="V-230384" selected="true" /><select idref="V-230385" selected="true" /><select idref="V-230386" selected="true" /><select idref="V-230387" selected="true" /><select idref="V-230388" selected="true" /><select idref="V-230389" selected="true" /><select idref="V-230390" selected="true" /><select idref="V-230392" selected="true" /><select idref="V-230393" selected="true" /><select idref="V-230394" selected="true" /><select idref="V-230395" selected="true" /><select idref="V-230396" selected="true" /><select idref="V-230397" selected="true" /><select idref="V-230398" selected="true" /><select idref="V-230399" selected="true" /><select idref="V-230400" selected="true" /><select idref="V-230401" selected="true" /><select idref="V-230402" selected="true" /><select idref="V-230403" selected="true" /><select idref="V-230404" selected="true" /><select idref="V-230405" selected="true" /><select idref="V-230406" selected="true" /><select idref="V-230407" selected="true" /><select idref="V-230408" selected="true" /><select idref="V-230409" selected="true" /><select idref="V-230410" selected="true" /><select idref="V-230411" selected="true" /><select idref="V-230412" selected="true" /><select idref="V-230413" selected="true" /><select idref="V-230418" selected="true" /><select idref="V-230419" selected="true" /><select idref="V-230421" selected="true" /><select idref="V-230422" selected="true" /><select idref="V-230423" selected="true" /><select idref="V-230424" selected="true" /><select idref="V-230425" selected="true" /><select idref="V-230426" selected="true" /><select idref="V-230427" selected="true" /><select idref="V-230428" selected="true" /><select idref="V-230429" selected="true" /><select idref="V-230430" selected="true" /><select idref="V-230431" selected="true" /><select idref="V-230432" selected="true" /><select idref="V-230433" selected="true" /><select idref="V-230434" selected="true" /><select idref="V-230435" selected="true" /><select idref="V-230436" selected="true" /><select idref="V-230437" selected="true" /><select idref="V-230438" selected="true" /><select idref="V-230439" selected="true" /><select idref="V-230444" selected="true" /><select idref="V-230446" selected="true" /><select idref="V-230447" selected="true" /><select idref="V-230448" selected="true" /><select idref="V-230449" selected="true" /><select idref="V-230455" selected="true" /><select idref="V-230456" selected="true" /><select idref="V-230462" selected="true" /><select idref="V-230463" selected="true" /><select idref="V-230464" selected="true" /><select idref="V-230465" selected="true" /><select idref="V-230466" selected="true" /><select idref="V-230467" selected="true" /><select idref="V-230468" selected="true" /><select idref="V-230469" selected="true" /><select idref="V-230470" selected="true" /><select idref="V-230471" selected="true" /><select idref="V-230472" selected="true" /><select idref="V-230473" selected="true" /><select idref="V-230474" selected="true" /><select idref="V-230475" selected="true" /><select idref="V-230476" selected="true" /><select idref="V-230477" selected="true" /><select idref="V-230478" selected="true" /><select idref="V-230479" selected="true" /><select idref="V-230480" selected="true" /><select idref="V-230481" selected="true" /><select idref="V-230482" selected="true" /><select idref="V-230483" selected="true" /><select idref="V-230484" selected="true" /><select idref="V-230485" selected="true" /><select idref="V-230486" selected="true" /><select idref="V-230487" selected="true" /><select idref="V-230488" selected="true" /><select idref="V-230489" selected="true" /><select idref="V-230491" selected="true" /><select idref="V-230492" selected="true" /><select idref="V-230493" selected="true" /><select idref="V-230494" selected="true" /><select idref="V-230495" selected="true" /><select idref="V-230496" selected="true" /><select idref="V-230497" selected="true" /><select idref="V-230498" selected="true" /><select idref="V-230499" selected="true" /><select idref="V-230500" selected="true" /><select idref="V-230502" selected="true" /><select idref="V-230503" selected="true" /><select idref="V-230504" selected="true" /><select idref="V-230505" selected="true" /><select idref="V-230506" selected="true" /><select idref="V-230507" selected="true" /><select idref="V-230508" selected="true" /><select idref="V-230509" selected="true" /><select idref="V-230510" selected="true" /><select idref="V-230511" selected="true" /><select idref="V-230512" selected="true" /><select idref="V-230513" selected="true" /><select idref="V-230514" selected="true" /><select idref="V-230515" selected="true" /><select idref="V-230516" selected="true" /><select idref="V-230517" selected="true" /><select idref="V-230518" selected="true" /><select idref="V-230519" selected="true" /><select idref="V-230520" selected="true" /><select idref="V-230521" selected="true" /><select idref="V-230522" selected="true" /><select idref="V-230523" selected="true" /><select idref="V-230524" selected="true" /><select idref="V-230525" selected="true" /><select idref="V-230526" selected="true" /><select idref="V-230527" selected="true" /><select idref="V-230529" selected="true" /><select idref="V-230530" selected="true" /><select idref="V-230531" selected="true" /><select idref="V-230532" selected="true" /><select idref="V-230533" selected="true" /><select idref="V-230534" selected="true" /><select idref="V-230535" selected="true" /><select idref="V-230536" selected="true" /><select idref="V-230537" selected="true" /><select idref="V-230538" selected="true" /><select idref="V-230539" selected="true" /><select idref="V-230540" selected="true" /><select idref="V-230541" selected="true" /><select idref="V-230542" selected="true" /><select idref="V-230543" selected="true" /><select idref="V-230544" selected="true" /><select idref="V-230545" selected="true" /><select idref="V-230546" selected="true" /><select idref="V-230547" selected="true" /><select idref="V-230548" selected="true" /><select idref="V-230549" selected="true" /><select idref="V-230550" selected="true" /><select idref="V-230551" selected="true" /><select idref="V-230552" selected="true" /><select idref="V-230553" selected="true" /><select idref="V-230554" selected="true" /><select idref="V-230555" selected="true" /><select idref="V-230556" selected="true" /><select idref="V-230557" selected="true" /><select idref="V-230558" selected="true" /><select idref="V-230559" selected="true" /><select idref="V-230560" selected="true" /><select idref="V-230561" selected="true" /><select idref="V-237640" selected="true" /><select idref="V-237641" selected="true" /><select idref="V-237642" selected="true" /><select idref="V-237643" selected="true" /><select idref="V-244519" selected="true" /><select idref="V-244521" selected="true" /><select idref="V-244522" selected="true" /><select idref="V-244523" selected="true" /><select idref="V-244524" selected="true" /><select idref="V-244525" selected="true" /><select idref="V-244526" selected="true" /><select idref="V-244527" selected="true" /><select idref="V-244528" selected="true" /><select idref="V-244529" selected="true" /><select idref="V-244530" selected="true" /><select idref="V-244531" selected="true" /><select idref="V-244532" selected="true" /><select idref="V-244533" selected="true" /><select idref="V-244534" selected="true" /><select idref="V-244535" selected="true" /><select idref="V-244536" selected="true" /><select idref="V-244538" selected="true" /><select idref="V-244539" selected="true" /><select idref="V-244541" selected="true" /><select idref="V-244542" selected="true" /><select idref="V-244543" selected="true" /><select idref="V-244544" selected="true" /><select idref="V-244545" selected="true" /><select idref="V-244546" selected="true" /><select idref="V-244547" selected="true" /><select idref="V-244548" selected="true" /><select idref="V-244549" selected="true" /><select idref="V-244550" selected="true" /><select idref="V-244551" selected="true" /><select idref="V-244552" selected="true" /><select idref="V-244553" selected="true" /><select idref="V-244554" selected="true" /><select idref="V-250315" selected="true" /><select idref="V-250316" selected="true" /><select idref="V-250317" selected="true" /><select idref="V-251706" selected="true" /><select idref="V-251707" selected="true" /><select idref="V-251708" selected="true" /><select idref="V-251709" selected="true" /><select idref="V-251710" selected="true" /><select idref="V-251711" selected="true" /><select idref="V-251712" selected="true" /><select idref="V-251713" selected="true" /><select idref="V-251716" selected="true" /><select idref="V-251718" selected="true" /><select idref="V-254520" selected="true" /><select idref="V-255924" selected="true" /><select idref="V-256973" selected="true" /><select idref="V-256974" selected="true" /><select idref="V-257258" selected="true" /><select idref="V-268322" selected="true" /><select idref="V-272482" selected="true" /><select idref="V-272483" selected="true" /><select idref="V-272484" selected="true" /><select idref="V-274877" selected="true" /></Profile><Profile id="MAC-1_Sensitive"><title>I - Mission Critical Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-230221" selected="true" /><select idref="V-230222" selected="true" /><select idref="V-230223" selected="true" /><select idref="V-230224" selected="true" /><select idref="V-230225" selected="true" /><select idref="V-230226" selected="true" /><select idref="V-230227" selected="true" /><select idref="V-230228" selected="true" /><select idref="V-230229" selected="true" /><select idref="V-230230" selected="true" /><select idref="V-230231" selected="true" /><select idref="V-230232" selected="true" /><select idref="V-230233" selected="true" /><select idref="V-230234" selected="true" /><select idref="V-230235" selected="true" /><select idref="V-230236" selected="true" /><select idref="V-230237" selected="true" /><select idref="V-230238" selected="true" /><select idref="V-230239" selected="true" /><select idref="V-230240" selected="true" /><select idref="V-230241" selected="true" /><select idref="V-230243" selected="true" /><select idref="V-230244" selected="true" /><select idref="V-230245" selected="true" /><select idref="V-230246" selected="true" /><select idref="V-230247" selected="true" /><select idref="V-230248" selected="true" /><select idref="V-230249" selected="true" /><select idref="V-230250" selected="true" /><select idref="V-230251" selected="true" /><select idref="V-230252" selected="true" /><select idref="V-230253" selected="true" /><select idref="V-230254" selected="true" /><select idref="V-230255" selected="true" /><select idref="V-230256" selected="true" /><select idref="V-230257" selected="true" /><select idref="V-230258" selected="true" /><select idref="V-230259" selected="true" /><select idref="V-230260" selected="true" /><select idref="V-230261" selected="true" /><select idref="V-230262" selected="true" /><select idref="V-230263" selected="true" /><select idref="V-230264" selected="true" /><select idref="V-230265" selected="true" /><select idref="V-230266" selected="true" /><select idref="V-230267" selected="true" /><select idref="V-230268" selected="true" /><select idref="V-230269" selected="true" /><select idref="V-230270" selected="true" /><select idref="V-230271" selected="true" /><select idref="V-230272" selected="true" /><select idref="V-230273" selected="true" /><select idref="V-230274" selected="true" /><select idref="V-230275" selected="true" /><select idref="V-230276" selected="true" /><select idref="V-230277" selected="true" /><select idref="V-230278" selected="true" /><select idref="V-230279" selected="true" /><select idref="V-230280" selected="true" /><select idref="V-230281" selected="true" /><select idref="V-230282" selected="true" /><select idref="V-230283" selected="true" /><select idref="V-230284" selected="true" /><select idref="V-230285" selected="true" /><select idref="V-230286" selected="true" /><select idref="V-230287" selected="true" /><select idref="V-230288" selected="true" /><select idref="V-230290" selected="true" /><select idref="V-230291" selected="true" /><select idref="V-230292" selected="true" /><select idref="V-230293" selected="true" /><select idref="V-230294" selected="true" /><select idref="V-230295" selected="true" /><select idref="V-230296" selected="true" /><select idref="V-230298" selected="true" /><select idref="V-230299" selected="true" /><select idref="V-230300" selected="true" /><select idref="V-230301" selected="true" /><select idref="V-230302" selected="true" /><select idref="V-230303" selected="true" /><select idref="V-230304" selected="true" /><select idref="V-230305" selected="true" /><select idref="V-230306" selected="true" /><select idref="V-230307" selected="true" /><select idref="V-230308" selected="true" /><select idref="V-230309" selected="true" /><select idref="V-230310" selected="true" /><select idref="V-230311" selected="true" /><select idref="V-230312" selected="true" /><select idref="V-230313" selected="true" /><select idref="V-230314" selected="true" /><select idref="V-230315" selected="true" /><select idref="V-230316" selected="true" /><select idref="V-230317" selected="true" /><select idref="V-230318" selected="true" /><select idref="V-230319" selected="true" /><select idref="V-230320" selected="true" /><select idref="V-230321" selected="true" /><select idref="V-230322" selected="true" /><select idref="V-230323" selected="true" /><select idref="V-230324" selected="true" /><select idref="V-230325" selected="true" /><select idref="V-230326" selected="true" /><select idref="V-230327" selected="true" /><select idref="V-230328" selected="true" /><select idref="V-230329" selected="true" /><select idref="V-230330" selected="true" /><select idref="V-230332" selected="true" /><select idref="V-230333" selected="true" /><select idref="V-230334" selected="true" /><select idref="V-230335" selected="true" /><select idref="V-230336" selected="true" /><select idref="V-230337" selected="true" /><select idref="V-230338" selected="true" /><select idref="V-230339" selected="true" /><select idref="V-230340" selected="true" /><select idref="V-230341" selected="true" /><select idref="V-230342" selected="true" /><select idref="V-230343" selected="true" /><select idref="V-230344" selected="true" /><select idref="V-230345" selected="true" /><select idref="V-230346" selected="true" /><select idref="V-230347" selected="true" /><select idref="V-230351" selected="true" /><select idref="V-230352" selected="true" /><select idref="V-230354" selected="true" /><select idref="V-230355" selected="true" /><select idref="V-230356" selected="true" /><select idref="V-230357" selected="true" /><select idref="V-230358" selected="true" /><select idref="V-230359" selected="true" /><select idref="V-230360" selected="true" /><select idref="V-230361" selected="true" /><select idref="V-230362" selected="true" /><select idref="V-230363" selected="true" /><select idref="V-230364" selected="true" /><select idref="V-230365" selected="true" /><select idref="V-230366" selected="true" /><select idref="V-230367" selected="true" /><select idref="V-230369" selected="true" /><select idref="V-230370" selected="true" /><select idref="V-230371" selected="true" /><select idref="V-230372" selected="true" /><select idref="V-230373" selected="true" /><select idref="V-230374" selected="true" /><select idref="V-230375" selected="true" /><select idref="V-230376" selected="true" /><select idref="V-230377" selected="true" /><select idref="V-230378" selected="true" /><select idref="V-230379" selected="true" /><select idref="V-230380" selected="true" /><select idref="V-230381" selected="true" /><select idref="V-230382" selected="true" /><select idref="V-230383" selected="true" /><select idref="V-230384" selected="true" /><select idref="V-230385" selected="true" /><select idref="V-230386" selected="true" /><select idref="V-230387" selected="true" /><select idref="V-230388" selected="true" /><select idref="V-230389" selected="true" /><select idref="V-230390" selected="true" /><select idref="V-230392" selected="true" /><select idref="V-230393" selected="true" /><select idref="V-230394" selected="true" /><select idref="V-230395" selected="true" /><select idref="V-230396" selected="true" /><select idref="V-230397" selected="true" /><select idref="V-230398" selected="true" /><select idref="V-230399" selected="true" /><select idref="V-230400" selected="true" /><select idref="V-230401" selected="true" /><select idref="V-230402" selected="true" /><select idref="V-230403" selected="true" /><select idref="V-230404" selected="true" /><select idref="V-230405" selected="true" /><select idref="V-230406" selected="true" /><select idref="V-230407" selected="true" /><select idref="V-230408" selected="true" /><select idref="V-230409" selected="true" /><select idref="V-230410" selected="true" /><select idref="V-230411" selected="true" /><select idref="V-230412" selected="true" /><select idref="V-230413" selected="true" /><select idref="V-230418" selected="true" /><select idref="V-230419" selected="true" /><select idref="V-230421" selected="true" /><select idref="V-230422" selected="true" /><select idref="V-230423" selected="true" /><select idref="V-230424" selected="true" /><select idref="V-230425" selected="true" /><select idref="V-230426" selected="true" /><select idref="V-230427" selected="true" /><select idref="V-230428" selected="true" /><select idref="V-230429" selected="true" /><select idref="V-230430" selected="true" /><select idref="V-230431" selected="true" /><select idref="V-230432" selected="true" /><select idref="V-230433" selected="true" /><select idref="V-230434" selected="true" /><select idref="V-230435" selected="true" /><select idref="V-230436" selected="true" /><select idref="V-230437" selected="true" /><select idref="V-230438" selected="true" /><select idref="V-230439" selected="true" /><select idref="V-230444" selected="true" /><select idref="V-230446" selected="true" /><select idref="V-230447" selected="true" /><select idref="V-230448" selected="true" /><select idref="V-230449" selected="true" /><select idref="V-230455" selected="true" /><select idref="V-230456" selected="true" /><select idref="V-230462" selected="true" /><select idref="V-230463" selected="true" /><select idref="V-230464" selected="true" /><select idref="V-230465" selected="true" /><select idref="V-230466" selected="true" /><select idref="V-230467" selected="true" /><select idref="V-230468" selected="true" /><select idref="V-230469" selected="true" /><select idref="V-230470" selected="true" /><select idref="V-230471" selected="true" /><select idref="V-230472" selected="true" /><select idref="V-230473" selected="true" /><select idref="V-230474" selected="true" /><select idref="V-230475" selected="true" /><select idref="V-230476" selected="true" /><select idref="V-230477" selected="true" /><select idref="V-230478" selected="true" /><select idref="V-230479" selected="true" /><select idref="V-230480" selected="true" /><select idref="V-230481" selected="true" /><select idref="V-230482" selected="true" /><select idref="V-230483" selected="true" /><select idref="V-230484" selected="true" /><select idref="V-230485" selected="true" /><select idref="V-230486" selected="true" /><select idref="V-230487" selected="true" /><select idref="V-230488" selected="true" /><select idref="V-230489" selected="true" /><select idref="V-230491" selected="true" /><select idref="V-230492" selected="true" /><select idref="V-230493" selected="true" /><select idref="V-230494" selected="true" /><select idref="V-230495" selected="true" /><select idref="V-230496" selected="true" /><select idref="V-230497" selected="true" /><select idref="V-230498" selected="true" /><select idref="V-230499" selected="true" /><select idref="V-230500" selected="true" /><select idref="V-230502" selected="true" /><select idref="V-230503" selected="true" /><select idref="V-230504" selected="true" /><select idref="V-230505" selected="true" /><select idref="V-230506" selected="true" /><select idref="V-230507" selected="true" /><select idref="V-230508" selected="true" /><select idref="V-230509" selected="true" /><select idref="V-230510" selected="true" /><select idref="V-230511" selected="true" /><select idref="V-230512" selected="true" /><select idref="V-230513" selected="true" /><select idref="V-230514" selected="true" /><select idref="V-230515" selected="true" /><select idref="V-230516" selected="true" /><select idref="V-230517" selected="true" /><select idref="V-230518" selected="true" /><select idref="V-230519" selected="true" /><select idref="V-230520" selected="true" /><select idref="V-230521" selected="true" /><select idref="V-230522" selected="true" /><select idref="V-230523" selected="true" /><select idref="V-230524" selected="true" /><select idref="V-230525" selected="true" /><select idref="V-230526" selected="true" /><select idref="V-230527" selected="true" /><select idref="V-230529" selected="true" /><select idref="V-230530" selected="true" /><select idref="V-230531" selected="true" /><select idref="V-230532" selected="true" /><select idref="V-230533" selected="true" /><select idref="V-230534" selected="true" /><select idref="V-230535" selected="true" /><select idref="V-230536" selected="true" /><select idref="V-230537" selected="true" /><select idref="V-230538" selected="true" /><select idref="V-230539" selected="true" /><select idref="V-230540" selected="true" /><select idref="V-230541" selected="true" /><select idref="V-230542" selected="true" /><select idref="V-230543" selected="true" /><select idref="V-230544" selected="true" /><select idref="V-230545" selected="true" /><select idref="V-230546" selected="true" /><select idref="V-230547" selected="true" /><select idref="V-230548" selected="true" /><select idref="V-230549" selected="true" /><select idref="V-230550" selected="true" /><select idref="V-230551" selected="true" /><select idref="V-230552" selected="true" /><select idref="V-230553" selected="true" /><select idref="V-230554" selected="true" /><select idref="V-230555" selected="true" /><select idref="V-230556" selected="true" /><select idref="V-230557" selected="true" /><select idref="V-230558" selected="true" /><select idref="V-230559" selected="true" /><select idref="V-230560" selected="true" /><select idref="V-230561" selected="true" /><select idref="V-237640" selected="true" /><select idref="V-237641" selected="true" /><select idref="V-237642" selected="true" /><select idref="V-237643" selected="true" /><select idref="V-244519" selected="true" /><select idref="V-244521" selected="true" /><select idref="V-244522" selected="true" /><select idref="V-244523" selected="true" /><select idref="V-244524" selected="true" /><select idref="V-244525" selected="true" /><select idref="V-244526" selected="true" /><select idref="V-244527" selected="true" /><select idref="V-244528" selected="true" /><select idref="V-244529" selected="true" /><select idref="V-244530" selected="true" /><select idref="V-244531" selected="true" /><select idref="V-244532" selected="true" /><select idref="V-244533" selected="true" /><select idref="V-244534" selected="true" /><select idref="V-244535" selected="true" /><select idref="V-244536" selected="true" /><select idref="V-244538" selected="true" /><select idref="V-244539" selected="true" /><select idref="V-244541" selected="true" /><select idref="V-244542" selected="true" /><select idref="V-244543" selected="true" /><select idref="V-244544" selected="true" /><select idref="V-244545" selected="true" /><select idref="V-244546" selected="true" /><select idref="V-244547" selected="true" /><select idref="V-244548" selected="true" /><select idref="V-244549" selected="true" /><select idref="V-244550" selected="true" /><select idref="V-244551" selected="true" /><select idref="V-244552" selected="true" /><select idref="V-244553" selected="true" /><select idref="V-244554" selected="true" /><select idref="V-250315" selected="true" /><select idref="V-250316" selected="true" /><select idref="V-250317" selected="true" /><select idref="V-251706" selected="true" /><select idref="V-251707" selected="true" /><select idref="V-251708" selected="true" /><select idref="V-251709" selected="true" /><select idref="V-251710" selected="true" /><select idref="V-251711" selected="true" /><select idref="V-251712" selected="true" /><select idref="V-251713" selected="true" /><select idref="V-251716" selected="true" /><select idref="V-251718" selected="true" /><select idref="V-254520" selected="true" /><select idref="V-255924" selected="true" /><select idref="V-256973" selected="true" /><select idref="V-256974" selected="true" /><select idref="V-257258" selected="true" /><select idref="V-268322" selected="true" /><select idref="V-272482" selected="true" /><select idref="V-272483" selected="true" /><select idref="V-272484" selected="true" /><select idref="V-274877" selected="true" /></Profile><Profile id="MAC-2_Classified"><title>II - Mission Support Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-230221" selected="true" /><select idref="V-230222" selected="true" /><select idref="V-230223" selected="true" /><select idref="V-230224" selected="true" /><select idref="V-230225" selected="true" /><select idref="V-230226" selected="true" /><select idref="V-230227" selected="true" /><select idref="V-230228" selected="true" /><select idref="V-230229" selected="true" /><select idref="V-230230" selected="true" /><select idref="V-230231" selected="true" /><select idref="V-230232" selected="true" /><select idref="V-230233" selected="true" /><select idref="V-230234" selected="true" /><select idref="V-230235" selected="true" /><select idref="V-230236" selected="true" /><select idref="V-230237" selected="true" /><select idref="V-230238" selected="true" /><select idref="V-230239" selected="true" /><select idref="V-230240" selected="true" /><select idref="V-230241" selected="true" /><select idref="V-230243" selected="true" /><select idref="V-230244" selected="true" /><select idref="V-230245" selected="true" /><select idref="V-230246" selected="true" /><select idref="V-230247" selected="true" /><select idref="V-230248" selected="true" /><select idref="V-230249" selected="true" /><select idref="V-230250" selected="true" /><select idref="V-230251" selected="true" /><select idref="V-230252" selected="true" /><select idref="V-230253" selected="true" /><select idref="V-230254" selected="true" /><select idref="V-230255" selected="true" /><select idref="V-230256" selected="true" /><select idref="V-230257" selected="true" /><select idref="V-230258" selected="true" /><select idref="V-230259" selected="true" /><select idref="V-230260" selected="true" /><select idref="V-230261" selected="true" /><select idref="V-230262" selected="true" /><select idref="V-230263" selected="true" /><select idref="V-230264" selected="true" /><select idref="V-230265" selected="true" /><select idref="V-230266" selected="true" /><select idref="V-230267" selected="true" /><select idref="V-230268" selected="true" /><select idref="V-230269" selected="true" /><select idref="V-230270" selected="true" /><select idref="V-230271" selected="true" /><select idref="V-230272" selected="true" /><select idref="V-230273" selected="true" /><select idref="V-230274" selected="true" /><select idref="V-230275" selected="true" /><select idref="V-230276" selected="true" /><select idref="V-230277" selected="true" /><select idref="V-230278" selected="true" /><select idref="V-230279" selected="true" /><select idref="V-230280" selected="true" /><select idref="V-230281" selected="true" /><select idref="V-230282" selected="true" /><select idref="V-230283" selected="true" /><select idref="V-230284" selected="true" /><select idref="V-230285" selected="true" /><select idref="V-230286" selected="true" /><select idref="V-230287" selected="true" /><select idref="V-230288" selected="true" /><select idref="V-230290" selected="true" /><select idref="V-230291" selected="true" /><select idref="V-230292" selected="true" /><select idref="V-230293" selected="true" /><select idref="V-230294" selected="true" /><select idref="V-230295" selected="true" /><select idref="V-230296" selected="true" /><select idref="V-230298" selected="true" /><select idref="V-230299" selected="true" /><select idref="V-230300" selected="true" /><select idref="V-230301" selected="true" /><select idref="V-230302" selected="true" /><select idref="V-230303" selected="true" /><select idref="V-230304" selected="true" /><select idref="V-230305" selected="true" /><select idref="V-230306" selected="true" /><select idref="V-230307" selected="true" /><select idref="V-230308" selected="true" /><select idref="V-230309" selected="true" /><select idref="V-230310" selected="true" /><select idref="V-230311" selected="true" /><select idref="V-230312" selected="true" /><select idref="V-230313" selected="true" /><select idref="V-230314" selected="true" /><select idref="V-230315" selected="true" /><select idref="V-230316" selected="true" /><select idref="V-230317" selected="true" /><select idref="V-230318" selected="true" /><select idref="V-230319" selected="true" /><select idref="V-230320" selected="true" /><select idref="V-230321" selected="true" /><select idref="V-230322" selected="true" /><select idref="V-230323" selected="true" /><select idref="V-230324" selected="true" /><select idref="V-230325" selected="true" /><select idref="V-230326" selected="true" /><select idref="V-230327" selected="true" /><select idref="V-230328" selected="true" /><select idref="V-230329" selected="true" /><select idref="V-230330" selected="true" /><select idref="V-230332" selected="true" /><select idref="V-230333" selected="true" /><select idref="V-230334" selected="true" /><select idref="V-230335" selected="true" /><select idref="V-230336" selected="true" /><select idref="V-230337" selected="true" /><select idref="V-230338" selected="true" /><select idref="V-230339" selected="true" /><select idref="V-230340" selected="true" /><select idref="V-230341" selected="true" /><select idref="V-230342" selected="true" /><select idref="V-230343" selected="true" /><select idref="V-230344" selected="true" /><select idref="V-230345" selected="true" /><select idref="V-230346" selected="true" /><select idref="V-230347" selected="true" /><select idref="V-230351" selected="true" /><select idref="V-230352" selected="true" /><select idref="V-230354" selected="true" /><select idref="V-230355" selected="true" /><select idref="V-230356" selected="true" /><select idref="V-230357" selected="true" /><select idref="V-230358" selected="true" /><select idref="V-230359" selected="true" /><select idref="V-230360" selected="true" /><select idref="V-230361" selected="true" /><select idref="V-230362" selected="true" /><select idref="V-230363" selected="true" /><select idref="V-230364" selected="true" /><select idref="V-230365" selected="true" /><select idref="V-230366" selected="true" /><select idref="V-230367" selected="true" /><select idref="V-230369" selected="true" /><select idref="V-230370" selected="true" /><select idref="V-230371" selected="true" /><select idref="V-230372" selected="true" /><select idref="V-230373" selected="true" /><select idref="V-230374" selected="true" /><select idref="V-230375" selected="true" /><select idref="V-230376" selected="true" /><select idref="V-230377" selected="true" /><select idref="V-230378" selected="true" /><select idref="V-230379" selected="true" /><select idref="V-230380" selected="true" /><select idref="V-230381" selected="true" /><select idref="V-230382" selected="true" /><select idref="V-230383" selected="true" /><select idref="V-230384" selected="true" /><select idref="V-230385" selected="true" /><select idref="V-230386" selected="true" /><select idref="V-230387" selected="true" /><select idref="V-230388" selected="true" /><select idref="V-230389" selected="true" /><select idref="V-230390" selected="true" /><select idref="V-230392" selected="true" /><select idref="V-230393" selected="true" /><select idref="V-230394" selected="true" /><select idref="V-230395" selected="true" /><select idref="V-230396" selected="true" /><select idref="V-230397" selected="true" /><select idref="V-230398" selected="true" /><select idref="V-230399" selected="true" /><select idref="V-230400" selected="true" /><select idref="V-230401" selected="true" /><select idref="V-230402" selected="true" /><select idref="V-230403" selected="true" /><select idref="V-230404" selected="true" /><select idref="V-230405" selected="true" /><select idref="V-230406" selected="true" /><select idref="V-230407" selected="true" /><select idref="V-230408" selected="true" /><select idref="V-230409" selected="true" /><select idref="V-230410" selected="true" /><select idref="V-230411" selected="true" /><select idref="V-230412" selected="true" /><select idref="V-230413" selected="true" /><select idref="V-230418" selected="true" /><select idref="V-230419" selected="true" /><select idref="V-230421" selected="true" /><select idref="V-230422" selected="true" /><select idref="V-230423" selected="true" /><select idref="V-230424" selected="true" /><select idref="V-230425" selected="true" /><select idref="V-230426" selected="true" /><select idref="V-230427" selected="true" /><select idref="V-230428" selected="true" /><select idref="V-230429" selected="true" /><select idref="V-230430" selected="true" /><select idref="V-230431" selected="true" /><select idref="V-230432" selected="true" /><select idref="V-230433" selected="true" /><select idref="V-230434" selected="true" /><select idref="V-230435" selected="true" /><select idref="V-230436" selected="true" /><select idref="V-230437" selected="true" /><select idref="V-230438" selected="true" /><select idref="V-230439" selected="true" /><select idref="V-230444" selected="true" /><select idref="V-230446" selected="true" /><select idref="V-230447" selected="true" /><select idref="V-230448" selected="true" /><select idref="V-230449" selected="true" /><select idref="V-230455" selected="true" /><select idref="V-230456" selected="true" /><select idref="V-230462" selected="true" /><select idref="V-230463" selected="true" /><select idref="V-230464" selected="true" /><select idref="V-230465" selected="true" /><select idref="V-230466" selected="true" /><select idref="V-230467" selected="true" /><select idref="V-230468" selected="true" /><select idref="V-230469" selected="true" /><select idref="V-230470" selected="true" /><select idref="V-230471" selected="true" /><select idref="V-230472" selected="true" /><select idref="V-230473" selected="true" /><select idref="V-230474" selected="true" /><select idref="V-230475" selected="true" /><select idref="V-230476" selected="true" /><select idref="V-230477" selected="true" /><select idref="V-230478" selected="true" /><select idref="V-230479" selected="true" /><select idref="V-230480" selected="true" /><select idref="V-230481" selected="true" /><select idref="V-230482" selected="true" /><select idref="V-230483" selected="true" /><select idref="V-230484" selected="true" /><select idref="V-230485" selected="true" /><select idref="V-230486" selected="true" /><select idref="V-230487" selected="true" /><select idref="V-230488" selected="true" /><select idref="V-230489" selected="true" /><select idref="V-230491" selected="true" /><select idref="V-230492" selected="true" /><select idref="V-230493" selected="true" /><select idref="V-230494" selected="true" /><select idref="V-230495" selected="true" /><select idref="V-230496" selected="true" /><select idref="V-230497" selected="true" /><select idref="V-230498" selected="true" /><select idref="V-230499" selected="true" /><select idref="V-230500" selected="true" /><select idref="V-230502" selected="true" /><select idref="V-230503" selected="true" /><select idref="V-230504" selected="true" /><select idref="V-230505" selected="true" /><select idref="V-230506" selected="true" /><select idref="V-230507" selected="true" /><select idref="V-230508" selected="true" /><select idref="V-230509" selected="true" /><select idref="V-230510" selected="true" /><select idref="V-230511" selected="true" /><select idref="V-230512" selected="true" /><select idref="V-230513" selected="true" /><select idref="V-230514" selected="true" /><select idref="V-230515" selected="true" /><select idref="V-230516" selected="true" /><select idref="V-230517" selected="true" /><select idref="V-230518" selected="true" /><select idref="V-230519" selected="true" /><select idref="V-230520" selected="true" /><select idref="V-230521" selected="true" /><select idref="V-230522" selected="true" /><select idref="V-230523" selected="true" /><select idref="V-230524" selected="true" /><select idref="V-230525" selected="true" /><select idref="V-230526" selected="true" /><select idref="V-230527" selected="true" /><select idref="V-230529" selected="true" /><select idref="V-230530" selected="true" /><select idref="V-230531" selected="true" /><select idref="V-230532" selected="true" /><select idref="V-230533" selected="true" /><select idref="V-230534" selected="true" /><select idref="V-230535" selected="true" /><select idref="V-230536" selected="true" /><select idref="V-230537" selected="true" /><select idref="V-230538" selected="true" /><select idref="V-230539" selected="true" /><select idref="V-230540" selected="true" /><select idref="V-230541" selected="true" /><select idref="V-230542" selected="true" /><select idref="V-230543" selected="true" /><select idref="V-230544" selected="true" /><select idref="V-230545" selected="true" /><select idref="V-230546" selected="true" /><select idref="V-230547" selected="true" /><select idref="V-230548" selected="true" /><select idref="V-230549" selected="true" /><select idref="V-230550" selected="true" /><select idref="V-230551" selected="true" /><select idref="V-230552" selected="true" /><select idref="V-230553" selected="true" /><select idref="V-230554" selected="true" /><select idref="V-230555" selected="true" /><select idref="V-230556" selected="true" /><select idref="V-230557" selected="true" /><select idref="V-230558" selected="true" /><select idref="V-230559" selected="true" /><select idref="V-230560" selected="true" /><select idref="V-230561" selected="true" /><select idref="V-237640" selected="true" /><select idref="V-237641" selected="true" /><select idref="V-237642" selected="true" /><select idref="V-237643" selected="true" /><select idref="V-244519" selected="true" /><select idref="V-244521" selected="true" /><select idref="V-244522" selected="true" /><select idref="V-244523" selected="true" /><select idref="V-244524" selected="true" /><select idref="V-244525" selected="true" /><select idref="V-244526" selected="true" /><select idref="V-244527" selected="true" /><select idref="V-244528" selected="true" /><select idref="V-244529" selected="true" /><select idref="V-244530" selected="true" /><select idref="V-244531" selected="true" /><select idref="V-244532" selected="true" /><select idref="V-244533" selected="true" /><select idref="V-244534" selected="true" /><select idref="V-244535" selected="true" /><select idref="V-244536" selected="true" /><select idref="V-244538" selected="true" /><select idref="V-244539" selected="true" /><select idref="V-244541" selected="true" /><select idref="V-244542" selected="true" /><select idref="V-244543" selected="true" /><select idref="V-244544" selected="true" /><select idref="V-244545" selected="true" /><select idref="V-244546" selected="true" /><select idref="V-244547" selected="true" /><select idref="V-244548" selected="true" /><select idref="V-244549" selected="true" /><select idref="V-244550" selected="true" /><select idref="V-244551" selected="true" /><select idref="V-244552" selected="true" /><select idref="V-244553" selected="true" /><select idref="V-244554" selected="true" /><select idref="V-250315" selected="true" /><select idref="V-250316" selected="true" /><select idref="V-250317" selected="true" /><select idref="V-251706" selected="true" /><select idref="V-251707" selected="true" /><select idref="V-251708" selected="true" /><select idref="V-251709" selected="true" /><select idref="V-251710" selected="true" /><select idref="V-251711" selected="true" /><select idref="V-251712" selected="true" /><select idref="V-251713" selected="true" /><select idref="V-251716" selected="true" /><select idref="V-251718" selected="true" /><select idref="V-254520" selected="true" /><select idref="V-255924" selected="true" /><select idref="V-256973" selected="true" /><select idref="V-256974" selected="true" /><select idref="V-257258" selected="true" /><select idref="V-268322" selected="true" /><select idref="V-272482" selected="true" /><select idref="V-272483" selected="true" /><select idref="V-272484" selected="true" /><select idref="V-274877" selected="true" /></Profile><Profile id="MAC-2_Public"><title>II - Mission Support Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-230221" selected="true" /><select idref="V-230222" selected="true" /><select idref="V-230223" selected="true" /><select idref="V-230224" selected="true" /><select idref="V-230225" selected="true" /><select idref="V-230226" selected="true" /><select idref="V-230227" selected="true" /><select idref="V-230228" selected="true" /><select idref="V-230229" selected="true" /><select idref="V-230230" selected="true" /><select idref="V-230231" selected="true" /><select idref="V-230232" selected="true" /><select idref="V-230233" selected="true" /><select idref="V-230234" selected="true" /><select idref="V-230235" selected="true" /><select idref="V-230236" selected="true" /><select idref="V-230237" selected="true" /><select idref="V-230238" selected="true" /><select idref="V-230239" selected="true" /><select idref="V-230240" selected="true" /><select idref="V-230241" selected="true" /><select idref="V-230243" selected="true" /><select idref="V-230244" selected="true" /><select idref="V-230245" selected="true" /><select idref="V-230246" selected="true" /><select idref="V-230247" selected="true" /><select idref="V-230248" selected="true" /><select idref="V-230249" selected="true" /><select idref="V-230250" selected="true" /><select idref="V-230251" selected="true" /><select idref="V-230252" selected="true" /><select idref="V-230253" selected="true" /><select idref="V-230254" selected="true" /><select idref="V-230255" selected="true" /><select idref="V-230256" selected="true" /><select idref="V-230257" selected="true" /><select idref="V-230258" selected="true" /><select idref="V-230259" selected="true" /><select idref="V-230260" selected="true" /><select idref="V-230261" selected="true" /><select idref="V-230262" selected="true" /><select idref="V-230263" selected="true" /><select idref="V-230264" selected="true" /><select idref="V-230265" selected="true" /><select idref="V-230266" selected="true" /><select idref="V-230267" selected="true" /><select idref="V-230268" selected="true" /><select idref="V-230269" selected="true" /><select idref="V-230270" selected="true" /><select idref="V-230271" selected="true" /><select idref="V-230272" selected="true" /><select idref="V-230273" selected="true" /><select idref="V-230274" selected="true" /><select idref="V-230275" selected="true" /><select idref="V-230276" selected="true" /><select idref="V-230277" selected="true" /><select idref="V-230278" selected="true" /><select idref="V-230279" selected="true" /><select idref="V-230280" selected="true" /><select idref="V-230281" selected="true" /><select idref="V-230282" selected="true" /><select idref="V-230283" selected="true" /><select idref="V-230284" selected="true" /><select idref="V-230285" selected="true" /><select idref="V-230286" selected="true" /><select idref="V-230287" selected="true" /><select idref="V-230288" selected="true" /><select idref="V-230290" selected="true" /><select idref="V-230291" selected="true" /><select idref="V-230292" selected="true" /><select idref="V-230293" selected="true" /><select idref="V-230294" selected="true" /><select idref="V-230295" selected="true" /><select idref="V-230296" selected="true" /><select idref="V-230298" selected="true" /><select idref="V-230299" selected="true" /><select idref="V-230300" selected="true" /><select idref="V-230301" selected="true" /><select idref="V-230302" selected="true" /><select idref="V-230303" selected="true" /><select idref="V-230304" selected="true" /><select idref="V-230305" selected="true" /><select idref="V-230306" selected="true" /><select idref="V-230307" selected="true" /><select idref="V-230308" selected="true" /><select idref="V-230309" selected="true" /><select idref="V-230310" selected="true" /><select idref="V-230311" selected="true" /><select idref="V-230312" selected="true" /><select idref="V-230313" selected="true" /><select idref="V-230314" selected="true" /><select idref="V-230315" selected="true" /><select idref="V-230316" selected="true" /><select idref="V-230317" selected="true" /><select idref="V-230318" selected="true" /><select idref="V-230319" selected="true" /><select idref="V-230320" selected="true" /><select idref="V-230321" selected="true" /><select idref="V-230322" selected="true" /><select idref="V-230323" selected="true" /><select idref="V-230324" selected="true" /><select idref="V-230325" selected="true" /><select idref="V-230326" selected="true" /><select idref="V-230327" selected="true" /><select idref="V-230328" selected="true" /><select idref="V-230329" selected="true" /><select idref="V-230330" selected="true" /><select idref="V-230332" selected="true" /><select idref="V-230333" selected="true" /><select idref="V-230334" selected="true" /><select idref="V-230335" selected="true" /><select idref="V-230336" selected="true" /><select idref="V-230337" selected="true" /><select idref="V-230338" selected="true" /><select idref="V-230339" selected="true" /><select idref="V-230340" selected="true" /><select idref="V-230341" selected="true" /><select idref="V-230342" selected="true" /><select idref="V-230343" selected="true" /><select idref="V-230344" selected="true" /><select idref="V-230345" selected="true" /><select idref="V-230346" selected="true" /><select idref="V-230347" selected="true" /><select idref="V-230351" selected="true" /><select idref="V-230352" selected="true" /><select idref="V-230354" selected="true" /><select idref="V-230355" selected="true" /><select idref="V-230356" selected="true" /><select idref="V-230357" selected="true" /><select idref="V-230358" selected="true" /><select idref="V-230359" selected="true" /><select idref="V-230360" selected="true" /><select idref="V-230361" selected="true" /><select idref="V-230362" selected="true" /><select idref="V-230363" selected="true" /><select idref="V-230364" selected="true" /><select idref="V-230365" selected="true" /><select idref="V-230366" selected="true" /><select idref="V-230367" selected="true" /><select idref="V-230369" selected="true" /><select idref="V-230370" selected="true" /><select idref="V-230371" selected="true" /><select idref="V-230372" selected="true" /><select idref="V-230373" selected="true" /><select idref="V-230374" selected="true" /><select idref="V-230375" selected="true" /><select idref="V-230376" selected="true" /><select idref="V-230377" selected="true" /><select idref="V-230378" selected="true" /><select idref="V-230379" selected="true" /><select idref="V-230380" selected="true" /><select idref="V-230381" selected="true" /><select idref="V-230382" selected="true" /><select idref="V-230383" selected="true" /><select idref="V-230384" selected="true" /><select idref="V-230385" selected="true" /><select idref="V-230386" selected="true" /><select idref="V-230387" selected="true" /><select idref="V-230388" selected="true" /><select idref="V-230389" selected="true" /><select idref="V-230390" selected="true" /><select idref="V-230392" selected="true" /><select idref="V-230393" selected="true" /><select idref="V-230394" selected="true" /><select idref="V-230395" selected="true" /><select idref="V-230396" selected="true" /><select idref="V-230397" selected="true" /><select idref="V-230398" selected="true" /><select idref="V-230399" selected="true" /><select idref="V-230400" selected="true" /><select idref="V-230401" selected="true" /><select idref="V-230402" selected="true" /><select idref="V-230403" selected="true" /><select idref="V-230404" selected="true" /><select idref="V-230405" selected="true" /><select idref="V-230406" selected="true" /><select idref="V-230407" selected="true" /><select idref="V-230408" selected="true" /><select idref="V-230409" selected="true" /><select idref="V-230410" selected="true" /><select idref="V-230411" selected="true" /><select idref="V-230412" selected="true" /><select idref="V-230413" selected="true" /><select idref="V-230418" selected="true" /><select idref="V-230419" selected="true" /><select idref="V-230421" selected="true" /><select idref="V-230422" selected="true" /><select idref="V-230423" selected="true" /><select idref="V-230424" selected="true" /><select idref="V-230425" selected="true" /><select idref="V-230426" selected="true" /><select idref="V-230427" selected="true" /><select idref="V-230428" selected="true" /><select idref="V-230429" selected="true" /><select idref="V-230430" selected="true" /><select idref="V-230431" selected="true" /><select idref="V-230432" selected="true" /><select idref="V-230433" selected="true" /><select idref="V-230434" selected="true" /><select idref="V-230435" selected="true" /><select idref="V-230436" selected="true" /><select idref="V-230437" selected="true" /><select idref="V-230438" selected="true" /><select idref="V-230439" selected="true" /><select idref="V-230444" selected="true" /><select idref="V-230446" selected="true" /><select idref="V-230447" selected="true" /><select idref="V-230448" selected="true" /><select idref="V-230449" selected="true" /><select idref="V-230455" selected="true" /><select idref="V-230456" selected="true" /><select idref="V-230462" selected="true" /><select idref="V-230463" selected="true" /><select idref="V-230464" selected="true" /><select idref="V-230465" selected="true" /><select idref="V-230466" selected="true" /><select idref="V-230467" selected="true" /><select idref="V-230468" selected="true" /><select idref="V-230469" selected="true" /><select idref="V-230470" selected="true" /><select idref="V-230471" selected="true" /><select idref="V-230472" selected="true" /><select idref="V-230473" selected="true" /><select idref="V-230474" selected="true" /><select idref="V-230475" selected="true" /><select idref="V-230476" selected="true" /><select idref="V-230477" selected="true" /><select idref="V-230478" selected="true" /><select idref="V-230479" selected="true" /><select idref="V-230480" selected="true" /><select idref="V-230481" selected="true" /><select idref="V-230482" selected="true" /><select idref="V-230483" selected="true" /><select idref="V-230484" selected="true" /><select idref="V-230485" selected="true" /><select idref="V-230486" selected="true" /><select idref="V-230487" selected="true" /><select idref="V-230488" selected="true" /><select idref="V-230489" selected="true" /><select idref="V-230491" selected="true" /><select idref="V-230492" selected="true" /><select idref="V-230493" selected="true" /><select idref="V-230494" selected="true" /><select idref="V-230495" selected="true" /><select idref="V-230496" selected="true" /><select idref="V-230497" selected="true" /><select idref="V-230498" selected="true" /><select idref="V-230499" selected="true" /><select idref="V-230500" selected="true" /><select idref="V-230502" selected="true" /><select idref="V-230503" selected="true" /><select idref="V-230504" selected="true" /><select idref="V-230505" selected="true" /><select idref="V-230506" selected="true" /><select idref="V-230507" selected="true" /><select idref="V-230508" selected="true" /><select idref="V-230509" selected="true" /><select idref="V-230510" selected="true" /><select idref="V-230511" selected="true" /><select idref="V-230512" selected="true" /><select idref="V-230513" selected="true" /><select idref="V-230514" selected="true" /><select idref="V-230515" selected="true" /><select idref="V-230516" selected="true" /><select idref="V-230517" selected="true" /><select idref="V-230518" selected="true" /><select idref="V-230519" selected="true" /><select idref="V-230520" selected="true" /><select idref="V-230521" selected="true" /><select idref="V-230522" selected="true" /><select idref="V-230523" selected="true" /><select idref="V-230524" selected="true" /><select idref="V-230525" selected="true" /><select idref="V-230526" selected="true" /><select idref="V-230527" selected="true" /><select idref="V-230529" selected="true" /><select idref="V-230530" selected="true" /><select idref="V-230531" selected="true" /><select idref="V-230532" selected="true" /><select idref="V-230533" selected="true" /><select idref="V-230534" selected="true" /><select idref="V-230535" selected="true" /><select idref="V-230536" selected="true" /><select idref="V-230537" selected="true" /><select idref="V-230538" selected="true" /><select idref="V-230539" selected="true" /><select idref="V-230540" selected="true" /><select idref="V-230541" selected="true" /><select idref="V-230542" selected="true" /><select idref="V-230543" selected="true" /><select idref="V-230544" selected="true" /><select idref="V-230545" selected="true" /><select idref="V-230546" selected="true" /><select idref="V-230547" selected="true" /><select idref="V-230548" selected="true" /><select idref="V-230549" selected="true" /><select idref="V-230550" selected="true" /><select idref="V-230551" selected="true" /><select idref="V-230552" selected="true" /><select idref="V-230553" selected="true" /><select idref="V-230554" selected="true" /><select idref="V-230555" selected="true" /><select idref="V-230556" selected="true" /><select idref="V-230557" selected="true" /><select idref="V-230558" selected="true" /><select idref="V-230559" selected="true" /><select idref="V-230560" selected="true" /><select idref="V-230561" selected="true" /><select idref="V-237640" selected="true" /><select idref="V-237641" selected="true" /><select idref="V-237642" selected="true" /><select idref="V-237643" selected="true" /><select idref="V-244519" selected="true" /><select idref="V-244521" selected="true" /><select idref="V-244522" selected="true" /><select idref="V-244523" selected="true" /><select idref="V-244524" selected="true" /><select idref="V-244525" selected="true" /><select idref="V-244526" selected="true" /><select idref="V-244527" selected="true" /><select idref="V-244528" selected="true" /><select idref="V-244529" selected="true" /><select idref="V-244530" selected="true" /><select idref="V-244531" selected="true" /><select idref="V-244532" selected="true" /><select idref="V-244533" selected="true" /><select idref="V-244534" selected="true" /><select idref="V-244535" selected="true" /><select idref="V-244536" selected="true" /><select idref="V-244538" selected="true" /><select idref="V-244539" selected="true" /><select idref="V-244541" selected="true" /><select idref="V-244542" selected="true" /><select idref="V-244543" selected="true" /><select idref="V-244544" selected="true" /><select idref="V-244545" selected="true" /><select idref="V-244546" selected="true" /><select idref="V-244547" selected="true" /><select idref="V-244548" selected="true" /><select idref="V-244549" selected="true" /><select idref="V-244550" selected="true" /><select idref="V-244551" selected="true" /><select idref="V-244552" selected="true" /><select idref="V-244553" selected="true" /><select idref="V-244554" selected="true" /><select idref="V-250315" selected="true" /><select idref="V-250316" selected="true" /><select idref="V-250317" selected="true" /><select idref="V-251706" selected="true" /><select idref="V-251707" selected="true" /><select idref="V-251708" selected="true" /><select idref="V-251709" selected="true" /><select idref="V-251710" selected="true" /><select idref="V-251711" selected="true" /><select idref="V-251712" selected="true" /><select idref="V-251713" selected="true" /><select idref="V-251716" selected="true" /><select idref="V-251718" selected="true" /><select idref="V-254520" selected="true" /><select idref="V-255924" selected="true" /><select idref="V-256973" selected="true" /><select idref="V-256974" selected="true" /><select idref="V-257258" selected="true" /><select idref="V-268322" selected="true" /><select idref="V-272482" selected="true" /><select idref="V-272483" selected="true" /><select idref="V-272484" selected="true" /><select idref="V-274877" selected="true" /></Profile><Profile id="MAC-2_Sensitive"><title>II - Mission Support Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-230221" selected="true" /><select idref="V-230222" selected="true" /><select idref="V-230223" selected="true" /><select idref="V-230224" selected="true" /><select idref="V-230225" selected="true" /><select idref="V-230226" selected="true" /><select idref="V-230227" selected="true" /><select idref="V-230228" selected="true" /><select idref="V-230229" selected="true" /><select idref="V-230230" selected="true" /><select idref="V-230231" selected="true" /><select idref="V-230232" selected="true" /><select idref="V-230233" selected="true" /><select idref="V-230234" selected="true" /><select idref="V-230235" selected="true" /><select idref="V-230236" selected="true" /><select idref="V-230237" selected="true" /><select idref="V-230238" selected="true" /><select idref="V-230239" selected="true" /><select idref="V-230240" selected="true" /><select idref="V-230241" selected="true" /><select idref="V-230243" selected="true" /><select idref="V-230244" selected="true" /><select idref="V-230245" selected="true" /><select idref="V-230246" selected="true" /><select idref="V-230247" selected="true" /><select idref="V-230248" selected="true" /><select idref="V-230249" selected="true" /><select idref="V-230250" selected="true" /><select idref="V-230251" selected="true" /><select idref="V-230252" selected="true" /><select idref="V-230253" selected="true" /><select idref="V-230254" selected="true" /><select idref="V-230255" selected="true" /><select idref="V-230256" selected="true" /><select idref="V-230257" selected="true" /><select idref="V-230258" selected="true" /><select idref="V-230259" selected="true" /><select idref="V-230260" selected="true" /><select idref="V-230261" selected="true" /><select idref="V-230262" selected="true" /><select idref="V-230263" selected="true" /><select idref="V-230264" selected="true" /><select idref="V-230265" selected="true" /><select idref="V-230266" selected="true" /><select idref="V-230267" selected="true" /><select idref="V-230268" selected="true" /><select idref="V-230269" selected="true" /><select idref="V-230270" selected="true" /><select idref="V-230271" selected="true" /><select idref="V-230272" selected="true" /><select idref="V-230273" selected="true" /><select idref="V-230274" selected="true" /><select idref="V-230275" selected="true" /><select idref="V-230276" selected="true" /><select idref="V-230277" selected="true" /><select idref="V-230278" selected="true" /><select idref="V-230279" selected="true" /><select idref="V-230280" selected="true" /><select idref="V-230281" selected="true" /><select idref="V-230282" selected="true" /><select idref="V-230283" selected="true" /><select idref="V-230284" selected="true" /><select idref="V-230285" selected="true" /><select idref="V-230286" selected="true" /><select idref="V-230287" selected="true" /><select idref="V-230288" selected="true" /><select idref="V-230290" selected="true" /><select idref="V-230291" selected="true" /><select idref="V-230292" selected="true" /><select idref="V-230293" selected="true" /><select idref="V-230294" selected="true" /><select idref="V-230295" selected="true" /><select idref="V-230296" selected="true" /><select idref="V-230298" selected="true" /><select idref="V-230299" selected="true" /><select idref="V-230300" selected="true" /><select idref="V-230301" selected="true" /><select idref="V-230302" selected="true" /><select idref="V-230303" selected="true" /><select idref="V-230304" selected="true" /><select idref="V-230305" selected="true" /><select idref="V-230306" selected="true" /><select idref="V-230307" selected="true" /><select idref="V-230308" selected="true" /><select idref="V-230309" selected="true" /><select idref="V-230310" selected="true" /><select idref="V-230311" selected="true" /><select idref="V-230312" selected="true" /><select idref="V-230313" selected="true" /><select idref="V-230314" selected="true" /><select idref="V-230315" selected="true" /><select idref="V-230316" selected="true" /><select idref="V-230317" selected="true" /><select idref="V-230318" selected="true" /><select idref="V-230319" selected="true" /><select idref="V-230320" selected="true" /><select idref="V-230321" selected="true" /><select idref="V-230322" selected="true" /><select idref="V-230323" selected="true" /><select idref="V-230324" selected="true" /><select idref="V-230325" selected="true" /><select idref="V-230326" selected="true" /><select idref="V-230327" selected="true" /><select idref="V-230328" selected="true" /><select idref="V-230329" selected="true" /><select idref="V-230330" selected="true" /><select idref="V-230332" selected="true" /><select idref="V-230333" selected="true" /><select idref="V-230334" selected="true" /><select idref="V-230335" selected="true" /><select idref="V-230336" selected="true" /><select idref="V-230337" selected="true" /><select idref="V-230338" selected="true" /><select idref="V-230339" selected="true" /><select idref="V-230340" selected="true" /><select idref="V-230341" selected="true" /><select idref="V-230342" selected="true" /><select idref="V-230343" selected="true" /><select idref="V-230344" selected="true" /><select idref="V-230345" selected="true" /><select idref="V-230346" selected="true" /><select idref="V-230347" selected="true" /><select idref="V-230351" selected="true" /><select idref="V-230352" selected="true" /><select idref="V-230354" selected="true" /><select idref="V-230355" selected="true" /><select idref="V-230356" selected="true" /><select idref="V-230357" selected="true" /><select idref="V-230358" selected="true" /><select idref="V-230359" selected="true" /><select idref="V-230360" selected="true" /><select idref="V-230361" selected="true" /><select idref="V-230362" selected="true" /><select idref="V-230363" selected="true" /><select idref="V-230364" selected="true" /><select idref="V-230365" selected="true" /><select idref="V-230366" selected="true" /><select idref="V-230367" selected="true" /><select idref="V-230369" selected="true" /><select idref="V-230370" selected="true" /><select idref="V-230371" selected="true" /><select idref="V-230372" selected="true" /><select idref="V-230373" selected="true" /><select idref="V-230374" selected="true" /><select idref="V-230375" selected="true" /><select idref="V-230376" selected="true" /><select idref="V-230377" selected="true" /><select idref="V-230378" selected="true" /><select idref="V-230379" selected="true" /><select idref="V-230380" selected="true" /><select idref="V-230381" selected="true" /><select idref="V-230382" selected="true" /><select idref="V-230383" selected="true" /><select idref="V-230384" selected="true" /><select idref="V-230385" selected="true" /><select idref="V-230386" selected="true" /><select idref="V-230387" selected="true" /><select idref="V-230388" selected="true" /><select idref="V-230389" selected="true" /><select idref="V-230390" selected="true" /><select idref="V-230392" selected="true" /><select idref="V-230393" selected="true" /><select idref="V-230394" selected="true" /><select idref="V-230395" selected="true" /><select idref="V-230396" selected="true" /><select idref="V-230397" selected="true" /><select idref="V-230398" selected="true" /><select idref="V-230399" selected="true" /><select idref="V-230400" selected="true" /><select idref="V-230401" selected="true" /><select idref="V-230402" selected="true" /><select idref="V-230403" selected="true" /><select idref="V-230404" selected="true" /><select idref="V-230405" selected="true" /><select idref="V-230406" selected="true" /><select idref="V-230407" selected="true" /><select idref="V-230408" selected="true" /><select idref="V-230409" selected="true" /><select idref="V-230410" selected="true" /><select idref="V-230411" selected="true" /><select idref="V-230412" selected="true" /><select idref="V-230413" selected="true" /><select idref="V-230418" selected="true" /><select idref="V-230419" selected="true" /><select idref="V-230421" selected="true" /><select idref="V-230422" selected="true" /><select idref="V-230423" selected="true" /><select idref="V-230424" selected="true" /><select idref="V-230425" selected="true" /><select idref="V-230426" selected="true" /><select idref="V-230427" selected="true" /><select idref="V-230428" selected="true" /><select idref="V-230429" selected="true" /><select idref="V-230430" selected="true" /><select idref="V-230431" selected="true" /><select idref="V-230432" selected="true" /><select idref="V-230433" selected="true" /><select idref="V-230434" selected="true" /><select idref="V-230435" selected="true" /><select idref="V-230436" selected="true" /><select idref="V-230437" selected="true" /><select idref="V-230438" selected="true" /><select idref="V-230439" selected="true" /><select idref="V-230444" selected="true" /><select idref="V-230446" selected="true" /><select idref="V-230447" selected="true" /><select idref="V-230448" selected="true" /><select idref="V-230449" selected="true" /><select idref="V-230455" selected="true" /><select idref="V-230456" selected="true" /><select idref="V-230462" selected="true" /><select idref="V-230463" selected="true" /><select idref="V-230464" selected="true" /><select idref="V-230465" selected="true" /><select idref="V-230466" selected="true" /><select idref="V-230467" selected="true" /><select idref="V-230468" selected="true" /><select idref="V-230469" selected="true" /><select idref="V-230470" selected="true" /><select idref="V-230471" selected="true" /><select idref="V-230472" selected="true" /><select idref="V-230473" selected="true" /><select idref="V-230474" selected="true" /><select idref="V-230475" selected="true" /><select idref="V-230476" selected="true" /><select idref="V-230477" selected="true" /><select idref="V-230478" selected="true" /><select idref="V-230479" selected="true" /><select idref="V-230480" selected="true" /><select idref="V-230481" selected="true" /><select idref="V-230482" selected="true" /><select idref="V-230483" selected="true" /><select idref="V-230484" selected="true" /><select idref="V-230485" selected="true" /><select idref="V-230486" selected="true" /><select idref="V-230487" selected="true" /><select idref="V-230488" selected="true" /><select idref="V-230489" selected="true" /><select idref="V-230491" selected="true" /><select idref="V-230492" selected="true" /><select idref="V-230493" selected="true" /><select idref="V-230494" selected="true" /><select idref="V-230495" selected="true" /><select idref="V-230496" selected="true" /><select idref="V-230497" selected="true" /><select idref="V-230498" selected="true" /><select idref="V-230499" selected="true" /><select idref="V-230500" selected="true" /><select idref="V-230502" selected="true" /><select idref="V-230503" selected="true" /><select idref="V-230504" selected="true" /><select idref="V-230505" selected="true" /><select idref="V-230506" selected="true" /><select idref="V-230507" selected="true" /><select idref="V-230508" selected="true" /><select idref="V-230509" selected="true" /><select idref="V-230510" selected="true" /><select idref="V-230511" selected="true" /><select idref="V-230512" selected="true" /><select idref="V-230513" selected="true" /><select idref="V-230514" selected="true" /><select idref="V-230515" selected="true" /><select idref="V-230516" selected="true" /><select idref="V-230517" selected="true" /><select idref="V-230518" selected="true" /><select idref="V-230519" selected="true" /><select idref="V-230520" selected="true" /><select idref="V-230521" selected="true" /><select idref="V-230522" selected="true" /><select idref="V-230523" selected="true" /><select idref="V-230524" selected="true" /><select idref="V-230525" selected="true" /><select idref="V-230526" selected="true" /><select idref="V-230527" selected="true" /><select idref="V-230529" selected="true" /><select idref="V-230530" selected="true" /><select idref="V-230531" selected="true" /><select idref="V-230532" selected="true" /><select idref="V-230533" selected="true" /><select idref="V-230534" selected="true" /><select idref="V-230535" selected="true" /><select idref="V-230536" selected="true" /><select idref="V-230537" selected="true" /><select idref="V-230538" selected="true" /><select idref="V-230539" selected="true" /><select idref="V-230540" selected="true" /><select idref="V-230541" selected="true" /><select idref="V-230542" selected="true" /><select idref="V-230543" selected="true" /><select idref="V-230544" selected="true" /><select idref="V-230545" selected="true" /><select idref="V-230546" selected="true" /><select idref="V-230547" selected="true" /><select idref="V-230548" selected="true" /><select idref="V-230549" selected="true" /><select idref="V-230550" selected="true" /><select idref="V-230551" selected="true" /><select idref="V-230552" selected="true" /><select idref="V-230553" selected="true" /><select idref="V-230554" selected="true" /><select idref="V-230555" selected="true" /><select idref="V-230556" selected="true" /><select idref="V-230557" selected="true" /><select idref="V-230558" selected="true" /><select idref="V-230559" selected="true" /><select idref="V-230560" selected="true" /><select idref="V-230561" selected="true" /><select idref="V-237640" selected="true" /><select idref="V-237641" selected="true" /><select idref="V-237642" selected="true" /><select idref="V-237643" selected="true" /><select idref="V-244519" selected="true" /><select idref="V-244521" selected="true" /><select idref="V-244522" selected="true" /><select idref="V-244523" selected="true" /><select idref="V-244524" selected="true" /><select idref="V-244525" selected="true" /><select idref="V-244526" selected="true" /><select idref="V-244527" selected="true" /><select idref="V-244528" selected="true" /><select idref="V-244529" selected="true" /><select idref="V-244530" selected="true" /><select idref="V-244531" selected="true" /><select idref="V-244532" selected="true" /><select idref="V-244533" selected="true" /><select idref="V-244534" selected="true" /><select idref="V-244535" selected="true" /><select idref="V-244536" selected="true" /><select idref="V-244538" selected="true" /><select idref="V-244539" selected="true" /><select idref="V-244541" selected="true" /><select idref="V-244542" selected="true" /><select idref="V-244543" selected="true" /><select idref="V-244544" selected="true" /><select idref="V-244545" selected="true" /><select idref="V-244546" selected="true" /><select idref="V-244547" selected="true" /><select idref="V-244548" selected="true" /><select idref="V-244549" selected="true" /><select idref="V-244550" selected="true" /><select idref="V-244551" selected="true" /><select idref="V-244552" selected="true" /><select idref="V-244553" selected="true" /><select idref="V-244554" selected="true" /><select idref="V-250315" selected="true" /><select idref="V-250316" selected="true" /><select idref="V-250317" selected="true" /><select idref="V-251706" selected="true" /><select idref="V-251707" selected="true" /><select idref="V-251708" selected="true" /><select idref="V-251709" selected="true" /><select idref="V-251710" selected="true" /><select idref="V-251711" selected="true" /><select idref="V-251712" selected="true" /><select idref="V-251713" selected="true" /><select idref="V-251716" selected="true" /><select idref="V-251718" selected="true" /><select idref="V-254520" selected="true" /><select idref="V-255924" selected="true" /><select idref="V-256973" selected="true" /><select idref="V-256974" selected="true" /><select idref="V-257258" selected="true" /><select idref="V-268322" selected="true" /><select idref="V-272482" selected="true" /><select idref="V-272483" selected="true" /><select idref="V-272484" selected="true" /><select idref="V-274877" selected="true" /></Profile><Profile id="MAC-3_Classified"><title>III - Administrative Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-230221" selected="true" /><select idref="V-230222" selected="true" /><select idref="V-230223" selected="true" /><select idref="V-230224" selected="true" /><select idref="V-230225" selected="true" /><select idref="V-230226" selected="true" /><select idref="V-230227" selected="true" /><select idref="V-230228" selected="true" /><select idref="V-230229" selected="true" /><select idref="V-230230" selected="true" /><select idref="V-230231" selected="true" /><select idref="V-230232" selected="true" /><select idref="V-230233" selected="true" /><select idref="V-230234" selected="true" /><select idref="V-230235" selected="true" /><select idref="V-230236" selected="true" /><select idref="V-230237" selected="true" /><select idref="V-230238" selected="true" /><select idref="V-230239" selected="true" /><select idref="V-230240" selected="true" /><select idref="V-230241" selected="true" /><select idref="V-230243" selected="true" /><select idref="V-230244" selected="true" /><select idref="V-230245" selected="true" /><select idref="V-230246" selected="true" /><select idref="V-230247" selected="true" /><select idref="V-230248" selected="true" /><select idref="V-230249" selected="true" /><select idref="V-230250" selected="true" /><select idref="V-230251" selected="true" /><select idref="V-230252" selected="true" /><select idref="V-230253" selected="true" /><select idref="V-230254" selected="true" /><select idref="V-230255" selected="true" /><select idref="V-230256" selected="true" /><select idref="V-230257" selected="true" /><select idref="V-230258" selected="true" /><select idref="V-230259" selected="true" /><select idref="V-230260" selected="true" /><select idref="V-230261" selected="true" /><select idref="V-230262" selected="true" /><select idref="V-230263" selected="true" /><select idref="V-230264" selected="true" /><select idref="V-230265" selected="true" /><select idref="V-230266" selected="true" /><select idref="V-230267" selected="true" /><select idref="V-230268" selected="true" /><select idref="V-230269" selected="true" /><select idref="V-230270" selected="true" /><select idref="V-230271" selected="true" /><select idref="V-230272" selected="true" /><select idref="V-230273" selected="true" /><select idref="V-230274" selected="true" /><select idref="V-230275" selected="true" /><select idref="V-230276" selected="true" /><select idref="V-230277" selected="true" /><select idref="V-230278" selected="true" /><select idref="V-230279" selected="true" /><select idref="V-230280" selected="true" /><select idref="V-230281" selected="true" /><select idref="V-230282" selected="true" /><select idref="V-230283" selected="true" /><select idref="V-230284" selected="true" /><select idref="V-230285" selected="true" /><select idref="V-230286" selected="true" /><select idref="V-230287" selected="true" /><select idref="V-230288" selected="true" /><select idref="V-230290" selected="true" /><select idref="V-230291" selected="true" /><select idref="V-230292" selected="true" /><select idref="V-230293" selected="true" /><select idref="V-230294" selected="true" /><select idref="V-230295" selected="true" /><select idref="V-230296" selected="true" /><select idref="V-230298" selected="true" /><select idref="V-230299" selected="true" /><select idref="V-230300" selected="true" /><select idref="V-230301" selected="true" /><select idref="V-230302" selected="true" /><select idref="V-230303" selected="true" /><select idref="V-230304" selected="true" /><select idref="V-230305" selected="true" /><select idref="V-230306" selected="true" /><select idref="V-230307" selected="true" /><select idref="V-230308" selected="true" /><select idref="V-230309" selected="true" /><select idref="V-230310" selected="true" /><select idref="V-230311" selected="true" /><select idref="V-230312" selected="true" /><select idref="V-230313" selected="true" /><select idref="V-230314" selected="true" /><select idref="V-230315" selected="true" /><select idref="V-230316" selected="true" /><select idref="V-230317" selected="true" /><select idref="V-230318" selected="true" /><select idref="V-230319" selected="true" /><select idref="V-230320" selected="true" /><select idref="V-230321" selected="true" /><select idref="V-230322" selected="true" /><select idref="V-230323" selected="true" /><select idref="V-230324" selected="true" /><select idref="V-230325" selected="true" /><select idref="V-230326" selected="true" /><select idref="V-230327" selected="true" /><select idref="V-230328" selected="true" /><select idref="V-230329" selected="true" /><select idref="V-230330" selected="true" /><select idref="V-230332" selected="true" /><select idref="V-230333" selected="true" /><select idref="V-230334" selected="true" /><select idref="V-230335" selected="true" /><select idref="V-230336" selected="true" /><select idref="V-230337" selected="true" /><select idref="V-230338" selected="true" /><select idref="V-230339" selected="true" /><select idref="V-230340" selected="true" /><select idref="V-230341" selected="true" /><select idref="V-230342" selected="true" /><select idref="V-230343" selected="true" /><select idref="V-230344" selected="true" /><select idref="V-230345" selected="true" /><select idref="V-230346" selected="true" /><select idref="V-230347" selected="true" /><select idref="V-230351" selected="true" /><select idref="V-230352" selected="true" /><select idref="V-230354" selected="true" /><select idref="V-230355" selected="true" /><select idref="V-230356" selected="true" /><select idref="V-230357" selected="true" /><select idref="V-230358" selected="true" /><select idref="V-230359" selected="true" /><select idref="V-230360" selected="true" /><select idref="V-230361" selected="true" /><select idref="V-230362" selected="true" /><select idref="V-230363" selected="true" /><select idref="V-230364" selected="true" /><select idref="V-230365" selected="true" /><select idref="V-230366" selected="true" /><select idref="V-230367" selected="true" /><select idref="V-230369" selected="true" /><select idref="V-230370" selected="true" /><select idref="V-230371" selected="true" /><select idref="V-230372" selected="true" /><select idref="V-230373" selected="true" /><select idref="V-230374" selected="true" /><select idref="V-230375" selected="true" /><select idref="V-230376" selected="true" /><select idref="V-230377" selected="true" /><select idref="V-230378" selected="true" /><select idref="V-230379" selected="true" /><select idref="V-230380" selected="true" /><select idref="V-230381" selected="true" /><select idref="V-230382" selected="true" /><select idref="V-230383" selected="true" /><select idref="V-230384" selected="true" /><select idref="V-230385" selected="true" /><select idref="V-230386" selected="true" /><select idref="V-230387" selected="true" /><select idref="V-230388" selected="true" /><select idref="V-230389" selected="true" /><select idref="V-230390" selected="true" /><select idref="V-230392" selected="true" /><select idref="V-230393" selected="true" /><select idref="V-230394" selected="true" /><select idref="V-230395" selected="true" /><select idref="V-230396" selected="true" /><select idref="V-230397" selected="true" /><select idref="V-230398" selected="true" /><select idref="V-230399" selected="true" /><select idref="V-230400" selected="true" /><select idref="V-230401" selected="true" /><select idref="V-230402" selected="true" /><select idref="V-230403" selected="true" /><select idref="V-230404" selected="true" /><select idref="V-230405" selected="true" /><select idref="V-230406" selected="true" /><select idref="V-230407" selected="true" /><select idref="V-230408" selected="true" /><select idref="V-230409" selected="true" /><select idref="V-230410" selected="true" /><select idref="V-230411" selected="true" /><select idref="V-230412" selected="true" /><select idref="V-230413" selected="true" /><select idref="V-230418" selected="true" /><select idref="V-230419" selected="true" /><select idref="V-230421" selected="true" /><select idref="V-230422" selected="true" /><select idref="V-230423" selected="true" /><select idref="V-230424" selected="true" /><select idref="V-230425" selected="true" /><select idref="V-230426" selected="true" /><select idref="V-230427" selected="true" /><select idref="V-230428" selected="true" /><select idref="V-230429" selected="true" /><select idref="V-230430" selected="true" /><select idref="V-230431" selected="true" /><select idref="V-230432" selected="true" /><select idref="V-230433" selected="true" /><select idref="V-230434" selected="true" /><select idref="V-230435" selected="true" /><select idref="V-230436" selected="true" /><select idref="V-230437" selected="true" /><select idref="V-230438" selected="true" /><select idref="V-230439" selected="true" /><select idref="V-230444" selected="true" /><select idref="V-230446" selected="true" /><select idref="V-230447" selected="true" /><select idref="V-230448" selected="true" /><select idref="V-230449" selected="true" /><select idref="V-230455" selected="true" /><select idref="V-230456" selected="true" /><select idref="V-230462" selected="true" /><select idref="V-230463" selected="true" /><select idref="V-230464" selected="true" /><select idref="V-230465" selected="true" /><select idref="V-230466" selected="true" /><select idref="V-230467" selected="true" /><select idref="V-230468" selected="true" /><select idref="V-230469" selected="true" /><select idref="V-230470" selected="true" /><select idref="V-230471" selected="true" /><select idref="V-230472" selected="true" /><select idref="V-230473" selected="true" /><select idref="V-230474" selected="true" /><select idref="V-230475" selected="true" /><select idref="V-230476" selected="true" /><select idref="V-230477" selected="true" /><select idref="V-230478" selected="true" /><select idref="V-230479" selected="true" /><select idref="V-230480" selected="true" /><select idref="V-230481" selected="true" /><select idref="V-230482" selected="true" /><select idref="V-230483" selected="true" /><select idref="V-230484" selected="true" /><select idref="V-230485" selected="true" /><select idref="V-230486" selected="true" /><select idref="V-230487" selected="true" /><select idref="V-230488" selected="true" /><select idref="V-230489" selected="true" /><select idref="V-230491" selected="true" /><select idref="V-230492" selected="true" /><select idref="V-230493" selected="true" /><select idref="V-230494" selected="true" /><select idref="V-230495" selected="true" /><select idref="V-230496" selected="true" /><select idref="V-230497" selected="true" /><select idref="V-230498" selected="true" /><select idref="V-230499" selected="true" /><select idref="V-230500" selected="true" /><select idref="V-230502" selected="true" /><select idref="V-230503" selected="true" /><select idref="V-230504" selected="true" /><select idref="V-230505" selected="true" /><select idref="V-230506" selected="true" /><select idref="V-230507" selected="true" /><select idref="V-230508" selected="true" /><select idref="V-230509" selected="true" /><select idref="V-230510" selected="true" /><select idref="V-230511" selected="true" /><select idref="V-230512" selected="true" /><select idref="V-230513" selected="true" /><select idref="V-230514" selected="true" /><select idref="V-230515" selected="true" /><select idref="V-230516" selected="true" /><select idref="V-230517" selected="true" /><select idref="V-230518" selected="true" /><select idref="V-230519" selected="true" /><select idref="V-230520" selected="true" /><select idref="V-230521" selected="true" /><select idref="V-230522" selected="true" /><select idref="V-230523" selected="true" /><select idref="V-230524" selected="true" /><select idref="V-230525" selected="true" /><select idref="V-230526" selected="true" /><select idref="V-230527" selected="true" /><select idref="V-230529" selected="true" /><select idref="V-230530" selected="true" /><select idref="V-230531" selected="true" /><select idref="V-230532" selected="true" /><select idref="V-230533" selected="true" /><select idref="V-230534" selected="true" /><select idref="V-230535" selected="true" /><select idref="V-230536" selected="true" /><select idref="V-230537" selected="true" /><select idref="V-230538" selected="true" /><select idref="V-230539" selected="true" /><select idref="V-230540" selected="true" /><select idref="V-230541" selected="true" /><select idref="V-230542" selected="true" /><select idref="V-230543" selected="true" /><select idref="V-230544" selected="true" /><select idref="V-230545" selected="true" /><select idref="V-230546" selected="true" /><select idref="V-230547" selected="true" /><select idref="V-230548" selected="true" /><select idref="V-230549" selected="true" /><select idref="V-230550" selected="true" /><select idref="V-230551" selected="true" /><select idref="V-230552" selected="true" /><select idref="V-230553" selected="true" /><select idref="V-230554" selected="true" /><select idref="V-230555" selected="true" /><select idref="V-230556" selected="true" /><select idref="V-230557" selected="true" /><select idref="V-230558" selected="true" /><select idref="V-230559" selected="true" /><select idref="V-230560" selected="true" /><select idref="V-230561" selected="true" /><select idref="V-237640" selected="true" /><select idref="V-237641" selected="true" /><select idref="V-237642" selected="true" /><select idref="V-237643" selected="true" /><select idref="V-244519" selected="true" /><select idref="V-244521" selected="true" /><select idref="V-244522" selected="true" /><select idref="V-244523" selected="true" /><select idref="V-244524" selected="true" /><select idref="V-244525" selected="true" /><select idref="V-244526" selected="true" /><select idref="V-244527" selected="true" /><select idref="V-244528" selected="true" /><select idref="V-244529" selected="true" /><select idref="V-244530" selected="true" /><select idref="V-244531" selected="true" /><select idref="V-244532" selected="true" /><select idref="V-244533" selected="true" /><select idref="V-244534" selected="true" /><select idref="V-244535" selected="true" /><select idref="V-244536" selected="true" /><select idref="V-244538" selected="true" /><select idref="V-244539" selected="true" /><select idref="V-244541" selected="true" /><select idref="V-244542" selected="true" /><select idref="V-244543" selected="true" /><select idref="V-244544" selected="true" /><select idref="V-244545" selected="true" /><select idref="V-244546" selected="true" /><select idref="V-244547" selected="true" /><select idref="V-244548" selected="true" /><select idref="V-244549" selected="true" /><select idref="V-244550" selected="true" /><select idref="V-244551" selected="true" /><select idref="V-244552" selected="true" /><select idref="V-244553" selected="true" /><select idref="V-244554" selected="true" /><select idref="V-250315" selected="true" /><select idref="V-250316" selected="true" /><select idref="V-250317" selected="true" /><select idref="V-251706" selected="true" /><select idref="V-251707" selected="true" /><select idref="V-251708" selected="true" /><select idref="V-251709" selected="true" /><select idref="V-251710" selected="true" /><select idref="V-251711" selected="true" /><select idref="V-251712" selected="true" /><select idref="V-251713" selected="true" /><select idref="V-251716" selected="true" /><select idref="V-251718" selected="true" /><select idref="V-254520" selected="true" /><select idref="V-255924" selected="true" /><select idref="V-256973" selected="true" /><select idref="V-256974" selected="true" /><select idref="V-257258" selected="true" /><select idref="V-268322" selected="true" /><select idref="V-272482" selected="true" /><select idref="V-272483" selected="true" /><select idref="V-272484" selected="true" /><select idref="V-274877" selected="true" /></Profile><Profile id="MAC-3_Public"><title>III - Administrative Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-230221" selected="true" /><select idref="V-230222" selected="true" /><select idref="V-230223" selected="true" /><select idref="V-230224" selected="true" /><select idref="V-230225" selected="true" /><select idref="V-230226" selected="true" /><select idref="V-230227" selected="true" /><select idref="V-230228" selected="true" /><select idref="V-230229" selected="true" /><select idref="V-230230" selected="true" /><select idref="V-230231" selected="true" /><select idref="V-230232" selected="true" /><select idref="V-230233" selected="true" /><select idref="V-230234" selected="true" /><select idref="V-230235" selected="true" /><select idref="V-230236" selected="true" /><select idref="V-230237" selected="true" /><select idref="V-230238" selected="true" /><select idref="V-230239" selected="true" /><select idref="V-230240" selected="true" /><select idref="V-230241" selected="true" /><select idref="V-230243" selected="true" /><select idref="V-230244" selected="true" /><select idref="V-230245" selected="true" /><select idref="V-230246" selected="true" /><select idref="V-230247" selected="true" /><select idref="V-230248" selected="true" /><select idref="V-230249" selected="true" /><select idref="V-230250" selected="true" /><select idref="V-230251" selected="true" /><select idref="V-230252" selected="true" /><select idref="V-230253" selected="true" /><select idref="V-230254" selected="true" /><select idref="V-230255" selected="true" /><select idref="V-230256" selected="true" /><select idref="V-230257" selected="true" /><select idref="V-230258" selected="true" /><select idref="V-230259" selected="true" /><select idref="V-230260" selected="true" /><select idref="V-230261" selected="true" /><select idref="V-230262" selected="true" /><select idref="V-230263" selected="true" /><select idref="V-230264" selected="true" /><select idref="V-230265" selected="true" /><select idref="V-230266" selected="true" /><select idref="V-230267" selected="true" /><select idref="V-230268" selected="true" /><select idref="V-230269" selected="true" /><select idref="V-230270" selected="true" /><select idref="V-230271" selected="true" /><select idref="V-230272" selected="true" /><select idref="V-230273" selected="true" /><select idref="V-230274" selected="true" /><select idref="V-230275" selected="true" /><select idref="V-230276" selected="true" /><select idref="V-230277" selected="true" /><select idref="V-230278" selected="true" /><select idref="V-230279" selected="true" /><select idref="V-230280" selected="true" /><select idref="V-230281" selected="true" /><select idref="V-230282" selected="true" /><select idref="V-230283" selected="true" /><select idref="V-230284" selected="true" /><select idref="V-230285" selected="true" /><select idref="V-230286" selected="true" /><select idref="V-230287" selected="true" /><select idref="V-230288" selected="true" /><select idref="V-230290" selected="true" /><select idref="V-230291" selected="true" /><select idref="V-230292" selected="true" /><select idref="V-230293" selected="true" /><select idref="V-230294" selected="true" /><select idref="V-230295" selected="true" /><select idref="V-230296" selected="true" /><select idref="V-230298" selected="true" /><select idref="V-230299" selected="true" /><select idref="V-230300" selected="true" /><select idref="V-230301" selected="true" /><select idref="V-230302" selected="true" /><select idref="V-230303" selected="true" /><select idref="V-230304" selected="true" /><select idref="V-230305" selected="true" /><select idref="V-230306" selected="true" /><select idref="V-230307" selected="true" /><select idref="V-230308" selected="true" /><select idref="V-230309" selected="true" /><select idref="V-230310" selected="true" /><select idref="V-230311" selected="true" /><select idref="V-230312" selected="true" /><select idref="V-230313" selected="true" /><select idref="V-230314" selected="true" /><select idref="V-230315" selected="true" /><select idref="V-230316" selected="true" /><select idref="V-230317" selected="true" /><select idref="V-230318" selected="true" /><select idref="V-230319" selected="true" /><select idref="V-230320" selected="true" /><select idref="V-230321" selected="true" /><select idref="V-230322" selected="true" /><select idref="V-230323" selected="true" /><select idref="V-230324" selected="true" /><select idref="V-230325" selected="true" /><select idref="V-230326" selected="true" /><select idref="V-230327" selected="true" /><select idref="V-230328" selected="true" /><select idref="V-230329" selected="true" /><select idref="V-230330" selected="true" /><select idref="V-230332" selected="true" /><select idref="V-230333" selected="true" /><select idref="V-230334" selected="true" /><select idref="V-230335" selected="true" /><select idref="V-230336" selected="true" /><select idref="V-230337" selected="true" /><select idref="V-230338" selected="true" /><select idref="V-230339" selected="true" /><select idref="V-230340" selected="true" /><select idref="V-230341" selected="true" /><select idref="V-230342" selected="true" /><select idref="V-230343" selected="true" /><select idref="V-230344" selected="true" /><select idref="V-230345" selected="true" /><select idref="V-230346" selected="true" /><select idref="V-230347" selected="true" /><select idref="V-230351" selected="true" /><select idref="V-230352" selected="true" /><select idref="V-230354" selected="true" /><select idref="V-230355" selected="true" /><select idref="V-230356" selected="true" /><select idref="V-230357" selected="true" /><select idref="V-230358" selected="true" /><select idref="V-230359" selected="true" /><select idref="V-230360" selected="true" /><select idref="V-230361" selected="true" /><select idref="V-230362" selected="true" /><select idref="V-230363" selected="true" /><select idref="V-230364" selected="true" /><select idref="V-230365" selected="true" /><select idref="V-230366" selected="true" /><select idref="V-230367" selected="true" /><select idref="V-230369" selected="true" /><select idref="V-230370" selected="true" /><select idref="V-230371" selected="true" /><select idref="V-230372" selected="true" /><select idref="V-230373" selected="true" /><select idref="V-230374" selected="true" /><select idref="V-230375" selected="true" /><select idref="V-230376" selected="true" /><select idref="V-230377" selected="true" /><select idref="V-230378" selected="true" /><select idref="V-230379" selected="true" /><select idref="V-230380" selected="true" /><select idref="V-230381" selected="true" /><select idref="V-230382" selected="true" /><select idref="V-230383" selected="true" /><select idref="V-230384" selected="true" /><select idref="V-230385" selected="true" /><select idref="V-230386" selected="true" /><select idref="V-230387" selected="true" /><select idref="V-230388" selected="true" /><select idref="V-230389" selected="true" /><select idref="V-230390" selected="true" /><select idref="V-230392" selected="true" /><select idref="V-230393" selected="true" /><select idref="V-230394" selected="true" /><select idref="V-230395" selected="true" /><select idref="V-230396" selected="true" /><select idref="V-230397" selected="true" /><select idref="V-230398" selected="true" /><select idref="V-230399" selected="true" /><select idref="V-230400" selected="true" /><select idref="V-230401" selected="true" /><select idref="V-230402" selected="true" /><select idref="V-230403" selected="true" /><select idref="V-230404" selected="true" /><select idref="V-230405" selected="true" /><select idref="V-230406" selected="true" /><select idref="V-230407" selected="true" /><select idref="V-230408" selected="true" /><select idref="V-230409" selected="true" /><select idref="V-230410" selected="true" /><select idref="V-230411" selected="true" /><select idref="V-230412" selected="true" /><select idref="V-230413" selected="true" /><select idref="V-230418" selected="true" /><select idref="V-230419" selected="true" /><select idref="V-230421" selected="true" /><select idref="V-230422" selected="true" /><select idref="V-230423" selected="true" /><select idref="V-230424" selected="true" /><select idref="V-230425" selected="true" /><select idref="V-230426" selected="true" /><select idref="V-230427" selected="true" /><select idref="V-230428" selected="true" /><select idref="V-230429" selected="true" /><select idref="V-230430" selected="true" /><select idref="V-230431" selected="true" /><select idref="V-230432" selected="true" /><select idref="V-230433" selected="true" /><select idref="V-230434" selected="true" /><select idref="V-230435" selected="true" /><select idref="V-230436" selected="true" /><select idref="V-230437" selected="true" /><select idref="V-230438" selected="true" /><select idref="V-230439" selected="true" /><select idref="V-230444" selected="true" /><select idref="V-230446" selected="true" /><select idref="V-230447" selected="true" /><select idref="V-230448" selected="true" /><select idref="V-230449" selected="true" /><select idref="V-230455" selected="true" /><select idref="V-230456" selected="true" /><select idref="V-230462" selected="true" /><select idref="V-230463" selected="true" /><select idref="V-230464" selected="true" /><select idref="V-230465" selected="true" /><select idref="V-230466" selected="true" /><select idref="V-230467" selected="true" /><select idref="V-230468" selected="true" /><select idref="V-230469" selected="true" /><select idref="V-230470" selected="true" /><select idref="V-230471" selected="true" /><select idref="V-230472" selected="true" /><select idref="V-230473" selected="true" /><select idref="V-230474" selected="true" /><select idref="V-230475" selected="true" /><select idref="V-230476" selected="true" /><select idref="V-230477" selected="true" /><select idref="V-230478" selected="true" /><select idref="V-230479" selected="true" /><select idref="V-230480" selected="true" /><select idref="V-230481" selected="true" /><select idref="V-230482" selected="true" /><select idref="V-230483" selected="true" /><select idref="V-230484" selected="true" /><select idref="V-230485" selected="true" /><select idref="V-230486" selected="true" /><select idref="V-230487" selected="true" /><select idref="V-230488" selected="true" /><select idref="V-230489" selected="true" /><select idref="V-230491" selected="true" /><select idref="V-230492" selected="true" /><select idref="V-230493" selected="true" /><select idref="V-230494" selected="true" /><select idref="V-230495" selected="true" /><select idref="V-230496" selected="true" /><select idref="V-230497" selected="true" /><select idref="V-230498" selected="true" /><select idref="V-230499" selected="true" /><select idref="V-230500" selected="true" /><select idref="V-230502" selected="true" /><select idref="V-230503" selected="true" /><select idref="V-230504" selected="true" /><select idref="V-230505" selected="true" /><select idref="V-230506" selected="true" /><select idref="V-230507" selected="true" /><select idref="V-230508" selected="true" /><select idref="V-230509" selected="true" /><select idref="V-230510" selected="true" /><select idref="V-230511" selected="true" /><select idref="V-230512" selected="true" /><select idref="V-230513" selected="true" /><select idref="V-230514" selected="true" /><select idref="V-230515" selected="true" /><select idref="V-230516" selected="true" /><select idref="V-230517" selected="true" /><select idref="V-230518" selected="true" /><select idref="V-230519" selected="true" /><select idref="V-230520" selected="true" /><select idref="V-230521" selected="true" /><select idref="V-230522" selected="true" /><select idref="V-230523" selected="true" /><select idref="V-230524" selected="true" /><select idref="V-230525" selected="true" /><select idref="V-230526" selected="true" /><select idref="V-230527" selected="true" /><select idref="V-230529" selected="true" /><select idref="V-230530" selected="true" /><select idref="V-230531" selected="true" /><select idref="V-230532" selected="true" /><select idref="V-230533" selected="true" /><select idref="V-230534" selected="true" /><select idref="V-230535" selected="true" /><select idref="V-230536" selected="true" /><select idref="V-230537" selected="true" /><select idref="V-230538" selected="true" /><select idref="V-230539" selected="true" /><select idref="V-230540" selected="true" /><select idref="V-230541" selected="true" /><select idref="V-230542" selected="true" /><select idref="V-230543" selected="true" /><select idref="V-230544" selected="true" /><select idref="V-230545" selected="true" /><select idref="V-230546" selected="true" /><select idref="V-230547" selected="true" /><select idref="V-230548" selected="true" /><select idref="V-230549" selected="true" /><select idref="V-230550" selected="true" /><select idref="V-230551" selected="true" /><select idref="V-230552" selected="true" /><select idref="V-230553" selected="true" /><select idref="V-230554" selected="true" /><select idref="V-230555" selected="true" /><select idref="V-230556" selected="true" /><select idref="V-230557" selected="true" /><select idref="V-230558" selected="true" /><select idref="V-230559" selected="true" /><select idref="V-230560" selected="true" /><select idref="V-230561" selected="true" /><select idref="V-237640" selected="true" /><select idref="V-237641" selected="true" /><select idref="V-237642" selected="true" /><select idref="V-237643" selected="true" /><select idref="V-244519" selected="true" /><select idref="V-244521" selected="true" /><select idref="V-244522" selected="true" /><select idref="V-244523" selected="true" /><select idref="V-244524" selected="true" /><select idref="V-244525" selected="true" /><select idref="V-244526" selected="true" /><select idref="V-244527" selected="true" /><select idref="V-244528" selected="true" /><select idref="V-244529" selected="true" /><select idref="V-244530" selected="true" /><select idref="V-244531" selected="true" /><select idref="V-244532" selected="true" /><select idref="V-244533" selected="true" /><select idref="V-244534" selected="true" /><select idref="V-244535" selected="true" /><select idref="V-244536" selected="true" /><select idref="V-244538" selected="true" /><select idref="V-244539" selected="true" /><select idref="V-244541" selected="true" /><select idref="V-244542" selected="true" /><select idref="V-244543" selected="true" /><select idref="V-244544" selected="true" /><select idref="V-244545" selected="true" /><select idref="V-244546" selected="true" /><select idref="V-244547" selected="true" /><select idref="V-244548" selected="true" /><select idref="V-244549" selected="true" /><select idref="V-244550" selected="true" /><select idref="V-244551" selected="true" /><select idref="V-244552" selected="true" /><select idref="V-244553" selected="true" /><select idref="V-244554" selected="true" /><select idref="V-250315" selected="true" /><select idref="V-250316" selected="true" /><select idref="V-250317" selected="true" /><select idref="V-251706" selected="true" /><select idref="V-251707" selected="true" /><select idref="V-251708" selected="true" /><select idref="V-251709" selected="true" /><select idref="V-251710" selected="true" /><select idref="V-251711" selected="true" /><select idref="V-251712" selected="true" /><select idref="V-251713" selected="true" /><select idref="V-251716" selected="true" /><select idref="V-251718" selected="true" /><select idref="V-254520" selected="true" /><select idref="V-255924" selected="true" /><select idref="V-256973" selected="true" /><select idref="V-256974" selected="true" /><select idref="V-257258" selected="true" /><select idref="V-268322" selected="true" /><select idref="V-272482" selected="true" /><select idref="V-272483" selected="true" /><select idref="V-272484" selected="true" /><select idref="V-274877" selected="true" /></Profile><Profile id="MAC-3_Sensitive"><title>III - Administrative Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-230221" selected="true" /><select idref="V-230222" selected="true" /><select idref="V-230223" selected="true" /><select idref="V-230224" selected="true" /><select idref="V-230225" selected="true" /><select idref="V-230226" selected="true" /><select idref="V-230227" selected="true" /><select idref="V-230228" selected="true" /><select idref="V-230229" selected="true" /><select idref="V-230230" selected="true" /><select idref="V-230231" selected="true" /><select idref="V-230232" selected="true" /><select idref="V-230233" selected="true" /><select idref="V-230234" selected="true" /><select idref="V-230235" selected="true" /><select idref="V-230236" selected="true" /><select idref="V-230237" selected="true" /><select idref="V-230238" selected="true" /><select idref="V-230239" selected="true" /><select idref="V-230240" selected="true" /><select idref="V-230241" selected="true" /><select idref="V-230243" selected="true" /><select idref="V-230244" selected="true" /><select idref="V-230245" selected="true" /><select idref="V-230246" selected="true" /><select idref="V-230247" selected="true" /><select idref="V-230248" selected="true" /><select idref="V-230249" selected="true" /><select idref="V-230250" selected="true" /><select idref="V-230251" selected="true" /><select idref="V-230252" selected="true" /><select idref="V-230253" selected="true" /><select idref="V-230254" selected="true" /><select idref="V-230255" selected="true" /><select idref="V-230256" selected="true" /><select idref="V-230257" selected="true" /><select idref="V-230258" selected="true" /><select idref="V-230259" selected="true" /><select idref="V-230260" selected="true" /><select idref="V-230261" selected="true" /><select idref="V-230262" selected="true" /><select idref="V-230263" selected="true" /><select idref="V-230264" selected="true" /><select idref="V-230265" selected="true" /><select idref="V-230266" selected="true" /><select idref="V-230267" selected="true" /><select idref="V-230268" selected="true" /><select idref="V-230269" selected="true" /><select idref="V-230270" selected="true" /><select idref="V-230271" selected="true" /><select idref="V-230272" selected="true" /><select idref="V-230273" selected="true" /><select idref="V-230274" selected="true" /><select idref="V-230275" selected="true" /><select idref="V-230276" selected="true" /><select idref="V-230277" selected="true" /><select idref="V-230278" selected="true" /><select idref="V-230279" selected="true" /><select idref="V-230280" selected="true" /><select idref="V-230281" selected="true" /><select idref="V-230282" selected="true" /><select idref="V-230283" selected="true" /><select idref="V-230284" selected="true" /><select idref="V-230285" selected="true" /><select idref="V-230286" selected="true" /><select idref="V-230287" selected="true" /><select idref="V-230288" selected="true" /><select idref="V-230290" selected="true" /><select idref="V-230291" selected="true" /><select idref="V-230292" selected="true" /><select idref="V-230293" selected="true" /><select idref="V-230294" selected="true" /><select idref="V-230295" selected="true" /><select idref="V-230296" selected="true" /><select idref="V-230298" selected="true" /><select idref="V-230299" selected="true" /><select idref="V-230300" selected="true" /><select idref="V-230301" selected="true" /><select idref="V-230302" selected="true" /><select idref="V-230303" selected="true" /><select idref="V-230304" selected="true" /><select idref="V-230305" selected="true" /><select idref="V-230306" selected="true" /><select idref="V-230307" selected="true" /><select idref="V-230308" selected="true" /><select idref="V-230309" selected="true" /><select idref="V-230310" selected="true" /><select idref="V-230311" selected="true" /><select idref="V-230312" selected="true" /><select idref="V-230313" selected="true" /><select idref="V-230314" selected="true" /><select idref="V-230315" selected="true" /><select idref="V-230316" selected="true" /><select idref="V-230317" selected="true" /><select idref="V-230318" selected="true" /><select idref="V-230319" selected="true" /><select idref="V-230320" selected="true" /><select idref="V-230321" selected="true" /><select idref="V-230322" selected="true" /><select idref="V-230323" selected="true" /><select idref="V-230324" selected="true" /><select idref="V-230325" selected="true" /><select idref="V-230326" selected="true" /><select idref="V-230327" selected="true" /><select idref="V-230328" selected="true" /><select idref="V-230329" selected="true" /><select idref="V-230330" selected="true" /><select idref="V-230332" selected="true" /><select idref="V-230333" selected="true" /><select idref="V-230334" selected="true" /><select idref="V-230335" selected="true" /><select idref="V-230336" selected="true" /><select idref="V-230337" selected="true" /><select idref="V-230338" selected="true" /><select idref="V-230339" selected="true" /><select idref="V-230340" selected="true" /><select idref="V-230341" selected="true" /><select idref="V-230342" selected="true" /><select idref="V-230343" selected="true" /><select idref="V-230344" selected="true" /><select idref="V-230345" selected="true" /><select idref="V-230346" selected="true" /><select idref="V-230347" selected="true" /><select idref="V-230351" selected="true" /><select idref="V-230352" selected="true" /><select idref="V-230354" selected="true" /><select idref="V-230355" selected="true" /><select idref="V-230356" selected="true" /><select idref="V-230357" selected="true" /><select idref="V-230358" selected="true" /><select idref="V-230359" selected="true" /><select idref="V-230360" selected="true" /><select idref="V-230361" selected="true" /><select idref="V-230362" selected="true" /><select idref="V-230363" selected="true" /><select idref="V-230364" selected="true" /><select idref="V-230365" selected="true" /><select idref="V-230366" selected="true" /><select idref="V-230367" selected="true" /><select idref="V-230369" selected="true" /><select idref="V-230370" selected="true" /><select idref="V-230371" selected="true" /><select idref="V-230372" selected="true" /><select idref="V-230373" selected="true" /><select idref="V-230374" selected="true" /><select idref="V-230375" selected="true" /><select idref="V-230376" selected="true" /><select idref="V-230377" selected="true" /><select idref="V-230378" selected="true" /><select idref="V-230379" selected="true" /><select idref="V-230380" selected="true" /><select idref="V-230381" selected="true" /><select idref="V-230382" selected="true" /><select idref="V-230383" selected="true" /><select idref="V-230384" selected="true" /><select idref="V-230385" selected="true" /><select idref="V-230386" selected="true" /><select idref="V-230387" selected="true" /><select idref="V-230388" selected="true" /><select idref="V-230389" selected="true" /><select idref="V-230390" selected="true" /><select idref="V-230392" selected="true" /><select idref="V-230393" selected="true" /><select idref="V-230394" selected="true" /><select idref="V-230395" selected="true" /><select idref="V-230396" selected="true" /><select idref="V-230397" selected="true" /><select idref="V-230398" selected="true" /><select idref="V-230399" selected="true" /><select idref="V-230400" selected="true" /><select idref="V-230401" selected="true" /><select idref="V-230402" selected="true" /><select idref="V-230403" selected="true" /><select idref="V-230404" selected="true" /><select idref="V-230405" selected="true" /><select idref="V-230406" selected="true" /><select idref="V-230407" selected="true" /><select idref="V-230408" selected="true" /><select idref="V-230409" selected="true" /><select idref="V-230410" selected="true" /><select idref="V-230411" selected="true" /><select idref="V-230412" selected="true" /><select idref="V-230413" selected="true" /><select idref="V-230418" selected="true" /><select idref="V-230419" selected="true" /><select idref="V-230421" selected="true" /><select idref="V-230422" selected="true" /><select idref="V-230423" selected="true" /><select idref="V-230424" selected="true" /><select idref="V-230425" selected="true" /><select idref="V-230426" selected="true" /><select idref="V-230427" selected="true" /><select idref="V-230428" selected="true" /><select idref="V-230429" selected="true" /><select idref="V-230430" selected="true" /><select idref="V-230431" selected="true" /><select idref="V-230432" selected="true" /><select idref="V-230433" selected="true" /><select idref="V-230434" selected="true" /><select idref="V-230435" selected="true" /><select idref="V-230436" selected="true" /><select idref="V-230437" selected="true" /><select idref="V-230438" selected="true" /><select idref="V-230439" selected="true" /><select idref="V-230444" selected="true" /><select idref="V-230446" selected="true" /><select idref="V-230447" selected="true" /><select idref="V-230448" selected="true" /><select idref="V-230449" selected="true" /><select idref="V-230455" selected="true" /><select idref="V-230456" selected="true" /><select idref="V-230462" selected="true" /><select idref="V-230463" selected="true" /><select idref="V-230464" selected="true" /><select idref="V-230465" selected="true" /><select idref="V-230466" selected="true" /><select idref="V-230467" selected="true" /><select idref="V-230468" selected="true" /><select idref="V-230469" selected="true" /><select idref="V-230470" selected="true" /><select idref="V-230471" selected="true" /><select idref="V-230472" selected="true" /><select idref="V-230473" selected="true" /><select idref="V-230474" selected="true" /><select idref="V-230475" selected="true" /><select idref="V-230476" selected="true" /><select idref="V-230477" selected="true" /><select idref="V-230478" selected="true" /><select idref="V-230479" selected="true" /><select idref="V-230480" selected="true" /><select idref="V-230481" selected="true" /><select idref="V-230482" selected="true" /><select idref="V-230483" selected="true" /><select idref="V-230484" selected="true" /><select idref="V-230485" selected="true" /><select idref="V-230486" selected="true" /><select idref="V-230487" selected="true" /><select idref="V-230488" selected="true" /><select idref="V-230489" selected="true" /><select idref="V-230491" selected="true" /><select idref="V-230492" selected="true" /><select idref="V-230493" selected="true" /><select idref="V-230494" selected="true" /><select idref="V-230495" selected="true" /><select idref="V-230496" selected="true" /><select idref="V-230497" selected="true" /><select idref="V-230498" selected="true" /><select idref="V-230499" selected="true" /><select idref="V-230500" selected="true" /><select idref="V-230502" selected="true" /><select idref="V-230503" selected="true" /><select idref="V-230504" selected="true" /><select idref="V-230505" selected="true" /><select idref="V-230506" selected="true" /><select idref="V-230507" selected="true" /><select idref="V-230508" selected="true" /><select idref="V-230509" selected="true" /><select idref="V-230510" selected="true" /><select idref="V-230511" selected="true" /><select idref="V-230512" selected="true" /><select idref="V-230513" selected="true" /><select idref="V-230514" selected="true" /><select idref="V-230515" selected="true" /><select idref="V-230516" selected="true" /><select idref="V-230517" selected="true" /><select idref="V-230518" selected="true" /><select idref="V-230519" selected="true" /><select idref="V-230520" selected="true" /><select idref="V-230521" selected="true" /><select idref="V-230522" selected="true" /><select idref="V-230523" selected="true" /><select idref="V-230524" selected="true" /><select idref="V-230525" selected="true" /><select idref="V-230526" selected="true" /><select idref="V-230527" selected="true" /><select idref="V-230529" selected="true" /><select idref="V-230530" selected="true" /><select idref="V-230531" selected="true" /><select idref="V-230532" selected="true" /><select idref="V-230533" selected="true" /><select idref="V-230534" selected="true" /><select idref="V-230535" selected="true" /><select idref="V-230536" selected="true" /><select idref="V-230537" selected="true" /><select idref="V-230538" selected="true" /><select idref="V-230539" selected="true" /><select idref="V-230540" selected="true" /><select idref="V-230541" selected="true" /><select idref="V-230542" selected="true" /><select idref="V-230543" selected="true" /><select idref="V-230544" selected="true" /><select idref="V-230545" selected="true" /><select idref="V-230546" selected="true" /><select idref="V-230547" selected="true" /><select idref="V-230548" selected="true" /><select idref="V-230549" selected="true" /><select idref="V-230550" selected="true" /><select idref="V-230551" selected="true" /><select idref="V-230552" selected="true" /><select idref="V-230553" selected="true" /><select idref="V-230554" selected="true" /><select idref="V-230555" selected="true" /><select idref="V-230556" selected="true" /><select idref="V-230557" selected="true" /><select idref="V-230558" selected="true" /><select idref="V-230559" selected="true" /><select idref="V-230560" selected="true" /><select idref="V-230561" selected="true" /><select idref="V-237640" selected="true" /><select idref="V-237641" selected="true" /><select idref="V-237642" selected="true" /><select idref="V-237643" selected="true" /><select idref="V-244519" selected="true" /><select idref="V-244521" selected="true" /><select idref="V-244522" selected="true" /><select idref="V-244523" selected="true" /><select idref="V-244524" selected="true" /><select idref="V-244525" selected="true" /><select idref="V-244526" selected="true" /><select idref="V-244527" selected="true" /><select idref="V-244528" selected="true" /><select idref="V-244529" selected="true" /><select idref="V-244530" selected="true" /><select idref="V-244531" selected="true" /><select idref="V-244532" selected="true" /><select idref="V-244533" selected="true" /><select idref="V-244534" selected="true" /><select idref="V-244535" selected="true" /><select idref="V-244536" selected="true" /><select idref="V-244538" selected="true" /><select idref="V-244539" selected="true" /><select idref="V-244541" selected="true" /><select idref="V-244542" selected="true" /><select idref="V-244543" selected="true" /><select idref="V-244544" selected="true" /><select idref="V-244545" selected="true" /><select idref="V-244546" selected="true" /><select idref="V-244547" selected="true" /><select idref="V-244548" selected="true" /><select idref="V-244549" selected="true" /><select idref="V-244550" selected="true" /><select idref="V-244551" selected="true" /><select idref="V-244552" selected="true" /><select idref="V-244553" selected="true" /><select idref="V-244554" selected="true" /><select idref="V-250315" selected="true" /><select idref="V-250316" selected="true" /><select idref="V-250317" selected="true" /><select idref="V-251706" selected="true" /><select idref="V-251707" selected="true" /><select idref="V-251708" selected="true" /><select idref="V-251709" selected="true" /><select idref="V-251710" selected="true" /><select idref="V-251711" selected="true" /><select idref="V-251712" selected="true" /><select idref="V-251713" selected="true" /><select idref="V-251716" selected="true" /><select idref="V-251718" selected="true" /><select idref="V-254520" selected="true" /><select idref="V-255924" selected="true" /><select idref="V-256973" selected="true" /><select idref="V-256974" selected="true" /><select idref="V-257258" selected="true" /><select idref="V-268322" selected="true" /><select idref="V-272482" selected="true" /><select idref="V-272483" selected="true" /><select idref="V-272484" selected="true" /><select idref="V-274877" selected="true" /></Profile><Group id="V-230221"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230221r1017040_rule" weight="10.0" severity="high"><version>RHEL-08-010000</version><title>RHEL 8 must be a vendor-supported release.</title><description>&lt;VulnDiscussion&gt;An operating system release is considered "supported" if the vendor continues to provide security patches for the product. With an unsupported release, it will not be possible to resolve security issues discovered in the system software.
+<?xml version="1.0" encoding="utf-8"?><?xml-stylesheet type='text/xsl' href='STIG_unclass.xsl'?><Benchmark xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.1 http://nvd.nist.gov/schema/xccdf-1.1.4.xsd http://cpe.mitre.org/dictionary/2.0 http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd" id="RHEL_8_STIG" xml:lang="en" xmlns="http://checklists.nist.gov/xccdf/1.1"><status date="2025-11-24">accepted</status><title>Red Hat Enterprise Linux 8 Security Technical Implementation Guide</title><description>This Security Technical Implementation Guide is published as a tool to improve the security of Department of Defense (DOD) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.</description><notice id="terms-of-use" xml:lang="en"></notice><front-matter xml:lang="en"></front-matter><rear-matter xml:lang="en"></rear-matter><reference href="https://cyber.mil"><dc:publisher>DISA</dc:publisher><dc:source>STIG.DOD.MIL</dc:source></reference><plain-text id="release-info">Release: 6 Benchmark Date: 05 Jan 2026</plain-text><plain-text id="generator">3.5.2</plain-text><plain-text id="conventionsVersion">1.10.0</plain-text><version>2</version><Profile id="MAC-1_Classified"><title>I - Mission Critical Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-230221" selected="true" /><select idref="V-230222" selected="true" /><select idref="V-230223" selected="true" /><select idref="V-230224" selected="true" /><select idref="V-230225" selected="true" /><select idref="V-230226" selected="true" /><select idref="V-230227" selected="true" /><select idref="V-230228" selected="true" /><select idref="V-230229" selected="true" /><select idref="V-230230" selected="true" /><select idref="V-230231" selected="true" /><select idref="V-230232" selected="true" /><select idref="V-230233" selected="true" /><select idref="V-230234" selected="true" /><select idref="V-230235" selected="true" /><select idref="V-230236" selected="true" /><select idref="V-230237" selected="true" /><select idref="V-230238" selected="true" /><select idref="V-230239" selected="true" /><select idref="V-230240" selected="true" /><select idref="V-230241" selected="true" /><select idref="V-230243" selected="true" /><select idref="V-230244" selected="true" /><select idref="V-230245" selected="true" /><select idref="V-230246" selected="true" /><select idref="V-230247" selected="true" /><select idref="V-230248" selected="true" /><select idref="V-230249" selected="true" /><select idref="V-230250" selected="true" /><select idref="V-230251" selected="true" /><select idref="V-230252" selected="true" /><select idref="V-230253" selected="true" /><select idref="V-230257" selected="true" /><select idref="V-230258" selected="true" /><select idref="V-230259" selected="true" /><select idref="V-230260" selected="true" /><select idref="V-230261" selected="true" /><select idref="V-230262" selected="true" /><select idref="V-230263" selected="true" /><select idref="V-230264" selected="true" /><select idref="V-230265" selected="true" /><select idref="V-230266" selected="true" /><select idref="V-230267" selected="true" /><select idref="V-230268" selected="true" /><select idref="V-230269" selected="true" /><select idref="V-230270" selected="true" /><select idref="V-230271" selected="true" /><select idref="V-230272" selected="true" /><select idref="V-230273" selected="true" /><select idref="V-230274" selected="true" /><select idref="V-230275" selected="true" /><select idref="V-230276" selected="true" /><select idref="V-230277" selected="true" /><select idref="V-230278" selected="true" /><select idref="V-230279" selected="true" /><select idref="V-230280" selected="true" /><select idref="V-230281" selected="true" /><select idref="V-230282" selected="true" /><select idref="V-230283" selected="true" /><select idref="V-230284" selected="true" /><select idref="V-230285" selected="true" /><select idref="V-230286" selected="true" /><select idref="V-230287" selected="true" /><select idref="V-230288" selected="true" /><select idref="V-230290" selected="true" /><select idref="V-230291" selected="true" /><select idref="V-230292" selected="true" /><select idref="V-230293" selected="true" /><select idref="V-230294" selected="true" /><select idref="V-230295" selected="true" /><select idref="V-230296" selected="true" /><select idref="V-230298" selected="true" /><select idref="V-230299" selected="true" /><select idref="V-230300" selected="true" /><select idref="V-230301" selected="true" /><select idref="V-230302" selected="true" /><select idref="V-230303" selected="true" /><select idref="V-230304" selected="true" /><select idref="V-230305" selected="true" /><select idref="V-230306" selected="true" /><select idref="V-230307" selected="true" /><select idref="V-230308" selected="true" /><select idref="V-230310" selected="true" /><select idref="V-230311" selected="true" /><select idref="V-230312" selected="true" /><select idref="V-230313" selected="true" /><select idref="V-230314" selected="true" /><select idref="V-230315" selected="true" /><select idref="V-230316" selected="true" /><select idref="V-230317" selected="true" /><select idref="V-230318" selected="true" /><select idref="V-230319" selected="true" /><select idref="V-230320" selected="true" /><select idref="V-230321" selected="true" /><select idref="V-230322" selected="true" /><select idref="V-230323" selected="true" /><select idref="V-230324" selected="true" /><select idref="V-230325" selected="true" /><select idref="V-230326" selected="true" /><select idref="V-230327" selected="true" /><select idref="V-230328" selected="true" /><select idref="V-230329" selected="true" /><select idref="V-230330" selected="true" /><select idref="V-230332" selected="true" /><select idref="V-230333" selected="true" /><select idref="V-230334" selected="true" /><select idref="V-230335" selected="true" /><select idref="V-230336" selected="true" /><select idref="V-230337" selected="true" /><select idref="V-230338" selected="true" /><select idref="V-230339" selected="true" /><select idref="V-230340" selected="true" /><select idref="V-230341" selected="true" /><select idref="V-230342" selected="true" /><select idref="V-230343" selected="true" /><select idref="V-230344" selected="true" /><select idref="V-230345" selected="true" /><select idref="V-230346" selected="true" /><select idref="V-230347" selected="true" /><select idref="V-230351" selected="true" /><select idref="V-230352" selected="true" /><select idref="V-230354" selected="true" /><select idref="V-230355" selected="true" /><select idref="V-230356" selected="true" /><select idref="V-230357" selected="true" /><select idref="V-230358" selected="true" /><select idref="V-230359" selected="true" /><select idref="V-230360" selected="true" /><select idref="V-230361" selected="true" /><select idref="V-230362" selected="true" /><select idref="V-230363" selected="true" /><select idref="V-230364" selected="true" /><select idref="V-230365" selected="true" /><select idref="V-230366" selected="true" /><select idref="V-230367" selected="true" /><select idref="V-230369" selected="true" /><select idref="V-230370" selected="true" /><select idref="V-230371" selected="true" /><select idref="V-230372" selected="true" /><select idref="V-230373" selected="true" /><select idref="V-230374" selected="true" /><select idref="V-230375" selected="true" /><select idref="V-230376" selected="true" /><select idref="V-230377" selected="true" /><select idref="V-230378" selected="true" /><select idref="V-230379" selected="true" /><select idref="V-230380" selected="true" /><select idref="V-230382" selected="true" /><select idref="V-230383" selected="true" /><select idref="V-230384" selected="true" /><select idref="V-230385" selected="true" /><select idref="V-230386" selected="true" /><select idref="V-230387" selected="true" /><select idref="V-230388" selected="true" /><select idref="V-230389" selected="true" /><select idref="V-230390" selected="true" /><select idref="V-230392" selected="true" /><select idref="V-230393" selected="true" /><select idref="V-230394" selected="true" /><select idref="V-230395" selected="true" /><select idref="V-230396" selected="true" /><select idref="V-230397" selected="true" /><select idref="V-230398" selected="true" /><select idref="V-230399" selected="true" /><select idref="V-230400" selected="true" /><select idref="V-230401" selected="true" /><select idref="V-230402" selected="true" /><select idref="V-230403" selected="true" /><select idref="V-230404" selected="true" /><select idref="V-230405" selected="true" /><select idref="V-230406" selected="true" /><select idref="V-230407" selected="true" /><select idref="V-230408" selected="true" /><select idref="V-230409" selected="true" /><select idref="V-230410" selected="true" /><select idref="V-230411" selected="true" /><select idref="V-230412" selected="true" /><select idref="V-230413" selected="true" /><select idref="V-230418" selected="true" /><select idref="V-230419" selected="true" /><select idref="V-230421" selected="true" /><select idref="V-230422" selected="true" /><select idref="V-230423" selected="true" /><select idref="V-230424" selected="true" /><select idref="V-230425" selected="true" /><select idref="V-230426" selected="true" /><select idref="V-230427" selected="true" /><select idref="V-230428" selected="true" /><select idref="V-230429" selected="true" /><select idref="V-230430" selected="true" /><select idref="V-230431" selected="true" /><select idref="V-230432" selected="true" /><select idref="V-230433" selected="true" /><select idref="V-230434" selected="true" /><select idref="V-230435" selected="true" /><select idref="V-230436" selected="true" /><select idref="V-230437" selected="true" /><select idref="V-230438" selected="true" /><select idref="V-230439" selected="true" /><select idref="V-230444" selected="true" /><select idref="V-230446" selected="true" /><select idref="V-230447" selected="true" /><select idref="V-230448" selected="true" /><select idref="V-230449" selected="true" /><select idref="V-230455" selected="true" /><select idref="V-230456" selected="true" /><select idref="V-230462" selected="true" /><select idref="V-230463" selected="true" /><select idref="V-230464" selected="true" /><select idref="V-230465" selected="true" /><select idref="V-230466" selected="true" /><select idref="V-230467" selected="true" /><select idref="V-230468" selected="true" /><select idref="V-230469" selected="true" /><select idref="V-230470" selected="true" /><select idref="V-230471" selected="true" /><select idref="V-230472" selected="true" /><select idref="V-230473" selected="true" /><select idref="V-230474" selected="true" /><select idref="V-230475" selected="true" /><select idref="V-230476" selected="true" /><select idref="V-230477" selected="true" /><select idref="V-230478" selected="true" /><select idref="V-230479" selected="true" /><select idref="V-230480" selected="true" /><select idref="V-230481" selected="true" /><select idref="V-230482" selected="true" /><select idref="V-230483" selected="true" /><select idref="V-230484" selected="true" /><select idref="V-230485" selected="true" /><select idref="V-230486" selected="true" /><select idref="V-230487" selected="true" /><select idref="V-230488" selected="true" /><select idref="V-230489" selected="true" /><select idref="V-230491" selected="true" /><select idref="V-230492" selected="true" /><select idref="V-230493" selected="true" /><select idref="V-230494" selected="true" /><select idref="V-230495" selected="true" /><select idref="V-230496" selected="true" /><select idref="V-230497" selected="true" /><select idref="V-230498" selected="true" /><select idref="V-230499" selected="true" /><select idref="V-230500" selected="true" /><select idref="V-230502" selected="true" /><select idref="V-230503" selected="true" /><select idref="V-230504" selected="true" /><select idref="V-230505" selected="true" /><select idref="V-230506" selected="true" /><select idref="V-230507" selected="true" /><select idref="V-230508" selected="true" /><select idref="V-230509" selected="true" /><select idref="V-230510" selected="true" /><select idref="V-230511" selected="true" /><select idref="V-230512" selected="true" /><select idref="V-230513" selected="true" /><select idref="V-230514" selected="true" /><select idref="V-230515" selected="true" /><select idref="V-230516" selected="true" /><select idref="V-230517" selected="true" /><select idref="V-230518" selected="true" /><select idref="V-230519" selected="true" /><select idref="V-230520" selected="true" /><select idref="V-230521" selected="true" /><select idref="V-230522" selected="true" /><select idref="V-230523" selected="true" /><select idref="V-230524" selected="true" /><select idref="V-230525" selected="true" /><select idref="V-230526" selected="true" /><select idref="V-230527" selected="true" /><select idref="V-230529" selected="true" /><select idref="V-230530" selected="true" /><select idref="V-230531" selected="true" /><select idref="V-230532" selected="true" /><select idref="V-230533" selected="true" /><select idref="V-230534" selected="true" /><select idref="V-230535" selected="true" /><select idref="V-230536" selected="true" /><select idref="V-230537" selected="true" /><select idref="V-230538" selected="true" /><select idref="V-230539" selected="true" /><select idref="V-230540" selected="true" /><select idref="V-230541" selected="true" /><select idref="V-230542" selected="true" /><select idref="V-230543" selected="true" /><select idref="V-230544" selected="true" /><select idref="V-230545" selected="true" /><select idref="V-230546" selected="true" /><select idref="V-230547" selected="true" /><select idref="V-230548" selected="true" /><select idref="V-230549" selected="true" /><select idref="V-230550" selected="true" /><select idref="V-230551" selected="true" /><select idref="V-230552" selected="true" /><select idref="V-230553" selected="true" /><select idref="V-230554" selected="true" /><select idref="V-230555" selected="true" /><select idref="V-230556" selected="true" /><select idref="V-230557" selected="true" /><select idref="V-230558" selected="true" /><select idref="V-230559" selected="true" /><select idref="V-230560" selected="true" /><select idref="V-230561" selected="true" /><select idref="V-237640" selected="true" /><select idref="V-237641" selected="true" /><select idref="V-237642" selected="true" /><select idref="V-237643" selected="true" /><select idref="V-244519" selected="true" /><select idref="V-244521" selected="true" /><select idref="V-244522" selected="true" /><select idref="V-244523" selected="true" /><select idref="V-244524" selected="true" /><select idref="V-244525" selected="true" /><select idref="V-244527" selected="true" /><select idref="V-244528" selected="true" /><select idref="V-244529" selected="true" /><select idref="V-244530" selected="true" /><select idref="V-244531" selected="true" /><select idref="V-244532" selected="true" /><select idref="V-244533" selected="true" /><select idref="V-244534" selected="true" /><select idref="V-244535" selected="true" /><select idref="V-244536" selected="true" /><select idref="V-244538" selected="true" /><select idref="V-244539" selected="true" /><select idref="V-244541" selected="true" /><select idref="V-244542" selected="true" /><select idref="V-244543" selected="true" /><select idref="V-244544" selected="true" /><select idref="V-244545" selected="true" /><select idref="V-244546" selected="true" /><select idref="V-244547" selected="true" /><select idref="V-244548" selected="true" /><select idref="V-244549" selected="true" /><select idref="V-244550" selected="true" /><select idref="V-244551" selected="true" /><select idref="V-244552" selected="true" /><select idref="V-244553" selected="true" /><select idref="V-244554" selected="true" /><select idref="V-250315" selected="true" /><select idref="V-250316" selected="true" /><select idref="V-250317" selected="true" /><select idref="V-251706" selected="true" /><select idref="V-251707" selected="true" /><select idref="V-251708" selected="true" /><select idref="V-251709" selected="true" /><select idref="V-251710" selected="true" /><select idref="V-251711" selected="true" /><select idref="V-251712" selected="true" /><select idref="V-251713" selected="true" /><select idref="V-251716" selected="true" /><select idref="V-251718" selected="true" /><select idref="V-254520" selected="true" /><select idref="V-256973" selected="true" /><select idref="V-256974" selected="true" /><select idref="V-257258" selected="true" /><select idref="V-268322" selected="true" /><select idref="V-272482" selected="true" /><select idref="V-272483" selected="true" /><select idref="V-272484" selected="true" /><select idref="V-274877" selected="true" /><select idref="V-279929" selected="true" /><select idref="V-279930" selected="true" /><select idref="V-279931" selected="true" /><select idref="V-279932" selected="true" /><select idref="V-279933" selected="true" /></Profile><Profile id="MAC-1_Public"><title>I - Mission Critical Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-230221" selected="true" /><select idref="V-230222" selected="true" /><select idref="V-230223" selected="true" /><select idref="V-230224" selected="true" /><select idref="V-230225" selected="true" /><select idref="V-230226" selected="true" /><select idref="V-230227" selected="true" /><select idref="V-230228" selected="true" /><select idref="V-230229" selected="true" /><select idref="V-230230" selected="true" /><select idref="V-230231" selected="true" /><select idref="V-230232" selected="true" /><select idref="V-230233" selected="true" /><select idref="V-230234" selected="true" /><select idref="V-230235" selected="true" /><select idref="V-230236" selected="true" /><select idref="V-230237" selected="true" /><select idref="V-230238" selected="true" /><select idref="V-230239" selected="true" /><select idref="V-230240" selected="true" /><select idref="V-230241" selected="true" /><select idref="V-230243" selected="true" /><select idref="V-230244" selected="true" /><select idref="V-230245" selected="true" /><select idref="V-230246" selected="true" /><select idref="V-230247" selected="true" /><select idref="V-230248" selected="true" /><select idref="V-230249" selected="true" /><select idref="V-230250" selected="true" /><select idref="V-230251" selected="true" /><select idref="V-230252" selected="true" /><select idref="V-230253" selected="true" /><select idref="V-230257" selected="true" /><select idref="V-230258" selected="true" /><select idref="V-230259" selected="true" /><select idref="V-230260" selected="true" /><select idref="V-230261" selected="true" /><select idref="V-230262" selected="true" /><select idref="V-230263" selected="true" /><select idref="V-230264" selected="true" /><select idref="V-230265" selected="true" /><select idref="V-230266" selected="true" /><select idref="V-230267" selected="true" /><select idref="V-230268" selected="true" /><select idref="V-230269" selected="true" /><select idref="V-230270" selected="true" /><select idref="V-230271" selected="true" /><select idref="V-230272" selected="true" /><select idref="V-230273" selected="true" /><select idref="V-230274" selected="true" /><select idref="V-230275" selected="true" /><select idref="V-230276" selected="true" /><select idref="V-230277" selected="true" /><select idref="V-230278" selected="true" /><select idref="V-230279" selected="true" /><select idref="V-230280" selected="true" /><select idref="V-230281" selected="true" /><select idref="V-230282" selected="true" /><select idref="V-230283" selected="true" /><select idref="V-230284" selected="true" /><select idref="V-230285" selected="true" /><select idref="V-230286" selected="true" /><select idref="V-230287" selected="true" /><select idref="V-230288" selected="true" /><select idref="V-230290" selected="true" /><select idref="V-230291" selected="true" /><select idref="V-230292" selected="true" /><select idref="V-230293" selected="true" /><select idref="V-230294" selected="true" /><select idref="V-230295" selected="true" /><select idref="V-230296" selected="true" /><select idref="V-230298" selected="true" /><select idref="V-230299" selected="true" /><select idref="V-230300" selected="true" /><select idref="V-230301" selected="true" /><select idref="V-230302" selected="true" /><select idref="V-230303" selected="true" /><select idref="V-230304" selected="true" /><select idref="V-230305" selected="true" /><select idref="V-230306" selected="true" /><select idref="V-230307" selected="true" /><select idref="V-230308" selected="true" /><select idref="V-230310" selected="true" /><select idref="V-230311" selected="true" /><select idref="V-230312" selected="true" /><select idref="V-230313" selected="true" /><select idref="V-230314" selected="true" /><select idref="V-230315" selected="true" /><select idref="V-230316" selected="true" /><select idref="V-230317" selected="true" /><select idref="V-230318" selected="true" /><select idref="V-230319" selected="true" /><select idref="V-230320" selected="true" /><select idref="V-230321" selected="true" /><select idref="V-230322" selected="true" /><select idref="V-230323" selected="true" /><select idref="V-230324" selected="true" /><select idref="V-230325" selected="true" /><select idref="V-230326" selected="true" /><select idref="V-230327" selected="true" /><select idref="V-230328" selected="true" /><select idref="V-230329" selected="true" /><select idref="V-230330" selected="true" /><select idref="V-230332" selected="true" /><select idref="V-230333" selected="true" /><select idref="V-230334" selected="true" /><select idref="V-230335" selected="true" /><select idref="V-230336" selected="true" /><select idref="V-230337" selected="true" /><select idref="V-230338" selected="true" /><select idref="V-230339" selected="true" /><select idref="V-230340" selected="true" /><select idref="V-230341" selected="true" /><select idref="V-230342" selected="true" /><select idref="V-230343" selected="true" /><select idref="V-230344" selected="true" /><select idref="V-230345" selected="true" /><select idref="V-230346" selected="true" /><select idref="V-230347" selected="true" /><select idref="V-230351" selected="true" /><select idref="V-230352" selected="true" /><select idref="V-230354" selected="true" /><select idref="V-230355" selected="true" /><select idref="V-230356" selected="true" /><select idref="V-230357" selected="true" /><select idref="V-230358" selected="true" /><select idref="V-230359" selected="true" /><select idref="V-230360" selected="true" /><select idref="V-230361" selected="true" /><select idref="V-230362" selected="true" /><select idref="V-230363" selected="true" /><select idref="V-230364" selected="true" /><select idref="V-230365" selected="true" /><select idref="V-230366" selected="true" /><select idref="V-230367" selected="true" /><select idref="V-230369" selected="true" /><select idref="V-230370" selected="true" /><select idref="V-230371" selected="true" /><select idref="V-230372" selected="true" /><select idref="V-230373" selected="true" /><select idref="V-230374" selected="true" /><select idref="V-230375" selected="true" /><select idref="V-230376" selected="true" /><select idref="V-230377" selected="true" /><select idref="V-230378" selected="true" /><select idref="V-230379" selected="true" /><select idref="V-230380" selected="true" /><select idref="V-230382" selected="true" /><select idref="V-230383" selected="true" /><select idref="V-230384" selected="true" /><select idref="V-230385" selected="true" /><select idref="V-230386" selected="true" /><select idref="V-230387" selected="true" /><select idref="V-230388" selected="true" /><select idref="V-230389" selected="true" /><select idref="V-230390" selected="true" /><select idref="V-230392" selected="true" /><select idref="V-230393" selected="true" /><select idref="V-230394" selected="true" /><select idref="V-230395" selected="true" /><select idref="V-230396" selected="true" /><select idref="V-230397" selected="true" /><select idref="V-230398" selected="true" /><select idref="V-230399" selected="true" /><select idref="V-230400" selected="true" /><select idref="V-230401" selected="true" /><select idref="V-230402" selected="true" /><select idref="V-230403" selected="true" /><select idref="V-230404" selected="true" /><select idref="V-230405" selected="true" /><select idref="V-230406" selected="true" /><select idref="V-230407" selected="true" /><select idref="V-230408" selected="true" /><select idref="V-230409" selected="true" /><select idref="V-230410" selected="true" /><select idref="V-230411" selected="true" /><select idref="V-230412" selected="true" /><select idref="V-230413" selected="true" /><select idref="V-230418" selected="true" /><select idref="V-230419" selected="true" /><select idref="V-230421" selected="true" /><select idref="V-230422" selected="true" /><select idref="V-230423" selected="true" /><select idref="V-230424" selected="true" /><select idref="V-230425" selected="true" /><select idref="V-230426" selected="true" /><select idref="V-230427" selected="true" /><select idref="V-230428" selected="true" /><select idref="V-230429" selected="true" /><select idref="V-230430" selected="true" /><select idref="V-230431" selected="true" /><select idref="V-230432" selected="true" /><select idref="V-230433" selected="true" /><select idref="V-230434" selected="true" /><select idref="V-230435" selected="true" /><select idref="V-230436" selected="true" /><select idref="V-230437" selected="true" /><select idref="V-230438" selected="true" /><select idref="V-230439" selected="true" /><select idref="V-230444" selected="true" /><select idref="V-230446" selected="true" /><select idref="V-230447" selected="true" /><select idref="V-230448" selected="true" /><select idref="V-230449" selected="true" /><select idref="V-230455" selected="true" /><select idref="V-230456" selected="true" /><select idref="V-230462" selected="true" /><select idref="V-230463" selected="true" /><select idref="V-230464" selected="true" /><select idref="V-230465" selected="true" /><select idref="V-230466" selected="true" /><select idref="V-230467" selected="true" /><select idref="V-230468" selected="true" /><select idref="V-230469" selected="true" /><select idref="V-230470" selected="true" /><select idref="V-230471" selected="true" /><select idref="V-230472" selected="true" /><select idref="V-230473" selected="true" /><select idref="V-230474" selected="true" /><select idref="V-230475" selected="true" /><select idref="V-230476" selected="true" /><select idref="V-230477" selected="true" /><select idref="V-230478" selected="true" /><select idref="V-230479" selected="true" /><select idref="V-230480" selected="true" /><select idref="V-230481" selected="true" /><select idref="V-230482" selected="true" /><select idref="V-230483" selected="true" /><select idref="V-230484" selected="true" /><select idref="V-230485" selected="true" /><select idref="V-230486" selected="true" /><select idref="V-230487" selected="true" /><select idref="V-230488" selected="true" /><select idref="V-230489" selected="true" /><select idref="V-230491" selected="true" /><select idref="V-230492" selected="true" /><select idref="V-230493" selected="true" /><select idref="V-230494" selected="true" /><select idref="V-230495" selected="true" /><select idref="V-230496" selected="true" /><select idref="V-230497" selected="true" /><select idref="V-230498" selected="true" /><select idref="V-230499" selected="true" /><select idref="V-230500" selected="true" /><select idref="V-230502" selected="true" /><select idref="V-230503" selected="true" /><select idref="V-230504" selected="true" /><select idref="V-230505" selected="true" /><select idref="V-230506" selected="true" /><select idref="V-230507" selected="true" /><select idref="V-230508" selected="true" /><select idref="V-230509" selected="true" /><select idref="V-230510" selected="true" /><select idref="V-230511" selected="true" /><select idref="V-230512" selected="true" /><select idref="V-230513" selected="true" /><select idref="V-230514" selected="true" /><select idref="V-230515" selected="true" /><select idref="V-230516" selected="true" /><select idref="V-230517" selected="true" /><select idref="V-230518" selected="true" /><select idref="V-230519" selected="true" /><select idref="V-230520" selected="true" /><select idref="V-230521" selected="true" /><select idref="V-230522" selected="true" /><select idref="V-230523" selected="true" /><select idref="V-230524" selected="true" /><select idref="V-230525" selected="true" /><select idref="V-230526" selected="true" /><select idref="V-230527" selected="true" /><select idref="V-230529" selected="true" /><select idref="V-230530" selected="true" /><select idref="V-230531" selected="true" /><select idref="V-230532" selected="true" /><select idref="V-230533" selected="true" /><select idref="V-230534" selected="true" /><select idref="V-230535" selected="true" /><select idref="V-230536" selected="true" /><select idref="V-230537" selected="true" /><select idref="V-230538" selected="true" /><select idref="V-230539" selected="true" /><select idref="V-230540" selected="true" /><select idref="V-230541" selected="true" /><select idref="V-230542" selected="true" /><select idref="V-230543" selected="true" /><select idref="V-230544" selected="true" /><select idref="V-230545" selected="true" /><select idref="V-230546" selected="true" /><select idref="V-230547" selected="true" /><select idref="V-230548" selected="true" /><select idref="V-230549" selected="true" /><select idref="V-230550" selected="true" /><select idref="V-230551" selected="true" /><select idref="V-230552" selected="true" /><select idref="V-230553" selected="true" /><select idref="V-230554" selected="true" /><select idref="V-230555" selected="true" /><select idref="V-230556" selected="true" /><select idref="V-230557" selected="true" /><select idref="V-230558" selected="true" /><select idref="V-230559" selected="true" /><select idref="V-230560" selected="true" /><select idref="V-230561" selected="true" /><select idref="V-237640" selected="true" /><select idref="V-237641" selected="true" /><select idref="V-237642" selected="true" /><select idref="V-237643" selected="true" /><select idref="V-244519" selected="true" /><select idref="V-244521" selected="true" /><select idref="V-244522" selected="true" /><select idref="V-244523" selected="true" /><select idref="V-244524" selected="true" /><select idref="V-244525" selected="true" /><select idref="V-244527" selected="true" /><select idref="V-244528" selected="true" /><select idref="V-244529" selected="true" /><select idref="V-244530" selected="true" /><select idref="V-244531" selected="true" /><select idref="V-244532" selected="true" /><select idref="V-244533" selected="true" /><select idref="V-244534" selected="true" /><select idref="V-244535" selected="true" /><select idref="V-244536" selected="true" /><select idref="V-244538" selected="true" /><select idref="V-244539" selected="true" /><select idref="V-244541" selected="true" /><select idref="V-244542" selected="true" /><select idref="V-244543" selected="true" /><select idref="V-244544" selected="true" /><select idref="V-244545" selected="true" /><select idref="V-244546" selected="true" /><select idref="V-244547" selected="true" /><select idref="V-244548" selected="true" /><select idref="V-244549" selected="true" /><select idref="V-244550" selected="true" /><select idref="V-244551" selected="true" /><select idref="V-244552" selected="true" /><select idref="V-244553" selected="true" /><select idref="V-244554" selected="true" /><select idref="V-250315" selected="true" /><select idref="V-250316" selected="true" /><select idref="V-250317" selected="true" /><select idref="V-251706" selected="true" /><select idref="V-251707" selected="true" /><select idref="V-251708" selected="true" /><select idref="V-251709" selected="true" /><select idref="V-251710" selected="true" /><select idref="V-251711" selected="true" /><select idref="V-251712" selected="true" /><select idref="V-251713" selected="true" /><select idref="V-251716" selected="true" /><select idref="V-251718" selected="true" /><select idref="V-254520" selected="true" /><select idref="V-256973" selected="true" /><select idref="V-256974" selected="true" /><select idref="V-257258" selected="true" /><select idref="V-268322" selected="true" /><select idref="V-272482" selected="true" /><select idref="V-272483" selected="true" /><select idref="V-272484" selected="true" /><select idref="V-274877" selected="true" /><select idref="V-279929" selected="true" /><select idref="V-279930" selected="true" /><select idref="V-279931" selected="true" /><select idref="V-279932" selected="true" /><select idref="V-279933" selected="true" /></Profile><Profile id="MAC-1_Sensitive"><title>I - Mission Critical Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-230221" selected="true" /><select idref="V-230222" selected="true" /><select idref="V-230223" selected="true" /><select idref="V-230224" selected="true" /><select idref="V-230225" selected="true" /><select idref="V-230226" selected="true" /><select idref="V-230227" selected="true" /><select idref="V-230228" selected="true" /><select idref="V-230229" selected="true" /><select idref="V-230230" selected="true" /><select idref="V-230231" selected="true" /><select idref="V-230232" selected="true" /><select idref="V-230233" selected="true" /><select idref="V-230234" selected="true" /><select idref="V-230235" selected="true" /><select idref="V-230236" selected="true" /><select idref="V-230237" selected="true" /><select idref="V-230238" selected="true" /><select idref="V-230239" selected="true" /><select idref="V-230240" selected="true" /><select idref="V-230241" selected="true" /><select idref="V-230243" selected="true" /><select idref="V-230244" selected="true" /><select idref="V-230245" selected="true" /><select idref="V-230246" selected="true" /><select idref="V-230247" selected="true" /><select idref="V-230248" selected="true" /><select idref="V-230249" selected="true" /><select idref="V-230250" selected="true" /><select idref="V-230251" selected="true" /><select idref="V-230252" selected="true" /><select idref="V-230253" selected="true" /><select idref="V-230257" selected="true" /><select idref="V-230258" selected="true" /><select idref="V-230259" selected="true" /><select idref="V-230260" selected="true" /><select idref="V-230261" selected="true" /><select idref="V-230262" selected="true" /><select idref="V-230263" selected="true" /><select idref="V-230264" selected="true" /><select idref="V-230265" selected="true" /><select idref="V-230266" selected="true" /><select idref="V-230267" selected="true" /><select idref="V-230268" selected="true" /><select idref="V-230269" selected="true" /><select idref="V-230270" selected="true" /><select idref="V-230271" selected="true" /><select idref="V-230272" selected="true" /><select idref="V-230273" selected="true" /><select idref="V-230274" selected="true" /><select idref="V-230275" selected="true" /><select idref="V-230276" selected="true" /><select idref="V-230277" selected="true" /><select idref="V-230278" selected="true" /><select idref="V-230279" selected="true" /><select idref="V-230280" selected="true" /><select idref="V-230281" selected="true" /><select idref="V-230282" selected="true" /><select idref="V-230283" selected="true" /><select idref="V-230284" selected="true" /><select idref="V-230285" selected="true" /><select idref="V-230286" selected="true" /><select idref="V-230287" selected="true" /><select idref="V-230288" selected="true" /><select idref="V-230290" selected="true" /><select idref="V-230291" selected="true" /><select idref="V-230292" selected="true" /><select idref="V-230293" selected="true" /><select idref="V-230294" selected="true" /><select idref="V-230295" selected="true" /><select idref="V-230296" selected="true" /><select idref="V-230298" selected="true" /><select idref="V-230299" selected="true" /><select idref="V-230300" selected="true" /><select idref="V-230301" selected="true" /><select idref="V-230302" selected="true" /><select idref="V-230303" selected="true" /><select idref="V-230304" selected="true" /><select idref="V-230305" selected="true" /><select idref="V-230306" selected="true" /><select idref="V-230307" selected="true" /><select idref="V-230308" selected="true" /><select idref="V-230310" selected="true" /><select idref="V-230311" selected="true" /><select idref="V-230312" selected="true" /><select idref="V-230313" selected="true" /><select idref="V-230314" selected="true" /><select idref="V-230315" selected="true" /><select idref="V-230316" selected="true" /><select idref="V-230317" selected="true" /><select idref="V-230318" selected="true" /><select idref="V-230319" selected="true" /><select idref="V-230320" selected="true" /><select idref="V-230321" selected="true" /><select idref="V-230322" selected="true" /><select idref="V-230323" selected="true" /><select idref="V-230324" selected="true" /><select idref="V-230325" selected="true" /><select idref="V-230326" selected="true" /><select idref="V-230327" selected="true" /><select idref="V-230328" selected="true" /><select idref="V-230329" selected="true" /><select idref="V-230330" selected="true" /><select idref="V-230332" selected="true" /><select idref="V-230333" selected="true" /><select idref="V-230334" selected="true" /><select idref="V-230335" selected="true" /><select idref="V-230336" selected="true" /><select idref="V-230337" selected="true" /><select idref="V-230338" selected="true" /><select idref="V-230339" selected="true" /><select idref="V-230340" selected="true" /><select idref="V-230341" selected="true" /><select idref="V-230342" selected="true" /><select idref="V-230343" selected="true" /><select idref="V-230344" selected="true" /><select idref="V-230345" selected="true" /><select idref="V-230346" selected="true" /><select idref="V-230347" selected="true" /><select idref="V-230351" selected="true" /><select idref="V-230352" selected="true" /><select idref="V-230354" selected="true" /><select idref="V-230355" selected="true" /><select idref="V-230356" selected="true" /><select idref="V-230357" selected="true" /><select idref="V-230358" selected="true" /><select idref="V-230359" selected="true" /><select idref="V-230360" selected="true" /><select idref="V-230361" selected="true" /><select idref="V-230362" selected="true" /><select idref="V-230363" selected="true" /><select idref="V-230364" selected="true" /><select idref="V-230365" selected="true" /><select idref="V-230366" selected="true" /><select idref="V-230367" selected="true" /><select idref="V-230369" selected="true" /><select idref="V-230370" selected="true" /><select idref="V-230371" selected="true" /><select idref="V-230372" selected="true" /><select idref="V-230373" selected="true" /><select idref="V-230374" selected="true" /><select idref="V-230375" selected="true" /><select idref="V-230376" selected="true" /><select idref="V-230377" selected="true" /><select idref="V-230378" selected="true" /><select idref="V-230379" selected="true" /><select idref="V-230380" selected="true" /><select idref="V-230382" selected="true" /><select idref="V-230383" selected="true" /><select idref="V-230384" selected="true" /><select idref="V-230385" selected="true" /><select idref="V-230386" selected="true" /><select idref="V-230387" selected="true" /><select idref="V-230388" selected="true" /><select idref="V-230389" selected="true" /><select idref="V-230390" selected="true" /><select idref="V-230392" selected="true" /><select idref="V-230393" selected="true" /><select idref="V-230394" selected="true" /><select idref="V-230395" selected="true" /><select idref="V-230396" selected="true" /><select idref="V-230397" selected="true" /><select idref="V-230398" selected="true" /><select idref="V-230399" selected="true" /><select idref="V-230400" selected="true" /><select idref="V-230401" selected="true" /><select idref="V-230402" selected="true" /><select idref="V-230403" selected="true" /><select idref="V-230404" selected="true" /><select idref="V-230405" selected="true" /><select idref="V-230406" selected="true" /><select idref="V-230407" selected="true" /><select idref="V-230408" selected="true" /><select idref="V-230409" selected="true" /><select idref="V-230410" selected="true" /><select idref="V-230411" selected="true" /><select idref="V-230412" selected="true" /><select idref="V-230413" selected="true" /><select idref="V-230418" selected="true" /><select idref="V-230419" selected="true" /><select idref="V-230421" selected="true" /><select idref="V-230422" selected="true" /><select idref="V-230423" selected="true" /><select idref="V-230424" selected="true" /><select idref="V-230425" selected="true" /><select idref="V-230426" selected="true" /><select idref="V-230427" selected="true" /><select idref="V-230428" selected="true" /><select idref="V-230429" selected="true" /><select idref="V-230430" selected="true" /><select idref="V-230431" selected="true" /><select idref="V-230432" selected="true" /><select idref="V-230433" selected="true" /><select idref="V-230434" selected="true" /><select idref="V-230435" selected="true" /><select idref="V-230436" selected="true" /><select idref="V-230437" selected="true" /><select idref="V-230438" selected="true" /><select idref="V-230439" selected="true" /><select idref="V-230444" selected="true" /><select idref="V-230446" selected="true" /><select idref="V-230447" selected="true" /><select idref="V-230448" selected="true" /><select idref="V-230449" selected="true" /><select idref="V-230455" selected="true" /><select idref="V-230456" selected="true" /><select idref="V-230462" selected="true" /><select idref="V-230463" selected="true" /><select idref="V-230464" selected="true" /><select idref="V-230465" selected="true" /><select idref="V-230466" selected="true" /><select idref="V-230467" selected="true" /><select idref="V-230468" selected="true" /><select idref="V-230469" selected="true" /><select idref="V-230470" selected="true" /><select idref="V-230471" selected="true" /><select idref="V-230472" selected="true" /><select idref="V-230473" selected="true" /><select idref="V-230474" selected="true" /><select idref="V-230475" selected="true" /><select idref="V-230476" selected="true" /><select idref="V-230477" selected="true" /><select idref="V-230478" selected="true" /><select idref="V-230479" selected="true" /><select idref="V-230480" selected="true" /><select idref="V-230481" selected="true" /><select idref="V-230482" selected="true" /><select idref="V-230483" selected="true" /><select idref="V-230484" selected="true" /><select idref="V-230485" selected="true" /><select idref="V-230486" selected="true" /><select idref="V-230487" selected="true" /><select idref="V-230488" selected="true" /><select idref="V-230489" selected="true" /><select idref="V-230491" selected="true" /><select idref="V-230492" selected="true" /><select idref="V-230493" selected="true" /><select idref="V-230494" selected="true" /><select idref="V-230495" selected="true" /><select idref="V-230496" selected="true" /><select idref="V-230497" selected="true" /><select idref="V-230498" selected="true" /><select idref="V-230499" selected="true" /><select idref="V-230500" selected="true" /><select idref="V-230502" selected="true" /><select idref="V-230503" selected="true" /><select idref="V-230504" selected="true" /><select idref="V-230505" selected="true" /><select idref="V-230506" selected="true" /><select idref="V-230507" selected="true" /><select idref="V-230508" selected="true" /><select idref="V-230509" selected="true" /><select idref="V-230510" selected="true" /><select idref="V-230511" selected="true" /><select idref="V-230512" selected="true" /><select idref="V-230513" selected="true" /><select idref="V-230514" selected="true" /><select idref="V-230515" selected="true" /><select idref="V-230516" selected="true" /><select idref="V-230517" selected="true" /><select idref="V-230518" selected="true" /><select idref="V-230519" selected="true" /><select idref="V-230520" selected="true" /><select idref="V-230521" selected="true" /><select idref="V-230522" selected="true" /><select idref="V-230523" selected="true" /><select idref="V-230524" selected="true" /><select idref="V-230525" selected="true" /><select idref="V-230526" selected="true" /><select idref="V-230527" selected="true" /><select idref="V-230529" selected="true" /><select idref="V-230530" selected="true" /><select idref="V-230531" selected="true" /><select idref="V-230532" selected="true" /><select idref="V-230533" selected="true" /><select idref="V-230534" selected="true" /><select idref="V-230535" selected="true" /><select idref="V-230536" selected="true" /><select idref="V-230537" selected="true" /><select idref="V-230538" selected="true" /><select idref="V-230539" selected="true" /><select idref="V-230540" selected="true" /><select idref="V-230541" selected="true" /><select idref="V-230542" selected="true" /><select idref="V-230543" selected="true" /><select idref="V-230544" selected="true" /><select idref="V-230545" selected="true" /><select idref="V-230546" selected="true" /><select idref="V-230547" selected="true" /><select idref="V-230548" selected="true" /><select idref="V-230549" selected="true" /><select idref="V-230550" selected="true" /><select idref="V-230551" selected="true" /><select idref="V-230552" selected="true" /><select idref="V-230553" selected="true" /><select idref="V-230554" selected="true" /><select idref="V-230555" selected="true" /><select idref="V-230556" selected="true" /><select idref="V-230557" selected="true" /><select idref="V-230558" selected="true" /><select idref="V-230559" selected="true" /><select idref="V-230560" selected="true" /><select idref="V-230561" selected="true" /><select idref="V-237640" selected="true" /><select idref="V-237641" selected="true" /><select idref="V-237642" selected="true" /><select idref="V-237643" selected="true" /><select idref="V-244519" selected="true" /><select idref="V-244521" selected="true" /><select idref="V-244522" selected="true" /><select idref="V-244523" selected="true" /><select idref="V-244524" selected="true" /><select idref="V-244525" selected="true" /><select idref="V-244527" selected="true" /><select idref="V-244528" selected="true" /><select idref="V-244529" selected="true" /><select idref="V-244530" selected="true" /><select idref="V-244531" selected="true" /><select idref="V-244532" selected="true" /><select idref="V-244533" selected="true" /><select idref="V-244534" selected="true" /><select idref="V-244535" selected="true" /><select idref="V-244536" selected="true" /><select idref="V-244538" selected="true" /><select idref="V-244539" selected="true" /><select idref="V-244541" selected="true" /><select idref="V-244542" selected="true" /><select idref="V-244543" selected="true" /><select idref="V-244544" selected="true" /><select idref="V-244545" selected="true" /><select idref="V-244546" selected="true" /><select idref="V-244547" selected="true" /><select idref="V-244548" selected="true" /><select idref="V-244549" selected="true" /><select idref="V-244550" selected="true" /><select idref="V-244551" selected="true" /><select idref="V-244552" selected="true" /><select idref="V-244553" selected="true" /><select idref="V-244554" selected="true" /><select idref="V-250315" selected="true" /><select idref="V-250316" selected="true" /><select idref="V-250317" selected="true" /><select idref="V-251706" selected="true" /><select idref="V-251707" selected="true" /><select idref="V-251708" selected="true" /><select idref="V-251709" selected="true" /><select idref="V-251710" selected="true" /><select idref="V-251711" selected="true" /><select idref="V-251712" selected="true" /><select idref="V-251713" selected="true" /><select idref="V-251716" selected="true" /><select idref="V-251718" selected="true" /><select idref="V-254520" selected="true" /><select idref="V-256973" selected="true" /><select idref="V-256974" selected="true" /><select idref="V-257258" selected="true" /><select idref="V-268322" selected="true" /><select idref="V-272482" selected="true" /><select idref="V-272483" selected="true" /><select idref="V-272484" selected="true" /><select idref="V-274877" selected="true" /><select idref="V-279929" selected="true" /><select idref="V-279930" selected="true" /><select idref="V-279931" selected="true" /><select idref="V-279932" selected="true" /><select idref="V-279933" selected="true" /></Profile><Profile id="MAC-2_Classified"><title>II - Mission Support Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-230221" selected="true" /><select idref="V-230222" selected="true" /><select idref="V-230223" selected="true" /><select idref="V-230224" selected="true" /><select idref="V-230225" selected="true" /><select idref="V-230226" selected="true" /><select idref="V-230227" selected="true" /><select idref="V-230228" selected="true" /><select idref="V-230229" selected="true" /><select idref="V-230230" selected="true" /><select idref="V-230231" selected="true" /><select idref="V-230232" selected="true" /><select idref="V-230233" selected="true" /><select idref="V-230234" selected="true" /><select idref="V-230235" selected="true" /><select idref="V-230236" selected="true" /><select idref="V-230237" selected="true" /><select idref="V-230238" selected="true" /><select idref="V-230239" selected="true" /><select idref="V-230240" selected="true" /><select idref="V-230241" selected="true" /><select idref="V-230243" selected="true" /><select idref="V-230244" selected="true" /><select idref="V-230245" selected="true" /><select idref="V-230246" selected="true" /><select idref="V-230247" selected="true" /><select idref="V-230248" selected="true" /><select idref="V-230249" selected="true" /><select idref="V-230250" selected="true" /><select idref="V-230251" selected="true" /><select idref="V-230252" selected="true" /><select idref="V-230253" selected="true" /><select idref="V-230257" selected="true" /><select idref="V-230258" selected="true" /><select idref="V-230259" selected="true" /><select idref="V-230260" selected="true" /><select idref="V-230261" selected="true" /><select idref="V-230262" selected="true" /><select idref="V-230263" selected="true" /><select idref="V-230264" selected="true" /><select idref="V-230265" selected="true" /><select idref="V-230266" selected="true" /><select idref="V-230267" selected="true" /><select idref="V-230268" selected="true" /><select idref="V-230269" selected="true" /><select idref="V-230270" selected="true" /><select idref="V-230271" selected="true" /><select idref="V-230272" selected="true" /><select idref="V-230273" selected="true" /><select idref="V-230274" selected="true" /><select idref="V-230275" selected="true" /><select idref="V-230276" selected="true" /><select idref="V-230277" selected="true" /><select idref="V-230278" selected="true" /><select idref="V-230279" selected="true" /><select idref="V-230280" selected="true" /><select idref="V-230281" selected="true" /><select idref="V-230282" selected="true" /><select idref="V-230283" selected="true" /><select idref="V-230284" selected="true" /><select idref="V-230285" selected="true" /><select idref="V-230286" selected="true" /><select idref="V-230287" selected="true" /><select idref="V-230288" selected="true" /><select idref="V-230290" selected="true" /><select idref="V-230291" selected="true" /><select idref="V-230292" selected="true" /><select idref="V-230293" selected="true" /><select idref="V-230294" selected="true" /><select idref="V-230295" selected="true" /><select idref="V-230296" selected="true" /><select idref="V-230298" selected="true" /><select idref="V-230299" selected="true" /><select idref="V-230300" selected="true" /><select idref="V-230301" selected="true" /><select idref="V-230302" selected="true" /><select idref="V-230303" selected="true" /><select idref="V-230304" selected="true" /><select idref="V-230305" selected="true" /><select idref="V-230306" selected="true" /><select idref="V-230307" selected="true" /><select idref="V-230308" selected="true" /><select idref="V-230310" selected="true" /><select idref="V-230311" selected="true" /><select idref="V-230312" selected="true" /><select idref="V-230313" selected="true" /><select idref="V-230314" selected="true" /><select idref="V-230315" selected="true" /><select idref="V-230316" selected="true" /><select idref="V-230317" selected="true" /><select idref="V-230318" selected="true" /><select idref="V-230319" selected="true" /><select idref="V-230320" selected="true" /><select idref="V-230321" selected="true" /><select idref="V-230322" selected="true" /><select idref="V-230323" selected="true" /><select idref="V-230324" selected="true" /><select idref="V-230325" selected="true" /><select idref="V-230326" selected="true" /><select idref="V-230327" selected="true" /><select idref="V-230328" selected="true" /><select idref="V-230329" selected="true" /><select idref="V-230330" selected="true" /><select idref="V-230332" selected="true" /><select idref="V-230333" selected="true" /><select idref="V-230334" selected="true" /><select idref="V-230335" selected="true" /><select idref="V-230336" selected="true" /><select idref="V-230337" selected="true" /><select idref="V-230338" selected="true" /><select idref="V-230339" selected="true" /><select idref="V-230340" selected="true" /><select idref="V-230341" selected="true" /><select idref="V-230342" selected="true" /><select idref="V-230343" selected="true" /><select idref="V-230344" selected="true" /><select idref="V-230345" selected="true" /><select idref="V-230346" selected="true" /><select idref="V-230347" selected="true" /><select idref="V-230351" selected="true" /><select idref="V-230352" selected="true" /><select idref="V-230354" selected="true" /><select idref="V-230355" selected="true" /><select idref="V-230356" selected="true" /><select idref="V-230357" selected="true" /><select idref="V-230358" selected="true" /><select idref="V-230359" selected="true" /><select idref="V-230360" selected="true" /><select idref="V-230361" selected="true" /><select idref="V-230362" selected="true" /><select idref="V-230363" selected="true" /><select idref="V-230364" selected="true" /><select idref="V-230365" selected="true" /><select idref="V-230366" selected="true" /><select idref="V-230367" selected="true" /><select idref="V-230369" selected="true" /><select idref="V-230370" selected="true" /><select idref="V-230371" selected="true" /><select idref="V-230372" selected="true" /><select idref="V-230373" selected="true" /><select idref="V-230374" selected="true" /><select idref="V-230375" selected="true" /><select idref="V-230376" selected="true" /><select idref="V-230377" selected="true" /><select idref="V-230378" selected="true" /><select idref="V-230379" selected="true" /><select idref="V-230380" selected="true" /><select idref="V-230382" selected="true" /><select idref="V-230383" selected="true" /><select idref="V-230384" selected="true" /><select idref="V-230385" selected="true" /><select idref="V-230386" selected="true" /><select idref="V-230387" selected="true" /><select idref="V-230388" selected="true" /><select idref="V-230389" selected="true" /><select idref="V-230390" selected="true" /><select idref="V-230392" selected="true" /><select idref="V-230393" selected="true" /><select idref="V-230394" selected="true" /><select idref="V-230395" selected="true" /><select idref="V-230396" selected="true" /><select idref="V-230397" selected="true" /><select idref="V-230398" selected="true" /><select idref="V-230399" selected="true" /><select idref="V-230400" selected="true" /><select idref="V-230401" selected="true" /><select idref="V-230402" selected="true" /><select idref="V-230403" selected="true" /><select idref="V-230404" selected="true" /><select idref="V-230405" selected="true" /><select idref="V-230406" selected="true" /><select idref="V-230407" selected="true" /><select idref="V-230408" selected="true" /><select idref="V-230409" selected="true" /><select idref="V-230410" selected="true" /><select idref="V-230411" selected="true" /><select idref="V-230412" selected="true" /><select idref="V-230413" selected="true" /><select idref="V-230418" selected="true" /><select idref="V-230419" selected="true" /><select idref="V-230421" selected="true" /><select idref="V-230422" selected="true" /><select idref="V-230423" selected="true" /><select idref="V-230424" selected="true" /><select idref="V-230425" selected="true" /><select idref="V-230426" selected="true" /><select idref="V-230427" selected="true" /><select idref="V-230428" selected="true" /><select idref="V-230429" selected="true" /><select idref="V-230430" selected="true" /><select idref="V-230431" selected="true" /><select idref="V-230432" selected="true" /><select idref="V-230433" selected="true" /><select idref="V-230434" selected="true" /><select idref="V-230435" selected="true" /><select idref="V-230436" selected="true" /><select idref="V-230437" selected="true" /><select idref="V-230438" selected="true" /><select idref="V-230439" selected="true" /><select idref="V-230444" selected="true" /><select idref="V-230446" selected="true" /><select idref="V-230447" selected="true" /><select idref="V-230448" selected="true" /><select idref="V-230449" selected="true" /><select idref="V-230455" selected="true" /><select idref="V-230456" selected="true" /><select idref="V-230462" selected="true" /><select idref="V-230463" selected="true" /><select idref="V-230464" selected="true" /><select idref="V-230465" selected="true" /><select idref="V-230466" selected="true" /><select idref="V-230467" selected="true" /><select idref="V-230468" selected="true" /><select idref="V-230469" selected="true" /><select idref="V-230470" selected="true" /><select idref="V-230471" selected="true" /><select idref="V-230472" selected="true" /><select idref="V-230473" selected="true" /><select idref="V-230474" selected="true" /><select idref="V-230475" selected="true" /><select idref="V-230476" selected="true" /><select idref="V-230477" selected="true" /><select idref="V-230478" selected="true" /><select idref="V-230479" selected="true" /><select idref="V-230480" selected="true" /><select idref="V-230481" selected="true" /><select idref="V-230482" selected="true" /><select idref="V-230483" selected="true" /><select idref="V-230484" selected="true" /><select idref="V-230485" selected="true" /><select idref="V-230486" selected="true" /><select idref="V-230487" selected="true" /><select idref="V-230488" selected="true" /><select idref="V-230489" selected="true" /><select idref="V-230491" selected="true" /><select idref="V-230492" selected="true" /><select idref="V-230493" selected="true" /><select idref="V-230494" selected="true" /><select idref="V-230495" selected="true" /><select idref="V-230496" selected="true" /><select idref="V-230497" selected="true" /><select idref="V-230498" selected="true" /><select idref="V-230499" selected="true" /><select idref="V-230500" selected="true" /><select idref="V-230502" selected="true" /><select idref="V-230503" selected="true" /><select idref="V-230504" selected="true" /><select idref="V-230505" selected="true" /><select idref="V-230506" selected="true" /><select idref="V-230507" selected="true" /><select idref="V-230508" selected="true" /><select idref="V-230509" selected="true" /><select idref="V-230510" selected="true" /><select idref="V-230511" selected="true" /><select idref="V-230512" selected="true" /><select idref="V-230513" selected="true" /><select idref="V-230514" selected="true" /><select idref="V-230515" selected="true" /><select idref="V-230516" selected="true" /><select idref="V-230517" selected="true" /><select idref="V-230518" selected="true" /><select idref="V-230519" selected="true" /><select idref="V-230520" selected="true" /><select idref="V-230521" selected="true" /><select idref="V-230522" selected="true" /><select idref="V-230523" selected="true" /><select idref="V-230524" selected="true" /><select idref="V-230525" selected="true" /><select idref="V-230526" selected="true" /><select idref="V-230527" selected="true" /><select idref="V-230529" selected="true" /><select idref="V-230530" selected="true" /><select idref="V-230531" selected="true" /><select idref="V-230532" selected="true" /><select idref="V-230533" selected="true" /><select idref="V-230534" selected="true" /><select idref="V-230535" selected="true" /><select idref="V-230536" selected="true" /><select idref="V-230537" selected="true" /><select idref="V-230538" selected="true" /><select idref="V-230539" selected="true" /><select idref="V-230540" selected="true" /><select idref="V-230541" selected="true" /><select idref="V-230542" selected="true" /><select idref="V-230543" selected="true" /><select idref="V-230544" selected="true" /><select idref="V-230545" selected="true" /><select idref="V-230546" selected="true" /><select idref="V-230547" selected="true" /><select idref="V-230548" selected="true" /><select idref="V-230549" selected="true" /><select idref="V-230550" selected="true" /><select idref="V-230551" selected="true" /><select idref="V-230552" selected="true" /><select idref="V-230553" selected="true" /><select idref="V-230554" selected="true" /><select idref="V-230555" selected="true" /><select idref="V-230556" selected="true" /><select idref="V-230557" selected="true" /><select idref="V-230558" selected="true" /><select idref="V-230559" selected="true" /><select idref="V-230560" selected="true" /><select idref="V-230561" selected="true" /><select idref="V-237640" selected="true" /><select idref="V-237641" selected="true" /><select idref="V-237642" selected="true" /><select idref="V-237643" selected="true" /><select idref="V-244519" selected="true" /><select idref="V-244521" selected="true" /><select idref="V-244522" selected="true" /><select idref="V-244523" selected="true" /><select idref="V-244524" selected="true" /><select idref="V-244525" selected="true" /><select idref="V-244527" selected="true" /><select idref="V-244528" selected="true" /><select idref="V-244529" selected="true" /><select idref="V-244530" selected="true" /><select idref="V-244531" selected="true" /><select idref="V-244532" selected="true" /><select idref="V-244533" selected="true" /><select idref="V-244534" selected="true" /><select idref="V-244535" selected="true" /><select idref="V-244536" selected="true" /><select idref="V-244538" selected="true" /><select idref="V-244539" selected="true" /><select idref="V-244541" selected="true" /><select idref="V-244542" selected="true" /><select idref="V-244543" selected="true" /><select idref="V-244544" selected="true" /><select idref="V-244545" selected="true" /><select idref="V-244546" selected="true" /><select idref="V-244547" selected="true" /><select idref="V-244548" selected="true" /><select idref="V-244549" selected="true" /><select idref="V-244550" selected="true" /><select idref="V-244551" selected="true" /><select idref="V-244552" selected="true" /><select idref="V-244553" selected="true" /><select idref="V-244554" selected="true" /><select idref="V-250315" selected="true" /><select idref="V-250316" selected="true" /><select idref="V-250317" selected="true" /><select idref="V-251706" selected="true" /><select idref="V-251707" selected="true" /><select idref="V-251708" selected="true" /><select idref="V-251709" selected="true" /><select idref="V-251710" selected="true" /><select idref="V-251711" selected="true" /><select idref="V-251712" selected="true" /><select idref="V-251713" selected="true" /><select idref="V-251716" selected="true" /><select idref="V-251718" selected="true" /><select idref="V-254520" selected="true" /><select idref="V-256973" selected="true" /><select idref="V-256974" selected="true" /><select idref="V-257258" selected="true" /><select idref="V-268322" selected="true" /><select idref="V-272482" selected="true" /><select idref="V-272483" selected="true" /><select idref="V-272484" selected="true" /><select idref="V-274877" selected="true" /><select idref="V-279929" selected="true" /><select idref="V-279930" selected="true" /><select idref="V-279931" selected="true" /><select idref="V-279932" selected="true" /><select idref="V-279933" selected="true" /></Profile><Profile id="MAC-2_Public"><title>II - Mission Support Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-230221" selected="true" /><select idref="V-230222" selected="true" /><select idref="V-230223" selected="true" /><select idref="V-230224" selected="true" /><select idref="V-230225" selected="true" /><select idref="V-230226" selected="true" /><select idref="V-230227" selected="true" /><select idref="V-230228" selected="true" /><select idref="V-230229" selected="true" /><select idref="V-230230" selected="true" /><select idref="V-230231" selected="true" /><select idref="V-230232" selected="true" /><select idref="V-230233" selected="true" /><select idref="V-230234" selected="true" /><select idref="V-230235" selected="true" /><select idref="V-230236" selected="true" /><select idref="V-230237" selected="true" /><select idref="V-230238" selected="true" /><select idref="V-230239" selected="true" /><select idref="V-230240" selected="true" /><select idref="V-230241" selected="true" /><select idref="V-230243" selected="true" /><select idref="V-230244" selected="true" /><select idref="V-230245" selected="true" /><select idref="V-230246" selected="true" /><select idref="V-230247" selected="true" /><select idref="V-230248" selected="true" /><select idref="V-230249" selected="true" /><select idref="V-230250" selected="true" /><select idref="V-230251" selected="true" /><select idref="V-230252" selected="true" /><select idref="V-230253" selected="true" /><select idref="V-230257" selected="true" /><select idref="V-230258" selected="true" /><select idref="V-230259" selected="true" /><select idref="V-230260" selected="true" /><select idref="V-230261" selected="true" /><select idref="V-230262" selected="true" /><select idref="V-230263" selected="true" /><select idref="V-230264" selected="true" /><select idref="V-230265" selected="true" /><select idref="V-230266" selected="true" /><select idref="V-230267" selected="true" /><select idref="V-230268" selected="true" /><select idref="V-230269" selected="true" /><select idref="V-230270" selected="true" /><select idref="V-230271" selected="true" /><select idref="V-230272" selected="true" /><select idref="V-230273" selected="true" /><select idref="V-230274" selected="true" /><select idref="V-230275" selected="true" /><select idref="V-230276" selected="true" /><select idref="V-230277" selected="true" /><select idref="V-230278" selected="true" /><select idref="V-230279" selected="true" /><select idref="V-230280" selected="true" /><select idref="V-230281" selected="true" /><select idref="V-230282" selected="true" /><select idref="V-230283" selected="true" /><select idref="V-230284" selected="true" /><select idref="V-230285" selected="true" /><select idref="V-230286" selected="true" /><select idref="V-230287" selected="true" /><select idref="V-230288" selected="true" /><select idref="V-230290" selected="true" /><select idref="V-230291" selected="true" /><select idref="V-230292" selected="true" /><select idref="V-230293" selected="true" /><select idref="V-230294" selected="true" /><select idref="V-230295" selected="true" /><select idref="V-230296" selected="true" /><select idref="V-230298" selected="true" /><select idref="V-230299" selected="true" /><select idref="V-230300" selected="true" /><select idref="V-230301" selected="true" /><select idref="V-230302" selected="true" /><select idref="V-230303" selected="true" /><select idref="V-230304" selected="true" /><select idref="V-230305" selected="true" /><select idref="V-230306" selected="true" /><select idref="V-230307" selected="true" /><select idref="V-230308" selected="true" /><select idref="V-230310" selected="true" /><select idref="V-230311" selected="true" /><select idref="V-230312" selected="true" /><select idref="V-230313" selected="true" /><select idref="V-230314" selected="true" /><select idref="V-230315" selected="true" /><select idref="V-230316" selected="true" /><select idref="V-230317" selected="true" /><select idref="V-230318" selected="true" /><select idref="V-230319" selected="true" /><select idref="V-230320" selected="true" /><select idref="V-230321" selected="true" /><select idref="V-230322" selected="true" /><select idref="V-230323" selected="true" /><select idref="V-230324" selected="true" /><select idref="V-230325" selected="true" /><select idref="V-230326" selected="true" /><select idref="V-230327" selected="true" /><select idref="V-230328" selected="true" /><select idref="V-230329" selected="true" /><select idref="V-230330" selected="true" /><select idref="V-230332" selected="true" /><select idref="V-230333" selected="true" /><select idref="V-230334" selected="true" /><select idref="V-230335" selected="true" /><select idref="V-230336" selected="true" /><select idref="V-230337" selected="true" /><select idref="V-230338" selected="true" /><select idref="V-230339" selected="true" /><select idref="V-230340" selected="true" /><select idref="V-230341" selected="true" /><select idref="V-230342" selected="true" /><select idref="V-230343" selected="true" /><select idref="V-230344" selected="true" /><select idref="V-230345" selected="true" /><select idref="V-230346" selected="true" /><select idref="V-230347" selected="true" /><select idref="V-230351" selected="true" /><select idref="V-230352" selected="true" /><select idref="V-230354" selected="true" /><select idref="V-230355" selected="true" /><select idref="V-230356" selected="true" /><select idref="V-230357" selected="true" /><select idref="V-230358" selected="true" /><select idref="V-230359" selected="true" /><select idref="V-230360" selected="true" /><select idref="V-230361" selected="true" /><select idref="V-230362" selected="true" /><select idref="V-230363" selected="true" /><select idref="V-230364" selected="true" /><select idref="V-230365" selected="true" /><select idref="V-230366" selected="true" /><select idref="V-230367" selected="true" /><select idref="V-230369" selected="true" /><select idref="V-230370" selected="true" /><select idref="V-230371" selected="true" /><select idref="V-230372" selected="true" /><select idref="V-230373" selected="true" /><select idref="V-230374" selected="true" /><select idref="V-230375" selected="true" /><select idref="V-230376" selected="true" /><select idref="V-230377" selected="true" /><select idref="V-230378" selected="true" /><select idref="V-230379" selected="true" /><select idref="V-230380" selected="true" /><select idref="V-230382" selected="true" /><select idref="V-230383" selected="true" /><select idref="V-230384" selected="true" /><select idref="V-230385" selected="true" /><select idref="V-230386" selected="true" /><select idref="V-230387" selected="true" /><select idref="V-230388" selected="true" /><select idref="V-230389" selected="true" /><select idref="V-230390" selected="true" /><select idref="V-230392" selected="true" /><select idref="V-230393" selected="true" /><select idref="V-230394" selected="true" /><select idref="V-230395" selected="true" /><select idref="V-230396" selected="true" /><select idref="V-230397" selected="true" /><select idref="V-230398" selected="true" /><select idref="V-230399" selected="true" /><select idref="V-230400" selected="true" /><select idref="V-230401" selected="true" /><select idref="V-230402" selected="true" /><select idref="V-230403" selected="true" /><select idref="V-230404" selected="true" /><select idref="V-230405" selected="true" /><select idref="V-230406" selected="true" /><select idref="V-230407" selected="true" /><select idref="V-230408" selected="true" /><select idref="V-230409" selected="true" /><select idref="V-230410" selected="true" /><select idref="V-230411" selected="true" /><select idref="V-230412" selected="true" /><select idref="V-230413" selected="true" /><select idref="V-230418" selected="true" /><select idref="V-230419" selected="true" /><select idref="V-230421" selected="true" /><select idref="V-230422" selected="true" /><select idref="V-230423" selected="true" /><select idref="V-230424" selected="true" /><select idref="V-230425" selected="true" /><select idref="V-230426" selected="true" /><select idref="V-230427" selected="true" /><select idref="V-230428" selected="true" /><select idref="V-230429" selected="true" /><select idref="V-230430" selected="true" /><select idref="V-230431" selected="true" /><select idref="V-230432" selected="true" /><select idref="V-230433" selected="true" /><select idref="V-230434" selected="true" /><select idref="V-230435" selected="true" /><select idref="V-230436" selected="true" /><select idref="V-230437" selected="true" /><select idref="V-230438" selected="true" /><select idref="V-230439" selected="true" /><select idref="V-230444" selected="true" /><select idref="V-230446" selected="true" /><select idref="V-230447" selected="true" /><select idref="V-230448" selected="true" /><select idref="V-230449" selected="true" /><select idref="V-230455" selected="true" /><select idref="V-230456" selected="true" /><select idref="V-230462" selected="true" /><select idref="V-230463" selected="true" /><select idref="V-230464" selected="true" /><select idref="V-230465" selected="true" /><select idref="V-230466" selected="true" /><select idref="V-230467" selected="true" /><select idref="V-230468" selected="true" /><select idref="V-230469" selected="true" /><select idref="V-230470" selected="true" /><select idref="V-230471" selected="true" /><select idref="V-230472" selected="true" /><select idref="V-230473" selected="true" /><select idref="V-230474" selected="true" /><select idref="V-230475" selected="true" /><select idref="V-230476" selected="true" /><select idref="V-230477" selected="true" /><select idref="V-230478" selected="true" /><select idref="V-230479" selected="true" /><select idref="V-230480" selected="true" /><select idref="V-230481" selected="true" /><select idref="V-230482" selected="true" /><select idref="V-230483" selected="true" /><select idref="V-230484" selected="true" /><select idref="V-230485" selected="true" /><select idref="V-230486" selected="true" /><select idref="V-230487" selected="true" /><select idref="V-230488" selected="true" /><select idref="V-230489" selected="true" /><select idref="V-230491" selected="true" /><select idref="V-230492" selected="true" /><select idref="V-230493" selected="true" /><select idref="V-230494" selected="true" /><select idref="V-230495" selected="true" /><select idref="V-230496" selected="true" /><select idref="V-230497" selected="true" /><select idref="V-230498" selected="true" /><select idref="V-230499" selected="true" /><select idref="V-230500" selected="true" /><select idref="V-230502" selected="true" /><select idref="V-230503" selected="true" /><select idref="V-230504" selected="true" /><select idref="V-230505" selected="true" /><select idref="V-230506" selected="true" /><select idref="V-230507" selected="true" /><select idref="V-230508" selected="true" /><select idref="V-230509" selected="true" /><select idref="V-230510" selected="true" /><select idref="V-230511" selected="true" /><select idref="V-230512" selected="true" /><select idref="V-230513" selected="true" /><select idref="V-230514" selected="true" /><select idref="V-230515" selected="true" /><select idref="V-230516" selected="true" /><select idref="V-230517" selected="true" /><select idref="V-230518" selected="true" /><select idref="V-230519" selected="true" /><select idref="V-230520" selected="true" /><select idref="V-230521" selected="true" /><select idref="V-230522" selected="true" /><select idref="V-230523" selected="true" /><select idref="V-230524" selected="true" /><select idref="V-230525" selected="true" /><select idref="V-230526" selected="true" /><select idref="V-230527" selected="true" /><select idref="V-230529" selected="true" /><select idref="V-230530" selected="true" /><select idref="V-230531" selected="true" /><select idref="V-230532" selected="true" /><select idref="V-230533" selected="true" /><select idref="V-230534" selected="true" /><select idref="V-230535" selected="true" /><select idref="V-230536" selected="true" /><select idref="V-230537" selected="true" /><select idref="V-230538" selected="true" /><select idref="V-230539" selected="true" /><select idref="V-230540" selected="true" /><select idref="V-230541" selected="true" /><select idref="V-230542" selected="true" /><select idref="V-230543" selected="true" /><select idref="V-230544" selected="true" /><select idref="V-230545" selected="true" /><select idref="V-230546" selected="true" /><select idref="V-230547" selected="true" /><select idref="V-230548" selected="true" /><select idref="V-230549" selected="true" /><select idref="V-230550" selected="true" /><select idref="V-230551" selected="true" /><select idref="V-230552" selected="true" /><select idref="V-230553" selected="true" /><select idref="V-230554" selected="true" /><select idref="V-230555" selected="true" /><select idref="V-230556" selected="true" /><select idref="V-230557" selected="true" /><select idref="V-230558" selected="true" /><select idref="V-230559" selected="true" /><select idref="V-230560" selected="true" /><select idref="V-230561" selected="true" /><select idref="V-237640" selected="true" /><select idref="V-237641" selected="true" /><select idref="V-237642" selected="true" /><select idref="V-237643" selected="true" /><select idref="V-244519" selected="true" /><select idref="V-244521" selected="true" /><select idref="V-244522" selected="true" /><select idref="V-244523" selected="true" /><select idref="V-244524" selected="true" /><select idref="V-244525" selected="true" /><select idref="V-244527" selected="true" /><select idref="V-244528" selected="true" /><select idref="V-244529" selected="true" /><select idref="V-244530" selected="true" /><select idref="V-244531" selected="true" /><select idref="V-244532" selected="true" /><select idref="V-244533" selected="true" /><select idref="V-244534" selected="true" /><select idref="V-244535" selected="true" /><select idref="V-244536" selected="true" /><select idref="V-244538" selected="true" /><select idref="V-244539" selected="true" /><select idref="V-244541" selected="true" /><select idref="V-244542" selected="true" /><select idref="V-244543" selected="true" /><select idref="V-244544" selected="true" /><select idref="V-244545" selected="true" /><select idref="V-244546" selected="true" /><select idref="V-244547" selected="true" /><select idref="V-244548" selected="true" /><select idref="V-244549" selected="true" /><select idref="V-244550" selected="true" /><select idref="V-244551" selected="true" /><select idref="V-244552" selected="true" /><select idref="V-244553" selected="true" /><select idref="V-244554" selected="true" /><select idref="V-250315" selected="true" /><select idref="V-250316" selected="true" /><select idref="V-250317" selected="true" /><select idref="V-251706" selected="true" /><select idref="V-251707" selected="true" /><select idref="V-251708" selected="true" /><select idref="V-251709" selected="true" /><select idref="V-251710" selected="true" /><select idref="V-251711" selected="true" /><select idref="V-251712" selected="true" /><select idref="V-251713" selected="true" /><select idref="V-251716" selected="true" /><select idref="V-251718" selected="true" /><select idref="V-254520" selected="true" /><select idref="V-256973" selected="true" /><select idref="V-256974" selected="true" /><select idref="V-257258" selected="true" /><select idref="V-268322" selected="true" /><select idref="V-272482" selected="true" /><select idref="V-272483" selected="true" /><select idref="V-272484" selected="true" /><select idref="V-274877" selected="true" /><select idref="V-279929" selected="true" /><select idref="V-279930" selected="true" /><select idref="V-279931" selected="true" /><select idref="V-279932" selected="true" /><select idref="V-279933" selected="true" /></Profile><Profile id="MAC-2_Sensitive"><title>II - Mission Support Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-230221" selected="true" /><select idref="V-230222" selected="true" /><select idref="V-230223" selected="true" /><select idref="V-230224" selected="true" /><select idref="V-230225" selected="true" /><select idref="V-230226" selected="true" /><select idref="V-230227" selected="true" /><select idref="V-230228" selected="true" /><select idref="V-230229" selected="true" /><select idref="V-230230" selected="true" /><select idref="V-230231" selected="true" /><select idref="V-230232" selected="true" /><select idref="V-230233" selected="true" /><select idref="V-230234" selected="true" /><select idref="V-230235" selected="true" /><select idref="V-230236" selected="true" /><select idref="V-230237" selected="true" /><select idref="V-230238" selected="true" /><select idref="V-230239" selected="true" /><select idref="V-230240" selected="true" /><select idref="V-230241" selected="true" /><select idref="V-230243" selected="true" /><select idref="V-230244" selected="true" /><select idref="V-230245" selected="true" /><select idref="V-230246" selected="true" /><select idref="V-230247" selected="true" /><select idref="V-230248" selected="true" /><select idref="V-230249" selected="true" /><select idref="V-230250" selected="true" /><select idref="V-230251" selected="true" /><select idref="V-230252" selected="true" /><select idref="V-230253" selected="true" /><select idref="V-230257" selected="true" /><select idref="V-230258" selected="true" /><select idref="V-230259" selected="true" /><select idref="V-230260" selected="true" /><select idref="V-230261" selected="true" /><select idref="V-230262" selected="true" /><select idref="V-230263" selected="true" /><select idref="V-230264" selected="true" /><select idref="V-230265" selected="true" /><select idref="V-230266" selected="true" /><select idref="V-230267" selected="true" /><select idref="V-230268" selected="true" /><select idref="V-230269" selected="true" /><select idref="V-230270" selected="true" /><select idref="V-230271" selected="true" /><select idref="V-230272" selected="true" /><select idref="V-230273" selected="true" /><select idref="V-230274" selected="true" /><select idref="V-230275" selected="true" /><select idref="V-230276" selected="true" /><select idref="V-230277" selected="true" /><select idref="V-230278" selected="true" /><select idref="V-230279" selected="true" /><select idref="V-230280" selected="true" /><select idref="V-230281" selected="true" /><select idref="V-230282" selected="true" /><select idref="V-230283" selected="true" /><select idref="V-230284" selected="true" /><select idref="V-230285" selected="true" /><select idref="V-230286" selected="true" /><select idref="V-230287" selected="true" /><select idref="V-230288" selected="true" /><select idref="V-230290" selected="true" /><select idref="V-230291" selected="true" /><select idref="V-230292" selected="true" /><select idref="V-230293" selected="true" /><select idref="V-230294" selected="true" /><select idref="V-230295" selected="true" /><select idref="V-230296" selected="true" /><select idref="V-230298" selected="true" /><select idref="V-230299" selected="true" /><select idref="V-230300" selected="true" /><select idref="V-230301" selected="true" /><select idref="V-230302" selected="true" /><select idref="V-230303" selected="true" /><select idref="V-230304" selected="true" /><select idref="V-230305" selected="true" /><select idref="V-230306" selected="true" /><select idref="V-230307" selected="true" /><select idref="V-230308" selected="true" /><select idref="V-230310" selected="true" /><select idref="V-230311" selected="true" /><select idref="V-230312" selected="true" /><select idref="V-230313" selected="true" /><select idref="V-230314" selected="true" /><select idref="V-230315" selected="true" /><select idref="V-230316" selected="true" /><select idref="V-230317" selected="true" /><select idref="V-230318" selected="true" /><select idref="V-230319" selected="true" /><select idref="V-230320" selected="true" /><select idref="V-230321" selected="true" /><select idref="V-230322" selected="true" /><select idref="V-230323" selected="true" /><select idref="V-230324" selected="true" /><select idref="V-230325" selected="true" /><select idref="V-230326" selected="true" /><select idref="V-230327" selected="true" /><select idref="V-230328" selected="true" /><select idref="V-230329" selected="true" /><select idref="V-230330" selected="true" /><select idref="V-230332" selected="true" /><select idref="V-230333" selected="true" /><select idref="V-230334" selected="true" /><select idref="V-230335" selected="true" /><select idref="V-230336" selected="true" /><select idref="V-230337" selected="true" /><select idref="V-230338" selected="true" /><select idref="V-230339" selected="true" /><select idref="V-230340" selected="true" /><select idref="V-230341" selected="true" /><select idref="V-230342" selected="true" /><select idref="V-230343" selected="true" /><select idref="V-230344" selected="true" /><select idref="V-230345" selected="true" /><select idref="V-230346" selected="true" /><select idref="V-230347" selected="true" /><select idref="V-230351" selected="true" /><select idref="V-230352" selected="true" /><select idref="V-230354" selected="true" /><select idref="V-230355" selected="true" /><select idref="V-230356" selected="true" /><select idref="V-230357" selected="true" /><select idref="V-230358" selected="true" /><select idref="V-230359" selected="true" /><select idref="V-230360" selected="true" /><select idref="V-230361" selected="true" /><select idref="V-230362" selected="true" /><select idref="V-230363" selected="true" /><select idref="V-230364" selected="true" /><select idref="V-230365" selected="true" /><select idref="V-230366" selected="true" /><select idref="V-230367" selected="true" /><select idref="V-230369" selected="true" /><select idref="V-230370" selected="true" /><select idref="V-230371" selected="true" /><select idref="V-230372" selected="true" /><select idref="V-230373" selected="true" /><select idref="V-230374" selected="true" /><select idref="V-230375" selected="true" /><select idref="V-230376" selected="true" /><select idref="V-230377" selected="true" /><select idref="V-230378" selected="true" /><select idref="V-230379" selected="true" /><select idref="V-230380" selected="true" /><select idref="V-230382" selected="true" /><select idref="V-230383" selected="true" /><select idref="V-230384" selected="true" /><select idref="V-230385" selected="true" /><select idref="V-230386" selected="true" /><select idref="V-230387" selected="true" /><select idref="V-230388" selected="true" /><select idref="V-230389" selected="true" /><select idref="V-230390" selected="true" /><select idref="V-230392" selected="true" /><select idref="V-230393" selected="true" /><select idref="V-230394" selected="true" /><select idref="V-230395" selected="true" /><select idref="V-230396" selected="true" /><select idref="V-230397" selected="true" /><select idref="V-230398" selected="true" /><select idref="V-230399" selected="true" /><select idref="V-230400" selected="true" /><select idref="V-230401" selected="true" /><select idref="V-230402" selected="true" /><select idref="V-230403" selected="true" /><select idref="V-230404" selected="true" /><select idref="V-230405" selected="true" /><select idref="V-230406" selected="true" /><select idref="V-230407" selected="true" /><select idref="V-230408" selected="true" /><select idref="V-230409" selected="true" /><select idref="V-230410" selected="true" /><select idref="V-230411" selected="true" /><select idref="V-230412" selected="true" /><select idref="V-230413" selected="true" /><select idref="V-230418" selected="true" /><select idref="V-230419" selected="true" /><select idref="V-230421" selected="true" /><select idref="V-230422" selected="true" /><select idref="V-230423" selected="true" /><select idref="V-230424" selected="true" /><select idref="V-230425" selected="true" /><select idref="V-230426" selected="true" /><select idref="V-230427" selected="true" /><select idref="V-230428" selected="true" /><select idref="V-230429" selected="true" /><select idref="V-230430" selected="true" /><select idref="V-230431" selected="true" /><select idref="V-230432" selected="true" /><select idref="V-230433" selected="true" /><select idref="V-230434" selected="true" /><select idref="V-230435" selected="true" /><select idref="V-230436" selected="true" /><select idref="V-230437" selected="true" /><select idref="V-230438" selected="true" /><select idref="V-230439" selected="true" /><select idref="V-230444" selected="true" /><select idref="V-230446" selected="true" /><select idref="V-230447" selected="true" /><select idref="V-230448" selected="true" /><select idref="V-230449" selected="true" /><select idref="V-230455" selected="true" /><select idref="V-230456" selected="true" /><select idref="V-230462" selected="true" /><select idref="V-230463" selected="true" /><select idref="V-230464" selected="true" /><select idref="V-230465" selected="true" /><select idref="V-230466" selected="true" /><select idref="V-230467" selected="true" /><select idref="V-230468" selected="true" /><select idref="V-230469" selected="true" /><select idref="V-230470" selected="true" /><select idref="V-230471" selected="true" /><select idref="V-230472" selected="true" /><select idref="V-230473" selected="true" /><select idref="V-230474" selected="true" /><select idref="V-230475" selected="true" /><select idref="V-230476" selected="true" /><select idref="V-230477" selected="true" /><select idref="V-230478" selected="true" /><select idref="V-230479" selected="true" /><select idref="V-230480" selected="true" /><select idref="V-230481" selected="true" /><select idref="V-230482" selected="true" /><select idref="V-230483" selected="true" /><select idref="V-230484" selected="true" /><select idref="V-230485" selected="true" /><select idref="V-230486" selected="true" /><select idref="V-230487" selected="true" /><select idref="V-230488" selected="true" /><select idref="V-230489" selected="true" /><select idref="V-230491" selected="true" /><select idref="V-230492" selected="true" /><select idref="V-230493" selected="true" /><select idref="V-230494" selected="true" /><select idref="V-230495" selected="true" /><select idref="V-230496" selected="true" /><select idref="V-230497" selected="true" /><select idref="V-230498" selected="true" /><select idref="V-230499" selected="true" /><select idref="V-230500" selected="true" /><select idref="V-230502" selected="true" /><select idref="V-230503" selected="true" /><select idref="V-230504" selected="true" /><select idref="V-230505" selected="true" /><select idref="V-230506" selected="true" /><select idref="V-230507" selected="true" /><select idref="V-230508" selected="true" /><select idref="V-230509" selected="true" /><select idref="V-230510" selected="true" /><select idref="V-230511" selected="true" /><select idref="V-230512" selected="true" /><select idref="V-230513" selected="true" /><select idref="V-230514" selected="true" /><select idref="V-230515" selected="true" /><select idref="V-230516" selected="true" /><select idref="V-230517" selected="true" /><select idref="V-230518" selected="true" /><select idref="V-230519" selected="true" /><select idref="V-230520" selected="true" /><select idref="V-230521" selected="true" /><select idref="V-230522" selected="true" /><select idref="V-230523" selected="true" /><select idref="V-230524" selected="true" /><select idref="V-230525" selected="true" /><select idref="V-230526" selected="true" /><select idref="V-230527" selected="true" /><select idref="V-230529" selected="true" /><select idref="V-230530" selected="true" /><select idref="V-230531" selected="true" /><select idref="V-230532" selected="true" /><select idref="V-230533" selected="true" /><select idref="V-230534" selected="true" /><select idref="V-230535" selected="true" /><select idref="V-230536" selected="true" /><select idref="V-230537" selected="true" /><select idref="V-230538" selected="true" /><select idref="V-230539" selected="true" /><select idref="V-230540" selected="true" /><select idref="V-230541" selected="true" /><select idref="V-230542" selected="true" /><select idref="V-230543" selected="true" /><select idref="V-230544" selected="true" /><select idref="V-230545" selected="true" /><select idref="V-230546" selected="true" /><select idref="V-230547" selected="true" /><select idref="V-230548" selected="true" /><select idref="V-230549" selected="true" /><select idref="V-230550" selected="true" /><select idref="V-230551" selected="true" /><select idref="V-230552" selected="true" /><select idref="V-230553" selected="true" /><select idref="V-230554" selected="true" /><select idref="V-230555" selected="true" /><select idref="V-230556" selected="true" /><select idref="V-230557" selected="true" /><select idref="V-230558" selected="true" /><select idref="V-230559" selected="true" /><select idref="V-230560" selected="true" /><select idref="V-230561" selected="true" /><select idref="V-237640" selected="true" /><select idref="V-237641" selected="true" /><select idref="V-237642" selected="true" /><select idref="V-237643" selected="true" /><select idref="V-244519" selected="true" /><select idref="V-244521" selected="true" /><select idref="V-244522" selected="true" /><select idref="V-244523" selected="true" /><select idref="V-244524" selected="true" /><select idref="V-244525" selected="true" /><select idref="V-244527" selected="true" /><select idref="V-244528" selected="true" /><select idref="V-244529" selected="true" /><select idref="V-244530" selected="true" /><select idref="V-244531" selected="true" /><select idref="V-244532" selected="true" /><select idref="V-244533" selected="true" /><select idref="V-244534" selected="true" /><select idref="V-244535" selected="true" /><select idref="V-244536" selected="true" /><select idref="V-244538" selected="true" /><select idref="V-244539" selected="true" /><select idref="V-244541" selected="true" /><select idref="V-244542" selected="true" /><select idref="V-244543" selected="true" /><select idref="V-244544" selected="true" /><select idref="V-244545" selected="true" /><select idref="V-244546" selected="true" /><select idref="V-244547" selected="true" /><select idref="V-244548" selected="true" /><select idref="V-244549" selected="true" /><select idref="V-244550" selected="true" /><select idref="V-244551" selected="true" /><select idref="V-244552" selected="true" /><select idref="V-244553" selected="true" /><select idref="V-244554" selected="true" /><select idref="V-250315" selected="true" /><select idref="V-250316" selected="true" /><select idref="V-250317" selected="true" /><select idref="V-251706" selected="true" /><select idref="V-251707" selected="true" /><select idref="V-251708" selected="true" /><select idref="V-251709" selected="true" /><select idref="V-251710" selected="true" /><select idref="V-251711" selected="true" /><select idref="V-251712" selected="true" /><select idref="V-251713" selected="true" /><select idref="V-251716" selected="true" /><select idref="V-251718" selected="true" /><select idref="V-254520" selected="true" /><select idref="V-256973" selected="true" /><select idref="V-256974" selected="true" /><select idref="V-257258" selected="true" /><select idref="V-268322" selected="true" /><select idref="V-272482" selected="true" /><select idref="V-272483" selected="true" /><select idref="V-272484" selected="true" /><select idref="V-274877" selected="true" /><select idref="V-279929" selected="true" /><select idref="V-279930" selected="true" /><select idref="V-279931" selected="true" /><select idref="V-279932" selected="true" /><select idref="V-279933" selected="true" /></Profile><Profile id="MAC-3_Classified"><title>III - Administrative Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-230221" selected="true" /><select idref="V-230222" selected="true" /><select idref="V-230223" selected="true" /><select idref="V-230224" selected="true" /><select idref="V-230225" selected="true" /><select idref="V-230226" selected="true" /><select idref="V-230227" selected="true" /><select idref="V-230228" selected="true" /><select idref="V-230229" selected="true" /><select idref="V-230230" selected="true" /><select idref="V-230231" selected="true" /><select idref="V-230232" selected="true" /><select idref="V-230233" selected="true" /><select idref="V-230234" selected="true" /><select idref="V-230235" selected="true" /><select idref="V-230236" selected="true" /><select idref="V-230237" selected="true" /><select idref="V-230238" selected="true" /><select idref="V-230239" selected="true" /><select idref="V-230240" selected="true" /><select idref="V-230241" selected="true" /><select idref="V-230243" selected="true" /><select idref="V-230244" selected="true" /><select idref="V-230245" selected="true" /><select idref="V-230246" selected="true" /><select idref="V-230247" selected="true" /><select idref="V-230248" selected="true" /><select idref="V-230249" selected="true" /><select idref="V-230250" selected="true" /><select idref="V-230251" selected="true" /><select idref="V-230252" selected="true" /><select idref="V-230253" selected="true" /><select idref="V-230257" selected="true" /><select idref="V-230258" selected="true" /><select idref="V-230259" selected="true" /><select idref="V-230260" selected="true" /><select idref="V-230261" selected="true" /><select idref="V-230262" selected="true" /><select idref="V-230263" selected="true" /><select idref="V-230264" selected="true" /><select idref="V-230265" selected="true" /><select idref="V-230266" selected="true" /><select idref="V-230267" selected="true" /><select idref="V-230268" selected="true" /><select idref="V-230269" selected="true" /><select idref="V-230270" selected="true" /><select idref="V-230271" selected="true" /><select idref="V-230272" selected="true" /><select idref="V-230273" selected="true" /><select idref="V-230274" selected="true" /><select idref="V-230275" selected="true" /><select idref="V-230276" selected="true" /><select idref="V-230277" selected="true" /><select idref="V-230278" selected="true" /><select idref="V-230279" selected="true" /><select idref="V-230280" selected="true" /><select idref="V-230281" selected="true" /><select idref="V-230282" selected="true" /><select idref="V-230283" selected="true" /><select idref="V-230284" selected="true" /><select idref="V-230285" selected="true" /><select idref="V-230286" selected="true" /><select idref="V-230287" selected="true" /><select idref="V-230288" selected="true" /><select idref="V-230290" selected="true" /><select idref="V-230291" selected="true" /><select idref="V-230292" selected="true" /><select idref="V-230293" selected="true" /><select idref="V-230294" selected="true" /><select idref="V-230295" selected="true" /><select idref="V-230296" selected="true" /><select idref="V-230298" selected="true" /><select idref="V-230299" selected="true" /><select idref="V-230300" selected="true" /><select idref="V-230301" selected="true" /><select idref="V-230302" selected="true" /><select idref="V-230303" selected="true" /><select idref="V-230304" selected="true" /><select idref="V-230305" selected="true" /><select idref="V-230306" selected="true" /><select idref="V-230307" selected="true" /><select idref="V-230308" selected="true" /><select idref="V-230310" selected="true" /><select idref="V-230311" selected="true" /><select idref="V-230312" selected="true" /><select idref="V-230313" selected="true" /><select idref="V-230314" selected="true" /><select idref="V-230315" selected="true" /><select idref="V-230316" selected="true" /><select idref="V-230317" selected="true" /><select idref="V-230318" selected="true" /><select idref="V-230319" selected="true" /><select idref="V-230320" selected="true" /><select idref="V-230321" selected="true" /><select idref="V-230322" selected="true" /><select idref="V-230323" selected="true" /><select idref="V-230324" selected="true" /><select idref="V-230325" selected="true" /><select idref="V-230326" selected="true" /><select idref="V-230327" selected="true" /><select idref="V-230328" selected="true" /><select idref="V-230329" selected="true" /><select idref="V-230330" selected="true" /><select idref="V-230332" selected="true" /><select idref="V-230333" selected="true" /><select idref="V-230334" selected="true" /><select idref="V-230335" selected="true" /><select idref="V-230336" selected="true" /><select idref="V-230337" selected="true" /><select idref="V-230338" selected="true" /><select idref="V-230339" selected="true" /><select idref="V-230340" selected="true" /><select idref="V-230341" selected="true" /><select idref="V-230342" selected="true" /><select idref="V-230343" selected="true" /><select idref="V-230344" selected="true" /><select idref="V-230345" selected="true" /><select idref="V-230346" selected="true" /><select idref="V-230347" selected="true" /><select idref="V-230351" selected="true" /><select idref="V-230352" selected="true" /><select idref="V-230354" selected="true" /><select idref="V-230355" selected="true" /><select idref="V-230356" selected="true" /><select idref="V-230357" selected="true" /><select idref="V-230358" selected="true" /><select idref="V-230359" selected="true" /><select idref="V-230360" selected="true" /><select idref="V-230361" selected="true" /><select idref="V-230362" selected="true" /><select idref="V-230363" selected="true" /><select idref="V-230364" selected="true" /><select idref="V-230365" selected="true" /><select idref="V-230366" selected="true" /><select idref="V-230367" selected="true" /><select idref="V-230369" selected="true" /><select idref="V-230370" selected="true" /><select idref="V-230371" selected="true" /><select idref="V-230372" selected="true" /><select idref="V-230373" selected="true" /><select idref="V-230374" selected="true" /><select idref="V-230375" selected="true" /><select idref="V-230376" selected="true" /><select idref="V-230377" selected="true" /><select idref="V-230378" selected="true" /><select idref="V-230379" selected="true" /><select idref="V-230380" selected="true" /><select idref="V-230382" selected="true" /><select idref="V-230383" selected="true" /><select idref="V-230384" selected="true" /><select idref="V-230385" selected="true" /><select idref="V-230386" selected="true" /><select idref="V-230387" selected="true" /><select idref="V-230388" selected="true" /><select idref="V-230389" selected="true" /><select idref="V-230390" selected="true" /><select idref="V-230392" selected="true" /><select idref="V-230393" selected="true" /><select idref="V-230394" selected="true" /><select idref="V-230395" selected="true" /><select idref="V-230396" selected="true" /><select idref="V-230397" selected="true" /><select idref="V-230398" selected="true" /><select idref="V-230399" selected="true" /><select idref="V-230400" selected="true" /><select idref="V-230401" selected="true" /><select idref="V-230402" selected="true" /><select idref="V-230403" selected="true" /><select idref="V-230404" selected="true" /><select idref="V-230405" selected="true" /><select idref="V-230406" selected="true" /><select idref="V-230407" selected="true" /><select idref="V-230408" selected="true" /><select idref="V-230409" selected="true" /><select idref="V-230410" selected="true" /><select idref="V-230411" selected="true" /><select idref="V-230412" selected="true" /><select idref="V-230413" selected="true" /><select idref="V-230418" selected="true" /><select idref="V-230419" selected="true" /><select idref="V-230421" selected="true" /><select idref="V-230422" selected="true" /><select idref="V-230423" selected="true" /><select idref="V-230424" selected="true" /><select idref="V-230425" selected="true" /><select idref="V-230426" selected="true" /><select idref="V-230427" selected="true" /><select idref="V-230428" selected="true" /><select idref="V-230429" selected="true" /><select idref="V-230430" selected="true" /><select idref="V-230431" selected="true" /><select idref="V-230432" selected="true" /><select idref="V-230433" selected="true" /><select idref="V-230434" selected="true" /><select idref="V-230435" selected="true" /><select idref="V-230436" selected="true" /><select idref="V-230437" selected="true" /><select idref="V-230438" selected="true" /><select idref="V-230439" selected="true" /><select idref="V-230444" selected="true" /><select idref="V-230446" selected="true" /><select idref="V-230447" selected="true" /><select idref="V-230448" selected="true" /><select idref="V-230449" selected="true" /><select idref="V-230455" selected="true" /><select idref="V-230456" selected="true" /><select idref="V-230462" selected="true" /><select idref="V-230463" selected="true" /><select idref="V-230464" selected="true" /><select idref="V-230465" selected="true" /><select idref="V-230466" selected="true" /><select idref="V-230467" selected="true" /><select idref="V-230468" selected="true" /><select idref="V-230469" selected="true" /><select idref="V-230470" selected="true" /><select idref="V-230471" selected="true" /><select idref="V-230472" selected="true" /><select idref="V-230473" selected="true" /><select idref="V-230474" selected="true" /><select idref="V-230475" selected="true" /><select idref="V-230476" selected="true" /><select idref="V-230477" selected="true" /><select idref="V-230478" selected="true" /><select idref="V-230479" selected="true" /><select idref="V-230480" selected="true" /><select idref="V-230481" selected="true" /><select idref="V-230482" selected="true" /><select idref="V-230483" selected="true" /><select idref="V-230484" selected="true" /><select idref="V-230485" selected="true" /><select idref="V-230486" selected="true" /><select idref="V-230487" selected="true" /><select idref="V-230488" selected="true" /><select idref="V-230489" selected="true" /><select idref="V-230491" selected="true" /><select idref="V-230492" selected="true" /><select idref="V-230493" selected="true" /><select idref="V-230494" selected="true" /><select idref="V-230495" selected="true" /><select idref="V-230496" selected="true" /><select idref="V-230497" selected="true" /><select idref="V-230498" selected="true" /><select idref="V-230499" selected="true" /><select idref="V-230500" selected="true" /><select idref="V-230502" selected="true" /><select idref="V-230503" selected="true" /><select idref="V-230504" selected="true" /><select idref="V-230505" selected="true" /><select idref="V-230506" selected="true" /><select idref="V-230507" selected="true" /><select idref="V-230508" selected="true" /><select idref="V-230509" selected="true" /><select idref="V-230510" selected="true" /><select idref="V-230511" selected="true" /><select idref="V-230512" selected="true" /><select idref="V-230513" selected="true" /><select idref="V-230514" selected="true" /><select idref="V-230515" selected="true" /><select idref="V-230516" selected="true" /><select idref="V-230517" selected="true" /><select idref="V-230518" selected="true" /><select idref="V-230519" selected="true" /><select idref="V-230520" selected="true" /><select idref="V-230521" selected="true" /><select idref="V-230522" selected="true" /><select idref="V-230523" selected="true" /><select idref="V-230524" selected="true" /><select idref="V-230525" selected="true" /><select idref="V-230526" selected="true" /><select idref="V-230527" selected="true" /><select idref="V-230529" selected="true" /><select idref="V-230530" selected="true" /><select idref="V-230531" selected="true" /><select idref="V-230532" selected="true" /><select idref="V-230533" selected="true" /><select idref="V-230534" selected="true" /><select idref="V-230535" selected="true" /><select idref="V-230536" selected="true" /><select idref="V-230537" selected="true" /><select idref="V-230538" selected="true" /><select idref="V-230539" selected="true" /><select idref="V-230540" selected="true" /><select idref="V-230541" selected="true" /><select idref="V-230542" selected="true" /><select idref="V-230543" selected="true" /><select idref="V-230544" selected="true" /><select idref="V-230545" selected="true" /><select idref="V-230546" selected="true" /><select idref="V-230547" selected="true" /><select idref="V-230548" selected="true" /><select idref="V-230549" selected="true" /><select idref="V-230550" selected="true" /><select idref="V-230551" selected="true" /><select idref="V-230552" selected="true" /><select idref="V-230553" selected="true" /><select idref="V-230554" selected="true" /><select idref="V-230555" selected="true" /><select idref="V-230556" selected="true" /><select idref="V-230557" selected="true" /><select idref="V-230558" selected="true" /><select idref="V-230559" selected="true" /><select idref="V-230560" selected="true" /><select idref="V-230561" selected="true" /><select idref="V-237640" selected="true" /><select idref="V-237641" selected="true" /><select idref="V-237642" selected="true" /><select idref="V-237643" selected="true" /><select idref="V-244519" selected="true" /><select idref="V-244521" selected="true" /><select idref="V-244522" selected="true" /><select idref="V-244523" selected="true" /><select idref="V-244524" selected="true" /><select idref="V-244525" selected="true" /><select idref="V-244527" selected="true" /><select idref="V-244528" selected="true" /><select idref="V-244529" selected="true" /><select idref="V-244530" selected="true" /><select idref="V-244531" selected="true" /><select idref="V-244532" selected="true" /><select idref="V-244533" selected="true" /><select idref="V-244534" selected="true" /><select idref="V-244535" selected="true" /><select idref="V-244536" selected="true" /><select idref="V-244538" selected="true" /><select idref="V-244539" selected="true" /><select idref="V-244541" selected="true" /><select idref="V-244542" selected="true" /><select idref="V-244543" selected="true" /><select idref="V-244544" selected="true" /><select idref="V-244545" selected="true" /><select idref="V-244546" selected="true" /><select idref="V-244547" selected="true" /><select idref="V-244548" selected="true" /><select idref="V-244549" selected="true" /><select idref="V-244550" selected="true" /><select idref="V-244551" selected="true" /><select idref="V-244552" selected="true" /><select idref="V-244553" selected="true" /><select idref="V-244554" selected="true" /><select idref="V-250315" selected="true" /><select idref="V-250316" selected="true" /><select idref="V-250317" selected="true" /><select idref="V-251706" selected="true" /><select idref="V-251707" selected="true" /><select idref="V-251708" selected="true" /><select idref="V-251709" selected="true" /><select idref="V-251710" selected="true" /><select idref="V-251711" selected="true" /><select idref="V-251712" selected="true" /><select idref="V-251713" selected="true" /><select idref="V-251716" selected="true" /><select idref="V-251718" selected="true" /><select idref="V-254520" selected="true" /><select idref="V-256973" selected="true" /><select idref="V-256974" selected="true" /><select idref="V-257258" selected="true" /><select idref="V-268322" selected="true" /><select idref="V-272482" selected="true" /><select idref="V-272483" selected="true" /><select idref="V-272484" selected="true" /><select idref="V-274877" selected="true" /><select idref="V-279929" selected="true" /><select idref="V-279930" selected="true" /><select idref="V-279931" selected="true" /><select idref="V-279932" selected="true" /><select idref="V-279933" selected="true" /></Profile><Profile id="MAC-3_Public"><title>III - Administrative Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-230221" selected="true" /><select idref="V-230222" selected="true" /><select idref="V-230223" selected="true" /><select idref="V-230224" selected="true" /><select idref="V-230225" selected="true" /><select idref="V-230226" selected="true" /><select idref="V-230227" selected="true" /><select idref="V-230228" selected="true" /><select idref="V-230229" selected="true" /><select idref="V-230230" selected="true" /><select idref="V-230231" selected="true" /><select idref="V-230232" selected="true" /><select idref="V-230233" selected="true" /><select idref="V-230234" selected="true" /><select idref="V-230235" selected="true" /><select idref="V-230236" selected="true" /><select idref="V-230237" selected="true" /><select idref="V-230238" selected="true" /><select idref="V-230239" selected="true" /><select idref="V-230240" selected="true" /><select idref="V-230241" selected="true" /><select idref="V-230243" selected="true" /><select idref="V-230244" selected="true" /><select idref="V-230245" selected="true" /><select idref="V-230246" selected="true" /><select idref="V-230247" selected="true" /><select idref="V-230248" selected="true" /><select idref="V-230249" selected="true" /><select idref="V-230250" selected="true" /><select idref="V-230251" selected="true" /><select idref="V-230252" selected="true" /><select idref="V-230253" selected="true" /><select idref="V-230257" selected="true" /><select idref="V-230258" selected="true" /><select idref="V-230259" selected="true" /><select idref="V-230260" selected="true" /><select idref="V-230261" selected="true" /><select idref="V-230262" selected="true" /><select idref="V-230263" selected="true" /><select idref="V-230264" selected="true" /><select idref="V-230265" selected="true" /><select idref="V-230266" selected="true" /><select idref="V-230267" selected="true" /><select idref="V-230268" selected="true" /><select idref="V-230269" selected="true" /><select idref="V-230270" selected="true" /><select idref="V-230271" selected="true" /><select idref="V-230272" selected="true" /><select idref="V-230273" selected="true" /><select idref="V-230274" selected="true" /><select idref="V-230275" selected="true" /><select idref="V-230276" selected="true" /><select idref="V-230277" selected="true" /><select idref="V-230278" selected="true" /><select idref="V-230279" selected="true" /><select idref="V-230280" selected="true" /><select idref="V-230281" selected="true" /><select idref="V-230282" selected="true" /><select idref="V-230283" selected="true" /><select idref="V-230284" selected="true" /><select idref="V-230285" selected="true" /><select idref="V-230286" selected="true" /><select idref="V-230287" selected="true" /><select idref="V-230288" selected="true" /><select idref="V-230290" selected="true" /><select idref="V-230291" selected="true" /><select idref="V-230292" selected="true" /><select idref="V-230293" selected="true" /><select idref="V-230294" selected="true" /><select idref="V-230295" selected="true" /><select idref="V-230296" selected="true" /><select idref="V-230298" selected="true" /><select idref="V-230299" selected="true" /><select idref="V-230300" selected="true" /><select idref="V-230301" selected="true" /><select idref="V-230302" selected="true" /><select idref="V-230303" selected="true" /><select idref="V-230304" selected="true" /><select idref="V-230305" selected="true" /><select idref="V-230306" selected="true" /><select idref="V-230307" selected="true" /><select idref="V-230308" selected="true" /><select idref="V-230310" selected="true" /><select idref="V-230311" selected="true" /><select idref="V-230312" selected="true" /><select idref="V-230313" selected="true" /><select idref="V-230314" selected="true" /><select idref="V-230315" selected="true" /><select idref="V-230316" selected="true" /><select idref="V-230317" selected="true" /><select idref="V-230318" selected="true" /><select idref="V-230319" selected="true" /><select idref="V-230320" selected="true" /><select idref="V-230321" selected="true" /><select idref="V-230322" selected="true" /><select idref="V-230323" selected="true" /><select idref="V-230324" selected="true" /><select idref="V-230325" selected="true" /><select idref="V-230326" selected="true" /><select idref="V-230327" selected="true" /><select idref="V-230328" selected="true" /><select idref="V-230329" selected="true" /><select idref="V-230330" selected="true" /><select idref="V-230332" selected="true" /><select idref="V-230333" selected="true" /><select idref="V-230334" selected="true" /><select idref="V-230335" selected="true" /><select idref="V-230336" selected="true" /><select idref="V-230337" selected="true" /><select idref="V-230338" selected="true" /><select idref="V-230339" selected="true" /><select idref="V-230340" selected="true" /><select idref="V-230341" selected="true" /><select idref="V-230342" selected="true" /><select idref="V-230343" selected="true" /><select idref="V-230344" selected="true" /><select idref="V-230345" selected="true" /><select idref="V-230346" selected="true" /><select idref="V-230347" selected="true" /><select idref="V-230351" selected="true" /><select idref="V-230352" selected="true" /><select idref="V-230354" selected="true" /><select idref="V-230355" selected="true" /><select idref="V-230356" selected="true" /><select idref="V-230357" selected="true" /><select idref="V-230358" selected="true" /><select idref="V-230359" selected="true" /><select idref="V-230360" selected="true" /><select idref="V-230361" selected="true" /><select idref="V-230362" selected="true" /><select idref="V-230363" selected="true" /><select idref="V-230364" selected="true" /><select idref="V-230365" selected="true" /><select idref="V-230366" selected="true" /><select idref="V-230367" selected="true" /><select idref="V-230369" selected="true" /><select idref="V-230370" selected="true" /><select idref="V-230371" selected="true" /><select idref="V-230372" selected="true" /><select idref="V-230373" selected="true" /><select idref="V-230374" selected="true" /><select idref="V-230375" selected="true" /><select idref="V-230376" selected="true" /><select idref="V-230377" selected="true" /><select idref="V-230378" selected="true" /><select idref="V-230379" selected="true" /><select idref="V-230380" selected="true" /><select idref="V-230382" selected="true" /><select idref="V-230383" selected="true" /><select idref="V-230384" selected="true" /><select idref="V-230385" selected="true" /><select idref="V-230386" selected="true" /><select idref="V-230387" selected="true" /><select idref="V-230388" selected="true" /><select idref="V-230389" selected="true" /><select idref="V-230390" selected="true" /><select idref="V-230392" selected="true" /><select idref="V-230393" selected="true" /><select idref="V-230394" selected="true" /><select idref="V-230395" selected="true" /><select idref="V-230396" selected="true" /><select idref="V-230397" selected="true" /><select idref="V-230398" selected="true" /><select idref="V-230399" selected="true" /><select idref="V-230400" selected="true" /><select idref="V-230401" selected="true" /><select idref="V-230402" selected="true" /><select idref="V-230403" selected="true" /><select idref="V-230404" selected="true" /><select idref="V-230405" selected="true" /><select idref="V-230406" selected="true" /><select idref="V-230407" selected="true" /><select idref="V-230408" selected="true" /><select idref="V-230409" selected="true" /><select idref="V-230410" selected="true" /><select idref="V-230411" selected="true" /><select idref="V-230412" selected="true" /><select idref="V-230413" selected="true" /><select idref="V-230418" selected="true" /><select idref="V-230419" selected="true" /><select idref="V-230421" selected="true" /><select idref="V-230422" selected="true" /><select idref="V-230423" selected="true" /><select idref="V-230424" selected="true" /><select idref="V-230425" selected="true" /><select idref="V-230426" selected="true" /><select idref="V-230427" selected="true" /><select idref="V-230428" selected="true" /><select idref="V-230429" selected="true" /><select idref="V-230430" selected="true" /><select idref="V-230431" selected="true" /><select idref="V-230432" selected="true" /><select idref="V-230433" selected="true" /><select idref="V-230434" selected="true" /><select idref="V-230435" selected="true" /><select idref="V-230436" selected="true" /><select idref="V-230437" selected="true" /><select idref="V-230438" selected="true" /><select idref="V-230439" selected="true" /><select idref="V-230444" selected="true" /><select idref="V-230446" selected="true" /><select idref="V-230447" selected="true" /><select idref="V-230448" selected="true" /><select idref="V-230449" selected="true" /><select idref="V-230455" selected="true" /><select idref="V-230456" selected="true" /><select idref="V-230462" selected="true" /><select idref="V-230463" selected="true" /><select idref="V-230464" selected="true" /><select idref="V-230465" selected="true" /><select idref="V-230466" selected="true" /><select idref="V-230467" selected="true" /><select idref="V-230468" selected="true" /><select idref="V-230469" selected="true" /><select idref="V-230470" selected="true" /><select idref="V-230471" selected="true" /><select idref="V-230472" selected="true" /><select idref="V-230473" selected="true" /><select idref="V-230474" selected="true" /><select idref="V-230475" selected="true" /><select idref="V-230476" selected="true" /><select idref="V-230477" selected="true" /><select idref="V-230478" selected="true" /><select idref="V-230479" selected="true" /><select idref="V-230480" selected="true" /><select idref="V-230481" selected="true" /><select idref="V-230482" selected="true" /><select idref="V-230483" selected="true" /><select idref="V-230484" selected="true" /><select idref="V-230485" selected="true" /><select idref="V-230486" selected="true" /><select idref="V-230487" selected="true" /><select idref="V-230488" selected="true" /><select idref="V-230489" selected="true" /><select idref="V-230491" selected="true" /><select idref="V-230492" selected="true" /><select idref="V-230493" selected="true" /><select idref="V-230494" selected="true" /><select idref="V-230495" selected="true" /><select idref="V-230496" selected="true" /><select idref="V-230497" selected="true" /><select idref="V-230498" selected="true" /><select idref="V-230499" selected="true" /><select idref="V-230500" selected="true" /><select idref="V-230502" selected="true" /><select idref="V-230503" selected="true" /><select idref="V-230504" selected="true" /><select idref="V-230505" selected="true" /><select idref="V-230506" selected="true" /><select idref="V-230507" selected="true" /><select idref="V-230508" selected="true" /><select idref="V-230509" selected="true" /><select idref="V-230510" selected="true" /><select idref="V-230511" selected="true" /><select idref="V-230512" selected="true" /><select idref="V-230513" selected="true" /><select idref="V-230514" selected="true" /><select idref="V-230515" selected="true" /><select idref="V-230516" selected="true" /><select idref="V-230517" selected="true" /><select idref="V-230518" selected="true" /><select idref="V-230519" selected="true" /><select idref="V-230520" selected="true" /><select idref="V-230521" selected="true" /><select idref="V-230522" selected="true" /><select idref="V-230523" selected="true" /><select idref="V-230524" selected="true" /><select idref="V-230525" selected="true" /><select idref="V-230526" selected="true" /><select idref="V-230527" selected="true" /><select idref="V-230529" selected="true" /><select idref="V-230530" selected="true" /><select idref="V-230531" selected="true" /><select idref="V-230532" selected="true" /><select idref="V-230533" selected="true" /><select idref="V-230534" selected="true" /><select idref="V-230535" selected="true" /><select idref="V-230536" selected="true" /><select idref="V-230537" selected="true" /><select idref="V-230538" selected="true" /><select idref="V-230539" selected="true" /><select idref="V-230540" selected="true" /><select idref="V-230541" selected="true" /><select idref="V-230542" selected="true" /><select idref="V-230543" selected="true" /><select idref="V-230544" selected="true" /><select idref="V-230545" selected="true" /><select idref="V-230546" selected="true" /><select idref="V-230547" selected="true" /><select idref="V-230548" selected="true" /><select idref="V-230549" selected="true" /><select idref="V-230550" selected="true" /><select idref="V-230551" selected="true" /><select idref="V-230552" selected="true" /><select idref="V-230553" selected="true" /><select idref="V-230554" selected="true" /><select idref="V-230555" selected="true" /><select idref="V-230556" selected="true" /><select idref="V-230557" selected="true" /><select idref="V-230558" selected="true" /><select idref="V-230559" selected="true" /><select idref="V-230560" selected="true" /><select idref="V-230561" selected="true" /><select idref="V-237640" selected="true" /><select idref="V-237641" selected="true" /><select idref="V-237642" selected="true" /><select idref="V-237643" selected="true" /><select idref="V-244519" selected="true" /><select idref="V-244521" selected="true" /><select idref="V-244522" selected="true" /><select idref="V-244523" selected="true" /><select idref="V-244524" selected="true" /><select idref="V-244525" selected="true" /><select idref="V-244527" selected="true" /><select idref="V-244528" selected="true" /><select idref="V-244529" selected="true" /><select idref="V-244530" selected="true" /><select idref="V-244531" selected="true" /><select idref="V-244532" selected="true" /><select idref="V-244533" selected="true" /><select idref="V-244534" selected="true" /><select idref="V-244535" selected="true" /><select idref="V-244536" selected="true" /><select idref="V-244538" selected="true" /><select idref="V-244539" selected="true" /><select idref="V-244541" selected="true" /><select idref="V-244542" selected="true" /><select idref="V-244543" selected="true" /><select idref="V-244544" selected="true" /><select idref="V-244545" selected="true" /><select idref="V-244546" selected="true" /><select idref="V-244547" selected="true" /><select idref="V-244548" selected="true" /><select idref="V-244549" selected="true" /><select idref="V-244550" selected="true" /><select idref="V-244551" selected="true" /><select idref="V-244552" selected="true" /><select idref="V-244553" selected="true" /><select idref="V-244554" selected="true" /><select idref="V-250315" selected="true" /><select idref="V-250316" selected="true" /><select idref="V-250317" selected="true" /><select idref="V-251706" selected="true" /><select idref="V-251707" selected="true" /><select idref="V-251708" selected="true" /><select idref="V-251709" selected="true" /><select idref="V-251710" selected="true" /><select idref="V-251711" selected="true" /><select idref="V-251712" selected="true" /><select idref="V-251713" selected="true" /><select idref="V-251716" selected="true" /><select idref="V-251718" selected="true" /><select idref="V-254520" selected="true" /><select idref="V-256973" selected="true" /><select idref="V-256974" selected="true" /><select idref="V-257258" selected="true" /><select idref="V-268322" selected="true" /><select idref="V-272482" selected="true" /><select idref="V-272483" selected="true" /><select idref="V-272484" selected="true" /><select idref="V-274877" selected="true" /><select idref="V-279929" selected="true" /><select idref="V-279930" selected="true" /><select idref="V-279931" selected="true" /><select idref="V-279932" selected="true" /><select idref="V-279933" selected="true" /></Profile><Profile id="MAC-3_Sensitive"><title>III - Administrative Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-230221" selected="true" /><select idref="V-230222" selected="true" /><select idref="V-230223" selected="true" /><select idref="V-230224" selected="true" /><select idref="V-230225" selected="true" /><select idref="V-230226" selected="true" /><select idref="V-230227" selected="true" /><select idref="V-230228" selected="true" /><select idref="V-230229" selected="true" /><select idref="V-230230" selected="true" /><select idref="V-230231" selected="true" /><select idref="V-230232" selected="true" /><select idref="V-230233" selected="true" /><select idref="V-230234" selected="true" /><select idref="V-230235" selected="true" /><select idref="V-230236" selected="true" /><select idref="V-230237" selected="true" /><select idref="V-230238" selected="true" /><select idref="V-230239" selected="true" /><select idref="V-230240" selected="true" /><select idref="V-230241" selected="true" /><select idref="V-230243" selected="true" /><select idref="V-230244" selected="true" /><select idref="V-230245" selected="true" /><select idref="V-230246" selected="true" /><select idref="V-230247" selected="true" /><select idref="V-230248" selected="true" /><select idref="V-230249" selected="true" /><select idref="V-230250" selected="true" /><select idref="V-230251" selected="true" /><select idref="V-230252" selected="true" /><select idref="V-230253" selected="true" /><select idref="V-230257" selected="true" /><select idref="V-230258" selected="true" /><select idref="V-230259" selected="true" /><select idref="V-230260" selected="true" /><select idref="V-230261" selected="true" /><select idref="V-230262" selected="true" /><select idref="V-230263" selected="true" /><select idref="V-230264" selected="true" /><select idref="V-230265" selected="true" /><select idref="V-230266" selected="true" /><select idref="V-230267" selected="true" /><select idref="V-230268" selected="true" /><select idref="V-230269" selected="true" /><select idref="V-230270" selected="true" /><select idref="V-230271" selected="true" /><select idref="V-230272" selected="true" /><select idref="V-230273" selected="true" /><select idref="V-230274" selected="true" /><select idref="V-230275" selected="true" /><select idref="V-230276" selected="true" /><select idref="V-230277" selected="true" /><select idref="V-230278" selected="true" /><select idref="V-230279" selected="true" /><select idref="V-230280" selected="true" /><select idref="V-230281" selected="true" /><select idref="V-230282" selected="true" /><select idref="V-230283" selected="true" /><select idref="V-230284" selected="true" /><select idref="V-230285" selected="true" /><select idref="V-230286" selected="true" /><select idref="V-230287" selected="true" /><select idref="V-230288" selected="true" /><select idref="V-230290" selected="true" /><select idref="V-230291" selected="true" /><select idref="V-230292" selected="true" /><select idref="V-230293" selected="true" /><select idref="V-230294" selected="true" /><select idref="V-230295" selected="true" /><select idref="V-230296" selected="true" /><select idref="V-230298" selected="true" /><select idref="V-230299" selected="true" /><select idref="V-230300" selected="true" /><select idref="V-230301" selected="true" /><select idref="V-230302" selected="true" /><select idref="V-230303" selected="true" /><select idref="V-230304" selected="true" /><select idref="V-230305" selected="true" /><select idref="V-230306" selected="true" /><select idref="V-230307" selected="true" /><select idref="V-230308" selected="true" /><select idref="V-230310" selected="true" /><select idref="V-230311" selected="true" /><select idref="V-230312" selected="true" /><select idref="V-230313" selected="true" /><select idref="V-230314" selected="true" /><select idref="V-230315" selected="true" /><select idref="V-230316" selected="true" /><select idref="V-230317" selected="true" /><select idref="V-230318" selected="true" /><select idref="V-230319" selected="true" /><select idref="V-230320" selected="true" /><select idref="V-230321" selected="true" /><select idref="V-230322" selected="true" /><select idref="V-230323" selected="true" /><select idref="V-230324" selected="true" /><select idref="V-230325" selected="true" /><select idref="V-230326" selected="true" /><select idref="V-230327" selected="true" /><select idref="V-230328" selected="true" /><select idref="V-230329" selected="true" /><select idref="V-230330" selected="true" /><select idref="V-230332" selected="true" /><select idref="V-230333" selected="true" /><select idref="V-230334" selected="true" /><select idref="V-230335" selected="true" /><select idref="V-230336" selected="true" /><select idref="V-230337" selected="true" /><select idref="V-230338" selected="true" /><select idref="V-230339" selected="true" /><select idref="V-230340" selected="true" /><select idref="V-230341" selected="true" /><select idref="V-230342" selected="true" /><select idref="V-230343" selected="true" /><select idref="V-230344" selected="true" /><select idref="V-230345" selected="true" /><select idref="V-230346" selected="true" /><select idref="V-230347" selected="true" /><select idref="V-230351" selected="true" /><select idref="V-230352" selected="true" /><select idref="V-230354" selected="true" /><select idref="V-230355" selected="true" /><select idref="V-230356" selected="true" /><select idref="V-230357" selected="true" /><select idref="V-230358" selected="true" /><select idref="V-230359" selected="true" /><select idref="V-230360" selected="true" /><select idref="V-230361" selected="true" /><select idref="V-230362" selected="true" /><select idref="V-230363" selected="true" /><select idref="V-230364" selected="true" /><select idref="V-230365" selected="true" /><select idref="V-230366" selected="true" /><select idref="V-230367" selected="true" /><select idref="V-230369" selected="true" /><select idref="V-230370" selected="true" /><select idref="V-230371" selected="true" /><select idref="V-230372" selected="true" /><select idref="V-230373" selected="true" /><select idref="V-230374" selected="true" /><select idref="V-230375" selected="true" /><select idref="V-230376" selected="true" /><select idref="V-230377" selected="true" /><select idref="V-230378" selected="true" /><select idref="V-230379" selected="true" /><select idref="V-230380" selected="true" /><select idref="V-230382" selected="true" /><select idref="V-230383" selected="true" /><select idref="V-230384" selected="true" /><select idref="V-230385" selected="true" /><select idref="V-230386" selected="true" /><select idref="V-230387" selected="true" /><select idref="V-230388" selected="true" /><select idref="V-230389" selected="true" /><select idref="V-230390" selected="true" /><select idref="V-230392" selected="true" /><select idref="V-230393" selected="true" /><select idref="V-230394" selected="true" /><select idref="V-230395" selected="true" /><select idref="V-230396" selected="true" /><select idref="V-230397" selected="true" /><select idref="V-230398" selected="true" /><select idref="V-230399" selected="true" /><select idref="V-230400" selected="true" /><select idref="V-230401" selected="true" /><select idref="V-230402" selected="true" /><select idref="V-230403" selected="true" /><select idref="V-230404" selected="true" /><select idref="V-230405" selected="true" /><select idref="V-230406" selected="true" /><select idref="V-230407" selected="true" /><select idref="V-230408" selected="true" /><select idref="V-230409" selected="true" /><select idref="V-230410" selected="true" /><select idref="V-230411" selected="true" /><select idref="V-230412" selected="true" /><select idref="V-230413" selected="true" /><select idref="V-230418" selected="true" /><select idref="V-230419" selected="true" /><select idref="V-230421" selected="true" /><select idref="V-230422" selected="true" /><select idref="V-230423" selected="true" /><select idref="V-230424" selected="true" /><select idref="V-230425" selected="true" /><select idref="V-230426" selected="true" /><select idref="V-230427" selected="true" /><select idref="V-230428" selected="true" /><select idref="V-230429" selected="true" /><select idref="V-230430" selected="true" /><select idref="V-230431" selected="true" /><select idref="V-230432" selected="true" /><select idref="V-230433" selected="true" /><select idref="V-230434" selected="true" /><select idref="V-230435" selected="true" /><select idref="V-230436" selected="true" /><select idref="V-230437" selected="true" /><select idref="V-230438" selected="true" /><select idref="V-230439" selected="true" /><select idref="V-230444" selected="true" /><select idref="V-230446" selected="true" /><select idref="V-230447" selected="true" /><select idref="V-230448" selected="true" /><select idref="V-230449" selected="true" /><select idref="V-230455" selected="true" /><select idref="V-230456" selected="true" /><select idref="V-230462" selected="true" /><select idref="V-230463" selected="true" /><select idref="V-230464" selected="true" /><select idref="V-230465" selected="true" /><select idref="V-230466" selected="true" /><select idref="V-230467" selected="true" /><select idref="V-230468" selected="true" /><select idref="V-230469" selected="true" /><select idref="V-230470" selected="true" /><select idref="V-230471" selected="true" /><select idref="V-230472" selected="true" /><select idref="V-230473" selected="true" /><select idref="V-230474" selected="true" /><select idref="V-230475" selected="true" /><select idref="V-230476" selected="true" /><select idref="V-230477" selected="true" /><select idref="V-230478" selected="true" /><select idref="V-230479" selected="true" /><select idref="V-230480" selected="true" /><select idref="V-230481" selected="true" /><select idref="V-230482" selected="true" /><select idref="V-230483" selected="true" /><select idref="V-230484" selected="true" /><select idref="V-230485" selected="true" /><select idref="V-230486" selected="true" /><select idref="V-230487" selected="true" /><select idref="V-230488" selected="true" /><select idref="V-230489" selected="true" /><select idref="V-230491" selected="true" /><select idref="V-230492" selected="true" /><select idref="V-230493" selected="true" /><select idref="V-230494" selected="true" /><select idref="V-230495" selected="true" /><select idref="V-230496" selected="true" /><select idref="V-230497" selected="true" /><select idref="V-230498" selected="true" /><select idref="V-230499" selected="true" /><select idref="V-230500" selected="true" /><select idref="V-230502" selected="true" /><select idref="V-230503" selected="true" /><select idref="V-230504" selected="true" /><select idref="V-230505" selected="true" /><select idref="V-230506" selected="true" /><select idref="V-230507" selected="true" /><select idref="V-230508" selected="true" /><select idref="V-230509" selected="true" /><select idref="V-230510" selected="true" /><select idref="V-230511" selected="true" /><select idref="V-230512" selected="true" /><select idref="V-230513" selected="true" /><select idref="V-230514" selected="true" /><select idref="V-230515" selected="true" /><select idref="V-230516" selected="true" /><select idref="V-230517" selected="true" /><select idref="V-230518" selected="true" /><select idref="V-230519" selected="true" /><select idref="V-230520" selected="true" /><select idref="V-230521" selected="true" /><select idref="V-230522" selected="true" /><select idref="V-230523" selected="true" /><select idref="V-230524" selected="true" /><select idref="V-230525" selected="true" /><select idref="V-230526" selected="true" /><select idref="V-230527" selected="true" /><select idref="V-230529" selected="true" /><select idref="V-230530" selected="true" /><select idref="V-230531" selected="true" /><select idref="V-230532" selected="true" /><select idref="V-230533" selected="true" /><select idref="V-230534" selected="true" /><select idref="V-230535" selected="true" /><select idref="V-230536" selected="true" /><select idref="V-230537" selected="true" /><select idref="V-230538" selected="true" /><select idref="V-230539" selected="true" /><select idref="V-230540" selected="true" /><select idref="V-230541" selected="true" /><select idref="V-230542" selected="true" /><select idref="V-230543" selected="true" /><select idref="V-230544" selected="true" /><select idref="V-230545" selected="true" /><select idref="V-230546" selected="true" /><select idref="V-230547" selected="true" /><select idref="V-230548" selected="true" /><select idref="V-230549" selected="true" /><select idref="V-230550" selected="true" /><select idref="V-230551" selected="true" /><select idref="V-230552" selected="true" /><select idref="V-230553" selected="true" /><select idref="V-230554" selected="true" /><select idref="V-230555" selected="true" /><select idref="V-230556" selected="true" /><select idref="V-230557" selected="true" /><select idref="V-230558" selected="true" /><select idref="V-230559" selected="true" /><select idref="V-230560" selected="true" /><select idref="V-230561" selected="true" /><select idref="V-237640" selected="true" /><select idref="V-237641" selected="true" /><select idref="V-237642" selected="true" /><select idref="V-237643" selected="true" /><select idref="V-244519" selected="true" /><select idref="V-244521" selected="true" /><select idref="V-244522" selected="true" /><select idref="V-244523" selected="true" /><select idref="V-244524" selected="true" /><select idref="V-244525" selected="true" /><select idref="V-244527" selected="true" /><select idref="V-244528" selected="true" /><select idref="V-244529" selected="true" /><select idref="V-244530" selected="true" /><select idref="V-244531" selected="true" /><select idref="V-244532" selected="true" /><select idref="V-244533" selected="true" /><select idref="V-244534" selected="true" /><select idref="V-244535" selected="true" /><select idref="V-244536" selected="true" /><select idref="V-244538" selected="true" /><select idref="V-244539" selected="true" /><select idref="V-244541" selected="true" /><select idref="V-244542" selected="true" /><select idref="V-244543" selected="true" /><select idref="V-244544" selected="true" /><select idref="V-244545" selected="true" /><select idref="V-244546" selected="true" /><select idref="V-244547" selected="true" /><select idref="V-244548" selected="true" /><select idref="V-244549" selected="true" /><select idref="V-244550" selected="true" /><select idref="V-244551" selected="true" /><select idref="V-244552" selected="true" /><select idref="V-244553" selected="true" /><select idref="V-244554" selected="true" /><select idref="V-250315" selected="true" /><select idref="V-250316" selected="true" /><select idref="V-250317" selected="true" /><select idref="V-251706" selected="true" /><select idref="V-251707" selected="true" /><select idref="V-251708" selected="true" /><select idref="V-251709" selected="true" /><select idref="V-251710" selected="true" /><select idref="V-251711" selected="true" /><select idref="V-251712" selected="true" /><select idref="V-251713" selected="true" /><select idref="V-251716" selected="true" /><select idref="V-251718" selected="true" /><select idref="V-254520" selected="true" /><select idref="V-256973" selected="true" /><select idref="V-256974" selected="true" /><select idref="V-257258" selected="true" /><select idref="V-268322" selected="true" /><select idref="V-272482" selected="true" /><select idref="V-272483" selected="true" /><select idref="V-272484" selected="true" /><select idref="V-274877" selected="true" /><select idref="V-279929" selected="true" /><select idref="V-279930" selected="true" /><select idref="V-279931" selected="true" /><select idref="V-279932" selected="true" /><select idref="V-279933" selected="true" /></Profile><Group id="V-230221"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230221r1017040_rule" weight="10.0" severity="high"><version>RHEL-08-010000</version><title>RHEL 8 must be a vendor-supported release.</title><description>&lt;VulnDiscussion&gt;An operating system release is considered "supported" if the vendor continues to provide security patches for the product. With an unsupported release, it will not be possible to resolve security issues discovered in the system software.
 
 Red Hat offers the Extended Update Support (EUS) add-on to a Red Hat Enterprise Linux subscription, for a fee, for those customers who wish to standardize on a specific minor release for an extended period. The RHEL 8 minor releases eligible for EUS are 8.1, 8.2, 8.4, 8.6, and 8.8. Each RHEL 8 EUS stream is available for 24 months from the availability of the minor release. RHEL 8.10 will be the final minor release overall. For more details on the Red Hat Enterprise Linux Life Cycle  visit https://access.redhat.com/support/policy/updates/errata/.
 Note: The life-cycle time spans and dates are subject to adjustment.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-32865r567410_fix">Upgrade to a supported version of RHEL 8.</fixtext><fix id="F-32865r567410_fix" /><check system="C-32890r858733_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify the version of the operating system is vendor supported.
@@ -49,34 +49,50 @@ If package updates have not been performed on the system within the timeframe th
 
 Typical update frequency may be overridden by Information Assurance Vulnerability Alert (IAVA) notifications from CYBERCOM.
 
-If the operating system is in non-compliance with the Information Assurance Vulnerability Management (IAVM) process, this is a finding.</check-content></check></Rule></Group><Group id="V-230223"><title>SRG-OS-000033-GPOS-00014</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230223r1069327_rule" weight="10.0" severity="high"><version>RHEL-08-010020</version><title>RHEL 8 must implement NIST FIPS-validated cryptography for the following: To provision digital signatures, to generate cryptographic hashes, and to protect data requiring data-at-rest protections in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, and standards.</title><description>&lt;VulnDiscussion&gt;Use of weak or untested encryption algorithms undermines the purposes of using encryption to protect data. The operating system must implement cryptographic modules adhering to the higher standards approved by the federal government since this provides assurance they have been tested and validated.
+If the operating system is in non-compliance with the Information Assurance Vulnerability Management (IAVM) process, this is a finding.</check-content></check></Rule></Group><Group id="V-230223"><title>SRG-OS-000033-GPOS-00014</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230223r1155356_rule" weight="10.0" severity="high"><version>RHEL-08-010020</version><title>RHEL 8 must implement a FIPS 140-3-compliant systemwide cryptographic policy.</title><description>&lt;VulnDiscussion&gt;Centralized cryptographic policies simplify applying secure ciphers across an operating system and the applications that run on that operating system. Use of weak or untested encryption algorithms undermines the purposes of using encryption to protect data.
 
-RHEL 8 utilizes GRUB 2 as the default bootloader. Note that GRUB 2 command-line parameters are defined in the "kernelopts" variable of the /boot/grub2/grubenv file for all kernel boot entries. The command "fips-mode-setup" modifies the "kernelopts" variable, which in turn updates all kernel boot entries. 
+Satisfies: SRG-OS-000033-GPOS-00014, SRG-OS-000125-GPOS-00065, SRG-OS-000396-GPOS-00176, SRG-OS-000423-GPOS-00187, SRG-OS-000478-GPOS-00223, SRG-OS-000393-GPOS-00173, SRG-OS-000394-GPOS-00174&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000068</ident><fixtext fixref="F-32867r1155355_fix">Configure RHEL 8 to use a FIPS 140-3-compliant systemwide cryptographic policy.
 
-The fips=1 kernel option needs to be added to the kernel command line during system installation so that key generation is done with FIPS-approved algorithms and continuous monitoring tests in place. Users must also ensure the system has plenty of entropy during the installation process by moving the mouse around, or if no mouse is available, ensuring that many keystrokes are typed. The recommended amount of keystrokes is 256 and more. Less than 256 keystrokes may generate a nonunique key.
+Create a subpolicy for enhancements to the base systemwide crypto-policy by creating the file /etc/crypto-policies/policies/modules/STIG.pmod with the following content:
 
-Satisfies: SRG-OS-000033-GPOS-00014, SRG-OS-000125-GPOS-00065, SRG-OS-000396-GPOS-00176, SRG-OS-000423-GPOS-00187, SRG-OS-000478-GPOS-00223&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000068</ident><fixtext fixref="F-32867r928584_fix">Configure the operating system to implement DOD-approved encryption by following the steps below:
+# Define ciphers and MACs for OpenSSH and libssh
+cipher@SSH=AES-256-GCM AES-256-CTR AES-128-GCM AES-128-CTR
+mac@SSH=HMAC-SHA2-512 HMAC-SHA2-256
 
-To enable strict FIPS compliance, the fips=1 kernel option needs to be added to the kernel boot parameters during system installation so key generation is done with FIPS-approved algorithms and continuous monitoring tests in place.
+Apply the policy enhancements to the FIPS systemwide cryptographic policy level with the following command:
 
-Enable FIPS mode after installation (not strict FIPS-compliant) with the following command:
+$ sudo update-crypto-policies --set FIPS:STIG
 
-     $ sudo fips-mode-setup --enable
+Note: If additional subpolicies are being employed, they must be added to the update-crypto-policies command.
 
-Reboot the system for the changes to take effect.</fixtext><fix id="F-32867r928584_fix" /><check system="C-32892r1069263_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify the operating system implements DOD-approved encryption to protect the confidentiality of remote access sessions.
+To make the cryptographic settings effective for already running services and applications, restart the system:
 
-Show the configured systemwide cryptographic policy by running the following command:
+$ sudo reboot</fixtext><fix id="F-32867r1155355_fix" /><check system="C-32892r1155354_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify RHEL 8 is set to use a FIPS 140-3-compliant systemwide cryptographic policy with the following command:
 
 $ sudo update-crypto-policies --show
-FIPS
 
-If the main policy name is not "FIPS", this is a finding.
+FIPS:STIG
 
-If the AD-SUPPORT subpolicy module is included (e.g., "FIPS:AD-SUPPORT"), and Active Directory support is not documented as an operational requirement with the information system security officer (ISSO), this is a finding.
+If the systemwide crypto policy is not set to "FIPS", this is a finding.
 
-If the NO-ENFORCE-EMS subpolicy module is included (e.g., "FIPS:NO-ENFORCE-EMS"), and not enforcing EMS is not documented as an operational requirement with the ISSO, this is a finding.
+Note: If subpolicies have been configured, they could be listed in a colon-separated list starting with "FIPS" as follows FIPS:&lt;SUBPOLICY-NAME&gt;. This is not a finding.
 
-If any other subpolicy module is included, this is a finding.</check-content></check></Rule></Group><Group id="V-230224"><title>SRG-OS-000185-GPOS-00079</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230224r1044787_rule" weight="10.0" severity="high"><version>RHEL-08-010030</version><title>All RHEL 8 local disk partitions must implement cryptographic mechanisms to prevent unauthorized disclosure or modification of all information that requires at rest protection.</title><description>&lt;VulnDiscussion&gt;RHEL 8 systems handling data requiring "data at rest" protections must employ cryptographic mechanisms to prevent unauthorized disclosure and modification of the information at rest.
+Note: Subpolicies like AD-SUPPORT must be configured according to the latest guidance from the operating system vendor.
+
+Verify the current minimum crypto-policy configuration with the following commands:
+
+$ sudo grep -E 'rsa_size|hash' /etc/crypto-policies/state/CURRENT.pol
+
+hash = SHA2-256 SHA2-384 SHA2-512 SHA2-224 SHA3-256 SHA3-384 SHA3-512
+min_rsa_size = 2048
+
+If the "hash" values do not include at least the following FIPS 140-3-compliant algorithms "SHA2-256 SHA2-384 SHA2-512 SHA2-224 SHA3-256 SHA3-384 SHA3-512", this is a finding.
+
+If there are algorithms that include "SHA1" or a hash value less than "224" this is a finding.
+
+If the "min_rsa_size" is not set to a value of at least "2048", this is a finding.
+
+If these commands do not return any output, this is a finding.</check-content></check></Rule></Group><Group id="V-230224"><title>SRG-OS-000185-GPOS-00079</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230224r1044787_rule" weight="10.0" severity="high"><version>RHEL-08-010030</version><title>All RHEL 8 local disk partitions must implement cryptographic mechanisms to prevent unauthorized disclosure or modification of all information that requires at rest protection.</title><description>&lt;VulnDiscussion&gt;RHEL 8 systems handling data requiring "data at rest" protections must employ cryptographic mechanisms to prevent unauthorized disclosure and modification of the information at rest.
 
 Selection of a cryptographic mechanism is based on the need to protect the integrity of organizational information. The strength of the mechanism is commensurate with the security category and/or classification of the information. Organizations have the flexibility to either encrypt all information on storage devices (i.e., full disk encryption) or encrypt specific data structures (e.g., files, records, or fields).
 
@@ -370,7 +386,7 @@ SHA_CRYPT_MIN_ROUNDS 100000</fixtext><fix id="F-32877r1044789_fix" /><check syst
 
 If only one of "SHA_CRYPT_MIN_ROUNDS" or "SHA_CRYPT_MAX_ROUNDS" is set, and this value is below "100000", this is a finding.
 
-If both "SHA_CRYPT_MIN_ROUNDS" and "SHA_CRYPT_MAX_ROUNDS" are set, and the highest value for either is below "100000", this is a finding.</check-content></check></Rule></Group><Group id="V-230234"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230234r1117265_rule" weight="10.0" severity="high"><version>RHEL-08-010140</version><title>RHEL 8 operating systems booted with United Extensible Firmware Interface (UEFI) must require authentication upon booting into single-user mode and maintenance.</title><description>&lt;VulnDiscussion&gt;If the system does not require valid authentication before it boots into single-user or maintenance mode, anyone who invokes single-user or maintenance mode is granted privileged access to all files on the system. GRUB 2 is the default boot loader for RHEL 8 and is designed to require a password to boot into single-user mode or make modifications to the boot menu.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-32878r743921_fix">Configure the system to require a grub bootloader password for the grub superusers account with the grub2-setpassword command, which creates/overwrites the /boot/efi/EFI/redhat/user.cfg file.
+If both "SHA_CRYPT_MIN_ROUNDS" and "SHA_CRYPT_MAX_ROUNDS" are set, and the highest value for either is below "100000", this is a finding.</check-content></check></Rule></Group><Group id="V-230234"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230234r1137691_rule" weight="10.0" severity="high"><version>RHEL-08-010140</version><title>RHEL 8 operating systems booted with United Extensible Firmware Interface (UEFI) must require authentication upon booting into single-user mode and maintenance.</title><description>&lt;VulnDiscussion&gt;If the system does not require valid authentication before it boots into single-user or maintenance mode, anyone who invokes single-user or maintenance mode is granted privileged access to all files on the system. GRUB 2 is the default boot loader for RHEL 8 and is designed to require a password to boot into single-user mode or make modifications to the boot menu.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-32878r743921_fix">Configure the system to require a grub bootloader password for the grub superusers account with the grub2-setpassword command, which creates/overwrites the /boot/efi/EFI/redhat/user.cfg file.
 
 Generate an encrypted grub2 password for the grub superusers account with the following command:
 
@@ -384,7 +400,7 @@ $ sudo grep -iw grub2_password /boot/efi/EFI/redhat/user.cfg
 
 GRUB2_PASSWORD=grub.pbkdf2.sha512.[password_hash]
 
-If the grub superusers password does not begin with "grub.pbkdf2.sha512", this is a finding.</check-content></check></Rule></Group><Group id="V-230235"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230235r1117265_rule" weight="10.0" severity="high"><version>RHEL-08-010150</version><title>RHEL 8 operating systems booted with a BIOS must require authentication upon booting into single-user and maintenance modes.</title><description>&lt;VulnDiscussion&gt;If the system does not require valid authentication before it boots into single-user or maintenance mode, anyone who invokes single-user or maintenance mode is granted privileged access to all files on the system. GRUB 2 is the default boot loader for RHEL 8 and is designed to require a password to boot into single-user mode or make modifications to the boot menu.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-32879r743924_fix">Configure the system to require a grub bootloader password for the grub superusers account with the grub2-setpassword command, which creates/overwrites the /boot/grub2/user.cfg file.
+If the grub superusers password does not begin with "grub.pbkdf2.sha512", this is a finding.</check-content></check></Rule></Group><Group id="V-230235"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230235r1137691_rule" weight="10.0" severity="high"><version>RHEL-08-010150</version><title>RHEL 8 operating systems booted with a BIOS must require authentication upon booting into single-user and maintenance modes.</title><description>&lt;VulnDiscussion&gt;If the system does not require valid authentication before it boots into single-user or maintenance mode, anyone who invokes single-user or maintenance mode is granted privileged access to all files on the system. GRUB 2 is the default boot loader for RHEL 8 and is designed to require a password to boot into single-user mode or make modifications to the boot menu.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-32879r743924_fix">Configure the system to require a grub bootloader password for the grub superusers account with the grub2-setpassword command, which creates/overwrites the /boot/grub2/user.cfg file.
 
 Generate an encrypted grub2 password for the grub superusers account with the following command:
 
@@ -398,7 +414,7 @@ $ sudo grep -iw grub2_password /boot/grub2/user.cfg
 
 GRUB2_PASSWORD=grub.pbkdf2.sha512.[password_hash]
 
-If the grub superusers password does not begin with "grub.pbkdf2.sha512", this is a finding.</check-content></check></Rule></Group><Group id="V-230236"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230236r1117265_rule" weight="10.0" severity="medium"><version>RHEL-08-010151</version><title>RHEL 8 operating systems must require authentication upon booting into rescue mode.</title><description>&lt;VulnDiscussion&gt;If the system does not require valid root authentication before it boots into emergency or rescue mode, anyone who invokes emergency or rescue mode is granted privileged access to all files on the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-32880r743927_fix">Configure the system to require authentication upon booting into rescue mode by adding the following line to the "/usr/lib/systemd/system/rescue.service" file.
+If the grub superusers password does not begin with "grub.pbkdf2.sha512", this is a finding.</check-content></check></Rule></Group><Group id="V-230236"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230236r1137691_rule" weight="10.0" severity="medium"><version>RHEL-08-010151</version><title>RHEL 8 operating systems must require authentication upon booting into rescue mode.</title><description>&lt;VulnDiscussion&gt;If the system does not require valid root authentication before it boots into emergency or rescue mode, anyone who invokes emergency or rescue mode is granted privileged access to all files on the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-32880r743927_fix">Configure the system to require authentication upon booting into rescue mode by adding the following line to the "/usr/lib/systemd/system/rescue.service" file.
 
 ExecStart=-/usr/lib/systemd/systemd-sulogin-shell rescue</fixtext><fix id="F-32880r743927_fix" /><check system="C-32905r743926_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Check to see if the system requires authentication for rescue mode with the following command:
 
@@ -480,7 +496,7 @@ $ sudo yum list installed policycoreutils
 
 policycoreutils.x86_64                                              2.9-3.el8                                                  @anaconda
 
-If the policycoreutils package is not installed, this is a finding.</check-content></check></Rule></Group><Group id="V-230243"><title>SRG-OS-000138-GPOS-00069</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230243r1117267_rule" weight="10.0" severity="medium"><version>RHEL-08-010190</version><title>A sticky bit must be set on all RHEL 8 public directories to prevent unauthorized and unintended information transferred via shared system resources.</title><description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
+If the policycoreutils package is not installed, this is a finding.</check-content></check></Rule></Group><Group id="V-230243"><title>SRG-OS-000138-GPOS-00069</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230243r1137695_rule" weight="10.0" severity="medium"><version>RHEL-08-010190</version><title>A sticky bit must be set on all RHEL 8 public directories to prevent unauthorized and unintended information transferred via shared system resources.</title><description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
 
 This requirement generally applies to the design of an information technology product, but it can also apply to the configuration of particular information system components that are, or use, such products. This can be verified by acceptance/validation processes in DoD or other government agencies.
 
@@ -582,152 +598,82 @@ $ sudo stat -c "%G" /var/log
 
 root
 
-If "root" is not returned as a result, this is a finding.</check-content></check></Rule></Group><Group id="V-230251"><title>SRG-OS-000250-GPOS-00093</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230251r1044814_rule" weight="10.0" severity="medium"><version>RHEL-08-010290</version><title>The RHEL 8 SSH server must be configured to use only Message Authentication Codes (MACs) employing FIPS 140-3 validated cryptographic hash algorithms.</title><description>&lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
-
-Remote access (e.g., RDP) is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
-
-Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
-
-RHEL 8 incorporates systemwide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the /etc/sysconfig/sshd file. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/opensshserver.config file.
-
-The system will attempt to use the first hash presented by the client that matches the server list. Listing the values "strongest to weakest" is a method to ensure the use of the strongest hash available to secure the SSH connection.
-
-Satisfies: SRG-OS-000250-GPOS-00093, SRG-OS-000393-GPOS-00173, SRG-OS-000394-GPOS-00174, SRG-OS-000125-GPOS-00065&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001453</ident><fixtext fixref="F-32895r1044813_fix">Configure the RHEL 8 SSH server to use only MACs employing FIPS 140-3 approved algorithms by updating the "/etc/crypto-policies/back-ends/opensshserver.config" file with the following commands.
-
-To manually update the MACs in the systemwide SSH configuration, use the following command:
-
-$ sudo sed -i -E 's/(-oMACs=)[^ ]*/\1hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-256/' "$(readlink -f /etc/crypto-policies/back-ends/opensshserver.config)"
-
-A reboot is required for the changes to take effect.</fixtext><fix id="F-32895r1044813_fix" /><check system="C-32920r1044812_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify the RHEL 8 SSH server is configured to use only MACs employing FIPS 140-3 approved algorithms.
-
-To verify the MACs in the systemwide SSH configuration file, use the following command:
-
-$ sudo grep -i macs /etc/crypto-policies/back-ends/opensshserver.config
--oMACs=hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-256
-
-If the MACs entries in the "opensshserver.config" file have any hashes other than "hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-256", the order differs from the example above, or they are missing or commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-230252"><title>SRG-OS-000250-GPOS-00093</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230252r1067104_rule" weight="10.0" severity="medium"><version>RHEL-08-010291</version><title>The RHEL 8 operating system must implement DOD-approved encryption to protect the confidentiality of SSH server connections.</title><description>&lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
-
-Remote access (e.g., RDP) is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
-
-Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
-
-RHEL 8 incorporates systemwide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the /etc/sysconfig/sshd file. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/opensshserver.config file.
-
-The system will attempt to use the first hash presented by the client that matches the server list. Listing the values "strongest to weakest" is a method to ensure the use of the strongest hash available to secure the SSH connection.
-
-Satisfies: SRG-OS-000250-GPOS-00093, SRG-OS-000393-GPOS-00173, SRG-OS-000394-GPOS-00174, SRG-OS-000125-GPOS-00065&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001453</ident><fixtext fixref="F-32896r1044816_fix">Configure the RHEL 8 SSH server to use only ciphers employing FIPS 140-3 approved algorithms by updating the "/etc/crypto-policies/back-ends/opensshserver.config" file with the following commands.
-
-To manually update the ciphers in the systemwide SSH configuration, use the following command:
-
-$ sudo sed -i -E 's/(-oCiphers=)[^ ]*/\1aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes128-ctr/' "$(readlink -f /etc/crypto-policies/back-ends/opensshserver.config)"
-
-A reboot is required for the changes to take effect.</fixtext><fix id="F-32896r1044816_fix" /><check system="C-32921r1067104_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify the SSH server is configured to use only ciphers employing FIPS 140-3 approved algorithms.
-
-To verify the ciphers in the systemwide SSH configuration file, use the following command:
-
-$ sudo grep -i ciphers /etc/crypto-policies/back-ends/opensshserver.config 
--oCiphers=aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes128-ctr
-
-If the ciphers entries in the "opensshserver.config" file have any hashes other than "aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes128-ctr", the order differs from the example above, or they are missing or commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-230253"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230253r1044799_rule" weight="10.0" severity="low"><version>RHEL-08-010292</version><title>RHEL 8 must ensure the SSH server uses strong entropy.</title><description>&lt;VulnDiscussion&gt;The most important characteristic of a random number generator is its randomness, namely its ability to deliver random numbers that are impossible to predict. Entropy in computer security is associated with the unpredictability of a source of randomness. The random source with high entropy tends to achieve a uniform distribution of random values. Random number generators are one of the most important building blocks of cryptosystems.
-
-The SSH implementation in RHEL 8 uses the OPENSSL library, which does not use high-entropy sources by default. By using the SSH_USE_STRONG_RNG environment variable the OPENSSL random generator is reseeded from /dev/random. This setting is not recommended on computers without the hardware random generator because insufficient entropy causes the connection to be blocked until enough entropy is available.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-32897r1044798_fix">Configure the operating system SSH server to use strong entropy.
-
-Add or modify the following line in the "/etc/sysconfig/sshd" file.
-
-SSH_USE_STRONG_RNG=32
-
-The SSH service must be restarted for changes to take effect.
-
-Restart the SSH Daemon with the following command:
-
-$ sudo systemctl restart sshd.service</fixtext><fix id="F-32897r1044798_fix" /><check system="C-32922r1044797_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Note: If the operating system is RHEL versions 8.0 or 8.1, this requirement is not applicable.
-
-Verify the operating system SSH server uses strong entropy with the following command:
-
-$ sudo grep -i ssh_use_strong_rng /etc/sysconfig/sshd
-
-SSH_USE_STRONG_RNG=32
-
-If the "SSH_USE_STRONG_RNG" line does not equal "32", is commented out, or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-230254"><title>SRG-OS-000250-GPOS-00093</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230254r1017072_rule" weight="10.0" severity="medium"><version>RHEL-08-010293</version><title>The RHEL 8 operating system must implement DoD-approved encryption in the OpenSSL package.</title><description>&lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
+If "root" is not returned as a result, this is a finding.</check-content></check></Rule></Group><Group id="V-230251"><title>SRG-OS-000250-GPOS-00093</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230251r1155370_rule" weight="10.0" severity="medium"><version>RHEL-08-010290</version><title>The RHEL 8 SSH server must be configured to use only Message Authentication Codes (MACs) employing FIPS 140-3-validated cryptographic hash algorithms to protect the confidentiality of SSH server connections.</title><description>&lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
 
-Remote access (e.g., RDP) is access to DoD nonpublic information systems by an authorized user (or an information system) communicating through an external, non-organization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
+Remote access (e.g., RDP) is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
 
 Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
 
-RHEL 8 incorporates system-wide crypto policies by default.  The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/openssl.config file.
+RHEL 8 incorporates systemwide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the /etc/sysconfig/sshd file. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/opensshserver.config file.
 
-Satisfies: SRG-OS-000250-GPOS-00093, SRG-OS-000393-GPOS-00173, SRG-OS-000394-GPOS-00174, SRG-OS-000125-GPOS-00065&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001453</ident><fixtext fixref="F-32898r567509_fix">Configure the RHEL 8 OpenSSL library to use only ciphers employing FIPS 140-2-approved algorithms with the following command:
+Satisfies: SRG-OS-000250-GPOS-00093, SRG-OS-000393-GPOS-00173, SRG-OS-000394-GPOS-00174, SRG-OS-000125-GPOS-00065&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001453</ident><fixtext fixref="F-32895r1155369_fix">Configure the RHEL 8 SSH server to use only MACs employing FIPS 140-3-approved algorithms.
 
-$ sudo fips-mode-setup --enable
+Reinstall crypto-policies with the following command:
 
-A reboot is required for the changes to take effect.</fixtext><fix id="F-32898r567509_fix" /><check system="C-32923r567508_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify the OpenSSL library is configured to use only ciphers employing FIPS 140-2-approved algorithms:
+$ sudo dnf -y reinstall crypto-policies
 
-Verify that system-wide crypto policies are in effect:
+Set the crypto-policy to FIPS with the following command:
 
-$ sudo grep -i opensslcnf.config /etc/pki/tls/openssl.cnf
+$ sudo update-crypto-policies --set FIPS
 
-.include /etc/crypto-policies/back-ends/opensslcnf.config
+Setting system policy to FIPS
 
-If the "opensslcnf.config" is not defined in the "/etc/pki/tls/openssl.cnf" file, this is a finding.
+Note: Systemwide crypto policies are applied on application startup. It is recommended to restart the system for the change of policies to fully take place.</fixtext><fix id="F-32895r1155369_fix" /><check system="C-32920r1155368_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify the RHEL 8 SSH server is configured to use only MACs employing FIPS 140-3-approved algorithms.
 
-Verify which system-wide crypto policy is in use:
+To verify the MACs in the systemwide SSH configuration file, use the following command:
 
-$ sudo update-crypto-policies --show
+$ sudo grep -i MACs /etc/crypto-policies/back-ends/opensshserver.config
 
-FIPS
+-oMACs=hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-256
 
-If the system-wide crypto policy is set to anything other than "FIPS", this is a finding.</check-content></check></Rule></Group><Group id="V-230255"><title>SRG-OS-000250-GPOS-00093</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230255r1017075_rule" weight="10.0" severity="medium"><version>RHEL-08-010294</version><title>The RHEL 8 operating system must implement DoD-approved TLS encryption in the OpenSSL package.</title><description>&lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
+If the MACs entries in the "opensshserver.config" file have any hashes other than "hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-256", or they are missing or commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-230252"><title>SRG-OS-000250-GPOS-00093</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230252r1155364_rule" weight="10.0" severity="medium"><version>RHEL-08-010291</version><title>The RHEL 8 SSH server must be configured to use only DOD-approved encryption ciphers employing FIPS 140-3-validated cryptographic hash algorithms to protect the confidentiality of SSH server connections.</title><description>&lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
 
-Remote access (e.g., RDP) is access to DoD nonpublic information systems by an authorized user (or an information system) communicating through an external, non-organization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
+Remote access (e.g., RDP) is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
 
 Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
 
-RHEL 8 incorporates system-wide crypto policies by default.  The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/openssl.config file.
+RHEL 8 incorporates systemwide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the /etc/sysconfig/sshd file. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/opensshserver.config file.
 
-Satisfies: SRG-OS-000250-GPOS-00093, SRG-OS-000393-GPOS-00173, SRG-OS-000394-GPOS-00174, SRG-OS-000125-GPOS-00065&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001453</ident><fixtext fixref="F-32899r1017074_fix">Configure the RHEL 8 OpenSSL library to use only DoD-approved TLS encryption by editing the following line in the "/etc/crypto-policies/back-ends/opensslcnf.config" file:
+Satisfies: SRG-OS-000250-GPOS-00093, SRG-OS-000393-GPOS-00173, SRG-OS-000394-GPOS-00174, SRG-OS-000125-GPOS-00065&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001453</ident><fixtext fixref="F-32896r1155363_fix">Configure the RHEL 8 SSH server to use only ciphers employing FIPS 140-3-approved algorithms.
 
-For versions prior to crypto-policies-20210617-1.gitc776d3e.el8.noarch:
-MinProtocol = TLSv1.2
+Reinstall crypto-policies with the following command:
 
-For version crypto-policies-20210617-1.gitc776d3e.el8.noarch and newer:
-TLS.MinProtocol = TLSv1.2
-DTLS.MinProtocol = DTLSv1.2
-A reboot is required for the changes to take effect.</fixtext><fix id="F-32899r1017074_fix" /><check system="C-32924r1017073_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify the OpenSSL library is configured to use only DoD-approved TLS encryption:
+$ sudo dnf -y reinstall crypto-policies
 
-For versions prior to crypto-policies-20210617-1.gitc776d3e.el8.noarch:
+Set the crypto-policy to FIPS with the following command:
 
-$ sudo grep -i  MinProtocol /etc/crypto-policies/back-ends/opensslcnf.config
+$ sudo update-crypto-policies --set FIPS
 
-MinProtocol = TLSv1.2
+Setting system policy to FIPS
 
-If the "MinProtocol" is set to anything older than "TLSv1.2", this is a finding.
+Note: Systemwide crypto policies are applied on application startup. It is recommended to restart the system for the change of policies to fully take place.</fixtext><fix id="F-32896r1155363_fix" /><check system="C-32921r1155362_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify the RHEL 8 SSH server is configured to use only ciphers employing FIPS 140-3-approved algorithms.
 
-For version crypto-policies-20210617-1.gitc776d3e.el8.noarch and newer:
+To verify the ciphers in the systemwide SSH configuration file, use the following command:
 
-$ sudo grep -i  MinProtocol /etc/crypto-policies/back-ends/opensslcnf.config
+$ sudo grep -i Ciphers /etc/crypto-policies/back-ends/opensshserver.config 
+CRYPTO_POLICY='-oCiphers=aes256-gcm@openssh.com,aes256-ctr,aes128-gcm@openssh.com,aes128-ctr
 
-TLS.MinProtocol = TLSv1.2
-DTLS.MinProtocol = DTLSv1.2
+If the cipher entries in the "opensshserver.config" file have any ciphers other than "aes256-gcm@openssh.com,aes256-ctr,aes128-gcm@openssh.com,aes128-ctr", or they are missing or commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-230253"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230253r1044799_rule" weight="10.0" severity="low"><version>RHEL-08-010292</version><title>RHEL 8 must ensure the SSH server uses strong entropy.</title><description>&lt;VulnDiscussion&gt;The most important characteristic of a random number generator is its randomness, namely its ability to deliver random numbers that are impossible to predict. Entropy in computer security is associated with the unpredictability of a source of randomness. The random source with high entropy tends to achieve a uniform distribution of random values. Random number generators are one of the most important building blocks of cryptosystems.
 
-If the "TLS.MinProtocol" is set to anything older than "TLSv1.2" or the "DTLS.MinProtocol" is set to anything older than DTLSv1.2, this is a finding.</check-content></check></Rule></Group><Group id="V-230256"><title>SRG-OS-000250-GPOS-00093</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230256r1017076_rule" weight="10.0" severity="medium"><version>RHEL-08-010295</version><title>The RHEL 8 operating system must implement DoD-approved TLS encryption in the GnuTLS package.</title><description>&lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
+The SSH implementation in RHEL 8 uses the OPENSSL library, which does not use high-entropy sources by default. By using the SSH_USE_STRONG_RNG environment variable the OPENSSL random generator is reseeded from /dev/random. This setting is not recommended on computers without the hardware random generator because insufficient entropy causes the connection to be blocked until enough entropy is available.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-32897r1044798_fix">Configure the operating system SSH server to use strong entropy.
 
-Transport Layer Security (TLS) encryption is a required security setting as a number of known vulnerabilities have been reported against Secure Sockets Layer (SSL) and earlier versions of TLS. Encryption of private information is essential to ensuring data confidentiality. If private information is not encrypted, it can be intercepted and easily read by an unauthorized party. SQL Server must use a minimum of FIPS 140-2-approved TLS version 1.2, and all non-FIPS-approved SSL and TLS versions must be disabled. NIST SP 800-52 specifies the preferred configurations for government systems.
+Add or modify the following line in the "/etc/sysconfig/sshd" file.
 
-Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
+SSH_USE_STRONG_RNG=32
 
-The GnuTLS library offers an API to access secure communications protocols.  SSLv2 is not available in the GnuTLS library.  The RHEL 8 system-wide crypto policy defines employed algorithms in the /etc/crypto-policies/back-ends/gnutls.config file.
+The SSH service must be restarted for changes to take effect.
 
-Satisfies: SRG-OS-000250-GPOS-00093, SRG-OS-000423-GPOS-00187&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001453</ident><fixtext fixref="F-32900r567515_fix">Configure the RHEL 8 GnuTLS library to use only DoD-approved encryption by adding the following line to "/etc/crypto-policies/back-ends/gnutls.config":
+Restart the SSH Daemon with the following command:
 
-+VERS-ALL:-VERS-DTLS0.9:-VERS-SSL3.0:-VERS-TLS1.0:-VERS-TLS1.1:-VERS-DTLS1.0
+$ sudo systemctl restart sshd.service</fixtext><fix id="F-32897r1044798_fix" /><check system="C-32922r1044797_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Note: If the operating system is RHEL versions 8.0 or 8.1, this requirement is not applicable.
 
-A reboot is required for the changes to take effect.</fixtext><fix id="F-32900r567515_fix" /><check system="C-32925r792858_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify the GnuTLS library is configured to only allow DoD-approved SSL/TLS Versions:
+Verify the operating system SSH server uses strong entropy with the following command:
 
-$ sudo grep -io +vers.*  /etc/crypto-policies/back-ends/gnutls.config
+$ sudo grep -i ssh_use_strong_rng /etc/sysconfig/sshd
 
-+VERS-ALL:-VERS-DTLS0.9:-VERS-SSL3.0:-VERS-TLS1.0:-VERS-TLS1.1:-VERS-DTLS1.0:+COMP-NULL:%PROFILE_MEDIUM
+SSH_USE_STRONG_RNG=32
 
-If the "gnutls.config" does not list "-VERS-DTLS0.9:-VERS-SSL3.0:-VERS-TLS1.0:-VERS-TLS1.1:-VERS-DTLS1.0" to disable unapproved SSL/TLS versions, this is a finding.</check-content></check></Rule></Group><Group id="V-230257"><title>SRG-OS-000259-GPOS-00100</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230257r1017077_rule" weight="10.0" severity="medium"><version>RHEL-08-010300</version><title>RHEL 8 system commands must have mode 755 or less permissive.</title><description>&lt;VulnDiscussion&gt;If RHEL 8 were to allow any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
+If the "SSH_USE_STRONG_RNG" line does not equal "32", is commented out, or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-230257"><title>SRG-OS-000259-GPOS-00100</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230257r1017077_rule" weight="10.0" severity="medium"><version>RHEL-08-010300</version><title>RHEL 8 system commands must have mode 755 or less permissive.</title><description>&lt;VulnDiscussion&gt;If RHEL 8 were to allow any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
 
 This requirement applies to RHEL 8 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges. Only qualified and authorized individuals will be allowed to obtain access to information system components for purposes of initiating changes, including upgrades and modifications.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001499</ident><fixtext fixref="F-32901r792861_fix">Configure the system commands to be protected from unauthorized access.
 
@@ -775,7 +721,7 @@ $ sudo find /lib /lib64 /usr/lib /usr/lib64 -type f -name '*.so*' ! -user root -
 
 $ sudo find /lib /lib64 /usr/lib /usr/lib64 -type f -name '*.so*' ! -user root -exec stat -c "%n %U" {} +
 
-If any output is returned, this is a finding.</check-content></check></Rule></Group><Group id="V-230262"><title>SRG-OS-000259-GPOS-00100</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230262r1101894_rule" weight="10.0" severity="medium"><version>RHEL-08-010350</version><title>RHEL 8 library files must be group-owned by root or a system account.</title><description>&lt;VulnDiscussion&gt;If RHEL 8 were to allow any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
+If any output is returned, this is a finding.</check-content></check></Rule></Group><Group id="V-230262"><title>SRG-OS-000259-GPOS-00100</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230262r1155384_rule" weight="10.0" severity="medium"><version>RHEL-08-010350</version><title>RHEL 8 library files must be group-owned by root.</title><description>&lt;VulnDiscussion&gt;If RHEL 8 were to allow any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
 
 This requirement applies to RHEL 8 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges. Only qualified and authorized individuals will be allowed to obtain access to information system components for purposes of initiating changes, including upgrades and modifications.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001499</ident><fixtext fixref="F-32906r1101893_fix">Configure the systemwide shared library files contained in the directories "/lib", "/lib64", "/usr/lib", and "/usr/lib64" are group owned by root with the following command:
 
@@ -998,7 +944,7 @@ $ sudo grep -r fs.protected_hardlinks /run/sysctl.d/*.conf /usr/local/lib/sysctl
 
 If "fs.protected_hardlinks" is not set to "1", is missing or commented out, this is a finding.
 
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-230269"><title>SRG-OS-000138-GPOS-00069</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230269r1117267_rule" weight="10.0" severity="low"><version>RHEL-08-010375</version><title>RHEL 8 must restrict access to the kernel message buffer.</title><description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
+If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-230269"><title>SRG-OS-000138-GPOS-00069</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230269r1137695_rule" weight="10.0" severity="low"><version>RHEL-08-010375</version><title>RHEL 8 must restrict access to the kernel message buffer.</title><description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
 
 This requirement generally applies to the design of an information technology product, but it can also apply to the configuration of particular information system components that are, or use, such products. This can be verified by acceptance/validation processes in DoD or other government agencies.
 
@@ -1046,7 +992,7 @@ $ sudo grep -r kernel.dmesg_restrict /run/sysctl.d/*.conf /usr/local/lib/sysctl.
 
 If "kernel.dmesg_restrict" is not set to "1", is missing or commented out, this is a finding.
 
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-230270"><title>SRG-OS-000138-GPOS-00069</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230270r1117267_rule" weight="10.0" severity="low"><version>RHEL-08-010376</version><title>RHEL 8 must prevent kernel profiling by unprivileged users.</title><description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
+If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-230270"><title>SRG-OS-000138-GPOS-00069</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230270r1137695_rule" weight="10.0" severity="low"><version>RHEL-08-010376</version><title>RHEL 8 must prevent kernel profiling by unprivileged users.</title><description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
 
 This requirement generally applies to the design of an information technology product, but it can also apply to the configuration of particular information system components that are, or use, such products. This can be verified by acceptance/validation processes in DoD or other government agencies.
 
@@ -1552,7 +1498,9 @@ $ sudo mount | grep '\s/boot\s'
 
 /dev/sda1 on /boot type xfs (rw,nosuid,relatime,seclabe,attr2,inode64,noquota)
 
-If the /boot file system does not have the "nosuid" option set, this is a finding.</check-content></check></Rule></Group><Group id="V-230301"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230301r1017111_rule" weight="10.0" severity="medium"><version>RHEL-08-010580</version><title>RHEL 8 must prevent special devices on non-root local partitions.</title><description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for unprivileged users to attain unauthorized administrative access.  The only legitimate location for device files is the /dev directory located on the root partition.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-32945r567650_fix">Configure the "/etc/fstab" to use the "nodev" option on all non-root local partitions.</fixtext><fix id="F-32945r567650_fix" /><check system="C-32970r567649_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify all non-root local partitions are mounted with the "nodev" option with the following command:
+If the /boot file system does not have the "nosuid" option set, this is a finding.</check-content></check></Rule></Group><Group id="V-230301"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230301r1155405_rule" weight="10.0" severity="medium"><version>RHEL-08-010580</version><title>RHEL 8 must prevent special devices on non-root local partitions.</title><description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access. The only legitimate location for device files is the /dev directory located on the root partition.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-32945r567650_fix">Configure the "/etc/fstab" to use the "nodev" option on all non-root local partitions.</fixtext><fix id="F-32945r567650_fix" /><check system="C-32970r1155404_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Note: This control is not applicable to vfat file systems.
+
+Verify all non-root local partitions are mounted with the "nodev" option with the following command:
 
 $ sudo mount | grep '^/dev\S* on /\S' | grep --invert-match 'nodev'
 
@@ -1591,98 +1539,71 @@ $ sudo more /etc/fstab
 
 UUID=2bc871e4-e2a3-4f29-9ece-3be60c835222 /mnt/usbflash vfat noauto,owner,ro,nosuid,nodev,noexec 0 0
 
-If a file system found in "/etc/fstab" refers to removable media and it does not have the "nosuid" option set, this is a finding.</check-content></check></Rule></Group><Group id="V-230306"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230306r1017116_rule" weight="10.0" severity="medium"><version>RHEL-08-010630</version><title>RHEL 8 must prevent code from being executed on file systems that are imported via Network File System (NFS).</title><description>&lt;VulnDiscussion&gt;The "noexec" mount option causes the system not to execute binary files. This option must be used for mounting any file system not containing approved binary as they may be incompatible. Executing files from untrusted file systems increases the opportunity for unprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-32950r567665_fix">Configure the "/etc/fstab" to use the "noexec" option on file systems that are being imported via NFS.</fixtext><fix id="F-32950r567665_fix" /><check system="C-32975r567664_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify that  file systems being imported via NFS are mounted with the "noexec" option with the following command:
+If a file system found in "/etc/fstab" refers to removable media and it does not have the "nosuid" option set, this is a finding.</check-content></check></Rule></Group><Group id="V-230306"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230306r1155386_rule" weight="10.0" severity="medium"><version>RHEL-08-010630</version><title>RHEL 8 must prevent code from being executed on file systems that are imported via Network File System (NFS).</title><description>&lt;VulnDiscussion&gt;The "noexec" mount option causes the system not to execute binary files. This option must be used for mounting any file system not containing approved binary as they may be incompatible. Executing files from untrusted file systems increases the opportunity for unprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-32950r567665_fix">Configure the "/etc/fstab" to use the "noexec" option on file systems that are being imported via NFS.</fixtext><fix id="F-32950r567665_fix" /><check system="C-32975r1155385_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Note: If no NFS mounts are configured, this requirement is Not Applicable.
+
+Verify file systems being imported via NFS are mounted with the "noexec" option with the following command:
 
 $ sudo grep nfs /etc/fstab | grep noexec
 
 UUID=e06097bb-cfcd-437b-9e4d-a691f5662a7d /store nfs rw,nosuid,nodev,noexec 0 0
 
-If a file system found in "/etc/fstab" refers to NFS and it does not have the "noexec" option set, this is a finding.</check-content></check></Rule></Group><Group id="V-230307"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230307r1017117_rule" weight="10.0" severity="medium"><version>RHEL-08-010640</version><title>RHEL 8 must prevent special devices on file systems that are imported via Network File System (NFS).</title><description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for unprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-32951r567668_fix">Configure the "/etc/fstab" to use the "nodev" option on file systems that are being imported via NFS.</fixtext><fix id="F-32951r567668_fix" /><check system="C-32976r567667_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify file systems that are being NFS-imported are mounted with the "nodev" option with the following command:
+If a file system found in "/etc/fstab" refers to NFS and it does not have the "noexec" option set, this is a finding.</check-content></check></Rule></Group><Group id="V-230307"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230307r1155388_rule" weight="10.0" severity="medium"><version>RHEL-08-010640</version><title>RHEL 8 must prevent special devices on file systems that are imported via Network File System (NFS).</title><description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for unprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-32951r567668_fix">Configure the "/etc/fstab" to use the "nodev" option on file systems that are being imported via NFS.</fixtext><fix id="F-32951r567668_fix" /><check system="C-32976r1155387_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Note: If no NFS mounts are configured, this requirement is Not Applicable.
+
+Verify file systems that are being NFS-imported are mounted with the "nodev" option with the following command:
 
 $ sudo grep nfs /etc/fstab | grep nodev
 
 UUID=e06097bb-cfcd-437b-9e4d-a691f5662a7d /store nfs rw,nosuid,nodev,noexec 0 0
 
-If a file system found in "/etc/fstab" refers to NFS and it does not have the "nodev" option set, this is a finding.</check-content></check></Rule></Group><Group id="V-230308"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230308r1017118_rule" weight="10.0" severity="medium"><version>RHEL-08-010650</version><title>RHEL 8 must prevent files with the setuid and setgid bit set from being executed on file systems that are imported via Network File System (NFS).</title><description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system not to execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for unprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-32952r567671_fix">Configure the "/etc/fstab" to use the "nosuid" option on file systems that are being imported via NFS.</fixtext><fix id="F-32952r567671_fix" /><check system="C-32977r567670_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify that file systems being imported via NFS are mounted with the "nosuid" option with the following command:
+If a file system found in "/etc/fstab" refers to NFS and it does not have the "nodev" option set, this is a finding.</check-content></check></Rule></Group><Group id="V-230308"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230308r1155390_rule" weight="10.0" severity="medium"><version>RHEL-08-010650</version><title>RHEL 8 must prevent files with the setuid and setgid bit set from being executed on file systems that are imported via Network File System (NFS).</title><description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system not to execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for unprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-32952r567671_fix">Configure the "/etc/fstab" to use the "nosuid" option on file systems that are being imported via NFS.</fixtext><fix id="F-32952r567671_fix" /><check system="C-32977r1155389_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Note: If no NFS mounts are configured, this requirement is Not Applicable.
+
+Verify file systems being imported via NFS are mounted with the "nosuid" option with the following command:
 
 $ sudo grep nfs /etc/fstab | grep nosuid
 
 UUID=e06097bb-cfcd-437b-9e4d-a691f5662a7d /store nfs rw,nosuid,nodev,noexec 0 0
 
-If a file system found in "/etc/fstab" refers to NFS and it does not have the "nosuid" option set, this is a finding.</check-content></check></Rule></Group><Group id="V-230309"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230309r1017119_rule" weight="10.0" severity="medium"><version>RHEL-08-010660</version><title>Local RHEL 8 initialization files must not execute world-writable programs.</title><description>&lt;VulnDiscussion&gt;If user start-up files execute world-writable programs, especially in unprotected directories, they could be maliciously modified to destroy user files or otherwise compromise the system at the user level. If the system is compromised at the user level, it is easier to elevate privileges to eventually compromise the system at the root and network level.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-32953r567674_fix">Set the mode on files being executed by the local initialization files with the following command:
-
-$ sudo chmod 0755 &lt;file&gt;</fixtext><fix id="F-32953r567674_fix" /><check system="C-32978r567673_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify that local initialization files do not execute world-writable programs.
-
-Check the system for world-writable files.
-
-The following command will discover and print world-writable files. Run it once for each local partition [PART]: 
-
-$ sudo find [PART] -xdev -type f -perm -0002 -print
-
-For all files listed, check for their presence in the local initialization files with the following commands:
-
-Note: The example will be for a system that is configured to create user home directories in the "/home" directory.
-
-$ sudo grep &lt;file&gt; /home/*/.*
-
-If any local initialization files are found to reference world-writable files, this is a finding.</check-content></check></Rule></Group><Group id="V-230310"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230310r1017120_rule" weight="10.0" severity="medium"><version>RHEL-08-010670</version><title>RHEL 8 must disable kernel dumps unless needed.</title><description>&lt;VulnDiscussion&gt;Kernel core dumps may contain the full contents of system memory at the time of the crash. Kernel core dumps may consume a considerable amount of disk space and may result in denial of service by exhausting the available space on the target file system partition.
+If a file system found in "/etc/fstab" refers to NFS and it does not have the "nosuid" option set, this is a finding.</check-content></check></Rule></Group><Group id="V-230310"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230310r1155383_rule" weight="10.0" severity="medium"><version>RHEL-08-010670</version><title>RHEL 8 must disable kernel dumps unless needed.</title><description>&lt;VulnDiscussion&gt;Kernel core dumps may contain the full contents of system memory at the time of the crash. Kernel core dumps may consume a considerable amount of disk space and may result in denial of service by exhausting the available space on the target file system partition.
 
 RHEL 8 installation media presents the option to enable or disable the kdump service at the time of system installation.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-32954r567677_fix">If kernel core dumps are not required, disable the "kdump" service with the following command:
 
 # systemctl disable kdump.service
 
-If kernel core dumps are required, document the need with the ISSO.</fixtext><fix id="F-32954r567677_fix" /><check system="C-32979r567676_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify that kernel core dumps are disabled unless needed with the following command:
+If kernel core dumps are required, document the need with the ISSO.</fixtext><fix id="F-32954r567677_fix" /><check system="C-32979r1155382_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify RHEL 8 kernel core dumps are disabled unless needed with the following command:
 
 $ sudo systemctl status kdump.service
 
-kdump.service - Crash recovery kernel arming
-Loaded: loaded (/usr/lib/systemd/system/kdump.service; enabled; vendor preset: enabled)
-Active: active (exited) since Mon 2020-05-04 16:08:09 EDT; 3min ago
-Main PID: 1130 (code=exited, status=0/SUCCESS)
+o kdump.service - Crash recovery kernel arming
+   Loaded: loaded (/usr/lib/systemd/system/kdump.service; disabled; vendor preset: enabled)
+   Active: inactive (dead)
 
-If the "kdump" service is active, ask the System Administrator if the use of the service is required and documented with the Information System Security Officer (ISSO).
+If the "kdump" service is active, ask the system administrator if the use of the service is required and documented with the information system security officer (ISSO).
 
-If the service is active and is not documented, this is a finding.</check-content></check></Rule></Group><Group id="V-230311"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230311r1017121_rule" weight="10.0" severity="medium"><version>RHEL-08-010671</version><title>RHEL 8 must disable the kernel.core_pattern.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+If the service is active and is not documented, this is a finding.</check-content></check></Rule></Group><Group id="V-230311"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230311r1155408_rule" weight="10.0" severity="medium"><version>RHEL-08-010671</version><title>RHEL 8 must disable the kernel.core_pattern.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore, may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-32955r858768_fix">Configure RHEL 8 to disable storing core dumps.
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-32955r1155407_fix">Configure RHEL 8 to restrict usage of ptrace to descendant processes by adding the following line to a dropfile in the "/etc/sysctl.d" directory:
 
-Add or edit the following line in a system configuration file, in the "/etc/sysctl.d/" directory:
+Create a dropfile if it does not already exist:
+$ sudo vi /etc/sysctl.d/99-disable-coredump.conf
 
+Add the following to the file:
 kernel.core_pattern = |/bin/false
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
-
 The system configuration files need to be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
 
-$ sudo sysctl --system</fixtext><fix id="F-32955r858768_fix" /><check system="C-32980r833304_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify RHEL 8 disables storing core dumps with the following commands:
+$ sudo sysctl --system</fixtext><fix id="F-32955r1155407_fix" /><check system="C-32980r1155406_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify RHEL 8 disables storing core dumps with the following commands:
 
 $ sudo sysctl kernel.core_pattern
 
 kernel.core_pattern = |/bin/false
 
-If the returned line does not have a value of "|/bin/false", or a line is not returned and the need for core dumps is not documented with the Information System Security Officer (ISSO) as an operational requirement, this is a finding.
-
-Check that the configuration files are present to enable this kernel parameter.
-
-$ sudo grep -r kernel.core_pattern /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf:kernel.core_pattern = |/bin/false
-
-If "kernel.core_pattern" is not set to "|/bin/false", is missing or commented out, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-230312"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230312r1134877_rule" weight="10.0" severity="medium"><version>RHEL-08-010672</version><title>RHEL 8 must disable acquiring, saving, and processing core dumps.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+If the returned line does not have a value of "|/bin/false", or a line is not returned and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-230312"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230312r1134877_rule" weight="10.0" severity="medium"><version>RHEL-08-010672</version><title>RHEL 8 must disable acquiring, saving, and processing core dumps.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
 A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems.
 
@@ -1706,23 +1627,27 @@ systemd-coredump.socket
 Loaded: masked (Reason: Unit systemd-coredump.socket is masked.)
 Active: inactive (dead)
 
-If the "systemd-coredump.socket" is loaded and not masked and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-230313"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230313r1134879_rule" weight="10.0" severity="medium"><version>RHEL-08-010673</version><title>RHEL 8 must disable core dumps for all users.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+If the "systemd-coredump.socket" is loaded and not masked and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-230313"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230313r1155379_rule" weight="10.0" severity="medium"><version>RHEL-08-010673</version><title>RHEL 8 must disable core dumps for all users.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore, may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
-A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-32957r1017123_fix">Configure the operating system to disable core dumps for all users.
+A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-32957r1155378_fix">Configure the operating system to disable core dumps for all users.
 
-Add the following line to the top of the /etc/security/limits.conf or in a ".conf" file defined in /etc/security/limits.d/:
+Add the following line to the top of the /etc/security/limits.conf or in a single ".conf" file defined in /etc/security/limits.d/:
+
+* hard core 0
 
-* hard core 0</fixtext><fix id="F-32957r1017123_fix" /><check system="C-32982r1134878_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Note: If kernel dumps are disabled in accordance with RHEL-08-010671, this requirement is not applicable.
+Remove or comment out any entries for users or groups with a value set to anything other than "0".</fixtext><fix id="F-32957r1155378_fix" /><check system="C-32982r1155377_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Note: If kernel dumps are disabled in accordance with RHEL-08-010671, this requirement is not applicable.
 
-Verify the operating system disables core dumps for all users by issuing the following command:
+Verify RHEL 8 disables core dumps for all users by issuing the following command:
 
-$ sudo grep -r -s '^[^#].*core' /etc/security/limits.conf /etc/security/limits.d/*.conf
+$ grep -r -s core /etc/security/limits.conf /etc/security/limits.d/*.conf
 
-/etc/security/limits.d/core_dumps.conf:* hard core 0
+/etc/security/limits.conf:* hard core 0
 
 This can be set as a global domain (with the * wildcard) but may be set differently for multiple domains.
 
-If the "core" item is missing or commented out, or the value is anything other than "0", and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement for all domains that have the "core" item assigned, this is a finding.</check-content></check></Rule></Group><Group id="V-230314"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230314r1134881_rule" weight="10.0" severity="medium"><version>RHEL-08-010674</version><title>RHEL 8 must disable storing core dumps.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+If the "core" item is missing or commented out, or the value is anything other than "0", and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement for all domains that have the "core" item assigned, this is a finding.
+
+If entries exist for users or groups with a value set to anything other than "0", this is a finding.</check-content></check></Rule></Group><Group id="V-230314"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230314r1134881_rule" weight="10.0" severity="medium"><version>RHEL-08-010674</version><title>RHEL 8 must disable storing core dumps.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
 A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-32958r567689_fix">Configure the operating system to disable storing core dumps for all users.
 
@@ -1791,13 +1716,17 @@ $ sudo grep -irw path= /home/*/.*
 
 /home/[localinteractiveuser]/.bash_profile:PATH=$PATH:$HOME/.local/bin:$HOME/bin
 
-If any local interactive user initialization files have executable search path statements that include directories outside of their home directory and is not documented with the ISSO as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-230318"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230318r1017129_rule" weight="10.0" severity="medium"><version>RHEL-08-010700</version><title>All RHEL 8 world-writable directories must be owned by root, sys, bin, or an application user.</title><description>&lt;VulnDiscussion&gt;If a world-writable directory is not owned by root, sys, bin, or an application User Identifier (UID), unauthorized users may be able to modify files created by others.
+If any local interactive user initialization files have executable search path statements that include directories outside of their home directory and is not documented with the ISSO as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-230318"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230318r1155352_rule" weight="10.0" severity="medium"><version>RHEL-08-010700</version><title>All RHEL 8 world-writable directories must be owned by root, sys, bin, or an application user.</title><description>&lt;VulnDiscussion&gt;If a world-writable directory is not owned by root, sys, bin, or an application User Identifier (UID), unauthorized users may be able to modify files created by others.
+
+The only authorized public directories are those temporary directories supplied with the system or those designed to be temporary file repositories. The setting is normally reserved for directories used by the system and by users for temporary file storage, (e.g., /tmp), and for directories requiring global read/write access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-32962r1155351_fix">Configure all RHEL 8 public directories to be owned by root or a system account to prevent unauthorized and unintended information transferred via shared system resources.
+
+Use the following command template to set ownership of public directories to root or a system account:
 
-The only authorized public directories are those temporary directories supplied with the system or those designed to be temporary file repositories. The setting is normally reserved for directories used by the system and by users for temporary file storage, (e.g., /tmp), and for directories requiring global read/write access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-32962r567701_fix">All directories in local partitions which are world-writable should be owned by root or another system account. If any world-writable directories are not owned by a system account, this should be investigated. Following this, the files should be deleted or assigned to an appropriate group.</fixtext><fix id="F-32962r567701_fix" /><check system="C-32987r567700_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>The following command will discover and print world-writable directories that are not owned by a system account, given the assumption that only system accounts have a uid lower than 1000. Run it once for each local partition [PART]: 
+$ sudo chown [root or system account] [Public Directory]</fixtext><fix id="F-32962r1155351_fix" /><check system="C-32987r1155350_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify RHEL 8 world writable directories are owned by root, a system account, or an application account with the following command:
 
-$ sudo find [PART] -xdev -type d -perm -0002 -uid +999 -print
+$ sudo find / -xdev -type d -perm -0002 -uid +999 -exec stat -c "%U, %u, %A, %n" {} \; 2&gt;/dev/null
 
-If there is output, this is a finding.</check-content></check></Rule></Group><Group id="V-230319"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230319r1017130_rule" weight="10.0" severity="medium"><version>RHEL-08-010710</version><title>All RHEL 8 world-writable directories must be group-owned by root, sys, bin, or an application group.</title><description>&lt;VulnDiscussion&gt;If a world-writable directory is not group-owned by root, sys, bin, or an application Group Identifier (GID), unauthorized users may be able to modify files created by others.
+If there is output that indicates world-writable directories are owned by any account other than root or an approved system account, this is a finding.</check-content></check></Rule></Group><Group id="V-230319"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230319r1017130_rule" weight="10.0" severity="medium"><version>RHEL-08-010710</version><title>All RHEL 8 world-writable directories must be group-owned by root, sys, bin, or an application group.</title><description>&lt;VulnDiscussion&gt;If a world-writable directory is not group-owned by root, sys, bin, or an application Group Identifier (GID), unauthorized users may be able to modify files created by others.
 
 The only authorized public directories are those temporary directories supplied with the system or those designed to be temporary file repositories. The setting is normally reserved for directories used by the system and by users for temporary file storage, (e.g., /tmp), and for directories requiring global read/write access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-32963r567704_fix">All directories in local partitions which are world-writable must be group-owned by root or another system account.  If any world-writable directories are not group-owned by a system account, this must be investigated.  Following this, the directories must be deleted or assigned to an appropriate group.</fixtext><fix id="F-32963r567704_fix" /><check system="C-32988r567703_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>The following command will discover and print world-writable directories that are not group-owned by a system account, given the assumption that only system accounts have a gid lower than 1000. Run it once for each local partition [PART]: 
 
@@ -1901,25 +1830,24 @@ $ sudo chgrp &lt;group&gt; &lt;file&gt;</fixtext><fix id="F-32971r567728_fix" />
 
 $ df --local -P | awk {'if (NR!=1) print $6'} | sudo xargs -I '{}' find '{}' -xdev -nogroup
 
-If any files on the system do not have an assigned group, this is a finding.</check-content></check></Rule></Group><Group id="V-230328"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230328r1017139_rule" weight="10.0" severity="medium"><version>RHEL-08-010800</version><title>A separate RHEL 8 filesystem must be used for user home directories (such as /home or an equivalent).</title><description>&lt;VulnDiscussion&gt;The use of separate file systems for different paths can protect the system from failures resulting from a file system becoming full or failing.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-32972r902722_fix">Migrate the "/home" directory onto a separate file system.</fixtext><fix id="F-32972r902722_fix" /><check system="C-32997r902721_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify that a separate file system has been created for non-privileged local interactive user home directories.
+If any files on the system do not have an assigned group, this is a finding.</check-content></check></Rule></Group><Group id="V-230328"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230328r1155410_rule" weight="10.0" severity="medium"><version>RHEL-08-010800</version><title>A separate RHEL 8 filesystem must be used for user home directories (such as /home or an equivalent).</title><description>&lt;VulnDiscussion&gt;The use of separate file systems for different paths can protect the system from failures resulting from a file system becoming full or failing.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-32972r902722_fix">Migrate the "/home" directory onto a separate file system.</fixtext><fix id="F-32972r902722_fix" /><check system="C-32997r1155409_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify a separate file system has been created for nonprivileged local interactive user home directories.
 
-Check the home directory assignment for all non-privileged users, users with a User Identifier (UID) greater than 1000, on the system with the following command:
+Check the home directory assignment for all nonprivileged users, users with a User Identifier (UID) greater than 1000, on the system with the following command:
 
-     $ sudo awk -F: '($3&gt;=1000)&amp;&amp;($7 !~ /nologin/){print $1,$3,$6}' /etc/passwd
+$ sudo awk -F: '($3&gt;=1000)&amp;&amp;($7 !~ /nologin/){print $1,$3,$6,$7}' /etc/passwd
+pdosadmin 1000 /home/pdosadmin /bin/bash
+systemuser 1001 /home/systemuser /bin/bash
+acas 1002 /home/acas /bin/bash
 
-     doej 1001 /home/doej 
-     publicj 1002 /home/publicj 
-     smithj 1003 /home/smithj
-
-The output of the command will give the directory/partition that contains the home directories for the non-privileged users on the system (in this example, "/home") and users’ shell. All accounts with a valid shell (such as /bin/bash) are considered interactive users.
+The output of the command will give the directory/partition that contains the home directories for the nonprivileged users on the system (in this example, "/home") and users’ shell. All accounts with a valid shell (such as /bin/bash) are considered interactive users.
 
 Check that a file system/partition has been created for the nonprivileged interactive users with the following command:
 
 Note: The partition of "/home" is used in the example.
 
-     $ sudo grep /home /etc/fstab
+$ sudo grep /home /etc/fstab
 
-     /dev/mapper/...   /home   xfs   defaults,noexec,nosuid,nodev 0 0
+/dev/mapper/...   /home   xfs   defaults,noexec,nosuid,nodev 0 0
 
 If a separate entry for the file system/partition containing the nonprivileged interactive user home directories does not exist, this is a finding.</check-content></check></Rule></Group><Group id="V-230329"><title>SRG-OS-000480-GPOS-00229</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230329r1017140_rule" weight="10.0" severity="high"><version>RHEL-08-010820</version><title>Unattended or automatic logon via the RHEL 8 graphical user interface must not be allowed.</title><description>&lt;VulnDiscussion&gt;Failure to restrict system access to authenticated users negatively impacts operating system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-32973r567734_fix">Configure the operating system to not allow an unattended or automatic logon to the system via a graphical user interface.
 
@@ -2405,13 +2333,13 @@ $ sudo grep -R removal-action /etc/dconf/db/*
 
 /etc/dconf/db/distro.d/20-authselect:removal-action='lock-screen'
 
-If the "removal-action='lock-screen'" setting is missing or commented out from the dconf database files, this is a finding.</check-content></check></Rule></Group><Group id="V-230352"><title>SRG-OS-000029-GPOS-00010</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230352r1017165_rule" weight="10.0" severity="medium"><version>RHEL-08-020060</version><title>RHEL 8 must automatically lock graphical user sessions after 15 minutes of inactivity.</title><description>&lt;VulnDiscussion&gt;A session lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not want to log out because of the temporary nature of the absence.
+If the "removal-action='lock-screen'" setting is missing or commented out from the dconf database files, this is a finding.</check-content></check></Rule></Group><Group id="V-230352"><title>SRG-OS-000029-GPOS-00010</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230352r1155401_rule" weight="10.0" severity="medium"><version>RHEL-08-020060</version><title>RHEL 8 must automatically lock graphical user sessions after 15 minutes of inactivity.</title><description>&lt;VulnDiscussion&gt;A session lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not want to log out because of the temporary nature of the absence.
 
 The session lock is implemented at the point where session activity can be determined. Rather than be forced to wait for a period of time to expire before the user session can be locked, RHEL 8 needs to provide users with the ability to manually invoke a session lock so users can secure their session if it is necessary to temporarily vacate the immediate physical vicinity.
 
-Satisfies: SRG-OS-000029-GPOS-00010, SRG-OS-000031-GPOS-00012&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000057</ident><fixtext fixref="F-32996r567803_fix">Configure the operating system to initiate a screensaver after a 15-minute period of inactivity for graphical user interfaces.
+Satisfies: SRG-OS-000029-GPOS-00010, SRG-OS-000031-GPOS-00012&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000057</ident><fixtext fixref="F-32996r1155400_fix">Configure RHEL 8 to initiate a screensaver after a 15-minute period of inactivity for graphical user interfaces.
 
-Create a database to contain the system-wide screensaver settings (if it does not already exist) with the following command:
+Create a database to contain the systemwide screensaver settings (if it does not already exist) with the following command:
 
 $ sudo touch /etc/dconf/db/local.d/00-screensaver
 
@@ -2423,9 +2351,9 @@ idle-delay=uint32 900
 
 Update the system databases:
 
-$ sudo dconf update</fixtext><fix id="F-32996r567803_fix" /><check system="C-33021r646875_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify the operating system initiates a session lock after a 15-minute period of inactivity for graphical user interfaces with the following commands:
+$ sudo dconf update</fixtext><fix id="F-32996r1155400_fix" /><check system="C-33021r1155399_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify RHEL 8 initiates a session lock after a 15-minute period of inactivity for graphical user interfaces with the following command:
 
-This requirement assumes the use of the RHEL 8 default graphical user interface, Gnome Shell. If the system does not have any graphical user interface installed, this requirement is Not Applicable.
+Note: This requirement assumes the use of the RHEL 8 default graphical user interface, the GNOME desktop environment. If the system does not have any graphical user interface installed, this requirement is Not Applicable.
 
 $ sudo gsettings get org.gnome.desktop.session idle-delay
 
@@ -2887,17 +2815,7 @@ $ sudo /usr/sbin/sshd -dd 2&gt;&amp;1 | awk '/filename/ {print $4}' | tr -d '\r'
 
 If "PermitEmptyPasswords" is set to "yes", this is a finding.
 
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-230381"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230381r1069295_rule" weight="10.0" severity="low"><version>RHEL-08-020340</version><title>RHEL 8 must display the date and time of the last successful account logon upon logon.</title><description>&lt;VulnDiscussion&gt;Providing users with feedback on when account accesses last occurred facilitates user recognition and reporting of unauthorized account use.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000052</ident><fixtext fixref="F-33025r567890_fix">Configure the operating system to provide users with feedback on when account accesses last occurred by setting the required configuration options in "/etc/pam.d/postlogin". 
-
-Add the following line to the top of "/etc/pam.d/postlogin":
-
-session required pam_lastlog.so showfailed</fixtext><fix id="F-33025r567890_fix" /><check system="C-33050r1069199_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify users are provided with feedback on when account accesses last occurred with the following command:
-
-$ sudo grep pam_lastlog /etc/pam.d/postlogin
-
-session required pam_lastlog.so showfailed
-
-If "pam_lastlog.so" is missing from "/etc/pam.d/postlogin" file, or the silent option is present, this is a finding.</check-content></check></Rule></Group><Group id="V-230382"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230382r1069309_rule" weight="10.0" severity="medium"><version>RHEL-08-020350</version><title>RHEL 8 must display the date and time of the last successful account logon upon an SSH logon.</title><description>&lt;VulnDiscussion&gt;Providing users with feedback on when account accesses via SSH last occurred facilitates user recognition and reporting of unauthorized account use.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000052</ident><fixtext fixref="F-33026r567893_fix">Configure SSH to provide users with feedback on when account accesses last occurred by setting the required configuration options in "/etc/pam.d/sshd" or in the "sshd_config" file used by the system ("/etc/ssh/sshd_config" will be used in the example) (this file may be named differently or be in a different location if using a version of SSH that is provided by a third-party vendor).
+If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-230382"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230382r1069309_rule" weight="10.0" severity="medium"><version>RHEL-08-020350</version><title>RHEL 8 must display the date and time of the last successful account logon upon an SSH logon.</title><description>&lt;VulnDiscussion&gt;Providing users with feedback on when account accesses via SSH last occurred facilitates user recognition and reporting of unauthorized account use.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000052</ident><fixtext fixref="F-33026r567893_fix">Configure SSH to provide users with feedback on when account accesses last occurred by setting the required configuration options in "/etc/pam.d/sshd" or in the "sshd_config" file used by the system ("/etc/ssh/sshd_config" will be used in the example) (this file may be named differently or be in a different location if using a version of SSH that is provided by a third-party vendor).
 
 Modify the "PrintLastLog" line in "/etc/ssh/sshd_config" to match the following:
 
@@ -4778,14 +4696,12 @@ rich rules:
 
 Ask the system administrator (SA) for the site or program Ports, Protocols, and Services Management Component Local Service Assessment (PPSM CLSA). Verify the services allowed by the firewall match the PPSM CLSA. 
 
-If there are additional ports, protocols, or services that are not in the PPSM CLSA, or there are ports, protocols, or services that are prohibited by the PPSM Category Assurance List (CAL), this is a finding.</check-content></check></Rule></Group><Group id="V-230502"><title>SRG-OS-000114-GPOS-00059</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230502r1017284_rule" weight="10.0" severity="medium"><version>RHEL-08-040070</version><title>The RHEL 8 file system automounter must be disabled unless required.</title><description>&lt;VulnDiscussion&gt;Automatically mounting file systems permits easy introduction of unknown devices, thereby facilitating malicious activity.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000778</ident><fixtext fixref="F-33146r568253_fix">Configure the operating system to disable the ability to automount devices.
+If there are additional ports, protocols, or services that are not in the PPSM CLSA, or there are ports, protocols, or services that are prohibited by the PPSM Category Assurance List (CAL), this is a finding.</check-content></check></Rule></Group><Group id="V-230502"><title>SRG-OS-000114-GPOS-00059</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230502r1155393_rule" weight="10.0" severity="medium"><version>RHEL-08-040070</version><title>The RHEL 8 file system automounter must be disabled.</title><description>&lt;VulnDiscussion&gt;Automatically mounting file systems permits easy introduction of unknown devices, thereby facilitating malicious activity.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000778</ident><fixtext fixref="F-33146r1155392_fix">Configure RHEL 8 to disable the ability to automount devices.
 
 Turn off the automount service with the following commands:
 
 $ sudo systemctl stop autofs
-$ sudo systemctl disable autofs
-
-If "autofs" is required for Network File System (NFS), it must be documented with the ISSO.</fixtext><fix id="F-33146r568253_fix" /><check system="C-33171r568252_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify the operating system disables the ability to automount devices.
+$ sudo systemctl disable autofs</fixtext><fix id="F-33146r1155392_fix" /><check system="C-33171r1155391_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify RHEL 8 disables the ability to automount devices.
 
 Check to see if automounter service is active with the following command:
 
@@ -4793,11 +4709,11 @@ Note: If the autofs service is not installed, this requirement is not applicable
 
 $ sudo systemctl status autofs
 
-autofs.service - Automounts filesystems on demand
-Loaded: loaded (/usr/lib/systemd/system/autofs.service; disabled)
-Active: inactive (dead)
+o autofs.service - Automounts filesystems on demand
+   Loaded: loaded (/usr/lib/systemd/system/autofs.service; disabled)
+   Active: inactive (dead)
 
-If the "autofs" status is set to "active" and is not documented with the Information System Security Officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-230503"><title>SRG-OS-000114-GPOS-00059</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230503r1069316_rule" weight="10.0" severity="medium"><version>RHEL-08-040080</version><title>RHEL 8 must be configured to disable USB mass storage.</title><description>&lt;VulnDiscussion&gt;USB mass storage permits easy introduction of unknown devices, thereby facilitating malicious activity.
+If the "autofs" status is set to "active", this is a finding.</check-content></check></Rule></Group><Group id="V-230503"><title>SRG-OS-000114-GPOS-00059</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230503r1069316_rule" weight="10.0" severity="medium"><version>RHEL-08-040080</version><title>RHEL 8 must be configured to disable USB mass storage.</title><description>&lt;VulnDiscussion&gt;USB mass storage permits easy introduction of unknown devices, thereby facilitating malicious activity.
 
 Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000778</ident><fixtext fixref="F-33147r942935_fix">Configure the operating system to disable the ability to use the USB Storage kernel module and the ability to use USB mass storage devices.
 
@@ -5241,18 +5157,22 @@ $ sudo yum list installed fapolicyd
 Installed Packages
 fapolicyd.x86_64
 
-If fapolicyd is not installed, this is a finding.</check-content></check></Rule></Group><Group id="V-230524"><title>SRG-OS-000378-GPOS-00163</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230524r1014813_rule" weight="10.0" severity="medium"><version>RHEL-08-040140</version><title>RHEL 8 must block unauthorized peripherals before establishing a connection.</title><description>&lt;VulnDiscussion&gt;Without authenticating devices, unidentified or unknown devices may be introduced, thereby facilitating malicious activity.
+If fapolicyd is not installed, this is a finding.</check-content></check></Rule></Group><Group id="V-230524"><title>SRG-OS-000378-GPOS-00163</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230524r1155418_rule" weight="10.0" severity="medium"><version>RHEL-08-040140</version><title>RHEL 8 must block unauthorized peripherals before establishing a connection.</title><description>&lt;VulnDiscussion&gt;Without authenticating devices, unidentified or unknown devices may be introduced, thereby facilitating malicious activity.
 
 Peripherals include, but are not limited to, such devices as flash drives, external storage, and printers.
 
 A new feature that RHEL 8 provides is the USBGuard software framework. The USBguard-daemon is the main component of the USBGuard software framework. It runs as a service in the background and enforces the USB device authorization policy for all USB devices. The policy is defined by a set of rules using a rule language described in the usbguard-rules.conf file. The policy and the authorization state of USB devices can be modified during runtime using the usbguard tool.
 
-The System Administrator (SA) must work with the site Information System Security Officer (ISSO) to determine a list of authorized peripherals and establish rules within the USBGuard software framework to allow only authorized devices.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001958</ident><fixtext fixref="F-33168r744025_fix">Configure the operating system to enable the blocking of unauthorized peripherals with the following command:
+The system administrator (SA) must work with the site information system security officer (ISSO) to determine a list of authorized peripherals and establish rules within the USBGuard software framework to allow only authorized devices.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001958</ident><fixtext fixref="F-33168r1155417_fix">Configure the operating system to enable the blocking of unauthorized peripherals with the following command:
 This command must be run from a root shell and will create an allow list for any usb devices currently connect to the system.
 
 # usbguard generate-policy &gt; /etc/usbguard/rules.conf
 
-Note: Enabling and starting usbguard without properly configuring it for an individual system will immediately prevent any access over a usb device such as a keyboard or mouse</fixtext><fix id="F-33168r744025_fix" /><check system="C-33193r1014812_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify the USBGuard has a policy configured with the following command:
+Note: Enabling and starting usbguard without properly configuring it for an individual system will immediately prevent any access over a usb device such as a keyboard or mouse.
+
+Restart usbguard service after creation or update of rules with the following command:
+
+$ sudo systemctl restart usbguard</fixtext><fix id="F-33168r1155417_fix" /><check system="C-33193r1014812_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify the USBGuard has a policy configured with the following command:
 
 $ sudo usbguard list-rules
 
@@ -5357,19 +5277,24 @@ $ sudo grep -r logout /etc/dconf/db/local.d/*
 
 /etc/dconf/db/local.d/00-disable-CAD:logout=''
 
-If the "logout" key is bound to an action, is commented out, or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-230531"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230531r1134890_rule" weight="10.0" severity="high"><version>RHEL-08-040172</version><title>The systemd Ctrl-Alt-Delete burst key sequence in RHEL 8 must be disabled.</title><description>&lt;VulnDiscussion&gt;A locally logged-on user who presses Ctrl-Alt-Delete when at the console can reboot the system. If accidentally pressed, as could happen in the case of a mixed OS environment, this can create the risk of short-term loss of availability of systems due to unintentional reboot. In a graphical user environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is reduced because the user will be prompted before any action is taken.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-33175r1017291_fix">Configure the system to disable the CtrlAltDelBurstAction by added or modifying the following line in the "/etc/systemd/system.conf" configuration file:
+If the "logout" key is bound to an action, is commented out, or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-230531"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230531r1155396_rule" weight="10.0" severity="high"><version>RHEL-08-040172</version><title>The systemd Ctrl-Alt-Delete burst key sequence in RHEL 8 must be disabled.</title><description>&lt;VulnDiscussion&gt;A locally logged-on user who presses Ctrl-Alt-Delete when at the console can reboot the system. If accidentally pressed, as could happen in the case of a mixed OS environment, this can create the risk of short-term loss of availability of systems due to unintentional reboot. In a graphical user environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is reduced because the user will be prompted before any action is taken.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-33175r1155395_fix">Configure RHEL 8 to disable the CtrlAltDelBurstAction by adding it to a drop file in a "/etc/systemd/system.conf.d/" configuration file:
+
+If no drop file exists, create one with the following command:
+
+$ sudo mkdir -p /etc/systemd/system.conf.d &amp;&amp; sudo vi /etc/systemd/system.conf.d/55-CtrlAltDel-BurstAction
+
+Edit the file to contain the setting by adding the following text:
 
 CtrlAltDelBurstAction=none
 
 Reload the daemon for this change to take effect.
 
-$ sudo systemctl daemon-reload</fixtext><fix id="F-33175r1017291_fix" /><check system="C-33200r1134889_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify RHEL 8 is not configured to reboot the system when Ctrl-Alt-Delete is pressed seven times within two seconds with the following command:
-
-$ sudo grep -i ctrl /etc/systemd/system.conf
+$ sudo systemctl daemon-reload</fixtext><fix id="F-33175r1155395_fix" /><check system="C-33200r1155394_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify RHEL 8 is configured to not reboot the system when Ctrl-Alt-Delete is pressed seven times within two seconds with the following command:
 
-CtrlAltDelBurstAction=none
+$ sudo grep -iR CtrlAltDelBurstAction /etc/systemd/system*
+/etc/systemd/system.conf.d/55-CtrlAltDel-BurstAction:CtrlAltDelBurstAction=none
 
-If the "CtrlAltDelBurstAction" is not set to "none", is commented out, or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-230532"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230532r1017294_rule" weight="10.0" severity="medium"><version>RHEL-08-040180</version><title>The debug-shell systemd service must be disabled on RHEL 8.</title><description>&lt;VulnDiscussion&gt;The debug-shell requires no authentication and provides root privileges to anyone who has physical access to the machine.  While this feature is disabled by default, masking it adds an additional layer of assurance that it will not be enabled via a dependency in systemd.  This also prevents attackers with physical access from trivially bypassing security on the machine through valid troubleshooting configurations and gaining root access when the system is rebooted.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-33176r1017293_fix">Configure the system to mask the debug-shell systemd service with the following command:
+If the "CtrlAltDelBurstAction" is not set to "none", commented out, or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-230532"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230532r1017294_rule" weight="10.0" severity="medium"><version>RHEL-08-040180</version><title>The debug-shell systemd service must be disabled on RHEL 8.</title><description>&lt;VulnDiscussion&gt;The debug-shell requires no authentication and provides root privileges to anyone who has physical access to the machine.  While this feature is disabled by default, masking it adds an additional layer of assurance that it will not be enabled via a dependency in systemd.  This also prevents attackers with physical access from trivially bypassing security on the machine through valid troubleshooting configurations and gaining root access when the system is rebooted.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-33176r1017293_fix">Configure the system to mask the debug-shell systemd service with the following command:
 
 $ sudo systemctl mask debug-shell.service
 
@@ -5880,45 +5805,31 @@ $ sudo grep -r kernel.unprivileged_bpf_disabled /run/sysctl.d/*.conf /usr/local/
 
 If "kernel.unprivileged_bpf_disabled" is not set to "1", is missing or commented out, this is a finding.
 
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-230546"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230546r1017308_rule" weight="10.0" severity="medium"><version>RHEL-08-040282</version><title>RHEL 8 must restrict usage of ptrace to descendant  processes.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-230546"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230546r1155413_rule" weight="10.0" severity="medium"><version>RHEL-08-040282</version><title>RHEL 8 must restrict usage of ptrace to descendant  processes.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore, may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-33190r858823_fix">Configure RHEL 8 to restrict usage of ptrace to descendant processes by adding the following line to a file, in the "/etc/sysctl.d" directory:
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-33190r1155412_fix">Configure RHEL 8 to restrict usage of ptrace to descendant processes by adding the following line in a dropfile, in the "/etc/sysctl.d" directory with the following commands:
 
-kernel.yama.ptrace_scope = 1
+Create the dropfile if it doesn't already exist:
+$ sudo vi /etc/sysctl.d/99-ptrace-restrict.conf
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Add the following line to the file:
+kernel.yama.ptrace_scope = 1
 
 The system configuration files need to be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
 
-$ sudo sysctl --system</fixtext><fix id="F-33190r858823_fix" /><check system="C-33215r833360_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify RHEL 8 restricts usage of ptrace to descendant processes with the following commands:
+$ sudo sysctl --system</fixtext><fix id="F-33190r1155412_fix" /><check system="C-33215r1155411_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify RHEL 8 restricts usage of ptrace to descendant processes with the following commands:
 
 $ sudo sysctl kernel.yama.ptrace_scope
 
 kernel.yama.ptrace_scope = 1
 
-If the returned line does not have a value of "1", or a line is not returned, this is a finding.
-
-Check that the configuration files are present to enable this network parameter.
-
-$ sudo grep -r kernel.yama.ptrace_scope /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf: kernel.yama.ptrace_scope = 1
-
-If "kernel.yama.ptrace_scope" is not set to "1", is missing or commented out, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-230547"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230547r1017309_rule" weight="10.0" severity="medium"><version>RHEL-08-040283</version><title>RHEL 8 must restrict exposed kernel pointer addresses access.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+If "kernel.yama.ptrace_scope" is not set to "1", is missing, or commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-230547"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230547r1017309_rule" weight="10.0" severity="medium"><version>RHEL-08-040283</version><title>RHEL 8 must restrict exposed kernel pointer addresses access.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
 The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
@@ -5996,45 +5907,33 @@ If "user.max_user_namespaces" is not set to "0", is missing or commented out, th
 
 If conflicting results are returned, this is a finding.
 
-If the use of namespaces is operationally required and documented with the ISSM, it is not a finding.</check-content></check></Rule></Group><Group id="V-230549"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230549r1017311_rule" weight="10.0" severity="medium"><version>RHEL-08-040285</version><title>RHEL 8 must use reverse path filtering on all IPv4 interfaces.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+If the use of namespaces is operationally required and documented with the ISSM, it is not a finding.</check-content></check></Rule></Group><Group id="V-230549"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230549r1155416_rule" weight="10.0" severity="medium"><version>RHEL-08-040285</version><title>RHEL 8 must use reverse path filtering on all IPv4 interfaces.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore, may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-33193r858829_fix">Configure RHEL 8 to use reverse path filtering on all IPv4 interfaces by adding the following line to a file, in the "/etc/sysctl.d" directory:
-
-net.ipv4.conf.all.rp_filter = 1
-
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
-
-The system configuration files need to be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-33193r1155415_fix">Configure RHEL 8 to use reverse path filtering on IPv4 interfaces by default.
 
-$ sudo sysctl --system</fixtext><fix id="F-33193r858829_fix" /><check system="C-33218r833366_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify RHEL 8 uses reverse path filtering on all IPv4 interfaces with the following commands:
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
-$ sudo sysctl net.ipv4.conf.all.rp_filter
+Create a configuration file if it does not already exist:
 
-net.ipv4.conf.all.rp_filter = 1
+$ sudo vi /etc/sysctl.d/ipv4_rp_filter.conf
 
-If the returned line does not have a value of "1" or "2", or a line is not returned, this is a finding.
+net.ipv4.conf.default.rp_filter = 1
 
-Check that the configuration files are present to enable this network parameter.
+Load settings from all system configuration files with the following command:
 
-$ sudo grep -r net.ipv4.conf.all.rp_filter /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
+$ sudo sysctl --system</fixtext><fix id="F-33193r1155415_fix" /><check system="C-33218r1155414_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify RHEL 8 uses reverse path filtering on IPv4 interfaces with the following commands:
 
-/etc/sysctl.d/99-sysctl.conf: net.ipv4.conf.all.rp_filter = 1
+$ sudo sysctl net.ipv4.conf.default.rp_filter
 
-If "net.ipv4.conf.all.rp_filter" is not set to "1" or "2", is missing or commented out, this is a finding.
+net.ipv4.conf.default.rp_filter = 1
 
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-230550"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230550r1017312_rule" weight="10.0" severity="medium"><version>RHEL-08-040290</version><title>RHEL 8 must be configured to prevent unrestricted mail relaying.</title><description>&lt;VulnDiscussion&gt;If unrestricted mail relaying is permitted, unauthorized senders could use this host as a mail relay for the purpose of sending spam or other unauthorized activity.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-33194r568397_fix">If "postfix" is installed, modify the "/etc/postfix/main.cf" file to restrict client connections to the local network with the following command:
+If "net.ipv4.conf.default.rp_filter" is not set to "1" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-230550"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230550r1017312_rule" weight="10.0" severity="medium"><version>RHEL-08-040290</version><title>RHEL 8 must be configured to prevent unrestricted mail relaying.</title><description>&lt;VulnDiscussion&gt;If unrestricted mail relaying is permitted, unauthorized senders could use this host as a mail relay for the purpose of sending spam or other unauthorized activity.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-33194r568397_fix">If "postfix" is installed, modify the "/etc/postfix/main.cf" file to restrict client connections to the local network with the following command:
 
 $ sudo postconf -e 'smtpd_client_restrictions = permit_mynetworks,reject'</fixtext><fix id="F-33194r568397_fix" /><check system="C-33219r568396_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify the system is configured to prevent unrestricted mail relaying.
 
@@ -6186,21 +6085,21 @@ $ sudo yum list installed *ftpd*
 
 vsftpd.x86_64                                                     3.0.3-28.el8                                                  appstream
 
-If an FTP server is installed and is not documented with the Information System Security Officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-230559"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230559r1014820_rule" weight="10.0" severity="medium"><version>RHEL-08-040370</version><title>The gssproxy package must not be installed unless mission essential on RHEL 8.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+If an FTP server is installed and is not documented with the Information System Security Officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-230559"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230559r1155398_rule" weight="10.0" severity="medium"><version>RHEL-08-040370</version><title>The gssproxy package must not be installed unless mission essential on RHEL 8.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
 Operating systems are capable of providing a wide variety of functions and services. Some of the functions and services, provided by default, may not be necessary to support essential organizational operations (e.g., key missions, functions).
 
 The gssproxy package is a proxy for GSS API credential handling and could expose secrets on some networks. It is not needed for normal function of the OS.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000381</ident><fixtext fixref="F-33203r568424_fix">Document the gssproxy package with the ISSO as an operational requirement or remove it from the system with the following command:
 
-$ sudo yum remove gssproxy</fixtext><fix id="F-33203r568424_fix" /><check system="C-33228r1014819_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify the gssproxy package has not been installed on the system with the following commands:
+$ sudo yum remove gssproxy</fixtext><fix id="F-33203r568424_fix" /><check system="C-33228r1155397_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Note: If NFS mounts are authorized and in use on the system, this control is not applicable.
 
-$ sudo yum list installed gssproxy
+Verify the gssproxy package is not installed with the following command:
 
-gssproxy.x86_64                                                     0.8.0-14.el8                                                  @anaconda
+$ dnf list --installed gssproxy
 
-If the gssproxy package is installed and is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.
+Error: No matching Packages to list
 
-If NFS mounts are being used, this is not a finding.</check-content></check></Rule></Group><Group id="V-230560"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230560r1017321_rule" weight="10.0" severity="medium"><version>RHEL-08-040380</version><title>The iprutils package must not be installed unless mission essential on RHEL 8.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+If the "gssproxy" package is installed and is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-230560"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-230560r1017321_rule" weight="10.0" severity="medium"><version>RHEL-08-040380</version><title>The iprutils package must not be installed unless mission essential on RHEL 8.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
 Operating systems are capable of providing a wide variety of functions and services. Some of the functions and services, provided by default, may not be necessary to support essential organizational operations (e.g., key missions, functions).
 
@@ -6316,7 +6215,7 @@ $ sudo grep banner-message-enable /etc/dconf/db/local.d/*
 
 banner-message-enable=true
 
-If "banner-message-enable" is set to "false" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-244521"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-244521r1117265_rule" weight="10.0" severity="medium"><version>RHEL-08-010141</version><title>RHEL 8 operating systems booted with United Extensible Firmware Interface (UEFI) must require a unique superusers name upon booting into single-user mode and maintenance.</title><description>&lt;VulnDiscussion&gt;If the system does not require valid authentication before it boots into single-user or maintenance mode, anyone who invokes single-user or maintenance mode is granted privileged access to all files on the system. GRUB 2 is the default boot loader for RHEL 8 and is designed to require a password to boot into single-user mode or make modifications to the boot menu.
+If "banner-message-enable" is set to "false" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-244521"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-244521r1137691_rule" weight="10.0" severity="medium"><version>RHEL-08-010141</version><title>RHEL 8 operating systems booted with United Extensible Firmware Interface (UEFI) must require a unique superusers name upon booting into single-user mode and maintenance.</title><description>&lt;VulnDiscussion&gt;If the system does not require valid authentication before it boots into single-user or maintenance mode, anyone who invokes single-user or maintenance mode is granted privileged access to all files on the system. GRUB 2 is the default boot loader for RHEL 8 and is designed to require a password to boot into single-user mode or make modifications to the boot menu.
 
 The GRUB 2 superuser account is an account of last resort. Establishing a unique username for this account hardens the boot loader against brute force attacks. Due to the nature of the superuser account database being distinct from the OS account database, this allows the use of a username that is not among those within the OS account database. Examples of non-unique superusers names are root, superuser, unlock, etc.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-47753r743811_fix">Configure the system to have a unique name for the grub superusers account.
 
@@ -6336,7 +6235,7 @@ $ sudo grep -iw "superusers" /boot/efi/EFI/redhat/grub.cfg
 set superusers="[someuniquestringhere]"
 export superusers
 
-If "superusers" is identical to any OS account name or is missing a name, this is a finding.</check-content></check></Rule></Group><Group id="V-244522"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-244522r1117265_rule" weight="10.0" severity="medium"><version>RHEL-08-010149</version><title>RHEL 8 operating systems booted with a BIOS must require  a unique superusers name upon booting into single-user and maintenance modes.</title><description>&lt;VulnDiscussion&gt;If the system does not require valid authentication before it boots into single-user or maintenance mode, anyone who invokes single-user or maintenance mode is granted privileged access to all files on the system. GRUB 2 is the default boot loader for RHEL 8 and is designed to require a password to boot into single-user mode or make modifications to the boot menu.
+If "superusers" is identical to any OS account name or is missing a name, this is a finding.</check-content></check></Rule></Group><Group id="V-244522"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-244522r1137691_rule" weight="10.0" severity="medium"><version>RHEL-08-010149</version><title>RHEL 8 operating systems booted with a BIOS must require  a unique superusers name upon booting into single-user and maintenance modes.</title><description>&lt;VulnDiscussion&gt;If the system does not require valid authentication before it boots into single-user or maintenance mode, anyone who invokes single-user or maintenance mode is granted privileged access to all files on the system. GRUB 2 is the default boot loader for RHEL 8 and is designed to require a password to boot into single-user mode or make modifications to the boot menu.
 
 The GRUB 2 superuser account is an account of last resort. Establishing a unique username for this account hardens the boot loader against brute force attacks. Due to the nature of the superuser account database being distinct from the OS account database, this allows the use of a username that is not among those within the OS account database. Examples of non-unique superusers names are root, superuser, unlock, etc.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-47754r743814_fix">Configure the system to have a unique name for the grub superusers account.
 
@@ -6356,7 +6255,7 @@ $ sudo grep -iw "superusers" /boot/grub2/grub.cfg
 set superusers="[someuniquestringhere]"
 export superusers
 
-If "superusers" is identical to any OS account name or is missing a name, this is a finding.</check-content></check></Rule></Group><Group id="V-244523"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-244523r1117265_rule" weight="10.0" severity="medium"><version>RHEL-08-010152</version><title>RHEL 8 operating systems must require authentication upon booting into emergency mode.</title><description>&lt;VulnDiscussion&gt;If the system does not require valid root authentication before it boots into emergency or rescue mode, anyone who invokes emergency or rescue mode is granted privileged access to all files on the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-47755r743817_fix">Configure the system to require authentication upon booting into emergency mode by adding the following line to the "/usr/lib/systemd/system/emergency.service" file.
+If "superusers" is identical to any OS account name or is missing a name, this is a finding.</check-content></check></Rule></Group><Group id="V-244523"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-244523r1137691_rule" weight="10.0" severity="medium"><version>RHEL-08-010152</version><title>RHEL 8 operating systems must require authentication upon booting into emergency mode.</title><description>&lt;VulnDiscussion&gt;If the system does not require valid root authentication before it boots into emergency or rescue mode, anyone who invokes emergency or rescue mode is granted privileged access to all files on the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-47755r743817_fix">Configure the system to require authentication upon booting into emergency mode by adding the following line to the "/usr/lib/systemd/system/emergency.service" file.
 
 ExecStart=-/usr/lib/systemd/systemd-sulogin-shell emergency</fixtext><fix id="F-47755r743817_fix" /><check system="C-47798r743816_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Check to see if the system requires authentication for emergency mode with the following command:
 
@@ -6406,25 +6305,7 @@ ClientAliveInterval 600
 
 If "ClientAliveInterval" does not exist, does not have a value of "600" or less in "/etc/ssh/sshd_config", or is commented out, this is a finding.
 
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-244526"><title>SRG-OS-000250-GPOS-00093</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-244526r1017332_rule" weight="10.0" severity="medium"><version>RHEL-08-010287</version><title>The RHEL 8 SSH daemon must be configured to use system-wide crypto policies.</title><description>&lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
-
-Remote access (e.g., RDP) is access to DoD nonpublic information systems by an authorized user (or an information system) communicating through an external, non-organization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
-
-Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
-
-RHEL 8 incorporates system-wide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the /etc/sysconfig/sshd file. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/ directory.
-
-Satisfies: SRG-OS-000250-GPOS-00093, SRG-OS-000393-GPOS-00173, SRG-OS-000394-GPOS-00174, SRG-OS-000125-GPOS-00065&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001453</ident><fixtext fixref="F-47758r809333_fix">Configure the RHEL 8 SSH daemon to use system-wide crypto policies by adding the following line to /etc/sysconfig/sshd:
-
-# CRYPTO_POLICY=
-
-A reboot is required for the changes to take effect.</fixtext><fix id="F-47758r809333_fix" /><check system="C-47801r809332_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify that system-wide crypto policies are in effect:
-
-$ sudo grep CRYPTO_POLICY /etc/sysconfig/sshd
-
-# CRYPTO_POLICY=
-
-If the "CRYPTO_POLICY " is uncommented, this is a finding.</check-content></check></Rule></Group><Group id="V-244527"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-244527r1017333_rule" weight="10.0" severity="low"><version>RHEL-08-010472</version><title>RHEL 8 must have the packages required to use the hardware random number generator entropy gatherer service.</title><description>&lt;VulnDiscussion&gt;The most important characteristic of a random number generator is its randomness, namely its ability to deliver random numbers that are impossible to predict.  Entropy in computer security is associated with the unpredictability of a source of randomness.  The random source with high entropy tends to achieve a uniform distribution of random values.  Random number generators are one of the most important building blocks of cryptosystems.  
+If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-244527"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-244527r1017333_rule" weight="10.0" severity="low"><version>RHEL-08-010472</version><title>RHEL 8 must have the packages required to use the hardware random number generator entropy gatherer service.</title><description>&lt;VulnDiscussion&gt;The most important characteristic of a random number generator is its randomness, namely its ability to deliver random numbers that are impossible to predict.  Entropy in computer security is associated with the unpredictability of a source of randomness.  The random source with high entropy tends to achieve a uniform distribution of random values.  Random number generators are one of the most important building blocks of cryptosystems.  
 
 The rngd service feeds random data from hardware device to kernel random device. Quality (non-predictable) random number generation is important for several security functions (i.e., ciphers).&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-47759r743829_fix">Install the packages required to enabled the hardware random number generator entropy gatherer service with the following command:
 
@@ -6460,7 +6341,7 @@ Check that a file system has been created for "/var/tmp" with the following comm
 
      /dev/mapper/...   /var/tmp   xfs   defaults,nodev,noexec,nosuid 0 0
 
-If a separate entry for "/var/tmp" is not in use, this is a finding.</check-content></check></Rule></Group><Group id="V-244530"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-244530r1017337_rule" weight="10.0" severity="medium"><version>RHEL-08-010572</version><title>RHEL 8 must prevent files with the setuid and setgid bit set from being executed on the /boot/efi directory.</title><description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system not to execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for unprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-47762r743838_fix">Configure the "/etc/fstab" to use the "nosuid" option on the /boot/efi directory.</fixtext><fix id="F-47762r743838_fix" /><check system="C-47805r809335_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>For systems that use BIOS, this is Not Applicable.
+If a separate entry for "/var/tmp" is not in use, this is a finding.</check-content></check></Rule></Group><Group id="V-244530"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-244530r1155403_rule" weight="10.0" severity="medium"><version>RHEL-08-010572</version><title>RHEL 8 must prevent files with the setuid and setgid bit set from being executed on the /boot/efi directory.</title><description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system not to execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for unprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-47762r743838_fix">Configure the "/etc/fstab" to use the "nosuid" option on the /boot/efi directory.</fixtext><fix id="F-47762r743838_fix" /><check system="C-47805r1155402_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Note: For vfat file systems and for systems that use BIOS, this is Not Applicable.
 
 Verify the /boot/efi directory is mounted with the "nosuid" option with the following command:
 
@@ -7386,21 +7267,7 @@ All administrators must be mapped to the "sysadm_u", "staff_u", or an appropriat
  
 All authorized nonadministrative users must be mapped to the "user_u" role. 
  
-If they are not mapped in this way, this is a finding.</check-content></check></Rule></Group><Group id="V-255924"><title>SRG-OS-000250-GPOS-00093</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-255924r1017372_rule" weight="10.0" severity="medium"><version>RHEL-08-040342</version><title>RHEL 8 SSH server must be configured to use only FIPS-validated key exchange algorithms.</title><description>&lt;VulnDiscussion&gt;Without cryptographic integrity protections provided by FIPS-validated cryptographic algorithms, information can be viewed and altered by unauthorized users without detection.
-
-RHEL 8 incorporates system-wide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the /etc/sysconfig/sshd file. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/opensshserver.config file.
-
-The system will attempt to use the first algorithm presented by the client that matches the server list. Listing the values "strongest to weakest" is a method to ensure the use of the strongest algorithm available to secure the SSH connection.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001453</ident><fixtext fixref="F-59544r880732_fix">Configure the SSH server to use only FIPS-validated key exchange algorithms by adding or modifying the following line in "/etc/crypto-policies/back-ends/opensshserver.config":
-
--oKexAlgorithms=ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512
-
-A reboot is required for the changes to take effect.</fixtext><fix id="F-59544r880732_fix" /><check system="C-59601r917887_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify that the SSH server is configured to use only FIPS-validated key exchange algorithms:
-
-     $ sudo grep -i kexalgorithms /etc/crypto-policies/back-ends/opensshserver.config
-
-     CRYPTO_POLICY='-oKexAlgorithms=ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512'
-
-If the entries following "KexAlgorithms" have any algorithms defined other than "ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512", appear in different order than shown, or are missing or commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-256973"><title>SRG-OS-000366-GPOS-00153</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-256973r1017373_rule" weight="10.0" severity="medium"><version>RHEL-08-010019</version><title>RHEL 8 must ensure cryptographic verification of vendor software packages.</title><description>&lt;VulnDiscussion&gt;Cryptographic verification of vendor software packages ensures that all software packages are obtained from a valid source and protects against spoofing that could lead to installation of malware on the system. Red Hat cryptographically signs all software packages, which includes updates, with a GPG key to verify that they are valid.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001749</ident><ident system="http://cyber.mil/cci">CCI-003992</ident><fixtext fixref="F-60593r902751_fix">Install Red Hat package-signing keys on the system and verify their fingerprints match vendor values.
+If they are not mapped in this way, this is a finding.</check-content></check></Rule></Group><Group id="V-256973"><title>SRG-OS-000366-GPOS-00153</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-256973r1017373_rule" weight="10.0" severity="medium"><version>RHEL-08-010019</version><title>RHEL 8 must ensure cryptographic verification of vendor software packages.</title><description>&lt;VulnDiscussion&gt;Cryptographic verification of vendor software packages ensures that all software packages are obtained from a valid source and protects against spoofing that could lead to installation of malware on the system. Red Hat cryptographically signs all software packages, which includes updates, with a GPG key to verify that they are valid.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001749</ident><ident system="http://cyber.mil/cci">CCI-003992</ident><fixtext fixref="F-60593r902751_fix">Install Red Hat package-signing keys on the system and verify their fingerprints match vendor values.
 
 Insert RHEL 8 installation disc or attach RHEL 8 installation image to the system. Mount the disc or image to make the contents accessible inside the system.
 
@@ -7481,47 +7348,61 @@ Note: Manual changes to the listed file may be overwritten by the "authselect" p
 
 $ sudo grep -i nullok /etc/pam.d/system-auth
 
-If output is produced, this is a finding.</check-content></check></Rule></Group><Group id="V-272482"><title>SRG-OS-000250-GPOS-00093</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-272482r1069414_rule" weight="10.0" severity="medium"><version>RHEL-08-010296</version><title>RHEL 8 SSH client must be configured to use only Message Authentication Codes (MACs) employing FIPS 140-3 validated cryptographic hash algorithms.</title><description>&lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
-
-Remote access (e.g., RDP) is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, non-organizationally controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
-
-Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
-
-RHEL 8.4 and newer releases incorporate system-wide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the /etc/sysconfig/sshd file. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/openssh.config file.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001453</ident><fixtext fixref="F-76442r1069413_fix">Configure the RHEL 8 SSH client to use only MACs employing FIPS 140-3 approved algorithms.
-
-For RHEL 8.4 and newer, update the "/etc/crypto-policies/back-ends/openssh.config" file with the following command:
-sudo sed -i -E 's/(-oMACs=)[^ ]*/\1hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-256/' "$(readlink -f /etc/crypto-policies/back-ends/openssh.config)"
-
-A reboot is required for the changes to take effect.</fixtext><fix id="F-76442r1069413_fix" /><check system="C-76536r1069412_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify the SSH client is configured to use only MACs employing FIPS 140-3 approved algorithms with the following command:
-
-$ grep -i macs /etc/crypto-policies/back-ends/openssh.config
-
--oMACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-256
-
-If the MACs entries in the "openssh.config" file have any hashes other than "MACs hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512", they are missing, or commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-272483"><title>SRG-OS-000250-GPOS-00093</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-272483r1069415_rule" weight="10.0" severity="medium"><version>RHEL-08-010297</version><title>RHEL 8 SSH client must be configured to use only ciphers employing FIPS 140-3 validated cryptographic hash algorithms.</title><description>&lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
-
-Remote access (e.g., RDP) is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
-
-Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
-
-RHEL 8 incorporates systemwide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the /etc/sysconfig/sshd file. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/opensshserver.config file.
-
-The system will attempt to use the first hash presented by the client that matches the server list. Listing the values "strongest to weakest" is a method to ensure the use of the strongest hash available to secure the SSH connection.
-
-Satisfies: SRG-OS-000250-GPOS-00093, SRG-OS-000393-GPOS-00173, SRG-OS-000394-GPOS-00174, SRG-OS-000125-GPOS-00066&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001453</ident><fixtext fixref="F-76443r1069336_fix">Configure the RHEL 8 SSH client to use only ciphers employing FIPS 140-3 approved algorithms by updating the "/etc/crypto-policies/back-ends/openssh.config" file with the following commands.
-
-To manually update the ciphers in the systemwide SSH configuration, use the following command:
-
-$ sudo sed -i -E 's/(-oCiphers=)[^ ]*/\1aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes128-ctr/' "$(readlink -f /etc/crypto-policies/back-ends/openssh.config)"
-
-A reboot is required for the changes to take effect.</fixtext><fix id="F-76443r1069336_fix" /><check system="C-76537r1069409_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify the SSH client is configured to use only ciphers employing FIPS 140-3 approved algorithms.
-
-To verify the Ciphers in the systemwide SSH configuration file, use the following command:
-
-$ sudo grep -i ciphers /etc/crypto-policies/back-ends/openssh.config 
--oCiphers=aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes128-ctr
-
-If the ciphers entries in the "openssh.config" file have any hashes other than "aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes128-ctr", or they are missing, or commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-272484"><title>SRG-OS-000445-GPOS-00199</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-272484r1134875_rule" weight="10.0" severity="medium"><version>RHEL-08-010455</version><title>RHEL 8 must elevate the SELinux context when an administrator calls the sudo command.</title><description>&lt;VulnDiscussion&gt;Preventing nonprivileged users from executing privileged functions mitigates the risk that unauthorized individuals or processes may gain unnecessary access to information or privileges.
+If output is produced, this is a finding.</check-content></check></Rule></Group><Group id="V-272482"><title>SRG-OS-000250-GPOS-00093</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-272482r1155367_rule" weight="10.0" severity="medium"><version>RHEL-08-010296</version><title>The RHEL 8 SSH client must be configured to use only DOD-approved Message Authentication Codes (MACs) employing FIPS 140-3-validated cryptographic hash algorithms to protect the confidentiality of SSH client connections.</title><description>&lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection. 
+
+Remote access (e.g., RDP) is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless. 
+
+Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography, enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash. 
+
+RHEL 8 incorporates systemwide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the /etc/sysconfig/sshd file. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/openssh.config file.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001453</ident><fixtext fixref="F-76442r1155366_fix">Configure the RHEL 8 SSH client to use only MACs employing FIPS 140-3-approved algorithms.
+
+Reinstall crypto-policies with the following command:
+
+$ sudo dnf -y reinstall crypto-policies
+
+Set the crypto-policy to FIPS with the following command:
+
+$ sudo update-crypto-policies --set FIPS
+
+Setting system policy to FIPS
+
+Note: Systemwide crypto policies are applied on application startup. It is recommended to restart the system for the change of policies to fully take place.</fixtext><fix id="F-76442r1155366_fix" /><check system="C-76536r1155365_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify the RHEL 8 SSH client is configured to use only MACs employing FIPS 140-3-approved algorithms.
+
+To verify the MACs in the systemwide SSH configuration file, use the following command:
+
+$ grep -i MACs /etc/crypto-policies/back-ends/openssh.config
+
+MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-256
+
+If the MACs entries in the "openssh.config" file have any hashes other than "hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-2562", or they are missing or commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-272483"><title>SRG-OS-000250-GPOS-00093</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-272483r1155361_rule" weight="10.0" severity="medium"><version>RHEL-08-010297</version><title>The RHEL 8 SSH client must be configured to use only DOD-approved encryption ciphers employing FIPS 140-3-validated cryptographic hash algorithms to protect the confidentiality of SSH client connections.</title><description>&lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection. 
+
+Remote access (e.g., RDP) is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless. 
+
+Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography, enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash. 
+
+RHEL 8 incorporates systemwide crypto policies by default. The SSH configuration file has no effect on the ciphers, MACs, or algorithms unless specifically defined in the /etc/sysconfig/sshd file. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/openssh.config file.
+
+Satisfies: SRG-OS-000250-GPOS-00093, SRG-OS-000393-GPOS-00173, SRG-OS-000394-GPOS-00174, SRG-OS-000125-GPOS-00066&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001453</ident><fixtext fixref="F-76443r1155360_fix">Configure the RHEL 8 SSH client to use only ciphers employing FIPS 140-3-approved algorithms.
+
+Reinstall crypto-policies with the following command:
+
+$ sudo dnf -y reinstall crypto-policies
+
+Set the crypto-policy to FIPS with the following command:
+
+$ sudo update-crypto-policies --set FIPS
+
+Setting system policy to FIPS
+
+Note: Systemwide crypto policies are applied on application startup. It is recommended to restart the system for the change of policies to fully take place.</fixtext><fix id="F-76443r1155360_fix" /><check system="C-76537r1155359_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify the RHEL 8 SSH client is configured to use only ciphers employing FIPS 140-3-approved algorithms.
+
+To verify the ciphers in the systemwide SSH configuration file, use the following command:
+
+$ grep -i Ciphers /etc/crypto-policies/back-ends/openssh.config 
+
+Ciphers aes256-gcm@openssh.com,aes256-ctr,aes128-gcm@openssh.com,aes128-ctr
+
+If the cipher entries in the "openssh.config" file have any ciphers other than "aes256-gcm@openssh.com,aes256-ctr,aes128-gcm@openssh.com,aes128-ctr", or they are missing or commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-272484"><title>SRG-OS-000445-GPOS-00199</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-272484r1134875_rule" weight="10.0" severity="medium"><version>RHEL-08-010455</version><title>RHEL 8 must elevate the SELinux context when an administrator calls the sudo command.</title><description>&lt;VulnDiscussion&gt;Preventing nonprivileged users from executing privileged functions mitigates the risk that unauthorized individuals or processes may gain unnecessary access to information or privileges.
 
 Privileged functions include, for example, establishing accounts, performing system integrity checks, or administering cryptographic key management activities. Nonprivileged users are individuals who do not possess appropriate authorizations. Circumventing intrusion detection and prevention mechanisms or malicious code protection mechanisms are examples of privileged functions that require protection from nonprivileged users.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-002235</ident><fixtext fixref="F-76444r1134874_fix">Configure the operating system to elevate the SELinux context when an administrator calls the sudo command.
 
@@ -7545,15 +7426,15 @@ This command must be run as root:
 
 If conflicting results are returned, this is a finding.
 
-If a designated sudoers administrator group or account(s) is not configured to elevate the SELinux type and role to "sysadm_t" and "sysadm_r" with the use of the sudo command, this is a finding.</check-content></check></Rule></Group><Group id="V-274877"><title>SRG-OS-000471-GPOS-00215</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-274877r1106148_rule" weight="10.0" severity="medium"><version>RHEL-08-030655</version><title>RHEL 8 must audit any script or executable called by cron as root or by any privileged user.</title><description>&lt;VulnDiscussion&gt;Any script or executable called by cron as root or by any privileged user must be owned by that user, must have the permissions set to 755 or more restrictive, and have no extended rights that allow a nonprivileged user to modify the script or executable.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000172</ident><fixtext fixref="F-78883r1101908_fix">Configure RHEL 8 to audit the execution of any system call made by cron as root or as any privileged user.
+If a designated sudoers administrator group or account(s) is not configured to elevate the SELinux type and role to "sysadm_t" and "sysadm_r" with the use of the sudo command, this is a finding.</check-content></check></Rule></Group><Group id="V-274877"><title>SRG-OS-000471-GPOS-00215</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-274877r1155381_rule" weight="10.0" severity="medium"><version>RHEL-08-030655</version><title>RHEL 8 must audit any script or executable called by cron as root or by any privileged user.</title><description>&lt;VulnDiscussion&gt;Any script or executable called by cron as root or by any privileged user must be owned by that user, must have the permissions set to 755 or more restrictive, and have no extended rights that allow a nonprivileged user to modify the script or executable.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000172</ident><fixtext fixref="F-78883r1155380_fix">Configure RHEL 8 to audit the execution of any system call made by cron as root or as any privileged user.
 
 Add or update the following file system rules to "/etc/audit/rules.d/audit.rules":
-auditctl -w /etc/cron.d/ -p wa -k cronjobs
-auditctl -w /var/spool/cron/ -p wa -k cronjobs
+-w /etc/cron.d/ -p wa -k cronjobs
+-w /var/spool/cron/ -p wa -k cronjobs
 
 To load the rules to the kernel immediately, use the following command:
 
-$ sudo augenrules --load</fixtext><fix id="F-78883r1101908_fix" /><check system="C-78978r1106147_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify RHEL 8 is configured to audit the execution of any system call made by cron as root or as any privileged user.
+$ sudo augenrules --load</fixtext><fix id="F-78883r1155380_fix" /><check system="C-78978r1106147_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify RHEL 8 is configured to audit the execution of any system call made by cron as root or as any privileged user.
 
 $ sudo auditctl -l | grep /etc/cron.d
 -w /etc/cron.d -p wa -k cronjobs
@@ -7561,4 +7442,83 @@ $ sudo auditctl -l | grep /etc/cron.d
 $ sudo auditctl -l | grep /var/spool/cron
 -w /var/spool/cron -p wa -k cronjobs
 
-If either of these commands do not return the expected output, or the lines are commented out, this is a finding.</check-content></check></Rule></Group></Benchmark>
\ No newline at end of file
+If either of these commands do not return the expected output, or the lines are commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-279929"><title>SRG-OS-000163-GPOS-00072</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-279929r1156340_rule" weight="10.0" severity="medium"><version>RHEL-08-020360</version><title>RHEL 8 must automatically exit interactive command shell user sessions after 10 minutes of inactivity.</title><description>&lt;VulnDiscussion&gt;Terminating an idle interactive command shell user session within a short time period reduces the window of opportunity for unauthorized personnel to take control of it when left unattended in a virtual terminal or physical console.
+
+Satisfies: SRG-OS-000163-GPOS-00072, SRG-OS-000029-GPOS-00010&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001133</ident><fixtext fixref="F-84394r1156339_fix">Configure RHEL 8 to exit interactive command shell user sessions after 10 minutes of inactivity.
+
+Add or edit the following line in "/etc/profile.d/tmout.sh":
+
+#!/bin/bash
+
+declare -xr TMOUT=600</fixtext><fix id="F-84394r1156339_fix" /><check system="C-84489r1156338_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify RHEL 8 is configured to exit interactive command shell user sessions after 10 minutes of inactivity or less with the following command:
+
+$ sudo grep -i tmout /etc/profile /etc/profile.d/*.sh
+
+/etc/profile.d/tmout.sh:declare -xr TMOUT=600
+
+If "TMOUT" is not set to "600" or less in a script located in the "/etc/'profile.d/ directory, is missing or is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-279930"><title>SRG-OS-000033-GPOS-00014</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-279930r1156343_rule" weight="10.0" severity="medium"><version>RHEL-08-010280</version><title>RHEL 8 IP tunnels must use FIPS 140-3-approved cryptographic algorithms.</title><description>&lt;VulnDiscussion&gt;Overriding the system crypto policy makes the behavior of the Libreswan service violate expectations and makes system configuration more fragmented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000068</ident><fixtext fixref="F-84395r1156342_fix">Configure Libreswan to use the system cryptographic policy.
+
+Add the following line to "/etc/ipsec.conf":
+
+include /etc/crypto-policies/back-ends/libreswan.config</fixtext><fix id="F-84395r1156342_fix" /><check system="C-84490r1156341_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Note: If the ipsec service is not installed, this requirement is Not Applicable.
+
+Verify the IPsec service uses the system crypto policy with the following command:
+
+$ sudo grep include /etc/ipsec.conf /etc/ipsec.d/*.conf
+
+/etc/ipsec.conf:include /etc/crypto-policies/back-ends/libreswan.config
+/etc/ipsec.conf:include /etc/ipsec.d/*.conf
+
+If the ipsec configuration file does not contain "include /etc/crypto-policies/back-ends/libreswan.config", this is a finding.</check-content></check></Rule></Group><Group id="V-279931"><title>SRG-OS-000423-GPOS-00187</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-279931r1156346_rule" weight="10.0" severity="medium"><version>RHEL-08-010275</version><title>RHEL 8 must implement DOD-approved encryption in the bind package.</title><description>&lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
+
+Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
+
+RHEL 8 incorporates systemwide crypto policies by default. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/ directory.
+
+Satisfies: SRG-OS-000423-GPOS-00187, SRG-OS-000426-GPOS-00190&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-002418</ident><fixtext fixref="F-84396r1156345_fix">Configure BIND to use the system crypto policy.
+
+Add the following line to the "options" section in "/etc/named.conf":
+
+include "/etc/crypto-policies/back-ends/bind.config";</fixtext><fix id="F-84396r1156345_fix" /><check system="C-84491r1156344_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Note: If the "bind" package is not installed, this requirement is Not Applicable.
+
+Verify BIND uses the system crypto policy with the following command:
+
+$ sudo grep include /etc/named.conf 
+
+include "/etc/crypto-policies/back-ends/bind.config";' 
+
+If BIND is installed and the BIND config file does not contain the include "/etc/crypto-policies/back-ends/bind.config" directive, or the line is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-279932"><title>SRG-OS-000396-GPOS-00176</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-279932r1156349_rule" weight="10.0" severity="high"><version>RHEL-08-010270</version><title>RHEL 8 cryptographic policy must not be overridden.</title><description>&lt;VulnDiscussion&gt;Centralized cryptographic policies simplify applying secure ciphers across an operating system and the applications that run on that operating system. Use of weak or untested encryption algorithms undermines the purposes of using encryption to protect data.
+
+Satisfies: SRG-OS-000396-GPOS-00176, SRG-OS-000393-GPOS-00173, SRG-OS-000394-GPOS-00174&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-002450</ident><fixtext fixref="F-84397r1156348_fix">Configure RHEL 8 to correctly implement the systemwide cryptographic policies by reinstalling the crypto-policies package contents.
+
+Reinstall crypto-policies with the following command:
+
+$ sudo dnf -y reinstall crypto-policies
+
+Set the crypto-policy to FIPS with the following command:
+
+$ sudo update-crypto-policies --set FIPS
+
+Setting system policy to FIPS
+
+Note: Systemwide crypto policies are applied on application startup. It is recommended to restart the system for the change of policies to fully take place.</fixtext><fix id="F-84397r1156348_fix" /><check system="C-84492r1156347_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify RHEL 8 cryptographic policies are not overridden.
+
+Verify the configured policy matches the generated policy with the following command:
+
+$ sudo update-crypto-policies --is-applied
+
+The configured policy is applied
+
+If the returned message does not match the above, this is a finding.</check-content></check></Rule></Group><Group id="V-279933"><title>SRG-OS-000396-GPOS-00176</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-279933r1156352_rule" weight="10.0" severity="high"><version>RHEL-08-010015</version><title>RHEL 8 must have the crypto-policies package installed.</title><description>&lt;VulnDiscussion&gt;Centralized cryptographic policies simplify applying secure ciphers across an operating system and the applications that run on that operating system. Use of weak or untested encryption algorithms undermines the purposes of using encryption to protect data.
+
+Satisfies: SRG-OS-000396-GPOS-00176, SRG-OS-000393-GPOS-00173, SRG-OS-000394-GPOS-00174&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 8</dc:subject><dc:identifier>2921</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-002450</ident><fixtext fixref="F-84398r1156351_fix">Install the crypto-policies package (if the package is not already installed) with the following command:
+
+$ sudo dnf -y install crypto-policies</fixtext><fix id="F-84398r1156351_fix" /><check system="C-84493r1156350_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_8_STIG.xml" name="M" /><check-content>Verify the RHEL 8 crypto-policies package is installed with the following command:
+
+$ sudo dnf list --installed crypto-policies
+
+Updating Subscription Management repositories.
+Installed Packages
+crypto-policies.noarch                     20230731-1.git3177e06.el8                      @rhel-8-for-x86_64-baseos-rpms
+
+If the crypto-policies package is not installed, this is a finding.</check-content></check></Rule></Group></Benchmark>
\ No newline at end of file
diff --git a/shared/references/disa-stig-rhel8-v2r5-xccdf-scap.xml b/shared/references/disa-stig-rhel8-v2r6-xccdf-scap.xml
similarity index 97%
rename from shared/references/disa-stig-rhel8-v2r5-xccdf-scap.xml
rename to shared/references/disa-stig-rhel8-v2r6-xccdf-scap.xml
index c1a92634af36..5121706257da 100644
--- a/shared/references/disa-stig-rhel8-v2r5-xccdf-scap.xml
+++ b/shared/references/disa-stig-rhel8-v2r6-xccdf-scap.xml
@@ -1,36 +1,36 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<data-stream-collection xmlns="http://scap.nist.gov/schema/scap/source/1.2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" id="scap_mil.disa.stig_collection_U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark" schematron-version="1.3" xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2 http://scap.nist.gov/schema/xccdf/1.2/xccdf_1.2.xsd http://cpe.mitre.org/dictionary/2.0 http://scap.nist.gov/schema/cpe/2.3/cpe-dictionary_2.3.xsd http://cpe.mitre.org/language/2.0 https://csrc.nist.gov/schema/cpe/2.3/cpe-language_2.3.xsd http://oval.mitre.org/XMLSchema/oval-common-5 https://github.com/OVALProject/Language/tree/5.11.2/schemas/oval-common-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5 https://github.com/OVALProject/Language/tree/5.11.2/schemas/oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#independent https://github.com/OVALProject/Language/tree/5.11.2/schemas/independent-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#linux https://github.com/OVALProject/Language/tree/5.11.2/schemas/linux-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#unix https://github.com/OVALProject/Language/tree/5.11.2/schemas/unix-definitions-schema.xsd http://scap.nist.gov/schema/scap/source/1.2 http://scap.nist.gov/schema/scap/1.3/scap-source-data-stream_1.3.xsd">
-  <data-stream id="scap_mil.disa.stig_datastream_U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark" use-case="CONFIGURATION" scap-version="1.3" timestamp="2025-09-25T11:54:08.952-04:00">
+<data-stream-collection xmlns="http://scap.nist.gov/schema/scap/source/1.2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" id="scap_mil.disa.stig_collection_U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark" schematron-version="1.3" xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2 http://scap.nist.gov/schema/xccdf/1.2/xccdf_1.2.xsd http://cpe.mitre.org/dictionary/2.0 http://scap.nist.gov/schema/cpe/2.3/cpe-dictionary_2.3.xsd http://cpe.mitre.org/language/2.0 https://csrc.nist.gov/schema/cpe/2.3/cpe-language_2.3.xsd http://oval.mitre.org/XMLSchema/oval-common-5 https://github.com/OVALProject/Language/tree/5.11.2/schemas/oval-common-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5 https://github.com/OVALProject/Language/tree/5.11.2/schemas/oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#independent https://github.com/OVALProject/Language/tree/5.11.2/schemas/independent-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#linux https://github.com/OVALProject/Language/tree/5.11.2/schemas/linux-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#unix https://github.com/OVALProject/Language/tree/5.11.2/schemas/unix-definitions-schema.xsd http://scap.nist.gov/schema/scap/source/1.2 http://scap.nist.gov/schema/scap/1.3/scap-source-data-stream_1.3.xsd">
+  <data-stream id="scap_mil.disa.stig_datastream_U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark" use-case="CONFIGURATION" scap-version="1.3" timestamp="2026-01-05T14:27:20.630-05:00">
     <dictionaries>
-      <component-ref xmlns:xlink="http://www.w3.org/1999/xlink" id="scap_mil.disa.stig_cref_U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-cpe-dictionary.xml" xlink:href="#scap_mil.disa.stig_comp_U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-cpe-dictionary.xml">
+      <component-ref xmlns:xlink="http://www.w3.org/1999/xlink" id="scap_mil.disa.stig_cref_U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-cpe-dictionary.xml" xlink:href="#scap_mil.disa.stig_comp_U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-cpe-dictionary.xml">
         <catalog xmlns="urn:oasis:names:tc:entity:xmlns:xml:catalog">
-          <uri name="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" uri="#scap_mil.disa.stig_cref_U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" />
+          <uri name="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" uri="#scap_mil.disa.stig_cref_U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" />
         </catalog>
       </component-ref>
     </dictionaries>
     <checklists>
-      <component-ref xmlns:xlink="http://www.w3.org/1999/xlink" id="scap_mil.disa.stig_cref_U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-xccdf.xml" xlink:href="#scap_mil.disa.stig_comp_U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-xccdf.xml">
+      <component-ref xmlns:xlink="http://www.w3.org/1999/xlink" id="scap_mil.disa.stig_cref_U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-xccdf.xml" xlink:href="#scap_mil.disa.stig_comp_U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-xccdf.xml">
         <catalog xmlns="urn:oasis:names:tc:entity:xmlns:xml:catalog">
-          <uri name="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" uri="#scap_mil.disa.stig_cref_U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" />
+          <uri name="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" uri="#scap_mil.disa.stig_cref_U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" />
         </catalog>
       </component-ref>
     </checklists>
     <checks>
-      <component-ref xmlns:xlink="http://www.w3.org/1999/xlink" id="scap_mil.disa.stig_cref_U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" xlink:href="#scap_mil.disa.stig_comp_U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" />
-      <component-ref xmlns:xlink="http://www.w3.org/1999/xlink" id="scap_mil.disa.stig_cref_U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" xlink:href="#scap_mil.disa.stig_comp_U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" />
+      <component-ref xmlns:xlink="http://www.w3.org/1999/xlink" id="scap_mil.disa.stig_cref_U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" xlink:href="#scap_mil.disa.stig_comp_U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" />
+      <component-ref xmlns:xlink="http://www.w3.org/1999/xlink" id="scap_mil.disa.stig_cref_U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" xlink:href="#scap_mil.disa.stig_comp_U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" />
     </checks>
   </data-stream>
-  <component id="scap_mil.disa.stig_comp_U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-cpe-dictionary.xml" timestamp="2025-09-25T11:54:08.952-04:00">
+  <component id="scap_mil.disa.stig_comp_U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-cpe-dictionary.xml" timestamp="2026-01-05T14:27:20.630-05:00">
     <cpe-list xmlns="http://cpe.mitre.org/dictionary/2.0">
       <cpe-item name="cpe:/o:redhat:enterprise_linux:8">
         <title xml:lang="en-us">Red Hat Enterprise Linux 8</title>
-        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-cpe-oval.xml">oval:mil.disa.stig.rhel8os:def:1</check>
+        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-cpe-oval.xml">oval:mil.disa.stig.rhel8os:def:1</check>
       </cpe-item>
     </cpe-list>
   </component>
-  <component id="scap_mil.disa.stig_comp_U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-xccdf.xml" timestamp="2025-09-25T11:54:08.968-04:00">
+  <component id="scap_mil.disa.stig_comp_U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-xccdf.xml" timestamp="2026-01-05T14:27:20.652-05:00">
     <xccdf:Benchmark xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" id="xccdf_mil.disa.stig_benchmark_RHEL_8_STIG" style="SCAP_1.3" xml:lang="en">
-      <xccdf:status date="2025-08-19">accepted</xccdf:status>
+      <xccdf:status date="2025-11-24">accepted</xccdf:status>
       <xccdf:title>Red Hat Enterprise Linux 8 STIG SCAP Benchmark</xccdf:title>
       <xccdf:description>This Security Technical Implementation Guide is published as a tool to improve the security of Department of Defense (DOD) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.</xccdf:description>
       <xccdf:notice id="terms-of-use" xml:lang="en" />
@@ -40,97 +40,121 @@
         <dc:publisher>DISA</dc:publisher>
         <dc:source>STIG.DOD.MIL</dc:source>
       </xccdf:reference>
-      <xccdf:plain-text id="release-info">Benchmark Date: 01 Oct 2025</xccdf:plain-text>
-      <xccdf:plain-text id="generator">3.5.1</xccdf:plain-text>
+      <xccdf:plain-text id="release-info">Benchmark Date: 05 Jan 2026</xccdf:plain-text>
+      <xccdf:plain-text id="generator">3.5.2</xccdf:plain-text>
       <xccdf:plain-text id="conventionsVersion">1.10.0</xccdf:plain-text>
       <cpe:platform-specification>
         <cpe:platform id="xccdf_mil.disa.stig_platform_Linux_Not_krb5wks_1-17">
           <cpe:title>Linux krb5 workstation 1.17 or higher is not installed</cpe:title>
           <cpe:logical-test operator="AND" negate="true">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100015" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100015" />
+          </cpe:logical-test>
+        </cpe:platform>
+        <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxBIND">
+          <cpe:title>Linux with BIND installed</cpe:title>
+          <cpe:logical-test operator="AND" negate="false">
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25824200" />
           </cpe:logical-test>
         </cpe:platform>
         <cpe:platform id="xccdf_mil.disa.stig_platform_Linux_Not_krb5svr_1-17">
           <cpe:title>Linux krb5 server 1.17 or higher is not installed</cpe:title>
           <cpe:logical-test operator="AND" negate="true">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100014" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100014" />
+          </cpe:logical-test>
+        </cpe:platform>
+        <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxNFSMounts">
+          <cpe:title>Linux with NFS mounts configured</cpe:title>
+          <cpe:logical-test operator="AND" negate="false">
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25785400" />
           </cpe:logical-test>
         </cpe:platform>
         <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxIPv6enabled">
           <cpe:title>Linux IPv6 Enabled</cpe:title>
           <cpe:logical-test operator="AND" negate="true">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100012" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100012" />
+          </cpe:logical-test>
+        </cpe:platform>
+        <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxLibreswan">
+          <cpe:title>Linux with Libreswan installed</cpe:title>
+          <cpe:logical-test operator="AND" negate="false">
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25823200" />
           </cpe:logical-test>
         </cpe:platform>
         <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxBIOS">
           <cpe:title>Linux BIOS Boot</cpe:title>
           <cpe:logical-test operator="AND" negate="false">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100007" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100007" />
           </cpe:logical-test>
         </cpe:platform>
         <cpe:platform id="xccdf_mil.disa.stig_platform_RHEL_8-2_or_Higher">
           <cpe:title>RHEL 8.2 or Higher</cpe:title>
           <cpe:logical-test operator="AND" negate="false">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100002" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100002" />
           </cpe:logical-test>
         </cpe:platform>
         <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxGnome">
           <cpe:title>Gnome-shell Package</cpe:title>
           <cpe:logical-test operator="AND" negate="false">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100005" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100005" />
+          </cpe:logical-test>
+        </cpe:platform>
+        <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxNoNFSMounts">
+          <cpe:title>Linux with no NFS mounts configured</cpe:title>
+          <cpe:logical-test operator="AND" negate="true">
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25785400" />
           </cpe:logical-test>
         </cpe:platform>
         <cpe:platform id="xccdf_mil.disa.stig_platform_RHEL_8-1_or_Lower">
           <cpe:title>RHEL 8.1 or Lower</cpe:title>
           <cpe:logical-test operator="AND" negate="false">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100001" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100001" />
           </cpe:logical-test>
         </cpe:platform>
         <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxUEFI">
           <cpe:title>Linux UEFI Boot</cpe:title>
           <cpe:logical-test operator="AND" negate="false">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100006" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100006" />
           </cpe:logical-test>
         </cpe:platform>
         <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxTFTP">
           <cpe:title>Linux with TFTP installed</cpe:title>
           <cpe:logical-test operator="AND" negate="false">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25795200" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25795200" />
           </cpe:logical-test>
         </cpe:platform>
         <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxKernelDumps">
           <cpe:title>Kernel dumps are enabled</cpe:title>
           <cpe:logical-test operator="AND" negate="true">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:230311" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:230311" />
           </cpe:logical-test>
         </cpe:platform>
         <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxUEFIBootPartitionNotVfat">
           <cpe:title>Linux UEFI system with boot partition file type other than VFAT</cpe:title>
           <cpe:logical-test operator="AND" negate="false">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100016" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100016" />
           </cpe:logical-test>
         </cpe:platform>
         <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxPostfix">
           <cpe:title>Linux with postfix installed</cpe:title>
           <cpe:logical-test operator="AND" negate="false">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25795100" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25795100" />
           </cpe:logical-test>
         </cpe:platform>
         <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxAutofs">
           <cpe:title>Linux with autofs installed</cpe:title>
           <cpe:logical-test operator="AND" negate="false">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25784900" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25784900" />
           </cpe:logical-test>
         </cpe:platform>
         <cpe:platform id="xccdf_mil.disa.stig_platform_RHEL_8-7_or_Higher">
           <cpe:title>RHEL 8.7 or Higher</cpe:title>
           <cpe:logical-test operator="AND" negate="false">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100017" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100017" />
           </cpe:logical-test>
         </cpe:platform>
       </cpe:platform-specification>
       <xccdf:platform idref="cpe:/o:redhat:enterprise_linux:8" />
-      <xccdf:version>002.005</xccdf:version>
+      <xccdf:version>002.006</xccdf:version>
       <xccdf:metadata>
         <dc:creator>DISA</dc:creator>
         <dc:publisher>DISA</dc:publisher>
@@ -161,7 +185,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230249" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230250" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230253" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-230255" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230257" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230258" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230259" selected="true" />
@@ -249,7 +272,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230377" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230378" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230380" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-230381" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230382" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230383" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230386" selected="true" />
@@ -420,6 +442,10 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-251713" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-251718" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-257258" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279929" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279930" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279931" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279933" selected="true" />
       </xccdf:Profile>
       <xccdf:Profile id="xccdf_mil.disa.stig_profile_MAC-1_Public">
         <xccdf:title>I - Mission Critical Public</xccdf:title>
@@ -445,7 +471,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230249" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230250" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230253" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-230255" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230257" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230258" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230259" selected="true" />
@@ -533,7 +558,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230377" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230378" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230380" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-230381" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230382" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230383" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230386" selected="true" />
@@ -704,6 +728,10 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-251713" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-251718" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-257258" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279929" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279930" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279931" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279933" selected="true" />
       </xccdf:Profile>
       <xccdf:Profile id="xccdf_mil.disa.stig_profile_MAC-1_Sensitive">
         <xccdf:title>I - Mission Critical Sensitive</xccdf:title>
@@ -729,7 +757,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230249" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230250" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230253" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-230255" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230257" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230258" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230259" selected="true" />
@@ -817,7 +844,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230377" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230378" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230380" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-230381" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230382" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230383" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230386" selected="true" />
@@ -988,6 +1014,10 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-251713" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-251718" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-257258" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279929" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279930" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279931" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279933" selected="true" />
       </xccdf:Profile>
       <xccdf:Profile id="xccdf_mil.disa.stig_profile_MAC-2_Classified">
         <xccdf:title>II - Mission Support Classified</xccdf:title>
@@ -1013,7 +1043,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230249" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230250" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230253" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-230255" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230257" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230258" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230259" selected="true" />
@@ -1101,7 +1130,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230377" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230378" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230380" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-230381" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230382" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230383" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230386" selected="true" />
@@ -1272,6 +1300,10 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-251713" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-251718" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-257258" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279929" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279930" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279931" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279933" selected="true" />
       </xccdf:Profile>
       <xccdf:Profile id="xccdf_mil.disa.stig_profile_MAC-2_Public">
         <xccdf:title>II - Mission Support Public</xccdf:title>
@@ -1297,7 +1329,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230249" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230250" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230253" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-230255" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230257" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230258" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230259" selected="true" />
@@ -1385,7 +1416,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230377" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230378" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230380" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-230381" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230382" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230383" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230386" selected="true" />
@@ -1556,6 +1586,10 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-251713" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-251718" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-257258" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279929" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279930" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279931" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279933" selected="true" />
       </xccdf:Profile>
       <xccdf:Profile id="xccdf_mil.disa.stig_profile_MAC-2_Sensitive">
         <xccdf:title>II - Mission Support Sensitive</xccdf:title>
@@ -1581,7 +1615,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230249" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230250" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230253" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-230255" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230257" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230258" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230259" selected="true" />
@@ -1669,7 +1702,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230377" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230378" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230380" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-230381" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230382" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230383" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230386" selected="true" />
@@ -1840,6 +1872,10 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-251713" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-251718" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-257258" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279929" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279930" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279931" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279933" selected="true" />
       </xccdf:Profile>
       <xccdf:Profile id="xccdf_mil.disa.stig_profile_MAC-3_Classified">
         <xccdf:title>III - Administrative Classified</xccdf:title>
@@ -1865,7 +1901,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230249" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230250" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230253" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-230255" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230257" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230258" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230259" selected="true" />
@@ -1953,7 +1988,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230377" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230378" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230380" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-230381" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230382" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230383" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230386" selected="true" />
@@ -2124,6 +2158,10 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-251713" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-251718" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-257258" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279929" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279930" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279931" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279933" selected="true" />
       </xccdf:Profile>
       <xccdf:Profile id="xccdf_mil.disa.stig_profile_MAC-3_Public">
         <xccdf:title>III - Administrative Public</xccdf:title>
@@ -2149,7 +2187,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230249" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230250" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230253" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-230255" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230257" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230258" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230259" selected="true" />
@@ -2237,7 +2274,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230377" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230378" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230380" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-230381" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230382" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230383" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230386" selected="true" />
@@ -2408,6 +2444,10 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-251713" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-251718" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-257258" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279929" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279930" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279931" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279933" selected="true" />
       </xccdf:Profile>
       <xccdf:Profile id="xccdf_mil.disa.stig_profile_MAC-3_Sensitive">
         <xccdf:title>III - Administrative Sensitive</xccdf:title>
@@ -2433,7 +2473,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230249" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230250" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230253" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-230255" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230257" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230258" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230259" selected="true" />
@@ -2521,7 +2560,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230377" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230378" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230380" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-230381" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230382" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230383" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-230386" selected="true" />
@@ -2692,14 +2730,18 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-251713" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-251718" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-257258" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279929" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279930" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279931" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-279933" selected="true" />
       </xccdf:Profile>
       <xccdf:Profile id="xccdf_mil.disa.stig_profile_Disable_Slow_Rules">
         <xccdf:title>Disable Slow Rules</xccdf:title>
         <xccdf:description>This profile disables rules known to have poor performance in some environments, such as systems with large numbers of user accounts.</xccdf:description>
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-251708r1017362_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230262r1155384_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230258r1017078_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-251709r1017364_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230262r1101894_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-251707r1017360_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230259r1017079_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230257r1017077_rule" selected="false" />
@@ -2722,8 +2764,9 @@
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230556r1017318_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230448r1017247_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230281r958936_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230301r1017111_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230270r1137695_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230392r1038966_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230308r1155390_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230428r1017229_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230483r971542_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230316r1044801_rule" selected="false" />
@@ -2732,7 +2775,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230473r1017264_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230249r1017067_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230357r1017169_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-244523r1117265_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230462r1017254_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230507r1017287_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230334r1017146_rule" selected="false" />
@@ -2744,30 +2786,27 @@
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230340r1017152_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230548r1017310_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230422r1017223_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230307r1017117_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230532r1017294_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230382r1069309_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230557r1088855_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230550r1017312_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230315r1134883_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230549r1155416_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230463r1017255_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230363r1017175_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230549r1017311_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-244548r1014815_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230537r1017299_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230399r1017205_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230544r1017306_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230381r1069295_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230407r1017213_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230375r1017187_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230236r1117265_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230433r1017234_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-251713r1017366_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230427r1017228_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230267r1017085_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-244529r1017336_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230259r1017079_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230306r1017116_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-279931r1156346_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230364r1017176_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230330r1069305_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230291r1069303_rule" selected="false" />
@@ -2810,12 +2849,14 @@
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230238r1017057_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230228r1069299_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230535r1017297_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230559r1155398_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230311r1155408_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230505r958672_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230359r1017171_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230287r1017098_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230397r1017203_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230471r1069296_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230502r1017284_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-279929r1156340_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230455r1017251_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230409r1017215_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230286r1017097_rule" selected="false" />
@@ -2832,12 +2873,12 @@
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230541r1017303_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230496r1069312_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230386r958730_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230328r1155410_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-279930r1156343_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230344r1017156_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230341r1017153_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230378r1017189_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230270r1117267_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230393r1017200_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230559r1014820_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257258r1069328_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230435r1017236_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230538r1017300_rule" selected="false" />
@@ -2862,9 +2903,11 @@
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230365r1017177_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230426r1017227_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230511r958804_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230502r1155393_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230510r958804_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230244r1069300_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230280r1017093_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230262r1155384_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230464r1017256_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230474r1017265_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230467r1017259_rule" selected="false" />
@@ -2872,19 +2915,20 @@
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230362r1017174_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230423r1017224_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-244519r1017326_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230269r1137695_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230402r1017208_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-251708r1017362_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230266r1017084_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230328r1017139_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-244530r1155403_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230555r1017317_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-244530r1017337_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230313r1155379_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230241r1017060_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230248r1069291_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230482r1069330_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230447r1017246_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230413r1017219_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-244523r1137691_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-237642r991589_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230308r1017118_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-244549r958908_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230233r1044790_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230354r1069323_rule" selected="false" />
@@ -2893,6 +2937,7 @@
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230498r1069314_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230515r958804_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230517r958804_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230236r1137691_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230273r1017381_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230516r958804_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-251718r1017371_rule" selected="false" />
@@ -2900,7 +2945,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230321r1017132_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230499r1069315_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230518r958804_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230262r1101894_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230288r1069301_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-244536r1017343_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-244524r1017330_rule" selected="false" />
@@ -2932,32 +2976,31 @@
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230503r1069316_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-244545r958804_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230271r1101896_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230307r1155388_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-244553r1017353_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230489r1017273_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230255r1017075_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230437r1017238_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230325r1017136_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230371r1017183_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230313r1134879_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230232r1017051_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230526r958908_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230419r1017221_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230298r1017108_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230306r1155386_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230478r1017268_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230425r1017226_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230547r1017309_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230272r1101898_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230312r1134877_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230410r1017216_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230301r1155405_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230367r1038967_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230546r1017308_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230546r1155413_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230485r1017269_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230360r1017172_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-244543r971542_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230261r1101891_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230269r1117267_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-251712r1050789_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230311r1017121_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230509r958804_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-244525r1017331_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-230394r958754_rule" selected="false" />
@@ -2991,7 +3034,7 @@ Note: The life-cycle time spans and dates are subject to adjustment.&lt;/VulnDis
           <xccdf:fixtext fixref="F-32865r567410_fix">Upgrade to a supported version of RHEL 8.</xccdf:fixtext>
           <xccdf:fix id="F-32865r567410_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230221" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230221" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3027,7 +3070,7 @@ The "rsyslog" service must be restarted for the changes to take effect. To resta
 $ sudo systemctl restart rsyslog.service</xccdf:fixtext>
           <xccdf:fix id="F-32872r567431_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230228" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230228" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3058,7 +3101,7 @@ Edit/Modify the following line in the "/etc/login.defs" file and set "[ENCRYPT_M
 ENCRYPT_METHOD SHA512</xccdf:fixtext>
           <xccdf:fix id="F-32875r567440_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230231" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230231" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3083,7 +3126,7 @@ Passwords need to be protected at all times, and encryption is the standard meth
           <xccdf:fixtext fixref="F-32876r567443_fix">Lock all interactive user accounts not using SHA-512 hashing until the passwords can be regenerated with SHA-512.</xccdf:fixtext>
           <xccdf:fix id="F-32876r567443_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230232" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230232" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3112,14 +3155,14 @@ Edit/modify the following line in the "/etc/login.defs" file and set "SHA_CRYPT_
 SHA_CRYPT_MIN_ROUNDS 100000</xccdf:fixtext>
           <xccdf:fix id="F-32877r1044789_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230233" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230233" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-230234">
         <xccdf:title>SRG-OS-000080-GPOS-00048</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230234r1117265_rule" severity="high" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230234r1137691_rule" severity="high" weight="10.0">
           <xccdf:version>RHEL-08-010140</xccdf:version>
           <xccdf:title>RHEL 8 operating systems booted with United Extensible Firmware Interface (UEFI) must require authentication upon booting into single-user mode and maintenance.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;If the system does not require valid authentication before it boots into single-user or maintenance mode, anyone who invokes single-user or maintenance mode is granted privileged access to all files on the system. GRUB 2 is the default boot loader for RHEL 8 and is designed to require a password to boot into single-user mode or make modifications to the boot menu.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
@@ -3141,14 +3184,14 @@ Enter password:
 Confirm password:</xccdf:fixtext>
           <xccdf:fix id="F-32878r743921_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230234" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230234" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-230235">
         <xccdf:title>SRG-OS-000080-GPOS-00048</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230235r1117265_rule" severity="high" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230235r1137691_rule" severity="high" weight="10.0">
           <xccdf:version>RHEL-08-010150</xccdf:version>
           <xccdf:title>RHEL 8 operating systems booted with a BIOS must require authentication upon booting into single-user and maintenance modes.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;If the system does not require valid authentication before it boots into single-user or maintenance mode, anyone who invokes single-user or maintenance mode is granted privileged access to all files on the system. GRUB 2 is the default boot loader for RHEL 8 and is designed to require a password to boot into single-user mode or make modifications to the boot menu.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
@@ -3170,14 +3213,14 @@ Enter password:
 Confirm password:</xccdf:fixtext>
           <xccdf:fix id="F-32879r743924_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230235" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230235" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-230236">
         <xccdf:title>SRG-OS-000080-GPOS-00048</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230236r1117265_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230236r1137691_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-08-010151</xccdf:version>
           <xccdf:title>RHEL 8 operating systems must require authentication upon booting into rescue mode.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;If the system does not require valid root authentication before it boots into emergency or rescue mode, anyone who invokes emergency or rescue mode is granted privileged access to all files on the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
@@ -3194,7 +3237,7 @@ Confirm password:</xccdf:fixtext>
 ExecStart=-/usr/lib/systemd/systemd-sulogin-shell rescue</xccdf:fixtext>
           <xccdf:fix id="F-32880r743927_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230236" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230236" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3224,7 +3267,7 @@ Edit/modify the following line in the "/etc/pam.d/password-auth" file to include
 password sufficient pam_unix.so sha512</xccdf:fixtext>
           <xccdf:fix id="F-32881r809275_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230237" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230237" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3256,7 +3299,7 @@ FIPS 140-2 is the current standard for validating that mechanisms used to access
 Remove any files with the .keytab extension from the operating system.</xccdf:fixtext>
           <xccdf:fix id="F-32882r567461_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230238" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230238" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3287,7 +3330,7 @@ FIPS 140-2 is the current standard for validating that mechanisms used to access
 $ sudo yum remove krb5-workstation</xccdf:fixtext>
           <xccdf:fix id="F-32883r567464_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230239" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230239" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3317,7 +3360,7 @@ SELINUX=enforcing
 A reboot is required for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-32884r567467_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230240" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230240" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3343,7 +3386,7 @@ Policycoreutils contains the policy core utilities that are required for basic o
 $ sudo yum install policycoreutils</xccdf:fixtext>
           <xccdf:fix id="F-32885r567470_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230241" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230241" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3381,7 +3424,7 @@ For the changes to take effect, the SSH daemon must be restarted:
      $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-32888r917866_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230244" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230244" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3407,7 +3450,7 @@ The structure and content of error messages must be carefully considered by the
 $ sudo chmod 0640 /var/log/messages</xccdf:fixtext>
           <xccdf:fix id="F-32889r567482_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230245" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230245" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3433,7 +3476,7 @@ The structure and content of error messages must be carefully considered by the
 $ sudo chown root /var/log/messages</xccdf:fixtext>
           <xccdf:fix id="F-32890r567485_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230246" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230246" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3459,7 +3502,7 @@ The structure and content of error messages must be carefully considered by the
 $ sudo chgrp root /var/log/messages</xccdf:fixtext>
           <xccdf:fix id="F-32891r567488_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230247" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230247" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3485,7 +3528,7 @@ The structure and content of error messages must be carefully considered by the
 $ sudo chmod 0755 /var/log</xccdf:fixtext>
           <xccdf:fix id="F-32892r567491_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230248" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230248" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3511,7 +3554,7 @@ The structure and content of error messages must be carefully considered by the
 $ sudo chown root /var/log</xccdf:fixtext>
           <xccdf:fix id="F-32893r567494_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230249" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230249" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3537,7 +3580,7 @@ The structure and content of error messages must be carefully considered by the
 $ sudo chgrp root /var/log</xccdf:fixtext>
           <xccdf:fix id="F-32894r567497_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230250" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230250" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3572,45 +3615,7 @@ Restart the SSH Daemon with the following command:
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-32897r1044798_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230253" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-230255">
-        <xccdf:title>SRG-OS-000250-GPOS-00093</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230255r1017075_rule" severity="medium" weight="10.0">
-          <xccdf:version>RHEL-08-010294</xccdf:version>
-          <xccdf:title>The RHEL 8 operating system must implement DoD-approved TLS encryption in the OpenSSL package.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
-
-Remote access (e.g., RDP) is access to DoD nonpublic information systems by an authorized user (or an information system) communicating through an external, non-organization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
-
-Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
-
-RHEL 8 incorporates system-wide crypto policies by default.  The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/openssl.config file.
-
-Satisfies: SRG-OS-000250-GPOS-00093, SRG-OS-000393-GPOS-00173, SRG-OS-000394-GPOS-00174, SRG-OS-000125-GPOS-00065&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Red Hat Enterprise Linux 8</dc:subject>
-            <dc:identifier>2921</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001453</xccdf:ident>
-          <xccdf:fixtext fixref="F-32899r1017074_fix">Configure the RHEL 8 OpenSSL library to use only DoD-approved TLS encryption by editing the following line in the "/etc/crypto-policies/back-ends/opensslcnf.config" file:
-
-For versions prior to crypto-policies-20210617-1.gitc776d3e.el8.noarch:
-MinProtocol = TLSv1.2
-
-For version crypto-policies-20210617-1.gitc776d3e.el8.noarch and newer:
-TLS.MinProtocol = TLSv1.2
-DTLS.MinProtocol = DTLSv1.2
-A reboot is required for the changes to take effect.</xccdf:fixtext>
-          <xccdf:fix id="F-32899r1017074_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230255" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230253" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3638,7 +3643,7 @@ Run the following command, replacing "[FILE]" with any system command with a mod
 $ sudo chmod 755 [FILE]</xccdf:fixtext>
           <xccdf:fix id="F-32901r792861_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230257" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230257" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3666,7 +3671,7 @@ Run the following command, replacing "[FILE]" with any system command file not o
 $ sudo chown root [FILE]</xccdf:fixtext>
           <xccdf:fix id="F-32902r567521_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230258" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230258" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3694,7 +3699,7 @@ Run the following command, replacing "[FILE]" with any system command file not g
 $ sudo chgrp root [FILE]</xccdf:fixtext>
           <xccdf:fix id="F-32903r567524_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230259" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230259" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3720,7 +3725,7 @@ This requirement applies to RHEL 8 with software libraries that are accessible a
 $ sudo find /lib /lib64 /usr/lib /usr/lib64 -type f -name '*.so*' -perm /022 -exec chmod go-w {} +</xccdf:fixtext>
           <xccdf:fix id="F-32904r1101887_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230260" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230260" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3746,16 +3751,16 @@ This requirement applies to RHEL 8 with software libraries that are accessible a
 $ sudo find /lib /lib64 /usr/lib /usr/lib64 -type f -name '*.so*' ! -user root -exec chown root {} +</xccdf:fixtext>
           <xccdf:fix id="F-32905r1101890_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230261" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230261" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-230262">
         <xccdf:title>SRG-OS-000259-GPOS-00100</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230262r1101894_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230262r1155384_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-08-010350</xccdf:version>
-          <xccdf:title>RHEL 8 library files must be group-owned by root or a system account.</xccdf:title>
+          <xccdf:title>RHEL 8 library files must be group-owned by root.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;If RHEL 8 were to allow any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
 
 This requirement applies to RHEL 8 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges. Only qualified and authorized individuals will be allowed to obtain access to information system components for purposes of initiating changes, including upgrades and modifications.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
@@ -3772,7 +3777,7 @@ This requirement applies to RHEL 8 with software libraries that are accessible a
 $ sudo find /lib /lib64 /usr/lib /usr/lib64 -type f -name '*.so*' ! -group root -exec chown :root {} +</xccdf:fixtext>
           <xccdf:fix id="F-32906r1101893_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230262" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230262" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3801,7 +3806,7 @@ Verifying the authenticity of the software prior to installation validates the i
      gpgcheck=1</xccdf:fixtext>
           <xccdf:fix id="F-32908r880710_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230264" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230264" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3832,7 +3837,7 @@ Set the "localpkg_gpgcheck" option to "True" in the "/etc/dnf/dnf.conf" file:
 localpkg_gpgcheck=True</xccdf:fixtext>
           <xccdf:fix id="F-32909r567542_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230265" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230265" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3881,7 +3886,7 @@ Load settings from all system configuration files with the following command:
 $ sudo sysctl --system</xccdf:fixtext>
           <xccdf:fix id="F-32910r858747_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230266" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230266" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3933,7 +3938,7 @@ Load settings from all system configuration files with the following command:
 $ sudo sysctl --system</xccdf:fixtext>
           <xccdf:fix id="F-32911r858750_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230267" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230267" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -3985,14 +3990,14 @@ Load settings from all system configuration files with the following command:
 $ sudo sysctl --system</xccdf:fixtext>
           <xccdf:fix id="F-32912r858753_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230268" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230268" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-230269">
         <xccdf:title>SRG-OS-000138-GPOS-00069</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230269r1117267_rule" severity="low" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230269r1137695_rule" severity="low" weight="10.0">
           <xccdf:version>RHEL-08-010375</xccdf:version>
           <xccdf:title>RHEL 8 must restrict access to the kernel message buffer.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
@@ -4037,14 +4042,14 @@ Load settings from all system configuration files with the following command:
 $ sudo sysctl --system</xccdf:fixtext>
           <xccdf:fix id="F-32913r858755_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230269" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230269" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-230270">
         <xccdf:title>SRG-OS-000138-GPOS-00069</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230270r1117267_rule" severity="low" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230270r1137695_rule" severity="low" weight="10.0">
           <xccdf:version>RHEL-08-010376</xccdf:version>
           <xccdf:title>RHEL 8 must prevent kernel profiling by unprivileged users.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
@@ -4089,7 +4094,7 @@ Load settings from all system configuration files with the following command:
 $ sudo sysctl --system</xccdf:fixtext>
           <xccdf:fix id="F-32914r858757_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230270" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230270" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4116,7 +4121,7 @@ Satisfies: SRG-OS-000373-GPOS-00156, SRG-OS-000373-GPOS-00157, SRG-OS-000373-GPO
           <xccdf:fixtext fixref="F-32915r854025_fix">Remove any occurrence of "NOPASSWD" found in "/etc/sudoers" file or files in the "/etc/sudoers.d" directory.</xccdf:fixtext>
           <xccdf:fix id="F-32915r854025_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230271" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230271" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4143,7 +4148,7 @@ Satisfies: SRG-OS-000373-GPOS-00156, SRG-OS-000373-GPOS-00157, SRG-OS-000373-GPO
           <xccdf:fixtext fixref="F-32916r567563_fix">Remove any occurrence of "!authenticate" found in "/etc/sudoers" file or files in the "/etc/sudoers.d" directory.</xccdf:fixtext>
           <xccdf:fix id="F-32916r567563_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230272" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230272" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4176,7 +4181,7 @@ This requirement only applies to components where this is specific to the functi
 $ sudo yum install openssl-pkcs11</xccdf:fixtext>
           <xccdf:fix id="F-32917r743942_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230273" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230273" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4224,7 +4229,7 @@ Issue the following command to make the changes take effect:
 $ sudo sysctl --system</xccdf:fixtext>
           <xccdf:fix id="F-32924r858766_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230280" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230280" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4250,7 +4255,7 @@ Set the "clean_requirements_on_remove" option to "True" in the "/etc/dnf/dnf.con
 clean_requirements_on_remove=True</xccdf:fixtext>
           <xccdf:fix id="F-32925r567590_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230281" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230281" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4280,7 +4285,7 @@ SELINUXTYPE=targeted
 A reboot is required for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-32926r567593_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230282" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230282" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4304,7 +4309,7 @@ A reboot is required for the changes to take effect.</xccdf:fixtext>
 $ sudo rm /etc/ssh/shosts.equiv</xccdf:fixtext>
           <xccdf:fix id="F-32927r567596_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230283" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230283" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4328,7 +4333,7 @@ $ sudo rm /etc/ssh/shosts.equiv</xccdf:fixtext>
 $ sudo rm /[path]/[to]/[file]/.shosts</xccdf:fixtext>
           <xccdf:fix id="F-32928r567599_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230284" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230284" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4356,7 +4361,7 @@ The SSH daemon must be restarted for the changes to take effect. To restart the
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-32930r567605_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230286" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230286" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4384,7 +4389,7 @@ The SSH daemon must be restarted for the changes to take effect. To restart the
      $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-32931r880713_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230287" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230287" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4412,7 +4417,7 @@ The SSH daemon must be restarted for the changes to take effect. To restart the
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-32932r567611_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230288" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230288" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4421,7 +4426,7 @@ $ sudo systemctl restart sshd.service</xccdf:fixtext>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
         <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230290r1069302_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-08-010520</xccdf:version>
-          <xccdf:title>The RHEL 8 SSH daemon must not allow authentication using known host’s authentication.</xccdf:title>
+          <xccdf:title>The RHEL 8 SSH daemon must not allow authentication using known host's authentication.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Configuring this setting for the SSH daemon provides additional assurance that remote logon via SSH will require a password, even in the event of misconfiguration elsewhere.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
           <xccdf:reference>
             <dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title>
@@ -4431,7 +4436,7 @@ $ sudo systemctl restart sshd.service</xccdf:fixtext>
             <dc:identifier>2921</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-32934r567617_fix">Configure the SSH daemon to not allow authentication using known host’s authentication.
+          <xccdf:fixtext fixref="F-32934r567617_fix">Configure the SSH daemon to not allow authentication using known host's authentication.
 
 Add the following line in "/etc/ssh/sshd_config", or uncomment the line and set the value to "yes":
 
@@ -4442,7 +4447,7 @@ The SSH daemon must be restarted for the changes to take effect. To restart the
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-32934r567617_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230290" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230290" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4472,7 +4477,7 @@ The SSH daemon must be restarted for the changes to take effect. To restart the
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-32935r743956_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230291" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230291" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4494,7 +4499,7 @@ $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fixtext fixref="F-32936r567623_fix">Migrate the "/var" path onto a separate file system.</xccdf:fixtext>
           <xccdf:fix id="F-32936r567623_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230292" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230292" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4516,7 +4521,7 @@ $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fixtext fixref="F-32937r567626_fix">Migrate the "/var/log" path onto a separate file system.</xccdf:fixtext>
           <xccdf:fix id="F-32937r567626_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230293" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230293" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4538,7 +4543,7 @@ $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fixtext fixref="F-32938r567629_fix">Migrate the system audit data path onto a separate file system.</xccdf:fixtext>
           <xccdf:fix id="F-32938r567629_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230294" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230294" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4560,7 +4565,7 @@ $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fixtext fixref="F-32939r567632_fix">Migrate the "/tmp" directory onto a separate file system/partition.</xccdf:fixtext>
           <xccdf:fix id="F-32939r567632_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230295" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230295" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4591,7 +4596,7 @@ The SSH daemon must be restarted for the changes to take effect. To restart the
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-32940r567635_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230296" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230296" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4619,7 +4624,7 @@ $ sudo systemctl start rsyslog.service
 $ sudo systemctl enable rsyslog.service</xccdf:fixtext>
           <xccdf:fix id="F-32942r567641_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230298" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230298" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4641,7 +4646,7 @@ $ sudo systemctl enable rsyslog.service</xccdf:fixtext>
           <xccdf:fixtext fixref="F-32943r567644_fix">Configure the "/etc/fstab" to use the "nosuid" option on file systems that contain user home directories for interactive users.</xccdf:fixtext>
           <xccdf:fix id="F-32943r567644_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230299" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230299" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4664,17 +4669,17 @@ $ sudo systemctl enable rsyslog.service</xccdf:fixtext>
           <xccdf:fixtext fixref="F-32944r567647_fix">Configure the "/etc/fstab" to use the "nosuid" option on the /boot directory.</xccdf:fixtext>
           <xccdf:fix id="F-32944r567647_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230300" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230300" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-230301">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230301r1017111_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230301r1155405_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-08-010580</xccdf:version>
           <xccdf:title>RHEL 8 must prevent special devices on non-root local partitions.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for unprivileged users to attain unauthorized administrative access.  The only legitimate location for device files is the /dev directory located on the root partition.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access. The only legitimate location for device files is the /dev directory located on the root partition.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
           <xccdf:reference>
             <dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title>
             <dc:publisher>DISA</dc:publisher>
@@ -4686,14 +4691,14 @@ $ sudo systemctl enable rsyslog.service</xccdf:fixtext>
           <xccdf:fixtext fixref="F-32945r567650_fix">Configure the "/etc/fstab" to use the "nodev" option on all non-root local partitions.</xccdf:fixtext>
           <xccdf:fix id="F-32945r567650_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230301" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230301" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-230306">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230306r1017116_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230306r1155386_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-08-010630</xccdf:version>
           <xccdf:title>RHEL 8 must prevent code from being executed on file systems that are imported via Network File System (NFS).</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;The "noexec" mount option causes the system not to execute binary files. This option must be used for mounting any file system not containing approved binary as they may be incompatible. Executing files from untrusted file systems increases the opportunity for unprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
@@ -4704,18 +4709,19 @@ $ sudo systemctl enable rsyslog.service</xccdf:fixtext>
             <dc:subject>Red Hat Enterprise Linux 8</dc:subject>
             <dc:identifier>2921</dc:identifier>
           </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxNFSMounts" />
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
           <xccdf:fixtext fixref="F-32950r567665_fix">Configure the "/etc/fstab" to use the "noexec" option on file systems that are being imported via NFS.</xccdf:fixtext>
           <xccdf:fix id="F-32950r567665_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230306" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230306" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-230307">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230307r1017117_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230307r1155388_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-08-010640</xccdf:version>
           <xccdf:title>RHEL 8 must prevent special devices on file systems that are imported via Network File System (NFS).</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for unprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
@@ -4726,18 +4732,19 @@ $ sudo systemctl enable rsyslog.service</xccdf:fixtext>
             <dc:subject>Red Hat Enterprise Linux 8</dc:subject>
             <dc:identifier>2921</dc:identifier>
           </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxNFSMounts" />
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
           <xccdf:fixtext fixref="F-32951r567668_fix">Configure the "/etc/fstab" to use the "nodev" option on file systems that are being imported via NFS.</xccdf:fixtext>
           <xccdf:fix id="F-32951r567668_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230307" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230307" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-230308">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230308r1017118_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230308r1155390_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-08-010650</xccdf:version>
           <xccdf:title>RHEL 8 must prevent files with the setuid and setgid bit set from being executed on file systems that are imported via Network File System (NFS).</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system not to execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for unprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
@@ -4748,23 +4755,24 @@ $ sudo systemctl enable rsyslog.service</xccdf:fixtext>
             <dc:subject>Red Hat Enterprise Linux 8</dc:subject>
             <dc:identifier>2921</dc:identifier>
           </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxNFSMounts" />
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
           <xccdf:fixtext fixref="F-32952r567671_fix">Configure the "/etc/fstab" to use the "nosuid" option on file systems that are being imported via NFS.</xccdf:fixtext>
           <xccdf:fix id="F-32952r567671_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230308" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230308" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-230311">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230311r1017121_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230311r1155408_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-08-010671</xccdf:version>
           <xccdf:title>RHEL 8 must disable the kernel.core_pattern.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+          <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore, may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
@@ -4779,26 +4787,20 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>2921</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-32955r858768_fix">Configure RHEL 8 to disable storing core dumps.
+          <xccdf:fixtext fixref="F-32955r1155407_fix">Configure RHEL 8 to restrict usage of ptrace to descendant processes by adding the following line to a dropfile in the "/etc/sysctl.d" directory:
 
-Add or edit the following line in a system configuration file, in the "/etc/sysctl.d/" directory:
+Create a dropfile if it does not already exist:
+$ sudo vi /etc/sysctl.d/99-disable-coredump.conf
 
+Add the following to the file:
 kernel.core_pattern = |/bin/false
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
-
 The system configuration files need to be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-32955r858768_fix" />
+          <xccdf:fix id="F-32955r1155407_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230311" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230311" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4835,17 +4837,17 @@ Reload the daemon for this change to take effect.
 $ sudo systemctl daemon-reload</xccdf:fixtext>
           <xccdf:fix id="F-32956r833307_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230312" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230312" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-230313">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230313r1134879_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230313r1155379_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-08-010673</xccdf:version>
           <xccdf:title>RHEL 8 must disable core dumps for all users.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+          <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore, may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
 A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
           <xccdf:reference>
@@ -4857,14 +4859,16 @@ A core dump includes a memory image taken at the time the operating system termi
           </xccdf:reference>
           <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxKernelDumps" />
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-32957r1017123_fix">Configure the operating system to disable core dumps for all users.
+          <xccdf:fixtext fixref="F-32957r1155378_fix">Configure the operating system to disable core dumps for all users.
 
-Add the following line to the top of the /etc/security/limits.conf or in a ".conf" file defined in /etc/security/limits.d/:
+Add the following line to the top of the /etc/security/limits.conf or in a single ".conf" file defined in /etc/security/limits.d/:
 
-* hard core 0</xccdf:fixtext>
-          <xccdf:fix id="F-32957r1017123_fix" />
+* hard core 0
+
+Remove or comment out any entries for users or groups with a value set to anything other than "0".</xccdf:fixtext>
+          <xccdf:fix id="F-32957r1155378_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230313" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230313" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4893,7 +4897,7 @@ Add or modify the following line in /etc/systemd/coredump.conf:
 Storage=none</xccdf:fixtext>
           <xccdf:fix id="F-32958r567689_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230314" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230314" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4922,7 +4926,7 @@ Add or modify the following line in /etc/systemd/coredump.conf:
 ProcessSizeMax=0</xccdf:fixtext>
           <xccdf:fix id="F-32959r567692_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230315" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230315" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4950,7 +4954,7 @@ If manually configuring DNS, edit the "/etc/resolv.conf" file to uncomment or ad
 $ sudo echo -n &gt; /etc/resolv.conf</xccdf:fixtext>
           <xccdf:fix id="F-32960r567695_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230316" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230316" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4972,7 +4976,7 @@ $ sudo echo -n &gt; /etc/resolv.conf</xccdf:fixtext>
           <xccdf:fixtext fixref="F-32964r567707_fix">Assign home directories to all local interactive users on RHEL 8 that currently do not have a home directory assigned.</xccdf:fixtext>
           <xccdf:fix id="F-32964r567707_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230320" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230320" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4991,14 +4995,14 @@ $ sudo echo -n &gt; /etc/resolv.conf</xccdf:fixtext>
             <dc:identifier>2921</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-32965r567710_fix">Change the mode of interactive user’s home directories to "0750". To change the mode of a local interactive user’s home directory, use the following command:
+          <xccdf:fixtext fixref="F-32965r567710_fix">Change the mode of interactive user's home directories to "0750". To change the mode of a local interactive user's home directory, use the following command:
 
 Note: The example will be for the user "smithj".
 
 $ sudo chmod 0750 /home/smithj</xccdf:fixtext>
           <xccdf:fix id="F-32965r567710_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230321" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230321" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5022,7 +5026,7 @@ $ sudo chmod 0750 /home/smithj</xccdf:fixtext>
 CREATE_HOME yes</xccdf:fixtext>
           <xccdf:fix id="F-32968r567719_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230324" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230324" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5048,14 +5052,14 @@ Note: The example will be for the smithj user, who has a home directory of "/hom
      $ sudo chmod 0740 /home/smithj/.&lt;INIT_FILE&gt;</xccdf:fixtext>
           <xccdf:fix id="F-32969r917878_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230325" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230325" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-230328">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230328r1017139_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230328r1155410_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-08-010800</xccdf:version>
           <xccdf:title>A separate RHEL 8 filesystem must be used for user home directories (such as /home or an equivalent).</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;The use of separate file systems for different paths can protect the system from failures resulting from a file system becoming full or failing.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
@@ -5070,7 +5074,7 @@ Note: The example will be for the smithj user, who has a home directory of "/hom
           <xccdf:fixtext fixref="F-32972r902722_fix">Migrate the "/home" directory onto a separate file system.</xccdf:fixtext>
           <xccdf:fix id="F-32972r902722_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230328" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230328" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5098,7 +5102,7 @@ Add or edit the line for the "AutomaticLoginEnable" parameter in the [daemon] se
 AutomaticLoginEnable=false</xccdf:fixtext>
           <xccdf:fix id="F-32973r567734_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230329" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230329" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5128,7 +5132,7 @@ The SSH daemon must be restarted for the changes to take effect. To restart the
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-32974r567737_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230330" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230330" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5167,7 +5171,7 @@ The "sssd" service must be restarted for the changes to take effect. To restart
 $ sudo systemctl restart sssd.service</xccdf:fixtext>
           <xccdf:fix id="F-32976r567743_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230332" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230332" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5200,7 +5204,7 @@ Add/Modify the "/etc/security/faillock.conf" file to match the following line:
 deny = 3</xccdf:fixtext>
           <xccdf:fix id="F-32977r743965_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230333" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230333" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5239,7 +5243,7 @@ The "sssd" service must be restarted for the changes to take effect. To restart
 $ sudo systemctl restart sssd.service</xccdf:fixtext>
           <xccdf:fix id="F-32978r567749_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230334" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230334" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5272,7 +5276,7 @@ Add/Modify the "/etc/security/faillock.conf" file to match the following line:
 fail_interval = 900</xccdf:fixtext>
           <xccdf:fix id="F-32979r743968_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230335" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230335" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5311,7 +5315,7 @@ The "sssd" service must be restarted for the changes to take effect. To restart
 $ sudo systemctl restart sssd.service</xccdf:fixtext>
           <xccdf:fix id="F-32980r567755_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230336" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230336" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5343,7 +5347,7 @@ Add/Modify the "/etc/security/faillock.conf" file to match the following line:
 unlock_time = 0</xccdf:fixtext>
           <xccdf:fix id="F-32981r743971_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230337" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230337" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5382,7 +5386,7 @@ The "sssd" service must be restarted for the changes to take effect. To restart
 $ sudo systemctl restart sssd.service</xccdf:fixtext>
           <xccdf:fix id="F-32984r567767_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230340" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230340" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5415,7 +5419,7 @@ Add/Modify the "/etc/security/faillock.conf" file to match the following line:
 silent</xccdf:fixtext>
           <xccdf:fix id="F-32985r743977_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230341" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230341" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5456,7 +5460,7 @@ The "sssd" service must be restarted for the changes to take effect. To restart
 $ sudo systemctl restart sssd.service</xccdf:fixtext>
           <xccdf:fix id="F-32986r567773_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230342" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230342" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5489,7 +5493,7 @@ Add/Modify the "/etc/security/faillock.conf" file to match the following line:
 audit</xccdf:fixtext>
           <xccdf:fix id="F-32987r743980_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230343" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230343" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5530,7 +5534,7 @@ The "sssd" service must be restarted for the changes to take effect. To restart
 $ sudo systemctl restart sssd.service</xccdf:fixtext>
           <xccdf:fix id="F-32988r567779_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230344" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230344" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5563,7 +5567,7 @@ Add/Modify the "/etc/security/faillock.conf" file to match the following line:
 even_deny_root</xccdf:fixtext>
           <xccdf:fix id="F-32989r743983_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230345" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230345" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5591,7 +5595,7 @@ Add the following line to the top of the /etc/security/limits.conf or in a ".con
 * hard maxlogins 10</xccdf:fixtext>
           <xccdf:fix id="F-32990r1017158_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230346" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230346" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5632,7 +5636,7 @@ Update the system databases:
 $ sudo dconf update</xccdf:fixtext>
           <xccdf:fix id="F-32995r792898_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230351" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230351" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5677,7 +5681,7 @@ Run the following command to update the database:
 $ sudo dconf update</xccdf:fixtext>
           <xccdf:fix id="F-32998r1069255_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230354" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230354" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5707,7 +5711,7 @@ Add the following line to the "/etc/pam.d/password-auth" file (or modify the lin
      password requisite pam_pwquality.so</xccdf:fixtext>
           <xccdf:fix id="F-33000r902727_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230356" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230356" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5740,7 +5744,7 @@ ucredit = -1
 Remove any configurations that conflict with the above value.</xccdf:fixtext>
           <xccdf:fix id="F-33001r858770_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230357" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230357" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5773,7 +5777,7 @@ lcredit = -1
 Remove any configurations that conflict with the above value.</xccdf:fixtext>
           <xccdf:fix id="F-33002r858772_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230358" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230358" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5806,7 +5810,7 @@ dcredit = -1
 Remove any configurations that conflict with the above value.</xccdf:fixtext>
           <xccdf:fix id="F-33003r858774_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230359" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230359" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5839,7 +5843,7 @@ maxclassrepeat = 4
 Remove any configurations that conflict with the above value.</xccdf:fixtext>
           <xccdf:fix id="F-33004r858776_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230360" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230360" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5872,7 +5876,7 @@ maxrepeat = 3
 Remove any configurations that conflict with the above value.</xccdf:fixtext>
           <xccdf:fix id="F-33005r858778_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230361" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230361" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5905,7 +5909,7 @@ minclass = 4
 Remove any configurations that conflict with the above value.</xccdf:fixtext>
           <xccdf:fix id="F-33006r858780_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230362" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230362" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5938,7 +5942,7 @@ difok = 8
 Remove any configurations that conflict with the above value.</xccdf:fixtext>
           <xccdf:fix id="F-33007r858782_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230363" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230363" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5963,7 +5967,7 @@ Remove any configurations that conflict with the above value.</xccdf:fixtext>
 $ sudo chage -m 1 [user]</xccdf:fixtext>
           <xccdf:fix id="F-33008r567839_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230364" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230364" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5990,7 +5994,7 @@ Add the following line in "/etc/login.defs" (or modify the line to have the requ
 PASS_MIN_DAYS 1</xccdf:fixtext>
           <xccdf:fix id="F-33009r567842_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230365" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230365" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6017,7 +6021,7 @@ Add, or modify the following line in the "/etc/login.defs" file:
 PASS_MAX_DAYS 60</xccdf:fixtext>
           <xccdf:fix id="F-33010r567845_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230366" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230366" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6042,7 +6046,7 @@ PASS_MAX_DAYS 60</xccdf:fixtext>
 $ sudo chage -M 60 [user]</xccdf:fixtext>
           <xccdf:fix id="F-33011r567848_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230367" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230367" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6079,7 +6083,7 @@ minlen = 15
 Remove any configurations that conflict with the above value.</xccdf:fixtext>
           <xccdf:fix id="F-33013r858784_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230369" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230369" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6110,7 +6114,7 @@ Add, or modify the following line in the "/etc/login.defs" file:
 PASS_MIN_LEN 15</xccdf:fixtext>
           <xccdf:fix id="F-33014r567857_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230370" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230370" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6140,7 +6144,7 @@ Satisfies: SRG-OS-000104-GPOS-00051, SRG-OS-000121-GPOS-00062, SRG-OS-000042-GPO
           <xccdf:fixtext fixref="F-33015r567860_fix">Edit the file "/etc/passwd" and provide each interactive user account that has a duplicate User ID (UID) with a unique UID.</xccdf:fixtext>
           <xccdf:fix id="F-33015r567860_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230371" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230371" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6171,7 +6175,7 @@ $ sudo useradd -D -f 35
 DoD recommendation is 35 days, but a lower value is acceptable. The value "-1" will disable this feature, and "0" will disable the account immediately after the password expires.</xccdf:fixtext>
           <xccdf:fix id="F-33017r567866_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230373" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230373" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6204,7 +6208,7 @@ ocredit = -1
 Remove any configurations that conflict with the above value.</xccdf:fixtext>
           <xccdf:fix id="F-33019r858786_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230375" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230375" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6232,7 +6236,7 @@ Add or change the following line in "/etc/sssd/sssd.conf" just below the line "[
      offline_credentials_expiration = 1</xccdf:fixtext>
           <xccdf:fix id="F-33020r942947_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230376" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230376" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6260,7 +6264,7 @@ dictcheck=1
 Remove any configurations that conflict with the above value.</xccdf:fixtext>
           <xccdf:fix id="F-33021r858788_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230377" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230377" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6288,7 +6292,7 @@ Modify the "/etc/login.defs" file to set the "FAIL_DELAY" parameter to "4" or gr
 FAIL_DELAY 4</xccdf:fixtext>
           <xccdf:fix id="F-33022r567881_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230378" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230378" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6316,33 +6320,7 @@ The SSH daemon must be restarted for the changes to take effect. To restart the
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-33024r743992_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230380" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-230381">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230381r1069295_rule" severity="low" weight="10.0">
-          <xccdf:version>RHEL-08-020340</xccdf:version>
-          <xccdf:title>RHEL 8 must display the date and time of the last successful account logon upon logon.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Providing users with feedback on when account accesses last occurred facilitates user recognition and reporting of unauthorized account use.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Red Hat Enterprise Linux 8</dc:subject>
-            <dc:identifier>2921</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000052</xccdf:ident>
-          <xccdf:fixtext fixref="F-33025r567890_fix">Configure the operating system to provide users with feedback on when account accesses last occurred by setting the required configuration options in "/etc/pam.d/postlogin". 
-
-Add the following line to the top of "/etc/pam.d/postlogin":
-
-session required pam_lastlog.so showfailed</xccdf:fixtext>
-          <xccdf:fix id="F-33025r567890_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230381" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230380" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6370,7 +6348,7 @@ PrintLastLog yes
 The SSH service must be restarted for changes to "sshd_config" to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33026r567893_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230382" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230382" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6396,7 +6374,7 @@ Add or edit the line for the "UMASK" parameter in "/etc/login.defs" file to "077
 UMASK 077</xccdf:fixtext>
           <xccdf:fix id="F-33027r567896_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230383" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230383" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6430,7 +6408,7 @@ Add or update the following file system rules to "/etc/audit/rules.d/audit.rules
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33030r567905_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230386" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230386" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6460,7 +6438,7 @@ Edit the following line in "/etc/audit/auditd.conf" to ensure that administrator
 action_mail_acct = root</xccdf:fixtext>
           <xccdf:fix id="F-33032r567911_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230388" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230388" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6490,7 +6468,7 @@ Add/update the following line in "/etc/aliases":
 postmaster: root</xccdf:fixtext>
           <xccdf:fix id="F-33033r567914_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230389" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230389" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6522,7 +6500,7 @@ disk_error_action = HALT
 If availability has been determined to be more important, and this decision is documented with the ISSO, configure the operating system to notify system administration staff and ISSO staff in the event of an audit processing failure by setting the "disk_error_action" to "SYSLOG".</xccdf:fixtext>
           <xccdf:fix id="F-33034r567917_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230390" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230390" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6556,7 +6534,7 @@ disk_full_action = HALT
 If availability has been determined to be more important, and this decision is documented with the ISSO, configure the operating system to notify system administration staff and ISSO staff in the event of an audit processing failure by setting the "disk_full_action" to "SYSLOG".</xccdf:fixtext>
           <xccdf:fix id="F-33036r567923_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230392" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230392" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6584,7 +6562,7 @@ Add or update the following line in "/etc/audit/auditd.conf" file:
 local_events = yes</xccdf:fixtext>
           <xccdf:fix id="F-33037r567926_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230393" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230393" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6616,7 +6594,7 @@ name_format = hostname
 The audit daemon must be restarted for changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33038r567929_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230394" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230394" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6646,7 +6624,7 @@ log_format = ENRICHED
 The audit daemon must be restarted for changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33039r567932_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230395" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230395" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6674,7 +6652,7 @@ Satisfies: SRG-OS-000057-GPOS-00027, SRG-OS-000058-GPOS-00028, SRG-OS-000059-GPO
 $ sudo chmod 0600 /var/log/audit/audit.log</xccdf:fixtext>
           <xccdf:fix id="F-33040r902732_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230396" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230396" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6704,7 +6682,7 @@ $ sudo chown root [audit_log_file]
 Replace "[audit_log_file]" to the correct audit log path, by default this location is "/var/log/audit/audit.log".</xccdf:fixtext>
           <xccdf:fix id="F-33041r567938_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230397" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230397" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6732,7 +6710,7 @@ Satisfies: SRG-OS-000057-GPOS-00027, SRG-OS-000058-GPOS-00028, SRG-OS-000059-GPO
 log_group = root</xccdf:fixtext>
           <xccdf:fix id="F-33042r567941_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230398" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230398" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6762,7 +6740,7 @@ $ sudo chown root [audit_log_directory]
 Replace "[audit_log_directory]" with the correct audit log directory path, by default this location is usually "/var/log/audit".</xccdf:fixtext>
           <xccdf:fix id="F-33043r567944_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230399" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230399" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6792,7 +6770,7 @@ $ sudo chgrp root [audit_log_directory]
 Replace "[audit_log_directory]" with the correct audit log directory path, by default this location is usually "/var/log/audit".</xccdf:fixtext>
           <xccdf:fix id="F-33044r567947_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230400" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230400" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6822,7 +6800,7 @@ $ sudo chmod 0700 [audit_log_directory]
 Replace "[audit_log_directory]" to the correct audit log directory path, by default this location is "/var/log/audit".</xccdf:fixtext>
           <xccdf:fix id="F-33045r567950_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230401" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230401" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6854,7 +6832,7 @@ Satisfies: SRG-OS-000057-GPOS-00027, SRG-OS-000058-GPOS-00028, SRG-OS-000059-GPO
 Note: Once set, the system must be rebooted for auditing to be changed.  It is recommended to add this option as the last step in securing the system.</xccdf:fixtext>
           <xccdf:fix id="F-33046r567953_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230402" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230402" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6884,7 +6862,7 @@ Satisfies: SRG-OS-000057-GPOS-00027, SRG-OS-000058-GPOS-00028, SRG-OS-000059-GPO
 --loginuid-immutable</xccdf:fixtext>
           <xccdf:fix id="F-33047r567956_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230403" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230403" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6916,7 +6894,7 @@ Add or update the following file system rule to "/etc/audit/rules.d/audit.rules"
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33048r567959_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230404" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230404" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6948,7 +6926,7 @@ Add or update the following file system rule to "/etc/audit/rules.d/audit.rules"
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33049r567962_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230405" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230405" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6980,7 +6958,7 @@ Add or update the following file system rule to "/etc/audit/rules.d/audit.rules"
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33050r567965_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230406" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230406" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7012,7 +6990,7 @@ Add or update the following file system rule to "/etc/audit/rules.d/audit.rules"
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33051r567968_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230407" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230407" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7044,7 +7022,7 @@ Add or update the following file system rule to "/etc/audit/rules.d/audit.rules"
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33052r567971_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230408" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230408" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7076,7 +7054,7 @@ Add or update the following file system rule to "/etc/audit/rules.d/audit.rules"
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33053r567974_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230409" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230409" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7108,7 +7086,7 @@ Add or update the following file system rule to "/etc/audit/rules.d/audit.rules"
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33054r567977_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230410" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230410" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7140,7 +7118,7 @@ Install the audit service (if the audit service is not already installed) with t
 $ sudo yum install audit</xccdf:fixtext>
           <xccdf:fix id="F-33055r646880_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230411" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230411" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7172,7 +7150,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33056r567983_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230412" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230412" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7217,7 +7195,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33057r809294_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230413" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230413" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7249,7 +7227,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33062r568001_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230418" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230418" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7281,7 +7259,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33063r568004_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230419" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230419" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7313,7 +7291,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33065r568010_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230421" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230421" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7345,7 +7323,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33066r568013_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230422" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230422" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7377,7 +7355,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33067r568016_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230423" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230423" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7409,7 +7387,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33068r568019_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230424" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230424" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7442,7 +7420,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33069r568022_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230425" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230425" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7474,7 +7452,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33070r568025_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230426" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230426" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7506,7 +7484,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33071r568028_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230427" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230427" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7538,7 +7516,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33072r568031_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230428" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230428" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7570,7 +7548,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33073r568034_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230429" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230429" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7602,7 +7580,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33074r568037_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230430" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230430" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7634,7 +7612,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33075r568040_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230431" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230431" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7666,7 +7644,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33076r568043_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230432" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230432" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7698,7 +7676,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33077r568046_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230433" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230433" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7730,7 +7708,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33078r744001_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230434" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230434" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7762,7 +7740,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33079r568052_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230435" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230435" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7794,7 +7772,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33080r568055_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230436" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230436" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7826,7 +7804,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33081r568058_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230437" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230437" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7861,7 +7839,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33082r1017240_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230438" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230438" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7901,7 +7879,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33083r809301_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230439" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230439" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7933,7 +7911,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33088r568079_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230444" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230444" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7966,7 +7944,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33090r568085_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230446" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230446" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7998,7 +7976,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33091r568088_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230447" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230447" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8030,7 +8008,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33092r568091_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230448" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230448" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8073,7 +8051,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33093r809304_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230449" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230449" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8112,7 +8090,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33099r809307_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230455" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230455" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8150,7 +8128,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33100r809310_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230456" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230456" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8182,7 +8160,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33106r568133_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230462" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230462" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8214,7 +8192,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33107r568136_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230463" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230463" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8246,7 +8224,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33108r568139_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230464" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230464" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8288,7 +8266,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33109r568142_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230465" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230465" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8330,7 +8308,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33111r568148_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230467" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230467" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8356,7 +8334,7 @@ $ sudo chmod 0640 /etc/audit/rules.d/[customrulesfile].rules
 $ sudo chmod 0640 /etc/audit/auditd.conf</xccdf:fixtext>
           <xccdf:fix id="F-33115r568160_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230471" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230471" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8386,7 +8364,7 @@ $ sudo chmod 0755 [audit_tool]
 Replace "[audit_tool]" with the audit tool that does not have the correct permissive mode.</xccdf:fixtext>
           <xccdf:fix id="F-33116r568163_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230472" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230472" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8418,7 +8396,7 @@ $ sudo chown root [audit_tool]
 Replace "[audit_tool]" with each audit tool not owned by "root".</xccdf:fixtext>
           <xccdf:fix id="F-33117r568166_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230473" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230473" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8450,7 +8428,7 @@ $ sudo chgrp root [audit_tool]
 Replace "[audit_tool]" with each audit tool not group-owned by "root".</xccdf:fixtext>
           <xccdf:fix id="F-33118r568169_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230474" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230474" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8485,7 +8463,7 @@ Note that a port number was given as there is no standard port for RELP.&lt;/Vul
 $ sudo yum install rsyslog</xccdf:fixtext>
           <xccdf:fix id="F-33121r568178_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230477" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230477" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8520,7 +8498,7 @@ Note that a port number was given as there is no standard port for RELP.&lt;/Vul
 $ sudo yum install rsyslog-gnutls</xccdf:fixtext>
           <xccdf:fix id="F-33122r744010_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230478" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230478" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8552,7 +8530,7 @@ overflow_action = syslog
 The audit daemon must be restarted for changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33124r568187_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230480" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230480" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8588,7 +8566,7 @@ Satisfies: SRG-OS-000342-GPOS-00133, SRG-OS-000479-GPOS-00224&lt;/VulnDiscussion
 $ActionSendStreamDriverAuthMode x509/name</xccdf:fixtext>
           <xccdf:fix id="F-33126r568193_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230482" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230482" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8614,7 +8592,7 @@ space_left = 25%
 Note: Option names and values in the auditd.conf file are case insensitive.</xccdf:fixtext>
           <xccdf:fix id="F-33127r744013_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230483" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230483" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8644,7 +8622,7 @@ Note that USNO offers authenticated NTP service to DOD and U.S. Government agenc
 port 0</xccdf:fixtext>
           <xccdf:fix id="F-33129r1014805_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230485" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230485" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8674,7 +8652,7 @@ Note that USNO offers authenticated NTP service to DOD and U.S. Government agenc
 cmdport 0</xccdf:fixtext>
           <xccdf:fix id="F-33130r1014808_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230486" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230486" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8708,7 +8686,7 @@ If a privileged user were to log on using this service, the privileged user pass
 $ sudo yum remove telnet-server</xccdf:fixtext>
           <xccdf:fix id="F-33131r568208_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230487" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230487" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8738,7 +8716,7 @@ Verify the operating system is configured to disable non-essential capabilities.
 $ sudo yum remove abrt*</xccdf:fixtext>
           <xccdf:fix id="F-33132r568211_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230488" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230488" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8768,7 +8746,7 @@ Verify the operating system is configured to disable non-essential capabilities.
 $ sudo yum remove sendmail</xccdf:fixtext>
           <xccdf:fix id="F-33133r568214_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230489" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230489" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8801,7 +8779,7 @@ Add or update the following lines in the file "/etc/modprobe.d/blacklist.conf":
 Reboot the system for the settings to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33138r942917_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230494" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230494" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8834,7 +8812,7 @@ Add or update the following lines in the file "/etc/modprobe.d/blacklist.conf":
 Reboot the system for the settings to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33139r942920_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230495" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230495" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8867,7 +8845,7 @@ Add or update the following lines in the file "/etc/modprobe.d/blacklist.conf":
 Reboot the system for the settings to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33140r942923_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230496" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230496" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8900,7 +8878,7 @@ Add or update the following lines in the file "/etc/modprobe.d/blacklist.conf":
 Reboot the system for the settings to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33141r942926_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230497" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230497" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8933,7 +8911,7 @@ Add or update the following lines in the file "/etc/modprobe.d/blacklist.conf":
 Reboot the system for the settings to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33142r942929_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230498" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230498" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8964,16 +8942,16 @@ Add or update the following lines in the file "/etc/modprobe.d/blacklist.conf":
 Reboot the system for the settings to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33143r942932_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230499" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230499" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-230502">
         <xccdf:title>SRG-OS-000114-GPOS-00059</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230502r1017284_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230502r1155393_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-08-040070</xccdf:version>
-          <xccdf:title>The RHEL 8 file system automounter must be disabled unless required.</xccdf:title>
+          <xccdf:title>The RHEL 8 file system automounter must be disabled.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Automatically mounting file systems permits easy introduction of unknown devices, thereby facilitating malicious activity.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
           <xccdf:reference>
             <dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title>
@@ -8984,17 +8962,15 @@ Reboot the system for the settings to take effect.</xccdf:fixtext>
           </xccdf:reference>
           <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxAutofs" />
           <xccdf:ident system="http://cyber.mil/cci">CCI-000778</xccdf:ident>
-          <xccdf:fixtext fixref="F-33146r568253_fix">Configure the operating system to disable the ability to automount devices.
+          <xccdf:fixtext fixref="F-33146r1155392_fix">Configure RHEL 8 to disable the ability to automount devices.
 
 Turn off the automount service with the following commands:
 
 $ sudo systemctl stop autofs
-$ sudo systemctl disable autofs
-
-If "autofs" is required for Network File System (NFS), it must be documented with the ISSO.</xccdf:fixtext>
-          <xccdf:fix id="F-33146r568253_fix" />
+$ sudo systemctl disable autofs</xccdf:fixtext>
+          <xccdf:fix id="F-33146r1155392_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230502" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230502" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9025,7 +9001,7 @@ Add or update the following lines in the file "/etc/modprobe.d/blacklist.conf":
 Reboot the system for the settings to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33147r942935_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230503" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230503" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9055,7 +9031,7 @@ RHEL 8 functionality (e.g., RDP) must be capable of taking enforcement action if
 $ sudo yum install firewalld.noarch</xccdf:fixtext>
           <xccdf:fix id="F-33149r744019_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230505" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230505" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9095,7 +9071,7 @@ Add or update the line:
 Reboot the system for the settings to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33151r942938_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230507" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230507" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9125,7 +9101,7 @@ The "nosuid" mount option causes the system to not execute "setuid" and "setgid"
 tmpfs /dev/shm tmpfs defaults,nodev,nosuid,noexec 0 0</xccdf:fixtext>
           <xccdf:fix id="F-33152r568271_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230508" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230508" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9153,7 +9129,7 @@ The "nosuid" mount option causes the system to not execute "setuid" and "setgid"
 tmpfs /dev/shm tmpfs defaults,nodev,nosuid,noexec 0 0</xccdf:fixtext>
           <xccdf:fix id="F-33153r568274_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230509" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230509" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9183,7 +9159,7 @@ The "nosuid" mount option causes the system to not execute "setuid" and "setgid"
 tmpfs /dev/shm tmpfs defaults,nodev,nosuid,noexec 0 0</xccdf:fixtext>
           <xccdf:fix id="F-33154r568277_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230510" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230510" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9213,7 +9189,7 @@ The "nosuid" mount option causes the system to not execute "setuid" and "setgid"
 /dev/mapper/rhel-tmp /tmp xfs defaults,nodev,nosuid,noexec 0 0</xccdf:fixtext>
           <xccdf:fix id="F-33155r568280_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230511" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230511" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9241,7 +9217,7 @@ The "nosuid" mount option causes the system to not execute "setuid" and "setgid"
 /dev/mapper/rhel-tmp /tmp xfs defaults,nodev,nosuid,noexec 0 0</xccdf:fixtext>
           <xccdf:fix id="F-33156r568283_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230512" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230512" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9271,7 +9247,7 @@ The "nosuid" mount option causes the system to not execute "setuid" and "setgid"
 /dev/mapper/rhel-tmp /tmp xfs defaults,nodev,nosuid,noexec 0 0</xccdf:fixtext>
           <xccdf:fix id="F-33157r568286_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230513" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230513" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9301,7 +9277,7 @@ The "nosuid" mount option causes the system to not execute "setuid" and "setgid"
 /dev/mapper/rhel-var-log /var/log xfs defaults,nodev,nosuid,noexec 0 0</xccdf:fixtext>
           <xccdf:fix id="F-33158r568289_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230514" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230514" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9331,7 +9307,7 @@ The "nosuid" mount option causes the system to not execute "setuid" and "setgid"
 /dev/mapper/rhel-var-log /var/log xfs defaults,nodev,nosuid,noexec 0 0</xccdf:fixtext>
           <xccdf:fix id="F-33159r568292_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230515" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230515" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9361,7 +9337,7 @@ The "nosuid" mount option causes the system to not execute "setuid" and "setgid"
 /dev/mapper/rhel-var-log /var/log xfs defaults,nodev,nosuid,noexec 0 0</xccdf:fixtext>
           <xccdf:fix id="F-33160r568295_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230516" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230516" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9391,7 +9367,7 @@ The "nosuid" mount option causes the system to not execute "setuid" and "setgid"
 /dev/mapper/rhel-var-log-audit /var/log/audit xfs defaults,nodev,nosuid,noexec 0 0</xccdf:fixtext>
           <xccdf:fix id="F-33161r568298_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230517" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230517" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9421,7 +9397,7 @@ The "nosuid" mount option causes the system to not execute "setuid" and "setgid"
 /dev/mapper/rhel-var-log-audit /var/log/audit xfs defaults,nodev,nosuid,noexec 0 0</xccdf:fixtext>
           <xccdf:fix id="F-33162r568301_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230518" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230518" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9451,7 +9427,7 @@ The "nosuid" mount option causes the system to not execute "setuid" and "setgid"
 /dev/mapper/rhel-var-log-audit /var/log/audit xfs defaults,nodev,nosuid,noexec 0 0</xccdf:fixtext>
           <xccdf:fix id="F-33163r568304_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230519" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230519" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9481,7 +9457,7 @@ The "nosuid" mount option causes the system to not execute "setuid" and "setgid"
 /dev/mapper/rhel-var-tmp /var/tmp xfs defaults,nodev,nosuid,noexec 0 0</xccdf:fixtext>
           <xccdf:fix id="F-33164r792926_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230520" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230520" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9511,7 +9487,7 @@ The "nosuid" mount option causes the system to not execute "setuid" and "setgid"
 /dev/mapper/rhel-var-tmp /var/tmp xfs defaults,nodev,nosuid,noexec 0 0</xccdf:fixtext>
           <xccdf:fix id="F-33165r792929_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230521" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230521" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9541,7 +9517,7 @@ The "nosuid" mount option causes the system to not execute "setuid" and "setgid"
 /dev/mapper/rhel-var-tmp /var/tmp xfs defaults,nodev,nosuid,noexec 0 0</xccdf:fixtext>
           <xccdf:fix id="F-33166r792932_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230522" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230522" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9575,7 +9551,7 @@ Satisfies: SRG-OS-000368-GPOS-00154, SRG-OS-000370-GPOS-00155, SRG-OS-000480-GPO
 $ sudo yum install fapolicyd.x86_64</xccdf:fixtext>
           <xccdf:fix id="F-33167r744022_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230523" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230523" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9605,7 +9581,7 @@ FirewallBackend=nftables
 Establish rate-limiting rules based on organization-defined types of DoS attacks on impacted network interfaces.</xccdf:fixtext>
           <xccdf:fix id="F-33169r902734_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230525" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230525" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9635,7 +9611,7 @@ Satisfies: SRG-OS-000423-GPOS-00187, SRG-OS-000424-GPOS-00188, SRG-OS-000425-GPO
 $ sudo systemctl enable sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-33170r744031_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230526" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230526" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9671,7 +9647,7 @@ Restart the SSH daemon for the settings to take effect.
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-33171r568328_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230527" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230527" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9703,7 +9679,7 @@ Reload the daemon for this change to take effect.
 $ sudo systemctl daemon-reload</xccdf:fixtext>
           <xccdf:fix id="F-33173r833337_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230529" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230529" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9737,14 +9713,14 @@ Then update the dconf settings:
 $ sudo dconf update</xccdf:fixtext>
           <xccdf:fix id="F-33174r568337_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230530" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230530" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-230531">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230531r1134890_rule" severity="high" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230531r1155396_rule" severity="high" weight="10.0">
           <xccdf:version>RHEL-08-040172</xccdf:version>
           <xccdf:title>The systemd Ctrl-Alt-Delete burst key sequence in RHEL 8 must be disabled.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;A locally logged-on user who presses Ctrl-Alt-Delete when at the console can reboot the system. If accidentally pressed, as could happen in the case of a mixed OS environment, this can create the risk of short-term loss of availability of systems due to unintentional reboot. In a graphical user environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is reduced because the user will be prompted before any action is taken.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
@@ -9756,16 +9732,22 @@ $ sudo dconf update</xccdf:fixtext>
             <dc:identifier>2921</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-33175r1017291_fix">Configure the system to disable the CtrlAltDelBurstAction by added or modifying the following line in the "/etc/systemd/system.conf" configuration file:
+          <xccdf:fixtext fixref="F-33175r1155395_fix">Configure RHEL 8 to disable the CtrlAltDelBurstAction by adding it to a drop file in a "/etc/systemd/system.conf.d/" configuration file:
+
+If no drop file exists, create one with the following command:
+
+$ sudo mkdir -p /etc/systemd/system.conf.d &amp;&amp; sudo vi /etc/systemd/system.conf.d/55-CtrlAltDel-BurstAction
+
+Edit the file to contain the setting by adding the following text:
 
 CtrlAltDelBurstAction=none
 
 Reload the daemon for this change to take effect.
 
 $ sudo systemctl daemon-reload</xccdf:fixtext>
-          <xccdf:fix id="F-33175r1017291_fix" />
+          <xccdf:fix id="F-33175r1155395_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230531" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230531" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9795,7 +9777,7 @@ Reload the daemon to take effect.
 $ sudo systemctl daemon-reload</xccdf:fixtext>
           <xccdf:fix id="F-33176r1017293_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230532" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230532" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9819,7 +9801,7 @@ $ sudo systemctl daemon-reload</xccdf:fixtext>
 $ sudo yum remove tftp-server</xccdf:fixtext>
           <xccdf:fix id="F-33177r568346_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230533" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230533" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9843,7 +9825,7 @@ $ sudo yum remove tftp-server</xccdf:fixtext>
 If the account is associated with system commands or applications, the UID should be changed to one greater than "0" but less than "1000". Otherwise, assign a UID of greater than "1000" that has not already been assigned.</xccdf:fixtext>
           <xccdf:fix id="F-33178r568349_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230534" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230534" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9890,7 +9872,7 @@ Load settings from all system configuration files with the following command:
 $ sudo sysctl --system</xccdf:fixtext>
           <xccdf:fix id="F-33179r858792_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230535" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230535" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9938,7 +9920,7 @@ Load settings from all system configuration files with the following command:
 $ sudo sysctl --system</xccdf:fixtext>
           <xccdf:fix id="F-33180r858794_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230536" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230536" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9985,7 +9967,7 @@ Load settings from all system configuration files with the following command:
 $ sudo sysctl --system</xccdf:fixtext>
           <xccdf:fix id="F-33181r858796_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230537" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230537" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10032,7 +10014,7 @@ Load settings from all system configuration files with the following command:
 $ sudo sysctl --system</xccdf:fixtext>
           <xccdf:fix id="F-33182r858800_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230538" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230538" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10079,7 +10061,7 @@ Load settings from all system configuration files with the following command:
 $ sudo sysctl --system</xccdf:fixtext>
           <xccdf:fix id="F-33183r858805_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230539" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230539" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10126,7 +10108,7 @@ Load settings from all system configuration files with the following command:
 $ sudo sysctl --system</xccdf:fixtext>
           <xccdf:fix id="F-33184r858809_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230540" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230540" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10175,7 +10157,7 @@ Load settings from all system configuration files with the following command:
 $ sudo sysctl --system</xccdf:fixtext>
           <xccdf:fix id="F-33185r858811_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230541" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230541" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10224,7 +10206,7 @@ Load settings from all system configuration files with the following command:
 $ sudo sysctl --system</xccdf:fixtext>
           <xccdf:fix id="F-33186r858813_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230542" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230542" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10272,7 +10254,7 @@ Load settings from all system configuration files with the following command:
 $ sudo sysctl --system</xccdf:fixtext>
           <xccdf:fix id="F-33187r858815_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230543" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230543" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10319,7 +10301,7 @@ Load settings from all system configuration files with the following command:
 $ sudo sysctl --system</xccdf:fixtext>
           <xccdf:fix id="F-33188r858819_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230544" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230544" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10363,19 +10345,19 @@ The system configuration files need to be reloaded for the changes to take effec
 $ sudo sysctl --system</xccdf:fixtext>
           <xccdf:fix id="F-33189r858821_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230545" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230545" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-230546">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230546r1017308_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230546r1155413_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-08-040282</xccdf:version>
           <xccdf:title>RHEL 8 must restrict usage of ptrace to descendant  processes.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+          <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore, may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
@@ -10390,24 +10372,20 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>2921</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-33190r858823_fix">Configure RHEL 8 to restrict usage of ptrace to descendant processes by adding the following line to a file, in the "/etc/sysctl.d" directory:
+          <xccdf:fixtext fixref="F-33190r1155412_fix">Configure RHEL 8 to restrict usage of ptrace to descendant processes by adding the following line in a dropfile, in the "/etc/sysctl.d" directory with the following commands:
 
-kernel.yama.ptrace_scope = 1
+Create the dropfile if it doesn't already exist:
+$ sudo vi /etc/sysctl.d/99-ptrace-restrict.conf
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Add the following line to the file:
+kernel.yama.ptrace_scope = 1
 
 The system configuration files need to be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-33190r858823_fix" />
+          <xccdf:fix id="F-33190r1155412_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230546" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230546" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10451,7 +10429,7 @@ The system configuration files need to be reloaded for the changes to take effec
 $ sudo sysctl --system</xccdf:fixtext>
           <xccdf:fix id="F-33191r858825_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230547" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230547" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10495,19 +10473,19 @@ The system configuration files need to be reloaded for the changes to take effec
 $ sudo sysctl --system</xccdf:fixtext>
           <xccdf:fix id="F-33192r1014817_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230548" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230548" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-230549">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230549r1017311_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230549r1155416_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-08-040285</xccdf:version>
           <xccdf:title>RHEL 8 must use reverse path filtering on all IPv4 interfaces.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+          <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore, may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
@@ -10522,24 +10500,22 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>2921</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-33193r858829_fix">Configure RHEL 8 to use reverse path filtering on all IPv4 interfaces by adding the following line to a file, in the "/etc/sysctl.d" directory:
+          <xccdf:fixtext fixref="F-33193r1155415_fix">Configure RHEL 8 to use reverse path filtering on IPv4 interfaces by default.
 
-net.ipv4.conf.all.rp_filter = 1
+Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Create a configuration file if it does not already exist:
 
-The system configuration files need to be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
+$ sudo vi /etc/sysctl.d/ipv4_rp_filter.conf
+
+net.ipv4.conf.default.rp_filter = 1
+
+Load settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-33193r858829_fix" />
+          <xccdf:fix id="F-33193r1155415_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230549" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230549" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10564,7 +10540,7 @@ $ sudo sysctl --system</xccdf:fixtext>
 $ sudo postconf -e 'smtpd_client_restrictions = permit_mynetworks,reject'</xccdf:fixtext>
           <xccdf:fix id="F-33194r568397_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230550" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230550" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10592,7 +10568,7 @@ $ sudo yum remove xorg-x11-server-Xorg xorg-x11-server-common xorg-x11-server-ut
 A reboot is required for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-33197r809323_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230553" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230553" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10620,7 +10596,7 @@ Set the promiscuous mode of an interface to off with the following command:
 $ sudo ip link set dev &lt;devicename&gt; multicast off promisc off</xccdf:fixtext>
           <xccdf:fix id="F-33198r568409_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230554" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230554" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10634,7 +10610,7 @@ $ sudo ip link set dev &lt;devicename&gt; multicast off promisc off</xccdf:fixte
 
 X11 forwarding should be enabled with caution. Users with the ability to bypass file permissions on the remote host (for the user's X11 authorization database) can access the local X11 display through the forwarded connection. An attacker may then be able to perform activities such as keystroke monitoring if the ForwardX11Trusted option is also enabled.
 
-If X11 services are not required for the system's intended function, they should be disabled or restricted as appropriate to the system’s needs.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+If X11 services are not required for the system's intended function, they should be disabled or restricted as appropriate to the system's needs.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
           <xccdf:reference>
             <dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title>
             <dc:publisher>DISA</dc:publisher>
@@ -10652,7 +10628,7 @@ The SSH service must be restarted for changes to take effect:
 $ sudo systemctl restart sshd</xccdf:fixtext>
           <xccdf:fix id="F-33199r568412_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230555" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230555" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10678,7 +10654,7 @@ Edit the "/etc/ssh/sshd_config" file to uncomment or add the line for the "X11Us
 X11UseLocalhost yes</xccdf:fixtext>
           <xccdf:fix id="F-33200r568415_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230556" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230556" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10710,7 +10686,7 @@ $ sudo systemctl daemon-reload
 $ sudo systemctl restart tftp.service</xccdf:fixtext>
           <xccdf:fix id="F-33201r1069173_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230557" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230557" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10734,14 +10710,14 @@ $ sudo systemctl restart tftp.service</xccdf:fixtext>
 $ sudo yum remove vsftpd</xccdf:fixtext>
           <xccdf:fix id="F-33202r568421_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230558" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230558" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-230559">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230559r1014820_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-230559r1155398_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-08-040370</xccdf:version>
           <xccdf:title>The gssproxy package must not be installed unless mission essential on RHEL 8.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
@@ -10756,13 +10732,14 @@ The gssproxy package is a proxy for GSS API credential handling and could expose
             <dc:subject>Red Hat Enterprise Linux 8</dc:subject>
             <dc:identifier>2921</dc:identifier>
           </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxNoNFSMounts" />
           <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
           <xccdf:fixtext fixref="F-33203r568424_fix">Document the gssproxy package with the ISSO as an operational requirement or remove it from the system with the following command:
 
 $ sudo yum remove gssproxy</xccdf:fixtext>
           <xccdf:fix id="F-33203r568424_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230559" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230559" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10790,7 +10767,7 @@ The iprutils package provides a suite of utilities to manage and configure SCSI
 $ sudo yum remove iprutils</xccdf:fixtext>
           <xccdf:fix id="F-33204r568427_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230560" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230560" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10818,7 +10795,7 @@ The tuned package contains a daemon that tunes the system settings dynamically.
 $ sudo yum remove tuned</xccdf:fixtext>
           <xccdf:fix id="F-33205r568430_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230561" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:230561" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10849,7 +10826,7 @@ FIPS 140-2 is the current standard for validating that mechanisms used to access
 $ sudo yum remove krb5-server</xccdf:fixtext>
           <xccdf:fix id="F-40822r646889_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:237640" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:237640" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10873,7 +10850,7 @@ ALL     ALL=(ALL) ALL
 ALL     ALL=(ALL:ALL) ALL</xccdf:fixtext>
           <xccdf:fix id="F-40823r646892_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:237641" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:237641" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10903,7 +10880,7 @@ Remove any configurations that conflict with the above from the following locati
      /etc/sudoers.d/</xccdf:fixtext>
           <xccdf:fix id="F-40824r880726_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:237642" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:237642" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10938,7 +10915,7 @@ Note: The "[value]" must be a number that is greater than or equal to "0".
 Remove any duplicate or conflicting lines from /etc/sudoers and /etc/sudoers.d/ files.</xccdf:fixtext>
           <xccdf:fix id="F-40825r858763_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:237643" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:237643" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10981,14 +10958,14 @@ Run the following command to update the database:
 $ sudo dconf update</xccdf:fixtext>
           <xccdf:fix id="F-47751r743805_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244519" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244519" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-244523">
         <xccdf:title>SRG-OS-000080-GPOS-00048</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-244523r1117265_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-244523r1137691_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-08-010152</xccdf:version>
           <xccdf:title>RHEL 8 operating systems must require authentication upon booting into emergency mode.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;If the system does not require valid root authentication before it boots into emergency or rescue mode, anyone who invokes emergency or rescue mode is granted privileged access to all files on the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
@@ -11005,7 +10982,7 @@ $ sudo dconf update</xccdf:fixtext>
 ExecStart=-/usr/lib/systemd/systemd-sulogin-shell emergency</xccdf:fixtext>
           <xccdf:fix id="F-47755r743817_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244523" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244523" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11035,7 +11012,7 @@ Edit/modify the following line in the "/etc/pam.d/system-auth" file to include t
 password sufficient pam_unix.so sha512</xccdf:fixtext>
           <xccdf:fix id="F-47756r809330_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244524" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244524" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11073,7 +11050,7 @@ For the changes to take effect, the SSH daemon must be restarted.
      $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-47757r917885_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244525" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244525" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11099,7 +11076,7 @@ The rngd service feeds random data from hardware device to kernel random device.
 $ sudo yum install rng-tools</xccdf:fixtext>
           <xccdf:fix id="F-47759r743829_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244527" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244527" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11129,7 +11106,7 @@ The SSH daemon must be restarted for the changes to take effect. To restart the
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-47760r743832_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244528" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244528" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11151,14 +11128,14 @@ $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fixtext fixref="F-47761r743835_fix">Migrate the "/var/tmp" path onto a separate file system.</xccdf:fixtext>
           <xccdf:fix id="F-47761r743835_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244529" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244529" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-244530">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-244530r1017337_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-244530r1155403_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-08-010572</xccdf:version>
           <xccdf:title>RHEL 8 must prevent files with the setuid and setgid bit set from being executed on the /boot/efi directory.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system not to execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for unprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
@@ -11174,7 +11151,7 @@ $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fixtext fixref="F-47762r743838_fix">Configure the "/etc/fstab" to use the "nosuid" option on the /boot/efi directory.</xccdf:fixtext>
           <xccdf:fix id="F-47762r743838_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244530" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244530" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11208,7 +11185,7 @@ Update the system databases:
 $ sudo dconf update</xccdf:fixtext>
           <xccdf:fix id="F-47768r743856_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244536" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244536" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11253,7 +11230,7 @@ Run the following command to update the database:
 $ sudo dconf update</xccdf:fixtext>
           <xccdf:fix id="F-47771r1069259_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244539" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244539" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11277,7 +11254,7 @@ $ sudo dconf update</xccdf:fixtext>
 Note: Manual changes to the listed file may be overwritten by the "authselect" program.</xccdf:fixtext>
           <xccdf:fix id="F-47773r743871_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244541" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244541" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11309,7 +11286,7 @@ $ sudo systemctl enable auditd.service
 $ sudo systemctl start auditd.service</xccdf:fixtext>
           <xccdf:fix id="F-47774r743874_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244542" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244542" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11335,7 +11312,7 @@ space_left_action = email
 Note: Option names and values in the auditd.conf file are case insensitive.</xccdf:fixtext>
           <xccdf:fix id="F-47775r743877_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244543" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244543" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11364,7 +11341,7 @@ RHEL 8 functionality (e.g., RDP) must be capable of taking enforcement action if
 $ sudo systemctl enable firewalld</xccdf:fixtext>
           <xccdf:fix id="F-47776r743880_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244544" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244544" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11398,7 +11375,7 @@ Satisfies: SRG-OS-000368-GPOS-00154, SRG-OS-000370-GPOS-00155, SRG-OS-000480-GPO
 $ sudo systemctl enable --now fapolicyd</xccdf:fixtext>
           <xccdf:fix id="F-47777r743883_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244545" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244545" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11426,7 +11403,7 @@ The System Administrator (SA) must work with the site Information System Securit
 $ sudo yum install usbguard.x86_64</xccdf:fixtext>
           <xccdf:fix id="F-47779r743889_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244547" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244547" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11460,7 +11437,7 @@ $ sudo systemctl start usbguard.service
 Note: Enabling and starting usbguard without properly configuring it for an individual system will immediately prevent any access over a usb device such as a keyboard or mouse</xccdf:fixtext>
           <xccdf:fix id="F-47780r743892_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244548" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244548" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11490,7 +11467,7 @@ Satisfies: SRG-OS-000423-GPOS-00187, SRG-OS-000424-GPOS-00188, SRG-OS-000425-GPO
 $ sudo yum install openssh-server.x86_64</xccdf:fixtext>
           <xccdf:fix id="F-47781r743895_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244549" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244549" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11536,7 +11513,7 @@ Load settings from all system configuration files with the following command:
 $ sudo sysctl --system</xccdf:fixtext>
           <xccdf:fix id="F-47782r858790_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244550" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244550" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11582,7 +11559,7 @@ Load settings from all system configuration files with the following command:
 $ sudo sysctl --system</xccdf:fixtext>
           <xccdf:fix id="F-47783r858798_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244551" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244551" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11628,7 +11605,7 @@ Load settings from all system configuration files with the following command:
 $ sudo sysctl --system</xccdf:fixtext>
           <xccdf:fix id="F-47784r858802_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244552" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244552" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11674,7 +11651,7 @@ Load settings from all system configuration files with the following command:
 $ sudo sysctl --system</xccdf:fixtext>
           <xccdf:fix id="F-47785r858817_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244553" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244553" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11720,7 +11697,7 @@ The system configuration files need to be reloaded for the changes to take effec
 $ sudo sysctl --system</xccdf:fixtext>
           <xccdf:fix id="F-47786r858831_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244554" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:244554" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11747,7 +11724,7 @@ Lock an account:
 $ sudo passwd -l [username]</xccdf:fixtext>
           <xccdf:fix id="F-55097r809341_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:251706" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:251706" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11773,7 +11750,7 @@ This requirement applies to RHEL 8 with software libraries that are accessible a
 $ sudo chmod 755 [DIRECTORY]</xccdf:fixtext>
           <xccdf:fix id="F-55098r809344_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:251707" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:251707" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11801,7 +11778,7 @@ Run the following command, replacing "[DIRECTORY]" with any library directory no
 $ sudo chown root [DIRECTORY]</xccdf:fixtext>
           <xccdf:fix id="F-55099r809347_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:251708" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:251708" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11829,7 +11806,7 @@ Run the following command, replacing "[DIRECTORY]" with any library directory no
 $ sudo chgrp root [DIRECTORY]</xccdf:fixtext>
           <xccdf:fix id="F-55100r809350_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:251709" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:251709" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11861,7 +11838,7 @@ $ sudo vi /etc/pam.d/sudo
 Remove any occurrences of "pam_succeed_if" in the file.</xccdf:fixtext>
           <xccdf:fix id="F-55103r854082_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:251712" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:251712" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11891,7 +11868,7 @@ Add the following line to the "/etc/pam.d/system-auth" file (or modify the line
      password requisite pam_pwquality.so</xccdf:fixtext>
           <xccdf:fix id="F-55104r902739_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:251713" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:251713" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11919,7 +11896,7 @@ $ sudo systemctl set-default multi-user.target
 A reboot is required for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-55109r809377_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:251718" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:251718" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11948,18 +11925,134 @@ The "logind" service must be restarted for the changes to take effect. To restar
 $ sudo systemctl restart systemd-logind</xccdf:fixtext>
           <xccdf:fix id="F-60884r1014792_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:257258" />
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:257258" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-279929">
+        <xccdf:title>SRG-OS-000163-GPOS-00072</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-279929r1156340_rule" severity="medium" weight="10.0">
+          <xccdf:version>RHEL-08-020360</xccdf:version>
+          <xccdf:title>RHEL 8 must automatically exit interactive command shell user sessions after 10 minutes of inactivity.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Terminating an idle interactive command shell user session within a short time period reduces the window of opportunity for unauthorized personnel to take control of it when left unattended in a virtual terminal or physical console.
+
+Satisfies: SRG-OS-000163-GPOS-00072, SRG-OS-000029-GPOS-00010&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Red Hat Enterprise Linux 8</dc:subject>
+            <dc:identifier>2921</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-001133</xccdf:ident>
+          <xccdf:fixtext fixref="F-84394r1156339_fix">Configure RHEL 8 to exit interactive command shell user sessions after 10 minutes of inactivity.
+
+Add or edit the following line in "/etc/profile.d/tmout.sh":
+
+#!/bin/bash
+
+declare -xr TMOUT=600</xccdf:fixtext>
+          <xccdf:fix id="F-84394r1156339_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:279929" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-279930">
+        <xccdf:title>SRG-OS-000033-GPOS-00014</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-279930r1156343_rule" severity="medium" weight="10.0">
+          <xccdf:version>RHEL-08-010280</xccdf:version>
+          <xccdf:title>RHEL 8 IP tunnels must use FIPS 140-3-approved cryptographic algorithms.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Overriding the system crypto policy makes the behavior of the Libreswan service violate expectations and makes system configuration more fragmented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Red Hat Enterprise Linux 8</dc:subject>
+            <dc:identifier>2921</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxLibreswan" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000068</xccdf:ident>
+          <xccdf:fixtext fixref="F-84395r1156342_fix">Configure Libreswan to use the system cryptographic policy.
+
+Add the following line to "/etc/ipsec.conf":
+
+include /etc/crypto-policies/back-ends/libreswan.config</xccdf:fixtext>
+          <xccdf:fix id="F-84395r1156342_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:279930" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-279931">
+        <xccdf:title>SRG-OS-000423-GPOS-00187</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-279931r1156346_rule" severity="medium" weight="10.0">
+          <xccdf:version>RHEL-08-010275</xccdf:version>
+          <xccdf:title>RHEL 8 must implement DOD-approved encryption in the bind package.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
+
+Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
+
+RHEL 8 incorporates systemwide crypto policies by default. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/ directory.
+
+Satisfies: SRG-OS-000423-GPOS-00187, SRG-OS-000426-GPOS-00190&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Red Hat Enterprise Linux 8</dc:subject>
+            <dc:identifier>2921</dc:identifier>
+          </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxBIND" />
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002418</xccdf:ident>
+          <xccdf:fixtext fixref="F-84396r1156345_fix">Configure BIND to use the system crypto policy.
+
+Add the following line to the "options" section in "/etc/named.conf":
+
+include "/etc/crypto-policies/back-ends/bind.config";</xccdf:fixtext>
+          <xccdf:fix id="F-84396r1156345_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:279931" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-279933">
+        <xccdf:title>SRG-OS-000396-GPOS-00176</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-279933r1156352_rule" severity="high" weight="10.0">
+          <xccdf:version>RHEL-08-010015</xccdf:version>
+          <xccdf:title>RHEL 8 must have the crypto-policies package installed.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Centralized cryptographic policies simplify applying secure ciphers across an operating system and the applications that run on that operating system. Use of weak or untested encryption algorithms undermines the purposes of using encryption to protect data.
+
+Satisfies: SRG-OS-000396-GPOS-00176, SRG-OS-000393-GPOS-00173, SRG-OS-000394-GPOS-00174&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Red Hat Enterprise Linux 8</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Red Hat Enterprise Linux 8</dc:subject>
+            <dc:identifier>2921</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002450</xccdf:ident>
+          <xccdf:fixtext fixref="F-84398r1156351_fix">Install the crypto-policies package (if the package is not already installed) with the following command:
+
+$ sudo dnf -y install crypto-policies</xccdf:fixtext>
+          <xccdf:fix id="F-84398r1156351_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel8os:def:279933" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
     </xccdf:Benchmark>
   </component>
-  <component id="scap_mil.disa.stig_comp_U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-oval.xml" timestamp="2025-09-25T11:54:30.750-04:00">
+  <component id="scap_mil.disa.stig_comp_U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" timestamp="2026-01-05T14:27:46.945-05:00">
     <oval_definitions xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5">
       <generator>
-        <oval:product_name>Security Content Tool 1.6.0</oval:product_name>
+        <oval:product_name>Security Content Tool 1.7.0</oval:product_name>
         <oval:schema_version>5.11</oval:schema_version>
-        <oval:timestamp>2025-09-25T11:54:30</oval:timestamp>
+        <oval:timestamp>2026-01-05T02:27:46</oval:timestamp>
       </generator>
       <definitions>
         <definition id="oval:mil.disa.stig.defs:def:230221" version="2" class="compliance">
@@ -12172,23 +12265,6 @@ $ sudo systemctl restart systemd-logind</xccdf:fixtext>
             <criterion test_ref="oval:mil.disa.stig.ind:tst:23025300" comment="/etc/sysconfig/sshd: SSH_USE_STRONG_RNG=32" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230255" version="1" class="compliance">
-          <metadata>
-            <title>The operating system operating system must implement DoD-approved TLS encryption in the OpenSSL package.</title>
-            <description />
-          </metadata>
-          <criteria operator="OR">
-            <criteria operator="AND" comment="If crypto-policies is older than version 20210617, then MinProtocol = TLSv1.2 or TLSv1.3.">
-              <criterion test_ref="oval:mil.disa.stig.linux:tst:23025500" negate="true" comment="The package crypto-policies is not version 20210617 or newer" />
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:23025501" comment="/etc/crypto-policies/back-ends/opensslcnf.config: MinProtocol = TLSv1.2 or newer." />
-            </criteria>
-            <criteria operator="AND" comment="If crypto-policies is version 20210617 or newer, then TLS.MinProtocol = TLSv1.2 or TLSv1.3 and DTLS.MinProtocol = DLSv1.2 or DTLSv1.3">
-              <criterion test_ref="oval:mil.disa.stig.linux:tst:23025500" comment="The package crypto-policies is version 20210617 or newer" />
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:23025502" comment="/etc/crypto-policies/back-ends/opensslcnf.config: TLS.MinProtocol = TLSv1.2 or newer." />
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:23025503" comment="/etc/crypto-policies/back-ends/opensslcnf.config: DTLS.MinProtocol = DTLSv1.2 or newer." />
-            </criteria>
-          </criteria>
-        </definition>
         <definition id="oval:mil.disa.stig.defs:def:230257" version="1" class="compliance">
           <metadata>
             <title>The operating system system commands must have mode 755 or less permissive.</title>
@@ -12396,9 +12472,9 @@ $ sudo systemctl restart systemd-logind</xccdf:fixtext>
             <criterion test_ref="oval:mil.disa.stig.ind:tst:23028800" comment="/etc/ssh/sshd_config or /etc/ssh/sshd_config.d/*:StrictModes == yes" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230290" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:230290" version="2" class="compliance">
           <metadata>
-            <title>The operating system SSH daemon must not allow authentication using known host’s authentication.</title>
+            <title>The operating system SSH daemon must not allow authentication using known host's authentication.</title>
             <description />
           </metadata>
           <criteria>
@@ -12512,14 +12588,13 @@ $ sudo systemctl restart systemd-logind</xccdf:fixtext>
             <criterion test_ref="oval:mil.disa.stig.ind:tst:23030601" comment="actual nfs mounts have noexec" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230311" version="2" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:230311" version="3" class="compliance">
           <metadata>
             <title>The operating system must disable the kernel.core_pattern.</title>
             <description />
           </metadata>
           <criteria>
             <criterion test_ref="oval:mil.disa.stig.unix:tst:23031100" comment="kernel.core_pattern setting in kernel is |/bin/false" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23031100" comment="kernel.core_pattern setting in sysctl configuration files is set to |/bin/false" />
           </criteria>
         </definition>
         <definition id="oval:mil.disa.stig.defs:def:230312" version="1" class="compliance">
@@ -12929,16 +13004,6 @@ $ sudo systemctl restart systemd-logind</xccdf:fixtext>
             <criterion test_ref="oval:mil.disa.stig.ind:tst:23038000" comment="The PermitEmptyPasswords option is not set to yes in /etc/ssh/sshd_config." />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230381" version="3" class="compliance">
-          <metadata>
-            <title>The operating system must display the date and time of the last successful account logon upon logon.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23038100" comment="pam_lastlog is configured to show last successful logon" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23038101" comment="pam_lastlog is not used with the silent option" />
-          </criteria>
-        </definition>
         <definition id="oval:mil.disa.stig.defs:def:230382" version="1" class="compliance">
           <metadata>
             <title>The operating system must display the date and time of the last successful account logon upon an SSH logon.</title>
@@ -14088,14 +14153,13 @@ $ sudo systemctl restart systemd-logind</xccdf:fixtext>
             <criterion test_ref="oval:mil.disa.stig.ind:tst:23054501" comment="kernel.unprivileged_bpf_disabled setting is set to '1' without conflicting settings in other files" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230546" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:230546" version="2" class="compliance">
           <metadata>
-            <title>The operating system must restrict usage of ptrace to descendant  processes.</title>
+            <title>The operating system must restrict usage of ptrace to descendant processes.</title>
             <description />
           </metadata>
-          <criteria operator="AND">
+          <criteria>
             <criterion test_ref="oval:mil.disa.stig.unix:tst:23054600" comment="kernel.yama.ptrace_scope setting in kernel is set to 1" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23054601" comment="kernel.yama.ptrace_scope in sysctl configuration files is set to 1, and nothing else, and there are no conflicting settings in other files" />
           </criteria>
         </definition>
         <definition id="oval:mil.disa.stig.defs:def:230547" version="1" class="compliance">
@@ -14118,16 +14182,6 @@ $ sudo systemctl restart systemd-logind</xccdf:fixtext>
             <criterion test_ref="oval:mil.disa.stig.ind:tst:23054801" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230549" version="5" class="compliance">
-          <metadata>
-            <title>The operating system must use reverse path filtering on all IPv4 interfaces.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23054900" comment="net.ipv4.conf.all.rp_filter setting in sysctl configuration files is set to 1 or 2" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054900" comment="net.ipv4.conf.all.rp_filter setting in kernel is 1 or 2" />
-          </criteria>
-        </definition>
         <definition id="oval:mil.disa.stig.defs:def:230550" version="2" class="compliance">
           <metadata>
             <title>The operating system must be configured to prevent unrestricted mail relaying.</title>
@@ -14182,16 +14236,6 @@ $ sudo systemctl restart systemd-logind</xccdf:fixtext>
             <criterion test_ref="oval:mil.disa.stig.linux:tst:23055800" comment="An FTP server package is not installed." />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230559" version="2" class="compliance">
-          <metadata>
-            <title>The gssproxy package must not be installed unless mission essential on the operating system.</title>
-            <description />
-          </metadata>
-          <criteria operator="OR">
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23055900" comment="gssproxy package is not installed" />
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:25785400" comment="nfs is in use" />
-          </criteria>
-        </definition>
         <definition id="oval:mil.disa.stig.defs:def:230560" version="1" class="compliance">
           <metadata>
             <title>The iprutils package must not be installed unless mission essential on the operating system.</title>
@@ -14633,6 +14677,15 @@ $ sudo systemctl restart systemd-logind</xccdf:fixtext>
             <criterion test_ref="oval:mil.disa.stig.ind:tst:25725800" comment="The system terminates idle user sessions." />
           </criteria>
         </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257832" version="1" class="compliance">
+          <metadata>
+            <title>The gssproxy package must not be installed unless mission essential on the operating system.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:23055900" comment="gssproxy package is not installed" />
+          </criteria>
+        </definition>
         <definition id="oval:mil.disa.stig.defs:def:257867" version="1" class="compliance">
           <metadata>
             <title>The operating system must mount /tmp with the noexec option.</title>
@@ -14725,6 +14778,15 @@ $ sudo systemctl restart systemd-logind</xccdf:fixtext>
             <criterion test_ref="oval:mil.disa.stig.unix:tst:25805101" comment="Check /etc/passwd if root has a home directory defined" />
           </criteria>
         </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258068" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must automatically exit interactive command shell user sessions after 15 minutes of inactivity.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25806800" comment="TMOUT is set to 900 or less in /etc/profile and /etc/profile.d/*.sh" />
+          </criteria>
+        </definition>
         <definition id="oval:mil.disa.stig.defs:def:258086" version="1" class="compliance">
           <metadata>
             <title>The operating system must require users to reauthenticate for privilege escalation.</title>
@@ -14786,6 +14848,37 @@ $ sudo systemctl restart systemd-logind</xccdf:fixtext>
             <criterion test_ref="oval:mil.disa.stig.linux:tst:25815201" comment="auditd is running" />
           </criteria>
         </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258232" version="1" class="compliance">
+          <metadata>
+            <title>The operating system IP tunnels must use FIPS 140-2/140-3 approved cryptographic algorithms.</title>
+            <description />
+          </metadata>
+          <criteria operator="OR">
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25823200" comment="ipsec.conf includes crypto-policy" />
+            <criteria>
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:25823201" comment="ipsec.conf includes /etc/ipsec.d/*.conf" />
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:25823202" comment="/etc/ipsec.d/*.conf includes crypto-policy" />
+            </criteria>
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258234" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must have the crypto-policies package installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25823400" comment="crypto-policies package is installed" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258242" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must implement DOD-approved encryption in the bind package.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25824201" comment="named.conf includes crypto-policy" />
+          </criteria>
+        </definition>
         <definition id="oval:mil.disa.stig.defs:def:260487" version="1" class="compliance">
           <metadata>
             <title>The operating system library directories must have mode 0755 or less permissive.</title>
@@ -14808,6 +14901,15 @@ $ sudo systemctl restart systemd-logind</xccdf:fixtext>
             <criterion test_ref="oval:mil.disa.stig.ind:tst:27172000" comment="Check to see if PermitUserEnvironment is set to no in /etc/ssh/sshd_config and /etc/ssh/sshd_config.d/*.conf" />
           </criteria>
         </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271868" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must use reverse path filtering on all IPv4 interfaces.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:27186800" comment="net.ipv4.conf.all.rp_filter setting in kernel is 1" />
+          </criteria>
+        </definition>
         <definition id="oval:mil.disa.stig.defs:def:25784900" version="1" class="inventory">
           <metadata>
             <title>The autofs package is installed.</title>
@@ -14844,6 +14946,24 @@ $ sudo systemctl restart systemd-logind</xccdf:fixtext>
             <criterion test_ref="oval:mil.disa.stig.linux:tst:25795201" comment="The tftp-server package is installed." />
           </criteria>
         </definition>
+        <definition id="oval:mil.disa.stig.defs:def:25823200" version="1" class="inventory">
+          <metadata>
+            <title>The libreswan package is installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:2582320000" comment="The libreswan package is installed." />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:25824200" version="1" class="inventory">
+          <metadata>
+            <title>The system has BIND installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25824200" comment="BIND installed" />
+          </criteria>
+        </definition>
         <definition id="oval:mil.disa.stig.linux:def:100001" version="1" class="inventory">
           <metadata>
             <title>The system is RHEL 8.1 or lower</title>
@@ -15304,26 +15424,6 @@ The SSH implementation in RHEL8 uses the OPENSSL library, which does not use hig
             <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230253" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel8os:def:230255" version="1" class="compliance">
-          <metadata>
-            <title>RHEL-08-010294 - The RHEL 8 operating system must implement DoD-approved TLS encryption in the OpenSSL package.</title>
-            <affected family="unix">
-              <platform>Red Hat Enterprise Linux 8</platform>
-            </affected>
-            <description>Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
-
-Remote access (e.g., RDP) is access to DoD nonpublic information systems by an authorized user (or an information system) communicating through an external, non-organization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
-
-Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
-
-RHEL 8 incorporates system-wide crypto policies by default.  The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/openssl.config file.
-
-Satisfies: SRG-OS-000250-GPOS-00093, SRG-OS-000393-GPOS-00173, SRG-OS-000394-GPOS-00174, SRG-OS-000125-GPOS-00065</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230255" />
-          </criteria>
-        </definition>
         <definition id="oval:mil.disa.stig.rhel8os:def:230257" version="1" class="compliance">
           <metadata>
             <title>RHEL-08-010300 - RHEL 8 system commands must have mode 755 or less permissive.</title>
@@ -15726,9 +15826,9 @@ This requirement applies to operating systems performing security function verif
             <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230288" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel8os:def:230290" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel8os:def:230290" version="2" class="compliance">
           <metadata>
-            <title>RHEL-08-010520 - The RHEL 8 SSH daemon must not allow authentication using known host’s authentication.</title>
+            <title>RHEL-08-010520 - The RHEL 8 SSH daemon must not allow authentication using known host's authentication.</title>
             <affected family="unix">
               <platform>Red Hat Enterprise Linux 8</platform>
             </affected>
@@ -16654,18 +16754,6 @@ Configuration settings are the set of parameters that can be changed in hardware
             <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230380" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel8os:def:230381" version="1" class="compliance">
-          <metadata>
-            <title>RHEL-08-020340 - RHEL 8 must display the date and time of the last successful account logon upon logon.</title>
-            <affected family="unix">
-              <platform>Red Hat Enterprise Linux 8</platform>
-            </affected>
-            <description>Providing users with feedback on when account accesses last occurred facilitates user recognition and reporting of unauthorized account use.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230381" />
-          </criteria>
-        </definition>
         <definition id="oval:mil.disa.stig.rhel8os:def:230382" version="1" class="compliance">
           <metadata>
             <title>RHEL-08-020350 - RHEL 8 must display the date and time of the last successful account logon upon an SSH logon.</title>
@@ -18821,9 +18909,9 @@ The sysctl --system command will load settings from all system configuration fil
             <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230545" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel8os:def:230546" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel8os:def:230546" version="2" class="compliance">
           <metadata>
-            <title>RHEL-08-040282 - RHEL 8 must restrict usage of ptrace to descendant  processes.</title>
+            <title>RHEL-08-040282 - RHEL 8 must restrict usage of ptrace to descendant processes.</title>
             <affected family="unix">
               <platform>Red Hat Enterprise Linux 8</platform>
             </affected>
@@ -18881,7 +18969,7 @@ The sysctl --system command will load settings from all system configuration fil
             <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230548" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel8os:def:230549" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel8os:def:230549" version="2" class="compliance">
           <metadata>
             <title>RHEL-08-040285 - RHEL 8 must use reverse path filtering on all IPv4 interfaces.</title>
             <affected family="unix">
@@ -18898,7 +18986,7 @@ The sysctl --system command will load settings from all system configuration fil
 /etc/sysctl.conf</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230549" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271868" />
           </criteria>
         </definition>
         <definition id="oval:mil.disa.stig.rhel8os:def:230550" version="1" class="compliance">
@@ -18939,7 +19027,7 @@ If the system is being used to perform a network troubleshooting function, the u
             <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230554" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel8os:def:230555" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel8os:def:230555" version="2" class="compliance">
           <metadata>
             <title>RHEL-08-040340 - RHEL 8 remote X connections for interactive users must be disabled unless to fulfill documented and validated mission requirements.</title>
             <affected family="unix">
@@ -18949,7 +19037,7 @@ If the system is being used to perform a network troubleshooting function, the u
 
 X11 forwarding should be enabled with caution. Users with the ability to bypass file permissions on the remote host (for the user's X11 authorization database) can access the local X11 display through the forwarded connection. An attacker may then be able to perform activities such as keystroke monitoring if the ForwardX11Trusted option is also enabled.
 
-If X11 services are not required for the system's intended function, they should be disabled or restricted as appropriate to the system’s needs.</description>
+If X11 services are not required for the system's intended function, they should be disabled or restricted as appropriate to the system's needs.</description>
           </metadata>
           <criteria>
             <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230555" />
@@ -18991,7 +19079,7 @@ If X11 services are not required for the system's intended function, they should
             <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230558" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel8os:def:230559" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel8os:def:230559" version="2" class="compliance">
           <metadata>
             <title>RHEL-08-040370 - The gssproxy package must not be installed unless mission essential on RHEL 8.</title>
             <affected family="unix">
@@ -19004,7 +19092,7 @@ Operating systems are capable of providing a wide variety of functions and servi
 The gssproxy package is a proxy for GSS API credential handling and could expose secrets on some networks. It is not needed for normal function of the OS.</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230559" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257832" />
           </criteria>
         </definition>
         <definition id="oval:mil.disa.stig.rhel8os:def:230560" version="1" class="compliance">
@@ -19587,6 +19675,64 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
             <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257258" />
           </criteria>
         </definition>
+        <definition id="oval:mil.disa.stig.rhel8os:def:279929" version="1" class="compliance">
+          <metadata>
+            <title>RHEL-08-020360 - RHEL 8 must automatically exit interactive command shell user sessions after 10 minutes of inactivity.</title>
+            <affected family="unix">
+              <platform>Red Hat Enterprise Linux 8</platform>
+            </affected>
+            <description>Terminating an idle interactive command shell user session within a short time period reduces the window of opportunity for unauthorized personnel to take control of it when left unattended in a virtual terminal or physical console.
+
+	Satisfies: SRG-OS-000163-GPOS-00072, SRG-OS-000029-GPOS-00010</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258068" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.rhel8os:def:279930" version="1" class="compliance">
+          <metadata>
+            <title>RHEL-08-010280 - RHEL 8 IP tunnels must use FIPS 140-3-approved cryptographic algorithms.</title>
+            <affected family="unix">
+              <platform>Red Hat Enterprise Linux 8</platform>
+            </affected>
+            <description>Overriding the system crypto policy makes the behavior of the Libreswan service violate expectations and makes system configuration more fragmented.</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258232" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.rhel8os:def:279931" version="1" class="compliance">
+          <metadata>
+            <title>RHEL-08-010275 - RHEL 8 must implement DOD-approved encryption in the bind package.</title>
+            <affected family="unix">
+              <platform>Red Hat Enterprise Linux 8</platform>
+            </affected>
+            <description>Without cryptographic integrity protections, information can be altered by unauthorized users without detection.
+
+	Cryptographic mechanisms used for protecting the integrity of information include, for example, signed hash functions using asymmetric cryptography enabling distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.
+
+	RHEL 8 incorporates systemwide crypto policies by default. The employed algorithms can be viewed in the /etc/crypto-policies/back-ends/ directory.
+
+	Satisfies: SRG-OS-000423-GPOS-00187, SRG-OS-000426-GPOS-00190</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258242" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.rhel8os:def:279933" version="1" class="compliance">
+          <metadata>
+            <title>RHEL-08-010015 - RHEL 8 must have the crypto-policies package installed.</title>
+            <affected family="unix">
+              <platform>Red Hat Enterprise Linux 8</platform>
+            </affected>
+            <description>Centralized cryptographic policies simplify applying secure ciphers across an operating system and the applications that run on that operating system. Use of weak or untested encryption algorithms undermines the purposes of using encryption to protect data.
+
+	Satisfies: SRG-OS-000396-GPOS-00176, SRG-OS-000393-GPOS-00173, SRG-OS-000394-GPOS-00174</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258234" />
+          </criteria>
+        </definition>
       </definitions>
       <tests>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:230345" version="1" check_existence="all_exist" check="all" comment="check /etc/security/faillock.conf for the even_deny_root setting">
@@ -19683,18 +19829,6 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23025300" version="1" check="all" comment="/etc/sysconfig/sshd: SSH_USE_STRONG_RNG=32">
           <object object_ref="oval:mil.disa.stig.ind:obj:23025300" />
         </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23025501" version="1" check="all" comment="/etc/crypto-policies/back-ends/opensslcnf.config:MinProtocol == TLSv1.2 or newer.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23025501" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23025501" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23025502" version="1" check="all" comment="/etc/crypto-policies/back-ends/opensslcnf.config:TLS.MinProtocol == TLSv1.2 or newer.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23025502" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23025501" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23025503" version="1" check="all" comment="/etc/crypto-policies/back-ends/opensslcnf.config:DTLS.MinProtocol == DTLSv1.2 or newer.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23025503" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23025502" />
-        </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23026400" version="1" check_existence="all_exist" check="all" comment="Every /etc/yum.repos.d/*.repo:[{reponame}] has a gpgcheck set to 1.">
           <object object_ref="oval:mil.disa.stig.ind:obj:23026400" />
           <state state_ref="oval:mil.disa.stig.ind:ste:23026400" />
@@ -19776,7 +19910,7 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
           <object object_ref="oval:mil.disa.stig.ind:obj:23030001" />
           <state state_ref="oval:mil.disa.stig.ind:ste:2303001" />
         </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23030101" version="1" check_existence="any_exist" check="all" comment="Device files are configured in /etc/fstab to use the nodev option.  Mounts on '/' are ignored.">
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23030101" version="2" check_existence="any_exist" check="all" comment="Device files are configured in /etc/fstab to use the nodev option.  Mounts on '/', and vfat mounts, are ignored.">
           <object object_ref="oval:mil.disa.stig.ind:obj:23030101" />
           <state state_ref="oval:mil.disa.stig.ind:ste:23030100" />
         </textfilecontent54_test>
@@ -19788,10 +19922,6 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
           <object object_ref="oval:mil.disa.stig.ind:obj:23030601" />
           <state state_ref="oval:mil.disa.stig.ind:ste:23030600" />
         </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23031100" version="2" check_existence="at_least_one_exists" check="all" comment="kernel.core_pattern setting in sysctl configuration files is set to |/bin/false">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23031102" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23031100" />
-        </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23031300" version="2" check="all" comment="For the global domain, core is set to 0.">
           <object object_ref="oval:mil.disa.stig.ind:obj:23031300" />
           <state state_ref="oval:mil.disa.stig.ind:ste:23031300" />
@@ -19994,12 +20124,6 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
           <object object_ref="oval:mil.disa.stig.ind:obj:23038000" />
           <state state_ref="oval:mil.disa.stig.ind:ste:20000016" />
         </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23038100" version="1" check="all" comment="pam_lastlog is configured to show last successful logon">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23038100" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23038101" version="7" check_existence="none_exist" check="none satisfy" comment="pam_lastlog is not used with the silent option">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23038101" />
-        </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23038200" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/ssh/sshd_config:PrintLastLog == yes">
           <object object_ref="oval:mil.disa.stig.ind:obj:23038200" />
           <state state_ref="oval:mil.disa.stig.ind:ste:20000016" />
@@ -20509,10 +20633,6 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
           <object object_ref="oval:mil.disa.stig.ind:obj:23054501" />
           <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
         </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23054601" version="1" check="all" comment="kernel.yama.ptrace_scope in sysctl configuration files is set to 1, and nothing else, and there are no conflicting settings in other files">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23054603" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
-        </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23054701" version="8" check_existence="at_least_one_exists" check="all" state_operator="OR" comment="kernel.kptr_restrict is set to 1 or 2 in the sysctl configuration files, and no conflicting configs exist.">
           <object object_ref="oval:mil.disa.stig.ind:obj:23054703" />
           <state state_ref="oval:mil.disa.stig.ind:ste:23054701" />
@@ -20522,11 +20642,6 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
           <object object_ref="oval:mil.disa.stig.ind:obj:23054803" />
           <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
         </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23054900" version="3" check_existence="at_least_one_exists" check="all" state_operator="OR" comment="net.ipv4.conf.all.rp_filter setting in sysctl configuration files is set to 1 or 2">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23054900" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000004" />
-        </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23055001" version="1" check="all" comment="/etc/postfix/main.cf: smtpd_client_restrictions = permit_mynetworks,reject">
           <object object_ref="oval:mil.disa.stig.ind:obj:23055001" />
         </textfilecontent54_test>
@@ -20778,6 +20893,10 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
           <object object_ref="oval:mil.disa.stig.ind:obj:25804501" />
           <state state_ref="oval:mil.disa.stig.ind:ste:25804500" />
         </variable_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25806800" version="1" check_existence="at_least_one_exists" check="all" comment="TMOUT option is set to 900 or less in /etc/profile and /etc/profile.d/*.sh.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25806800" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000026" />
+        </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25808600" version="1" check_existence="none_exist" check="all" comment="'!authenticate' does not exist in /etc/sudoers">
           <object object_ref="oval:mil.disa.stig.ind:obj:25808600" />
         </textfilecontent54_test>
@@ -20806,6 +20925,22 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
           <object object_ref="oval:mil.disa.stig.ind:obj:20000005" />
           <state state_ref="oval:mil.disa.stig.ind:ste:25814602" />
         </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25823200" version="1" check_existence="at_least_one_exists" check="at least one" comment="ipsec.conf includes crypto-policy">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25823200" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25823200" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25823201" version="1" check_existence="at_least_one_exists" check="at least one" comment="ipsec.conf includes /etc/ipsec.d/*.conf">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25823200" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25823201" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25823202" version="1" check_existence="at_least_one_exists" check="at least one" comment="/etc/ipsec.d/*.conf includes crypto-policy">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25823201" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25823200" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25824201" version="1" check_existence="at_least_one_exists" check="at least one" comment="named.conf includes crypto-policy">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25824201" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25824200" />
+        </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:27172000" version="1" check_existence="at_least_one_exists" check="all" comment="The PermitUserEnvironment option is not set to yes in /etc/ssh/sshd_config and /etc/ssh/sshd_config.d/*.conf.">
           <object object_ref="oval:mil.disa.stig.ind:obj:27172000" />
           <state state_ref="oval:mil.disa.stig.ind:ste:20000017" />
@@ -20860,10 +20995,6 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
         <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23024100" version="1" check_existence="all_exist" check="all" comment="package policycoreutils is installed">
           <object object_ref="oval:mil.disa.stig.linux:obj:23024100" />
         </rpminfo_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23025500" version="1" check="all" comment="Package crypto-policies is version 20210617 or newer.">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23025500" />
-          <state state_ref="oval:mil.disa.stig.linux:ste:23025500" />
-        </rpminfo_test>
         <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23027300" version="1" check_existence="all_exist" check="all" comment="package openssl-pkcs11 is installed">
           <object object_ref="oval:mil.disa.stig.linux:obj:23027300" />
         </rpminfo_test>
@@ -20887,7 +21018,7 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
           <object object_ref="oval:mil.disa.stig.linux:obj:23030000" />
           <state state_ref="oval:mil.disa.stig.linux:ste:20000002" />
         </partition_test>
-        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23030100" version="1" check_existence="any_exist" check="all" comment="Device files are mounted with the nodev option.  Mounts on '/' are ignored.">
+        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23030100" version="2" check_existence="any_exist" check="all" comment="Device files are mounted with the nodev option.  Mounts on '/', and vfat mounts, are ignored.">
           <object object_ref="oval:mil.disa.stig.linux:obj:23030100" />
           <state state_ref="oval:mil.disa.stig.linux:ste:20000001" />
         </partition_test>
@@ -21067,6 +21198,15 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
           <object object_ref="oval:mil.disa.stig.linux:obj:25815201" />
           <state state_ref="oval:mil.disa.stig.linux:ste:20000004" />
         </systemdunitproperty_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25823400" version="2" check_existence="at_least_one_exists" check="all" comment="crypto-policies package is installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:25823400" />
+        </rpminfo_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25824200" version="1" check_existence="at_least_one_exists" check="all" comment="BIND installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:25824200" />
+        </rpminfo_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:2582320000" version="1" check_existence="at_least_one_exists" check="all" comment="The libreswan package is installed.">
+          <object object_ref="oval:mil.disa.stig.linux:obj:2582320000" />
+        </rpminfo_test>
         <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:10000602" version="1" check_existence="all_exist" check="all" comment="/sys/firmware/efi exists">
           <object object_ref="oval:mil.disa.stig.unix:obj:10000602" />
         </file_test>
@@ -21297,11 +21437,6 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
           <object object_ref="oval:mil.disa.stig.unix:obj:23054800" />
           <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
         </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23054900" version="3" check_existence="all_exist" check="all" state_operator="OR" comment="net.ipv4.conf.all.rp_filter setting in kernel is set to 1 or 2">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23054900" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000011" />
-        </sysctl_test>
         <interface_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23055400" version="1" check_existence="any_exist" check="all" comment="no network interfaces are in promiscuous mode">
           <object object_ref="oval:mil.disa.stig.unix:obj:23055400" />
           <state state_ref="oval:mil.disa.stig.unix:ste:23055400" />
@@ -21373,6 +21508,10 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
         <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:26048704" version="1" check_existence="none_exist" check="all" comment="no operating system library regular files are world-writable">
           <object object_ref="oval:mil.disa.stig.unix:obj:26048704" />
         </file_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:27186800" version="1" check_existence="all_exist" check="all" comment="net.ipv4.conf.all.rp_filter setting in kernel is set to 1">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23054900" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
+        </sysctl_test>
       </tests>
       <objects>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:230345" version="1">
@@ -21596,21 +21735,6 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
           <pattern operation="pattern match">^[ \t]*SSH_USE_STRONG_RNG[ \t]*=[ \t]*32[ \t]*$</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23025501" version="1">
-          <filepath>/etc/crypto-policies/back-ends/opensslcnf.config</filepath>
-          <pattern operation="pattern match">^\s*MinProtocol\s*=\s*([\.\w]+)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23025502" version="1">
-          <filepath>/etc/crypto-policies/back-ends/opensslcnf.config</filepath>
-          <pattern operation="pattern match">^\s*TLS\.MinProtocol\s*=\s*([\.\w]+)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23025503" version="1">
-          <filepath>/etc/crypto-policies/back-ends/opensslcnf.config</filepath>
-          <pattern operation="pattern match">^\s*DTLS\.MinProtocol\s*=\s*([\.\w]+)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026400" version="1">
           <path>/etc/yum.repos.d</path>
           <filename operation="pattern match">\.repo$</filename>
@@ -21823,9 +21947,9 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
           <pattern operation="pattern match">^\s*[^#\s]+\s+/boot\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
           <instance datatype="int">1</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23030101" version="1">
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23030101" version="2">
           <filepath>/etc/fstab</filepath>
-          <pattern operation="pattern match">^\s*/dev\S*\s+/\S+\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
+          <pattern operation="pattern match">^\s*/dev\S*\s+/\S+\s+(?!vfat\s+)\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23030600" version="1">
@@ -21838,23 +21962,6 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
           <pattern operation="pattern match">^\s*\[?[\.\w:-]+\]?:[/\w-]+\s+[/\w-]+\s+nfs[4]?\s+(.*)$</pattern>
           <instance datatype="int" operation="not equal">0</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031100" version="2">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*kernel\.core_pattern\s*=\s*(.+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031101" version="4">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^\s*kernel\.core_pattern\s*=\s*(.+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031102" version="1" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23031100</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23031101</object_reference>
-          </set>
-        </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031300" version="1">
           <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
             <object_reference>oval:mil.disa.stig.ind:obj:23031302</object_reference>
@@ -22323,16 +22430,6 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
           <pattern operation="pattern match">^(?i)\s*PermitEmptyPasswords\s+(\w+)$</pattern>
           <instance datatype="int">1</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23038100" version="3">
-          <filepath datatype="string">/etc/pam.d/postlogin</filepath>
-          <pattern operation="pattern match">^\s*session\s+.+\s+pam_lastlog\.so\s+(?:\w+\s+)*showfailed\b\s*(?:\w+\b\s*)*\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23038101" version="5">
-          <filepath datatype="string">/etc/pam.d/postlogin</filepath>
-          <pattern operation="pattern match">^\s*session\s+.+\s+pam_lastlog\.so\s+(?:\w+\s+)*silent\b\s*(?:\w+\b\s*)*\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23038200" version="1">
           <filepath>/etc/ssh/sshd_config</filepath>
           <pattern operation="pattern match">^\s*(?i)PrintLastLog(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
@@ -23225,23 +23322,6 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
           <pattern operation="pattern match">(?:^|\.*\n)\s*kernel\.unprivileged_bpf_disabled\s*=\s*(\d+)\s*$</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054601" version="11">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*kernel\.yama\.ptrace_scope\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054602" version="1" comment="other sysctl configuration files">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*kernel\.yama\.ptrace_scope\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054603" version="1" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23054601</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23054602</object_reference>
-          </set>
-        </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054701" version="7">
           <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="only one" />
           <filename operation="pattern match">\.conf$</filename>
@@ -23276,23 +23356,6 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
             <object_reference>oval:mil.disa.stig.ind:obj:23054802</object_reference>
           </set>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054900" version="3" comment="system sysctl configuration files - net.ipv4.conf.all.rp_filter">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23054901</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23054902</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054901" version="4">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^\s*net\.ipv4\.conf\.all\.rp_filter\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054902" version="2">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*net\.ipv4\.conf\.all\.rp_filter\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23055001" version="1">
           <filepath>/etc/postfix/main.cf</filepath>
           <pattern operation="pattern match">^smtpd_client_restrictions[ \t]*=[ \t]*permit_mynetworks[, \t]+reject[ \t]*$</pattern>
@@ -23781,6 +23844,24 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
         <variable_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25804501" version="1" comment="count of passwd entries">
           <var_ref>oval:mil.disa.stig.defs:var:25804500</var_ref>
         </variable_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25806800" version="1">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:25806801</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:25806802</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25806801" version="3">
+          <filepath>/etc/profile</filepath>
+          <pattern operation="pattern match">^[^#]*\s*TMOUT=(\d+)\s*$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25806802" version="3">
+          <behaviors max_depth="-1" recurse_direction="down" />
+          <path>/etc/profile.d</path>
+          <filename operation="pattern match">^.+\.sh$</filename>
+          <pattern operation="pattern match">^[^#]*\s*TMOUT=(\d+)\s*$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25808600" version="4">
           <behaviors ignore_case="true" />
           <filepath>/etc/sudoers</filepath>
@@ -23831,6 +23912,22 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
           <pattern operation="pattern match">^\$ActionSendStreamDriverAuthMode\s+(\S+)\s*$</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25823200" version="1" comment="/etc/ipsec.conf includes">
+          <filepath>/etc/ipsec.conf</filepath>
+          <pattern operation="pattern match">^\s*include\s+(.*)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25823201" version="1" comment="/etc/ipsec.d/*.conf includes">
+          <path>/etc/ipsec.d</path>
+          <filename operation="pattern match">^.*\.conf$</filename>
+          <pattern operation="pattern match">^\s*include\s+(.*)\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25824201" version="1" comment="named.conf includes">
+          <filepath>/etc/named.conf</filepath>
+          <pattern operation="pattern match">^\s*include\s+"(.*)"\s*;\s*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27172000" version="1">
           <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
             <object_reference>oval:mil.disa.stig.ind:obj:27172001</object_reference>
@@ -23873,9 +23970,6 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
         <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23024100" version="1">
           <name>policycoreutils</name>
         </rpminfo_object>
-        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23025500" version="1">
-          <name>crypto-policies</name>
-        </rpminfo_object>
         <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23027300" version="1">
           <name>openssl-pkcs11</name>
         </rpminfo_object>
@@ -23894,8 +23988,9 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
         <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23030000" version="1">
           <mount_point>/boot</mount_point>
         </partition_object>
-        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23030100" version="1">
+        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23030100" version="2">
           <mount_point operation="pattern match">^/\S+$</mount_point>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="exclude">oval:mil.disa.stig.linux:ste:23030103</filter>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.linux:ste:23030102</filter>
         </partition_object>
         <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23031200" version="1" comment="systemd-coredump.socket LoadState">
@@ -24040,6 +24135,15 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
           <unit>auditd.service</unit>
           <property>SubState</property>
         </systemdunitproperty_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25823400" version="1">
+          <name>crypto-policies</name>
+        </rpminfo_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:25824200" version="1" comment="bind">
+          <name>bind</name>
+        </rpminfo_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:2582320000" version="1">
+          <name>libreswan</name>
+        </rpminfo_object>
         <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:10000602" version="2">
           <path datatype="string">/sys/firmware/efi</path>
           <filename xsi:nil="true" />
@@ -24110,17 +24214,17 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
             <filter>oval:mil.disa.stig.unix:ste:23025800</filter>
           </set>
         </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23026100" version="4">
-          <behaviors recurse="directories" recurse_direction="down" />
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23026100" version="5">
+          <behaviors recurse_direction="down" />
           <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
-          <filename operation="pattern match">\.so(\.\d+)*$</filename>
+          <filename operation="pattern match">\.so(\S+)*$</filename>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.stig.unix:ste:20000005</filter>
         </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23026200" version="2">
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23026200" version="3">
           <behaviors recurse_direction="down" />
           <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
-          <filename operation="pattern match">\.so(\.\d+)*$</filename>
+          <filename operation="pattern match">(\.so\S*)$</filename>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.stig.unix:ste:20000006</filter>
         </file_object>
@@ -24337,38 +24441,38 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
           <username operation="pattern match">.*</username>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:25804500</filter>
         </password_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048700" version="2">
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048700" version="3">
           <behaviors recurse_direction="down" />
           <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
-          <filename operation="pattern match">\.so</filename>
+          <filename operation="pattern match">\.so\S*$</filename>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:26048700</filter>
         </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048701" version="2">
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048701" version="3">
           <behaviors recurse_direction="down" />
           <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
-          <filename operation="pattern match">\.so</filename>
+          <filename operation="pattern match">\.so\S*$</filename>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:26048701</filter>
         </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048702" version="2">
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048702" version="3">
           <behaviors recurse_direction="down" />
           <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
-          <filename operation="pattern match">\.so</filename>
+          <filename operation="pattern match">\.so\S*$</filename>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:26048702</filter>
         </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048703" version="2">
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048703" version="3">
           <behaviors recurse_direction="down" />
           <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
-          <filename operation="pattern match">\.so</filename>
+          <filename operation="pattern match">\.so\S*$</filename>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:26048703</filter>
         </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048704" version="2">
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048704" version="3">
           <behaviors recurse_direction="down" />
           <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
-          <filename operation="pattern match">\.so</filename>
+          <filename operation="pattern match">\.so\S*$</filename>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:26048704</filter>
         </file_object>
@@ -24431,6 +24535,9 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
         <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000024" version="1">
           <subexpression datatype="int" operation="not equal">0</subexpression>
         </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000026" version="2">
+          <subexpression datatype="int" operation="less than or equal">600</subexpression>
+        </textfilecontent54_state>
         <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000027" version="2">
           <subexpression datatype="string" operation="pattern match">(?i)(?:^|\n)[^#]*\btype\s*=\s*"omfwd"</subexpression>
         </textfilecontent54_state>
@@ -24458,12 +24565,6 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
         <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23024001" version="1" comment="/etc/selinux/config:SELINUX=enforcing">
           <subexpression datatype="string">enforcing</subexpression>
         </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23025501" version="2">
-          <subexpression datatype="string" operation="pattern match">TLSv1\.[2|3]</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23025502" version="2">
-          <subexpression datatype="string" operation="pattern match">DTLSv1\.[2|3]</subexpression>
-        </textfilecontent54_state>
         <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23026400" version="1">
           <text datatype="string" operation="pattern match">\n\s*gpgcheck\s*=\s*(True|1|yes)\s*(\n|$)</text>
         </textfilecontent54_state>
@@ -24482,9 +24583,6 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
         <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23030600" version="1">
           <subexpression operation="pattern match">^.*noexec.*$</subexpression>
         </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23031100" version="1">
-          <subexpression datatype="string" operation="equals">|/bin/false</subexpression>
-        </textfilecontent54_state>
         <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23031300" version="1">
           <subexpression datatype="int">0</subexpression>
         </textfilecontent54_state>
@@ -24665,6 +24763,15 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
         <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25814602" version="1">
           <subexpression datatype="string" operation="pattern match">(?i)(?:^|\n)[^#]*\bStreamDriver\.?AuthMode\b</subexpression>
         </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25823200" version="1">
+          <subexpression>/etc/crypto-policies/back-ends/libreswan.config</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25823201" version="1">
+          <subexpression>/etc/ipsec.d/*.conf</subexpression>
+        </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25824200" version="1">
+          <subexpression>/etc/crypto-policies/back-ends/bind.config</subexpression>
+        </textfilecontent54_state>
         <rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:10000100" version="2">
           <version operation="pattern match">8\.[0-1]$</version>
         </rpminfo_state>
@@ -24717,12 +24824,12 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
         <partition_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:23024000" version="2">
           <fs_type>selinuxfs</fs_type>
         </partition_state>
-        <rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:23025500" version="1">
-          <version datatype="version" operation="greater than or equal">20210617</version>
-        </rpminfo_state>
         <partition_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:23030102" version="1">
           <device operation="pattern match">^/dev\S*$</device>
         </partition_state>
+        <partition_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:23030103" version="1">
+          <fs_type>vfat</fs_type>
+        </partition_state>
         <partition_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:23050900" version="1">
           <mount_options entity_check="at least one">nosuid</mount_options>
         </partition_state>
@@ -25200,15 +25307,15 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
       </variables>
     </oval_definitions>
   </component>
-  <component id="scap_mil.disa.stig_comp_U_RHEL_8_V2R5_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" timestamp="2025-09-25T11:54:34.494-04:00">
+  <component id="scap_mil.disa.stig_comp_U_RHEL_8_V2R6_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" timestamp="2026-01-05T14:27:51.133-05:00">
     <oval_definitions xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5">
       <generator>
-        <oval:product_name>Security Content Tool 1.6.0</oval:product_name>
+        <oval:product_name>Security Content Tool 1.7.0</oval:product_name>
         <oval:schema_version>5.11</oval:schema_version>
-        <oval:timestamp>2025-09-25T11:54:34</oval:timestamp>
+        <oval:timestamp>2026-01-05T02:27:51</oval:timestamp>
       </generator>
       <definitions>
-        <definition id="oval:mil.disa.stig.rhel8os:def:1" version="1" class="inventory">
+        <definition id="oval:mil.disa.stig.rhel8os:def:1" version="2" class="inventory">
           <metadata>
             <title>RHEL 8 is installed</title>
             <affected family="unix">
@@ -25219,6 +25326,8 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
           </metadata>
           <criteria>
             <criterion test_ref="oval:mil.disa.stig.linux:tst:10000004" comment="The redhat-release package is version 8" />
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:10000009" comment="The TOSS Package is not Installed" />
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:10000010" comment="The Oracle Linux Package is not Installed" />
           </criteria>
         </definition>
       </definitions>
@@ -25227,8 +25336,20 @@ RHEL 8 uses "pwquality" as a mechanism to enforce password complexity. This is s
           <object object_ref="oval:mil.disa.stig.linux:obj:10000004" />
           <state state_ref="oval:mil.disa.stig.linux:ste:10000003" />
         </rpminfo_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:10000009" version="1" check_existence="none_exist" check="all" comment="The TOSS Package is not Installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:10000002" />
+        </rpminfo_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:10000010" version="1" check_existence="none_exist" check="all" comment="The Oracle Linux Package is not Installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:10000003" />
+        </rpminfo_test>
       </tests>
       <objects>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:10000002" version="1">
+          <name>toss-release</name>
+        </rpminfo_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:10000003" version="1">
+          <name>oraclelinux-release</name>
+        </rpminfo_object>
         <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:10000004" version="1">
           <name>redhat-release</name>
         </rpminfo_object>
diff --git a/shared/references/disa-stig-rhel9-v2r6-xccdf-manual.xml b/shared/references/disa-stig-rhel9-v2r7-xccdf-manual.xml
similarity index 83%
rename from shared/references/disa-stig-rhel9-v2r6-xccdf-manual.xml
rename to shared/references/disa-stig-rhel9-v2r7-xccdf-manual.xml
index 8381fa5bfa40..b4685141b79d 100644
--- a/shared/references/disa-stig-rhel9-v2r6-xccdf-manual.xml
+++ b/shared/references/disa-stig-rhel9-v2r7-xccdf-manual.xml
@@ -1,10 +1,13 @@
-<?xml version="1.0" encoding="utf-8"?><?xml-stylesheet type='text/xsl' href='STIG_unclass.xsl'?><Benchmark xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.1 http://nvd.nist.gov/schema/xccdf-1.1.4.xsd http://cpe.mitre.org/dictionary/2.0 http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd" id="RHEL_9_STIG" xml:lang="en" xmlns="http://checklists.nist.gov/xccdf/1.1"><status date="2025-08-20">accepted</status><title>Red Hat Enterprise Linux 9 Security Technical Implementation Guide</title><description>This Security Technical Implementation Guide is published as a tool to improve the security of Department of Defense (DOD) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.</description><notice id="terms-of-use" xml:lang="en"></notice><front-matter xml:lang="en"></front-matter><rear-matter xml:lang="en"></rear-matter><reference href="https://cyber.mil"><dc:publisher>DISA</dc:publisher><dc:source>STIG.DOD.MIL</dc:source></reference><plain-text id="release-info">Release: 6 Benchmark Date: 01 Oct 2025</plain-text><plain-text id="generator">3.5.1</plain-text><plain-text id="conventionsVersion">1.10.0</plain-text><version>2</version><Profile id="MAC-1_Classified"><title>I - Mission Critical Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-257777" selected="true" /><select idref="V-257778" selected="true" /><select idref="V-257779" selected="true" /><select idref="V-257781" selected="true" /><select idref="V-257782" selected="true" /><select idref="V-257783" selected="true" /><select idref="V-257784" selected="true" /><select idref="V-257785" selected="true" /><select idref="V-257786" selected="true" /><select idref="V-257787" selected="true" /><select idref="V-257788" selected="true" /><select idref="V-257789" selected="true" /><select idref="V-257790" selected="true" /><select idref="V-257791" selected="true" /><select idref="V-257792" selected="true" /><select idref="V-257793" selected="true" /><select idref="V-257794" selected="true" /><select idref="V-257795" selected="true" /><select idref="V-257796" selected="true" /><select idref="V-257797" selected="true" /><select idref="V-257798" selected="true" /><select idref="V-257799" selected="true" /><select idref="V-257800" selected="true" /><select idref="V-257801" selected="true" /><select idref="V-257802" selected="true" /><select idref="V-257803" selected="true" /><select idref="V-257804" selected="true" /><select idref="V-257805" selected="true" /><select idref="V-257806" selected="true" /><select idref="V-257807" selected="true" /><select idref="V-257808" selected="true" /><select idref="V-257809" selected="true" /><select idref="V-257810" selected="true" /><select idref="V-257811" selected="true" /><select idref="V-257812" selected="true" /><select idref="V-257813" selected="true" /><select idref="V-257814" selected="true" /><select idref="V-257815" selected="true" /><select idref="V-257816" selected="true" /><select idref="V-257817" selected="true" /><select idref="V-257818" selected="true" /><select idref="V-257819" selected="true" /><select idref="V-257820" selected="true" /><select idref="V-257821" selected="true" /><select idref="V-257822" selected="true" /><select idref="V-257823" selected="true" /><select idref="V-257824" selected="true" /><select idref="V-257825" selected="true" /><select idref="V-257826" selected="true" /><select idref="V-257827" selected="true" /><select idref="V-257828" selected="true" /><select idref="V-257829" selected="true" /><select idref="V-257830" selected="true" /><select idref="V-257831" selected="true" /><select idref="V-257832" selected="true" /><select idref="V-257833" selected="true" /><select idref="V-257834" selected="true" /><select idref="V-257835" selected="true" /><select idref="V-257836" selected="true" /><select idref="V-257837" selected="true" /><select idref="V-257838" selected="true" /><select idref="V-257839" selected="true" /><select idref="V-257840" selected="true" /><select idref="V-257841" selected="true" /><select idref="V-257842" selected="true" /><select idref="V-257843" selected="true" /><select idref="V-257844" selected="true" /><select idref="V-257845" selected="true" /><select idref="V-257846" selected="true" /><select idref="V-257847" selected="true" /><select idref="V-257848" selected="true" /><select idref="V-257849" selected="true" /><select idref="V-257850" selected="true" /><select idref="V-257851" selected="true" /><select idref="V-257852" selected="true" /><select idref="V-257854" selected="true" /><select idref="V-257855" selected="true" /><select idref="V-257856" selected="true" /><select idref="V-257857" selected="true" /><select idref="V-257858" selected="true" /><select idref="V-257859" selected="true" /><select idref="V-257860" selected="true" /><select idref="V-257861" selected="true" /><select idref="V-257862" selected="true" /><select idref="V-257863" selected="true" /><select idref="V-257864" selected="true" /><select idref="V-257865" selected="true" /><select idref="V-257866" selected="true" /><select idref="V-257867" selected="true" /><select idref="V-257868" selected="true" /><select idref="V-257869" selected="true" /><select idref="V-257870" selected="true" /><select idref="V-257871" selected="true" /><select idref="V-257872" selected="true" /><select idref="V-257873" selected="true" /><select idref="V-257874" selected="true" /><select idref="V-257875" selected="true" /><select idref="V-257876" selected="true" /><select idref="V-257877" selected="true" /><select idref="V-257878" selected="true" /><select idref="V-257879" selected="true" /><select idref="V-257880" selected="true" /><select idref="V-257881" selected="true" /><select idref="V-257882" selected="true" /><select idref="V-257883" selected="true" /><select idref="V-257884" selected="true" /><select idref="V-257885" selected="true" /><select idref="V-257886" selected="true" /><select idref="V-257887" selected="true" /><select idref="V-257888" selected="true" /><select idref="V-257889" selected="true" /><select idref="V-257890" selected="true" /><select idref="V-257891" selected="true" /><select idref="V-257892" selected="true" /><select idref="V-257893" selected="true" /><select idref="V-257894" selected="true" /><select idref="V-257895" selected="true" /><select idref="V-257896" selected="true" /><select idref="V-257897" selected="true" /><select idref="V-257898" selected="true" /><select idref="V-257899" selected="true" /><select idref="V-257900" selected="true" /><select idref="V-257901" selected="true" /><select idref="V-257902" selected="true" /><select idref="V-257903" selected="true" /><select idref="V-257904" selected="true" /><select idref="V-257905" selected="true" /><select idref="V-257906" selected="true" /><select idref="V-257907" selected="true" /><select idref="V-257908" selected="true" /><select idref="V-257909" selected="true" /><select idref="V-257910" selected="true" /><select idref="V-257911" selected="true" /><select idref="V-257912" selected="true" /><select idref="V-257913" selected="true" /><select idref="V-257914" selected="true" /><select idref="V-257915" selected="true" /><select idref="V-257916" selected="true" /><select idref="V-257917" selected="true" /><select idref="V-257918" selected="true" /><select idref="V-257919" selected="true" /><select idref="V-257920" selected="true" /><select idref="V-257921" selected="true" /><select idref="V-257922" selected="true" /><select idref="V-257923" selected="true" /><select idref="V-257924" selected="true" /><select idref="V-257925" selected="true" /><select idref="V-257926" selected="true" /><select idref="V-257927" selected="true" /><select idref="V-257928" selected="true" /><select idref="V-257929" selected="true" /><select idref="V-257930" selected="true" /><select idref="V-257931" selected="true" /><select idref="V-257932" selected="true" /><select idref="V-257934" selected="true" /><select idref="V-257935" selected="true" /><select idref="V-257936" selected="true" /><select idref="V-257937" selected="true" /><select idref="V-257939" selected="true" /><select idref="V-257940" selected="true" /><select idref="V-257941" selected="true" /><select idref="V-257942" selected="true" /><select idref="V-257943" selected="true" /><select idref="V-257944" selected="true" /><select idref="V-257945" selected="true" /><select idref="V-257946" selected="true" /><select idref="V-257947" selected="true" /><select idref="V-257948" selected="true" /><select idref="V-257949" selected="true" /><select idref="V-257950" selected="true" /><select idref="V-257951" selected="true" /><select idref="V-257953" selected="true" /><select idref="V-257954" selected="true" /><select idref="V-257955" selected="true" /><select idref="V-257956" selected="true" /><select idref="V-257957" selected="true" /><select idref="V-257958" selected="true" /><select idref="V-257959" selected="true" /><select idref="V-257960" selected="true" /><select idref="V-257961" selected="true" /><select idref="V-257962" selected="true" /><select idref="V-257963" selected="true" /><select idref="V-257964" selected="true" /><select idref="V-257965" selected="true" /><select idref="V-257966" selected="true" /><select idref="V-257967" selected="true" /><select idref="V-257968" selected="true" /><select idref="V-257969" selected="true" /><select idref="V-257970" selected="true" /><select idref="V-257971" selected="true" /><select idref="V-257972" selected="true" /><select idref="V-257973" selected="true" /><select idref="V-257974" selected="true" /><select idref="V-257975" selected="true" /><select idref="V-257976" selected="true" /><select idref="V-257977" selected="true" /><select idref="V-257978" selected="true" /><select idref="V-257979" selected="true" /><select idref="V-257980" selected="true" /><select idref="V-257981" selected="true" /><select idref="V-257982" selected="true" /><select idref="V-257983" selected="true" /><select idref="V-257984" selected="true" /><select idref="V-257985" selected="true" /><select idref="V-257986" selected="true" /><select idref="V-257989" selected="true" /><select idref="V-257991" selected="true" /><select idref="V-257992" selected="true" /><select idref="V-257993" selected="true" /><select idref="V-257994" selected="true" /><select idref="V-257995" selected="true" /><select idref="V-257996" selected="true" /><select idref="V-257997" selected="true" /><select idref="V-257998" selected="true" /><select idref="V-257999" selected="true" /><select idref="V-258000" selected="true" /><select idref="V-258001" selected="true" /><select idref="V-258002" selected="true" /><select idref="V-258003" selected="true" /><select idref="V-258004" selected="true" /><select idref="V-258005" selected="true" /><select idref="V-258006" selected="true" /><select idref="V-258007" selected="true" /><select idref="V-258008" selected="true" /><select idref="V-258009" selected="true" /><select idref="V-258011" selected="true" /><select idref="V-258012" selected="true" /><select idref="V-258013" selected="true" /><select idref="V-258014" selected="true" /><select idref="V-258015" selected="true" /><select idref="V-258016" selected="true" /><select idref="V-258017" selected="true" /><select idref="V-258018" selected="true" /><select idref="V-258019" selected="true" /><select idref="V-258020" selected="true" /><select idref="V-258021" selected="true" /><select idref="V-258022" selected="true" /><select idref="V-258023" selected="true" /><select idref="V-258024" selected="true" /><select idref="V-258025" selected="true" /><select idref="V-258026" selected="true" /><select idref="V-258027" selected="true" /><select idref="V-258028" selected="true" /><select idref="V-258029" selected="true" /><select idref="V-258030" selected="true" /><select idref="V-258031" selected="true" /><select idref="V-258032" selected="true" /><select idref="V-258033" selected="true" /><select idref="V-258034" selected="true" /><select idref="V-258035" selected="true" /><select idref="V-258036" selected="true" /><select idref="V-258037" selected="true" /><select idref="V-258038" selected="true" /><select idref="V-258039" selected="true" /><select idref="V-258040" selected="true" /><select idref="V-258041" selected="true" /><select idref="V-258042" selected="true" /><select idref="V-258043" selected="true" /><select idref="V-258044" selected="true" /><select idref="V-258045" selected="true" /><select idref="V-258046" selected="true" /><select idref="V-258047" selected="true" /><select idref="V-258048" selected="true" /><select idref="V-258049" selected="true" /><select idref="V-258050" selected="true" /><select idref="V-258051" selected="true" /><select idref="V-258052" selected="true" /><select idref="V-258053" selected="true" /><select idref="V-258054" selected="true" /><select idref="V-258055" selected="true" /><select idref="V-258056" selected="true" /><select idref="V-258057" selected="true" /><select idref="V-258058" selected="true" /><select idref="V-258059" selected="true" /><select idref="V-258060" selected="true" /><select idref="V-258061" selected="true" /><select idref="V-258062" selected="true" /><select idref="V-258068" selected="true" /><select idref="V-258069" selected="true" /><select idref="V-258070" selected="true" /><select idref="V-258071" selected="true" /><select idref="V-258072" selected="true" /><select idref="V-258073" selected="true" /><select idref="V-258074" selected="true" /><select idref="V-258075" selected="true" /><select idref="V-258076" selected="true" /><select idref="V-258077" selected="true" /><select idref="V-258078" selected="true" /><select idref="V-258079" selected="true" /><select idref="V-258080" selected="true" /><select idref="V-258081" selected="true" /><select idref="V-258082" selected="true" /><select idref="V-258083" selected="true" /><select idref="V-258084" selected="true" /><select idref="V-258085" selected="true" /><select idref="V-258086" selected="true" /><select idref="V-258087" selected="true" /><select idref="V-258088" selected="true" /><select idref="V-258089" selected="true" /><select idref="V-258090" selected="true" /><select idref="V-258091" selected="true" /><select idref="V-258094" selected="true" /><select idref="V-258095" selected="true" /><select idref="V-258096" selected="true" /><select idref="V-258097" selected="true" /><select idref="V-258098" selected="true" /><select idref="V-258099" selected="true" /><select idref="V-258100" selected="true" /><select idref="V-258101" selected="true" /><select idref="V-258102" selected="true" /><select idref="V-258103" selected="true" /><select idref="V-258104" selected="true" /><select idref="V-258105" selected="true" /><select idref="V-258106" selected="true" /><select idref="V-258107" selected="true" /><select idref="V-258109" selected="true" /><select idref="V-258110" selected="true" /><select idref="V-258111" selected="true" /><select idref="V-258112" selected="true" /><select idref="V-258113" selected="true" /><select idref="V-258114" selected="true" /><select idref="V-258115" selected="true" /><select idref="V-258116" selected="true" /><select idref="V-258117" selected="true" /><select idref="V-258118" selected="true" /><select idref="V-258120" selected="true" /><select idref="V-258121" selected="true" /><select idref="V-258122" selected="true" /><select idref="V-258123" selected="true" /><select idref="V-258124" selected="true" /><select idref="V-258125" selected="true" /><select idref="V-258126" selected="true" /><select idref="V-258127" selected="true" /><select idref="V-258128" selected="true" /><select idref="V-258129" selected="true" /><select idref="V-258131" selected="true" /><select idref="V-258132" selected="true" /><select idref="V-258133" selected="true" /><select idref="V-258134" selected="true" /><select idref="V-258135" selected="true" /><select idref="V-258136" selected="true" /><select idref="V-258137" selected="true" /><select idref="V-258138" selected="true" /><select idref="V-258139" selected="true" /><select idref="V-258140" selected="true" /><select idref="V-258141" selected="true" /><select idref="V-258142" selected="true" /><select idref="V-258143" selected="true" /><select idref="V-258144" selected="true" /><select idref="V-258146" selected="true" /><select idref="V-258147" selected="true" /><select idref="V-258148" selected="true" /><select idref="V-258149" selected="true" /><select idref="V-258150" selected="true" /><select idref="V-258151" selected="true" /><select idref="V-258152" selected="true" /><select idref="V-258153" selected="true" /><select idref="V-258154" selected="true" /><select idref="V-258155" selected="true" /><select idref="V-258156" selected="true" /><select idref="V-258157" selected="true" /><select idref="V-258158" selected="true" /><select idref="V-258159" selected="true" /><select idref="V-258160" selected="true" /><select idref="V-258161" selected="true" /><select idref="V-258162" selected="true" /><select idref="V-258163" selected="true" /><select idref="V-258164" selected="true" /><select idref="V-258165" selected="true" /><select idref="V-258166" selected="true" /><select idref="V-258167" selected="true" /><select idref="V-258168" selected="true" /><select idref="V-258169" selected="true" /><select idref="V-258170" selected="true" /><select idref="V-258171" selected="true" /><select idref="V-258173" selected="true" /><select idref="V-258174" selected="true" /><select idref="V-258175" selected="true" /><select idref="V-258176" selected="true" /><select idref="V-258177" selected="true" /><select idref="V-258178" selected="true" /><select idref="V-258179" selected="true" /><select idref="V-258180" selected="true" /><select idref="V-258181" selected="true" /><select idref="V-258182" selected="true" /><select idref="V-258183" selected="true" /><select idref="V-258184" selected="true" /><select idref="V-258185" selected="true" /><select idref="V-258186" selected="true" /><select idref="V-258187" selected="true" /><select idref="V-258188" selected="true" /><select idref="V-258189" selected="true" /><select idref="V-258190" selected="true" /><select idref="V-258191" selected="true" /><select idref="V-258192" selected="true" /><select idref="V-258193" selected="true" /><select idref="V-258194" selected="true" /><select idref="V-258195" selected="true" /><select idref="V-258196" selected="true" /><select idref="V-258197" selected="true" /><select idref="V-258198" selected="true" /><select idref="V-258199" selected="true" /><select idref="V-258200" selected="true" /><select idref="V-258201" selected="true" /><select idref="V-258202" selected="true" /><select idref="V-258203" selected="true" /><select idref="V-258204" selected="true" /><select idref="V-258205" selected="true" /><select idref="V-258206" selected="true" /><select idref="V-258207" selected="true" /><select idref="V-258208" selected="true" /><select idref="V-258209" selected="true" /><select idref="V-258210" selected="true" /><select idref="V-258211" selected="true" /><select idref="V-258212" selected="true" /><select idref="V-258213" selected="true" /><select idref="V-258214" selected="true" /><select idref="V-258215" selected="true" /><select idref="V-258216" selected="true" /><select idref="V-258217" selected="true" /><select idref="V-258218" selected="true" /><select idref="V-258219" selected="true" /><select idref="V-258220" selected="true" /><select idref="V-258221" selected="true" /><select idref="V-258222" selected="true" /><select idref="V-258223" selected="true" /><select idref="V-258224" selected="true" /><select idref="V-258225" selected="true" /><select idref="V-258227" selected="true" /><select idref="V-258228" selected="true" /><select idref="V-258229" selected="true" /><select idref="V-258230" selected="true" /><select idref="V-258231" selected="true" /><select idref="V-258232" selected="true" /><select idref="V-258233" selected="true" /><select idref="V-258234" selected="true" /><select idref="V-258236" selected="true" /><select idref="V-258241" selected="true" /><select idref="V-258242" selected="true" /><select idref="V-270174" selected="true" /><select idref="V-270175" selected="true" /><select idref="V-270176" selected="true" /><select idref="V-270177" selected="true" /><select idref="V-270178" selected="true" /><select idref="V-270180" selected="true" /><select idref="V-272488" selected="true" /><select idref="V-272496" selected="true" /></Profile><Profile id="MAC-1_Public"><title>I - Mission Critical Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-257777" selected="true" /><select idref="V-257778" selected="true" /><select idref="V-257779" selected="true" /><select idref="V-257781" selected="true" /><select idref="V-257782" selected="true" /><select idref="V-257783" selected="true" /><select idref="V-257784" selected="true" /><select idref="V-257785" selected="true" /><select idref="V-257786" selected="true" /><select idref="V-257787" selected="true" /><select idref="V-257788" selected="true" /><select idref="V-257789" selected="true" /><select idref="V-257790" selected="true" /><select idref="V-257791" selected="true" /><select idref="V-257792" selected="true" /><select idref="V-257793" selected="true" /><select idref="V-257794" selected="true" /><select idref="V-257795" selected="true" /><select idref="V-257796" selected="true" /><select idref="V-257797" selected="true" /><select idref="V-257798" selected="true" /><select idref="V-257799" selected="true" /><select idref="V-257800" selected="true" /><select idref="V-257801" selected="true" /><select idref="V-257802" selected="true" /><select idref="V-257803" selected="true" /><select idref="V-257804" selected="true" /><select idref="V-257805" selected="true" /><select idref="V-257806" selected="true" /><select idref="V-257807" selected="true" /><select idref="V-257808" selected="true" /><select idref="V-257809" selected="true" /><select idref="V-257810" selected="true" /><select idref="V-257811" selected="true" /><select idref="V-257812" selected="true" /><select idref="V-257813" selected="true" /><select idref="V-257814" selected="true" /><select idref="V-257815" selected="true" /><select idref="V-257816" selected="true" /><select idref="V-257817" selected="true" /><select idref="V-257818" selected="true" /><select idref="V-257819" selected="true" /><select idref="V-257820" selected="true" /><select idref="V-257821" selected="true" /><select idref="V-257822" selected="true" /><select idref="V-257823" selected="true" /><select idref="V-257824" selected="true" /><select idref="V-257825" selected="true" /><select idref="V-257826" selected="true" /><select idref="V-257827" selected="true" /><select idref="V-257828" selected="true" /><select idref="V-257829" selected="true" /><select idref="V-257830" selected="true" /><select idref="V-257831" selected="true" /><select idref="V-257832" selected="true" /><select idref="V-257833" selected="true" /><select idref="V-257834" selected="true" /><select idref="V-257835" selected="true" /><select idref="V-257836" selected="true" /><select idref="V-257837" selected="true" /><select idref="V-257838" selected="true" /><select idref="V-257839" selected="true" /><select idref="V-257840" selected="true" /><select idref="V-257841" selected="true" /><select idref="V-257842" selected="true" /><select idref="V-257843" selected="true" /><select idref="V-257844" selected="true" /><select idref="V-257845" selected="true" /><select idref="V-257846" selected="true" /><select idref="V-257847" selected="true" /><select idref="V-257848" selected="true" /><select idref="V-257849" selected="true" /><select idref="V-257850" selected="true" /><select idref="V-257851" selected="true" /><select idref="V-257852" selected="true" /><select idref="V-257854" selected="true" /><select idref="V-257855" selected="true" /><select idref="V-257856" selected="true" /><select idref="V-257857" selected="true" /><select idref="V-257858" selected="true" /><select idref="V-257859" selected="true" /><select idref="V-257860" selected="true" /><select idref="V-257861" selected="true" /><select idref="V-257862" selected="true" /><select idref="V-257863" selected="true" /><select idref="V-257864" selected="true" /><select idref="V-257865" selected="true" /><select idref="V-257866" selected="true" /><select idref="V-257867" selected="true" /><select idref="V-257868" selected="true" /><select idref="V-257869" selected="true" /><select idref="V-257870" selected="true" /><select idref="V-257871" selected="true" /><select idref="V-257872" selected="true" /><select idref="V-257873" selected="true" /><select idref="V-257874" selected="true" /><select idref="V-257875" selected="true" /><select idref="V-257876" selected="true" /><select idref="V-257877" selected="true" /><select idref="V-257878" selected="true" /><select idref="V-257879" selected="true" /><select idref="V-257880" selected="true" /><select idref="V-257881" selected="true" /><select idref="V-257882" selected="true" /><select idref="V-257883" selected="true" /><select idref="V-257884" selected="true" /><select idref="V-257885" selected="true" /><select idref="V-257886" selected="true" /><select idref="V-257887" selected="true" /><select idref="V-257888" selected="true" /><select idref="V-257889" selected="true" /><select idref="V-257890" selected="true" /><select idref="V-257891" selected="true" /><select idref="V-257892" selected="true" /><select idref="V-257893" selected="true" /><select idref="V-257894" selected="true" /><select idref="V-257895" selected="true" /><select idref="V-257896" selected="true" /><select idref="V-257897" selected="true" /><select idref="V-257898" selected="true" /><select idref="V-257899" selected="true" /><select idref="V-257900" selected="true" /><select idref="V-257901" selected="true" /><select idref="V-257902" selected="true" /><select idref="V-257903" selected="true" /><select idref="V-257904" selected="true" /><select idref="V-257905" selected="true" /><select idref="V-257906" selected="true" /><select idref="V-257907" selected="true" /><select idref="V-257908" selected="true" /><select idref="V-257909" selected="true" /><select idref="V-257910" selected="true" /><select idref="V-257911" selected="true" /><select idref="V-257912" selected="true" /><select idref="V-257913" selected="true" /><select idref="V-257914" selected="true" /><select idref="V-257915" selected="true" /><select idref="V-257916" selected="true" /><select idref="V-257917" selected="true" /><select idref="V-257918" selected="true" /><select idref="V-257919" selected="true" /><select idref="V-257920" selected="true" /><select idref="V-257921" selected="true" /><select idref="V-257922" selected="true" /><select idref="V-257923" selected="true" /><select idref="V-257924" selected="true" /><select idref="V-257925" selected="true" /><select idref="V-257926" selected="true" /><select idref="V-257927" selected="true" /><select idref="V-257928" selected="true" /><select idref="V-257929" selected="true" /><select idref="V-257930" selected="true" /><select idref="V-257931" selected="true" /><select idref="V-257932" selected="true" /><select idref="V-257934" selected="true" /><select idref="V-257935" selected="true" /><select idref="V-257936" selected="true" /><select idref="V-257937" selected="true" /><select idref="V-257939" selected="true" /><select idref="V-257940" selected="true" /><select idref="V-257941" selected="true" /><select idref="V-257942" selected="true" /><select idref="V-257943" selected="true" /><select idref="V-257944" selected="true" /><select idref="V-257945" selected="true" /><select idref="V-257946" selected="true" /><select idref="V-257947" selected="true" /><select idref="V-257948" selected="true" /><select idref="V-257949" selected="true" /><select idref="V-257950" selected="true" /><select idref="V-257951" selected="true" /><select idref="V-257953" selected="true" /><select idref="V-257954" selected="true" /><select idref="V-257955" selected="true" /><select idref="V-257956" selected="true" /><select idref="V-257957" selected="true" /><select idref="V-257958" selected="true" /><select idref="V-257959" selected="true" /><select idref="V-257960" selected="true" /><select idref="V-257961" selected="true" /><select idref="V-257962" selected="true" /><select idref="V-257963" selected="true" /><select idref="V-257964" selected="true" /><select idref="V-257965" selected="true" /><select idref="V-257966" selected="true" /><select idref="V-257967" selected="true" /><select idref="V-257968" selected="true" /><select idref="V-257969" selected="true" /><select idref="V-257970" selected="true" /><select idref="V-257971" selected="true" /><select idref="V-257972" selected="true" /><select idref="V-257973" selected="true" /><select idref="V-257974" selected="true" /><select idref="V-257975" selected="true" /><select idref="V-257976" selected="true" /><select idref="V-257977" selected="true" /><select idref="V-257978" selected="true" /><select idref="V-257979" selected="true" /><select idref="V-257980" selected="true" /><select idref="V-257981" selected="true" /><select idref="V-257982" selected="true" /><select idref="V-257983" selected="true" /><select idref="V-257984" selected="true" /><select idref="V-257985" selected="true" /><select idref="V-257986" selected="true" /><select idref="V-257989" selected="true" /><select idref="V-257991" selected="true" /><select idref="V-257992" selected="true" /><select idref="V-257993" selected="true" /><select idref="V-257994" selected="true" /><select idref="V-257995" selected="true" /><select idref="V-257996" selected="true" /><select idref="V-257997" selected="true" /><select idref="V-257998" selected="true" /><select idref="V-257999" selected="true" /><select idref="V-258000" selected="true" /><select idref="V-258001" selected="true" /><select idref="V-258002" selected="true" /><select idref="V-258003" selected="true" /><select idref="V-258004" selected="true" /><select idref="V-258005" selected="true" /><select idref="V-258006" selected="true" /><select idref="V-258007" selected="true" /><select idref="V-258008" selected="true" /><select idref="V-258009" selected="true" /><select idref="V-258011" selected="true" /><select idref="V-258012" selected="true" /><select idref="V-258013" selected="true" /><select idref="V-258014" selected="true" /><select idref="V-258015" selected="true" /><select idref="V-258016" selected="true" /><select idref="V-258017" selected="true" /><select idref="V-258018" selected="true" /><select idref="V-258019" selected="true" /><select idref="V-258020" selected="true" /><select idref="V-258021" selected="true" /><select idref="V-258022" selected="true" /><select idref="V-258023" selected="true" /><select idref="V-258024" selected="true" /><select idref="V-258025" selected="true" /><select idref="V-258026" selected="true" /><select idref="V-258027" selected="true" /><select idref="V-258028" selected="true" /><select idref="V-258029" selected="true" /><select idref="V-258030" selected="true" /><select idref="V-258031" selected="true" /><select idref="V-258032" selected="true" /><select idref="V-258033" selected="true" /><select idref="V-258034" selected="true" /><select idref="V-258035" selected="true" /><select idref="V-258036" selected="true" /><select idref="V-258037" selected="true" /><select idref="V-258038" selected="true" /><select idref="V-258039" selected="true" /><select idref="V-258040" selected="true" /><select idref="V-258041" selected="true" /><select idref="V-258042" selected="true" /><select idref="V-258043" selected="true" /><select idref="V-258044" selected="true" /><select idref="V-258045" selected="true" /><select idref="V-258046" selected="true" /><select idref="V-258047" selected="true" /><select idref="V-258048" selected="true" /><select idref="V-258049" selected="true" /><select idref="V-258050" selected="true" /><select idref="V-258051" selected="true" /><select idref="V-258052" selected="true" /><select idref="V-258053" selected="true" /><select idref="V-258054" selected="true" /><select idref="V-258055" selected="true" /><select idref="V-258056" selected="true" /><select idref="V-258057" selected="true" /><select idref="V-258058" selected="true" /><select idref="V-258059" selected="true" /><select idref="V-258060" selected="true" /><select idref="V-258061" selected="true" /><select idref="V-258062" selected="true" /><select idref="V-258068" selected="true" /><select idref="V-258069" selected="true" /><select idref="V-258070" selected="true" /><select idref="V-258071" selected="true" /><select idref="V-258072" selected="true" /><select idref="V-258073" selected="true" /><select idref="V-258074" selected="true" /><select idref="V-258075" selected="true" /><select idref="V-258076" selected="true" /><select idref="V-258077" selected="true" /><select idref="V-258078" selected="true" /><select idref="V-258079" selected="true" /><select idref="V-258080" selected="true" /><select idref="V-258081" selected="true" /><select idref="V-258082" selected="true" /><select idref="V-258083" selected="true" /><select idref="V-258084" selected="true" /><select idref="V-258085" selected="true" /><select idref="V-258086" selected="true" /><select idref="V-258087" selected="true" /><select idref="V-258088" selected="true" /><select idref="V-258089" selected="true" /><select idref="V-258090" selected="true" /><select idref="V-258091" selected="true" /><select idref="V-258094" selected="true" /><select idref="V-258095" selected="true" /><select idref="V-258096" selected="true" /><select idref="V-258097" selected="true" /><select idref="V-258098" selected="true" /><select idref="V-258099" selected="true" /><select idref="V-258100" selected="true" /><select idref="V-258101" selected="true" /><select idref="V-258102" selected="true" /><select idref="V-258103" selected="true" /><select idref="V-258104" selected="true" /><select idref="V-258105" selected="true" /><select idref="V-258106" selected="true" /><select idref="V-258107" selected="true" /><select idref="V-258109" selected="true" /><select idref="V-258110" selected="true" /><select idref="V-258111" selected="true" /><select idref="V-258112" selected="true" /><select idref="V-258113" selected="true" /><select idref="V-258114" selected="true" /><select idref="V-258115" selected="true" /><select idref="V-258116" selected="true" /><select idref="V-258117" selected="true" /><select idref="V-258118" selected="true" /><select idref="V-258120" selected="true" /><select idref="V-258121" selected="true" /><select idref="V-258122" selected="true" /><select idref="V-258123" selected="true" /><select idref="V-258124" selected="true" /><select idref="V-258125" selected="true" /><select idref="V-258126" selected="true" /><select idref="V-258127" selected="true" /><select idref="V-258128" selected="true" /><select idref="V-258129" selected="true" /><select idref="V-258131" selected="true" /><select idref="V-258132" selected="true" /><select idref="V-258133" selected="true" /><select idref="V-258134" selected="true" /><select idref="V-258135" selected="true" /><select idref="V-258136" selected="true" /><select idref="V-258137" selected="true" /><select idref="V-258138" selected="true" /><select idref="V-258139" selected="true" /><select idref="V-258140" selected="true" /><select idref="V-258141" selected="true" /><select idref="V-258142" selected="true" /><select idref="V-258143" selected="true" /><select idref="V-258144" selected="true" /><select idref="V-258146" selected="true" /><select idref="V-258147" selected="true" /><select idref="V-258148" selected="true" /><select idref="V-258149" selected="true" /><select idref="V-258150" selected="true" /><select idref="V-258151" selected="true" /><select idref="V-258152" selected="true" /><select idref="V-258153" selected="true" /><select idref="V-258154" selected="true" /><select idref="V-258155" selected="true" /><select idref="V-258156" selected="true" /><select idref="V-258157" selected="true" /><select idref="V-258158" selected="true" /><select idref="V-258159" selected="true" /><select idref="V-258160" selected="true" /><select idref="V-258161" selected="true" /><select idref="V-258162" selected="true" /><select idref="V-258163" selected="true" /><select idref="V-258164" selected="true" /><select idref="V-258165" selected="true" /><select idref="V-258166" selected="true" /><select idref="V-258167" selected="true" /><select idref="V-258168" selected="true" /><select idref="V-258169" selected="true" /><select idref="V-258170" selected="true" /><select idref="V-258171" selected="true" /><select idref="V-258173" selected="true" /><select idref="V-258174" selected="true" /><select idref="V-258175" selected="true" /><select idref="V-258176" selected="true" /><select idref="V-258177" selected="true" /><select idref="V-258178" selected="true" /><select idref="V-258179" selected="true" /><select idref="V-258180" selected="true" /><select idref="V-258181" selected="true" /><select idref="V-258182" selected="true" /><select idref="V-258183" selected="true" /><select idref="V-258184" selected="true" /><select idref="V-258185" selected="true" /><select idref="V-258186" selected="true" /><select idref="V-258187" selected="true" /><select idref="V-258188" selected="true" /><select idref="V-258189" selected="true" /><select idref="V-258190" selected="true" /><select idref="V-258191" selected="true" /><select idref="V-258192" selected="true" /><select idref="V-258193" selected="true" /><select idref="V-258194" selected="true" /><select idref="V-258195" selected="true" /><select idref="V-258196" selected="true" /><select idref="V-258197" selected="true" /><select idref="V-258198" selected="true" /><select idref="V-258199" selected="true" /><select idref="V-258200" selected="true" /><select idref="V-258201" selected="true" /><select idref="V-258202" selected="true" /><select idref="V-258203" selected="true" /><select idref="V-258204" selected="true" /><select idref="V-258205" selected="true" /><select idref="V-258206" selected="true" /><select idref="V-258207" selected="true" /><select idref="V-258208" selected="true" /><select idref="V-258209" selected="true" /><select idref="V-258210" selected="true" /><select idref="V-258211" selected="true" /><select idref="V-258212" selected="true" /><select idref="V-258213" selected="true" /><select idref="V-258214" selected="true" /><select idref="V-258215" selected="true" /><select idref="V-258216" selected="true" /><select idref="V-258217" selected="true" /><select idref="V-258218" selected="true" /><select idref="V-258219" selected="true" /><select idref="V-258220" selected="true" /><select idref="V-258221" selected="true" /><select idref="V-258222" selected="true" /><select idref="V-258223" selected="true" /><select idref="V-258224" selected="true" /><select idref="V-258225" selected="true" /><select idref="V-258227" selected="true" /><select idref="V-258228" selected="true" /><select idref="V-258229" selected="true" /><select idref="V-258230" selected="true" /><select idref="V-258231" selected="true" /><select idref="V-258232" selected="true" /><select idref="V-258233" selected="true" /><select idref="V-258234" selected="true" /><select idref="V-258236" selected="true" /><select idref="V-258241" selected="true" /><select idref="V-258242" selected="true" /><select idref="V-270174" selected="true" /><select idref="V-270175" selected="true" /><select idref="V-270176" selected="true" /><select idref="V-270177" selected="true" /><select idref="V-270178" selected="true" /><select idref="V-270180" selected="true" /><select idref="V-272488" selected="true" /><select idref="V-272496" selected="true" /></Profile><Profile id="MAC-1_Sensitive"><title>I - Mission Critical Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-257777" selected="true" /><select idref="V-257778" selected="true" /><select idref="V-257779" selected="true" /><select idref="V-257781" selected="true" /><select idref="V-257782" selected="true" /><select idref="V-257783" selected="true" /><select idref="V-257784" selected="true" /><select idref="V-257785" selected="true" /><select idref="V-257786" selected="true" /><select idref="V-257787" selected="true" /><select idref="V-257788" selected="true" /><select idref="V-257789" selected="true" /><select idref="V-257790" selected="true" /><select idref="V-257791" selected="true" /><select idref="V-257792" selected="true" /><select idref="V-257793" selected="true" /><select idref="V-257794" selected="true" /><select idref="V-257795" selected="true" /><select idref="V-257796" selected="true" /><select idref="V-257797" selected="true" /><select idref="V-257798" selected="true" /><select idref="V-257799" selected="true" /><select idref="V-257800" selected="true" /><select idref="V-257801" selected="true" /><select idref="V-257802" selected="true" /><select idref="V-257803" selected="true" /><select idref="V-257804" selected="true" /><select idref="V-257805" selected="true" /><select idref="V-257806" selected="true" /><select idref="V-257807" selected="true" /><select idref="V-257808" selected="true" /><select idref="V-257809" selected="true" /><select idref="V-257810" selected="true" /><select idref="V-257811" selected="true" /><select idref="V-257812" selected="true" /><select idref="V-257813" selected="true" /><select idref="V-257814" selected="true" /><select idref="V-257815" selected="true" /><select idref="V-257816" selected="true" /><select idref="V-257817" selected="true" /><select idref="V-257818" selected="true" /><select idref="V-257819" selected="true" /><select idref="V-257820" selected="true" /><select idref="V-257821" selected="true" /><select idref="V-257822" selected="true" /><select idref="V-257823" selected="true" /><select idref="V-257824" selected="true" /><select idref="V-257825" selected="true" /><select idref="V-257826" selected="true" /><select idref="V-257827" selected="true" /><select idref="V-257828" selected="true" /><select idref="V-257829" selected="true" /><select idref="V-257830" selected="true" /><select idref="V-257831" selected="true" /><select idref="V-257832" selected="true" /><select idref="V-257833" selected="true" /><select idref="V-257834" selected="true" /><select idref="V-257835" selected="true" /><select idref="V-257836" selected="true" /><select idref="V-257837" selected="true" /><select idref="V-257838" selected="true" /><select idref="V-257839" selected="true" /><select idref="V-257840" selected="true" /><select idref="V-257841" selected="true" /><select idref="V-257842" selected="true" /><select idref="V-257843" selected="true" /><select idref="V-257844" selected="true" /><select idref="V-257845" selected="true" /><select idref="V-257846" selected="true" /><select idref="V-257847" selected="true" /><select idref="V-257848" selected="true" /><select idref="V-257849" selected="true" /><select idref="V-257850" selected="true" /><select idref="V-257851" selected="true" /><select idref="V-257852" selected="true" /><select idref="V-257854" selected="true" /><select idref="V-257855" selected="true" /><select idref="V-257856" selected="true" /><select idref="V-257857" selected="true" /><select idref="V-257858" selected="true" /><select idref="V-257859" selected="true" /><select idref="V-257860" selected="true" /><select idref="V-257861" selected="true" /><select idref="V-257862" selected="true" /><select idref="V-257863" selected="true" /><select idref="V-257864" selected="true" /><select idref="V-257865" selected="true" /><select idref="V-257866" selected="true" /><select idref="V-257867" selected="true" /><select idref="V-257868" selected="true" /><select idref="V-257869" selected="true" /><select idref="V-257870" selected="true" /><select idref="V-257871" selected="true" /><select idref="V-257872" selected="true" /><select idref="V-257873" selected="true" /><select idref="V-257874" selected="true" /><select idref="V-257875" selected="true" /><select idref="V-257876" selected="true" /><select idref="V-257877" selected="true" /><select idref="V-257878" selected="true" /><select idref="V-257879" selected="true" /><select idref="V-257880" selected="true" /><select idref="V-257881" selected="true" /><select idref="V-257882" selected="true" /><select idref="V-257883" selected="true" /><select idref="V-257884" selected="true" /><select idref="V-257885" selected="true" /><select idref="V-257886" selected="true" /><select idref="V-257887" selected="true" /><select idref="V-257888" selected="true" /><select idref="V-257889" selected="true" /><select idref="V-257890" selected="true" /><select idref="V-257891" selected="true" /><select idref="V-257892" selected="true" /><select idref="V-257893" selected="true" /><select idref="V-257894" selected="true" /><select idref="V-257895" selected="true" /><select idref="V-257896" selected="true" /><select idref="V-257897" selected="true" /><select idref="V-257898" selected="true" /><select idref="V-257899" selected="true" /><select idref="V-257900" selected="true" /><select idref="V-257901" selected="true" /><select idref="V-257902" selected="true" /><select idref="V-257903" selected="true" /><select idref="V-257904" selected="true" /><select idref="V-257905" selected="true" /><select idref="V-257906" selected="true" /><select idref="V-257907" selected="true" /><select idref="V-257908" selected="true" /><select idref="V-257909" selected="true" /><select idref="V-257910" selected="true" /><select idref="V-257911" selected="true" /><select idref="V-257912" selected="true" /><select idref="V-257913" selected="true" /><select idref="V-257914" selected="true" /><select idref="V-257915" selected="true" /><select idref="V-257916" selected="true" /><select idref="V-257917" selected="true" /><select idref="V-257918" selected="true" /><select idref="V-257919" selected="true" /><select idref="V-257920" selected="true" /><select idref="V-257921" selected="true" /><select idref="V-257922" selected="true" /><select idref="V-257923" selected="true" /><select idref="V-257924" selected="true" /><select idref="V-257925" selected="true" /><select idref="V-257926" selected="true" /><select idref="V-257927" selected="true" /><select idref="V-257928" selected="true" /><select idref="V-257929" selected="true" /><select idref="V-257930" selected="true" /><select idref="V-257931" selected="true" /><select idref="V-257932" selected="true" /><select idref="V-257934" selected="true" /><select idref="V-257935" selected="true" /><select idref="V-257936" selected="true" /><select idref="V-257937" selected="true" /><select idref="V-257939" selected="true" /><select idref="V-257940" selected="true" /><select idref="V-257941" selected="true" /><select idref="V-257942" selected="true" /><select idref="V-257943" selected="true" /><select idref="V-257944" selected="true" /><select idref="V-257945" selected="true" /><select idref="V-257946" selected="true" /><select idref="V-257947" selected="true" /><select idref="V-257948" selected="true" /><select idref="V-257949" selected="true" /><select idref="V-257950" selected="true" /><select idref="V-257951" selected="true" /><select idref="V-257953" selected="true" /><select idref="V-257954" selected="true" /><select idref="V-257955" selected="true" /><select idref="V-257956" selected="true" /><select idref="V-257957" selected="true" /><select idref="V-257958" selected="true" /><select idref="V-257959" selected="true" /><select idref="V-257960" selected="true" /><select idref="V-257961" selected="true" /><select idref="V-257962" selected="true" /><select idref="V-257963" selected="true" /><select idref="V-257964" selected="true" /><select idref="V-257965" selected="true" /><select idref="V-257966" selected="true" /><select idref="V-257967" selected="true" /><select idref="V-257968" selected="true" /><select idref="V-257969" selected="true" /><select idref="V-257970" selected="true" /><select idref="V-257971" selected="true" /><select idref="V-257972" selected="true" /><select idref="V-257973" selected="true" /><select idref="V-257974" selected="true" /><select idref="V-257975" selected="true" /><select idref="V-257976" selected="true" /><select idref="V-257977" selected="true" /><select idref="V-257978" selected="true" /><select idref="V-257979" selected="true" /><select idref="V-257980" selected="true" /><select idref="V-257981" selected="true" /><select idref="V-257982" selected="true" /><select idref="V-257983" selected="true" /><select idref="V-257984" selected="true" /><select idref="V-257985" selected="true" /><select idref="V-257986" selected="true" /><select idref="V-257989" selected="true" /><select idref="V-257991" selected="true" /><select idref="V-257992" selected="true" /><select idref="V-257993" selected="true" /><select idref="V-257994" selected="true" /><select idref="V-257995" selected="true" /><select idref="V-257996" selected="true" /><select idref="V-257997" selected="true" /><select idref="V-257998" selected="true" /><select idref="V-257999" selected="true" /><select idref="V-258000" selected="true" /><select idref="V-258001" selected="true" /><select idref="V-258002" selected="true" /><select idref="V-258003" selected="true" /><select idref="V-258004" selected="true" /><select idref="V-258005" selected="true" /><select idref="V-258006" selected="true" /><select idref="V-258007" selected="true" /><select idref="V-258008" selected="true" /><select idref="V-258009" selected="true" /><select idref="V-258011" selected="true" /><select idref="V-258012" selected="true" /><select idref="V-258013" selected="true" /><select idref="V-258014" selected="true" /><select idref="V-258015" selected="true" /><select idref="V-258016" selected="true" /><select idref="V-258017" selected="true" /><select idref="V-258018" selected="true" /><select idref="V-258019" selected="true" /><select idref="V-258020" selected="true" /><select idref="V-258021" selected="true" /><select idref="V-258022" selected="true" /><select idref="V-258023" selected="true" /><select idref="V-258024" selected="true" /><select idref="V-258025" selected="true" /><select idref="V-258026" selected="true" /><select idref="V-258027" selected="true" /><select idref="V-258028" selected="true" /><select idref="V-258029" selected="true" /><select idref="V-258030" selected="true" /><select idref="V-258031" selected="true" /><select idref="V-258032" selected="true" /><select idref="V-258033" selected="true" /><select idref="V-258034" selected="true" /><select idref="V-258035" selected="true" /><select idref="V-258036" selected="true" /><select idref="V-258037" selected="true" /><select idref="V-258038" selected="true" /><select idref="V-258039" selected="true" /><select idref="V-258040" selected="true" /><select idref="V-258041" selected="true" /><select idref="V-258042" selected="true" /><select idref="V-258043" selected="true" /><select idref="V-258044" selected="true" /><select idref="V-258045" selected="true" /><select idref="V-258046" selected="true" /><select idref="V-258047" selected="true" /><select idref="V-258048" selected="true" /><select idref="V-258049" selected="true" /><select idref="V-258050" selected="true" /><select idref="V-258051" selected="true" /><select idref="V-258052" selected="true" /><select idref="V-258053" selected="true" /><select idref="V-258054" selected="true" /><select idref="V-258055" selected="true" /><select idref="V-258056" selected="true" /><select idref="V-258057" selected="true" /><select idref="V-258058" selected="true" /><select idref="V-258059" selected="true" /><select idref="V-258060" selected="true" /><select idref="V-258061" selected="true" /><select idref="V-258062" selected="true" /><select idref="V-258068" selected="true" /><select idref="V-258069" selected="true" /><select idref="V-258070" selected="true" /><select idref="V-258071" selected="true" /><select idref="V-258072" selected="true" /><select idref="V-258073" selected="true" /><select idref="V-258074" selected="true" /><select idref="V-258075" selected="true" /><select idref="V-258076" selected="true" /><select idref="V-258077" selected="true" /><select idref="V-258078" selected="true" /><select idref="V-258079" selected="true" /><select idref="V-258080" selected="true" /><select idref="V-258081" selected="true" /><select idref="V-258082" selected="true" /><select idref="V-258083" selected="true" /><select idref="V-258084" selected="true" /><select idref="V-258085" selected="true" /><select idref="V-258086" selected="true" /><select idref="V-258087" selected="true" /><select idref="V-258088" selected="true" /><select idref="V-258089" selected="true" /><select idref="V-258090" selected="true" /><select idref="V-258091" selected="true" /><select idref="V-258094" selected="true" /><select idref="V-258095" selected="true" /><select idref="V-258096" selected="true" /><select idref="V-258097" selected="true" /><select idref="V-258098" selected="true" /><select idref="V-258099" selected="true" /><select idref="V-258100" selected="true" /><select idref="V-258101" selected="true" /><select idref="V-258102" selected="true" /><select idref="V-258103" selected="true" /><select idref="V-258104" selected="true" /><select idref="V-258105" selected="true" /><select idref="V-258106" selected="true" /><select idref="V-258107" selected="true" /><select idref="V-258109" selected="true" /><select idref="V-258110" selected="true" /><select idref="V-258111" selected="true" /><select idref="V-258112" selected="true" /><select idref="V-258113" selected="true" /><select idref="V-258114" selected="true" /><select idref="V-258115" selected="true" /><select idref="V-258116" selected="true" /><select idref="V-258117" selected="true" /><select idref="V-258118" selected="true" /><select idref="V-258120" selected="true" /><select idref="V-258121" selected="true" /><select idref="V-258122" selected="true" /><select idref="V-258123" selected="true" /><select idref="V-258124" selected="true" /><select idref="V-258125" selected="true" /><select idref="V-258126" selected="true" /><select idref="V-258127" selected="true" /><select idref="V-258128" selected="true" /><select idref="V-258129" selected="true" /><select idref="V-258131" selected="true" /><select idref="V-258132" selected="true" /><select idref="V-258133" selected="true" /><select idref="V-258134" selected="true" /><select idref="V-258135" selected="true" /><select idref="V-258136" selected="true" /><select idref="V-258137" selected="true" /><select idref="V-258138" selected="true" /><select idref="V-258139" selected="true" /><select idref="V-258140" selected="true" /><select idref="V-258141" selected="true" /><select idref="V-258142" selected="true" /><select idref="V-258143" selected="true" /><select idref="V-258144" selected="true" /><select idref="V-258146" selected="true" /><select idref="V-258147" selected="true" /><select idref="V-258148" selected="true" /><select idref="V-258149" selected="true" /><select idref="V-258150" selected="true" /><select idref="V-258151" selected="true" /><select idref="V-258152" selected="true" /><select idref="V-258153" selected="true" /><select idref="V-258154" selected="true" /><select idref="V-258155" selected="true" /><select idref="V-258156" selected="true" /><select idref="V-258157" selected="true" /><select idref="V-258158" selected="true" /><select idref="V-258159" selected="true" /><select idref="V-258160" selected="true" /><select idref="V-258161" selected="true" /><select idref="V-258162" selected="true" /><select idref="V-258163" selected="true" /><select idref="V-258164" selected="true" /><select idref="V-258165" selected="true" /><select idref="V-258166" selected="true" /><select idref="V-258167" selected="true" /><select idref="V-258168" selected="true" /><select idref="V-258169" selected="true" /><select idref="V-258170" selected="true" /><select idref="V-258171" selected="true" /><select idref="V-258173" selected="true" /><select idref="V-258174" selected="true" /><select idref="V-258175" selected="true" /><select idref="V-258176" selected="true" /><select idref="V-258177" selected="true" /><select idref="V-258178" selected="true" /><select idref="V-258179" selected="true" /><select idref="V-258180" selected="true" /><select idref="V-258181" selected="true" /><select idref="V-258182" selected="true" /><select idref="V-258183" selected="true" /><select idref="V-258184" selected="true" /><select idref="V-258185" selected="true" /><select idref="V-258186" selected="true" /><select idref="V-258187" selected="true" /><select idref="V-258188" selected="true" /><select idref="V-258189" selected="true" /><select idref="V-258190" selected="true" /><select idref="V-258191" selected="true" /><select idref="V-258192" selected="true" /><select idref="V-258193" selected="true" /><select idref="V-258194" selected="true" /><select idref="V-258195" selected="true" /><select idref="V-258196" selected="true" /><select idref="V-258197" selected="true" /><select idref="V-258198" selected="true" /><select idref="V-258199" selected="true" /><select idref="V-258200" selected="true" /><select idref="V-258201" selected="true" /><select idref="V-258202" selected="true" /><select idref="V-258203" selected="true" /><select idref="V-258204" selected="true" /><select idref="V-258205" selected="true" /><select idref="V-258206" selected="true" /><select idref="V-258207" selected="true" /><select idref="V-258208" selected="true" /><select idref="V-258209" selected="true" /><select idref="V-258210" selected="true" /><select idref="V-258211" selected="true" /><select idref="V-258212" selected="true" /><select idref="V-258213" selected="true" /><select idref="V-258214" selected="true" /><select idref="V-258215" selected="true" /><select idref="V-258216" selected="true" /><select idref="V-258217" selected="true" /><select idref="V-258218" selected="true" /><select idref="V-258219" selected="true" /><select idref="V-258220" selected="true" /><select idref="V-258221" selected="true" /><select idref="V-258222" selected="true" /><select idref="V-258223" selected="true" /><select idref="V-258224" selected="true" /><select idref="V-258225" selected="true" /><select idref="V-258227" selected="true" /><select idref="V-258228" selected="true" /><select idref="V-258229" selected="true" /><select idref="V-258230" selected="true" /><select idref="V-258231" selected="true" /><select idref="V-258232" selected="true" /><select idref="V-258233" selected="true" /><select idref="V-258234" selected="true" /><select idref="V-258236" selected="true" /><select idref="V-258241" selected="true" /><select idref="V-258242" selected="true" /><select idref="V-270174" selected="true" /><select idref="V-270175" selected="true" /><select idref="V-270176" selected="true" /><select idref="V-270177" selected="true" /><select idref="V-270178" selected="true" /><select idref="V-270180" selected="true" /><select idref="V-272488" selected="true" /><select idref="V-272496" selected="true" /></Profile><Profile id="MAC-2_Classified"><title>II - Mission Support Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-257777" selected="true" /><select idref="V-257778" selected="true" /><select idref="V-257779" selected="true" /><select idref="V-257781" selected="true" /><select idref="V-257782" selected="true" /><select idref="V-257783" selected="true" /><select idref="V-257784" selected="true" /><select idref="V-257785" selected="true" /><select idref="V-257786" selected="true" /><select idref="V-257787" selected="true" /><select idref="V-257788" selected="true" /><select idref="V-257789" selected="true" /><select idref="V-257790" selected="true" /><select idref="V-257791" selected="true" /><select idref="V-257792" selected="true" /><select idref="V-257793" selected="true" /><select idref="V-257794" selected="true" /><select idref="V-257795" selected="true" /><select idref="V-257796" selected="true" /><select idref="V-257797" selected="true" /><select idref="V-257798" selected="true" /><select idref="V-257799" selected="true" /><select idref="V-257800" selected="true" /><select idref="V-257801" selected="true" /><select idref="V-257802" selected="true" /><select idref="V-257803" selected="true" /><select idref="V-257804" selected="true" /><select idref="V-257805" selected="true" /><select idref="V-257806" selected="true" /><select idref="V-257807" selected="true" /><select idref="V-257808" selected="true" /><select idref="V-257809" selected="true" /><select idref="V-257810" selected="true" /><select idref="V-257811" selected="true" /><select idref="V-257812" selected="true" /><select idref="V-257813" selected="true" /><select idref="V-257814" selected="true" /><select idref="V-257815" selected="true" /><select idref="V-257816" selected="true" /><select idref="V-257817" selected="true" /><select idref="V-257818" selected="true" /><select idref="V-257819" selected="true" /><select idref="V-257820" selected="true" /><select idref="V-257821" selected="true" /><select idref="V-257822" selected="true" /><select idref="V-257823" selected="true" /><select idref="V-257824" selected="true" /><select idref="V-257825" selected="true" /><select idref="V-257826" selected="true" /><select idref="V-257827" selected="true" /><select idref="V-257828" selected="true" /><select idref="V-257829" selected="true" /><select idref="V-257830" selected="true" /><select idref="V-257831" selected="true" /><select idref="V-257832" selected="true" /><select idref="V-257833" selected="true" /><select idref="V-257834" selected="true" /><select idref="V-257835" selected="true" /><select idref="V-257836" selected="true" /><select idref="V-257837" selected="true" /><select idref="V-257838" selected="true" /><select idref="V-257839" selected="true" /><select idref="V-257840" selected="true" /><select idref="V-257841" selected="true" /><select idref="V-257842" selected="true" /><select idref="V-257843" selected="true" /><select idref="V-257844" selected="true" /><select idref="V-257845" selected="true" /><select idref="V-257846" selected="true" /><select idref="V-257847" selected="true" /><select idref="V-257848" selected="true" /><select idref="V-257849" selected="true" /><select idref="V-257850" selected="true" /><select idref="V-257851" selected="true" /><select idref="V-257852" selected="true" /><select idref="V-257854" selected="true" /><select idref="V-257855" selected="true" /><select idref="V-257856" selected="true" /><select idref="V-257857" selected="true" /><select idref="V-257858" selected="true" /><select idref="V-257859" selected="true" /><select idref="V-257860" selected="true" /><select idref="V-257861" selected="true" /><select idref="V-257862" selected="true" /><select idref="V-257863" selected="true" /><select idref="V-257864" selected="true" /><select idref="V-257865" selected="true" /><select idref="V-257866" selected="true" /><select idref="V-257867" selected="true" /><select idref="V-257868" selected="true" /><select idref="V-257869" selected="true" /><select idref="V-257870" selected="true" /><select idref="V-257871" selected="true" /><select idref="V-257872" selected="true" /><select idref="V-257873" selected="true" /><select idref="V-257874" selected="true" /><select idref="V-257875" selected="true" /><select idref="V-257876" selected="true" /><select idref="V-257877" selected="true" /><select idref="V-257878" selected="true" /><select idref="V-257879" selected="true" /><select idref="V-257880" selected="true" /><select idref="V-257881" selected="true" /><select idref="V-257882" selected="true" /><select idref="V-257883" selected="true" /><select idref="V-257884" selected="true" /><select idref="V-257885" selected="true" /><select idref="V-257886" selected="true" /><select idref="V-257887" selected="true" /><select idref="V-257888" selected="true" /><select idref="V-257889" selected="true" /><select idref="V-257890" selected="true" /><select idref="V-257891" selected="true" /><select idref="V-257892" selected="true" /><select idref="V-257893" selected="true" /><select idref="V-257894" selected="true" /><select idref="V-257895" selected="true" /><select idref="V-257896" selected="true" /><select idref="V-257897" selected="true" /><select idref="V-257898" selected="true" /><select idref="V-257899" selected="true" /><select idref="V-257900" selected="true" /><select idref="V-257901" selected="true" /><select idref="V-257902" selected="true" /><select idref="V-257903" selected="true" /><select idref="V-257904" selected="true" /><select idref="V-257905" selected="true" /><select idref="V-257906" selected="true" /><select idref="V-257907" selected="true" /><select idref="V-257908" selected="true" /><select idref="V-257909" selected="true" /><select idref="V-257910" selected="true" /><select idref="V-257911" selected="true" /><select idref="V-257912" selected="true" /><select idref="V-257913" selected="true" /><select idref="V-257914" selected="true" /><select idref="V-257915" selected="true" /><select idref="V-257916" selected="true" /><select idref="V-257917" selected="true" /><select idref="V-257918" selected="true" /><select idref="V-257919" selected="true" /><select idref="V-257920" selected="true" /><select idref="V-257921" selected="true" /><select idref="V-257922" selected="true" /><select idref="V-257923" selected="true" /><select idref="V-257924" selected="true" /><select idref="V-257925" selected="true" /><select idref="V-257926" selected="true" /><select idref="V-257927" selected="true" /><select idref="V-257928" selected="true" /><select idref="V-257929" selected="true" /><select idref="V-257930" selected="true" /><select idref="V-257931" selected="true" /><select idref="V-257932" selected="true" /><select idref="V-257934" selected="true" /><select idref="V-257935" selected="true" /><select idref="V-257936" selected="true" /><select idref="V-257937" selected="true" /><select idref="V-257939" selected="true" /><select idref="V-257940" selected="true" /><select idref="V-257941" selected="true" /><select idref="V-257942" selected="true" /><select idref="V-257943" selected="true" /><select idref="V-257944" selected="true" /><select idref="V-257945" selected="true" /><select idref="V-257946" selected="true" /><select idref="V-257947" selected="true" /><select idref="V-257948" selected="true" /><select idref="V-257949" selected="true" /><select idref="V-257950" selected="true" /><select idref="V-257951" selected="true" /><select idref="V-257953" selected="true" /><select idref="V-257954" selected="true" /><select idref="V-257955" selected="true" /><select idref="V-257956" selected="true" /><select idref="V-257957" selected="true" /><select idref="V-257958" selected="true" /><select idref="V-257959" selected="true" /><select idref="V-257960" selected="true" /><select idref="V-257961" selected="true" /><select idref="V-257962" selected="true" /><select idref="V-257963" selected="true" /><select idref="V-257964" selected="true" /><select idref="V-257965" selected="true" /><select idref="V-257966" selected="true" /><select idref="V-257967" selected="true" /><select idref="V-257968" selected="true" /><select idref="V-257969" selected="true" /><select idref="V-257970" selected="true" /><select idref="V-257971" selected="true" /><select idref="V-257972" selected="true" /><select idref="V-257973" selected="true" /><select idref="V-257974" selected="true" /><select idref="V-257975" selected="true" /><select idref="V-257976" selected="true" /><select idref="V-257977" selected="true" /><select idref="V-257978" selected="true" /><select idref="V-257979" selected="true" /><select idref="V-257980" selected="true" /><select idref="V-257981" selected="true" /><select idref="V-257982" selected="true" /><select idref="V-257983" selected="true" /><select idref="V-257984" selected="true" /><select idref="V-257985" selected="true" /><select idref="V-257986" selected="true" /><select idref="V-257989" selected="true" /><select idref="V-257991" selected="true" /><select idref="V-257992" selected="true" /><select idref="V-257993" selected="true" /><select idref="V-257994" selected="true" /><select idref="V-257995" selected="true" /><select idref="V-257996" selected="true" /><select idref="V-257997" selected="true" /><select idref="V-257998" selected="true" /><select idref="V-257999" selected="true" /><select idref="V-258000" selected="true" /><select idref="V-258001" selected="true" /><select idref="V-258002" selected="true" /><select idref="V-258003" selected="true" /><select idref="V-258004" selected="true" /><select idref="V-258005" selected="true" /><select idref="V-258006" selected="true" /><select idref="V-258007" selected="true" /><select idref="V-258008" selected="true" /><select idref="V-258009" selected="true" /><select idref="V-258011" selected="true" /><select idref="V-258012" selected="true" /><select idref="V-258013" selected="true" /><select idref="V-258014" selected="true" /><select idref="V-258015" selected="true" /><select idref="V-258016" selected="true" /><select idref="V-258017" selected="true" /><select idref="V-258018" selected="true" /><select idref="V-258019" selected="true" /><select idref="V-258020" selected="true" /><select idref="V-258021" selected="true" /><select idref="V-258022" selected="true" /><select idref="V-258023" selected="true" /><select idref="V-258024" selected="true" /><select idref="V-258025" selected="true" /><select idref="V-258026" selected="true" /><select idref="V-258027" selected="true" /><select idref="V-258028" selected="true" /><select idref="V-258029" selected="true" /><select idref="V-258030" selected="true" /><select idref="V-258031" selected="true" /><select idref="V-258032" selected="true" /><select idref="V-258033" selected="true" /><select idref="V-258034" selected="true" /><select idref="V-258035" selected="true" /><select idref="V-258036" selected="true" /><select idref="V-258037" selected="true" /><select idref="V-258038" selected="true" /><select idref="V-258039" selected="true" /><select idref="V-258040" selected="true" /><select idref="V-258041" selected="true" /><select idref="V-258042" selected="true" /><select idref="V-258043" selected="true" /><select idref="V-258044" selected="true" /><select idref="V-258045" selected="true" /><select idref="V-258046" selected="true" /><select idref="V-258047" selected="true" /><select idref="V-258048" selected="true" /><select idref="V-258049" selected="true" /><select idref="V-258050" selected="true" /><select idref="V-258051" selected="true" /><select idref="V-258052" selected="true" /><select idref="V-258053" selected="true" /><select idref="V-258054" selected="true" /><select idref="V-258055" selected="true" /><select idref="V-258056" selected="true" /><select idref="V-258057" selected="true" /><select idref="V-258058" selected="true" /><select idref="V-258059" selected="true" /><select idref="V-258060" selected="true" /><select idref="V-258061" selected="true" /><select idref="V-258062" selected="true" /><select idref="V-258068" selected="true" /><select idref="V-258069" selected="true" /><select idref="V-258070" selected="true" /><select idref="V-258071" selected="true" /><select idref="V-258072" selected="true" /><select idref="V-258073" selected="true" /><select idref="V-258074" selected="true" /><select idref="V-258075" selected="true" /><select idref="V-258076" selected="true" /><select idref="V-258077" selected="true" /><select idref="V-258078" selected="true" /><select idref="V-258079" selected="true" /><select idref="V-258080" selected="true" /><select idref="V-258081" selected="true" /><select idref="V-258082" selected="true" /><select idref="V-258083" selected="true" /><select idref="V-258084" selected="true" /><select idref="V-258085" selected="true" /><select idref="V-258086" selected="true" /><select idref="V-258087" selected="true" /><select idref="V-258088" selected="true" /><select idref="V-258089" selected="true" /><select idref="V-258090" selected="true" /><select idref="V-258091" selected="true" /><select idref="V-258094" selected="true" /><select idref="V-258095" selected="true" /><select idref="V-258096" selected="true" /><select idref="V-258097" selected="true" /><select idref="V-258098" selected="true" /><select idref="V-258099" selected="true" /><select idref="V-258100" selected="true" /><select idref="V-258101" selected="true" /><select idref="V-258102" selected="true" /><select idref="V-258103" selected="true" /><select idref="V-258104" selected="true" /><select idref="V-258105" selected="true" /><select idref="V-258106" selected="true" /><select idref="V-258107" selected="true" /><select idref="V-258109" selected="true" /><select idref="V-258110" selected="true" /><select idref="V-258111" selected="true" /><select idref="V-258112" selected="true" /><select idref="V-258113" selected="true" /><select idref="V-258114" selected="true" /><select idref="V-258115" selected="true" /><select idref="V-258116" selected="true" /><select idref="V-258117" selected="true" /><select idref="V-258118" selected="true" /><select idref="V-258120" selected="true" /><select idref="V-258121" selected="true" /><select idref="V-258122" selected="true" /><select idref="V-258123" selected="true" /><select idref="V-258124" selected="true" /><select idref="V-258125" selected="true" /><select idref="V-258126" selected="true" /><select idref="V-258127" selected="true" /><select idref="V-258128" selected="true" /><select idref="V-258129" selected="true" /><select idref="V-258131" selected="true" /><select idref="V-258132" selected="true" /><select idref="V-258133" selected="true" /><select idref="V-258134" selected="true" /><select idref="V-258135" selected="true" /><select idref="V-258136" selected="true" /><select idref="V-258137" selected="true" /><select idref="V-258138" selected="true" /><select idref="V-258139" selected="true" /><select idref="V-258140" selected="true" /><select idref="V-258141" selected="true" /><select idref="V-258142" selected="true" /><select idref="V-258143" selected="true" /><select idref="V-258144" selected="true" /><select idref="V-258146" selected="true" /><select idref="V-258147" selected="true" /><select idref="V-258148" selected="true" /><select idref="V-258149" selected="true" /><select idref="V-258150" selected="true" /><select idref="V-258151" selected="true" /><select idref="V-258152" selected="true" /><select idref="V-258153" selected="true" /><select idref="V-258154" selected="true" /><select idref="V-258155" selected="true" /><select idref="V-258156" selected="true" /><select idref="V-258157" selected="true" /><select idref="V-258158" selected="true" /><select idref="V-258159" selected="true" /><select idref="V-258160" selected="true" /><select idref="V-258161" selected="true" /><select idref="V-258162" selected="true" /><select idref="V-258163" selected="true" /><select idref="V-258164" selected="true" /><select idref="V-258165" selected="true" /><select idref="V-258166" selected="true" /><select idref="V-258167" selected="true" /><select idref="V-258168" selected="true" /><select idref="V-258169" selected="true" /><select idref="V-258170" selected="true" /><select idref="V-258171" selected="true" /><select idref="V-258173" selected="true" /><select idref="V-258174" selected="true" /><select idref="V-258175" selected="true" /><select idref="V-258176" selected="true" /><select idref="V-258177" selected="true" /><select idref="V-258178" selected="true" /><select idref="V-258179" selected="true" /><select idref="V-258180" selected="true" /><select idref="V-258181" selected="true" /><select idref="V-258182" selected="true" /><select idref="V-258183" selected="true" /><select idref="V-258184" selected="true" /><select idref="V-258185" selected="true" /><select idref="V-258186" selected="true" /><select idref="V-258187" selected="true" /><select idref="V-258188" selected="true" /><select idref="V-258189" selected="true" /><select idref="V-258190" selected="true" /><select idref="V-258191" selected="true" /><select idref="V-258192" selected="true" /><select idref="V-258193" selected="true" /><select idref="V-258194" selected="true" /><select idref="V-258195" selected="true" /><select idref="V-258196" selected="true" /><select idref="V-258197" selected="true" /><select idref="V-258198" selected="true" /><select idref="V-258199" selected="true" /><select idref="V-258200" selected="true" /><select idref="V-258201" selected="true" /><select idref="V-258202" selected="true" /><select idref="V-258203" selected="true" /><select idref="V-258204" selected="true" /><select idref="V-258205" selected="true" /><select idref="V-258206" selected="true" /><select idref="V-258207" selected="true" /><select idref="V-258208" selected="true" /><select idref="V-258209" selected="true" /><select idref="V-258210" selected="true" /><select idref="V-258211" selected="true" /><select idref="V-258212" selected="true" /><select idref="V-258213" selected="true" /><select idref="V-258214" selected="true" /><select idref="V-258215" selected="true" /><select idref="V-258216" selected="true" /><select idref="V-258217" selected="true" /><select idref="V-258218" selected="true" /><select idref="V-258219" selected="true" /><select idref="V-258220" selected="true" /><select idref="V-258221" selected="true" /><select idref="V-258222" selected="true" /><select idref="V-258223" selected="true" /><select idref="V-258224" selected="true" /><select idref="V-258225" selected="true" /><select idref="V-258227" selected="true" /><select idref="V-258228" selected="true" /><select idref="V-258229" selected="true" /><select idref="V-258230" selected="true" /><select idref="V-258231" selected="true" /><select idref="V-258232" selected="true" /><select idref="V-258233" selected="true" /><select idref="V-258234" selected="true" /><select idref="V-258236" selected="true" /><select idref="V-258241" selected="true" /><select idref="V-258242" selected="true" /><select idref="V-270174" selected="true" /><select idref="V-270175" selected="true" /><select idref="V-270176" selected="true" /><select idref="V-270177" selected="true" /><select idref="V-270178" selected="true" /><select idref="V-270180" selected="true" /><select idref="V-272488" selected="true" /><select idref="V-272496" selected="true" /></Profile><Profile id="MAC-2_Public"><title>II - Mission Support Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-257777" selected="true" /><select idref="V-257778" selected="true" /><select idref="V-257779" selected="true" /><select idref="V-257781" selected="true" /><select idref="V-257782" selected="true" /><select idref="V-257783" selected="true" /><select idref="V-257784" selected="true" /><select idref="V-257785" selected="true" /><select idref="V-257786" selected="true" /><select idref="V-257787" selected="true" /><select idref="V-257788" selected="true" /><select idref="V-257789" selected="true" /><select idref="V-257790" selected="true" /><select idref="V-257791" selected="true" /><select idref="V-257792" selected="true" /><select idref="V-257793" selected="true" /><select idref="V-257794" selected="true" /><select idref="V-257795" selected="true" /><select idref="V-257796" selected="true" /><select idref="V-257797" selected="true" /><select idref="V-257798" selected="true" /><select idref="V-257799" selected="true" /><select idref="V-257800" selected="true" /><select idref="V-257801" selected="true" /><select idref="V-257802" selected="true" /><select idref="V-257803" selected="true" /><select idref="V-257804" selected="true" /><select idref="V-257805" selected="true" /><select idref="V-257806" selected="true" /><select idref="V-257807" selected="true" /><select idref="V-257808" selected="true" /><select idref="V-257809" selected="true" /><select idref="V-257810" selected="true" /><select idref="V-257811" selected="true" /><select idref="V-257812" selected="true" /><select idref="V-257813" selected="true" /><select idref="V-257814" selected="true" /><select idref="V-257815" selected="true" /><select idref="V-257816" selected="true" /><select idref="V-257817" selected="true" /><select idref="V-257818" selected="true" /><select idref="V-257819" selected="true" /><select idref="V-257820" selected="true" /><select idref="V-257821" selected="true" /><select idref="V-257822" selected="true" /><select idref="V-257823" selected="true" /><select idref="V-257824" selected="true" /><select idref="V-257825" selected="true" /><select idref="V-257826" selected="true" /><select idref="V-257827" selected="true" /><select idref="V-257828" selected="true" /><select idref="V-257829" selected="true" /><select idref="V-257830" selected="true" /><select idref="V-257831" selected="true" /><select idref="V-257832" selected="true" /><select idref="V-257833" selected="true" /><select idref="V-257834" selected="true" /><select idref="V-257835" selected="true" /><select idref="V-257836" selected="true" /><select idref="V-257837" selected="true" /><select idref="V-257838" selected="true" /><select idref="V-257839" selected="true" /><select idref="V-257840" selected="true" /><select idref="V-257841" selected="true" /><select idref="V-257842" selected="true" /><select idref="V-257843" selected="true" /><select idref="V-257844" selected="true" /><select idref="V-257845" selected="true" /><select idref="V-257846" selected="true" /><select idref="V-257847" selected="true" /><select idref="V-257848" selected="true" /><select idref="V-257849" selected="true" /><select idref="V-257850" selected="true" /><select idref="V-257851" selected="true" /><select idref="V-257852" selected="true" /><select idref="V-257854" selected="true" /><select idref="V-257855" selected="true" /><select idref="V-257856" selected="true" /><select idref="V-257857" selected="true" /><select idref="V-257858" selected="true" /><select idref="V-257859" selected="true" /><select idref="V-257860" selected="true" /><select idref="V-257861" selected="true" /><select idref="V-257862" selected="true" /><select idref="V-257863" selected="true" /><select idref="V-257864" selected="true" /><select idref="V-257865" selected="true" /><select idref="V-257866" selected="true" /><select idref="V-257867" selected="true" /><select idref="V-257868" selected="true" /><select idref="V-257869" selected="true" /><select idref="V-257870" selected="true" /><select idref="V-257871" selected="true" /><select idref="V-257872" selected="true" /><select idref="V-257873" selected="true" /><select idref="V-257874" selected="true" /><select idref="V-257875" selected="true" /><select idref="V-257876" selected="true" /><select idref="V-257877" selected="true" /><select idref="V-257878" selected="true" /><select idref="V-257879" selected="true" /><select idref="V-257880" selected="true" /><select idref="V-257881" selected="true" /><select idref="V-257882" selected="true" /><select idref="V-257883" selected="true" /><select idref="V-257884" selected="true" /><select idref="V-257885" selected="true" /><select idref="V-257886" selected="true" /><select idref="V-257887" selected="true" /><select idref="V-257888" selected="true" /><select idref="V-257889" selected="true" /><select idref="V-257890" selected="true" /><select idref="V-257891" selected="true" /><select idref="V-257892" selected="true" /><select idref="V-257893" selected="true" /><select idref="V-257894" selected="true" /><select idref="V-257895" selected="true" /><select idref="V-257896" selected="true" /><select idref="V-257897" selected="true" /><select idref="V-257898" selected="true" /><select idref="V-257899" selected="true" /><select idref="V-257900" selected="true" /><select idref="V-257901" selected="true" /><select idref="V-257902" selected="true" /><select idref="V-257903" selected="true" /><select idref="V-257904" selected="true" /><select idref="V-257905" selected="true" /><select idref="V-257906" selected="true" /><select idref="V-257907" selected="true" /><select idref="V-257908" selected="true" /><select idref="V-257909" selected="true" /><select idref="V-257910" selected="true" /><select idref="V-257911" selected="true" /><select idref="V-257912" selected="true" /><select idref="V-257913" selected="true" /><select idref="V-257914" selected="true" /><select idref="V-257915" selected="true" /><select idref="V-257916" selected="true" /><select idref="V-257917" selected="true" /><select idref="V-257918" selected="true" /><select idref="V-257919" selected="true" /><select idref="V-257920" selected="true" /><select idref="V-257921" selected="true" /><select idref="V-257922" selected="true" /><select idref="V-257923" selected="true" /><select idref="V-257924" selected="true" /><select idref="V-257925" selected="true" /><select idref="V-257926" selected="true" /><select idref="V-257927" selected="true" /><select idref="V-257928" selected="true" /><select idref="V-257929" selected="true" /><select idref="V-257930" selected="true" /><select idref="V-257931" selected="true" /><select idref="V-257932" selected="true" /><select idref="V-257934" selected="true" /><select idref="V-257935" selected="true" /><select idref="V-257936" selected="true" /><select idref="V-257937" selected="true" /><select idref="V-257939" selected="true" /><select idref="V-257940" selected="true" /><select idref="V-257941" selected="true" /><select idref="V-257942" selected="true" /><select idref="V-257943" selected="true" /><select idref="V-257944" selected="true" /><select idref="V-257945" selected="true" /><select idref="V-257946" selected="true" /><select idref="V-257947" selected="true" /><select idref="V-257948" selected="true" /><select idref="V-257949" selected="true" /><select idref="V-257950" selected="true" /><select idref="V-257951" selected="true" /><select idref="V-257953" selected="true" /><select idref="V-257954" selected="true" /><select idref="V-257955" selected="true" /><select idref="V-257956" selected="true" /><select idref="V-257957" selected="true" /><select idref="V-257958" selected="true" /><select idref="V-257959" selected="true" /><select idref="V-257960" selected="true" /><select idref="V-257961" selected="true" /><select idref="V-257962" selected="true" /><select idref="V-257963" selected="true" /><select idref="V-257964" selected="true" /><select idref="V-257965" selected="true" /><select idref="V-257966" selected="true" /><select idref="V-257967" selected="true" /><select idref="V-257968" selected="true" /><select idref="V-257969" selected="true" /><select idref="V-257970" selected="true" /><select idref="V-257971" selected="true" /><select idref="V-257972" selected="true" /><select idref="V-257973" selected="true" /><select idref="V-257974" selected="true" /><select idref="V-257975" selected="true" /><select idref="V-257976" selected="true" /><select idref="V-257977" selected="true" /><select idref="V-257978" selected="true" /><select idref="V-257979" selected="true" /><select idref="V-257980" selected="true" /><select idref="V-257981" selected="true" /><select idref="V-257982" selected="true" /><select idref="V-257983" selected="true" /><select idref="V-257984" selected="true" /><select idref="V-257985" selected="true" /><select idref="V-257986" selected="true" /><select idref="V-257989" selected="true" /><select idref="V-257991" selected="true" /><select idref="V-257992" selected="true" /><select idref="V-257993" selected="true" /><select idref="V-257994" selected="true" /><select idref="V-257995" selected="true" /><select idref="V-257996" selected="true" /><select idref="V-257997" selected="true" /><select idref="V-257998" selected="true" /><select idref="V-257999" selected="true" /><select idref="V-258000" selected="true" /><select idref="V-258001" selected="true" /><select idref="V-258002" selected="true" /><select idref="V-258003" selected="true" /><select idref="V-258004" selected="true" /><select idref="V-258005" selected="true" /><select idref="V-258006" selected="true" /><select idref="V-258007" selected="true" /><select idref="V-258008" selected="true" /><select idref="V-258009" selected="true" /><select idref="V-258011" selected="true" /><select idref="V-258012" selected="true" /><select idref="V-258013" selected="true" /><select idref="V-258014" selected="true" /><select idref="V-258015" selected="true" /><select idref="V-258016" selected="true" /><select idref="V-258017" selected="true" /><select idref="V-258018" selected="true" /><select idref="V-258019" selected="true" /><select idref="V-258020" selected="true" /><select idref="V-258021" selected="true" /><select idref="V-258022" selected="true" /><select idref="V-258023" selected="true" /><select idref="V-258024" selected="true" /><select idref="V-258025" selected="true" /><select idref="V-258026" selected="true" /><select idref="V-258027" selected="true" /><select idref="V-258028" selected="true" /><select idref="V-258029" selected="true" /><select idref="V-258030" selected="true" /><select idref="V-258031" selected="true" /><select idref="V-258032" selected="true" /><select idref="V-258033" selected="true" /><select idref="V-258034" selected="true" /><select idref="V-258035" selected="true" /><select idref="V-258036" selected="true" /><select idref="V-258037" selected="true" /><select idref="V-258038" selected="true" /><select idref="V-258039" selected="true" /><select idref="V-258040" selected="true" /><select idref="V-258041" selected="true" /><select idref="V-258042" selected="true" /><select idref="V-258043" selected="true" /><select idref="V-258044" selected="true" /><select idref="V-258045" selected="true" /><select idref="V-258046" selected="true" /><select idref="V-258047" selected="true" /><select idref="V-258048" selected="true" /><select idref="V-258049" selected="true" /><select idref="V-258050" selected="true" /><select idref="V-258051" selected="true" /><select idref="V-258052" selected="true" /><select idref="V-258053" selected="true" /><select idref="V-258054" selected="true" /><select idref="V-258055" selected="true" /><select idref="V-258056" selected="true" /><select idref="V-258057" selected="true" /><select idref="V-258058" selected="true" /><select idref="V-258059" selected="true" /><select idref="V-258060" selected="true" /><select idref="V-258061" selected="true" /><select idref="V-258062" selected="true" /><select idref="V-258068" selected="true" /><select idref="V-258069" selected="true" /><select idref="V-258070" selected="true" /><select idref="V-258071" selected="true" /><select idref="V-258072" selected="true" /><select idref="V-258073" selected="true" /><select idref="V-258074" selected="true" /><select idref="V-258075" selected="true" /><select idref="V-258076" selected="true" /><select idref="V-258077" selected="true" /><select idref="V-258078" selected="true" /><select idref="V-258079" selected="true" /><select idref="V-258080" selected="true" /><select idref="V-258081" selected="true" /><select idref="V-258082" selected="true" /><select idref="V-258083" selected="true" /><select idref="V-258084" selected="true" /><select idref="V-258085" selected="true" /><select idref="V-258086" selected="true" /><select idref="V-258087" selected="true" /><select idref="V-258088" selected="true" /><select idref="V-258089" selected="true" /><select idref="V-258090" selected="true" /><select idref="V-258091" selected="true" /><select idref="V-258094" selected="true" /><select idref="V-258095" selected="true" /><select idref="V-258096" selected="true" /><select idref="V-258097" selected="true" /><select idref="V-258098" selected="true" /><select idref="V-258099" selected="true" /><select idref="V-258100" selected="true" /><select idref="V-258101" selected="true" /><select idref="V-258102" selected="true" /><select idref="V-258103" selected="true" /><select idref="V-258104" selected="true" /><select idref="V-258105" selected="true" /><select idref="V-258106" selected="true" /><select idref="V-258107" selected="true" /><select idref="V-258109" selected="true" /><select idref="V-258110" selected="true" /><select idref="V-258111" selected="true" /><select idref="V-258112" selected="true" /><select idref="V-258113" selected="true" /><select idref="V-258114" selected="true" /><select idref="V-258115" selected="true" /><select idref="V-258116" selected="true" /><select idref="V-258117" selected="true" /><select idref="V-258118" selected="true" /><select idref="V-258120" selected="true" /><select idref="V-258121" selected="true" /><select idref="V-258122" selected="true" /><select idref="V-258123" selected="true" /><select idref="V-258124" selected="true" /><select idref="V-258125" selected="true" /><select idref="V-258126" selected="true" /><select idref="V-258127" selected="true" /><select idref="V-258128" selected="true" /><select idref="V-258129" selected="true" /><select idref="V-258131" selected="true" /><select idref="V-258132" selected="true" /><select idref="V-258133" selected="true" /><select idref="V-258134" selected="true" /><select idref="V-258135" selected="true" /><select idref="V-258136" selected="true" /><select idref="V-258137" selected="true" /><select idref="V-258138" selected="true" /><select idref="V-258139" selected="true" /><select idref="V-258140" selected="true" /><select idref="V-258141" selected="true" /><select idref="V-258142" selected="true" /><select idref="V-258143" selected="true" /><select idref="V-258144" selected="true" /><select idref="V-258146" selected="true" /><select idref="V-258147" selected="true" /><select idref="V-258148" selected="true" /><select idref="V-258149" selected="true" /><select idref="V-258150" selected="true" /><select idref="V-258151" selected="true" /><select idref="V-258152" selected="true" /><select idref="V-258153" selected="true" /><select idref="V-258154" selected="true" /><select idref="V-258155" selected="true" /><select idref="V-258156" selected="true" /><select idref="V-258157" selected="true" /><select idref="V-258158" selected="true" /><select idref="V-258159" selected="true" /><select idref="V-258160" selected="true" /><select idref="V-258161" selected="true" /><select idref="V-258162" selected="true" /><select idref="V-258163" selected="true" /><select idref="V-258164" selected="true" /><select idref="V-258165" selected="true" /><select idref="V-258166" selected="true" /><select idref="V-258167" selected="true" /><select idref="V-258168" selected="true" /><select idref="V-258169" selected="true" /><select idref="V-258170" selected="true" /><select idref="V-258171" selected="true" /><select idref="V-258173" selected="true" /><select idref="V-258174" selected="true" /><select idref="V-258175" selected="true" /><select idref="V-258176" selected="true" /><select idref="V-258177" selected="true" /><select idref="V-258178" selected="true" /><select idref="V-258179" selected="true" /><select idref="V-258180" selected="true" /><select idref="V-258181" selected="true" /><select idref="V-258182" selected="true" /><select idref="V-258183" selected="true" /><select idref="V-258184" selected="true" /><select idref="V-258185" selected="true" /><select idref="V-258186" selected="true" /><select idref="V-258187" selected="true" /><select idref="V-258188" selected="true" /><select idref="V-258189" selected="true" /><select idref="V-258190" selected="true" /><select idref="V-258191" selected="true" /><select idref="V-258192" selected="true" /><select idref="V-258193" selected="true" /><select idref="V-258194" selected="true" /><select idref="V-258195" selected="true" /><select idref="V-258196" selected="true" /><select idref="V-258197" selected="true" /><select idref="V-258198" selected="true" /><select idref="V-258199" selected="true" /><select idref="V-258200" selected="true" /><select idref="V-258201" selected="true" /><select idref="V-258202" selected="true" /><select idref="V-258203" selected="true" /><select idref="V-258204" selected="true" /><select idref="V-258205" selected="true" /><select idref="V-258206" selected="true" /><select idref="V-258207" selected="true" /><select idref="V-258208" selected="true" /><select idref="V-258209" selected="true" /><select idref="V-258210" selected="true" /><select idref="V-258211" selected="true" /><select idref="V-258212" selected="true" /><select idref="V-258213" selected="true" /><select idref="V-258214" selected="true" /><select idref="V-258215" selected="true" /><select idref="V-258216" selected="true" /><select idref="V-258217" selected="true" /><select idref="V-258218" selected="true" /><select idref="V-258219" selected="true" /><select idref="V-258220" selected="true" /><select idref="V-258221" selected="true" /><select idref="V-258222" selected="true" /><select idref="V-258223" selected="true" /><select idref="V-258224" selected="true" /><select idref="V-258225" selected="true" /><select idref="V-258227" selected="true" /><select idref="V-258228" selected="true" /><select idref="V-258229" selected="true" /><select idref="V-258230" selected="true" /><select idref="V-258231" selected="true" /><select idref="V-258232" selected="true" /><select idref="V-258233" selected="true" /><select idref="V-258234" selected="true" /><select idref="V-258236" selected="true" /><select idref="V-258241" selected="true" /><select idref="V-258242" selected="true" /><select idref="V-270174" selected="true" /><select idref="V-270175" selected="true" /><select idref="V-270176" selected="true" /><select idref="V-270177" selected="true" /><select idref="V-270178" selected="true" /><select idref="V-270180" selected="true" /><select idref="V-272488" selected="true" /><select idref="V-272496" selected="true" /></Profile><Profile id="MAC-2_Sensitive"><title>II - Mission Support Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-257777" selected="true" /><select idref="V-257778" selected="true" /><select idref="V-257779" selected="true" /><select idref="V-257781" selected="true" /><select idref="V-257782" selected="true" /><select idref="V-257783" selected="true" /><select idref="V-257784" selected="true" /><select idref="V-257785" selected="true" /><select idref="V-257786" selected="true" /><select idref="V-257787" selected="true" /><select idref="V-257788" selected="true" /><select idref="V-257789" selected="true" /><select idref="V-257790" selected="true" /><select idref="V-257791" selected="true" /><select idref="V-257792" selected="true" /><select idref="V-257793" selected="true" /><select idref="V-257794" selected="true" /><select idref="V-257795" selected="true" /><select idref="V-257796" selected="true" /><select idref="V-257797" selected="true" /><select idref="V-257798" selected="true" /><select idref="V-257799" selected="true" /><select idref="V-257800" selected="true" /><select idref="V-257801" selected="true" /><select idref="V-257802" selected="true" /><select idref="V-257803" selected="true" /><select idref="V-257804" selected="true" /><select idref="V-257805" selected="true" /><select idref="V-257806" selected="true" /><select idref="V-257807" selected="true" /><select idref="V-257808" selected="true" /><select idref="V-257809" selected="true" /><select idref="V-257810" selected="true" /><select idref="V-257811" selected="true" /><select idref="V-257812" selected="true" /><select idref="V-257813" selected="true" /><select idref="V-257814" selected="true" /><select idref="V-257815" selected="true" /><select idref="V-257816" selected="true" /><select idref="V-257817" selected="true" /><select idref="V-257818" selected="true" /><select idref="V-257819" selected="true" /><select idref="V-257820" selected="true" /><select idref="V-257821" selected="true" /><select idref="V-257822" selected="true" /><select idref="V-257823" selected="true" /><select idref="V-257824" selected="true" /><select idref="V-257825" selected="true" /><select idref="V-257826" selected="true" /><select idref="V-257827" selected="true" /><select idref="V-257828" selected="true" /><select idref="V-257829" selected="true" /><select idref="V-257830" selected="true" /><select idref="V-257831" selected="true" /><select idref="V-257832" selected="true" /><select idref="V-257833" selected="true" /><select idref="V-257834" selected="true" /><select idref="V-257835" selected="true" /><select idref="V-257836" selected="true" /><select idref="V-257837" selected="true" /><select idref="V-257838" selected="true" /><select idref="V-257839" selected="true" /><select idref="V-257840" selected="true" /><select idref="V-257841" selected="true" /><select idref="V-257842" selected="true" /><select idref="V-257843" selected="true" /><select idref="V-257844" selected="true" /><select idref="V-257845" selected="true" /><select idref="V-257846" selected="true" /><select idref="V-257847" selected="true" /><select idref="V-257848" selected="true" /><select idref="V-257849" selected="true" /><select idref="V-257850" selected="true" /><select idref="V-257851" selected="true" /><select idref="V-257852" selected="true" /><select idref="V-257854" selected="true" /><select idref="V-257855" selected="true" /><select idref="V-257856" selected="true" /><select idref="V-257857" selected="true" /><select idref="V-257858" selected="true" /><select idref="V-257859" selected="true" /><select idref="V-257860" selected="true" /><select idref="V-257861" selected="true" /><select idref="V-257862" selected="true" /><select idref="V-257863" selected="true" /><select idref="V-257864" selected="true" /><select idref="V-257865" selected="true" /><select idref="V-257866" selected="true" /><select idref="V-257867" selected="true" /><select idref="V-257868" selected="true" /><select idref="V-257869" selected="true" /><select idref="V-257870" selected="true" /><select idref="V-257871" selected="true" /><select idref="V-257872" selected="true" /><select idref="V-257873" selected="true" /><select idref="V-257874" selected="true" /><select idref="V-257875" selected="true" /><select idref="V-257876" selected="true" /><select idref="V-257877" selected="true" /><select idref="V-257878" selected="true" /><select idref="V-257879" selected="true" /><select idref="V-257880" selected="true" /><select idref="V-257881" selected="true" /><select idref="V-257882" selected="true" /><select idref="V-257883" selected="true" /><select idref="V-257884" selected="true" /><select idref="V-257885" selected="true" /><select idref="V-257886" selected="true" /><select idref="V-257887" selected="true" /><select idref="V-257888" selected="true" /><select idref="V-257889" selected="true" /><select idref="V-257890" selected="true" /><select idref="V-257891" selected="true" /><select idref="V-257892" selected="true" /><select idref="V-257893" selected="true" /><select idref="V-257894" selected="true" /><select idref="V-257895" selected="true" /><select idref="V-257896" selected="true" /><select idref="V-257897" selected="true" /><select idref="V-257898" selected="true" /><select idref="V-257899" selected="true" /><select idref="V-257900" selected="true" /><select idref="V-257901" selected="true" /><select idref="V-257902" selected="true" /><select idref="V-257903" selected="true" /><select idref="V-257904" selected="true" /><select idref="V-257905" selected="true" /><select idref="V-257906" selected="true" /><select idref="V-257907" selected="true" /><select idref="V-257908" selected="true" /><select idref="V-257909" selected="true" /><select idref="V-257910" selected="true" /><select idref="V-257911" selected="true" /><select idref="V-257912" selected="true" /><select idref="V-257913" selected="true" /><select idref="V-257914" selected="true" /><select idref="V-257915" selected="true" /><select idref="V-257916" selected="true" /><select idref="V-257917" selected="true" /><select idref="V-257918" selected="true" /><select idref="V-257919" selected="true" /><select idref="V-257920" selected="true" /><select idref="V-257921" selected="true" /><select idref="V-257922" selected="true" /><select idref="V-257923" selected="true" /><select idref="V-257924" selected="true" /><select idref="V-257925" selected="true" /><select idref="V-257926" selected="true" /><select idref="V-257927" selected="true" /><select idref="V-257928" selected="true" /><select idref="V-257929" selected="true" /><select idref="V-257930" selected="true" /><select idref="V-257931" selected="true" /><select idref="V-257932" selected="true" /><select idref="V-257934" selected="true" /><select idref="V-257935" selected="true" /><select idref="V-257936" selected="true" /><select idref="V-257937" selected="true" /><select idref="V-257939" selected="true" /><select idref="V-257940" selected="true" /><select idref="V-257941" selected="true" /><select idref="V-257942" selected="true" /><select idref="V-257943" selected="true" /><select idref="V-257944" selected="true" /><select idref="V-257945" selected="true" /><select idref="V-257946" selected="true" /><select idref="V-257947" selected="true" /><select idref="V-257948" selected="true" /><select idref="V-257949" selected="true" /><select idref="V-257950" selected="true" /><select idref="V-257951" selected="true" /><select idref="V-257953" selected="true" /><select idref="V-257954" selected="true" /><select idref="V-257955" selected="true" /><select idref="V-257956" selected="true" /><select idref="V-257957" selected="true" /><select idref="V-257958" selected="true" /><select idref="V-257959" selected="true" /><select idref="V-257960" selected="true" /><select idref="V-257961" selected="true" /><select idref="V-257962" selected="true" /><select idref="V-257963" selected="true" /><select idref="V-257964" selected="true" /><select idref="V-257965" selected="true" /><select idref="V-257966" selected="true" /><select idref="V-257967" selected="true" /><select idref="V-257968" selected="true" /><select idref="V-257969" selected="true" /><select idref="V-257970" selected="true" /><select idref="V-257971" selected="true" /><select idref="V-257972" selected="true" /><select idref="V-257973" selected="true" /><select idref="V-257974" selected="true" /><select idref="V-257975" selected="true" /><select idref="V-257976" selected="true" /><select idref="V-257977" selected="true" /><select idref="V-257978" selected="true" /><select idref="V-257979" selected="true" /><select idref="V-257980" selected="true" /><select idref="V-257981" selected="true" /><select idref="V-257982" selected="true" /><select idref="V-257983" selected="true" /><select idref="V-257984" selected="true" /><select idref="V-257985" selected="true" /><select idref="V-257986" selected="true" /><select idref="V-257989" selected="true" /><select idref="V-257991" selected="true" /><select idref="V-257992" selected="true" /><select idref="V-257993" selected="true" /><select idref="V-257994" selected="true" /><select idref="V-257995" selected="true" /><select idref="V-257996" selected="true" /><select idref="V-257997" selected="true" /><select idref="V-257998" selected="true" /><select idref="V-257999" selected="true" /><select idref="V-258000" selected="true" /><select idref="V-258001" selected="true" /><select idref="V-258002" selected="true" /><select idref="V-258003" selected="true" /><select idref="V-258004" selected="true" /><select idref="V-258005" selected="true" /><select idref="V-258006" selected="true" /><select idref="V-258007" selected="true" /><select idref="V-258008" selected="true" /><select idref="V-258009" selected="true" /><select idref="V-258011" selected="true" /><select idref="V-258012" selected="true" /><select idref="V-258013" selected="true" /><select idref="V-258014" selected="true" /><select idref="V-258015" selected="true" /><select idref="V-258016" selected="true" /><select idref="V-258017" selected="true" /><select idref="V-258018" selected="true" /><select idref="V-258019" selected="true" /><select idref="V-258020" selected="true" /><select idref="V-258021" selected="true" /><select idref="V-258022" selected="true" /><select idref="V-258023" selected="true" /><select idref="V-258024" selected="true" /><select idref="V-258025" selected="true" /><select idref="V-258026" selected="true" /><select idref="V-258027" selected="true" /><select idref="V-258028" selected="true" /><select idref="V-258029" selected="true" /><select idref="V-258030" selected="true" /><select idref="V-258031" selected="true" /><select idref="V-258032" selected="true" /><select idref="V-258033" selected="true" /><select idref="V-258034" selected="true" /><select idref="V-258035" selected="true" /><select idref="V-258036" selected="true" /><select idref="V-258037" selected="true" /><select idref="V-258038" selected="true" /><select idref="V-258039" selected="true" /><select idref="V-258040" selected="true" /><select idref="V-258041" selected="true" /><select idref="V-258042" selected="true" /><select idref="V-258043" selected="true" /><select idref="V-258044" selected="true" /><select idref="V-258045" selected="true" /><select idref="V-258046" selected="true" /><select idref="V-258047" selected="true" /><select idref="V-258048" selected="true" /><select idref="V-258049" selected="true" /><select idref="V-258050" selected="true" /><select idref="V-258051" selected="true" /><select idref="V-258052" selected="true" /><select idref="V-258053" selected="true" /><select idref="V-258054" selected="true" /><select idref="V-258055" selected="true" /><select idref="V-258056" selected="true" /><select idref="V-258057" selected="true" /><select idref="V-258058" selected="true" /><select idref="V-258059" selected="true" /><select idref="V-258060" selected="true" /><select idref="V-258061" selected="true" /><select idref="V-258062" selected="true" /><select idref="V-258068" selected="true" /><select idref="V-258069" selected="true" /><select idref="V-258070" selected="true" /><select idref="V-258071" selected="true" /><select idref="V-258072" selected="true" /><select idref="V-258073" selected="true" /><select idref="V-258074" selected="true" /><select idref="V-258075" selected="true" /><select idref="V-258076" selected="true" /><select idref="V-258077" selected="true" /><select idref="V-258078" selected="true" /><select idref="V-258079" selected="true" /><select idref="V-258080" selected="true" /><select idref="V-258081" selected="true" /><select idref="V-258082" selected="true" /><select idref="V-258083" selected="true" /><select idref="V-258084" selected="true" /><select idref="V-258085" selected="true" /><select idref="V-258086" selected="true" /><select idref="V-258087" selected="true" /><select idref="V-258088" selected="true" /><select idref="V-258089" selected="true" /><select idref="V-258090" selected="true" /><select idref="V-258091" selected="true" /><select idref="V-258094" selected="true" /><select idref="V-258095" selected="true" /><select idref="V-258096" selected="true" /><select idref="V-258097" selected="true" /><select idref="V-258098" selected="true" /><select idref="V-258099" selected="true" /><select idref="V-258100" selected="true" /><select idref="V-258101" selected="true" /><select idref="V-258102" selected="true" /><select idref="V-258103" selected="true" /><select idref="V-258104" selected="true" /><select idref="V-258105" selected="true" /><select idref="V-258106" selected="true" /><select idref="V-258107" selected="true" /><select idref="V-258109" selected="true" /><select idref="V-258110" selected="true" /><select idref="V-258111" selected="true" /><select idref="V-258112" selected="true" /><select idref="V-258113" selected="true" /><select idref="V-258114" selected="true" /><select idref="V-258115" selected="true" /><select idref="V-258116" selected="true" /><select idref="V-258117" selected="true" /><select idref="V-258118" selected="true" /><select idref="V-258120" selected="true" /><select idref="V-258121" selected="true" /><select idref="V-258122" selected="true" /><select idref="V-258123" selected="true" /><select idref="V-258124" selected="true" /><select idref="V-258125" selected="true" /><select idref="V-258126" selected="true" /><select idref="V-258127" selected="true" /><select idref="V-258128" selected="true" /><select idref="V-258129" selected="true" /><select idref="V-258131" selected="true" /><select idref="V-258132" selected="true" /><select idref="V-258133" selected="true" /><select idref="V-258134" selected="true" /><select idref="V-258135" selected="true" /><select idref="V-258136" selected="true" /><select idref="V-258137" selected="true" /><select idref="V-258138" selected="true" /><select idref="V-258139" selected="true" /><select idref="V-258140" selected="true" /><select idref="V-258141" selected="true" /><select idref="V-258142" selected="true" /><select idref="V-258143" selected="true" /><select idref="V-258144" selected="true" /><select idref="V-258146" selected="true" /><select idref="V-258147" selected="true" /><select idref="V-258148" selected="true" /><select idref="V-258149" selected="true" /><select idref="V-258150" selected="true" /><select idref="V-258151" selected="true" /><select idref="V-258152" selected="true" /><select idref="V-258153" selected="true" /><select idref="V-258154" selected="true" /><select idref="V-258155" selected="true" /><select idref="V-258156" selected="true" /><select idref="V-258157" selected="true" /><select idref="V-258158" selected="true" /><select idref="V-258159" selected="true" /><select idref="V-258160" selected="true" /><select idref="V-258161" selected="true" /><select idref="V-258162" selected="true" /><select idref="V-258163" selected="true" /><select idref="V-258164" selected="true" /><select idref="V-258165" selected="true" /><select idref="V-258166" selected="true" /><select idref="V-258167" selected="true" /><select idref="V-258168" selected="true" /><select idref="V-258169" selected="true" /><select idref="V-258170" selected="true" /><select idref="V-258171" selected="true" /><select idref="V-258173" selected="true" /><select idref="V-258174" selected="true" /><select idref="V-258175" selected="true" /><select idref="V-258176" selected="true" /><select idref="V-258177" selected="true" /><select idref="V-258178" selected="true" /><select idref="V-258179" selected="true" /><select idref="V-258180" selected="true" /><select idref="V-258181" selected="true" /><select idref="V-258182" selected="true" /><select idref="V-258183" selected="true" /><select idref="V-258184" selected="true" /><select idref="V-258185" selected="true" /><select idref="V-258186" selected="true" /><select idref="V-258187" selected="true" /><select idref="V-258188" selected="true" /><select idref="V-258189" selected="true" /><select idref="V-258190" selected="true" /><select idref="V-258191" selected="true" /><select idref="V-258192" selected="true" /><select idref="V-258193" selected="true" /><select idref="V-258194" selected="true" /><select idref="V-258195" selected="true" /><select idref="V-258196" selected="true" /><select idref="V-258197" selected="true" /><select idref="V-258198" selected="true" /><select idref="V-258199" selected="true" /><select idref="V-258200" selected="true" /><select idref="V-258201" selected="true" /><select idref="V-258202" selected="true" /><select idref="V-258203" selected="true" /><select idref="V-258204" selected="true" /><select idref="V-258205" selected="true" /><select idref="V-258206" selected="true" /><select idref="V-258207" selected="true" /><select idref="V-258208" selected="true" /><select idref="V-258209" selected="true" /><select idref="V-258210" selected="true" /><select idref="V-258211" selected="true" /><select idref="V-258212" selected="true" /><select idref="V-258213" selected="true" /><select idref="V-258214" selected="true" /><select idref="V-258215" selected="true" /><select idref="V-258216" selected="true" /><select idref="V-258217" selected="true" /><select idref="V-258218" selected="true" /><select idref="V-258219" selected="true" /><select idref="V-258220" selected="true" /><select idref="V-258221" selected="true" /><select idref="V-258222" selected="true" /><select idref="V-258223" selected="true" /><select idref="V-258224" selected="true" /><select idref="V-258225" selected="true" /><select idref="V-258227" selected="true" /><select idref="V-258228" selected="true" /><select idref="V-258229" selected="true" /><select idref="V-258230" selected="true" /><select idref="V-258231" selected="true" /><select idref="V-258232" selected="true" /><select idref="V-258233" selected="true" /><select idref="V-258234" selected="true" /><select idref="V-258236" selected="true" /><select idref="V-258241" selected="true" /><select idref="V-258242" selected="true" /><select idref="V-270174" selected="true" /><select idref="V-270175" selected="true" /><select idref="V-270176" selected="true" /><select idref="V-270177" selected="true" /><select idref="V-270178" selected="true" /><select idref="V-270180" selected="true" /><select idref="V-272488" selected="true" /><select idref="V-272496" selected="true" /></Profile><Profile id="MAC-3_Classified"><title>III - Administrative Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-257777" selected="true" /><select idref="V-257778" selected="true" /><select idref="V-257779" selected="true" /><select idref="V-257781" selected="true" /><select idref="V-257782" selected="true" /><select idref="V-257783" selected="true" /><select idref="V-257784" selected="true" /><select idref="V-257785" selected="true" /><select idref="V-257786" selected="true" /><select idref="V-257787" selected="true" /><select idref="V-257788" selected="true" /><select idref="V-257789" selected="true" /><select idref="V-257790" selected="true" /><select idref="V-257791" selected="true" /><select idref="V-257792" selected="true" /><select idref="V-257793" selected="true" /><select idref="V-257794" selected="true" /><select idref="V-257795" selected="true" /><select idref="V-257796" selected="true" /><select idref="V-257797" selected="true" /><select idref="V-257798" selected="true" /><select idref="V-257799" selected="true" /><select idref="V-257800" selected="true" /><select idref="V-257801" selected="true" /><select idref="V-257802" selected="true" /><select idref="V-257803" selected="true" /><select idref="V-257804" selected="true" /><select idref="V-257805" selected="true" /><select idref="V-257806" selected="true" /><select idref="V-257807" selected="true" /><select idref="V-257808" selected="true" /><select idref="V-257809" selected="true" /><select idref="V-257810" selected="true" /><select idref="V-257811" selected="true" /><select idref="V-257812" selected="true" /><select idref="V-257813" selected="true" /><select idref="V-257814" selected="true" /><select idref="V-257815" selected="true" /><select idref="V-257816" selected="true" /><select idref="V-257817" selected="true" /><select idref="V-257818" selected="true" /><select idref="V-257819" selected="true" /><select idref="V-257820" selected="true" /><select idref="V-257821" selected="true" /><select idref="V-257822" selected="true" /><select idref="V-257823" selected="true" /><select idref="V-257824" selected="true" /><select idref="V-257825" selected="true" /><select idref="V-257826" selected="true" /><select idref="V-257827" selected="true" /><select idref="V-257828" selected="true" /><select idref="V-257829" selected="true" /><select idref="V-257830" selected="true" /><select idref="V-257831" selected="true" /><select idref="V-257832" selected="true" /><select idref="V-257833" selected="true" /><select idref="V-257834" selected="true" /><select idref="V-257835" selected="true" /><select idref="V-257836" selected="true" /><select idref="V-257837" selected="true" /><select idref="V-257838" selected="true" /><select idref="V-257839" selected="true" /><select idref="V-257840" selected="true" /><select idref="V-257841" selected="true" /><select idref="V-257842" selected="true" /><select idref="V-257843" selected="true" /><select idref="V-257844" selected="true" /><select idref="V-257845" selected="true" /><select idref="V-257846" selected="true" /><select idref="V-257847" selected="true" /><select idref="V-257848" selected="true" /><select idref="V-257849" selected="true" /><select idref="V-257850" selected="true" /><select idref="V-257851" selected="true" /><select idref="V-257852" selected="true" /><select idref="V-257854" selected="true" /><select idref="V-257855" selected="true" /><select idref="V-257856" selected="true" /><select idref="V-257857" selected="true" /><select idref="V-257858" selected="true" /><select idref="V-257859" selected="true" /><select idref="V-257860" selected="true" /><select idref="V-257861" selected="true" /><select idref="V-257862" selected="true" /><select idref="V-257863" selected="true" /><select idref="V-257864" selected="true" /><select idref="V-257865" selected="true" /><select idref="V-257866" selected="true" /><select idref="V-257867" selected="true" /><select idref="V-257868" selected="true" /><select idref="V-257869" selected="true" /><select idref="V-257870" selected="true" /><select idref="V-257871" selected="true" /><select idref="V-257872" selected="true" /><select idref="V-257873" selected="true" /><select idref="V-257874" selected="true" /><select idref="V-257875" selected="true" /><select idref="V-257876" selected="true" /><select idref="V-257877" selected="true" /><select idref="V-257878" selected="true" /><select idref="V-257879" selected="true" /><select idref="V-257880" selected="true" /><select idref="V-257881" selected="true" /><select idref="V-257882" selected="true" /><select idref="V-257883" selected="true" /><select idref="V-257884" selected="true" /><select idref="V-257885" selected="true" /><select idref="V-257886" selected="true" /><select idref="V-257887" selected="true" /><select idref="V-257888" selected="true" /><select idref="V-257889" selected="true" /><select idref="V-257890" selected="true" /><select idref="V-257891" selected="true" /><select idref="V-257892" selected="true" /><select idref="V-257893" selected="true" /><select idref="V-257894" selected="true" /><select idref="V-257895" selected="true" /><select idref="V-257896" selected="true" /><select idref="V-257897" selected="true" /><select idref="V-257898" selected="true" /><select idref="V-257899" selected="true" /><select idref="V-257900" selected="true" /><select idref="V-257901" selected="true" /><select idref="V-257902" selected="true" /><select idref="V-257903" selected="true" /><select idref="V-257904" selected="true" /><select idref="V-257905" selected="true" /><select idref="V-257906" selected="true" /><select idref="V-257907" selected="true" /><select idref="V-257908" selected="true" /><select idref="V-257909" selected="true" /><select idref="V-257910" selected="true" /><select idref="V-257911" selected="true" /><select idref="V-257912" selected="true" /><select idref="V-257913" selected="true" /><select idref="V-257914" selected="true" /><select idref="V-257915" selected="true" /><select idref="V-257916" selected="true" /><select idref="V-257917" selected="true" /><select idref="V-257918" selected="true" /><select idref="V-257919" selected="true" /><select idref="V-257920" selected="true" /><select idref="V-257921" selected="true" /><select idref="V-257922" selected="true" /><select idref="V-257923" selected="true" /><select idref="V-257924" selected="true" /><select idref="V-257925" selected="true" /><select idref="V-257926" selected="true" /><select idref="V-257927" selected="true" /><select idref="V-257928" selected="true" /><select idref="V-257929" selected="true" /><select idref="V-257930" selected="true" /><select idref="V-257931" selected="true" /><select idref="V-257932" selected="true" /><select idref="V-257934" selected="true" /><select idref="V-257935" selected="true" /><select idref="V-257936" selected="true" /><select idref="V-257937" selected="true" /><select idref="V-257939" selected="true" /><select idref="V-257940" selected="true" /><select idref="V-257941" selected="true" /><select idref="V-257942" selected="true" /><select idref="V-257943" selected="true" /><select idref="V-257944" selected="true" /><select idref="V-257945" selected="true" /><select idref="V-257946" selected="true" /><select idref="V-257947" selected="true" /><select idref="V-257948" selected="true" /><select idref="V-257949" selected="true" /><select idref="V-257950" selected="true" /><select idref="V-257951" selected="true" /><select idref="V-257953" selected="true" /><select idref="V-257954" selected="true" /><select idref="V-257955" selected="true" /><select idref="V-257956" selected="true" /><select idref="V-257957" selected="true" /><select idref="V-257958" selected="true" /><select idref="V-257959" selected="true" /><select idref="V-257960" selected="true" /><select idref="V-257961" selected="true" /><select idref="V-257962" selected="true" /><select idref="V-257963" selected="true" /><select idref="V-257964" selected="true" /><select idref="V-257965" selected="true" /><select idref="V-257966" selected="true" /><select idref="V-257967" selected="true" /><select idref="V-257968" selected="true" /><select idref="V-257969" selected="true" /><select idref="V-257970" selected="true" /><select idref="V-257971" selected="true" /><select idref="V-257972" selected="true" /><select idref="V-257973" selected="true" /><select idref="V-257974" selected="true" /><select idref="V-257975" selected="true" /><select idref="V-257976" selected="true" /><select idref="V-257977" selected="true" /><select idref="V-257978" selected="true" /><select idref="V-257979" selected="true" /><select idref="V-257980" selected="true" /><select idref="V-257981" selected="true" /><select idref="V-257982" selected="true" /><select idref="V-257983" selected="true" /><select idref="V-257984" selected="true" /><select idref="V-257985" selected="true" /><select idref="V-257986" selected="true" /><select idref="V-257989" selected="true" /><select idref="V-257991" selected="true" /><select idref="V-257992" selected="true" /><select idref="V-257993" selected="true" /><select idref="V-257994" selected="true" /><select idref="V-257995" selected="true" /><select idref="V-257996" selected="true" /><select idref="V-257997" selected="true" /><select idref="V-257998" selected="true" /><select idref="V-257999" selected="true" /><select idref="V-258000" selected="true" /><select idref="V-258001" selected="true" /><select idref="V-258002" selected="true" /><select idref="V-258003" selected="true" /><select idref="V-258004" selected="true" /><select idref="V-258005" selected="true" /><select idref="V-258006" selected="true" /><select idref="V-258007" selected="true" /><select idref="V-258008" selected="true" /><select idref="V-258009" selected="true" /><select idref="V-258011" selected="true" /><select idref="V-258012" selected="true" /><select idref="V-258013" selected="true" /><select idref="V-258014" selected="true" /><select idref="V-258015" selected="true" /><select idref="V-258016" selected="true" /><select idref="V-258017" selected="true" /><select idref="V-258018" selected="true" /><select idref="V-258019" selected="true" /><select idref="V-258020" selected="true" /><select idref="V-258021" selected="true" /><select idref="V-258022" selected="true" /><select idref="V-258023" selected="true" /><select idref="V-258024" selected="true" /><select idref="V-258025" selected="true" /><select idref="V-258026" selected="true" /><select idref="V-258027" selected="true" /><select idref="V-258028" selected="true" /><select idref="V-258029" selected="true" /><select idref="V-258030" selected="true" /><select idref="V-258031" selected="true" /><select idref="V-258032" selected="true" /><select idref="V-258033" selected="true" /><select idref="V-258034" selected="true" /><select idref="V-258035" selected="true" /><select idref="V-258036" selected="true" /><select idref="V-258037" selected="true" /><select idref="V-258038" selected="true" /><select idref="V-258039" selected="true" /><select idref="V-258040" selected="true" /><select idref="V-258041" selected="true" /><select idref="V-258042" selected="true" /><select idref="V-258043" selected="true" /><select idref="V-258044" selected="true" /><select idref="V-258045" selected="true" /><select idref="V-258046" selected="true" /><select idref="V-258047" selected="true" /><select idref="V-258048" selected="true" /><select idref="V-258049" selected="true" /><select idref="V-258050" selected="true" /><select idref="V-258051" selected="true" /><select idref="V-258052" selected="true" /><select idref="V-258053" selected="true" /><select idref="V-258054" selected="true" /><select idref="V-258055" selected="true" /><select idref="V-258056" selected="true" /><select idref="V-258057" selected="true" /><select idref="V-258058" selected="true" /><select idref="V-258059" selected="true" /><select idref="V-258060" selected="true" /><select idref="V-258061" selected="true" /><select idref="V-258062" selected="true" /><select idref="V-258068" selected="true" /><select idref="V-258069" selected="true" /><select idref="V-258070" selected="true" /><select idref="V-258071" selected="true" /><select idref="V-258072" selected="true" /><select idref="V-258073" selected="true" /><select idref="V-258074" selected="true" /><select idref="V-258075" selected="true" /><select idref="V-258076" selected="true" /><select idref="V-258077" selected="true" /><select idref="V-258078" selected="true" /><select idref="V-258079" selected="true" /><select idref="V-258080" selected="true" /><select idref="V-258081" selected="true" /><select idref="V-258082" selected="true" /><select idref="V-258083" selected="true" /><select idref="V-258084" selected="true" /><select idref="V-258085" selected="true" /><select idref="V-258086" selected="true" /><select idref="V-258087" selected="true" /><select idref="V-258088" selected="true" /><select idref="V-258089" selected="true" /><select idref="V-258090" selected="true" /><select idref="V-258091" selected="true" /><select idref="V-258094" selected="true" /><select idref="V-258095" selected="true" /><select idref="V-258096" selected="true" /><select idref="V-258097" selected="true" /><select idref="V-258098" selected="true" /><select idref="V-258099" selected="true" /><select idref="V-258100" selected="true" /><select idref="V-258101" selected="true" /><select idref="V-258102" selected="true" /><select idref="V-258103" selected="true" /><select idref="V-258104" selected="true" /><select idref="V-258105" selected="true" /><select idref="V-258106" selected="true" /><select idref="V-258107" selected="true" /><select idref="V-258109" selected="true" /><select idref="V-258110" selected="true" /><select idref="V-258111" selected="true" /><select idref="V-258112" selected="true" /><select idref="V-258113" selected="true" /><select idref="V-258114" selected="true" /><select idref="V-258115" selected="true" /><select idref="V-258116" selected="true" /><select idref="V-258117" selected="true" /><select idref="V-258118" selected="true" /><select idref="V-258120" selected="true" /><select idref="V-258121" selected="true" /><select idref="V-258122" selected="true" /><select idref="V-258123" selected="true" /><select idref="V-258124" selected="true" /><select idref="V-258125" selected="true" /><select idref="V-258126" selected="true" /><select idref="V-258127" selected="true" /><select idref="V-258128" selected="true" /><select idref="V-258129" selected="true" /><select idref="V-258131" selected="true" /><select idref="V-258132" selected="true" /><select idref="V-258133" selected="true" /><select idref="V-258134" selected="true" /><select idref="V-258135" selected="true" /><select idref="V-258136" selected="true" /><select idref="V-258137" selected="true" /><select idref="V-258138" selected="true" /><select idref="V-258139" selected="true" /><select idref="V-258140" selected="true" /><select idref="V-258141" selected="true" /><select idref="V-258142" selected="true" /><select idref="V-258143" selected="true" /><select idref="V-258144" selected="true" /><select idref="V-258146" selected="true" /><select idref="V-258147" selected="true" /><select idref="V-258148" selected="true" /><select idref="V-258149" selected="true" /><select idref="V-258150" selected="true" /><select idref="V-258151" selected="true" /><select idref="V-258152" selected="true" /><select idref="V-258153" selected="true" /><select idref="V-258154" selected="true" /><select idref="V-258155" selected="true" /><select idref="V-258156" selected="true" /><select idref="V-258157" selected="true" /><select idref="V-258158" selected="true" /><select idref="V-258159" selected="true" /><select idref="V-258160" selected="true" /><select idref="V-258161" selected="true" /><select idref="V-258162" selected="true" /><select idref="V-258163" selected="true" /><select idref="V-258164" selected="true" /><select idref="V-258165" selected="true" /><select idref="V-258166" selected="true" /><select idref="V-258167" selected="true" /><select idref="V-258168" selected="true" /><select idref="V-258169" selected="true" /><select idref="V-258170" selected="true" /><select idref="V-258171" selected="true" /><select idref="V-258173" selected="true" /><select idref="V-258174" selected="true" /><select idref="V-258175" selected="true" /><select idref="V-258176" selected="true" /><select idref="V-258177" selected="true" /><select idref="V-258178" selected="true" /><select idref="V-258179" selected="true" /><select idref="V-258180" selected="true" /><select idref="V-258181" selected="true" /><select idref="V-258182" selected="true" /><select idref="V-258183" selected="true" /><select idref="V-258184" selected="true" /><select idref="V-258185" selected="true" /><select idref="V-258186" selected="true" /><select idref="V-258187" selected="true" /><select idref="V-258188" selected="true" /><select idref="V-258189" selected="true" /><select idref="V-258190" selected="true" /><select idref="V-258191" selected="true" /><select idref="V-258192" selected="true" /><select idref="V-258193" selected="true" /><select idref="V-258194" selected="true" /><select idref="V-258195" selected="true" /><select idref="V-258196" selected="true" /><select idref="V-258197" selected="true" /><select idref="V-258198" selected="true" /><select idref="V-258199" selected="true" /><select idref="V-258200" selected="true" /><select idref="V-258201" selected="true" /><select idref="V-258202" selected="true" /><select idref="V-258203" selected="true" /><select idref="V-258204" selected="true" /><select idref="V-258205" selected="true" /><select idref="V-258206" selected="true" /><select idref="V-258207" selected="true" /><select idref="V-258208" selected="true" /><select idref="V-258209" selected="true" /><select idref="V-258210" selected="true" /><select idref="V-258211" selected="true" /><select idref="V-258212" selected="true" /><select idref="V-258213" selected="true" /><select idref="V-258214" selected="true" /><select idref="V-258215" selected="true" /><select idref="V-258216" selected="true" /><select idref="V-258217" selected="true" /><select idref="V-258218" selected="true" /><select idref="V-258219" selected="true" /><select idref="V-258220" selected="true" /><select idref="V-258221" selected="true" /><select idref="V-258222" selected="true" /><select idref="V-258223" selected="true" /><select idref="V-258224" selected="true" /><select idref="V-258225" selected="true" /><select idref="V-258227" selected="true" /><select idref="V-258228" selected="true" /><select idref="V-258229" selected="true" /><select idref="V-258230" selected="true" /><select idref="V-258231" selected="true" /><select idref="V-258232" selected="true" /><select idref="V-258233" selected="true" /><select idref="V-258234" selected="true" /><select idref="V-258236" selected="true" /><select idref="V-258241" selected="true" /><select idref="V-258242" selected="true" /><select idref="V-270174" selected="true" /><select idref="V-270175" selected="true" /><select idref="V-270176" selected="true" /><select idref="V-270177" selected="true" /><select idref="V-270178" selected="true" /><select idref="V-270180" selected="true" /><select idref="V-272488" selected="true" /><select idref="V-272496" selected="true" /></Profile><Profile id="MAC-3_Public"><title>III - Administrative Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-257777" selected="true" /><select idref="V-257778" selected="true" /><select idref="V-257779" selected="true" /><select idref="V-257781" selected="true" /><select idref="V-257782" selected="true" /><select idref="V-257783" selected="true" /><select idref="V-257784" selected="true" /><select idref="V-257785" selected="true" /><select idref="V-257786" selected="true" /><select idref="V-257787" selected="true" /><select idref="V-257788" selected="true" /><select idref="V-257789" selected="true" /><select idref="V-257790" selected="true" /><select idref="V-257791" selected="true" /><select idref="V-257792" selected="true" /><select idref="V-257793" selected="true" /><select idref="V-257794" selected="true" /><select idref="V-257795" selected="true" /><select idref="V-257796" selected="true" /><select idref="V-257797" selected="true" /><select idref="V-257798" selected="true" /><select idref="V-257799" selected="true" /><select idref="V-257800" selected="true" /><select idref="V-257801" selected="true" /><select idref="V-257802" selected="true" /><select idref="V-257803" selected="true" /><select idref="V-257804" selected="true" /><select idref="V-257805" selected="true" /><select idref="V-257806" selected="true" /><select idref="V-257807" selected="true" /><select idref="V-257808" selected="true" /><select idref="V-257809" selected="true" /><select idref="V-257810" selected="true" /><select idref="V-257811" selected="true" /><select idref="V-257812" selected="true" /><select idref="V-257813" selected="true" /><select idref="V-257814" selected="true" /><select idref="V-257815" selected="true" /><select idref="V-257816" selected="true" /><select idref="V-257817" selected="true" /><select idref="V-257818" selected="true" /><select idref="V-257819" selected="true" /><select idref="V-257820" selected="true" /><select idref="V-257821" selected="true" /><select idref="V-257822" selected="true" /><select idref="V-257823" selected="true" /><select idref="V-257824" selected="true" /><select idref="V-257825" selected="true" /><select idref="V-257826" selected="true" /><select idref="V-257827" selected="true" /><select idref="V-257828" selected="true" /><select idref="V-257829" selected="true" /><select idref="V-257830" selected="true" /><select idref="V-257831" selected="true" /><select idref="V-257832" selected="true" /><select idref="V-257833" selected="true" /><select idref="V-257834" selected="true" /><select idref="V-257835" selected="true" /><select idref="V-257836" selected="true" /><select idref="V-257837" selected="true" /><select idref="V-257838" selected="true" /><select idref="V-257839" selected="true" /><select idref="V-257840" selected="true" /><select idref="V-257841" selected="true" /><select idref="V-257842" selected="true" /><select idref="V-257843" selected="true" /><select idref="V-257844" selected="true" /><select idref="V-257845" selected="true" /><select idref="V-257846" selected="true" /><select idref="V-257847" selected="true" /><select idref="V-257848" selected="true" /><select idref="V-257849" selected="true" /><select idref="V-257850" selected="true" /><select idref="V-257851" selected="true" /><select idref="V-257852" selected="true" /><select idref="V-257854" selected="true" /><select idref="V-257855" selected="true" /><select idref="V-257856" selected="true" /><select idref="V-257857" selected="true" /><select idref="V-257858" selected="true" /><select idref="V-257859" selected="true" /><select idref="V-257860" selected="true" /><select idref="V-257861" selected="true" /><select idref="V-257862" selected="true" /><select idref="V-257863" selected="true" /><select idref="V-257864" selected="true" /><select idref="V-257865" selected="true" /><select idref="V-257866" selected="true" /><select idref="V-257867" selected="true" /><select idref="V-257868" selected="true" /><select idref="V-257869" selected="true" /><select idref="V-257870" selected="true" /><select idref="V-257871" selected="true" /><select idref="V-257872" selected="true" /><select idref="V-257873" selected="true" /><select idref="V-257874" selected="true" /><select idref="V-257875" selected="true" /><select idref="V-257876" selected="true" /><select idref="V-257877" selected="true" /><select idref="V-257878" selected="true" /><select idref="V-257879" selected="true" /><select idref="V-257880" selected="true" /><select idref="V-257881" selected="true" /><select idref="V-257882" selected="true" /><select idref="V-257883" selected="true" /><select idref="V-257884" selected="true" /><select idref="V-257885" selected="true" /><select idref="V-257886" selected="true" /><select idref="V-257887" selected="true" /><select idref="V-257888" selected="true" /><select idref="V-257889" selected="true" /><select idref="V-257890" selected="true" /><select idref="V-257891" selected="true" /><select idref="V-257892" selected="true" /><select idref="V-257893" selected="true" /><select idref="V-257894" selected="true" /><select idref="V-257895" selected="true" /><select idref="V-257896" selected="true" /><select idref="V-257897" selected="true" /><select idref="V-257898" selected="true" /><select idref="V-257899" selected="true" /><select idref="V-257900" selected="true" /><select idref="V-257901" selected="true" /><select idref="V-257902" selected="true" /><select idref="V-257903" selected="true" /><select idref="V-257904" selected="true" /><select idref="V-257905" selected="true" /><select idref="V-257906" selected="true" /><select idref="V-257907" selected="true" /><select idref="V-257908" selected="true" /><select idref="V-257909" selected="true" /><select idref="V-257910" selected="true" /><select idref="V-257911" selected="true" /><select idref="V-257912" selected="true" /><select idref="V-257913" selected="true" /><select idref="V-257914" selected="true" /><select idref="V-257915" selected="true" /><select idref="V-257916" selected="true" /><select idref="V-257917" selected="true" /><select idref="V-257918" selected="true" /><select idref="V-257919" selected="true" /><select idref="V-257920" selected="true" /><select idref="V-257921" selected="true" /><select idref="V-257922" selected="true" /><select idref="V-257923" selected="true" /><select idref="V-257924" selected="true" /><select idref="V-257925" selected="true" /><select idref="V-257926" selected="true" /><select idref="V-257927" selected="true" /><select idref="V-257928" selected="true" /><select idref="V-257929" selected="true" /><select idref="V-257930" selected="true" /><select idref="V-257931" selected="true" /><select idref="V-257932" selected="true" /><select idref="V-257934" selected="true" /><select idref="V-257935" selected="true" /><select idref="V-257936" selected="true" /><select idref="V-257937" selected="true" /><select idref="V-257939" selected="true" /><select idref="V-257940" selected="true" /><select idref="V-257941" selected="true" /><select idref="V-257942" selected="true" /><select idref="V-257943" selected="true" /><select idref="V-257944" selected="true" /><select idref="V-257945" selected="true" /><select idref="V-257946" selected="true" /><select idref="V-257947" selected="true" /><select idref="V-257948" selected="true" /><select idref="V-257949" selected="true" /><select idref="V-257950" selected="true" /><select idref="V-257951" selected="true" /><select idref="V-257953" selected="true" /><select idref="V-257954" selected="true" /><select idref="V-257955" selected="true" /><select idref="V-257956" selected="true" /><select idref="V-257957" selected="true" /><select idref="V-257958" selected="true" /><select idref="V-257959" selected="true" /><select idref="V-257960" selected="true" /><select idref="V-257961" selected="true" /><select idref="V-257962" selected="true" /><select idref="V-257963" selected="true" /><select idref="V-257964" selected="true" /><select idref="V-257965" selected="true" /><select idref="V-257966" selected="true" /><select idref="V-257967" selected="true" /><select idref="V-257968" selected="true" /><select idref="V-257969" selected="true" /><select idref="V-257970" selected="true" /><select idref="V-257971" selected="true" /><select idref="V-257972" selected="true" /><select idref="V-257973" selected="true" /><select idref="V-257974" selected="true" /><select idref="V-257975" selected="true" /><select idref="V-257976" selected="true" /><select idref="V-257977" selected="true" /><select idref="V-257978" selected="true" /><select idref="V-257979" selected="true" /><select idref="V-257980" selected="true" /><select idref="V-257981" selected="true" /><select idref="V-257982" selected="true" /><select idref="V-257983" selected="true" /><select idref="V-257984" selected="true" /><select idref="V-257985" selected="true" /><select idref="V-257986" selected="true" /><select idref="V-257989" selected="true" /><select idref="V-257991" selected="true" /><select idref="V-257992" selected="true" /><select idref="V-257993" selected="true" /><select idref="V-257994" selected="true" /><select idref="V-257995" selected="true" /><select idref="V-257996" selected="true" /><select idref="V-257997" selected="true" /><select idref="V-257998" selected="true" /><select idref="V-257999" selected="true" /><select idref="V-258000" selected="true" /><select idref="V-258001" selected="true" /><select idref="V-258002" selected="true" /><select idref="V-258003" selected="true" /><select idref="V-258004" selected="true" /><select idref="V-258005" selected="true" /><select idref="V-258006" selected="true" /><select idref="V-258007" selected="true" /><select idref="V-258008" selected="true" /><select idref="V-258009" selected="true" /><select idref="V-258011" selected="true" /><select idref="V-258012" selected="true" /><select idref="V-258013" selected="true" /><select idref="V-258014" selected="true" /><select idref="V-258015" selected="true" /><select idref="V-258016" selected="true" /><select idref="V-258017" selected="true" /><select idref="V-258018" selected="true" /><select idref="V-258019" selected="true" /><select idref="V-258020" selected="true" /><select idref="V-258021" selected="true" /><select idref="V-258022" selected="true" /><select idref="V-258023" selected="true" /><select idref="V-258024" selected="true" /><select idref="V-258025" selected="true" /><select idref="V-258026" selected="true" /><select idref="V-258027" selected="true" /><select idref="V-258028" selected="true" /><select idref="V-258029" selected="true" /><select idref="V-258030" selected="true" /><select idref="V-258031" selected="true" /><select idref="V-258032" selected="true" /><select idref="V-258033" selected="true" /><select idref="V-258034" selected="true" /><select idref="V-258035" selected="true" /><select idref="V-258036" selected="true" /><select idref="V-258037" selected="true" /><select idref="V-258038" selected="true" /><select idref="V-258039" selected="true" /><select idref="V-258040" selected="true" /><select idref="V-258041" selected="true" /><select idref="V-258042" selected="true" /><select idref="V-258043" selected="true" /><select idref="V-258044" selected="true" /><select idref="V-258045" selected="true" /><select idref="V-258046" selected="true" /><select idref="V-258047" selected="true" /><select idref="V-258048" selected="true" /><select idref="V-258049" selected="true" /><select idref="V-258050" selected="true" /><select idref="V-258051" selected="true" /><select idref="V-258052" selected="true" /><select idref="V-258053" selected="true" /><select idref="V-258054" selected="true" /><select idref="V-258055" selected="true" /><select idref="V-258056" selected="true" /><select idref="V-258057" selected="true" /><select idref="V-258058" selected="true" /><select idref="V-258059" selected="true" /><select idref="V-258060" selected="true" /><select idref="V-258061" selected="true" /><select idref="V-258062" selected="true" /><select idref="V-258068" selected="true" /><select idref="V-258069" selected="true" /><select idref="V-258070" selected="true" /><select idref="V-258071" selected="true" /><select idref="V-258072" selected="true" /><select idref="V-258073" selected="true" /><select idref="V-258074" selected="true" /><select idref="V-258075" selected="true" /><select idref="V-258076" selected="true" /><select idref="V-258077" selected="true" /><select idref="V-258078" selected="true" /><select idref="V-258079" selected="true" /><select idref="V-258080" selected="true" /><select idref="V-258081" selected="true" /><select idref="V-258082" selected="true" /><select idref="V-258083" selected="true" /><select idref="V-258084" selected="true" /><select idref="V-258085" selected="true" /><select idref="V-258086" selected="true" /><select idref="V-258087" selected="true" /><select idref="V-258088" selected="true" /><select idref="V-258089" selected="true" /><select idref="V-258090" selected="true" /><select idref="V-258091" selected="true" /><select idref="V-258094" selected="true" /><select idref="V-258095" selected="true" /><select idref="V-258096" selected="true" /><select idref="V-258097" selected="true" /><select idref="V-258098" selected="true" /><select idref="V-258099" selected="true" /><select idref="V-258100" selected="true" /><select idref="V-258101" selected="true" /><select idref="V-258102" selected="true" /><select idref="V-258103" selected="true" /><select idref="V-258104" selected="true" /><select idref="V-258105" selected="true" /><select idref="V-258106" selected="true" /><select idref="V-258107" selected="true" /><select idref="V-258109" selected="true" /><select idref="V-258110" selected="true" /><select idref="V-258111" selected="true" /><select idref="V-258112" selected="true" /><select idref="V-258113" selected="true" /><select idref="V-258114" selected="true" /><select idref="V-258115" selected="true" /><select idref="V-258116" selected="true" /><select idref="V-258117" selected="true" /><select idref="V-258118" selected="true" /><select idref="V-258120" selected="true" /><select idref="V-258121" selected="true" /><select idref="V-258122" selected="true" /><select idref="V-258123" selected="true" /><select idref="V-258124" selected="true" /><select idref="V-258125" selected="true" /><select idref="V-258126" selected="true" /><select idref="V-258127" selected="true" /><select idref="V-258128" selected="true" /><select idref="V-258129" selected="true" /><select idref="V-258131" selected="true" /><select idref="V-258132" selected="true" /><select idref="V-258133" selected="true" /><select idref="V-258134" selected="true" /><select idref="V-258135" selected="true" /><select idref="V-258136" selected="true" /><select idref="V-258137" selected="true" /><select idref="V-258138" selected="true" /><select idref="V-258139" selected="true" /><select idref="V-258140" selected="true" /><select idref="V-258141" selected="true" /><select idref="V-258142" selected="true" /><select idref="V-258143" selected="true" /><select idref="V-258144" selected="true" /><select idref="V-258146" selected="true" /><select idref="V-258147" selected="true" /><select idref="V-258148" selected="true" /><select idref="V-258149" selected="true" /><select idref="V-258150" selected="true" /><select idref="V-258151" selected="true" /><select idref="V-258152" selected="true" /><select idref="V-258153" selected="true" /><select idref="V-258154" selected="true" /><select idref="V-258155" selected="true" /><select idref="V-258156" selected="true" /><select idref="V-258157" selected="true" /><select idref="V-258158" selected="true" /><select idref="V-258159" selected="true" /><select idref="V-258160" selected="true" /><select idref="V-258161" selected="true" /><select idref="V-258162" selected="true" /><select idref="V-258163" selected="true" /><select idref="V-258164" selected="true" /><select idref="V-258165" selected="true" /><select idref="V-258166" selected="true" /><select idref="V-258167" selected="true" /><select idref="V-258168" selected="true" /><select idref="V-258169" selected="true" /><select idref="V-258170" selected="true" /><select idref="V-258171" selected="true" /><select idref="V-258173" selected="true" /><select idref="V-258174" selected="true" /><select idref="V-258175" selected="true" /><select idref="V-258176" selected="true" /><select idref="V-258177" selected="true" /><select idref="V-258178" selected="true" /><select idref="V-258179" selected="true" /><select idref="V-258180" selected="true" /><select idref="V-258181" selected="true" /><select idref="V-258182" selected="true" /><select idref="V-258183" selected="true" /><select idref="V-258184" selected="true" /><select idref="V-258185" selected="true" /><select idref="V-258186" selected="true" /><select idref="V-258187" selected="true" /><select idref="V-258188" selected="true" /><select idref="V-258189" selected="true" /><select idref="V-258190" selected="true" /><select idref="V-258191" selected="true" /><select idref="V-258192" selected="true" /><select idref="V-258193" selected="true" /><select idref="V-258194" selected="true" /><select idref="V-258195" selected="true" /><select idref="V-258196" selected="true" /><select idref="V-258197" selected="true" /><select idref="V-258198" selected="true" /><select idref="V-258199" selected="true" /><select idref="V-258200" selected="true" /><select idref="V-258201" selected="true" /><select idref="V-258202" selected="true" /><select idref="V-258203" selected="true" /><select idref="V-258204" selected="true" /><select idref="V-258205" selected="true" /><select idref="V-258206" selected="true" /><select idref="V-258207" selected="true" /><select idref="V-258208" selected="true" /><select idref="V-258209" selected="true" /><select idref="V-258210" selected="true" /><select idref="V-258211" selected="true" /><select idref="V-258212" selected="true" /><select idref="V-258213" selected="true" /><select idref="V-258214" selected="true" /><select idref="V-258215" selected="true" /><select idref="V-258216" selected="true" /><select idref="V-258217" selected="true" /><select idref="V-258218" selected="true" /><select idref="V-258219" selected="true" /><select idref="V-258220" selected="true" /><select idref="V-258221" selected="true" /><select idref="V-258222" selected="true" /><select idref="V-258223" selected="true" /><select idref="V-258224" selected="true" /><select idref="V-258225" selected="true" /><select idref="V-258227" selected="true" /><select idref="V-258228" selected="true" /><select idref="V-258229" selected="true" /><select idref="V-258230" selected="true" /><select idref="V-258231" selected="true" /><select idref="V-258232" selected="true" /><select idref="V-258233" selected="true" /><select idref="V-258234" selected="true" /><select idref="V-258236" selected="true" /><select idref="V-258241" selected="true" /><select idref="V-258242" selected="true" /><select idref="V-270174" selected="true" /><select idref="V-270175" selected="true" /><select idref="V-270176" selected="true" /><select idref="V-270177" selected="true" /><select idref="V-270178" selected="true" /><select idref="V-270180" selected="true" /><select idref="V-272488" selected="true" /><select idref="V-272496" selected="true" /></Profile><Profile id="MAC-3_Sensitive"><title>III - Administrative Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-257777" selected="true" /><select idref="V-257778" selected="true" /><select idref="V-257779" selected="true" /><select idref="V-257781" selected="true" /><select idref="V-257782" selected="true" /><select idref="V-257783" selected="true" /><select idref="V-257784" selected="true" /><select idref="V-257785" selected="true" /><select idref="V-257786" selected="true" /><select idref="V-257787" selected="true" /><select idref="V-257788" selected="true" /><select idref="V-257789" selected="true" /><select idref="V-257790" selected="true" /><select idref="V-257791" selected="true" /><select idref="V-257792" selected="true" /><select idref="V-257793" selected="true" /><select idref="V-257794" selected="true" /><select idref="V-257795" selected="true" /><select idref="V-257796" selected="true" /><select idref="V-257797" selected="true" /><select idref="V-257798" selected="true" /><select idref="V-257799" selected="true" /><select idref="V-257800" selected="true" /><select idref="V-257801" selected="true" /><select idref="V-257802" selected="true" /><select idref="V-257803" selected="true" /><select idref="V-257804" selected="true" /><select idref="V-257805" selected="true" /><select idref="V-257806" selected="true" /><select idref="V-257807" selected="true" /><select idref="V-257808" selected="true" /><select idref="V-257809" selected="true" /><select idref="V-257810" selected="true" /><select idref="V-257811" selected="true" /><select idref="V-257812" selected="true" /><select idref="V-257813" selected="true" /><select idref="V-257814" selected="true" /><select idref="V-257815" selected="true" /><select idref="V-257816" selected="true" /><select idref="V-257817" selected="true" /><select idref="V-257818" selected="true" /><select idref="V-257819" selected="true" /><select idref="V-257820" selected="true" /><select idref="V-257821" selected="true" /><select idref="V-257822" selected="true" /><select idref="V-257823" selected="true" /><select idref="V-257824" selected="true" /><select idref="V-257825" selected="true" /><select idref="V-257826" selected="true" /><select idref="V-257827" selected="true" /><select idref="V-257828" selected="true" /><select idref="V-257829" selected="true" /><select idref="V-257830" selected="true" /><select idref="V-257831" selected="true" /><select idref="V-257832" selected="true" /><select idref="V-257833" selected="true" /><select idref="V-257834" selected="true" /><select idref="V-257835" selected="true" /><select idref="V-257836" selected="true" /><select idref="V-257837" selected="true" /><select idref="V-257838" selected="true" /><select idref="V-257839" selected="true" /><select idref="V-257840" selected="true" /><select idref="V-257841" selected="true" /><select idref="V-257842" selected="true" /><select idref="V-257843" selected="true" /><select idref="V-257844" selected="true" /><select idref="V-257845" selected="true" /><select idref="V-257846" selected="true" /><select idref="V-257847" selected="true" /><select idref="V-257848" selected="true" /><select idref="V-257849" selected="true" /><select idref="V-257850" selected="true" /><select idref="V-257851" selected="true" /><select idref="V-257852" selected="true" /><select idref="V-257854" selected="true" /><select idref="V-257855" selected="true" /><select idref="V-257856" selected="true" /><select idref="V-257857" selected="true" /><select idref="V-257858" selected="true" /><select idref="V-257859" selected="true" /><select idref="V-257860" selected="true" /><select idref="V-257861" selected="true" /><select idref="V-257862" selected="true" /><select idref="V-257863" selected="true" /><select idref="V-257864" selected="true" /><select idref="V-257865" selected="true" /><select idref="V-257866" selected="true" /><select idref="V-257867" selected="true" /><select idref="V-257868" selected="true" /><select idref="V-257869" selected="true" /><select idref="V-257870" selected="true" /><select idref="V-257871" selected="true" /><select idref="V-257872" selected="true" /><select idref="V-257873" selected="true" /><select idref="V-257874" selected="true" /><select idref="V-257875" selected="true" /><select idref="V-257876" selected="true" /><select idref="V-257877" selected="true" /><select idref="V-257878" selected="true" /><select idref="V-257879" selected="true" /><select idref="V-257880" selected="true" /><select idref="V-257881" selected="true" /><select idref="V-257882" selected="true" /><select idref="V-257883" selected="true" /><select idref="V-257884" selected="true" /><select idref="V-257885" selected="true" /><select idref="V-257886" selected="true" /><select idref="V-257887" selected="true" /><select idref="V-257888" selected="true" /><select idref="V-257889" selected="true" /><select idref="V-257890" selected="true" /><select idref="V-257891" selected="true" /><select idref="V-257892" selected="true" /><select idref="V-257893" selected="true" /><select idref="V-257894" selected="true" /><select idref="V-257895" selected="true" /><select idref="V-257896" selected="true" /><select idref="V-257897" selected="true" /><select idref="V-257898" selected="true" /><select idref="V-257899" selected="true" /><select idref="V-257900" selected="true" /><select idref="V-257901" selected="true" /><select idref="V-257902" selected="true" /><select idref="V-257903" selected="true" /><select idref="V-257904" selected="true" /><select idref="V-257905" selected="true" /><select idref="V-257906" selected="true" /><select idref="V-257907" selected="true" /><select idref="V-257908" selected="true" /><select idref="V-257909" selected="true" /><select idref="V-257910" selected="true" /><select idref="V-257911" selected="true" /><select idref="V-257912" selected="true" /><select idref="V-257913" selected="true" /><select idref="V-257914" selected="true" /><select idref="V-257915" selected="true" /><select idref="V-257916" selected="true" /><select idref="V-257917" selected="true" /><select idref="V-257918" selected="true" /><select idref="V-257919" selected="true" /><select idref="V-257920" selected="true" /><select idref="V-257921" selected="true" /><select idref="V-257922" selected="true" /><select idref="V-257923" selected="true" /><select idref="V-257924" selected="true" /><select idref="V-257925" selected="true" /><select idref="V-257926" selected="true" /><select idref="V-257927" selected="true" /><select idref="V-257928" selected="true" /><select idref="V-257929" selected="true" /><select idref="V-257930" selected="true" /><select idref="V-257931" selected="true" /><select idref="V-257932" selected="true" /><select idref="V-257934" selected="true" /><select idref="V-257935" selected="true" /><select idref="V-257936" selected="true" /><select idref="V-257937" selected="true" /><select idref="V-257939" selected="true" /><select idref="V-257940" selected="true" /><select idref="V-257941" selected="true" /><select idref="V-257942" selected="true" /><select idref="V-257943" selected="true" /><select idref="V-257944" selected="true" /><select idref="V-257945" selected="true" /><select idref="V-257946" selected="true" /><select idref="V-257947" selected="true" /><select idref="V-257948" selected="true" /><select idref="V-257949" selected="true" /><select idref="V-257950" selected="true" /><select idref="V-257951" selected="true" /><select idref="V-257953" selected="true" /><select idref="V-257954" selected="true" /><select idref="V-257955" selected="true" /><select idref="V-257956" selected="true" /><select idref="V-257957" selected="true" /><select idref="V-257958" selected="true" /><select idref="V-257959" selected="true" /><select idref="V-257960" selected="true" /><select idref="V-257961" selected="true" /><select idref="V-257962" selected="true" /><select idref="V-257963" selected="true" /><select idref="V-257964" selected="true" /><select idref="V-257965" selected="true" /><select idref="V-257966" selected="true" /><select idref="V-257967" selected="true" /><select idref="V-257968" selected="true" /><select idref="V-257969" selected="true" /><select idref="V-257970" selected="true" /><select idref="V-257971" selected="true" /><select idref="V-257972" selected="true" /><select idref="V-257973" selected="true" /><select idref="V-257974" selected="true" /><select idref="V-257975" selected="true" /><select idref="V-257976" selected="true" /><select idref="V-257977" selected="true" /><select idref="V-257978" selected="true" /><select idref="V-257979" selected="true" /><select idref="V-257980" selected="true" /><select idref="V-257981" selected="true" /><select idref="V-257982" selected="true" /><select idref="V-257983" selected="true" /><select idref="V-257984" selected="true" /><select idref="V-257985" selected="true" /><select idref="V-257986" selected="true" /><select idref="V-257989" selected="true" /><select idref="V-257991" selected="true" /><select idref="V-257992" selected="true" /><select idref="V-257993" selected="true" /><select idref="V-257994" selected="true" /><select idref="V-257995" selected="true" /><select idref="V-257996" selected="true" /><select idref="V-257997" selected="true" /><select idref="V-257998" selected="true" /><select idref="V-257999" selected="true" /><select idref="V-258000" selected="true" /><select idref="V-258001" selected="true" /><select idref="V-258002" selected="true" /><select idref="V-258003" selected="true" /><select idref="V-258004" selected="true" /><select idref="V-258005" selected="true" /><select idref="V-258006" selected="true" /><select idref="V-258007" selected="true" /><select idref="V-258008" selected="true" /><select idref="V-258009" selected="true" /><select idref="V-258011" selected="true" /><select idref="V-258012" selected="true" /><select idref="V-258013" selected="true" /><select idref="V-258014" selected="true" /><select idref="V-258015" selected="true" /><select idref="V-258016" selected="true" /><select idref="V-258017" selected="true" /><select idref="V-258018" selected="true" /><select idref="V-258019" selected="true" /><select idref="V-258020" selected="true" /><select idref="V-258021" selected="true" /><select idref="V-258022" selected="true" /><select idref="V-258023" selected="true" /><select idref="V-258024" selected="true" /><select idref="V-258025" selected="true" /><select idref="V-258026" selected="true" /><select idref="V-258027" selected="true" /><select idref="V-258028" selected="true" /><select idref="V-258029" selected="true" /><select idref="V-258030" selected="true" /><select idref="V-258031" selected="true" /><select idref="V-258032" selected="true" /><select idref="V-258033" selected="true" /><select idref="V-258034" selected="true" /><select idref="V-258035" selected="true" /><select idref="V-258036" selected="true" /><select idref="V-258037" selected="true" /><select idref="V-258038" selected="true" /><select idref="V-258039" selected="true" /><select idref="V-258040" selected="true" /><select idref="V-258041" selected="true" /><select idref="V-258042" selected="true" /><select idref="V-258043" selected="true" /><select idref="V-258044" selected="true" /><select idref="V-258045" selected="true" /><select idref="V-258046" selected="true" /><select idref="V-258047" selected="true" /><select idref="V-258048" selected="true" /><select idref="V-258049" selected="true" /><select idref="V-258050" selected="true" /><select idref="V-258051" selected="true" /><select idref="V-258052" selected="true" /><select idref="V-258053" selected="true" /><select idref="V-258054" selected="true" /><select idref="V-258055" selected="true" /><select idref="V-258056" selected="true" /><select idref="V-258057" selected="true" /><select idref="V-258058" selected="true" /><select idref="V-258059" selected="true" /><select idref="V-258060" selected="true" /><select idref="V-258061" selected="true" /><select idref="V-258062" selected="true" /><select idref="V-258068" selected="true" /><select idref="V-258069" selected="true" /><select idref="V-258070" selected="true" /><select idref="V-258071" selected="true" /><select idref="V-258072" selected="true" /><select idref="V-258073" selected="true" /><select idref="V-258074" selected="true" /><select idref="V-258075" selected="true" /><select idref="V-258076" selected="true" /><select idref="V-258077" selected="true" /><select idref="V-258078" selected="true" /><select idref="V-258079" selected="true" /><select idref="V-258080" selected="true" /><select idref="V-258081" selected="true" /><select idref="V-258082" selected="true" /><select idref="V-258083" selected="true" /><select idref="V-258084" selected="true" /><select idref="V-258085" selected="true" /><select idref="V-258086" selected="true" /><select idref="V-258087" selected="true" /><select idref="V-258088" selected="true" /><select idref="V-258089" selected="true" /><select idref="V-258090" selected="true" /><select idref="V-258091" selected="true" /><select idref="V-258094" selected="true" /><select idref="V-258095" selected="true" /><select idref="V-258096" selected="true" /><select idref="V-258097" selected="true" /><select idref="V-258098" selected="true" /><select idref="V-258099" selected="true" /><select idref="V-258100" selected="true" /><select idref="V-258101" selected="true" /><select idref="V-258102" selected="true" /><select idref="V-258103" selected="true" /><select idref="V-258104" selected="true" /><select idref="V-258105" selected="true" /><select idref="V-258106" selected="true" /><select idref="V-258107" selected="true" /><select idref="V-258109" selected="true" /><select idref="V-258110" selected="true" /><select idref="V-258111" selected="true" /><select idref="V-258112" selected="true" /><select idref="V-258113" selected="true" /><select idref="V-258114" selected="true" /><select idref="V-258115" selected="true" /><select idref="V-258116" selected="true" /><select idref="V-258117" selected="true" /><select idref="V-258118" selected="true" /><select idref="V-258120" selected="true" /><select idref="V-258121" selected="true" /><select idref="V-258122" selected="true" /><select idref="V-258123" selected="true" /><select idref="V-258124" selected="true" /><select idref="V-258125" selected="true" /><select idref="V-258126" selected="true" /><select idref="V-258127" selected="true" /><select idref="V-258128" selected="true" /><select idref="V-258129" selected="true" /><select idref="V-258131" selected="true" /><select idref="V-258132" selected="true" /><select idref="V-258133" selected="true" /><select idref="V-258134" selected="true" /><select idref="V-258135" selected="true" /><select idref="V-258136" selected="true" /><select idref="V-258137" selected="true" /><select idref="V-258138" selected="true" /><select idref="V-258139" selected="true" /><select idref="V-258140" selected="true" /><select idref="V-258141" selected="true" /><select idref="V-258142" selected="true" /><select idref="V-258143" selected="true" /><select idref="V-258144" selected="true" /><select idref="V-258146" selected="true" /><select idref="V-258147" selected="true" /><select idref="V-258148" selected="true" /><select idref="V-258149" selected="true" /><select idref="V-258150" selected="true" /><select idref="V-258151" selected="true" /><select idref="V-258152" selected="true" /><select idref="V-258153" selected="true" /><select idref="V-258154" selected="true" /><select idref="V-258155" selected="true" /><select idref="V-258156" selected="true" /><select idref="V-258157" selected="true" /><select idref="V-258158" selected="true" /><select idref="V-258159" selected="true" /><select idref="V-258160" selected="true" /><select idref="V-258161" selected="true" /><select idref="V-258162" selected="true" /><select idref="V-258163" selected="true" /><select idref="V-258164" selected="true" /><select idref="V-258165" selected="true" /><select idref="V-258166" selected="true" /><select idref="V-258167" selected="true" /><select idref="V-258168" selected="true" /><select idref="V-258169" selected="true" /><select idref="V-258170" selected="true" /><select idref="V-258171" selected="true" /><select idref="V-258173" selected="true" /><select idref="V-258174" selected="true" /><select idref="V-258175" selected="true" /><select idref="V-258176" selected="true" /><select idref="V-258177" selected="true" /><select idref="V-258178" selected="true" /><select idref="V-258179" selected="true" /><select idref="V-258180" selected="true" /><select idref="V-258181" selected="true" /><select idref="V-258182" selected="true" /><select idref="V-258183" selected="true" /><select idref="V-258184" selected="true" /><select idref="V-258185" selected="true" /><select idref="V-258186" selected="true" /><select idref="V-258187" selected="true" /><select idref="V-258188" selected="true" /><select idref="V-258189" selected="true" /><select idref="V-258190" selected="true" /><select idref="V-258191" selected="true" /><select idref="V-258192" selected="true" /><select idref="V-258193" selected="true" /><select idref="V-258194" selected="true" /><select idref="V-258195" selected="true" /><select idref="V-258196" selected="true" /><select idref="V-258197" selected="true" /><select idref="V-258198" selected="true" /><select idref="V-258199" selected="true" /><select idref="V-258200" selected="true" /><select idref="V-258201" selected="true" /><select idref="V-258202" selected="true" /><select idref="V-258203" selected="true" /><select idref="V-258204" selected="true" /><select idref="V-258205" selected="true" /><select idref="V-258206" selected="true" /><select idref="V-258207" selected="true" /><select idref="V-258208" selected="true" /><select idref="V-258209" selected="true" /><select idref="V-258210" selected="true" /><select idref="V-258211" selected="true" /><select idref="V-258212" selected="true" /><select idref="V-258213" selected="true" /><select idref="V-258214" selected="true" /><select idref="V-258215" selected="true" /><select idref="V-258216" selected="true" /><select idref="V-258217" selected="true" /><select idref="V-258218" selected="true" /><select idref="V-258219" selected="true" /><select idref="V-258220" selected="true" /><select idref="V-258221" selected="true" /><select idref="V-258222" selected="true" /><select idref="V-258223" selected="true" /><select idref="V-258224" selected="true" /><select idref="V-258225" selected="true" /><select idref="V-258227" selected="true" /><select idref="V-258228" selected="true" /><select idref="V-258229" selected="true" /><select idref="V-258230" selected="true" /><select idref="V-258231" selected="true" /><select idref="V-258232" selected="true" /><select idref="V-258233" selected="true" /><select idref="V-258234" selected="true" /><select idref="V-258236" selected="true" /><select idref="V-258241" selected="true" /><select idref="V-258242" selected="true" /><select idref="V-270174" selected="true" /><select idref="V-270175" selected="true" /><select idref="V-270176" selected="true" /><select idref="V-270177" selected="true" /><select idref="V-270178" selected="true" /><select idref="V-270180" selected="true" /><select idref="V-272488" selected="true" /><select idref="V-272496" selected="true" /></Profile><Group id="V-257777"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257777r991589_rule" weight="10.0" severity="high"><version>RHEL-09-211010</version><title>RHEL 9 must be a vendor-supported release.</title><description>&lt;VulnDiscussion&gt;An operating system release is considered "supported" if the vendor continues to provide security patches for the product. With an unsupported release, it will not be possible to resolve security issues discovered in the system software.
+<?xml version="1.0" encoding="utf-8"?><?xml-stylesheet type='text/xsl' href='STIG_unclass.xsl'?><Benchmark xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.1 http://nvd.nist.gov/schema/xccdf-1.1.4.xsd http://cpe.mitre.org/dictionary/2.0 http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd" id="RHEL_9_STIG" xml:lang="en" xmlns="http://checklists.nist.gov/xccdf/1.1"><status date="2025-11-24">accepted</status><title>Red Hat Enterprise Linux 9 Security Technical Implementation Guide</title><description>This Security Technical Implementation Guide is published as a tool to improve the security of Department of Defense (DOD) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.</description><notice id="terms-of-use" xml:lang="en"></notice><front-matter xml:lang="en"></front-matter><rear-matter xml:lang="en"></rear-matter><reference href="https://cyber.mil"><dc:publisher>DISA</dc:publisher><dc:source>STIG.DOD.MIL</dc:source></reference><plain-text id="release-info">Release: 7 Benchmark Date: 05 Jan 2026</plain-text><plain-text id="generator">3.5.2</plain-text><plain-text id="conventionsVersion">1.10.0</plain-text><version>2</version><Profile id="MAC-1_Classified"><title>I - Mission Critical Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-257777" selected="true" /><select idref="V-257778" selected="true" /><select idref="V-257779" selected="true" /><select idref="V-257781" selected="true" /><select idref="V-257782" selected="true" /><select idref="V-257783" selected="true" /><select idref="V-257784" selected="true" /><select idref="V-257785" selected="true" /><select idref="V-257786" selected="true" /><select idref="V-257787" selected="true" /><select idref="V-257788" selected="true" /><select idref="V-257789" selected="true" /><select idref="V-257790" selected="true" /><select idref="V-257791" selected="true" /><select idref="V-257792" selected="true" /><select idref="V-257793" selected="true" /><select idref="V-257794" selected="true" /><select idref="V-257795" selected="true" /><select idref="V-257796" selected="true" /><select idref="V-257797" selected="true" /><select idref="V-257798" selected="true" /><select idref="V-257799" selected="true" /><select idref="V-257800" selected="true" /><select idref="V-257801" selected="true" /><select idref="V-257802" selected="true" /><select idref="V-257803" selected="true" /><select idref="V-257804" selected="true" /><select idref="V-257805" selected="true" /><select idref="V-257806" selected="true" /><select idref="V-257807" selected="true" /><select idref="V-257808" selected="true" /><select idref="V-257809" selected="true" /><select idref="V-257810" selected="true" /><select idref="V-257811" selected="true" /><select idref="V-257812" selected="true" /><select idref="V-257813" selected="true" /><select idref="V-257814" selected="true" /><select idref="V-257815" selected="true" /><select idref="V-257816" selected="true" /><select idref="V-257817" selected="true" /><select idref="V-257818" selected="true" /><select idref="V-257819" selected="true" /><select idref="V-257820" selected="true" /><select idref="V-257821" selected="true" /><select idref="V-257822" selected="true" /><select idref="V-257823" selected="true" /><select idref="V-257824" selected="true" /><select idref="V-257825" selected="true" /><select idref="V-257826" selected="true" /><select idref="V-257827" selected="true" /><select idref="V-257828" selected="true" /><select idref="V-257829" selected="true" /><select idref="V-257830" selected="true" /><select idref="V-257831" selected="true" /><select idref="V-257832" selected="true" /><select idref="V-257833" selected="true" /><select idref="V-257834" selected="true" /><select idref="V-257835" selected="true" /><select idref="V-257836" selected="true" /><select idref="V-257837" selected="true" /><select idref="V-257838" selected="true" /><select idref="V-257839" selected="true" /><select idref="V-257840" selected="true" /><select idref="V-257841" selected="true" /><select idref="V-257842" selected="true" /><select idref="V-257843" selected="true" /><select idref="V-257844" selected="true" /><select idref="V-257845" selected="true" /><select idref="V-257846" selected="true" /><select idref="V-257847" selected="true" /><select idref="V-257848" selected="true" /><select idref="V-257849" selected="true" /><select idref="V-257850" selected="true" /><select idref="V-257851" selected="true" /><select idref="V-257852" selected="true" /><select idref="V-257854" selected="true" /><select idref="V-257855" selected="true" /><select idref="V-257856" selected="true" /><select idref="V-257857" selected="true" /><select idref="V-257858" selected="true" /><select idref="V-257859" selected="true" /><select idref="V-257860" selected="true" /><select idref="V-257861" selected="true" /><select idref="V-257862" selected="true" /><select idref="V-257863" selected="true" /><select idref="V-257864" selected="true" /><select idref="V-257865" selected="true" /><select idref="V-257866" selected="true" /><select idref="V-257867" selected="true" /><select idref="V-257868" selected="true" /><select idref="V-257869" selected="true" /><select idref="V-257870" selected="true" /><select idref="V-257871" selected="true" /><select idref="V-257872" selected="true" /><select idref="V-257873" selected="true" /><select idref="V-257874" selected="true" /><select idref="V-257875" selected="true" /><select idref="V-257876" selected="true" /><select idref="V-257877" selected="true" /><select idref="V-257878" selected="true" /><select idref="V-257879" selected="true" /><select idref="V-257880" selected="true" /><select idref="V-257881" selected="true" /><select idref="V-257882" selected="true" /><select idref="V-257883" selected="true" /><select idref="V-257884" selected="true" /><select idref="V-257885" selected="true" /><select idref="V-257886" selected="true" /><select idref="V-257887" selected="true" /><select idref="V-257888" selected="true" /><select idref="V-257889" selected="true" /><select idref="V-257890" selected="true" /><select idref="V-257891" selected="true" /><select idref="V-257892" selected="true" /><select idref="V-257893" selected="true" /><select idref="V-257894" selected="true" /><select idref="V-257895" selected="true" /><select idref="V-257896" selected="true" /><select idref="V-257897" selected="true" /><select idref="V-257898" selected="true" /><select idref="V-257899" selected="true" /><select idref="V-257900" selected="true" /><select idref="V-257901" selected="true" /><select idref="V-257902" selected="true" /><select idref="V-257903" selected="true" /><select idref="V-257904" selected="true" /><select idref="V-257905" selected="true" /><select idref="V-257906" selected="true" /><select idref="V-257907" selected="true" /><select idref="V-257908" selected="true" /><select idref="V-257909" selected="true" /><select idref="V-257910" selected="true" /><select idref="V-257911" selected="true" /><select idref="V-257912" selected="true" /><select idref="V-257913" selected="true" /><select idref="V-257914" selected="true" /><select idref="V-257915" selected="true" /><select idref="V-257916" selected="true" /><select idref="V-257917" selected="true" /><select idref="V-257918" selected="true" /><select idref="V-257919" selected="true" /><select idref="V-257920" selected="true" /><select idref="V-257921" selected="true" /><select idref="V-257922" selected="true" /><select idref="V-257923" selected="true" /><select idref="V-257924" selected="true" /><select idref="V-257925" selected="true" /><select idref="V-257926" selected="true" /><select idref="V-257927" selected="true" /><select idref="V-257928" selected="true" /><select idref="V-257929" selected="true" /><select idref="V-257930" selected="true" /><select idref="V-257931" selected="true" /><select idref="V-257932" selected="true" /><select idref="V-257934" selected="true" /><select idref="V-257935" selected="true" /><select idref="V-257936" selected="true" /><select idref="V-257937" selected="true" /><select idref="V-257939" selected="true" /><select idref="V-257940" selected="true" /><select idref="V-257941" selected="true" /><select idref="V-257942" selected="true" /><select idref="V-257943" selected="true" /><select idref="V-257944" selected="true" /><select idref="V-257945" selected="true" /><select idref="V-257946" selected="true" /><select idref="V-257947" selected="true" /><select idref="V-257948" selected="true" /><select idref="V-257949" selected="true" /><select idref="V-257950" selected="true" /><select idref="V-257951" selected="true" /><select idref="V-257953" selected="true" /><select idref="V-257954" selected="true" /><select idref="V-257955" selected="true" /><select idref="V-257956" selected="true" /><select idref="V-257957" selected="true" /><select idref="V-257958" selected="true" /><select idref="V-257959" selected="true" /><select idref="V-257960" selected="true" /><select idref="V-257961" selected="true" /><select idref="V-257962" selected="true" /><select idref="V-257963" selected="true" /><select idref="V-257964" selected="true" /><select idref="V-257965" selected="true" /><select idref="V-257966" selected="true" /><select idref="V-257967" selected="true" /><select idref="V-257968" selected="true" /><select idref="V-257969" selected="true" /><select idref="V-257970" selected="true" /><select idref="V-257971" selected="true" /><select idref="V-257972" selected="true" /><select idref="V-257973" selected="true" /><select idref="V-257974" selected="true" /><select idref="V-257975" selected="true" /><select idref="V-257976" selected="true" /><select idref="V-257977" selected="true" /><select idref="V-257978" selected="true" /><select idref="V-257979" selected="true" /><select idref="V-257980" selected="true" /><select idref="V-257981" selected="true" /><select idref="V-257982" selected="true" /><select idref="V-257983" selected="true" /><select idref="V-257984" selected="true" /><select idref="V-257985" selected="true" /><select idref="V-257986" selected="true" /><select idref="V-257989" selected="true" /><select idref="V-257991" selected="true" /><select idref="V-257992" selected="true" /><select idref="V-257993" selected="true" /><select idref="V-257994" selected="true" /><select idref="V-257995" selected="true" /><select idref="V-257996" selected="true" /><select idref="V-257997" selected="true" /><select idref="V-257998" selected="true" /><select idref="V-257999" selected="true" /><select idref="V-258000" selected="true" /><select idref="V-258001" selected="true" /><select idref="V-258002" selected="true" /><select idref="V-258003" selected="true" /><select idref="V-258004" selected="true" /><select idref="V-258005" selected="true" /><select idref="V-258006" selected="true" /><select idref="V-258007" selected="true" /><select idref="V-258008" selected="true" /><select idref="V-258009" selected="true" /><select idref="V-258011" selected="true" /><select idref="V-258012" selected="true" /><select idref="V-258013" selected="true" /><select idref="V-258014" selected="true" /><select idref="V-258015" selected="true" /><select idref="V-258016" selected="true" /><select idref="V-258017" selected="true" /><select idref="V-258018" selected="true" /><select idref="V-258019" selected="true" /><select idref="V-258020" selected="true" /><select idref="V-258021" selected="true" /><select idref="V-258022" selected="true" /><select idref="V-258023" selected="true" /><select idref="V-258024" selected="true" /><select idref="V-258025" selected="true" /><select idref="V-258026" selected="true" /><select idref="V-258027" selected="true" /><select idref="V-258028" selected="true" /><select idref="V-258029" selected="true" /><select idref="V-258030" selected="true" /><select idref="V-258031" selected="true" /><select idref="V-258032" selected="true" /><select idref="V-258033" selected="true" /><select idref="V-258034" selected="true" /><select idref="V-258035" selected="true" /><select idref="V-258036" selected="true" /><select idref="V-258037" selected="true" /><select idref="V-258038" selected="true" /><select idref="V-258039" selected="true" /><select idref="V-258040" selected="true" /><select idref="V-258041" selected="true" /><select idref="V-258042" selected="true" /><select idref="V-258043" selected="true" /><select idref="V-258044" selected="true" /><select idref="V-258045" selected="true" /><select idref="V-258046" selected="true" /><select idref="V-258047" selected="true" /><select idref="V-258048" selected="true" /><select idref="V-258049" selected="true" /><select idref="V-258050" selected="true" /><select idref="V-258051" selected="true" /><select idref="V-258052" selected="true" /><select idref="V-258053" selected="true" /><select idref="V-258054" selected="true" /><select idref="V-258055" selected="true" /><select idref="V-258056" selected="true" /><select idref="V-258057" selected="true" /><select idref="V-258058" selected="true" /><select idref="V-258059" selected="true" /><select idref="V-258060" selected="true" /><select idref="V-258061" selected="true" /><select idref="V-258068" selected="true" /><select idref="V-258069" selected="true" /><select idref="V-258070" selected="true" /><select idref="V-258071" selected="true" /><select idref="V-258072" selected="true" /><select idref="V-258073" selected="true" /><select idref="V-258074" selected="true" /><select idref="V-258075" selected="true" /><select idref="V-258077" selected="true" /><select idref="V-258078" selected="true" /><select idref="V-258079" selected="true" /><select idref="V-258080" selected="true" /><select idref="V-258081" selected="true" /><select idref="V-258082" selected="true" /><select idref="V-258083" selected="true" /><select idref="V-258084" selected="true" /><select idref="V-258085" selected="true" /><select idref="V-258086" selected="true" /><select idref="V-258087" selected="true" /><select idref="V-258088" selected="true" /><select idref="V-258089" selected="true" /><select idref="V-258090" selected="true" /><select idref="V-258091" selected="true" /><select idref="V-258094" selected="true" /><select idref="V-258095" selected="true" /><select idref="V-258096" selected="true" /><select idref="V-258097" selected="true" /><select idref="V-258098" selected="true" /><select idref="V-258099" selected="true" /><select idref="V-258100" selected="true" /><select idref="V-258101" selected="true" /><select idref="V-258102" selected="true" /><select idref="V-258103" selected="true" /><select idref="V-258104" selected="true" /><select idref="V-258105" selected="true" /><select idref="V-258106" selected="true" /><select idref="V-258107" selected="true" /><select idref="V-258109" selected="true" /><select idref="V-258110" selected="true" /><select idref="V-258111" selected="true" /><select idref="V-258112" selected="true" /><select idref="V-258113" selected="true" /><select idref="V-258114" selected="true" /><select idref="V-258115" selected="true" /><select idref="V-258116" selected="true" /><select idref="V-258117" selected="true" /><select idref="V-258118" selected="true" /><select idref="V-258120" selected="true" /><select idref="V-258121" selected="true" /><select idref="V-258122" selected="true" /><select idref="V-258123" selected="true" /><select idref="V-258124" selected="true" /><select idref="V-258125" selected="true" /><select idref="V-258126" selected="true" /><select idref="V-258127" selected="true" /><select idref="V-258128" selected="true" /><select idref="V-258129" selected="true" /><select idref="V-258131" selected="true" /><select idref="V-258132" selected="true" /><select idref="V-258133" selected="true" /><select idref="V-258134" selected="true" /><select idref="V-258135" selected="true" /><select idref="V-258136" selected="true" /><select idref="V-258137" selected="true" /><select idref="V-258138" selected="true" /><select idref="V-258139" selected="true" /><select idref="V-258140" selected="true" /><select idref="V-258141" selected="true" /><select idref="V-258142" selected="true" /><select idref="V-258143" selected="true" /><select idref="V-258144" selected="true" /><select idref="V-258146" selected="true" /><select idref="V-258147" selected="true" /><select idref="V-258148" selected="true" /><select idref="V-258149" selected="true" /><select idref="V-258150" selected="true" /><select idref="V-258151" selected="true" /><select idref="V-258152" selected="true" /><select idref="V-258153" selected="true" /><select idref="V-258154" selected="true" /><select idref="V-258155" selected="true" /><select idref="V-258156" selected="true" /><select idref="V-258157" selected="true" /><select idref="V-258158" selected="true" /><select idref="V-258159" selected="true" /><select idref="V-258160" selected="true" /><select idref="V-258161" selected="true" /><select idref="V-258162" selected="true" /><select idref="V-258163" selected="true" /><select idref="V-258164" selected="true" /><select idref="V-258165" selected="true" /><select idref="V-258166" selected="true" /><select idref="V-258167" selected="true" /><select idref="V-258168" selected="true" /><select idref="V-258169" selected="true" /><select idref="V-258170" selected="true" /><select idref="V-258171" selected="true" /><select idref="V-258173" selected="true" /><select idref="V-258174" selected="true" /><select idref="V-258175" selected="true" /><select idref="V-258176" selected="true" /><select idref="V-258177" selected="true" /><select idref="V-258178" selected="true" /><select idref="V-258179" selected="true" /><select idref="V-258180" selected="true" /><select idref="V-258181" selected="true" /><select idref="V-258182" selected="true" /><select idref="V-258183" selected="true" /><select idref="V-258184" selected="true" /><select idref="V-258185" selected="true" /><select idref="V-258186" selected="true" /><select idref="V-258187" selected="true" /><select idref="V-258188" selected="true" /><select idref="V-258189" selected="true" /><select idref="V-258190" selected="true" /><select idref="V-258191" selected="true" /><select idref="V-258192" selected="true" /><select idref="V-258193" selected="true" /><select idref="V-258194" selected="true" /><select idref="V-258195" selected="true" /><select idref="V-258196" selected="true" /><select idref="V-258197" selected="true" /><select idref="V-258198" selected="true" /><select idref="V-258199" selected="true" /><select idref="V-258200" selected="true" /><select idref="V-258201" selected="true" /><select idref="V-258202" selected="true" /><select idref="V-258203" selected="true" /><select idref="V-258204" selected="true" /><select idref="V-258205" selected="true" /><select idref="V-258206" selected="true" /><select idref="V-258207" selected="true" /><select idref="V-258208" selected="true" /><select idref="V-258209" selected="true" /><select idref="V-258210" selected="true" /><select idref="V-258211" selected="true" /><select idref="V-258212" selected="true" /><select idref="V-258213" selected="true" /><select idref="V-258214" selected="true" /><select idref="V-258215" selected="true" /><select idref="V-258216" selected="true" /><select idref="V-258217" selected="true" /><select idref="V-258218" selected="true" /><select idref="V-258219" selected="true" /><select idref="V-258220" selected="true" /><select idref="V-258221" selected="true" /><select idref="V-258222" selected="true" /><select idref="V-258223" selected="true" /><select idref="V-258224" selected="true" /><select idref="V-258225" selected="true" /><select idref="V-258227" selected="true" /><select idref="V-258228" selected="true" /><select idref="V-258229" selected="true" /><select idref="V-258230" selected="true" /><select idref="V-258231" selected="true" /><select idref="V-258232" selected="true" /><select idref="V-258233" selected="true" /><select idref="V-258234" selected="true" /><select idref="V-258236" selected="true" /><select idref="V-258241" selected="true" /><select idref="V-258242" selected="true" /><select idref="V-270174" selected="true" /><select idref="V-270175" selected="true" /><select idref="V-270176" selected="true" /><select idref="V-270177" selected="true" /><select idref="V-270178" selected="true" /><select idref="V-270180" selected="true" /><select idref="V-272488" selected="true" /><select idref="V-272496" selected="true" /><select idref="V-279936" selected="true" /></Profile><Profile id="MAC-1_Public"><title>I - Mission Critical Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-257777" selected="true" /><select idref="V-257778" selected="true" /><select idref="V-257779" selected="true" /><select idref="V-257781" selected="true" /><select idref="V-257782" selected="true" /><select idref="V-257783" selected="true" /><select idref="V-257784" selected="true" /><select idref="V-257785" selected="true" /><select idref="V-257786" selected="true" /><select idref="V-257787" selected="true" /><select idref="V-257788" selected="true" /><select idref="V-257789" selected="true" /><select idref="V-257790" selected="true" /><select idref="V-257791" selected="true" /><select idref="V-257792" selected="true" /><select idref="V-257793" selected="true" /><select idref="V-257794" selected="true" /><select idref="V-257795" selected="true" /><select idref="V-257796" selected="true" /><select idref="V-257797" selected="true" /><select idref="V-257798" selected="true" /><select idref="V-257799" selected="true" /><select idref="V-257800" selected="true" /><select idref="V-257801" selected="true" /><select idref="V-257802" selected="true" /><select idref="V-257803" selected="true" /><select idref="V-257804" selected="true" /><select idref="V-257805" selected="true" /><select idref="V-257806" selected="true" /><select idref="V-257807" selected="true" /><select idref="V-257808" selected="true" /><select idref="V-257809" selected="true" /><select idref="V-257810" selected="true" /><select idref="V-257811" selected="true" /><select idref="V-257812" selected="true" /><select idref="V-257813" selected="true" /><select idref="V-257814" selected="true" /><select idref="V-257815" selected="true" /><select idref="V-257816" selected="true" /><select idref="V-257817" selected="true" /><select idref="V-257818" selected="true" /><select idref="V-257819" selected="true" /><select idref="V-257820" selected="true" /><select idref="V-257821" selected="true" /><select idref="V-257822" selected="true" /><select idref="V-257823" selected="true" /><select idref="V-257824" selected="true" /><select idref="V-257825" selected="true" /><select idref="V-257826" selected="true" /><select idref="V-257827" selected="true" /><select idref="V-257828" selected="true" /><select idref="V-257829" selected="true" /><select idref="V-257830" selected="true" /><select idref="V-257831" selected="true" /><select idref="V-257832" selected="true" /><select idref="V-257833" selected="true" /><select idref="V-257834" selected="true" /><select idref="V-257835" selected="true" /><select idref="V-257836" selected="true" /><select idref="V-257837" selected="true" /><select idref="V-257838" selected="true" /><select idref="V-257839" selected="true" /><select idref="V-257840" selected="true" /><select idref="V-257841" selected="true" /><select idref="V-257842" selected="true" /><select idref="V-257843" selected="true" /><select idref="V-257844" selected="true" /><select idref="V-257845" selected="true" /><select idref="V-257846" selected="true" /><select idref="V-257847" selected="true" /><select idref="V-257848" selected="true" /><select idref="V-257849" selected="true" /><select idref="V-257850" selected="true" /><select idref="V-257851" selected="true" /><select idref="V-257852" selected="true" /><select idref="V-257854" selected="true" /><select idref="V-257855" selected="true" /><select idref="V-257856" selected="true" /><select idref="V-257857" selected="true" /><select idref="V-257858" selected="true" /><select idref="V-257859" selected="true" /><select idref="V-257860" selected="true" /><select idref="V-257861" selected="true" /><select idref="V-257862" selected="true" /><select idref="V-257863" selected="true" /><select idref="V-257864" selected="true" /><select idref="V-257865" selected="true" /><select idref="V-257866" selected="true" /><select idref="V-257867" selected="true" /><select idref="V-257868" selected="true" /><select idref="V-257869" selected="true" /><select idref="V-257870" selected="true" /><select idref="V-257871" selected="true" /><select idref="V-257872" selected="true" /><select idref="V-257873" selected="true" /><select idref="V-257874" selected="true" /><select idref="V-257875" selected="true" /><select idref="V-257876" selected="true" /><select idref="V-257877" selected="true" /><select idref="V-257878" selected="true" /><select idref="V-257879" selected="true" /><select idref="V-257880" selected="true" /><select idref="V-257881" selected="true" /><select idref="V-257882" selected="true" /><select idref="V-257883" selected="true" /><select idref="V-257884" selected="true" /><select idref="V-257885" selected="true" /><select idref="V-257886" selected="true" /><select idref="V-257887" selected="true" /><select idref="V-257888" selected="true" /><select idref="V-257889" selected="true" /><select idref="V-257890" selected="true" /><select idref="V-257891" selected="true" /><select idref="V-257892" selected="true" /><select idref="V-257893" selected="true" /><select idref="V-257894" selected="true" /><select idref="V-257895" selected="true" /><select idref="V-257896" selected="true" /><select idref="V-257897" selected="true" /><select idref="V-257898" selected="true" /><select idref="V-257899" selected="true" /><select idref="V-257900" selected="true" /><select idref="V-257901" selected="true" /><select idref="V-257902" selected="true" /><select idref="V-257903" selected="true" /><select idref="V-257904" selected="true" /><select idref="V-257905" selected="true" /><select idref="V-257906" selected="true" /><select idref="V-257907" selected="true" /><select idref="V-257908" selected="true" /><select idref="V-257909" selected="true" /><select idref="V-257910" selected="true" /><select idref="V-257911" selected="true" /><select idref="V-257912" selected="true" /><select idref="V-257913" selected="true" /><select idref="V-257914" selected="true" /><select idref="V-257915" selected="true" /><select idref="V-257916" selected="true" /><select idref="V-257917" selected="true" /><select idref="V-257918" selected="true" /><select idref="V-257919" selected="true" /><select idref="V-257920" selected="true" /><select idref="V-257921" selected="true" /><select idref="V-257922" selected="true" /><select idref="V-257923" selected="true" /><select idref="V-257924" selected="true" /><select idref="V-257925" selected="true" /><select idref="V-257926" selected="true" /><select idref="V-257927" selected="true" /><select idref="V-257928" selected="true" /><select idref="V-257929" selected="true" /><select idref="V-257930" selected="true" /><select idref="V-257931" selected="true" /><select idref="V-257932" selected="true" /><select idref="V-257934" selected="true" /><select idref="V-257935" selected="true" /><select idref="V-257936" selected="true" /><select idref="V-257937" selected="true" /><select idref="V-257939" selected="true" /><select idref="V-257940" selected="true" /><select idref="V-257941" selected="true" /><select idref="V-257942" selected="true" /><select idref="V-257943" selected="true" /><select idref="V-257944" selected="true" /><select idref="V-257945" selected="true" /><select idref="V-257946" selected="true" /><select idref="V-257947" selected="true" /><select idref="V-257948" selected="true" /><select idref="V-257949" selected="true" /><select idref="V-257950" selected="true" /><select idref="V-257951" selected="true" /><select idref="V-257953" selected="true" /><select idref="V-257954" selected="true" /><select idref="V-257955" selected="true" /><select idref="V-257956" selected="true" /><select idref="V-257957" selected="true" /><select idref="V-257958" selected="true" /><select idref="V-257959" selected="true" /><select idref="V-257960" selected="true" /><select idref="V-257961" selected="true" /><select idref="V-257962" selected="true" /><select idref="V-257963" selected="true" /><select idref="V-257964" selected="true" /><select idref="V-257965" selected="true" /><select idref="V-257966" selected="true" /><select idref="V-257967" selected="true" /><select idref="V-257968" selected="true" /><select idref="V-257969" selected="true" /><select idref="V-257970" selected="true" /><select idref="V-257971" selected="true" /><select idref="V-257972" selected="true" /><select idref="V-257973" selected="true" /><select idref="V-257974" selected="true" /><select idref="V-257975" selected="true" /><select idref="V-257976" selected="true" /><select idref="V-257977" selected="true" /><select idref="V-257978" selected="true" /><select idref="V-257979" selected="true" /><select idref="V-257980" selected="true" /><select idref="V-257981" selected="true" /><select idref="V-257982" selected="true" /><select idref="V-257983" selected="true" /><select idref="V-257984" selected="true" /><select idref="V-257985" selected="true" /><select idref="V-257986" selected="true" /><select idref="V-257989" selected="true" /><select idref="V-257991" selected="true" /><select idref="V-257992" selected="true" /><select idref="V-257993" selected="true" /><select idref="V-257994" selected="true" /><select idref="V-257995" selected="true" /><select idref="V-257996" selected="true" /><select idref="V-257997" selected="true" /><select idref="V-257998" selected="true" /><select idref="V-257999" selected="true" /><select idref="V-258000" selected="true" /><select idref="V-258001" selected="true" /><select idref="V-258002" selected="true" /><select idref="V-258003" selected="true" /><select idref="V-258004" selected="true" /><select idref="V-258005" selected="true" /><select idref="V-258006" selected="true" /><select idref="V-258007" selected="true" /><select idref="V-258008" selected="true" /><select idref="V-258009" selected="true" /><select idref="V-258011" selected="true" /><select idref="V-258012" selected="true" /><select idref="V-258013" selected="true" /><select idref="V-258014" selected="true" /><select idref="V-258015" selected="true" /><select idref="V-258016" selected="true" /><select idref="V-258017" selected="true" /><select idref="V-258018" selected="true" /><select idref="V-258019" selected="true" /><select idref="V-258020" selected="true" /><select idref="V-258021" selected="true" /><select idref="V-258022" selected="true" /><select idref="V-258023" selected="true" /><select idref="V-258024" selected="true" /><select idref="V-258025" selected="true" /><select idref="V-258026" selected="true" /><select idref="V-258027" selected="true" /><select idref="V-258028" selected="true" /><select idref="V-258029" selected="true" /><select idref="V-258030" selected="true" /><select idref="V-258031" selected="true" /><select idref="V-258032" selected="true" /><select idref="V-258033" selected="true" /><select idref="V-258034" selected="true" /><select idref="V-258035" selected="true" /><select idref="V-258036" selected="true" /><select idref="V-258037" selected="true" /><select idref="V-258038" selected="true" /><select idref="V-258039" selected="true" /><select idref="V-258040" selected="true" /><select idref="V-258041" selected="true" /><select idref="V-258042" selected="true" /><select idref="V-258043" selected="true" /><select idref="V-258044" selected="true" /><select idref="V-258045" selected="true" /><select idref="V-258046" selected="true" /><select idref="V-258047" selected="true" /><select idref="V-258048" selected="true" /><select idref="V-258049" selected="true" /><select idref="V-258050" selected="true" /><select idref="V-258051" selected="true" /><select idref="V-258052" selected="true" /><select idref="V-258053" selected="true" /><select idref="V-258054" selected="true" /><select idref="V-258055" selected="true" /><select idref="V-258056" selected="true" /><select idref="V-258057" selected="true" /><select idref="V-258058" selected="true" /><select idref="V-258059" selected="true" /><select idref="V-258060" selected="true" /><select idref="V-258061" selected="true" /><select idref="V-258068" selected="true" /><select idref="V-258069" selected="true" /><select idref="V-258070" selected="true" /><select idref="V-258071" selected="true" /><select idref="V-258072" selected="true" /><select idref="V-258073" selected="true" /><select idref="V-258074" selected="true" /><select idref="V-258075" selected="true" /><select idref="V-258077" selected="true" /><select idref="V-258078" selected="true" /><select idref="V-258079" selected="true" /><select idref="V-258080" selected="true" /><select idref="V-258081" selected="true" /><select idref="V-258082" selected="true" /><select idref="V-258083" selected="true" /><select idref="V-258084" selected="true" /><select idref="V-258085" selected="true" /><select idref="V-258086" selected="true" /><select idref="V-258087" selected="true" /><select idref="V-258088" selected="true" /><select idref="V-258089" selected="true" /><select idref="V-258090" selected="true" /><select idref="V-258091" selected="true" /><select idref="V-258094" selected="true" /><select idref="V-258095" selected="true" /><select idref="V-258096" selected="true" /><select idref="V-258097" selected="true" /><select idref="V-258098" selected="true" /><select idref="V-258099" selected="true" /><select idref="V-258100" selected="true" /><select idref="V-258101" selected="true" /><select idref="V-258102" selected="true" /><select idref="V-258103" selected="true" /><select idref="V-258104" selected="true" /><select idref="V-258105" selected="true" /><select idref="V-258106" selected="true" /><select idref="V-258107" selected="true" /><select idref="V-258109" selected="true" /><select idref="V-258110" selected="true" /><select idref="V-258111" selected="true" /><select idref="V-258112" selected="true" /><select idref="V-258113" selected="true" /><select idref="V-258114" selected="true" /><select idref="V-258115" selected="true" /><select idref="V-258116" selected="true" /><select idref="V-258117" selected="true" /><select idref="V-258118" selected="true" /><select idref="V-258120" selected="true" /><select idref="V-258121" selected="true" /><select idref="V-258122" selected="true" /><select idref="V-258123" selected="true" /><select idref="V-258124" selected="true" /><select idref="V-258125" selected="true" /><select idref="V-258126" selected="true" /><select idref="V-258127" selected="true" /><select idref="V-258128" selected="true" /><select idref="V-258129" selected="true" /><select idref="V-258131" selected="true" /><select idref="V-258132" selected="true" /><select idref="V-258133" selected="true" /><select idref="V-258134" selected="true" /><select idref="V-258135" selected="true" /><select idref="V-258136" selected="true" /><select idref="V-258137" selected="true" /><select idref="V-258138" selected="true" /><select idref="V-258139" selected="true" /><select idref="V-258140" selected="true" /><select idref="V-258141" selected="true" /><select idref="V-258142" selected="true" /><select idref="V-258143" selected="true" /><select idref="V-258144" selected="true" /><select idref="V-258146" selected="true" /><select idref="V-258147" selected="true" /><select idref="V-258148" selected="true" /><select idref="V-258149" selected="true" /><select idref="V-258150" selected="true" /><select idref="V-258151" selected="true" /><select idref="V-258152" selected="true" /><select idref="V-258153" selected="true" /><select idref="V-258154" selected="true" /><select idref="V-258155" selected="true" /><select idref="V-258156" selected="true" /><select idref="V-258157" selected="true" /><select idref="V-258158" selected="true" /><select idref="V-258159" selected="true" /><select idref="V-258160" selected="true" /><select idref="V-258161" selected="true" /><select idref="V-258162" selected="true" /><select idref="V-258163" selected="true" /><select idref="V-258164" selected="true" /><select idref="V-258165" selected="true" /><select idref="V-258166" selected="true" /><select idref="V-258167" selected="true" /><select idref="V-258168" selected="true" /><select idref="V-258169" selected="true" /><select idref="V-258170" selected="true" /><select idref="V-258171" selected="true" /><select idref="V-258173" selected="true" /><select idref="V-258174" selected="true" /><select idref="V-258175" selected="true" /><select idref="V-258176" selected="true" /><select idref="V-258177" selected="true" /><select idref="V-258178" selected="true" /><select idref="V-258179" selected="true" /><select idref="V-258180" selected="true" /><select idref="V-258181" selected="true" /><select idref="V-258182" selected="true" /><select idref="V-258183" selected="true" /><select idref="V-258184" selected="true" /><select idref="V-258185" selected="true" /><select idref="V-258186" selected="true" /><select idref="V-258187" selected="true" /><select idref="V-258188" selected="true" /><select idref="V-258189" selected="true" /><select idref="V-258190" selected="true" /><select idref="V-258191" selected="true" /><select idref="V-258192" selected="true" /><select idref="V-258193" selected="true" /><select idref="V-258194" selected="true" /><select idref="V-258195" selected="true" /><select idref="V-258196" selected="true" /><select idref="V-258197" selected="true" /><select idref="V-258198" selected="true" /><select idref="V-258199" selected="true" /><select idref="V-258200" selected="true" /><select idref="V-258201" selected="true" /><select idref="V-258202" selected="true" /><select idref="V-258203" selected="true" /><select idref="V-258204" selected="true" /><select idref="V-258205" selected="true" /><select idref="V-258206" selected="true" /><select idref="V-258207" selected="true" /><select idref="V-258208" selected="true" /><select idref="V-258209" selected="true" /><select idref="V-258210" selected="true" /><select idref="V-258211" selected="true" /><select idref="V-258212" selected="true" /><select idref="V-258213" selected="true" /><select idref="V-258214" selected="true" /><select idref="V-258215" selected="true" /><select idref="V-258216" selected="true" /><select idref="V-258217" selected="true" /><select idref="V-258218" selected="true" /><select idref="V-258219" selected="true" /><select idref="V-258220" selected="true" /><select idref="V-258221" selected="true" /><select idref="V-258222" selected="true" /><select idref="V-258223" selected="true" /><select idref="V-258224" selected="true" /><select idref="V-258225" selected="true" /><select idref="V-258227" selected="true" /><select idref="V-258228" selected="true" /><select idref="V-258229" selected="true" /><select idref="V-258230" selected="true" /><select idref="V-258231" selected="true" /><select idref="V-258232" selected="true" /><select idref="V-258233" selected="true" /><select idref="V-258234" selected="true" /><select idref="V-258236" selected="true" /><select idref="V-258241" selected="true" /><select idref="V-258242" selected="true" /><select idref="V-270174" selected="true" /><select idref="V-270175" selected="true" /><select idref="V-270176" selected="true" /><select idref="V-270177" selected="true" /><select idref="V-270178" selected="true" /><select idref="V-270180" selected="true" /><select idref="V-272488" selected="true" /><select idref="V-272496" selected="true" /><select idref="V-279936" selected="true" /></Profile><Profile id="MAC-1_Sensitive"><title>I - Mission Critical Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-257777" selected="true" /><select idref="V-257778" selected="true" /><select idref="V-257779" selected="true" /><select idref="V-257781" selected="true" /><select idref="V-257782" selected="true" /><select idref="V-257783" selected="true" /><select idref="V-257784" selected="true" /><select idref="V-257785" selected="true" /><select idref="V-257786" selected="true" /><select idref="V-257787" selected="true" /><select idref="V-257788" selected="true" /><select idref="V-257789" selected="true" /><select idref="V-257790" selected="true" /><select idref="V-257791" selected="true" /><select idref="V-257792" selected="true" /><select idref="V-257793" selected="true" /><select idref="V-257794" selected="true" /><select idref="V-257795" selected="true" /><select idref="V-257796" selected="true" /><select idref="V-257797" selected="true" /><select idref="V-257798" selected="true" /><select idref="V-257799" selected="true" /><select idref="V-257800" selected="true" /><select idref="V-257801" selected="true" /><select idref="V-257802" selected="true" /><select idref="V-257803" selected="true" /><select idref="V-257804" selected="true" /><select idref="V-257805" selected="true" /><select idref="V-257806" selected="true" /><select idref="V-257807" selected="true" /><select idref="V-257808" selected="true" /><select idref="V-257809" selected="true" /><select idref="V-257810" selected="true" /><select idref="V-257811" selected="true" /><select idref="V-257812" selected="true" /><select idref="V-257813" selected="true" /><select idref="V-257814" selected="true" /><select idref="V-257815" selected="true" /><select idref="V-257816" selected="true" /><select idref="V-257817" selected="true" /><select idref="V-257818" selected="true" /><select idref="V-257819" selected="true" /><select idref="V-257820" selected="true" /><select idref="V-257821" selected="true" /><select idref="V-257822" selected="true" /><select idref="V-257823" selected="true" /><select idref="V-257824" selected="true" /><select idref="V-257825" selected="true" /><select idref="V-257826" selected="true" /><select idref="V-257827" selected="true" /><select idref="V-257828" selected="true" /><select idref="V-257829" selected="true" /><select idref="V-257830" selected="true" /><select idref="V-257831" selected="true" /><select idref="V-257832" selected="true" /><select idref="V-257833" selected="true" /><select idref="V-257834" selected="true" /><select idref="V-257835" selected="true" /><select idref="V-257836" selected="true" /><select idref="V-257837" selected="true" /><select idref="V-257838" selected="true" /><select idref="V-257839" selected="true" /><select idref="V-257840" selected="true" /><select idref="V-257841" selected="true" /><select idref="V-257842" selected="true" /><select idref="V-257843" selected="true" /><select idref="V-257844" selected="true" /><select idref="V-257845" selected="true" /><select idref="V-257846" selected="true" /><select idref="V-257847" selected="true" /><select idref="V-257848" selected="true" /><select idref="V-257849" selected="true" /><select idref="V-257850" selected="true" /><select idref="V-257851" selected="true" /><select idref="V-257852" selected="true" /><select idref="V-257854" selected="true" /><select idref="V-257855" selected="true" /><select idref="V-257856" selected="true" /><select idref="V-257857" selected="true" /><select idref="V-257858" selected="true" /><select idref="V-257859" selected="true" /><select idref="V-257860" selected="true" /><select idref="V-257861" selected="true" /><select idref="V-257862" selected="true" /><select idref="V-257863" selected="true" /><select idref="V-257864" selected="true" /><select idref="V-257865" selected="true" /><select idref="V-257866" selected="true" /><select idref="V-257867" selected="true" /><select idref="V-257868" selected="true" /><select idref="V-257869" selected="true" /><select idref="V-257870" selected="true" /><select idref="V-257871" selected="true" /><select idref="V-257872" selected="true" /><select idref="V-257873" selected="true" /><select idref="V-257874" selected="true" /><select idref="V-257875" selected="true" /><select idref="V-257876" selected="true" /><select idref="V-257877" selected="true" /><select idref="V-257878" selected="true" /><select idref="V-257879" selected="true" /><select idref="V-257880" selected="true" /><select idref="V-257881" selected="true" /><select idref="V-257882" selected="true" /><select idref="V-257883" selected="true" /><select idref="V-257884" selected="true" /><select idref="V-257885" selected="true" /><select idref="V-257886" selected="true" /><select idref="V-257887" selected="true" /><select idref="V-257888" selected="true" /><select idref="V-257889" selected="true" /><select idref="V-257890" selected="true" /><select idref="V-257891" selected="true" /><select idref="V-257892" selected="true" /><select idref="V-257893" selected="true" /><select idref="V-257894" selected="true" /><select idref="V-257895" selected="true" /><select idref="V-257896" selected="true" /><select idref="V-257897" selected="true" /><select idref="V-257898" selected="true" /><select idref="V-257899" selected="true" /><select idref="V-257900" selected="true" /><select idref="V-257901" selected="true" /><select idref="V-257902" selected="true" /><select idref="V-257903" selected="true" /><select idref="V-257904" selected="true" /><select idref="V-257905" selected="true" /><select idref="V-257906" selected="true" /><select idref="V-257907" selected="true" /><select idref="V-257908" selected="true" /><select idref="V-257909" selected="true" /><select idref="V-257910" selected="true" /><select idref="V-257911" selected="true" /><select idref="V-257912" selected="true" /><select idref="V-257913" selected="true" /><select idref="V-257914" selected="true" /><select idref="V-257915" selected="true" /><select idref="V-257916" selected="true" /><select idref="V-257917" selected="true" /><select idref="V-257918" selected="true" /><select idref="V-257919" selected="true" /><select idref="V-257920" selected="true" /><select idref="V-257921" selected="true" /><select idref="V-257922" selected="true" /><select idref="V-257923" selected="true" /><select idref="V-257924" selected="true" /><select idref="V-257925" selected="true" /><select idref="V-257926" selected="true" /><select idref="V-257927" selected="true" /><select idref="V-257928" selected="true" /><select idref="V-257929" selected="true" /><select idref="V-257930" selected="true" /><select idref="V-257931" selected="true" /><select idref="V-257932" selected="true" /><select idref="V-257934" selected="true" /><select idref="V-257935" selected="true" /><select idref="V-257936" selected="true" /><select idref="V-257937" selected="true" /><select idref="V-257939" selected="true" /><select idref="V-257940" selected="true" /><select idref="V-257941" selected="true" /><select idref="V-257942" selected="true" /><select idref="V-257943" selected="true" /><select idref="V-257944" selected="true" /><select idref="V-257945" selected="true" /><select idref="V-257946" selected="true" /><select idref="V-257947" selected="true" /><select idref="V-257948" selected="true" /><select idref="V-257949" selected="true" /><select idref="V-257950" selected="true" /><select idref="V-257951" selected="true" /><select idref="V-257953" selected="true" /><select idref="V-257954" selected="true" /><select idref="V-257955" selected="true" /><select idref="V-257956" selected="true" /><select idref="V-257957" selected="true" /><select idref="V-257958" selected="true" /><select idref="V-257959" selected="true" /><select idref="V-257960" selected="true" /><select idref="V-257961" selected="true" /><select idref="V-257962" selected="true" /><select idref="V-257963" selected="true" /><select idref="V-257964" selected="true" /><select idref="V-257965" selected="true" /><select idref="V-257966" selected="true" /><select idref="V-257967" selected="true" /><select idref="V-257968" selected="true" /><select idref="V-257969" selected="true" /><select idref="V-257970" selected="true" /><select idref="V-257971" selected="true" /><select idref="V-257972" selected="true" /><select idref="V-257973" selected="true" /><select idref="V-257974" selected="true" /><select idref="V-257975" selected="true" /><select idref="V-257976" selected="true" /><select idref="V-257977" selected="true" /><select idref="V-257978" selected="true" /><select idref="V-257979" selected="true" /><select idref="V-257980" selected="true" /><select idref="V-257981" selected="true" /><select idref="V-257982" selected="true" /><select idref="V-257983" selected="true" /><select idref="V-257984" selected="true" /><select idref="V-257985" selected="true" /><select idref="V-257986" selected="true" /><select idref="V-257989" selected="true" /><select idref="V-257991" selected="true" /><select idref="V-257992" selected="true" /><select idref="V-257993" selected="true" /><select idref="V-257994" selected="true" /><select idref="V-257995" selected="true" /><select idref="V-257996" selected="true" /><select idref="V-257997" selected="true" /><select idref="V-257998" selected="true" /><select idref="V-257999" selected="true" /><select idref="V-258000" selected="true" /><select idref="V-258001" selected="true" /><select idref="V-258002" selected="true" /><select idref="V-258003" selected="true" /><select idref="V-258004" selected="true" /><select idref="V-258005" selected="true" /><select idref="V-258006" selected="true" /><select idref="V-258007" selected="true" /><select idref="V-258008" selected="true" /><select idref="V-258009" selected="true" /><select idref="V-258011" selected="true" /><select idref="V-258012" selected="true" /><select idref="V-258013" selected="true" /><select idref="V-258014" selected="true" /><select idref="V-258015" selected="true" /><select idref="V-258016" selected="true" /><select idref="V-258017" selected="true" /><select idref="V-258018" selected="true" /><select idref="V-258019" selected="true" /><select idref="V-258020" selected="true" /><select idref="V-258021" selected="true" /><select idref="V-258022" selected="true" /><select idref="V-258023" selected="true" /><select idref="V-258024" selected="true" /><select idref="V-258025" selected="true" /><select idref="V-258026" selected="true" /><select idref="V-258027" selected="true" /><select idref="V-258028" selected="true" /><select idref="V-258029" selected="true" /><select idref="V-258030" selected="true" /><select idref="V-258031" selected="true" /><select idref="V-258032" selected="true" /><select idref="V-258033" selected="true" /><select idref="V-258034" selected="true" /><select idref="V-258035" selected="true" /><select idref="V-258036" selected="true" /><select idref="V-258037" selected="true" /><select idref="V-258038" selected="true" /><select idref="V-258039" selected="true" /><select idref="V-258040" selected="true" /><select idref="V-258041" selected="true" /><select idref="V-258042" selected="true" /><select idref="V-258043" selected="true" /><select idref="V-258044" selected="true" /><select idref="V-258045" selected="true" /><select idref="V-258046" selected="true" /><select idref="V-258047" selected="true" /><select idref="V-258048" selected="true" /><select idref="V-258049" selected="true" /><select idref="V-258050" selected="true" /><select idref="V-258051" selected="true" /><select idref="V-258052" selected="true" /><select idref="V-258053" selected="true" /><select idref="V-258054" selected="true" /><select idref="V-258055" selected="true" /><select idref="V-258056" selected="true" /><select idref="V-258057" selected="true" /><select idref="V-258058" selected="true" /><select idref="V-258059" selected="true" /><select idref="V-258060" selected="true" /><select idref="V-258061" selected="true" /><select idref="V-258068" selected="true" /><select idref="V-258069" selected="true" /><select idref="V-258070" selected="true" /><select idref="V-258071" selected="true" /><select idref="V-258072" selected="true" /><select idref="V-258073" selected="true" /><select idref="V-258074" selected="true" /><select idref="V-258075" selected="true" /><select idref="V-258077" selected="true" /><select idref="V-258078" selected="true" /><select idref="V-258079" selected="true" /><select idref="V-258080" selected="true" /><select idref="V-258081" selected="true" /><select idref="V-258082" selected="true" /><select idref="V-258083" selected="true" /><select idref="V-258084" selected="true" /><select idref="V-258085" selected="true" /><select idref="V-258086" selected="true" /><select idref="V-258087" selected="true" /><select idref="V-258088" selected="true" /><select idref="V-258089" selected="true" /><select idref="V-258090" selected="true" /><select idref="V-258091" selected="true" /><select idref="V-258094" selected="true" /><select idref="V-258095" selected="true" /><select idref="V-258096" selected="true" /><select idref="V-258097" selected="true" /><select idref="V-258098" selected="true" /><select idref="V-258099" selected="true" /><select idref="V-258100" selected="true" /><select idref="V-258101" selected="true" /><select idref="V-258102" selected="true" /><select idref="V-258103" selected="true" /><select idref="V-258104" selected="true" /><select idref="V-258105" selected="true" /><select idref="V-258106" selected="true" /><select idref="V-258107" selected="true" /><select idref="V-258109" selected="true" /><select idref="V-258110" selected="true" /><select idref="V-258111" selected="true" /><select idref="V-258112" selected="true" /><select idref="V-258113" selected="true" /><select idref="V-258114" selected="true" /><select idref="V-258115" selected="true" /><select idref="V-258116" selected="true" /><select idref="V-258117" selected="true" /><select idref="V-258118" selected="true" /><select idref="V-258120" selected="true" /><select idref="V-258121" selected="true" /><select idref="V-258122" selected="true" /><select idref="V-258123" selected="true" /><select idref="V-258124" selected="true" /><select idref="V-258125" selected="true" /><select idref="V-258126" selected="true" /><select idref="V-258127" selected="true" /><select idref="V-258128" selected="true" /><select idref="V-258129" selected="true" /><select idref="V-258131" selected="true" /><select idref="V-258132" selected="true" /><select idref="V-258133" selected="true" /><select idref="V-258134" selected="true" /><select idref="V-258135" selected="true" /><select idref="V-258136" selected="true" /><select idref="V-258137" selected="true" /><select idref="V-258138" selected="true" /><select idref="V-258139" selected="true" /><select idref="V-258140" selected="true" /><select idref="V-258141" selected="true" /><select idref="V-258142" selected="true" /><select idref="V-258143" selected="true" /><select idref="V-258144" selected="true" /><select idref="V-258146" selected="true" /><select idref="V-258147" selected="true" /><select idref="V-258148" selected="true" /><select idref="V-258149" selected="true" /><select idref="V-258150" selected="true" /><select idref="V-258151" selected="true" /><select idref="V-258152" selected="true" /><select idref="V-258153" selected="true" /><select idref="V-258154" selected="true" /><select idref="V-258155" selected="true" /><select idref="V-258156" selected="true" /><select idref="V-258157" selected="true" /><select idref="V-258158" selected="true" /><select idref="V-258159" selected="true" /><select idref="V-258160" selected="true" /><select idref="V-258161" selected="true" /><select idref="V-258162" selected="true" /><select idref="V-258163" selected="true" /><select idref="V-258164" selected="true" /><select idref="V-258165" selected="true" /><select idref="V-258166" selected="true" /><select idref="V-258167" selected="true" /><select idref="V-258168" selected="true" /><select idref="V-258169" selected="true" /><select idref="V-258170" selected="true" /><select idref="V-258171" selected="true" /><select idref="V-258173" selected="true" /><select idref="V-258174" selected="true" /><select idref="V-258175" selected="true" /><select idref="V-258176" selected="true" /><select idref="V-258177" selected="true" /><select idref="V-258178" selected="true" /><select idref="V-258179" selected="true" /><select idref="V-258180" selected="true" /><select idref="V-258181" selected="true" /><select idref="V-258182" selected="true" /><select idref="V-258183" selected="true" /><select idref="V-258184" selected="true" /><select idref="V-258185" selected="true" /><select idref="V-258186" selected="true" /><select idref="V-258187" selected="true" /><select idref="V-258188" selected="true" /><select idref="V-258189" selected="true" /><select idref="V-258190" selected="true" /><select idref="V-258191" selected="true" /><select idref="V-258192" selected="true" /><select idref="V-258193" selected="true" /><select idref="V-258194" selected="true" /><select idref="V-258195" selected="true" /><select idref="V-258196" selected="true" /><select idref="V-258197" selected="true" /><select idref="V-258198" selected="true" /><select idref="V-258199" selected="true" /><select idref="V-258200" selected="true" /><select idref="V-258201" selected="true" /><select idref="V-258202" selected="true" /><select idref="V-258203" selected="true" /><select idref="V-258204" selected="true" /><select idref="V-258205" selected="true" /><select idref="V-258206" selected="true" /><select idref="V-258207" selected="true" /><select idref="V-258208" selected="true" /><select idref="V-258209" selected="true" /><select idref="V-258210" selected="true" /><select idref="V-258211" selected="true" /><select idref="V-258212" selected="true" /><select idref="V-258213" selected="true" /><select idref="V-258214" selected="true" /><select idref="V-258215" selected="true" /><select idref="V-258216" selected="true" /><select idref="V-258217" selected="true" /><select idref="V-258218" selected="true" /><select idref="V-258219" selected="true" /><select idref="V-258220" selected="true" /><select idref="V-258221" selected="true" /><select idref="V-258222" selected="true" /><select idref="V-258223" selected="true" /><select idref="V-258224" selected="true" /><select idref="V-258225" selected="true" /><select idref="V-258227" selected="true" /><select idref="V-258228" selected="true" /><select idref="V-258229" selected="true" /><select idref="V-258230" selected="true" /><select idref="V-258231" selected="true" /><select idref="V-258232" selected="true" /><select idref="V-258233" selected="true" /><select idref="V-258234" selected="true" /><select idref="V-258236" selected="true" /><select idref="V-258241" selected="true" /><select idref="V-258242" selected="true" /><select idref="V-270174" selected="true" /><select idref="V-270175" selected="true" /><select idref="V-270176" selected="true" /><select idref="V-270177" selected="true" /><select idref="V-270178" selected="true" /><select idref="V-270180" selected="true" /><select idref="V-272488" selected="true" /><select idref="V-272496" selected="true" /><select idref="V-279936" selected="true" /></Profile><Profile id="MAC-2_Classified"><title>II - Mission Support Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-257777" selected="true" /><select idref="V-257778" selected="true" /><select idref="V-257779" selected="true" /><select idref="V-257781" selected="true" /><select idref="V-257782" selected="true" /><select idref="V-257783" selected="true" /><select idref="V-257784" selected="true" /><select idref="V-257785" selected="true" /><select idref="V-257786" selected="true" /><select idref="V-257787" selected="true" /><select idref="V-257788" selected="true" /><select idref="V-257789" selected="true" /><select idref="V-257790" selected="true" /><select idref="V-257791" selected="true" /><select idref="V-257792" selected="true" /><select idref="V-257793" selected="true" /><select idref="V-257794" selected="true" /><select idref="V-257795" selected="true" /><select idref="V-257796" selected="true" /><select idref="V-257797" selected="true" /><select idref="V-257798" selected="true" /><select idref="V-257799" selected="true" /><select idref="V-257800" selected="true" /><select idref="V-257801" selected="true" /><select idref="V-257802" selected="true" /><select idref="V-257803" selected="true" /><select idref="V-257804" selected="true" /><select idref="V-257805" selected="true" /><select idref="V-257806" selected="true" /><select idref="V-257807" selected="true" /><select idref="V-257808" selected="true" /><select idref="V-257809" selected="true" /><select idref="V-257810" selected="true" /><select idref="V-257811" selected="true" /><select idref="V-257812" selected="true" /><select idref="V-257813" selected="true" /><select idref="V-257814" selected="true" /><select idref="V-257815" selected="true" /><select idref="V-257816" selected="true" /><select idref="V-257817" selected="true" /><select idref="V-257818" selected="true" /><select idref="V-257819" selected="true" /><select idref="V-257820" selected="true" /><select idref="V-257821" selected="true" /><select idref="V-257822" selected="true" /><select idref="V-257823" selected="true" /><select idref="V-257824" selected="true" /><select idref="V-257825" selected="true" /><select idref="V-257826" selected="true" /><select idref="V-257827" selected="true" /><select idref="V-257828" selected="true" /><select idref="V-257829" selected="true" /><select idref="V-257830" selected="true" /><select idref="V-257831" selected="true" /><select idref="V-257832" selected="true" /><select idref="V-257833" selected="true" /><select idref="V-257834" selected="true" /><select idref="V-257835" selected="true" /><select idref="V-257836" selected="true" /><select idref="V-257837" selected="true" /><select idref="V-257838" selected="true" /><select idref="V-257839" selected="true" /><select idref="V-257840" selected="true" /><select idref="V-257841" selected="true" /><select idref="V-257842" selected="true" /><select idref="V-257843" selected="true" /><select idref="V-257844" selected="true" /><select idref="V-257845" selected="true" /><select idref="V-257846" selected="true" /><select idref="V-257847" selected="true" /><select idref="V-257848" selected="true" /><select idref="V-257849" selected="true" /><select idref="V-257850" selected="true" /><select idref="V-257851" selected="true" /><select idref="V-257852" selected="true" /><select idref="V-257854" selected="true" /><select idref="V-257855" selected="true" /><select idref="V-257856" selected="true" /><select idref="V-257857" selected="true" /><select idref="V-257858" selected="true" /><select idref="V-257859" selected="true" /><select idref="V-257860" selected="true" /><select idref="V-257861" selected="true" /><select idref="V-257862" selected="true" /><select idref="V-257863" selected="true" /><select idref="V-257864" selected="true" /><select idref="V-257865" selected="true" /><select idref="V-257866" selected="true" /><select idref="V-257867" selected="true" /><select idref="V-257868" selected="true" /><select idref="V-257869" selected="true" /><select idref="V-257870" selected="true" /><select idref="V-257871" selected="true" /><select idref="V-257872" selected="true" /><select idref="V-257873" selected="true" /><select idref="V-257874" selected="true" /><select idref="V-257875" selected="true" /><select idref="V-257876" selected="true" /><select idref="V-257877" selected="true" /><select idref="V-257878" selected="true" /><select idref="V-257879" selected="true" /><select idref="V-257880" selected="true" /><select idref="V-257881" selected="true" /><select idref="V-257882" selected="true" /><select idref="V-257883" selected="true" /><select idref="V-257884" selected="true" /><select idref="V-257885" selected="true" /><select idref="V-257886" selected="true" /><select idref="V-257887" selected="true" /><select idref="V-257888" selected="true" /><select idref="V-257889" selected="true" /><select idref="V-257890" selected="true" /><select idref="V-257891" selected="true" /><select idref="V-257892" selected="true" /><select idref="V-257893" selected="true" /><select idref="V-257894" selected="true" /><select idref="V-257895" selected="true" /><select idref="V-257896" selected="true" /><select idref="V-257897" selected="true" /><select idref="V-257898" selected="true" /><select idref="V-257899" selected="true" /><select idref="V-257900" selected="true" /><select idref="V-257901" selected="true" /><select idref="V-257902" selected="true" /><select idref="V-257903" selected="true" /><select idref="V-257904" selected="true" /><select idref="V-257905" selected="true" /><select idref="V-257906" selected="true" /><select idref="V-257907" selected="true" /><select idref="V-257908" selected="true" /><select idref="V-257909" selected="true" /><select idref="V-257910" selected="true" /><select idref="V-257911" selected="true" /><select idref="V-257912" selected="true" /><select idref="V-257913" selected="true" /><select idref="V-257914" selected="true" /><select idref="V-257915" selected="true" /><select idref="V-257916" selected="true" /><select idref="V-257917" selected="true" /><select idref="V-257918" selected="true" /><select idref="V-257919" selected="true" /><select idref="V-257920" selected="true" /><select idref="V-257921" selected="true" /><select idref="V-257922" selected="true" /><select idref="V-257923" selected="true" /><select idref="V-257924" selected="true" /><select idref="V-257925" selected="true" /><select idref="V-257926" selected="true" /><select idref="V-257927" selected="true" /><select idref="V-257928" selected="true" /><select idref="V-257929" selected="true" /><select idref="V-257930" selected="true" /><select idref="V-257931" selected="true" /><select idref="V-257932" selected="true" /><select idref="V-257934" selected="true" /><select idref="V-257935" selected="true" /><select idref="V-257936" selected="true" /><select idref="V-257937" selected="true" /><select idref="V-257939" selected="true" /><select idref="V-257940" selected="true" /><select idref="V-257941" selected="true" /><select idref="V-257942" selected="true" /><select idref="V-257943" selected="true" /><select idref="V-257944" selected="true" /><select idref="V-257945" selected="true" /><select idref="V-257946" selected="true" /><select idref="V-257947" selected="true" /><select idref="V-257948" selected="true" /><select idref="V-257949" selected="true" /><select idref="V-257950" selected="true" /><select idref="V-257951" selected="true" /><select idref="V-257953" selected="true" /><select idref="V-257954" selected="true" /><select idref="V-257955" selected="true" /><select idref="V-257956" selected="true" /><select idref="V-257957" selected="true" /><select idref="V-257958" selected="true" /><select idref="V-257959" selected="true" /><select idref="V-257960" selected="true" /><select idref="V-257961" selected="true" /><select idref="V-257962" selected="true" /><select idref="V-257963" selected="true" /><select idref="V-257964" selected="true" /><select idref="V-257965" selected="true" /><select idref="V-257966" selected="true" /><select idref="V-257967" selected="true" /><select idref="V-257968" selected="true" /><select idref="V-257969" selected="true" /><select idref="V-257970" selected="true" /><select idref="V-257971" selected="true" /><select idref="V-257972" selected="true" /><select idref="V-257973" selected="true" /><select idref="V-257974" selected="true" /><select idref="V-257975" selected="true" /><select idref="V-257976" selected="true" /><select idref="V-257977" selected="true" /><select idref="V-257978" selected="true" /><select idref="V-257979" selected="true" /><select idref="V-257980" selected="true" /><select idref="V-257981" selected="true" /><select idref="V-257982" selected="true" /><select idref="V-257983" selected="true" /><select idref="V-257984" selected="true" /><select idref="V-257985" selected="true" /><select idref="V-257986" selected="true" /><select idref="V-257989" selected="true" /><select idref="V-257991" selected="true" /><select idref="V-257992" selected="true" /><select idref="V-257993" selected="true" /><select idref="V-257994" selected="true" /><select idref="V-257995" selected="true" /><select idref="V-257996" selected="true" /><select idref="V-257997" selected="true" /><select idref="V-257998" selected="true" /><select idref="V-257999" selected="true" /><select idref="V-258000" selected="true" /><select idref="V-258001" selected="true" /><select idref="V-258002" selected="true" /><select idref="V-258003" selected="true" /><select idref="V-258004" selected="true" /><select idref="V-258005" selected="true" /><select idref="V-258006" selected="true" /><select idref="V-258007" selected="true" /><select idref="V-258008" selected="true" /><select idref="V-258009" selected="true" /><select idref="V-258011" selected="true" /><select idref="V-258012" selected="true" /><select idref="V-258013" selected="true" /><select idref="V-258014" selected="true" /><select idref="V-258015" selected="true" /><select idref="V-258016" selected="true" /><select idref="V-258017" selected="true" /><select idref="V-258018" selected="true" /><select idref="V-258019" selected="true" /><select idref="V-258020" selected="true" /><select idref="V-258021" selected="true" /><select idref="V-258022" selected="true" /><select idref="V-258023" selected="true" /><select idref="V-258024" selected="true" /><select idref="V-258025" selected="true" /><select idref="V-258026" selected="true" /><select idref="V-258027" selected="true" /><select idref="V-258028" selected="true" /><select idref="V-258029" selected="true" /><select idref="V-258030" selected="true" /><select idref="V-258031" selected="true" /><select idref="V-258032" selected="true" /><select idref="V-258033" selected="true" /><select idref="V-258034" selected="true" /><select idref="V-258035" selected="true" /><select idref="V-258036" selected="true" /><select idref="V-258037" selected="true" /><select idref="V-258038" selected="true" /><select idref="V-258039" selected="true" /><select idref="V-258040" selected="true" /><select idref="V-258041" selected="true" /><select idref="V-258042" selected="true" /><select idref="V-258043" selected="true" /><select idref="V-258044" selected="true" /><select idref="V-258045" selected="true" /><select idref="V-258046" selected="true" /><select idref="V-258047" selected="true" /><select idref="V-258048" selected="true" /><select idref="V-258049" selected="true" /><select idref="V-258050" selected="true" /><select idref="V-258051" selected="true" /><select idref="V-258052" selected="true" /><select idref="V-258053" selected="true" /><select idref="V-258054" selected="true" /><select idref="V-258055" selected="true" /><select idref="V-258056" selected="true" /><select idref="V-258057" selected="true" /><select idref="V-258058" selected="true" /><select idref="V-258059" selected="true" /><select idref="V-258060" selected="true" /><select idref="V-258061" selected="true" /><select idref="V-258068" selected="true" /><select idref="V-258069" selected="true" /><select idref="V-258070" selected="true" /><select idref="V-258071" selected="true" /><select idref="V-258072" selected="true" /><select idref="V-258073" selected="true" /><select idref="V-258074" selected="true" /><select idref="V-258075" selected="true" /><select idref="V-258077" selected="true" /><select idref="V-258078" selected="true" /><select idref="V-258079" selected="true" /><select idref="V-258080" selected="true" /><select idref="V-258081" selected="true" /><select idref="V-258082" selected="true" /><select idref="V-258083" selected="true" /><select idref="V-258084" selected="true" /><select idref="V-258085" selected="true" /><select idref="V-258086" selected="true" /><select idref="V-258087" selected="true" /><select idref="V-258088" selected="true" /><select idref="V-258089" selected="true" /><select idref="V-258090" selected="true" /><select idref="V-258091" selected="true" /><select idref="V-258094" selected="true" /><select idref="V-258095" selected="true" /><select idref="V-258096" selected="true" /><select idref="V-258097" selected="true" /><select idref="V-258098" selected="true" /><select idref="V-258099" selected="true" /><select idref="V-258100" selected="true" /><select idref="V-258101" selected="true" /><select idref="V-258102" selected="true" /><select idref="V-258103" selected="true" /><select idref="V-258104" selected="true" /><select idref="V-258105" selected="true" /><select idref="V-258106" selected="true" /><select idref="V-258107" selected="true" /><select idref="V-258109" selected="true" /><select idref="V-258110" selected="true" /><select idref="V-258111" selected="true" /><select idref="V-258112" selected="true" /><select idref="V-258113" selected="true" /><select idref="V-258114" selected="true" /><select idref="V-258115" selected="true" /><select idref="V-258116" selected="true" /><select idref="V-258117" selected="true" /><select idref="V-258118" selected="true" /><select idref="V-258120" selected="true" /><select idref="V-258121" selected="true" /><select idref="V-258122" selected="true" /><select idref="V-258123" selected="true" /><select idref="V-258124" selected="true" /><select idref="V-258125" selected="true" /><select idref="V-258126" selected="true" /><select idref="V-258127" selected="true" /><select idref="V-258128" selected="true" /><select idref="V-258129" selected="true" /><select idref="V-258131" selected="true" /><select idref="V-258132" selected="true" /><select idref="V-258133" selected="true" /><select idref="V-258134" selected="true" /><select idref="V-258135" selected="true" /><select idref="V-258136" selected="true" /><select idref="V-258137" selected="true" /><select idref="V-258138" selected="true" /><select idref="V-258139" selected="true" /><select idref="V-258140" selected="true" /><select idref="V-258141" selected="true" /><select idref="V-258142" selected="true" /><select idref="V-258143" selected="true" /><select idref="V-258144" selected="true" /><select idref="V-258146" selected="true" /><select idref="V-258147" selected="true" /><select idref="V-258148" selected="true" /><select idref="V-258149" selected="true" /><select idref="V-258150" selected="true" /><select idref="V-258151" selected="true" /><select idref="V-258152" selected="true" /><select idref="V-258153" selected="true" /><select idref="V-258154" selected="true" /><select idref="V-258155" selected="true" /><select idref="V-258156" selected="true" /><select idref="V-258157" selected="true" /><select idref="V-258158" selected="true" /><select idref="V-258159" selected="true" /><select idref="V-258160" selected="true" /><select idref="V-258161" selected="true" /><select idref="V-258162" selected="true" /><select idref="V-258163" selected="true" /><select idref="V-258164" selected="true" /><select idref="V-258165" selected="true" /><select idref="V-258166" selected="true" /><select idref="V-258167" selected="true" /><select idref="V-258168" selected="true" /><select idref="V-258169" selected="true" /><select idref="V-258170" selected="true" /><select idref="V-258171" selected="true" /><select idref="V-258173" selected="true" /><select idref="V-258174" selected="true" /><select idref="V-258175" selected="true" /><select idref="V-258176" selected="true" /><select idref="V-258177" selected="true" /><select idref="V-258178" selected="true" /><select idref="V-258179" selected="true" /><select idref="V-258180" selected="true" /><select idref="V-258181" selected="true" /><select idref="V-258182" selected="true" /><select idref="V-258183" selected="true" /><select idref="V-258184" selected="true" /><select idref="V-258185" selected="true" /><select idref="V-258186" selected="true" /><select idref="V-258187" selected="true" /><select idref="V-258188" selected="true" /><select idref="V-258189" selected="true" /><select idref="V-258190" selected="true" /><select idref="V-258191" selected="true" /><select idref="V-258192" selected="true" /><select idref="V-258193" selected="true" /><select idref="V-258194" selected="true" /><select idref="V-258195" selected="true" /><select idref="V-258196" selected="true" /><select idref="V-258197" selected="true" /><select idref="V-258198" selected="true" /><select idref="V-258199" selected="true" /><select idref="V-258200" selected="true" /><select idref="V-258201" selected="true" /><select idref="V-258202" selected="true" /><select idref="V-258203" selected="true" /><select idref="V-258204" selected="true" /><select idref="V-258205" selected="true" /><select idref="V-258206" selected="true" /><select idref="V-258207" selected="true" /><select idref="V-258208" selected="true" /><select idref="V-258209" selected="true" /><select idref="V-258210" selected="true" /><select idref="V-258211" selected="true" /><select idref="V-258212" selected="true" /><select idref="V-258213" selected="true" /><select idref="V-258214" selected="true" /><select idref="V-258215" selected="true" /><select idref="V-258216" selected="true" /><select idref="V-258217" selected="true" /><select idref="V-258218" selected="true" /><select idref="V-258219" selected="true" /><select idref="V-258220" selected="true" /><select idref="V-258221" selected="true" /><select idref="V-258222" selected="true" /><select idref="V-258223" selected="true" /><select idref="V-258224" selected="true" /><select idref="V-258225" selected="true" /><select idref="V-258227" selected="true" /><select idref="V-258228" selected="true" /><select idref="V-258229" selected="true" /><select idref="V-258230" selected="true" /><select idref="V-258231" selected="true" /><select idref="V-258232" selected="true" /><select idref="V-258233" selected="true" /><select idref="V-258234" selected="true" /><select idref="V-258236" selected="true" /><select idref="V-258241" selected="true" /><select idref="V-258242" selected="true" /><select idref="V-270174" selected="true" /><select idref="V-270175" selected="true" /><select idref="V-270176" selected="true" /><select idref="V-270177" selected="true" /><select idref="V-270178" selected="true" /><select idref="V-270180" selected="true" /><select idref="V-272488" selected="true" /><select idref="V-272496" selected="true" /><select idref="V-279936" selected="true" /></Profile><Profile id="MAC-2_Public"><title>II - Mission Support Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-257777" selected="true" /><select idref="V-257778" selected="true" /><select idref="V-257779" selected="true" /><select idref="V-257781" selected="true" /><select idref="V-257782" selected="true" /><select idref="V-257783" selected="true" /><select idref="V-257784" selected="true" /><select idref="V-257785" selected="true" /><select idref="V-257786" selected="true" /><select idref="V-257787" selected="true" /><select idref="V-257788" selected="true" /><select idref="V-257789" selected="true" /><select idref="V-257790" selected="true" /><select idref="V-257791" selected="true" /><select idref="V-257792" selected="true" /><select idref="V-257793" selected="true" /><select idref="V-257794" selected="true" /><select idref="V-257795" selected="true" /><select idref="V-257796" selected="true" /><select idref="V-257797" selected="true" /><select idref="V-257798" selected="true" /><select idref="V-257799" selected="true" /><select idref="V-257800" selected="true" /><select idref="V-257801" selected="true" /><select idref="V-257802" selected="true" /><select idref="V-257803" selected="true" /><select idref="V-257804" selected="true" /><select idref="V-257805" selected="true" /><select idref="V-257806" selected="true" /><select idref="V-257807" selected="true" /><select idref="V-257808" selected="true" /><select idref="V-257809" selected="true" /><select idref="V-257810" selected="true" /><select idref="V-257811" selected="true" /><select idref="V-257812" selected="true" /><select idref="V-257813" selected="true" /><select idref="V-257814" selected="true" /><select idref="V-257815" selected="true" /><select idref="V-257816" selected="true" /><select idref="V-257817" selected="true" /><select idref="V-257818" selected="true" /><select idref="V-257819" selected="true" /><select idref="V-257820" selected="true" /><select idref="V-257821" selected="true" /><select idref="V-257822" selected="true" /><select idref="V-257823" selected="true" /><select idref="V-257824" selected="true" /><select idref="V-257825" selected="true" /><select idref="V-257826" selected="true" /><select idref="V-257827" selected="true" /><select idref="V-257828" selected="true" /><select idref="V-257829" selected="true" /><select idref="V-257830" selected="true" /><select idref="V-257831" selected="true" /><select idref="V-257832" selected="true" /><select idref="V-257833" selected="true" /><select idref="V-257834" selected="true" /><select idref="V-257835" selected="true" /><select idref="V-257836" selected="true" /><select idref="V-257837" selected="true" /><select idref="V-257838" selected="true" /><select idref="V-257839" selected="true" /><select idref="V-257840" selected="true" /><select idref="V-257841" selected="true" /><select idref="V-257842" selected="true" /><select idref="V-257843" selected="true" /><select idref="V-257844" selected="true" /><select idref="V-257845" selected="true" /><select idref="V-257846" selected="true" /><select idref="V-257847" selected="true" /><select idref="V-257848" selected="true" /><select idref="V-257849" selected="true" /><select idref="V-257850" selected="true" /><select idref="V-257851" selected="true" /><select idref="V-257852" selected="true" /><select idref="V-257854" selected="true" /><select idref="V-257855" selected="true" /><select idref="V-257856" selected="true" /><select idref="V-257857" selected="true" /><select idref="V-257858" selected="true" /><select idref="V-257859" selected="true" /><select idref="V-257860" selected="true" /><select idref="V-257861" selected="true" /><select idref="V-257862" selected="true" /><select idref="V-257863" selected="true" /><select idref="V-257864" selected="true" /><select idref="V-257865" selected="true" /><select idref="V-257866" selected="true" /><select idref="V-257867" selected="true" /><select idref="V-257868" selected="true" /><select idref="V-257869" selected="true" /><select idref="V-257870" selected="true" /><select idref="V-257871" selected="true" /><select idref="V-257872" selected="true" /><select idref="V-257873" selected="true" /><select idref="V-257874" selected="true" /><select idref="V-257875" selected="true" /><select idref="V-257876" selected="true" /><select idref="V-257877" selected="true" /><select idref="V-257878" selected="true" /><select idref="V-257879" selected="true" /><select idref="V-257880" selected="true" /><select idref="V-257881" selected="true" /><select idref="V-257882" selected="true" /><select idref="V-257883" selected="true" /><select idref="V-257884" selected="true" /><select idref="V-257885" selected="true" /><select idref="V-257886" selected="true" /><select idref="V-257887" selected="true" /><select idref="V-257888" selected="true" /><select idref="V-257889" selected="true" /><select idref="V-257890" selected="true" /><select idref="V-257891" selected="true" /><select idref="V-257892" selected="true" /><select idref="V-257893" selected="true" /><select idref="V-257894" selected="true" /><select idref="V-257895" selected="true" /><select idref="V-257896" selected="true" /><select idref="V-257897" selected="true" /><select idref="V-257898" selected="true" /><select idref="V-257899" selected="true" /><select idref="V-257900" selected="true" /><select idref="V-257901" selected="true" /><select idref="V-257902" selected="true" /><select idref="V-257903" selected="true" /><select idref="V-257904" selected="true" /><select idref="V-257905" selected="true" /><select idref="V-257906" selected="true" /><select idref="V-257907" selected="true" /><select idref="V-257908" selected="true" /><select idref="V-257909" selected="true" /><select idref="V-257910" selected="true" /><select idref="V-257911" selected="true" /><select idref="V-257912" selected="true" /><select idref="V-257913" selected="true" /><select idref="V-257914" selected="true" /><select idref="V-257915" selected="true" /><select idref="V-257916" selected="true" /><select idref="V-257917" selected="true" /><select idref="V-257918" selected="true" /><select idref="V-257919" selected="true" /><select idref="V-257920" selected="true" /><select idref="V-257921" selected="true" /><select idref="V-257922" selected="true" /><select idref="V-257923" selected="true" /><select idref="V-257924" selected="true" /><select idref="V-257925" selected="true" /><select idref="V-257926" selected="true" /><select idref="V-257927" selected="true" /><select idref="V-257928" selected="true" /><select idref="V-257929" selected="true" /><select idref="V-257930" selected="true" /><select idref="V-257931" selected="true" /><select idref="V-257932" selected="true" /><select idref="V-257934" selected="true" /><select idref="V-257935" selected="true" /><select idref="V-257936" selected="true" /><select idref="V-257937" selected="true" /><select idref="V-257939" selected="true" /><select idref="V-257940" selected="true" /><select idref="V-257941" selected="true" /><select idref="V-257942" selected="true" /><select idref="V-257943" selected="true" /><select idref="V-257944" selected="true" /><select idref="V-257945" selected="true" /><select idref="V-257946" selected="true" /><select idref="V-257947" selected="true" /><select idref="V-257948" selected="true" /><select idref="V-257949" selected="true" /><select idref="V-257950" selected="true" /><select idref="V-257951" selected="true" /><select idref="V-257953" selected="true" /><select idref="V-257954" selected="true" /><select idref="V-257955" selected="true" /><select idref="V-257956" selected="true" /><select idref="V-257957" selected="true" /><select idref="V-257958" selected="true" /><select idref="V-257959" selected="true" /><select idref="V-257960" selected="true" /><select idref="V-257961" selected="true" /><select idref="V-257962" selected="true" /><select idref="V-257963" selected="true" /><select idref="V-257964" selected="true" /><select idref="V-257965" selected="true" /><select idref="V-257966" selected="true" /><select idref="V-257967" selected="true" /><select idref="V-257968" selected="true" /><select idref="V-257969" selected="true" /><select idref="V-257970" selected="true" /><select idref="V-257971" selected="true" /><select idref="V-257972" selected="true" /><select idref="V-257973" selected="true" /><select idref="V-257974" selected="true" /><select idref="V-257975" selected="true" /><select idref="V-257976" selected="true" /><select idref="V-257977" selected="true" /><select idref="V-257978" selected="true" /><select idref="V-257979" selected="true" /><select idref="V-257980" selected="true" /><select idref="V-257981" selected="true" /><select idref="V-257982" selected="true" /><select idref="V-257983" selected="true" /><select idref="V-257984" selected="true" /><select idref="V-257985" selected="true" /><select idref="V-257986" selected="true" /><select idref="V-257989" selected="true" /><select idref="V-257991" selected="true" /><select idref="V-257992" selected="true" /><select idref="V-257993" selected="true" /><select idref="V-257994" selected="true" /><select idref="V-257995" selected="true" /><select idref="V-257996" selected="true" /><select idref="V-257997" selected="true" /><select idref="V-257998" selected="true" /><select idref="V-257999" selected="true" /><select idref="V-258000" selected="true" /><select idref="V-258001" selected="true" /><select idref="V-258002" selected="true" /><select idref="V-258003" selected="true" /><select idref="V-258004" selected="true" /><select idref="V-258005" selected="true" /><select idref="V-258006" selected="true" /><select idref="V-258007" selected="true" /><select idref="V-258008" selected="true" /><select idref="V-258009" selected="true" /><select idref="V-258011" selected="true" /><select idref="V-258012" selected="true" /><select idref="V-258013" selected="true" /><select idref="V-258014" selected="true" /><select idref="V-258015" selected="true" /><select idref="V-258016" selected="true" /><select idref="V-258017" selected="true" /><select idref="V-258018" selected="true" /><select idref="V-258019" selected="true" /><select idref="V-258020" selected="true" /><select idref="V-258021" selected="true" /><select idref="V-258022" selected="true" /><select idref="V-258023" selected="true" /><select idref="V-258024" selected="true" /><select idref="V-258025" selected="true" /><select idref="V-258026" selected="true" /><select idref="V-258027" selected="true" /><select idref="V-258028" selected="true" /><select idref="V-258029" selected="true" /><select idref="V-258030" selected="true" /><select idref="V-258031" selected="true" /><select idref="V-258032" selected="true" /><select idref="V-258033" selected="true" /><select idref="V-258034" selected="true" /><select idref="V-258035" selected="true" /><select idref="V-258036" selected="true" /><select idref="V-258037" selected="true" /><select idref="V-258038" selected="true" /><select idref="V-258039" selected="true" /><select idref="V-258040" selected="true" /><select idref="V-258041" selected="true" /><select idref="V-258042" selected="true" /><select idref="V-258043" selected="true" /><select idref="V-258044" selected="true" /><select idref="V-258045" selected="true" /><select idref="V-258046" selected="true" /><select idref="V-258047" selected="true" /><select idref="V-258048" selected="true" /><select idref="V-258049" selected="true" /><select idref="V-258050" selected="true" /><select idref="V-258051" selected="true" /><select idref="V-258052" selected="true" /><select idref="V-258053" selected="true" /><select idref="V-258054" selected="true" /><select idref="V-258055" selected="true" /><select idref="V-258056" selected="true" /><select idref="V-258057" selected="true" /><select idref="V-258058" selected="true" /><select idref="V-258059" selected="true" /><select idref="V-258060" selected="true" /><select idref="V-258061" selected="true" /><select idref="V-258068" selected="true" /><select idref="V-258069" selected="true" /><select idref="V-258070" selected="true" /><select idref="V-258071" selected="true" /><select idref="V-258072" selected="true" /><select idref="V-258073" selected="true" /><select idref="V-258074" selected="true" /><select idref="V-258075" selected="true" /><select idref="V-258077" selected="true" /><select idref="V-258078" selected="true" /><select idref="V-258079" selected="true" /><select idref="V-258080" selected="true" /><select idref="V-258081" selected="true" /><select idref="V-258082" selected="true" /><select idref="V-258083" selected="true" /><select idref="V-258084" selected="true" /><select idref="V-258085" selected="true" /><select idref="V-258086" selected="true" /><select idref="V-258087" selected="true" /><select idref="V-258088" selected="true" /><select idref="V-258089" selected="true" /><select idref="V-258090" selected="true" /><select idref="V-258091" selected="true" /><select idref="V-258094" selected="true" /><select idref="V-258095" selected="true" /><select idref="V-258096" selected="true" /><select idref="V-258097" selected="true" /><select idref="V-258098" selected="true" /><select idref="V-258099" selected="true" /><select idref="V-258100" selected="true" /><select idref="V-258101" selected="true" /><select idref="V-258102" selected="true" /><select idref="V-258103" selected="true" /><select idref="V-258104" selected="true" /><select idref="V-258105" selected="true" /><select idref="V-258106" selected="true" /><select idref="V-258107" selected="true" /><select idref="V-258109" selected="true" /><select idref="V-258110" selected="true" /><select idref="V-258111" selected="true" /><select idref="V-258112" selected="true" /><select idref="V-258113" selected="true" /><select idref="V-258114" selected="true" /><select idref="V-258115" selected="true" /><select idref="V-258116" selected="true" /><select idref="V-258117" selected="true" /><select idref="V-258118" selected="true" /><select idref="V-258120" selected="true" /><select idref="V-258121" selected="true" /><select idref="V-258122" selected="true" /><select idref="V-258123" selected="true" /><select idref="V-258124" selected="true" /><select idref="V-258125" selected="true" /><select idref="V-258126" selected="true" /><select idref="V-258127" selected="true" /><select idref="V-258128" selected="true" /><select idref="V-258129" selected="true" /><select idref="V-258131" selected="true" /><select idref="V-258132" selected="true" /><select idref="V-258133" selected="true" /><select idref="V-258134" selected="true" /><select idref="V-258135" selected="true" /><select idref="V-258136" selected="true" /><select idref="V-258137" selected="true" /><select idref="V-258138" selected="true" /><select idref="V-258139" selected="true" /><select idref="V-258140" selected="true" /><select idref="V-258141" selected="true" /><select idref="V-258142" selected="true" /><select idref="V-258143" selected="true" /><select idref="V-258144" selected="true" /><select idref="V-258146" selected="true" /><select idref="V-258147" selected="true" /><select idref="V-258148" selected="true" /><select idref="V-258149" selected="true" /><select idref="V-258150" selected="true" /><select idref="V-258151" selected="true" /><select idref="V-258152" selected="true" /><select idref="V-258153" selected="true" /><select idref="V-258154" selected="true" /><select idref="V-258155" selected="true" /><select idref="V-258156" selected="true" /><select idref="V-258157" selected="true" /><select idref="V-258158" selected="true" /><select idref="V-258159" selected="true" /><select idref="V-258160" selected="true" /><select idref="V-258161" selected="true" /><select idref="V-258162" selected="true" /><select idref="V-258163" selected="true" /><select idref="V-258164" selected="true" /><select idref="V-258165" selected="true" /><select idref="V-258166" selected="true" /><select idref="V-258167" selected="true" /><select idref="V-258168" selected="true" /><select idref="V-258169" selected="true" /><select idref="V-258170" selected="true" /><select idref="V-258171" selected="true" /><select idref="V-258173" selected="true" /><select idref="V-258174" selected="true" /><select idref="V-258175" selected="true" /><select idref="V-258176" selected="true" /><select idref="V-258177" selected="true" /><select idref="V-258178" selected="true" /><select idref="V-258179" selected="true" /><select idref="V-258180" selected="true" /><select idref="V-258181" selected="true" /><select idref="V-258182" selected="true" /><select idref="V-258183" selected="true" /><select idref="V-258184" selected="true" /><select idref="V-258185" selected="true" /><select idref="V-258186" selected="true" /><select idref="V-258187" selected="true" /><select idref="V-258188" selected="true" /><select idref="V-258189" selected="true" /><select idref="V-258190" selected="true" /><select idref="V-258191" selected="true" /><select idref="V-258192" selected="true" /><select idref="V-258193" selected="true" /><select idref="V-258194" selected="true" /><select idref="V-258195" selected="true" /><select idref="V-258196" selected="true" /><select idref="V-258197" selected="true" /><select idref="V-258198" selected="true" /><select idref="V-258199" selected="true" /><select idref="V-258200" selected="true" /><select idref="V-258201" selected="true" /><select idref="V-258202" selected="true" /><select idref="V-258203" selected="true" /><select idref="V-258204" selected="true" /><select idref="V-258205" selected="true" /><select idref="V-258206" selected="true" /><select idref="V-258207" selected="true" /><select idref="V-258208" selected="true" /><select idref="V-258209" selected="true" /><select idref="V-258210" selected="true" /><select idref="V-258211" selected="true" /><select idref="V-258212" selected="true" /><select idref="V-258213" selected="true" /><select idref="V-258214" selected="true" /><select idref="V-258215" selected="true" /><select idref="V-258216" selected="true" /><select idref="V-258217" selected="true" /><select idref="V-258218" selected="true" /><select idref="V-258219" selected="true" /><select idref="V-258220" selected="true" /><select idref="V-258221" selected="true" /><select idref="V-258222" selected="true" /><select idref="V-258223" selected="true" /><select idref="V-258224" selected="true" /><select idref="V-258225" selected="true" /><select idref="V-258227" selected="true" /><select idref="V-258228" selected="true" /><select idref="V-258229" selected="true" /><select idref="V-258230" selected="true" /><select idref="V-258231" selected="true" /><select idref="V-258232" selected="true" /><select idref="V-258233" selected="true" /><select idref="V-258234" selected="true" /><select idref="V-258236" selected="true" /><select idref="V-258241" selected="true" /><select idref="V-258242" selected="true" /><select idref="V-270174" selected="true" /><select idref="V-270175" selected="true" /><select idref="V-270176" selected="true" /><select idref="V-270177" selected="true" /><select idref="V-270178" selected="true" /><select idref="V-270180" selected="true" /><select idref="V-272488" selected="true" /><select idref="V-272496" selected="true" /><select idref="V-279936" selected="true" /></Profile><Profile id="MAC-2_Sensitive"><title>II - Mission Support Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-257777" selected="true" /><select idref="V-257778" selected="true" /><select idref="V-257779" selected="true" /><select idref="V-257781" selected="true" /><select idref="V-257782" selected="true" /><select idref="V-257783" selected="true" /><select idref="V-257784" selected="true" /><select idref="V-257785" selected="true" /><select idref="V-257786" selected="true" /><select idref="V-257787" selected="true" /><select idref="V-257788" selected="true" /><select idref="V-257789" selected="true" /><select idref="V-257790" selected="true" /><select idref="V-257791" selected="true" /><select idref="V-257792" selected="true" /><select idref="V-257793" selected="true" /><select idref="V-257794" selected="true" /><select idref="V-257795" selected="true" /><select idref="V-257796" selected="true" /><select idref="V-257797" selected="true" /><select idref="V-257798" selected="true" /><select idref="V-257799" selected="true" /><select idref="V-257800" selected="true" /><select idref="V-257801" selected="true" /><select idref="V-257802" selected="true" /><select idref="V-257803" selected="true" /><select idref="V-257804" selected="true" /><select idref="V-257805" selected="true" /><select idref="V-257806" selected="true" /><select idref="V-257807" selected="true" /><select idref="V-257808" selected="true" /><select idref="V-257809" selected="true" /><select idref="V-257810" selected="true" /><select idref="V-257811" selected="true" /><select idref="V-257812" selected="true" /><select idref="V-257813" selected="true" /><select idref="V-257814" selected="true" /><select idref="V-257815" selected="true" /><select idref="V-257816" selected="true" /><select idref="V-257817" selected="true" /><select idref="V-257818" selected="true" /><select idref="V-257819" selected="true" /><select idref="V-257820" selected="true" /><select idref="V-257821" selected="true" /><select idref="V-257822" selected="true" /><select idref="V-257823" selected="true" /><select idref="V-257824" selected="true" /><select idref="V-257825" selected="true" /><select idref="V-257826" selected="true" /><select idref="V-257827" selected="true" /><select idref="V-257828" selected="true" /><select idref="V-257829" selected="true" /><select idref="V-257830" selected="true" /><select idref="V-257831" selected="true" /><select idref="V-257832" selected="true" /><select idref="V-257833" selected="true" /><select idref="V-257834" selected="true" /><select idref="V-257835" selected="true" /><select idref="V-257836" selected="true" /><select idref="V-257837" selected="true" /><select idref="V-257838" selected="true" /><select idref="V-257839" selected="true" /><select idref="V-257840" selected="true" /><select idref="V-257841" selected="true" /><select idref="V-257842" selected="true" /><select idref="V-257843" selected="true" /><select idref="V-257844" selected="true" /><select idref="V-257845" selected="true" /><select idref="V-257846" selected="true" /><select idref="V-257847" selected="true" /><select idref="V-257848" selected="true" /><select idref="V-257849" selected="true" /><select idref="V-257850" selected="true" /><select idref="V-257851" selected="true" /><select idref="V-257852" selected="true" /><select idref="V-257854" selected="true" /><select idref="V-257855" selected="true" /><select idref="V-257856" selected="true" /><select idref="V-257857" selected="true" /><select idref="V-257858" selected="true" /><select idref="V-257859" selected="true" /><select idref="V-257860" selected="true" /><select idref="V-257861" selected="true" /><select idref="V-257862" selected="true" /><select idref="V-257863" selected="true" /><select idref="V-257864" selected="true" /><select idref="V-257865" selected="true" /><select idref="V-257866" selected="true" /><select idref="V-257867" selected="true" /><select idref="V-257868" selected="true" /><select idref="V-257869" selected="true" /><select idref="V-257870" selected="true" /><select idref="V-257871" selected="true" /><select idref="V-257872" selected="true" /><select idref="V-257873" selected="true" /><select idref="V-257874" selected="true" /><select idref="V-257875" selected="true" /><select idref="V-257876" selected="true" /><select idref="V-257877" selected="true" /><select idref="V-257878" selected="true" /><select idref="V-257879" selected="true" /><select idref="V-257880" selected="true" /><select idref="V-257881" selected="true" /><select idref="V-257882" selected="true" /><select idref="V-257883" selected="true" /><select idref="V-257884" selected="true" /><select idref="V-257885" selected="true" /><select idref="V-257886" selected="true" /><select idref="V-257887" selected="true" /><select idref="V-257888" selected="true" /><select idref="V-257889" selected="true" /><select idref="V-257890" selected="true" /><select idref="V-257891" selected="true" /><select idref="V-257892" selected="true" /><select idref="V-257893" selected="true" /><select idref="V-257894" selected="true" /><select idref="V-257895" selected="true" /><select idref="V-257896" selected="true" /><select idref="V-257897" selected="true" /><select idref="V-257898" selected="true" /><select idref="V-257899" selected="true" /><select idref="V-257900" selected="true" /><select idref="V-257901" selected="true" /><select idref="V-257902" selected="true" /><select idref="V-257903" selected="true" /><select idref="V-257904" selected="true" /><select idref="V-257905" selected="true" /><select idref="V-257906" selected="true" /><select idref="V-257907" selected="true" /><select idref="V-257908" selected="true" /><select idref="V-257909" selected="true" /><select idref="V-257910" selected="true" /><select idref="V-257911" selected="true" /><select idref="V-257912" selected="true" /><select idref="V-257913" selected="true" /><select idref="V-257914" selected="true" /><select idref="V-257915" selected="true" /><select idref="V-257916" selected="true" /><select idref="V-257917" selected="true" /><select idref="V-257918" selected="true" /><select idref="V-257919" selected="true" /><select idref="V-257920" selected="true" /><select idref="V-257921" selected="true" /><select idref="V-257922" selected="true" /><select idref="V-257923" selected="true" /><select idref="V-257924" selected="true" /><select idref="V-257925" selected="true" /><select idref="V-257926" selected="true" /><select idref="V-257927" selected="true" /><select idref="V-257928" selected="true" /><select idref="V-257929" selected="true" /><select idref="V-257930" selected="true" /><select idref="V-257931" selected="true" /><select idref="V-257932" selected="true" /><select idref="V-257934" selected="true" /><select idref="V-257935" selected="true" /><select idref="V-257936" selected="true" /><select idref="V-257937" selected="true" /><select idref="V-257939" selected="true" /><select idref="V-257940" selected="true" /><select idref="V-257941" selected="true" /><select idref="V-257942" selected="true" /><select idref="V-257943" selected="true" /><select idref="V-257944" selected="true" /><select idref="V-257945" selected="true" /><select idref="V-257946" selected="true" /><select idref="V-257947" selected="true" /><select idref="V-257948" selected="true" /><select idref="V-257949" selected="true" /><select idref="V-257950" selected="true" /><select idref="V-257951" selected="true" /><select idref="V-257953" selected="true" /><select idref="V-257954" selected="true" /><select idref="V-257955" selected="true" /><select idref="V-257956" selected="true" /><select idref="V-257957" selected="true" /><select idref="V-257958" selected="true" /><select idref="V-257959" selected="true" /><select idref="V-257960" selected="true" /><select idref="V-257961" selected="true" /><select idref="V-257962" selected="true" /><select idref="V-257963" selected="true" /><select idref="V-257964" selected="true" /><select idref="V-257965" selected="true" /><select idref="V-257966" selected="true" /><select idref="V-257967" selected="true" /><select idref="V-257968" selected="true" /><select idref="V-257969" selected="true" /><select idref="V-257970" selected="true" /><select idref="V-257971" selected="true" /><select idref="V-257972" selected="true" /><select idref="V-257973" selected="true" /><select idref="V-257974" selected="true" /><select idref="V-257975" selected="true" /><select idref="V-257976" selected="true" /><select idref="V-257977" selected="true" /><select idref="V-257978" selected="true" /><select idref="V-257979" selected="true" /><select idref="V-257980" selected="true" /><select idref="V-257981" selected="true" /><select idref="V-257982" selected="true" /><select idref="V-257983" selected="true" /><select idref="V-257984" selected="true" /><select idref="V-257985" selected="true" /><select idref="V-257986" selected="true" /><select idref="V-257989" selected="true" /><select idref="V-257991" selected="true" /><select idref="V-257992" selected="true" /><select idref="V-257993" selected="true" /><select idref="V-257994" selected="true" /><select idref="V-257995" selected="true" /><select idref="V-257996" selected="true" /><select idref="V-257997" selected="true" /><select idref="V-257998" selected="true" /><select idref="V-257999" selected="true" /><select idref="V-258000" selected="true" /><select idref="V-258001" selected="true" /><select idref="V-258002" selected="true" /><select idref="V-258003" selected="true" /><select idref="V-258004" selected="true" /><select idref="V-258005" selected="true" /><select idref="V-258006" selected="true" /><select idref="V-258007" selected="true" /><select idref="V-258008" selected="true" /><select idref="V-258009" selected="true" /><select idref="V-258011" selected="true" /><select idref="V-258012" selected="true" /><select idref="V-258013" selected="true" /><select idref="V-258014" selected="true" /><select idref="V-258015" selected="true" /><select idref="V-258016" selected="true" /><select idref="V-258017" selected="true" /><select idref="V-258018" selected="true" /><select idref="V-258019" selected="true" /><select idref="V-258020" selected="true" /><select idref="V-258021" selected="true" /><select idref="V-258022" selected="true" /><select idref="V-258023" selected="true" /><select idref="V-258024" selected="true" /><select idref="V-258025" selected="true" /><select idref="V-258026" selected="true" /><select idref="V-258027" selected="true" /><select idref="V-258028" selected="true" /><select idref="V-258029" selected="true" /><select idref="V-258030" selected="true" /><select idref="V-258031" selected="true" /><select idref="V-258032" selected="true" /><select idref="V-258033" selected="true" /><select idref="V-258034" selected="true" /><select idref="V-258035" selected="true" /><select idref="V-258036" selected="true" /><select idref="V-258037" selected="true" /><select idref="V-258038" selected="true" /><select idref="V-258039" selected="true" /><select idref="V-258040" selected="true" /><select idref="V-258041" selected="true" /><select idref="V-258042" selected="true" /><select idref="V-258043" selected="true" /><select idref="V-258044" selected="true" /><select idref="V-258045" selected="true" /><select idref="V-258046" selected="true" /><select idref="V-258047" selected="true" /><select idref="V-258048" selected="true" /><select idref="V-258049" selected="true" /><select idref="V-258050" selected="true" /><select idref="V-258051" selected="true" /><select idref="V-258052" selected="true" /><select idref="V-258053" selected="true" /><select idref="V-258054" selected="true" /><select idref="V-258055" selected="true" /><select idref="V-258056" selected="true" /><select idref="V-258057" selected="true" /><select idref="V-258058" selected="true" /><select idref="V-258059" selected="true" /><select idref="V-258060" selected="true" /><select idref="V-258061" selected="true" /><select idref="V-258068" selected="true" /><select idref="V-258069" selected="true" /><select idref="V-258070" selected="true" /><select idref="V-258071" selected="true" /><select idref="V-258072" selected="true" /><select idref="V-258073" selected="true" /><select idref="V-258074" selected="true" /><select idref="V-258075" selected="true" /><select idref="V-258077" selected="true" /><select idref="V-258078" selected="true" /><select idref="V-258079" selected="true" /><select idref="V-258080" selected="true" /><select idref="V-258081" selected="true" /><select idref="V-258082" selected="true" /><select idref="V-258083" selected="true" /><select idref="V-258084" selected="true" /><select idref="V-258085" selected="true" /><select idref="V-258086" selected="true" /><select idref="V-258087" selected="true" /><select idref="V-258088" selected="true" /><select idref="V-258089" selected="true" /><select idref="V-258090" selected="true" /><select idref="V-258091" selected="true" /><select idref="V-258094" selected="true" /><select idref="V-258095" selected="true" /><select idref="V-258096" selected="true" /><select idref="V-258097" selected="true" /><select idref="V-258098" selected="true" /><select idref="V-258099" selected="true" /><select idref="V-258100" selected="true" /><select idref="V-258101" selected="true" /><select idref="V-258102" selected="true" /><select idref="V-258103" selected="true" /><select idref="V-258104" selected="true" /><select idref="V-258105" selected="true" /><select idref="V-258106" selected="true" /><select idref="V-258107" selected="true" /><select idref="V-258109" selected="true" /><select idref="V-258110" selected="true" /><select idref="V-258111" selected="true" /><select idref="V-258112" selected="true" /><select idref="V-258113" selected="true" /><select idref="V-258114" selected="true" /><select idref="V-258115" selected="true" /><select idref="V-258116" selected="true" /><select idref="V-258117" selected="true" /><select idref="V-258118" selected="true" /><select idref="V-258120" selected="true" /><select idref="V-258121" selected="true" /><select idref="V-258122" selected="true" /><select idref="V-258123" selected="true" /><select idref="V-258124" selected="true" /><select idref="V-258125" selected="true" /><select idref="V-258126" selected="true" /><select idref="V-258127" selected="true" /><select idref="V-258128" selected="true" /><select idref="V-258129" selected="true" /><select idref="V-258131" selected="true" /><select idref="V-258132" selected="true" /><select idref="V-258133" selected="true" /><select idref="V-258134" selected="true" /><select idref="V-258135" selected="true" /><select idref="V-258136" selected="true" /><select idref="V-258137" selected="true" /><select idref="V-258138" selected="true" /><select idref="V-258139" selected="true" /><select idref="V-258140" selected="true" /><select idref="V-258141" selected="true" /><select idref="V-258142" selected="true" /><select idref="V-258143" selected="true" /><select idref="V-258144" selected="true" /><select idref="V-258146" selected="true" /><select idref="V-258147" selected="true" /><select idref="V-258148" selected="true" /><select idref="V-258149" selected="true" /><select idref="V-258150" selected="true" /><select idref="V-258151" selected="true" /><select idref="V-258152" selected="true" /><select idref="V-258153" selected="true" /><select idref="V-258154" selected="true" /><select idref="V-258155" selected="true" /><select idref="V-258156" selected="true" /><select idref="V-258157" selected="true" /><select idref="V-258158" selected="true" /><select idref="V-258159" selected="true" /><select idref="V-258160" selected="true" /><select idref="V-258161" selected="true" /><select idref="V-258162" selected="true" /><select idref="V-258163" selected="true" /><select idref="V-258164" selected="true" /><select idref="V-258165" selected="true" /><select idref="V-258166" selected="true" /><select idref="V-258167" selected="true" /><select idref="V-258168" selected="true" /><select idref="V-258169" selected="true" /><select idref="V-258170" selected="true" /><select idref="V-258171" selected="true" /><select idref="V-258173" selected="true" /><select idref="V-258174" selected="true" /><select idref="V-258175" selected="true" /><select idref="V-258176" selected="true" /><select idref="V-258177" selected="true" /><select idref="V-258178" selected="true" /><select idref="V-258179" selected="true" /><select idref="V-258180" selected="true" /><select idref="V-258181" selected="true" /><select idref="V-258182" selected="true" /><select idref="V-258183" selected="true" /><select idref="V-258184" selected="true" /><select idref="V-258185" selected="true" /><select idref="V-258186" selected="true" /><select idref="V-258187" selected="true" /><select idref="V-258188" selected="true" /><select idref="V-258189" selected="true" /><select idref="V-258190" selected="true" /><select idref="V-258191" selected="true" /><select idref="V-258192" selected="true" /><select idref="V-258193" selected="true" /><select idref="V-258194" selected="true" /><select idref="V-258195" selected="true" /><select idref="V-258196" selected="true" /><select idref="V-258197" selected="true" /><select idref="V-258198" selected="true" /><select idref="V-258199" selected="true" /><select idref="V-258200" selected="true" /><select idref="V-258201" selected="true" /><select idref="V-258202" selected="true" /><select idref="V-258203" selected="true" /><select idref="V-258204" selected="true" /><select idref="V-258205" selected="true" /><select idref="V-258206" selected="true" /><select idref="V-258207" selected="true" /><select idref="V-258208" selected="true" /><select idref="V-258209" selected="true" /><select idref="V-258210" selected="true" /><select idref="V-258211" selected="true" /><select idref="V-258212" selected="true" /><select idref="V-258213" selected="true" /><select idref="V-258214" selected="true" /><select idref="V-258215" selected="true" /><select idref="V-258216" selected="true" /><select idref="V-258217" selected="true" /><select idref="V-258218" selected="true" /><select idref="V-258219" selected="true" /><select idref="V-258220" selected="true" /><select idref="V-258221" selected="true" /><select idref="V-258222" selected="true" /><select idref="V-258223" selected="true" /><select idref="V-258224" selected="true" /><select idref="V-258225" selected="true" /><select idref="V-258227" selected="true" /><select idref="V-258228" selected="true" /><select idref="V-258229" selected="true" /><select idref="V-258230" selected="true" /><select idref="V-258231" selected="true" /><select idref="V-258232" selected="true" /><select idref="V-258233" selected="true" /><select idref="V-258234" selected="true" /><select idref="V-258236" selected="true" /><select idref="V-258241" selected="true" /><select idref="V-258242" selected="true" /><select idref="V-270174" selected="true" /><select idref="V-270175" selected="true" /><select idref="V-270176" selected="true" /><select idref="V-270177" selected="true" /><select idref="V-270178" selected="true" /><select idref="V-270180" selected="true" /><select idref="V-272488" selected="true" /><select idref="V-272496" selected="true" /><select idref="V-279936" selected="true" /></Profile><Profile id="MAC-3_Classified"><title>III - Administrative Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-257777" selected="true" /><select idref="V-257778" selected="true" /><select idref="V-257779" selected="true" /><select idref="V-257781" selected="true" /><select idref="V-257782" selected="true" /><select idref="V-257783" selected="true" /><select idref="V-257784" selected="true" /><select idref="V-257785" selected="true" /><select idref="V-257786" selected="true" /><select idref="V-257787" selected="true" /><select idref="V-257788" selected="true" /><select idref="V-257789" selected="true" /><select idref="V-257790" selected="true" /><select idref="V-257791" selected="true" /><select idref="V-257792" selected="true" /><select idref="V-257793" selected="true" /><select idref="V-257794" selected="true" /><select idref="V-257795" selected="true" /><select idref="V-257796" selected="true" /><select idref="V-257797" selected="true" /><select idref="V-257798" selected="true" /><select idref="V-257799" selected="true" /><select idref="V-257800" selected="true" /><select idref="V-257801" selected="true" /><select idref="V-257802" selected="true" /><select idref="V-257803" selected="true" /><select idref="V-257804" selected="true" /><select idref="V-257805" selected="true" /><select idref="V-257806" selected="true" /><select idref="V-257807" selected="true" /><select idref="V-257808" selected="true" /><select idref="V-257809" selected="true" /><select idref="V-257810" selected="true" /><select idref="V-257811" selected="true" /><select idref="V-257812" selected="true" /><select idref="V-257813" selected="true" /><select idref="V-257814" selected="true" /><select idref="V-257815" selected="true" /><select idref="V-257816" selected="true" /><select idref="V-257817" selected="true" /><select idref="V-257818" selected="true" /><select idref="V-257819" selected="true" /><select idref="V-257820" selected="true" /><select idref="V-257821" selected="true" /><select idref="V-257822" selected="true" /><select idref="V-257823" selected="true" /><select idref="V-257824" selected="true" /><select idref="V-257825" selected="true" /><select idref="V-257826" selected="true" /><select idref="V-257827" selected="true" /><select idref="V-257828" selected="true" /><select idref="V-257829" selected="true" /><select idref="V-257830" selected="true" /><select idref="V-257831" selected="true" /><select idref="V-257832" selected="true" /><select idref="V-257833" selected="true" /><select idref="V-257834" selected="true" /><select idref="V-257835" selected="true" /><select idref="V-257836" selected="true" /><select idref="V-257837" selected="true" /><select idref="V-257838" selected="true" /><select idref="V-257839" selected="true" /><select idref="V-257840" selected="true" /><select idref="V-257841" selected="true" /><select idref="V-257842" selected="true" /><select idref="V-257843" selected="true" /><select idref="V-257844" selected="true" /><select idref="V-257845" selected="true" /><select idref="V-257846" selected="true" /><select idref="V-257847" selected="true" /><select idref="V-257848" selected="true" /><select idref="V-257849" selected="true" /><select idref="V-257850" selected="true" /><select idref="V-257851" selected="true" /><select idref="V-257852" selected="true" /><select idref="V-257854" selected="true" /><select idref="V-257855" selected="true" /><select idref="V-257856" selected="true" /><select idref="V-257857" selected="true" /><select idref="V-257858" selected="true" /><select idref="V-257859" selected="true" /><select idref="V-257860" selected="true" /><select idref="V-257861" selected="true" /><select idref="V-257862" selected="true" /><select idref="V-257863" selected="true" /><select idref="V-257864" selected="true" /><select idref="V-257865" selected="true" /><select idref="V-257866" selected="true" /><select idref="V-257867" selected="true" /><select idref="V-257868" selected="true" /><select idref="V-257869" selected="true" /><select idref="V-257870" selected="true" /><select idref="V-257871" selected="true" /><select idref="V-257872" selected="true" /><select idref="V-257873" selected="true" /><select idref="V-257874" selected="true" /><select idref="V-257875" selected="true" /><select idref="V-257876" selected="true" /><select idref="V-257877" selected="true" /><select idref="V-257878" selected="true" /><select idref="V-257879" selected="true" /><select idref="V-257880" selected="true" /><select idref="V-257881" selected="true" /><select idref="V-257882" selected="true" /><select idref="V-257883" selected="true" /><select idref="V-257884" selected="true" /><select idref="V-257885" selected="true" /><select idref="V-257886" selected="true" /><select idref="V-257887" selected="true" /><select idref="V-257888" selected="true" /><select idref="V-257889" selected="true" /><select idref="V-257890" selected="true" /><select idref="V-257891" selected="true" /><select idref="V-257892" selected="true" /><select idref="V-257893" selected="true" /><select idref="V-257894" selected="true" /><select idref="V-257895" selected="true" /><select idref="V-257896" selected="true" /><select idref="V-257897" selected="true" /><select idref="V-257898" selected="true" /><select idref="V-257899" selected="true" /><select idref="V-257900" selected="true" /><select idref="V-257901" selected="true" /><select idref="V-257902" selected="true" /><select idref="V-257903" selected="true" /><select idref="V-257904" selected="true" /><select idref="V-257905" selected="true" /><select idref="V-257906" selected="true" /><select idref="V-257907" selected="true" /><select idref="V-257908" selected="true" /><select idref="V-257909" selected="true" /><select idref="V-257910" selected="true" /><select idref="V-257911" selected="true" /><select idref="V-257912" selected="true" /><select idref="V-257913" selected="true" /><select idref="V-257914" selected="true" /><select idref="V-257915" selected="true" /><select idref="V-257916" selected="true" /><select idref="V-257917" selected="true" /><select idref="V-257918" selected="true" /><select idref="V-257919" selected="true" /><select idref="V-257920" selected="true" /><select idref="V-257921" selected="true" /><select idref="V-257922" selected="true" /><select idref="V-257923" selected="true" /><select idref="V-257924" selected="true" /><select idref="V-257925" selected="true" /><select idref="V-257926" selected="true" /><select idref="V-257927" selected="true" /><select idref="V-257928" selected="true" /><select idref="V-257929" selected="true" /><select idref="V-257930" selected="true" /><select idref="V-257931" selected="true" /><select idref="V-257932" selected="true" /><select idref="V-257934" selected="true" /><select idref="V-257935" selected="true" /><select idref="V-257936" selected="true" /><select idref="V-257937" selected="true" /><select idref="V-257939" selected="true" /><select idref="V-257940" selected="true" /><select idref="V-257941" selected="true" /><select idref="V-257942" selected="true" /><select idref="V-257943" selected="true" /><select idref="V-257944" selected="true" /><select idref="V-257945" selected="true" /><select idref="V-257946" selected="true" /><select idref="V-257947" selected="true" /><select idref="V-257948" selected="true" /><select idref="V-257949" selected="true" /><select idref="V-257950" selected="true" /><select idref="V-257951" selected="true" /><select idref="V-257953" selected="true" /><select idref="V-257954" selected="true" /><select idref="V-257955" selected="true" /><select idref="V-257956" selected="true" /><select idref="V-257957" selected="true" /><select idref="V-257958" selected="true" /><select idref="V-257959" selected="true" /><select idref="V-257960" selected="true" /><select idref="V-257961" selected="true" /><select idref="V-257962" selected="true" /><select idref="V-257963" selected="true" /><select idref="V-257964" selected="true" /><select idref="V-257965" selected="true" /><select idref="V-257966" selected="true" /><select idref="V-257967" selected="true" /><select idref="V-257968" selected="true" /><select idref="V-257969" selected="true" /><select idref="V-257970" selected="true" /><select idref="V-257971" selected="true" /><select idref="V-257972" selected="true" /><select idref="V-257973" selected="true" /><select idref="V-257974" selected="true" /><select idref="V-257975" selected="true" /><select idref="V-257976" selected="true" /><select idref="V-257977" selected="true" /><select idref="V-257978" selected="true" /><select idref="V-257979" selected="true" /><select idref="V-257980" selected="true" /><select idref="V-257981" selected="true" /><select idref="V-257982" selected="true" /><select idref="V-257983" selected="true" /><select idref="V-257984" selected="true" /><select idref="V-257985" selected="true" /><select idref="V-257986" selected="true" /><select idref="V-257989" selected="true" /><select idref="V-257991" selected="true" /><select idref="V-257992" selected="true" /><select idref="V-257993" selected="true" /><select idref="V-257994" selected="true" /><select idref="V-257995" selected="true" /><select idref="V-257996" selected="true" /><select idref="V-257997" selected="true" /><select idref="V-257998" selected="true" /><select idref="V-257999" selected="true" /><select idref="V-258000" selected="true" /><select idref="V-258001" selected="true" /><select idref="V-258002" selected="true" /><select idref="V-258003" selected="true" /><select idref="V-258004" selected="true" /><select idref="V-258005" selected="true" /><select idref="V-258006" selected="true" /><select idref="V-258007" selected="true" /><select idref="V-258008" selected="true" /><select idref="V-258009" selected="true" /><select idref="V-258011" selected="true" /><select idref="V-258012" selected="true" /><select idref="V-258013" selected="true" /><select idref="V-258014" selected="true" /><select idref="V-258015" selected="true" /><select idref="V-258016" selected="true" /><select idref="V-258017" selected="true" /><select idref="V-258018" selected="true" /><select idref="V-258019" selected="true" /><select idref="V-258020" selected="true" /><select idref="V-258021" selected="true" /><select idref="V-258022" selected="true" /><select idref="V-258023" selected="true" /><select idref="V-258024" selected="true" /><select idref="V-258025" selected="true" /><select idref="V-258026" selected="true" /><select idref="V-258027" selected="true" /><select idref="V-258028" selected="true" /><select idref="V-258029" selected="true" /><select idref="V-258030" selected="true" /><select idref="V-258031" selected="true" /><select idref="V-258032" selected="true" /><select idref="V-258033" selected="true" /><select idref="V-258034" selected="true" /><select idref="V-258035" selected="true" /><select idref="V-258036" selected="true" /><select idref="V-258037" selected="true" /><select idref="V-258038" selected="true" /><select idref="V-258039" selected="true" /><select idref="V-258040" selected="true" /><select idref="V-258041" selected="true" /><select idref="V-258042" selected="true" /><select idref="V-258043" selected="true" /><select idref="V-258044" selected="true" /><select idref="V-258045" selected="true" /><select idref="V-258046" selected="true" /><select idref="V-258047" selected="true" /><select idref="V-258048" selected="true" /><select idref="V-258049" selected="true" /><select idref="V-258050" selected="true" /><select idref="V-258051" selected="true" /><select idref="V-258052" selected="true" /><select idref="V-258053" selected="true" /><select idref="V-258054" selected="true" /><select idref="V-258055" selected="true" /><select idref="V-258056" selected="true" /><select idref="V-258057" selected="true" /><select idref="V-258058" selected="true" /><select idref="V-258059" selected="true" /><select idref="V-258060" selected="true" /><select idref="V-258061" selected="true" /><select idref="V-258068" selected="true" /><select idref="V-258069" selected="true" /><select idref="V-258070" selected="true" /><select idref="V-258071" selected="true" /><select idref="V-258072" selected="true" /><select idref="V-258073" selected="true" /><select idref="V-258074" selected="true" /><select idref="V-258075" selected="true" /><select idref="V-258077" selected="true" /><select idref="V-258078" selected="true" /><select idref="V-258079" selected="true" /><select idref="V-258080" selected="true" /><select idref="V-258081" selected="true" /><select idref="V-258082" selected="true" /><select idref="V-258083" selected="true" /><select idref="V-258084" selected="true" /><select idref="V-258085" selected="true" /><select idref="V-258086" selected="true" /><select idref="V-258087" selected="true" /><select idref="V-258088" selected="true" /><select idref="V-258089" selected="true" /><select idref="V-258090" selected="true" /><select idref="V-258091" selected="true" /><select idref="V-258094" selected="true" /><select idref="V-258095" selected="true" /><select idref="V-258096" selected="true" /><select idref="V-258097" selected="true" /><select idref="V-258098" selected="true" /><select idref="V-258099" selected="true" /><select idref="V-258100" selected="true" /><select idref="V-258101" selected="true" /><select idref="V-258102" selected="true" /><select idref="V-258103" selected="true" /><select idref="V-258104" selected="true" /><select idref="V-258105" selected="true" /><select idref="V-258106" selected="true" /><select idref="V-258107" selected="true" /><select idref="V-258109" selected="true" /><select idref="V-258110" selected="true" /><select idref="V-258111" selected="true" /><select idref="V-258112" selected="true" /><select idref="V-258113" selected="true" /><select idref="V-258114" selected="true" /><select idref="V-258115" selected="true" /><select idref="V-258116" selected="true" /><select idref="V-258117" selected="true" /><select idref="V-258118" selected="true" /><select idref="V-258120" selected="true" /><select idref="V-258121" selected="true" /><select idref="V-258122" selected="true" /><select idref="V-258123" selected="true" /><select idref="V-258124" selected="true" /><select idref="V-258125" selected="true" /><select idref="V-258126" selected="true" /><select idref="V-258127" selected="true" /><select idref="V-258128" selected="true" /><select idref="V-258129" selected="true" /><select idref="V-258131" selected="true" /><select idref="V-258132" selected="true" /><select idref="V-258133" selected="true" /><select idref="V-258134" selected="true" /><select idref="V-258135" selected="true" /><select idref="V-258136" selected="true" /><select idref="V-258137" selected="true" /><select idref="V-258138" selected="true" /><select idref="V-258139" selected="true" /><select idref="V-258140" selected="true" /><select idref="V-258141" selected="true" /><select idref="V-258142" selected="true" /><select idref="V-258143" selected="true" /><select idref="V-258144" selected="true" /><select idref="V-258146" selected="true" /><select idref="V-258147" selected="true" /><select idref="V-258148" selected="true" /><select idref="V-258149" selected="true" /><select idref="V-258150" selected="true" /><select idref="V-258151" selected="true" /><select idref="V-258152" selected="true" /><select idref="V-258153" selected="true" /><select idref="V-258154" selected="true" /><select idref="V-258155" selected="true" /><select idref="V-258156" selected="true" /><select idref="V-258157" selected="true" /><select idref="V-258158" selected="true" /><select idref="V-258159" selected="true" /><select idref="V-258160" selected="true" /><select idref="V-258161" selected="true" /><select idref="V-258162" selected="true" /><select idref="V-258163" selected="true" /><select idref="V-258164" selected="true" /><select idref="V-258165" selected="true" /><select idref="V-258166" selected="true" /><select idref="V-258167" selected="true" /><select idref="V-258168" selected="true" /><select idref="V-258169" selected="true" /><select idref="V-258170" selected="true" /><select idref="V-258171" selected="true" /><select idref="V-258173" selected="true" /><select idref="V-258174" selected="true" /><select idref="V-258175" selected="true" /><select idref="V-258176" selected="true" /><select idref="V-258177" selected="true" /><select idref="V-258178" selected="true" /><select idref="V-258179" selected="true" /><select idref="V-258180" selected="true" /><select idref="V-258181" selected="true" /><select idref="V-258182" selected="true" /><select idref="V-258183" selected="true" /><select idref="V-258184" selected="true" /><select idref="V-258185" selected="true" /><select idref="V-258186" selected="true" /><select idref="V-258187" selected="true" /><select idref="V-258188" selected="true" /><select idref="V-258189" selected="true" /><select idref="V-258190" selected="true" /><select idref="V-258191" selected="true" /><select idref="V-258192" selected="true" /><select idref="V-258193" selected="true" /><select idref="V-258194" selected="true" /><select idref="V-258195" selected="true" /><select idref="V-258196" selected="true" /><select idref="V-258197" selected="true" /><select idref="V-258198" selected="true" /><select idref="V-258199" selected="true" /><select idref="V-258200" selected="true" /><select idref="V-258201" selected="true" /><select idref="V-258202" selected="true" /><select idref="V-258203" selected="true" /><select idref="V-258204" selected="true" /><select idref="V-258205" selected="true" /><select idref="V-258206" selected="true" /><select idref="V-258207" selected="true" /><select idref="V-258208" selected="true" /><select idref="V-258209" selected="true" /><select idref="V-258210" selected="true" /><select idref="V-258211" selected="true" /><select idref="V-258212" selected="true" /><select idref="V-258213" selected="true" /><select idref="V-258214" selected="true" /><select idref="V-258215" selected="true" /><select idref="V-258216" selected="true" /><select idref="V-258217" selected="true" /><select idref="V-258218" selected="true" /><select idref="V-258219" selected="true" /><select idref="V-258220" selected="true" /><select idref="V-258221" selected="true" /><select idref="V-258222" selected="true" /><select idref="V-258223" selected="true" /><select idref="V-258224" selected="true" /><select idref="V-258225" selected="true" /><select idref="V-258227" selected="true" /><select idref="V-258228" selected="true" /><select idref="V-258229" selected="true" /><select idref="V-258230" selected="true" /><select idref="V-258231" selected="true" /><select idref="V-258232" selected="true" /><select idref="V-258233" selected="true" /><select idref="V-258234" selected="true" /><select idref="V-258236" selected="true" /><select idref="V-258241" selected="true" /><select idref="V-258242" selected="true" /><select idref="V-270174" selected="true" /><select idref="V-270175" selected="true" /><select idref="V-270176" selected="true" /><select idref="V-270177" selected="true" /><select idref="V-270178" selected="true" /><select idref="V-270180" selected="true" /><select idref="V-272488" selected="true" /><select idref="V-272496" selected="true" /><select idref="V-279936" selected="true" /></Profile><Profile id="MAC-3_Public"><title>III - Administrative Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-257777" selected="true" /><select idref="V-257778" selected="true" /><select idref="V-257779" selected="true" /><select idref="V-257781" selected="true" /><select idref="V-257782" selected="true" /><select idref="V-257783" selected="true" /><select idref="V-257784" selected="true" /><select idref="V-257785" selected="true" /><select idref="V-257786" selected="true" /><select idref="V-257787" selected="true" /><select idref="V-257788" selected="true" /><select idref="V-257789" selected="true" /><select idref="V-257790" selected="true" /><select idref="V-257791" selected="true" /><select idref="V-257792" selected="true" /><select idref="V-257793" selected="true" /><select idref="V-257794" selected="true" /><select idref="V-257795" selected="true" /><select idref="V-257796" selected="true" /><select idref="V-257797" selected="true" /><select idref="V-257798" selected="true" /><select idref="V-257799" selected="true" /><select idref="V-257800" selected="true" /><select idref="V-257801" selected="true" /><select idref="V-257802" selected="true" /><select idref="V-257803" selected="true" /><select idref="V-257804" selected="true" /><select idref="V-257805" selected="true" /><select idref="V-257806" selected="true" /><select idref="V-257807" selected="true" /><select idref="V-257808" selected="true" /><select idref="V-257809" selected="true" /><select idref="V-257810" selected="true" /><select idref="V-257811" selected="true" /><select idref="V-257812" selected="true" /><select idref="V-257813" selected="true" /><select idref="V-257814" selected="true" /><select idref="V-257815" selected="true" /><select idref="V-257816" selected="true" /><select idref="V-257817" selected="true" /><select idref="V-257818" selected="true" /><select idref="V-257819" selected="true" /><select idref="V-257820" selected="true" /><select idref="V-257821" selected="true" /><select idref="V-257822" selected="true" /><select idref="V-257823" selected="true" /><select idref="V-257824" selected="true" /><select idref="V-257825" selected="true" /><select idref="V-257826" selected="true" /><select idref="V-257827" selected="true" /><select idref="V-257828" selected="true" /><select idref="V-257829" selected="true" /><select idref="V-257830" selected="true" /><select idref="V-257831" selected="true" /><select idref="V-257832" selected="true" /><select idref="V-257833" selected="true" /><select idref="V-257834" selected="true" /><select idref="V-257835" selected="true" /><select idref="V-257836" selected="true" /><select idref="V-257837" selected="true" /><select idref="V-257838" selected="true" /><select idref="V-257839" selected="true" /><select idref="V-257840" selected="true" /><select idref="V-257841" selected="true" /><select idref="V-257842" selected="true" /><select idref="V-257843" selected="true" /><select idref="V-257844" selected="true" /><select idref="V-257845" selected="true" /><select idref="V-257846" selected="true" /><select idref="V-257847" selected="true" /><select idref="V-257848" selected="true" /><select idref="V-257849" selected="true" /><select idref="V-257850" selected="true" /><select idref="V-257851" selected="true" /><select idref="V-257852" selected="true" /><select idref="V-257854" selected="true" /><select idref="V-257855" selected="true" /><select idref="V-257856" selected="true" /><select idref="V-257857" selected="true" /><select idref="V-257858" selected="true" /><select idref="V-257859" selected="true" /><select idref="V-257860" selected="true" /><select idref="V-257861" selected="true" /><select idref="V-257862" selected="true" /><select idref="V-257863" selected="true" /><select idref="V-257864" selected="true" /><select idref="V-257865" selected="true" /><select idref="V-257866" selected="true" /><select idref="V-257867" selected="true" /><select idref="V-257868" selected="true" /><select idref="V-257869" selected="true" /><select idref="V-257870" selected="true" /><select idref="V-257871" selected="true" /><select idref="V-257872" selected="true" /><select idref="V-257873" selected="true" /><select idref="V-257874" selected="true" /><select idref="V-257875" selected="true" /><select idref="V-257876" selected="true" /><select idref="V-257877" selected="true" /><select idref="V-257878" selected="true" /><select idref="V-257879" selected="true" /><select idref="V-257880" selected="true" /><select idref="V-257881" selected="true" /><select idref="V-257882" selected="true" /><select idref="V-257883" selected="true" /><select idref="V-257884" selected="true" /><select idref="V-257885" selected="true" /><select idref="V-257886" selected="true" /><select idref="V-257887" selected="true" /><select idref="V-257888" selected="true" /><select idref="V-257889" selected="true" /><select idref="V-257890" selected="true" /><select idref="V-257891" selected="true" /><select idref="V-257892" selected="true" /><select idref="V-257893" selected="true" /><select idref="V-257894" selected="true" /><select idref="V-257895" selected="true" /><select idref="V-257896" selected="true" /><select idref="V-257897" selected="true" /><select idref="V-257898" selected="true" /><select idref="V-257899" selected="true" /><select idref="V-257900" selected="true" /><select idref="V-257901" selected="true" /><select idref="V-257902" selected="true" /><select idref="V-257903" selected="true" /><select idref="V-257904" selected="true" /><select idref="V-257905" selected="true" /><select idref="V-257906" selected="true" /><select idref="V-257907" selected="true" /><select idref="V-257908" selected="true" /><select idref="V-257909" selected="true" /><select idref="V-257910" selected="true" /><select idref="V-257911" selected="true" /><select idref="V-257912" selected="true" /><select idref="V-257913" selected="true" /><select idref="V-257914" selected="true" /><select idref="V-257915" selected="true" /><select idref="V-257916" selected="true" /><select idref="V-257917" selected="true" /><select idref="V-257918" selected="true" /><select idref="V-257919" selected="true" /><select idref="V-257920" selected="true" /><select idref="V-257921" selected="true" /><select idref="V-257922" selected="true" /><select idref="V-257923" selected="true" /><select idref="V-257924" selected="true" /><select idref="V-257925" selected="true" /><select idref="V-257926" selected="true" /><select idref="V-257927" selected="true" /><select idref="V-257928" selected="true" /><select idref="V-257929" selected="true" /><select idref="V-257930" selected="true" /><select idref="V-257931" selected="true" /><select idref="V-257932" selected="true" /><select idref="V-257934" selected="true" /><select idref="V-257935" selected="true" /><select idref="V-257936" selected="true" /><select idref="V-257937" selected="true" /><select idref="V-257939" selected="true" /><select idref="V-257940" selected="true" /><select idref="V-257941" selected="true" /><select idref="V-257942" selected="true" /><select idref="V-257943" selected="true" /><select idref="V-257944" selected="true" /><select idref="V-257945" selected="true" /><select idref="V-257946" selected="true" /><select idref="V-257947" selected="true" /><select idref="V-257948" selected="true" /><select idref="V-257949" selected="true" /><select idref="V-257950" selected="true" /><select idref="V-257951" selected="true" /><select idref="V-257953" selected="true" /><select idref="V-257954" selected="true" /><select idref="V-257955" selected="true" /><select idref="V-257956" selected="true" /><select idref="V-257957" selected="true" /><select idref="V-257958" selected="true" /><select idref="V-257959" selected="true" /><select idref="V-257960" selected="true" /><select idref="V-257961" selected="true" /><select idref="V-257962" selected="true" /><select idref="V-257963" selected="true" /><select idref="V-257964" selected="true" /><select idref="V-257965" selected="true" /><select idref="V-257966" selected="true" /><select idref="V-257967" selected="true" /><select idref="V-257968" selected="true" /><select idref="V-257969" selected="true" /><select idref="V-257970" selected="true" /><select idref="V-257971" selected="true" /><select idref="V-257972" selected="true" /><select idref="V-257973" selected="true" /><select idref="V-257974" selected="true" /><select idref="V-257975" selected="true" /><select idref="V-257976" selected="true" /><select idref="V-257977" selected="true" /><select idref="V-257978" selected="true" /><select idref="V-257979" selected="true" /><select idref="V-257980" selected="true" /><select idref="V-257981" selected="true" /><select idref="V-257982" selected="true" /><select idref="V-257983" selected="true" /><select idref="V-257984" selected="true" /><select idref="V-257985" selected="true" /><select idref="V-257986" selected="true" /><select idref="V-257989" selected="true" /><select idref="V-257991" selected="true" /><select idref="V-257992" selected="true" /><select idref="V-257993" selected="true" /><select idref="V-257994" selected="true" /><select idref="V-257995" selected="true" /><select idref="V-257996" selected="true" /><select idref="V-257997" selected="true" /><select idref="V-257998" selected="true" /><select idref="V-257999" selected="true" /><select idref="V-258000" selected="true" /><select idref="V-258001" selected="true" /><select idref="V-258002" selected="true" /><select idref="V-258003" selected="true" /><select idref="V-258004" selected="true" /><select idref="V-258005" selected="true" /><select idref="V-258006" selected="true" /><select idref="V-258007" selected="true" /><select idref="V-258008" selected="true" /><select idref="V-258009" selected="true" /><select idref="V-258011" selected="true" /><select idref="V-258012" selected="true" /><select idref="V-258013" selected="true" /><select idref="V-258014" selected="true" /><select idref="V-258015" selected="true" /><select idref="V-258016" selected="true" /><select idref="V-258017" selected="true" /><select idref="V-258018" selected="true" /><select idref="V-258019" selected="true" /><select idref="V-258020" selected="true" /><select idref="V-258021" selected="true" /><select idref="V-258022" selected="true" /><select idref="V-258023" selected="true" /><select idref="V-258024" selected="true" /><select idref="V-258025" selected="true" /><select idref="V-258026" selected="true" /><select idref="V-258027" selected="true" /><select idref="V-258028" selected="true" /><select idref="V-258029" selected="true" /><select idref="V-258030" selected="true" /><select idref="V-258031" selected="true" /><select idref="V-258032" selected="true" /><select idref="V-258033" selected="true" /><select idref="V-258034" selected="true" /><select idref="V-258035" selected="true" /><select idref="V-258036" selected="true" /><select idref="V-258037" selected="true" /><select idref="V-258038" selected="true" /><select idref="V-258039" selected="true" /><select idref="V-258040" selected="true" /><select idref="V-258041" selected="true" /><select idref="V-258042" selected="true" /><select idref="V-258043" selected="true" /><select idref="V-258044" selected="true" /><select idref="V-258045" selected="true" /><select idref="V-258046" selected="true" /><select idref="V-258047" selected="true" /><select idref="V-258048" selected="true" /><select idref="V-258049" selected="true" /><select idref="V-258050" selected="true" /><select idref="V-258051" selected="true" /><select idref="V-258052" selected="true" /><select idref="V-258053" selected="true" /><select idref="V-258054" selected="true" /><select idref="V-258055" selected="true" /><select idref="V-258056" selected="true" /><select idref="V-258057" selected="true" /><select idref="V-258058" selected="true" /><select idref="V-258059" selected="true" /><select idref="V-258060" selected="true" /><select idref="V-258061" selected="true" /><select idref="V-258068" selected="true" /><select idref="V-258069" selected="true" /><select idref="V-258070" selected="true" /><select idref="V-258071" selected="true" /><select idref="V-258072" selected="true" /><select idref="V-258073" selected="true" /><select idref="V-258074" selected="true" /><select idref="V-258075" selected="true" /><select idref="V-258077" selected="true" /><select idref="V-258078" selected="true" /><select idref="V-258079" selected="true" /><select idref="V-258080" selected="true" /><select idref="V-258081" selected="true" /><select idref="V-258082" selected="true" /><select idref="V-258083" selected="true" /><select idref="V-258084" selected="true" /><select idref="V-258085" selected="true" /><select idref="V-258086" selected="true" /><select idref="V-258087" selected="true" /><select idref="V-258088" selected="true" /><select idref="V-258089" selected="true" /><select idref="V-258090" selected="true" /><select idref="V-258091" selected="true" /><select idref="V-258094" selected="true" /><select idref="V-258095" selected="true" /><select idref="V-258096" selected="true" /><select idref="V-258097" selected="true" /><select idref="V-258098" selected="true" /><select idref="V-258099" selected="true" /><select idref="V-258100" selected="true" /><select idref="V-258101" selected="true" /><select idref="V-258102" selected="true" /><select idref="V-258103" selected="true" /><select idref="V-258104" selected="true" /><select idref="V-258105" selected="true" /><select idref="V-258106" selected="true" /><select idref="V-258107" selected="true" /><select idref="V-258109" selected="true" /><select idref="V-258110" selected="true" /><select idref="V-258111" selected="true" /><select idref="V-258112" selected="true" /><select idref="V-258113" selected="true" /><select idref="V-258114" selected="true" /><select idref="V-258115" selected="true" /><select idref="V-258116" selected="true" /><select idref="V-258117" selected="true" /><select idref="V-258118" selected="true" /><select idref="V-258120" selected="true" /><select idref="V-258121" selected="true" /><select idref="V-258122" selected="true" /><select idref="V-258123" selected="true" /><select idref="V-258124" selected="true" /><select idref="V-258125" selected="true" /><select idref="V-258126" selected="true" /><select idref="V-258127" selected="true" /><select idref="V-258128" selected="true" /><select idref="V-258129" selected="true" /><select idref="V-258131" selected="true" /><select idref="V-258132" selected="true" /><select idref="V-258133" selected="true" /><select idref="V-258134" selected="true" /><select idref="V-258135" selected="true" /><select idref="V-258136" selected="true" /><select idref="V-258137" selected="true" /><select idref="V-258138" selected="true" /><select idref="V-258139" selected="true" /><select idref="V-258140" selected="true" /><select idref="V-258141" selected="true" /><select idref="V-258142" selected="true" /><select idref="V-258143" selected="true" /><select idref="V-258144" selected="true" /><select idref="V-258146" selected="true" /><select idref="V-258147" selected="true" /><select idref="V-258148" selected="true" /><select idref="V-258149" selected="true" /><select idref="V-258150" selected="true" /><select idref="V-258151" selected="true" /><select idref="V-258152" selected="true" /><select idref="V-258153" selected="true" /><select idref="V-258154" selected="true" /><select idref="V-258155" selected="true" /><select idref="V-258156" selected="true" /><select idref="V-258157" selected="true" /><select idref="V-258158" selected="true" /><select idref="V-258159" selected="true" /><select idref="V-258160" selected="true" /><select idref="V-258161" selected="true" /><select idref="V-258162" selected="true" /><select idref="V-258163" selected="true" /><select idref="V-258164" selected="true" /><select idref="V-258165" selected="true" /><select idref="V-258166" selected="true" /><select idref="V-258167" selected="true" /><select idref="V-258168" selected="true" /><select idref="V-258169" selected="true" /><select idref="V-258170" selected="true" /><select idref="V-258171" selected="true" /><select idref="V-258173" selected="true" /><select idref="V-258174" selected="true" /><select idref="V-258175" selected="true" /><select idref="V-258176" selected="true" /><select idref="V-258177" selected="true" /><select idref="V-258178" selected="true" /><select idref="V-258179" selected="true" /><select idref="V-258180" selected="true" /><select idref="V-258181" selected="true" /><select idref="V-258182" selected="true" /><select idref="V-258183" selected="true" /><select idref="V-258184" selected="true" /><select idref="V-258185" selected="true" /><select idref="V-258186" selected="true" /><select idref="V-258187" selected="true" /><select idref="V-258188" selected="true" /><select idref="V-258189" selected="true" /><select idref="V-258190" selected="true" /><select idref="V-258191" selected="true" /><select idref="V-258192" selected="true" /><select idref="V-258193" selected="true" /><select idref="V-258194" selected="true" /><select idref="V-258195" selected="true" /><select idref="V-258196" selected="true" /><select idref="V-258197" selected="true" /><select idref="V-258198" selected="true" /><select idref="V-258199" selected="true" /><select idref="V-258200" selected="true" /><select idref="V-258201" selected="true" /><select idref="V-258202" selected="true" /><select idref="V-258203" selected="true" /><select idref="V-258204" selected="true" /><select idref="V-258205" selected="true" /><select idref="V-258206" selected="true" /><select idref="V-258207" selected="true" /><select idref="V-258208" selected="true" /><select idref="V-258209" selected="true" /><select idref="V-258210" selected="true" /><select idref="V-258211" selected="true" /><select idref="V-258212" selected="true" /><select idref="V-258213" selected="true" /><select idref="V-258214" selected="true" /><select idref="V-258215" selected="true" /><select idref="V-258216" selected="true" /><select idref="V-258217" selected="true" /><select idref="V-258218" selected="true" /><select idref="V-258219" selected="true" /><select idref="V-258220" selected="true" /><select idref="V-258221" selected="true" /><select idref="V-258222" selected="true" /><select idref="V-258223" selected="true" /><select idref="V-258224" selected="true" /><select idref="V-258225" selected="true" /><select idref="V-258227" selected="true" /><select idref="V-258228" selected="true" /><select idref="V-258229" selected="true" /><select idref="V-258230" selected="true" /><select idref="V-258231" selected="true" /><select idref="V-258232" selected="true" /><select idref="V-258233" selected="true" /><select idref="V-258234" selected="true" /><select idref="V-258236" selected="true" /><select idref="V-258241" selected="true" /><select idref="V-258242" selected="true" /><select idref="V-270174" selected="true" /><select idref="V-270175" selected="true" /><select idref="V-270176" selected="true" /><select idref="V-270177" selected="true" /><select idref="V-270178" selected="true" /><select idref="V-270180" selected="true" /><select idref="V-272488" selected="true" /><select idref="V-272496" selected="true" /><select idref="V-279936" selected="true" /></Profile><Profile id="MAC-3_Sensitive"><title>III - Administrative Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-257777" selected="true" /><select idref="V-257778" selected="true" /><select idref="V-257779" selected="true" /><select idref="V-257781" selected="true" /><select idref="V-257782" selected="true" /><select idref="V-257783" selected="true" /><select idref="V-257784" selected="true" /><select idref="V-257785" selected="true" /><select idref="V-257786" selected="true" /><select idref="V-257787" selected="true" /><select idref="V-257788" selected="true" /><select idref="V-257789" selected="true" /><select idref="V-257790" selected="true" /><select idref="V-257791" selected="true" /><select idref="V-257792" selected="true" /><select idref="V-257793" selected="true" /><select idref="V-257794" selected="true" /><select idref="V-257795" selected="true" /><select idref="V-257796" selected="true" /><select idref="V-257797" selected="true" /><select idref="V-257798" selected="true" /><select idref="V-257799" selected="true" /><select idref="V-257800" selected="true" /><select idref="V-257801" selected="true" /><select idref="V-257802" selected="true" /><select idref="V-257803" selected="true" /><select idref="V-257804" selected="true" /><select idref="V-257805" selected="true" /><select idref="V-257806" selected="true" /><select idref="V-257807" selected="true" /><select idref="V-257808" selected="true" /><select idref="V-257809" selected="true" /><select idref="V-257810" selected="true" /><select idref="V-257811" selected="true" /><select idref="V-257812" selected="true" /><select idref="V-257813" selected="true" /><select idref="V-257814" selected="true" /><select idref="V-257815" selected="true" /><select idref="V-257816" selected="true" /><select idref="V-257817" selected="true" /><select idref="V-257818" selected="true" /><select idref="V-257819" selected="true" /><select idref="V-257820" selected="true" /><select idref="V-257821" selected="true" /><select idref="V-257822" selected="true" /><select idref="V-257823" selected="true" /><select idref="V-257824" selected="true" /><select idref="V-257825" selected="true" /><select idref="V-257826" selected="true" /><select idref="V-257827" selected="true" /><select idref="V-257828" selected="true" /><select idref="V-257829" selected="true" /><select idref="V-257830" selected="true" /><select idref="V-257831" selected="true" /><select idref="V-257832" selected="true" /><select idref="V-257833" selected="true" /><select idref="V-257834" selected="true" /><select idref="V-257835" selected="true" /><select idref="V-257836" selected="true" /><select idref="V-257837" selected="true" /><select idref="V-257838" selected="true" /><select idref="V-257839" selected="true" /><select idref="V-257840" selected="true" /><select idref="V-257841" selected="true" /><select idref="V-257842" selected="true" /><select idref="V-257843" selected="true" /><select idref="V-257844" selected="true" /><select idref="V-257845" selected="true" /><select idref="V-257846" selected="true" /><select idref="V-257847" selected="true" /><select idref="V-257848" selected="true" /><select idref="V-257849" selected="true" /><select idref="V-257850" selected="true" /><select idref="V-257851" selected="true" /><select idref="V-257852" selected="true" /><select idref="V-257854" selected="true" /><select idref="V-257855" selected="true" /><select idref="V-257856" selected="true" /><select idref="V-257857" selected="true" /><select idref="V-257858" selected="true" /><select idref="V-257859" selected="true" /><select idref="V-257860" selected="true" /><select idref="V-257861" selected="true" /><select idref="V-257862" selected="true" /><select idref="V-257863" selected="true" /><select idref="V-257864" selected="true" /><select idref="V-257865" selected="true" /><select idref="V-257866" selected="true" /><select idref="V-257867" selected="true" /><select idref="V-257868" selected="true" /><select idref="V-257869" selected="true" /><select idref="V-257870" selected="true" /><select idref="V-257871" selected="true" /><select idref="V-257872" selected="true" /><select idref="V-257873" selected="true" /><select idref="V-257874" selected="true" /><select idref="V-257875" selected="true" /><select idref="V-257876" selected="true" /><select idref="V-257877" selected="true" /><select idref="V-257878" selected="true" /><select idref="V-257879" selected="true" /><select idref="V-257880" selected="true" /><select idref="V-257881" selected="true" /><select idref="V-257882" selected="true" /><select idref="V-257883" selected="true" /><select idref="V-257884" selected="true" /><select idref="V-257885" selected="true" /><select idref="V-257886" selected="true" /><select idref="V-257887" selected="true" /><select idref="V-257888" selected="true" /><select idref="V-257889" selected="true" /><select idref="V-257890" selected="true" /><select idref="V-257891" selected="true" /><select idref="V-257892" selected="true" /><select idref="V-257893" selected="true" /><select idref="V-257894" selected="true" /><select idref="V-257895" selected="true" /><select idref="V-257896" selected="true" /><select idref="V-257897" selected="true" /><select idref="V-257898" selected="true" /><select idref="V-257899" selected="true" /><select idref="V-257900" selected="true" /><select idref="V-257901" selected="true" /><select idref="V-257902" selected="true" /><select idref="V-257903" selected="true" /><select idref="V-257904" selected="true" /><select idref="V-257905" selected="true" /><select idref="V-257906" selected="true" /><select idref="V-257907" selected="true" /><select idref="V-257908" selected="true" /><select idref="V-257909" selected="true" /><select idref="V-257910" selected="true" /><select idref="V-257911" selected="true" /><select idref="V-257912" selected="true" /><select idref="V-257913" selected="true" /><select idref="V-257914" selected="true" /><select idref="V-257915" selected="true" /><select idref="V-257916" selected="true" /><select idref="V-257917" selected="true" /><select idref="V-257918" selected="true" /><select idref="V-257919" selected="true" /><select idref="V-257920" selected="true" /><select idref="V-257921" selected="true" /><select idref="V-257922" selected="true" /><select idref="V-257923" selected="true" /><select idref="V-257924" selected="true" /><select idref="V-257925" selected="true" /><select idref="V-257926" selected="true" /><select idref="V-257927" selected="true" /><select idref="V-257928" selected="true" /><select idref="V-257929" selected="true" /><select idref="V-257930" selected="true" /><select idref="V-257931" selected="true" /><select idref="V-257932" selected="true" /><select idref="V-257934" selected="true" /><select idref="V-257935" selected="true" /><select idref="V-257936" selected="true" /><select idref="V-257937" selected="true" /><select idref="V-257939" selected="true" /><select idref="V-257940" selected="true" /><select idref="V-257941" selected="true" /><select idref="V-257942" selected="true" /><select idref="V-257943" selected="true" /><select idref="V-257944" selected="true" /><select idref="V-257945" selected="true" /><select idref="V-257946" selected="true" /><select idref="V-257947" selected="true" /><select idref="V-257948" selected="true" /><select idref="V-257949" selected="true" /><select idref="V-257950" selected="true" /><select idref="V-257951" selected="true" /><select idref="V-257953" selected="true" /><select idref="V-257954" selected="true" /><select idref="V-257955" selected="true" /><select idref="V-257956" selected="true" /><select idref="V-257957" selected="true" /><select idref="V-257958" selected="true" /><select idref="V-257959" selected="true" /><select idref="V-257960" selected="true" /><select idref="V-257961" selected="true" /><select idref="V-257962" selected="true" /><select idref="V-257963" selected="true" /><select idref="V-257964" selected="true" /><select idref="V-257965" selected="true" /><select idref="V-257966" selected="true" /><select idref="V-257967" selected="true" /><select idref="V-257968" selected="true" /><select idref="V-257969" selected="true" /><select idref="V-257970" selected="true" /><select idref="V-257971" selected="true" /><select idref="V-257972" selected="true" /><select idref="V-257973" selected="true" /><select idref="V-257974" selected="true" /><select idref="V-257975" selected="true" /><select idref="V-257976" selected="true" /><select idref="V-257977" selected="true" /><select idref="V-257978" selected="true" /><select idref="V-257979" selected="true" /><select idref="V-257980" selected="true" /><select idref="V-257981" selected="true" /><select idref="V-257982" selected="true" /><select idref="V-257983" selected="true" /><select idref="V-257984" selected="true" /><select idref="V-257985" selected="true" /><select idref="V-257986" selected="true" /><select idref="V-257989" selected="true" /><select idref="V-257991" selected="true" /><select idref="V-257992" selected="true" /><select idref="V-257993" selected="true" /><select idref="V-257994" selected="true" /><select idref="V-257995" selected="true" /><select idref="V-257996" selected="true" /><select idref="V-257997" selected="true" /><select idref="V-257998" selected="true" /><select idref="V-257999" selected="true" /><select idref="V-258000" selected="true" /><select idref="V-258001" selected="true" /><select idref="V-258002" selected="true" /><select idref="V-258003" selected="true" /><select idref="V-258004" selected="true" /><select idref="V-258005" selected="true" /><select idref="V-258006" selected="true" /><select idref="V-258007" selected="true" /><select idref="V-258008" selected="true" /><select idref="V-258009" selected="true" /><select idref="V-258011" selected="true" /><select idref="V-258012" selected="true" /><select idref="V-258013" selected="true" /><select idref="V-258014" selected="true" /><select idref="V-258015" selected="true" /><select idref="V-258016" selected="true" /><select idref="V-258017" selected="true" /><select idref="V-258018" selected="true" /><select idref="V-258019" selected="true" /><select idref="V-258020" selected="true" /><select idref="V-258021" selected="true" /><select idref="V-258022" selected="true" /><select idref="V-258023" selected="true" /><select idref="V-258024" selected="true" /><select idref="V-258025" selected="true" /><select idref="V-258026" selected="true" /><select idref="V-258027" selected="true" /><select idref="V-258028" selected="true" /><select idref="V-258029" selected="true" /><select idref="V-258030" selected="true" /><select idref="V-258031" selected="true" /><select idref="V-258032" selected="true" /><select idref="V-258033" selected="true" /><select idref="V-258034" selected="true" /><select idref="V-258035" selected="true" /><select idref="V-258036" selected="true" /><select idref="V-258037" selected="true" /><select idref="V-258038" selected="true" /><select idref="V-258039" selected="true" /><select idref="V-258040" selected="true" /><select idref="V-258041" selected="true" /><select idref="V-258042" selected="true" /><select idref="V-258043" selected="true" /><select idref="V-258044" selected="true" /><select idref="V-258045" selected="true" /><select idref="V-258046" selected="true" /><select idref="V-258047" selected="true" /><select idref="V-258048" selected="true" /><select idref="V-258049" selected="true" /><select idref="V-258050" selected="true" /><select idref="V-258051" selected="true" /><select idref="V-258052" selected="true" /><select idref="V-258053" selected="true" /><select idref="V-258054" selected="true" /><select idref="V-258055" selected="true" /><select idref="V-258056" selected="true" /><select idref="V-258057" selected="true" /><select idref="V-258058" selected="true" /><select idref="V-258059" selected="true" /><select idref="V-258060" selected="true" /><select idref="V-258061" selected="true" /><select idref="V-258068" selected="true" /><select idref="V-258069" selected="true" /><select idref="V-258070" selected="true" /><select idref="V-258071" selected="true" /><select idref="V-258072" selected="true" /><select idref="V-258073" selected="true" /><select idref="V-258074" selected="true" /><select idref="V-258075" selected="true" /><select idref="V-258077" selected="true" /><select idref="V-258078" selected="true" /><select idref="V-258079" selected="true" /><select idref="V-258080" selected="true" /><select idref="V-258081" selected="true" /><select idref="V-258082" selected="true" /><select idref="V-258083" selected="true" /><select idref="V-258084" selected="true" /><select idref="V-258085" selected="true" /><select idref="V-258086" selected="true" /><select idref="V-258087" selected="true" /><select idref="V-258088" selected="true" /><select idref="V-258089" selected="true" /><select idref="V-258090" selected="true" /><select idref="V-258091" selected="true" /><select idref="V-258094" selected="true" /><select idref="V-258095" selected="true" /><select idref="V-258096" selected="true" /><select idref="V-258097" selected="true" /><select idref="V-258098" selected="true" /><select idref="V-258099" selected="true" /><select idref="V-258100" selected="true" /><select idref="V-258101" selected="true" /><select idref="V-258102" selected="true" /><select idref="V-258103" selected="true" /><select idref="V-258104" selected="true" /><select idref="V-258105" selected="true" /><select idref="V-258106" selected="true" /><select idref="V-258107" selected="true" /><select idref="V-258109" selected="true" /><select idref="V-258110" selected="true" /><select idref="V-258111" selected="true" /><select idref="V-258112" selected="true" /><select idref="V-258113" selected="true" /><select idref="V-258114" selected="true" /><select idref="V-258115" selected="true" /><select idref="V-258116" selected="true" /><select idref="V-258117" selected="true" /><select idref="V-258118" selected="true" /><select idref="V-258120" selected="true" /><select idref="V-258121" selected="true" /><select idref="V-258122" selected="true" /><select idref="V-258123" selected="true" /><select idref="V-258124" selected="true" /><select idref="V-258125" selected="true" /><select idref="V-258126" selected="true" /><select idref="V-258127" selected="true" /><select idref="V-258128" selected="true" /><select idref="V-258129" selected="true" /><select idref="V-258131" selected="true" /><select idref="V-258132" selected="true" /><select idref="V-258133" selected="true" /><select idref="V-258134" selected="true" /><select idref="V-258135" selected="true" /><select idref="V-258136" selected="true" /><select idref="V-258137" selected="true" /><select idref="V-258138" selected="true" /><select idref="V-258139" selected="true" /><select idref="V-258140" selected="true" /><select idref="V-258141" selected="true" /><select idref="V-258142" selected="true" /><select idref="V-258143" selected="true" /><select idref="V-258144" selected="true" /><select idref="V-258146" selected="true" /><select idref="V-258147" selected="true" /><select idref="V-258148" selected="true" /><select idref="V-258149" selected="true" /><select idref="V-258150" selected="true" /><select idref="V-258151" selected="true" /><select idref="V-258152" selected="true" /><select idref="V-258153" selected="true" /><select idref="V-258154" selected="true" /><select idref="V-258155" selected="true" /><select idref="V-258156" selected="true" /><select idref="V-258157" selected="true" /><select idref="V-258158" selected="true" /><select idref="V-258159" selected="true" /><select idref="V-258160" selected="true" /><select idref="V-258161" selected="true" /><select idref="V-258162" selected="true" /><select idref="V-258163" selected="true" /><select idref="V-258164" selected="true" /><select idref="V-258165" selected="true" /><select idref="V-258166" selected="true" /><select idref="V-258167" selected="true" /><select idref="V-258168" selected="true" /><select idref="V-258169" selected="true" /><select idref="V-258170" selected="true" /><select idref="V-258171" selected="true" /><select idref="V-258173" selected="true" /><select idref="V-258174" selected="true" /><select idref="V-258175" selected="true" /><select idref="V-258176" selected="true" /><select idref="V-258177" selected="true" /><select idref="V-258178" selected="true" /><select idref="V-258179" selected="true" /><select idref="V-258180" selected="true" /><select idref="V-258181" selected="true" /><select idref="V-258182" selected="true" /><select idref="V-258183" selected="true" /><select idref="V-258184" selected="true" /><select idref="V-258185" selected="true" /><select idref="V-258186" selected="true" /><select idref="V-258187" selected="true" /><select idref="V-258188" selected="true" /><select idref="V-258189" selected="true" /><select idref="V-258190" selected="true" /><select idref="V-258191" selected="true" /><select idref="V-258192" selected="true" /><select idref="V-258193" selected="true" /><select idref="V-258194" selected="true" /><select idref="V-258195" selected="true" /><select idref="V-258196" selected="true" /><select idref="V-258197" selected="true" /><select idref="V-258198" selected="true" /><select idref="V-258199" selected="true" /><select idref="V-258200" selected="true" /><select idref="V-258201" selected="true" /><select idref="V-258202" selected="true" /><select idref="V-258203" selected="true" /><select idref="V-258204" selected="true" /><select idref="V-258205" selected="true" /><select idref="V-258206" selected="true" /><select idref="V-258207" selected="true" /><select idref="V-258208" selected="true" /><select idref="V-258209" selected="true" /><select idref="V-258210" selected="true" /><select idref="V-258211" selected="true" /><select idref="V-258212" selected="true" /><select idref="V-258213" selected="true" /><select idref="V-258214" selected="true" /><select idref="V-258215" selected="true" /><select idref="V-258216" selected="true" /><select idref="V-258217" selected="true" /><select idref="V-258218" selected="true" /><select idref="V-258219" selected="true" /><select idref="V-258220" selected="true" /><select idref="V-258221" selected="true" /><select idref="V-258222" selected="true" /><select idref="V-258223" selected="true" /><select idref="V-258224" selected="true" /><select idref="V-258225" selected="true" /><select idref="V-258227" selected="true" /><select idref="V-258228" selected="true" /><select idref="V-258229" selected="true" /><select idref="V-258230" selected="true" /><select idref="V-258231" selected="true" /><select idref="V-258232" selected="true" /><select idref="V-258233" selected="true" /><select idref="V-258234" selected="true" /><select idref="V-258236" selected="true" /><select idref="V-258241" selected="true" /><select idref="V-258242" selected="true" /><select idref="V-270174" selected="true" /><select idref="V-270175" selected="true" /><select idref="V-270176" selected="true" /><select idref="V-270177" selected="true" /><select idref="V-270178" selected="true" /><select idref="V-270180" selected="true" /><select idref="V-272488" selected="true" /><select idref="V-272496" selected="true" /><select idref="V-279936" selected="true" /></Profile><Group id="V-257777"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257777r1155676_rule" weight="10.0" severity="high"><version>RHEL-09-211010</version><title>RHEL 9 must be a vendor-supported release.</title><description>&lt;VulnDiscussion&gt;An operating system release is considered "supported" if the vendor continues to provide security patches for the product. With an unsupported release, it will not be possible to resolve security issues discovered in the system software.
 
-Red Hat offers the Extended Update Support (EUS) add-on to a Red Hat Enterprise Linux subscription, for a fee, for those customers who wish to standardize on a specific minor release for an extended period.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61442r925317_fix">Upgrade to a supported version of RHEL 9.</fixtext><fix id="F-61442r925317_fix" /><check system="C-61518r925316_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify that the version or RHEL 9 is vendor supported with the following command:
+End Of Life dates for Red Hat Linux 9 releases are as follows:
+Current end of Full Support for Red Hat Linux 9 is 31 May 2027.
+Current end of Maintenance Support for Red Hat Linux 9 is 31 May 3032.
+Current end of Extended Life Cycle Support (ELS) for Red Hat Linux 9 is 31 May 2035.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61442r925317_fix">Upgrade to a supported version of RHEL 9.</fixtext><fix id="F-61442r925317_fix" /><check system="C-61518r1155675_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify the version or RHEL 9 is vendor supported with the following command:
 
 $ cat /etc/redhat-release 
 
-Red Hat Enterprise Linux release 9.2 (Plow)
+Red Hat Enterprise Linux release 9.6 (Plow)
 
 If the installed version of RHEL 9 is not supported, this is a finding.</check-content></check></Rule></Group><Group id="V-257778"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257778r1134892_rule" weight="10.0" severity="medium"><version>RHEL-09-211015</version><title>RHEL 9 vendor packaged system security patches and updates must be installed and up to date.</title><description>&lt;VulnDiscussion&gt;Installing software updates is a fundamental mitigation against the exploitation of publicly known vulnerabilities. If the most recent security patches and updates are not installed, unauthorized users may take advantage of weaknesses in the unpatched software. The lack of prompt attention to patching could result in a system compromise.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61443r925320_fix">Install RHEL 9 security patches and updates at the organizationally defined frequency. If system updates are installed via a centralized repository that is configured on the system, all updates can be installed with the following command:
 
@@ -99,19 +102,24 @@ $ systemctl is-active systemd-journald
 
 active
 
-If the systemd-journald service is not active, this is a finding.</check-content></check></Rule></Group><Group id="V-257784"><title>SRG-OS-000324-GPOS-00125</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257784r1044832_rule" weight="10.0" severity="high"><version>RHEL-09-211045</version><title>The systemd Ctrl-Alt-Delete burst key sequence in RHEL 9 must be disabled.</title><description>&lt;VulnDiscussion&gt;A locally logged-on user who presses Ctrl-Alt-Delete when at the console can reboot the system. If accidentally pressed, as could happen in the case of a mixed OS environment, this can create the risk of short-term loss of availability of systems due to unintentional reboot. In a graphical user environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is reduced because the user will be prompted before any action is taken.
+If the systemd-journald service is not active, this is a finding.</check-content></check></Rule></Group><Group id="V-257784"><title>SRG-OS-000324-GPOS-00125</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257784r1155651_rule" weight="10.0" severity="high"><version>RHEL-09-211045</version><title>The systemd Ctrl-Alt-Delete burst key sequence in RHEL 9 must be disabled.</title><description>&lt;VulnDiscussion&gt;A locally logged-on user who presses Ctrl-Alt-Delete when at the console can reboot the system. If accidentally pressed, as could happen in the case of a mixed OS environment, this can create the risk of short-term loss of availability of systems due to unintentional reboot. In a graphical user environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is reduced because the user will be prompted before any action is taken.
 
-Satisfies: SRG-OS-000324-GPOS-00125, SRG-OS-000480-GPOS-00227&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-002235</ident><fixtext fixref="F-61449r925338_fix">Configure the system to disable the CtrlAltDelBurstAction by added or modifying the following line in the "/etc/systemd/system.conf" configuration file:
+Satisfies: SRG-OS-000324-GPOS-00125, SRG-OS-000480-GPOS-00227&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-002235</ident><fixtext fixref="F-61449r1155650_fix">Configure RHEL 9 to disable the CtrlAltDelBurstAction by adding it to a drop file in a "/etc/systemd/system.conf.d/" configuration file:
+
+If no drop file exists, create one with the following command:
+
+$ sudo mkdir -p /etc/systemd/system.conf.d &amp;&amp; sudo vi /etc/systemd/system.conf.d/55-CtrlAltDel-BurstAction
+
+Edit the file to contain the setting by adding the following text:
 
 CtrlAltDelBurstAction=none
 
 Reload the daemon for this change to take effect.
 
-$ sudo systemctl daemon-reload</fixtext><fix id="F-61449r925338_fix" /><check system="C-61525r925337_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is configured to not reboot the system when Ctrl-Alt-Delete is pressed seven times within two seconds with the following command:
+$ sudo systemctl daemon-reload</fixtext><fix id="F-61449r1155650_fix" /><check system="C-61525r1155649_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is configured to not reboot the system when Ctrl-Alt-Delete is pressed seven times within two seconds with the following command:
 
-$ grep -i ctrl /etc/systemd/system.conf
-
-CtrlAltDelBurstAction=none
+$ sudo grep -iR CtrlAltDelBurstAction /etc/systemd/system*
+/etc/systemd/system.conf.d/55-CtrlAltDel-BurstAction:CtrlAltDelBurstAction=none
 
 If the "CtrlAltDelBurstAction" is not set to "none", commented out, or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-257785"><title>SRG-OS-000324-GPOS-00125</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257785r1044833_rule" weight="10.0" severity="high"><version>RHEL-09-211050</version><title>The x86 Ctrl-Alt-Delete key sequence must be disabled on RHEL 9.</title><description>&lt;VulnDiscussion&gt;A locally logged-on user who presses Ctrl-Alt-Delete when at the console can reboot the system. If accidentally pressed, as could happen in the case of a mixed OS environment, this can create the risk of short-term loss of availability of systems due to unintentional reboot. In a graphical user environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is reduced because the user will be prompted before any action is taken.
 
@@ -139,7 +147,7 @@ debug-shell.service
 Loaded: masked (Reason: Unit debug-shell.service is masked.)
 Active: inactive (dead)
 
-If the "debug-shell.service" is loaded and not masked, this is a finding.</check-content></check></Rule></Group><Group id="V-257787"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257787r1117265_rule" weight="10.0" severity="medium"><version>RHEL-09-212010</version><title>RHEL 9 must require a boot loader superuser password.</title><description>&lt;VulnDiscussion&gt;To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DOD-approved PKIs, all DOD systems (e.g., web servers and web portals) must be properly configured to incorporate access control methods that do not rely solely on the possession of a certificate for access. Successful authentication must not automatically give an entity access to an asset or security boundary. Authorization procedures and controls must be implemented to ensure each authenticated entity also has a validated and current authorization. Authorization is the process of determining whether an entity, once authenticated, is permitted to access a specific asset. Information systems use access control policies and enforcement mechanisms to implement this requirement.
+If the "debug-shell.service" is loaded and not masked, this is a finding.</check-content></check></Rule></Group><Group id="V-257787"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257787r1137691_rule" weight="10.0" severity="medium"><version>RHEL-09-212010</version><title>RHEL 9 must require a boot loader superuser password.</title><description>&lt;VulnDiscussion&gt;To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DOD-approved PKIs, all DOD systems (e.g., web servers and web portals) must be properly configured to incorporate access control methods that do not rely solely on the possession of a certificate for access. Successful authentication must not automatically give an entity access to an asset or security boundary. Authorization procedures and controls must be implemented to ensure each authenticated entity also has a validated and current authorization. Authorization is the process of determining whether an entity, once authenticated, is permitted to access a specific asset. Information systems use access control policies and enforcement mechanisms to implement this requirement.
 
 Password protection on the boot loader configuration ensures users with physical access cannot trivially alter important bootloader settings. These include which kernel to use, and whether to enter single-user mode.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-61452r925347_fix">Configure RHEL 9 to require a grub bootloader password for the grub superuser account.
 
@@ -170,7 +178,7 @@ Check that the current GRUB 2 configuration disables the ability of systemd to s
 
 $ sudo grubby --info=ALL | grep args | grep 'systemd.confirm_spawn'
 
-If any output is returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257789"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257789r1134895_rule" weight="10.0" severity="high"><version>RHEL-09-212020</version><title>RHEL 9 must require a unique superusers name upon booting into single-user and maintenance modes.</title><description>&lt;VulnDiscussion&gt;Having a nondefault grub superuser username makes password-guessing attacks less effective.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-61454r1134894_fix">Configure RHEL 9 to have a unique username for the grub superuser account.
+If any output is returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257789"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257789r1137691_rule" weight="10.0" severity="high"><version>RHEL-09-212020</version><title>RHEL 9 must require a unique superusers name upon booting into single-user and maintenance modes.</title><description>&lt;VulnDiscussion&gt;Having a nondefault grub superuser username makes password-guessing attacks less effective.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-61454r1134894_fix">Configure RHEL 9 to have a unique username for the grub superuser account.
 
 Edit the "/etc/grub.d/01_users" file and add or modify the following lines with a nondefault username for the superuser account:
 
@@ -320,7 +328,7 @@ $ grep audit /etc/default/grub
 
 GRUB_CMDLINE_LINUX="audit=1"
 
-If "audit" is not set to "1", is missing, or is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-257797"><title>SRG-OS-000132-GPOS-00067</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257797r1117266_rule" weight="10.0" severity="medium"><version>RHEL-09-213010</version><title>RHEL 9 must restrict access to the kernel message buffer.</title><description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
+If "audit" is not set to "1", is missing, or is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-257797"><title>SRG-OS-000132-GPOS-00067</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257797r1155691_rule" weight="10.0" severity="medium"><version>RHEL-09-213010</version><title>RHEL 9 must restrict access to the kernel message buffer.</title><description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
 
 This requirement generally applies to the design of an information technology product, but it can also apply to the configuration of particular information system components that are, or use, such products. This can be verified by acceptance/validation processes in DOD or other government agencies.
 
@@ -328,7 +336,7 @@ There may be shared resources with configurable protections (e.g., files in stor
 
 Restricting access to the kernel message buffer limits access to only root. This prevents attackers from gaining additional system information as a nonprivileged user.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -337,41 +345,25 @@ The sysctl --system command will load settings from all system configuration fil
 /lib/sysctl.d/*.conf
 /etc/sysctl.conf
 
-Satisfies: SRG-OS-000132-GPOS-00067, SRG-OS-000138-GPOS-00069&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001082</ident><ident system="http://cyber.mil/cci">CCI-001090</ident><fixtext fixref="F-61462r1102065_fix">Configure RHEL 9 to restrict access to the kernel message buffer.
+Satisfies: SRG-OS-000132-GPOS-00067, SRG-OS-000138-GPOS-00069&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001082</ident><ident system="http://cyber.mil/cci">CCI-001090</ident><fixtext fixref="F-61462r1155690_fix">Configure RHEL 9 to restrict access to the kernel message buffer.
 
-Add or edit the following line in a system configuration file, in the "/etc/sysctl.d/" directory:
+Create a drop-in if it does not already exist:
 
-kernel.dmesg_restrict = 1
+$ sudo vi /etc/sysctl.d/99-dmesg_restrict.conf
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Add the following to the file:
+kernel.dmesg_restrict = 1
 
-Load settings from all system configuration files with the following command:
+Reload settings from all system configuration files with the following command:
 
-$ sudo sysctl --system</fixtext><fix id="F-61462r1102065_fix" /><check system="C-61538r1106424_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is configured to restrict access to the kernel message buffer with the following commands:
+$ sudo sysctl --system</fixtext><fix id="F-61462r1155690_fix" /><check system="C-61538r1155689_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is configured to restrict access to the kernel message buffer.
 
-Check the status of the kernel.dmesg_restrict kernel parameter.
+Check the status of the "kernel.dmesg_restrict" kernel parameter with the following command:
 
 $ sudo sysctl kernel.dmesg_restrict
-
 kernel.dmesg_restrict = 1
 
-If "kernel.dmesg_restrict" is not set to "1" or is missing, this is a finding.
-
-Check that the configuration files are present to enable this kernel parameter.
-
-$ sudo grep -r kernel.dmesg_restrict /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf:kernel.dmesg_restrict = 1
-
-If "kernel.dmesg_restrict" is not set to "1", is missing, or commented out, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257798"><title>SRG-OS-000132-GPOS-00067</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257798r1117266_rule" weight="10.0" severity="medium"><version>RHEL-09-213015</version><title>RHEL 9 must prevent kernel profiling by nonprivileged users.</title><description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
+If "kernel.dmesg_restrict" is not set to "1" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-257798"><title>SRG-OS-000132-GPOS-00067</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257798r1155694_rule" weight="10.0" severity="medium"><version>RHEL-09-213015</version><title>RHEL 9 must prevent kernel profiling by nonprivileged users.</title><description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
 
 This requirement generally applies to the design of an information technology product, but it can also apply to the configuration of particular information system components that are, or use, such products. This can be verified by acceptance/validation processes in DOD or other government agencies.
 
@@ -379,7 +371,7 @@ There may be shared resources with configurable protections (e.g., files in stor
 
 Setting the kernel.perf_event_paranoid kernel parameter to "2" prevents attackers from gaining additional system information as a nonprivileged user.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -388,45 +380,29 @@ The sysctl --system command will load settings from all system configuration fil
 /lib/sysctl.d/*.conf
 /etc/sysctl.conf
 
-Satisfies: SRG-OS-000132-GPOS-00067, SRG-OS-000138-GPOS-00069&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001082</ident><ident system="http://cyber.mil/cci">CCI-001090</ident><fixtext fixref="F-61463r1102051_fix">Configure RHEL 9 to prevent kernel profiling by nonprivileged users.
+Satisfies: SRG-OS-000132-GPOS-00067, SRG-OS-000138-GPOS-00069&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001082</ident><ident system="http://cyber.mil/cci">CCI-001090</ident><fixtext fixref="F-61463r1155693_fix">Configure RHEL 9 to prevent kernel profiling by nonprivileged users.
+
+Create a drop-in if it does not already exist:
 
-Add or edit the following line in a system configuration file, in the "/etc/sysctl.d/" directory:
+$ sudo vi /etc/sysctl.d/99-kernel_perf_event_paranoid.conf
 
+Add the following to the file:
 kernel.perf_event_paranoid = 2
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Reload settings from all system configuration files with the following command:
 
-Load settings from all system configuration files with the following command:
+$ sudo sysctl --system</fixtext><fix id="F-61463r1155693_fix" /><check system="C-61539r1155692_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is configured to prevent kernel profiling by nonprivileged users.
 
-$ sudo sysctl --system</fixtext><fix id="F-61463r1102051_fix" /><check system="C-61539r1106426_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is configured to prevent kernel profiling by nonprivileged users with the following commands:
-
-Check the status of the kernel.perf_event_paranoid kernel parameter.
+Check the status of the "kernel.perf_event_paranoid" kernel parameter.
 
 $ sudo sysctl kernel.perf_event_paranoid
-
 kernel.perf_event_paranoid = 2
 
-If "kernel.perf_event_paranoid" is not set to "2" or is missing, this is a finding.
-
-Check that the configuration files are present to enable this kernel parameter.
-
-$ sudo grep -r kernel.perf_event_paranoid /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf:kernel.perf_event_paranoid = 2
-
-If "kernel.perf_event_paranoid" is not set to "2", is missing, or commented out, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257799"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257799r1106273_rule" weight="10.0" severity="medium"><version>RHEL-09-213020</version><title>RHEL 9 must prevent the loading of a new kernel for later execution.</title><description>&lt;VulnDiscussion&gt;Changes to any software components can have significant effects on the overall security of the operating system. This requirement ensures the software has not been tampered with and that it has been provided by a trusted vendor.
+If "kernel.perf_event_paranoid" is not set to "2" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-257799"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257799r1155697_rule" weight="10.0" severity="medium"><version>RHEL-09-213020</version><title>RHEL 9 must prevent the loading of a new kernel for later execution.</title><description>&lt;VulnDiscussion&gt;Changes to any software components can have significant effects on the overall security of the operating system. This requirement ensures the software has not been tampered with and that it has been provided by a trusted vendor.
 
 Disabling kexec_load prevents an unsigned kernel image (that could be a windows kernel or modified vulnerable kernel) from being loaded. Kexec can be used subvert the entire secureboot process and should be avoided at all costs especially since it can load unsigned kernel images.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -435,41 +411,27 @@ The sysctl --system command will load settings from all system configuration fil
 /lib/sysctl.d/*.conf
 /etc/sysctl.conf
 
-Satisfies: SRG-OS-000480-GPOS-00227, SRG-OS-000366-GPOS-00153&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-003992</ident><ident system="http://cyber.mil/cci">CCI-001749</ident><fixtext fixref="F-61464r1106272_fix">Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+Satisfies: SRG-OS-000480-GPOS-00227, SRG-OS-000366-GPOS-00153&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-003992</ident><ident system="http://cyber.mil/cci">CCI-001749</ident><fixtext fixref="F-61464r1155696_fix">Configure RHEL 9 to disable kernel image loading.
 
-kernel.kexec_load_disabled = 1
+Create a drop-in if it does not already exist:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
-
-Load settings from all system configuration files with the following command:
-
-$ sudo sysctl --system</fixtext><fix id="F-61464r1106272_fix" /><check system="C-61540r1106271_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is configured to disable kernel image loading.
-
-Check the status of the kernel.kexec_load_disabled kernel parameter.
-
-$ sudo sysctl kernel.kexec_load_disabled
+$ sudo vi /etc/sysctl.d/99-kernel_kexec_load_disabled.conf
 
+Add the following to the file:
 kernel.kexec_load_disabled = 1
 
-If "kernel.kexec_load_disabled" is not set to "1" or is missing, this is a finding.
+Reload settings from all system configuration files with the following command:
 
-Check that the configuration files are present to enable this kernel parameter.
+$ sudo sysctl --system</fixtext><fix id="F-61464r1155696_fix" /><check system="C-61540r1155695_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is configured to disable kernel image loading.
 
-$ sudo grep -r kernel.kexec_load_disabled /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
+Check the status of the "kernel.kexec_load_disabled" kernel parameter with the following command:
 
-/etc/sysctl.d/99-sysctl.conf:kernel.kexec_load_disabled = 1
+$ sudo sysctl kernel.kexec_load_disabled
+kernel.kexec_load_disabled = 1
 
-If "kernel.kexec_load_disabled" is not set to "1", is missing, or commented out, this is a finding.
+If "kernel.kexec_load_disabled" is not set to "1" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-257800"><title>SRG-OS-000132-GPOS-00067</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257800r1155700_rule" weight="10.0" severity="medium"><version>RHEL-09-213025</version><title>RHEL 9 must restrict exposed kernel pointer addresses access.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257800"><title>SRG-OS-000132-GPOS-00067</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257800r1117266_rule" weight="10.0" severity="medium"><version>RHEL-09-213025</version><title>RHEL 9 must restrict exposed kernel pointer addresses access.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
-
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -478,43 +440,31 @@ The sysctl --system command will load settings from all system configuration fil
 /lib/sysctl.d/*.conf
 /etc/sysctl.conf
 
-Satisfies: SRG-OS-000132-GPOS-00067, SRG-OS-000433-GPOS-00192, SRG-OS-000480-GPOS-00227&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001082</ident><ident system="http://cyber.mil/cci">CCI-002824</ident><fixtext fixref="F-61465r1106275_fix">Configure RHEL 9 to restrict exposed kernel pointer addresses access by adding the following line to a file in the "/etc/sysctl.d" directory:
-
-kernel.kptr_restrict = 1
-
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
-
-The system configuration files need to be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
+Satisfies: SRG-OS-000132-GPOS-00067, SRG-OS-000433-GPOS-00192, SRG-OS-000480-GPOS-00227&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001082</ident><ident system="http://cyber.mil/cci">CCI-002824</ident><fixtext fixref="F-61465r1155699_fix">Configure RHEL 9 to restrict exposed kernel pointer addresses access.
 
-$ sudo sysctl --system</fixtext><fix id="F-61465r1106275_fix" /><check system="C-61541r1106274_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 restricts exposed kernel pointer addresses access with the following commands:
+Create a drop-in if it does not already exist:
 
-$ sudo sysctl kernel.kptr_restrict
+$ sudo vi /etc/sysctl.d/99-kernel_kptr_restrict.conf
 
+Add the following to the file:
 kernel.kptr_restrict = 1
 
-If the returned line does not have a value of "1" or "2", or a line is not returned, this is a finding.
-
-Check that the configuration files are present to enable this network parameter.
+Reload settings from all system configuration files with the following command:
 
-$ sudo grep -r kernel.kptr_restrict /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
+$ sudo sysctl --system</fixtext><fix id="F-61465r1155699_fix" /><check system="C-61541r1155698_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is configured to restrict exposed kernel pointer address access.
 
-/etc/sysctl.d/99-sysctl.conf: kernel.kptr_restrict = 1
+Verify the runtime status of the "kernel.kptr_restrict" kernel parameter with the following command:
 
-If "kernel.kptr_restrict" is not set to "1" or "2", is missing, or commented out, this is a finding.
+$ sudo sysctl kernel.kptr_restrict 
+kernel.kptr_restrict = 1
 
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257801"><title>SRG-OS-000312-GPOS-00123</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257801r1106279_rule" weight="10.0" severity="medium"><version>RHEL-09-213030</version><title>RHEL 9 must enable kernel parameters to enforce discretionary access control on hardlinks.</title><description>&lt;VulnDiscussion&gt;Discretionary Access Control (DAC) is based on the notion that individual users are "owners" of objects and therefore have discretion over who should be authorized to access the object and in which mode (e.g., read or write). Ownership is usually acquired as a consequence of creating the object or via specified ownership assignment. DAC allows the owner to determine who will have access to objects they control. An example of DAC includes user-controlled file permissions.
+If "kernel.kptr_restrict" is not set to "1" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-257801"><title>SRG-OS-000312-GPOS-00123</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257801r1155703_rule" weight="10.0" severity="medium"><version>RHEL-09-213030</version><title>RHEL 9 must enable kernel parameters to enforce discretionary access control (DAC) on hardlinks.</title><description>&lt;VulnDiscussion&gt;DAC is based on the notion that individual users are "owners" of objects and therefore have discretion over who should be authorized to access the object and in which mode (e.g., read or write). Ownership is usually acquired as a consequence of creating the object or via specified ownership assignment. DAC allows the owner to determine who will have access to objects they control. An example of DAC includes user-controlled file permissions.
 
 When discretionary access control policies are implemented, subjects are not constrained with regard to what actions they can take with information for which they have already been granted access. Thus, subjects that have been granted access to information are not prevented from passing (i.e., the subjects have the discretion to pass) the information to other subjects or objects. A subject that is constrained in its operation by Mandatory Access Control policies is still able to operate under the less rigorous constraints of this requirement. Thus, while Mandatory Access Control imposes constraints preventing a subject from passing information to another subject operating at a different sensitivity level, this requirement permits the subject to pass the information to any subject at the same sensitivity level. The policy is bounded by the information system boundary. Once the information is passed outside the control of the information system, additional means may be required to ensure the constraints remain in effect. While the older, more traditional definitions of discretionary access control require identity-based access control, that limitation is not required for this use of discretionary access control.
 
 By enabling the fs.protected_hardlinks kernel parameter, users can no longer create soft or hard links to files they do not own. Disallowing such hardlinks mitigate vulnerabilities based on insecure file system accessed by privileged programs, avoiding an exploitation vector exploiting unsafe use of open() or creat().
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -523,45 +473,31 @@ The sysctl --system command will load settings from all system configuration fil
 /lib/sysctl.d/*.conf
 /etc/sysctl.conf
 
-Satisfies: SRG-OS-000312-GPOS-00122, SRG-OS-000312-GPOS-00123, SRG-OS-000312-GPOS-00124, SRG-OS-000324-GPOS-00125&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-002165</ident><ident system="http://cyber.mil/cci">CCI-002235</ident><fixtext fixref="F-61466r1106278_fix">Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
-
-fs.protected_hardlinks = 1
-
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
-
-Load settings from all system configuration files with the following command:
+Satisfies: SRG-OS-000312-GPOS-00122, SRG-OS-000312-GPOS-00123, SRG-OS-000312-GPOS-00124, SRG-OS-000324-GPOS-00125&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-002165</ident><ident system="http://cyber.mil/cci">CCI-002235</ident><fixtext fixref="F-61466r1155702_fix">Configure RHEL 9 to enable DAC on hardlinks.
 
-$ sudo sysctl --system</fixtext><fix id="F-61466r1106278_fix" /><check system="C-61542r1106277_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is configured to enable DAC on hardlinks.
+Create a drop-in if it does not already exist:
 
-Check the status of the fs.protected_hardlinks kernel parameter.
-
-$ sudo sysctl fs.protected_hardlinks
+$ sudo vi /etc/sysctl.d/99-fs_protected_hardlinks.conf
 
+Add the following to the file:
 fs.protected_hardlinks = 1
 
-If "fs.protected_hardlinks" is not set to "1" or is missing, this is a finding.
-
-Check that the configuration files are present to enable this kernel parameter.
+Reload settings from all system configuration files with the following command:
 
-$ sudo grep -r fs.protected_hardlinks /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
+$ sudo sysctl --system</fixtext><fix id="F-61466r1155702_fix" /><check system="C-61542r1155701_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is configured to enable DAC on hardlinks.
 
-/etc/sysctl.d/99-sysctl.conf:fs.protected_hardlinks = 1
+Check the status of the "fs.protected_hardlinks" kernel parameter with the following command:
 
-If "fs.protected_hardlinks" is not set to "1", is missing, or commented out, this is a finding.
+$ sudo sysctl fs.protected_hardlinks
+fs.protected_hardlinks = 1
 
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257802"><title>SRG-OS-000312-GPOS-00123</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257802r1106282_rule" weight="10.0" severity="medium"><version>RHEL-09-213035</version><title>RHEL 9 must enable kernel parameters to enforce discretionary access control on symlinks.</title><description>&lt;VulnDiscussion&gt;Discretionary Access Control (DAC) is based on the notion that individual users are "owners" of objects and therefore have discretion over who should be authorized to access the object and in which mode (e.g., read or write). Ownership is usually acquired as a consequence of creating the object or via specified ownership assignment. DAC allows the owner to determine who will have access to objects they control. An example of DAC includes user-controlled file permissions.
+If "fs.protected_hardlinks" is not set to "1" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-257802"><title>SRG-OS-000312-GPOS-00123</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257802r1155706_rule" weight="10.0" severity="medium"><version>RHEL-09-213035</version><title>RHEL 9 must enable kernel parameters to enforce discretionary access (DAC) control on symlinks.</title><description>&lt;VulnDiscussion&gt;DAC is based on the notion that individual users are "owners" of objects and therefore have discretion over who should be authorized to access the object and in which mode (e.g., read or write). Ownership is usually acquired as a consequence of creating the object or via specified ownership assignment. DAC allows the owner to determine who will have access to objects they control. An example of DAC includes user-controlled file permissions.
 
 When discretionary access control policies are implemented, subjects are not constrained with regard to what actions they can take with information for which they have already been granted access. Thus, subjects that have been granted access to information are not prevented from passing (i.e., the subjects have the discretion to pass) the information to other subjects or objects. A subject that is constrained in its operation by Mandatory Access Control policies is still able to operate under the less rigorous constraints of this requirement. Thus, while Mandatory Access Control imposes constraints preventing a subject from passing information to another subject operating at a different sensitivity level, this requirement permits the subject to pass the information to any subject at the same sensitivity level. The policy is bounded by the information system boundary. Once the information is passed outside the control of the information system, additional means may be required to ensure the constraints remain in effect. While the older, more traditional definitions of discretionary access control require identity-based access control, that limitation is not required for this use of discretionary access control.
 
 By enabling the fs.protected_symlinks kernel parameter, symbolic links are permitted to be followed only when outside a sticky world-writable directory, or when the UID of the link and follower match, or when the directory owner matches the symlink's owner. Disallowing such symlinks helps mitigate vulnerabilities based on insecure file system accessed by privileged programs, avoiding an exploitation vector exploiting unsafe use of open() or creat().
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -570,82 +506,52 @@ The sysctl --system command will load settings from all system configuration fil
 /lib/sysctl.d/*.conf
 /etc/sysctl.conf
 
-Satisfies: SRG-OS-000312-GPOS-00122, SRG-OS-000312-GPOS-00123, SRG-OS-000312-GPOS-00124, SRG-OS-000324-GPOS-00125&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-002165</ident><ident system="http://cyber.mil/cci">CCI-002235</ident><fixtext fixref="F-61467r1106281_fix">Configure RHEL 9 to enable DAC on symlinks.
+Satisfies: SRG-OS-000312-GPOS-00122, SRG-OS-000312-GPOS-00123, SRG-OS-000312-GPOS-00124, SRG-OS-000324-GPOS-00125&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-002165</ident><ident system="http://cyber.mil/cci">CCI-002235</ident><fixtext fixref="F-61467r1155705_fix">Configure RHEL 9 to enable DAC on symlinks with the following:
 
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+Create a drop-in if it does not already exist:
 
-fs.protected_symlinks = 1
+$ sudo vi /etc/sysctl.d/99-fs_protected_symlinks.conf
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Add the following to the file:
+fs.protected_symlinks = 1
 
-Load settings from all system configuration files with the following command:
+Reload settings from all system configuration files with the following command:
 
-$ sudo sysctl --system</fixtext><fix id="F-61467r1106281_fix" /><check system="C-61543r1106280_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is configured to enable DAC on symlinks.
+$ sudo sysctl --system</fixtext><fix id="F-61467r1155705_fix" /><check system="C-61543r1155704_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is configured to enable DAC on symlinks.
 
-Check the status of the fs.protected_symlinks kernel parameter.
+Check the status of the "fs.protected_symlinks" kernel parameter with the following command:
 
 $ sudo sysctl fs.protected_symlinks
-
 fs.protected_symlinks = 1
 
-If "fs.protected_symlinks" is not set to "1" or is missing, this is a finding.
-
-Check that the configuration files are present to enable this kernel parameter.
-
-$ sudo grep -r fs.protected_symlinks /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
+If "fs.protected_symlinks" is not set to "1" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-257803"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257803r1155668_rule" weight="10.0" severity="medium"><version>RHEL-09-213040</version><title>RHEL 9 must disable the kernel.core_pattern.</title><description>&lt;VulnDiscussion&gt;A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems.
 
-/etc/sysctl.d/99-sysctl.conf:fs.protected_symlinks = 1
-
-If "fs.protected_symlinks" is not set to "1", is missing, or commented out, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257803"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257803r1106429_rule" weight="10.0" severity="medium"><version>RHEL-09-213040</version><title>RHEL 9 must disable the kernel.core_pattern.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore, may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
-
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61468r1106428_fix">Configure RHEL 9 to disable storing core dumps.
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61468r1155667_fix">Configure RHEL 9 to disable storing core dumps. 
+
+Create a drop-in if it does not already exist:
 
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+$ sudo vi /etc/sysctl.d/99-kernel_core_pattern.conf
 
+Add the following to the file:
 kernel.core_pattern = |/bin/false
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Reload settings from all system configuration files with the following command:
 
-The system configuration files must reloaded for the changes to take effect. To reload the contents of the files, run the following command:
+$ sudo sysctl --system</fixtext><fix id="F-61468r1155667_fix" /><check system="C-61544r1155666_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 disables storing core dumps.
 
-$ sudo sysctl --system</fixtext><fix id="F-61468r1106428_fix" /><check system="C-61544r1106283_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 disables storing core dumps with the following commands:
+Check the status of the "kernel.core_pattern" kernel parameter with the following command:
 
 $ sudo sysctl kernel.core_pattern
-
 kernel.core_pattern = |/bin/false
 
-If the returned line does not have a value of "|/bin/false", or a line is not returned and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.
-
-Check that the configuration files are present to enable this kernel parameter.
-
-$ sudo grep -r kernel.core_pattern /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf:kernel.core_pattern = |/bin/false
-
-If "kernel.core_pattern" is not set to "|/bin/false", is missing, or commented out, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257804"><title>SRG-OS-000095-GPOS-00049</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257804r1044853_rule" weight="10.0" severity="medium"><version>RHEL-09-213045</version><title>RHEL 9 must be configured to disable the Asynchronous Transfer Mode kernel module.</title><description>&lt;VulnDiscussion&gt;Disabling Asynchronous Transfer Mode (ATM) protects the system against exploitation of any flaws in its implementation.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000381</ident><fixtext fixref="F-61469r925398_fix">To configure the system to prevent the atm kernel module from being loaded, add the following line to the file  /etc/modprobe.d/atm.conf (or create atm.conf if it does not exist):
+If "kernel.core_pattern" is not set to "|/bin/false", or a line is not returned and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-257804"><title>SRG-OS-000095-GPOS-00049</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257804r1044853_rule" weight="10.0" severity="medium"><version>RHEL-09-213045</version><title>RHEL 9 must be configured to disable the Asynchronous Transfer Mode kernel module.</title><description>&lt;VulnDiscussion&gt;Disabling Asynchronous Transfer Mode (ATM) protects the system against exploitation of any flaws in its implementation.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000381</ident><fixtext fixref="F-61469r925398_fix">To configure the system to prevent the atm kernel module from being loaded, add the following line to the file  /etc/modprobe.d/atm.conf (or create atm.conf if it does not exist):
 
 install atm /bin/false
 blacklist atm</fixtext><fix id="F-61469r925398_fix" /><check system="C-61545r1044852_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify that RHEL 9 disables the ability to load the ATM kernel module with the following command:
@@ -703,11 +609,11 @@ $ grep -r tipc /etc/modprobe.conf /etc/modprobe.d/*
 install tipc /bin/false
 blacklist tipc
 
-If the command does not return any output, or the lines are commented out, and use of tipc is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-257809"><title>SRG-OS-000433-GPOS-00193</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257809r1106288_rule" weight="10.0" severity="medium"><version>RHEL-09-213070</version><title>RHEL 9 must implement address space layout randomization (ASLR) to protect its memory from unauthorized code execution.</title><description>&lt;VulnDiscussion&gt;Some adversaries launch attacks with the intent of executing code in nonexecutable regions of memory or in memory locations that are prohibited. Security safeguards employed to protect memory include, for example, data execution prevention and address space layout randomization. Data execution prevention safeguards can be either hardware-enforced or software-enforced with hardware providing the greater strength of mechanism.
+If the command does not return any output, or the lines are commented out, and use of tipc is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-257809"><title>SRG-OS-000433-GPOS-00193</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257809r1155709_rule" weight="10.0" severity="medium"><version>RHEL-09-213070</version><title>RHEL 9 must implement address space layout randomization (ASLR) to protect its memory from unauthorized code execution.</title><description>&lt;VulnDiscussion&gt;Some adversaries launch attacks with the intent of executing code in nonexecutable regions of memory or in memory locations that are prohibited. Security safeguards employed to protect memory include, for example, data execution prevention and address space layout randomization. Data execution prevention safeguards can be either hardware-enforced or software-enforced with hardware providing the greater strength of mechanism.
 
 Examples of attacks are buffer overflow attacks.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -716,41 +622,27 @@ The sysctl --system command will load settings from all system configuration fil
 /lib/sysctl.d/*.conf
 /etc/sysctl.conf
 
-Satisfies: SRG-OS-000433-GPOS-00193, SRG-OS-000480-GPOS-00227&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-002824</ident><fixtext fixref="F-61474r1106287_fix">Configure RHEL 9 to implement virtual address space randomization.
+Satisfies: SRG-OS-000433-GPOS-00193, SRG-OS-000480-GPOS-00227&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-002824</ident><fixtext fixref="F-61474r1155708_fix">Configure RHEL 9 to implement ASLR.
 
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+Create the drop-in if it does not already exist:
 
-kernel.randomize_va_space=2
-
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
-
-Issue the following command to make the changes take effect:
-
-$ sudo sysctl --system</fixtext><fix id="F-61474r1106287_fix" /><check system="C-61550r1106286_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 implements ASLR with the following command:
-
-$ sudo sysctl kernel.randomize_va_space
+$ sudo vi /etc/sysctl.d/99-kernel_randomize_va_space.conf
 
+Add the following line to the file:
 kernel.randomize_va_space = 2
 
-If "kernel.randomize_va_space" is not set to "2", this is a finding.
+Reload settings from all system configuration files with the following command:
 
-Check that the configuration files are present to enable this kernel parameter.
+$ sudo sysctl --system</fixtext><fix id="F-61474r1155708_fix" /><check system="C-61550r1155707_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is implementing ASLR.
 
-$ sudo grep -r kernel.randomize_va_space /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
+Check the status of the "kernel.randomize_va_space" kernel parameter with the following command:
 
-/etc/sysctl.d/99-sysctl.conf:kernel.randomize_va_space = 2
+$ sudo sysctl kernel.randomize_va_space
+kernel.randomize_va_space = 2
 
-If "kernel.randomize_va_space" is not set to "2", is missing, or commented out, this is a finding.
+If "kernel.randomize_va_space" is not set to "2" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-257810"><title>SRG-OS-000132-GPOS-00067</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257810r1155712_rule" weight="10.0" severity="medium"><version>RHEL-09-213075</version><title>RHEL 9 must disable access to network bpf system call from nonprivileged processes.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore, may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257810"><title>SRG-OS-000132-GPOS-00067</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257810r1117266_rule" weight="10.0" severity="medium"><version>RHEL-09-213075</version><title>RHEL 9 must disable access to network bpf system call from nonprivileged processes.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore, may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
-
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -759,37 +651,25 @@ The sysctl --system command will load settings from all system configuration fil
 /lib/sysctl.d/*.conf
 /etc/sysctl.conf
 
-Satisfies: SRG-OS-000132-GPOS-00067, SRG-OS-000480-GPOS-00227&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001082</ident><fixtext fixref="F-61475r1106430_fix">Configure RHEL 9 to prevent privilege escalation through the kernel by disabling access to the bpf syscall by adding the following line to a file in the "/etc/sysctl.d" directory:
-
-kernel.unprivileged_bpf_disabled = 1
-
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
-
-The system configuration files must be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
+Satisfies: SRG-OS-000132-GPOS-00067, SRG-OS-000480-GPOS-00227&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001082</ident><fixtext fixref="F-61475r1155711_fix">Configure RHEL 9 to prevent privilege escalation through the kernel by disabling access to the bpf system call.
 
-$ sudo sysctl --system</fixtext><fix id="F-61475r1106430_fix" /><check system="C-61551r1106289_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 prevents privilege escalation through the kernel by disabling access to the bpf syscall with the following commands:
+Create the drop-in file if it does not already exist:
 
-$ sudo sysctl kernel.unprivileged_bpf_disabled
+$ sudo vi /etc/sysctl.d/99-kernel_unprivileged_bpf_disabled.conf
 
+Add the following line to the file:
 kernel.unprivileged_bpf_disabled = 1
 
-If the returned line does not have a value of "1", or a line is not returned, this is a finding.
+Reload settings from all system configuration files with the following command:
 
-Check that the configuration files are present to enable this network parameter.
+$ sudo sysctl --system</fixtext><fix id="F-61475r1155711_fix" /><check system="C-61551r1155710_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 prevents privilege escalation through the kernel by disabling access to the bpf system call.
 
-$ sudo grep -r kernel.unprivileged_bpf_disabled /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
+Check the status of the "kernel.unprivileged_bpf_disabled" kernel parameter with the following command:
 
-/etc/sysctl.d/99-sysctl.conf: kernel.unprivileged_bpf_disabled = 1
-
-If "kernel.unprivileged_bpf_disabled" is not set to "1", is missing, or commented out, this is a finding.
+$ sysctl kernel.unprivileged_bpf_disabled
+kernel.unprivileged_bpf_disabled = 1
 
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257811"><title>SRG-OS-000132-GPOS-00067</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257811r1117266_rule" weight="10.0" severity="medium"><version>RHEL-09-213080</version><title>RHEL 9 must restrict usage of ptrace to descendant processes.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore, may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+If "kernel.unprivileged_bpf_disabled" is not set to "1", or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-257811"><title>SRG-OS-000132-GPOS-00067</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257811r1155674_rule" weight="10.0" severity="medium"><version>RHEL-09-213080</version><title>RHEL 9 must restrict usage of ptrace to descendant processes.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore, may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
 The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
@@ -800,37 +680,25 @@ The sysctl --system command will load settings from all system configuration fil
 /lib/sysctl.d/*.conf
 /etc/sysctl.conf
 
-Satisfies: SRG-OS-000132-GPOS-00067, SRG-OS-000480-GPOS-00227&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001082</ident><fixtext fixref="F-61476r1106432_fix">Configure RHEL 9 to restrict usage of ptrace to descendant processes by adding the following line to a file in the "/etc/sysctl.d" directory:
+Satisfies: SRG-OS-000132-GPOS-00067, SRG-OS-000480-GPOS-00227&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001082</ident><fixtext fixref="F-61476r1155673_fix">Configure RHEL 9 to restrict the usage of ptrace to descendant processes.
 
-kernel.yama.ptrace_scope = 1
+Create the drop-in if it doesn't already exist:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
-
-The system configuration files must be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
-
-$ sudo sysctl --system</fixtext><fix id="F-61476r1106432_fix" /><check system="C-61552r1106292_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 restricts usage of ptrace to descendant processes with the following commands:
-
-$ sudo sysctl kernel.yama.ptrace_scope
+$ sudo vi /etc/sysctl.d/99-kernel_yama.ptrace_scope.conf
 
+Add the following line to the file:
 kernel.yama.ptrace_scope = 1
 
-If the returned line does not have a value of "1", or a line is not returned, this is a finding.
+Reload settings from all system configuration files with the following command:
 
-Check that the configuration files are present to enable this network parameter.
+$ sudo sysctl --system</fixtext><fix id="F-61476r1155673_fix" /><check system="C-61552r1155672_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 restricts the usage of ptrace to descendant processes.
 
-$ sudo grep -r kernel.yama.ptrace_scope /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
+Check the status of the "kernel.yama.ptrace_scope" kernel parameter with the following command:
 
-/etc/sysctl.d/99-sysctl.conf: kernel.yama.ptrace_scope = 1
-
-If "kernel.yama.ptrace_scope" is not set to "1", is missing, or commented out, this is a finding.
+$ sysctl kernel.yama.ptrace_scope
+kernel.yama.ptrace_scope = 1
 
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257812"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257812r1134897_rule" weight="10.0" severity="medium"><version>RHEL-09-213085</version><title>RHEL 9 must disable core dump backtraces.</title><description>&lt;VulnDiscussion&gt;A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers or system operators trying to debug problems.
+If the network parameter "kernel.yama.ptrace_scope" is not equal to "1", or nothing is returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257812"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257812r1134897_rule" weight="10.0" severity="medium"><version>RHEL-09-213085</version><title>RHEL 9 must disable core dump backtraces.</title><description>&lt;VulnDiscussion&gt;A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers or system operators trying to debug problems.
 
 Enabling core dumps on production systems is not recommended; however, there may be overriding operational requirements to enable advanced debugging. Permitting temporary enablement of core dumps during such situations must be reviewed through local needs and policy.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61477r925422_fix">Configure the operating system to disable core dump backtraces.
 
@@ -856,21 +724,25 @@ $ grep -i storage /etc/systemd/coredump.conf
 
 Storage=none
 
-If the "Storage" item is missing or commented out, or the value is anything other than "none", and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement for all domains that have the "core" item assigned, this is a finding.</check-content></check></Rule></Group><Group id="V-257814"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257814r1134901_rule" weight="10.0" severity="medium"><version>RHEL-09-213095</version><title>RHEL 9 must disable core dumps for all users.</title><description>&lt;VulnDiscussion&gt;A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61479r925428_fix">Configure the operating system to disable core dumps for all users.
+If the "Storage" item is missing or commented out, or the value is anything other than "none", and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement for all domains that have the "core" item assigned, this is a finding.</check-content></check></Rule></Group><Group id="V-257814"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257814r1156057_rule" weight="10.0" severity="medium"><version>RHEL-09-213095</version><title>RHEL 9 must disable core dumps for all users.</title><description>&lt;VulnDiscussion&gt;A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61479r1155592_fix">Configure RHEL 9 to disable core dumps for all users.
 
 Add the following line to the top of the /etc/security/limits.conf or in a single ".conf" file defined in /etc/security/limits.d/:
 
-* hard core 0</fixtext><fix id="F-61479r925428_fix" /><check system="C-61555r1134900_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Note: If kernel dumps are disabled in accordance with RHEL-09-213040, this requirement is not applicable.
+* hard core 0
+
+Remove or comment out any entries for users or groups with a value set to anything other than "0".</fixtext><fix id="F-61479r1155592_fix" /><check system="C-61555r1156056_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Note: If kernel dumps are disabled in accordance with RHEL-09-213040, this requirement is not applicable.
 
 Verify RHEL 9 disables core dumps for all users by issuing the following command:
 
-$ grep -r -s core /etc/security/limits.conf /etc/security/limits.d/*.conf
+$ grep -rs core /etc/security/limits.conf /etc/security/limits.d/*.conf
 
 /etc/security/limits.conf:* hard core 0
 
 This can be set as a global domain (with the * wildcard) but may be set differently for multiple domains.
 
-If the "core" item is missing or commented out, or the value is anything other than "0", and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement for all domains that have the "core" item assigned, this is a finding.</check-content></check></Rule></Group><Group id="V-257815"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257815r1134903_rule" weight="10.0" severity="medium"><version>RHEL-09-213100</version><title>RHEL 9 must disable acquiring, saving, and processing core dumps.</title><description>&lt;VulnDiscussion&gt;A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61480r925431_fix">Configure the system to disable the systemd-coredump.socket with the following command:
+If the "core" item is missing or commented out, or the value is anything other than "0", and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement for all domains that have the "core" item assigned, this is a finding.
+
+If entries exist for users or groups with a value set to anything other than "0", this is a finding.</check-content></check></Rule></Group><Group id="V-257815"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257815r1134903_rule" weight="10.0" severity="medium"><version>RHEL-09-213100</version><title>RHEL 9 must disable acquiring, saving, and processing core dumps.</title><description>&lt;VulnDiscussion&gt;A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61480r925431_fix">Configure the system to disable the systemd-coredump.socket with the following command:
 
 $ sudo systemctl mask --now systemd-coredump.socket
 
@@ -888,46 +760,36 @@ systemd-coredump.socket
 Loaded: masked (Reason: Unit systemd-coredump.socket is masked.)
 Active: inactive (dead)
 
-If the "systemd-coredump.socket" is loaded and not masked, and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-257816"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257816r1106435_rule" weight="10.0" severity="medium"><version>RHEL-09-213105</version><title>RHEL 9 must disable the use of user namespaces.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore, may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+If the "systemd-coredump.socket" is loaded and not masked, and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-257816"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257816r1155715_rule" weight="10.0" severity="medium"><version>RHEL-09-213105</version><title>RHEL 9 must disable the use of user namespaces.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore, may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61481r1106434_fix">Configure RHEL 9 to disable the use of user namespaces by adding the following line to a file in the "/etc/sysctl.d" directory:
-
-user.max_user_namespaces = 0
-
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61481r1155714_fix">Configure RHEL 9 to disable the use of user namespaces.
 
-The system configuration files must be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
+Create the drop-in if it does not already exist:
 
-$ sudo sysctl --system</fixtext><fix id="F-61481r1106434_fix" /><check system="C-61557r1106295_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 disables the use of user namespaces with the following commands:
+$ sudo vi /etc/sysctl.d/99-user_max_user_namespaces.conf
 
-$ sudo sysctl user.max_user_namespaces
+Add the following line to the file:
 
 user.max_user_namespaces = 0
 
-If the returned line does not have a value of "0", or a line is not returned, this is a finding.
+Reload settings from all system configuration files with the following command:
 
-Check that the configuration files are present to enable this network parameter.
+$ sudo sysctl --system</fixtext><fix id="F-61481r1155714_fix" /><check system="C-61557r1155713_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 disables the use of user namespaces.
 
-$ sudo grep -r user.max_user_namespaces /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
+Check the status of the "user.max_user_namespaces" parameter with the following command:
 
-/etc/sysctl.d/99-sysctl.conf: user.max_user_namespaces = 0
+$ sudo sysctl user.max_user_namespaces
 
-If "user.max_user_namespaces" is not set to "0", is missing, or commented out, this is a finding.
+user.max_user_namespaces = 0
 
-If conflicting results are returned, this is a finding.
+If "user.max_user_namespaces" is not set to "0" or is missing, this is a finding.
 
 If the use of namespaces is operationally required and documented with the information system security manager (ISSM), it is not a finding.</check-content></check></Rule></Group><Group id="V-257817"><title>SRG-OS-000433-GPOS-00192</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257817r1069383_rule" weight="10.0" severity="medium"><version>RHEL-09-213110</version><title>RHEL 9 must implement nonexecutable data to protect its memory from unauthorized code execution.</title><description>&lt;VulnDiscussion&gt;ExecShield uses the segmentation feature on all x86 systems to prevent execution in memory higher than a certain address. It writes an address as a limit in the code segment descriptor, to control where code can be executed, on a per-process basis. When the kernel places a process's memory regions such as the stack and heap higher than this address, the hardware prevents execution in that address range. This is enabled by default on the latest Red Hat and Fedora systems if supported by the hardware.
 
@@ -1048,19 +910,22 @@ localpkg_gpgcheck=1
 
 If "localpkg_gpgcheck" is not set to "1", or if the option is missing or commented out, ask the system administrator how the GPG signatures of local software packages are being verified.
 
-If there is no process to verify GPG signatures that is approved by the organization, this is a finding.</check-content></check></Rule></Group><Group id="V-257822"><title>SRG-OS-000366-GPOS-00153</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257822r1044880_rule" weight="10.0" severity="high"><version>RHEL-09-214025</version><title>RHEL 9 must have GPG signature verification enabled for all software repositories.</title><description>&lt;VulnDiscussion&gt;Changes to any software components can have significant effects on the overall security of the operating system. This requirement ensures the software has not been tampered with and that it has been provided by a trusted vendor.
+If there is no process to verify GPG signatures that is approved by the organization, this is a finding.</check-content></check></Rule></Group><Group id="V-257822"><title>SRG-OS-000366-GPOS-00153</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257822r1155615_rule" weight="10.0" severity="high"><version>RHEL-09-214025</version><title>RHEL 9 must have GPG signature verification enabled for all software repositories.</title><description>&lt;VulnDiscussion&gt;Changes to any software components can have significant effects on the overall security of the operating system. This requirement ensures the software has not been tampered with and that it has been provided by a trusted vendor.
 
 All software packages must be signed with a cryptographic key recognized and approved by the organization.
 
 Verifying the authenticity of software prior to installation validates the integrity of the software package received from a vendor. This verifies the software has not been tampered with and that it has been provided by a trusted vendor.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-003992</ident><ident system="http://cyber.mil/cci">CCI-001749</ident><fixtext fixref="F-61487r925452_fix">Configure all software repositories defined in "/etc/yum.repos.d/" to have "gpgcheck" enabled:
 
-$ sudo sed -i 's/gpgcheck\s*=.*/gpgcheck=1/g' /etc/yum.repos.d/*</fixtext><fix id="F-61487r925452_fix" /><check system="C-61563r1044879_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify that all software repositories defined in "/etc/yum.repos.d/" have been configured with "gpgcheck" enabled:
+$ sudo sed -i 's/gpgcheck\s*=.*/gpgcheck=1/g' /etc/yum.repos.d/*</fixtext><fix id="F-61487r925452_fix" /><check system="C-61563r1155614_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify all software repositories defined in "/etc/yum.repos.d/" have been configured with "gpgcheck" enabled:
 
 $ grep -w gpgcheck /etc/yum.repos.d/*.repo | more
 
-gpgcheck = 1
+/etc/yum.repos.d/redhat.repo:gpgcheck = 1
 
-If "gpgcheck" is not set to "1" for all returned lines, this is a finding.</check-content></check></Rule></Group><Group id="V-257823"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257823r1051231_rule" weight="10.0" severity="medium"><version>RHEL-09-214030</version><title>RHEL 9 must be configured so that the cryptographic hashes of system files match vendor values.</title><description>&lt;VulnDiscussion&gt;The hashes of important files such as system executables should match the information given by the RPM database. Executables with erroneous hashes could be a sign of nefarious activity on the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61488r1051230_fix">Configure RHEL 9 so that the cryptographic hashes of system files match vendor values.
+For all listed repos, if "gpgcheck" is not set to "1", or if the option is missing or commented out, ask the system administrator how the GPG signatures of local software packages are being verified.
+
+If there is no process to verify GPG signatures that is approved by the organization, this is a finding.</check-content></check></Rule></Group><Group id="V-257823"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257823r1155641_rule" weight="10.0" severity="medium"><version>RHEL-09-214030</version><title>RHEL 9 must be configured so that the cryptographic hashes of system files match vendor values.</title><description>&lt;VulnDiscussion&gt;The hashes of important files such as system executables should match the information given by the RPM database. Executables with erroneous hashes could be a sign of nefarious activity on the system.
+If the Check Text command returns results from third-party software vendors, it is an indication that the vendor is not implementing their rpm packages correctly and this must be corrected by the software vendor.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61488r1051230_fix">Configure RHEL 9 so that the cryptographic hashes of system files match vendor values.
 
 Given output from the check command, identify the package that provides the output and reinstall it. The following trimmed example output shows a package that has failed verification, been identified, and been reinstalled:
 
@@ -1076,7 +941,7 @@ $ sudo dnf -y reinstall gzip
 [...]
 
 $ sudo rpm -Va --noconfig | awk '$1 ~ /..5/ &amp;&amp; $2 != "c"'
-[no output]</fixtext><fix id="F-61488r1051230_fix" /><check system="C-61564r1051229_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify that RHEL 9 is configured so that the cryptographic hashes of system files match vendor values.
+[no output]</fixtext><fix id="F-61488r1051230_fix" /><check system="C-61564r1155640_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is configured so that the cryptographic hashes of system files match vendor values.
  
 List files on the system that have file hashes different from what is expected by the RPM database with the following command:
 
@@ -1168,7 +1033,7 @@ $ dnf list --installed telnet-server
 
 Error: No matching Packages to list
 
-If the "telnet-server" package is installed, this is a finding.</check-content></check></Rule></Group><Group id="V-257832"><title>SRG-OS-000095-GPOS-00049</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257832r1044900_rule" weight="10.0" severity="medium"><version>RHEL-09-215045</version><title>RHEL 9 must not have the gssproxy package installed.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore, may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+If the "telnet-server" package is installed, this is a finding.</check-content></check></Rule></Group><Group id="V-257832"><title>SRG-OS-000095-GPOS-00049</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257832r1155653_rule" weight="10.0" severity="medium"><version>RHEL-09-215045</version><title>RHEL 9 must not have the gssproxy package installed.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore, may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
 Operating systems are capable of providing a wide variety of functions and services. Some of the functions and services provided by default may not be necessary to support essential organizational operations (e.g., key missions, functions).
 
@@ -1176,7 +1041,9 @@ The gssproxy package is a proxy for GSS API credential handling and could expose
 
 Satisfies: SRG-OS-000095-GPOS-00049, SRG-OS-000480-GPOS-00227&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000381</ident><fixtext fixref="F-61497r925482_fix">Remove the gssproxy package with the following command:
 
-$ sudo dnf remove gssproxy</fixtext><fix id="F-61497r925482_fix" /><check system="C-61573r1044899_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify that the gssproxy package is not installed with the following command:
+$ sudo dnf remove gssproxy</fixtext><fix id="F-61497r925482_fix" /><check system="C-61573r1155652_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Note: If NFS mounts are authorized and in use on the system, this control is not applicable.
+
+Verify the gssproxy package is not installed with the following command:
 
 $ dnf list --installed gssproxy
 
@@ -1210,17 +1077,45 @@ $ dnf list --installed tuned
 
 Error: No matching Packages to list
 
-If the "tuned" package is installed and is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-257835"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257835r1102037_rule" weight="10.0" severity="high"><version>RHEL-09-215060</version><title>RHEL 9 must not have a Trivial File Transfer Protocol (TFTP) server package installed.</title><description>&lt;VulnDiscussion&gt;Removing the "tftp-server" package decreases the risk of the accidental (or intentional) activation of tftp services.
+If the "tuned" package is installed and is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-257835"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257835r1155679_rule" weight="10.0" severity="high"><version>RHEL-09-215060</version><title>The Trivial File Transfer Protocol (TFTP) server must not be installed unless it is required, and if required, the RHEL 9 TFTP daemon must be configured to operate in secure mode.</title><description>&lt;VulnDiscussion&gt;Removing the "tftp-server" package decreases the risk of the accidental (or intentional) activation of tftp services.
+
+If TFTP is required for operational support (such as transmission of router configurations), its use must be documented with the information systems security manager (ISSM), restricted to only authorized personnel, and have access control rules established.
+
+Restricting TFTP to a specific directory prevents remote users from copying, transferring, or overwriting system files.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61500r1155678_fix">Configure RHEL 9 so that TFTP operates in secure mode if installed.
+
+If TFTP server is not required, remove it with the following command:
+$ sudo dnf -y remove tftp-server
 
-If TFTP is required for operational support (such as transmission of router configurations), its use must be documented with the information systems security manager (ISSM), restricted to only authorized personnel, and have access control rules established.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61500r952170_fix">The "tftp-server" package can be removed with the following command:
+Configure the TFTP daemon to operate in secure mode with the following command:
+$ sudo systemctl edit tftp.service
 
-$ sudo dnf remove tftp-server</fixtext><fix id="F-61500r952170_fix" /><check system="C-61576r1102036_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify that RHEL 9 does not have a "tftp-server" package installed with the following command:
+In the editor, enter:
+[Service]
+ExecStart=/usr/sbin/in.tftpd -s /var/lib/tftpboot
+
+After making changes, reload the systemd daemon and restart the TFTP service as follows:
+
+$ sudo systemctl daemon-reload
+$ sudo systemctl restart tftp.service
+
+If the "-s" option is not present in the "ExecStart" line or if the line is missing, this is a finding.</fixtext><fix id="F-61500r1155678_fix" /><check system="C-61576r1155677_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify if TFTP is installed, it is configured to operate in secure mode.
+
+Note: If TFTP is not required, it must not be installed. If TFTP is not installed, this rule is not applicable.
+
+Check to see if TFTP server is installed with the following command:
 
 $ sudo dnf list --installed tftp-server
 
-Error: No matching Packages to list
+Updating Subscription Management repositories.
+Installed Packages
+tftp-server.x86_64                             5.2-38.el9                              @rhel-9-for-x86_64-appstream-rpms
+
+Verify the TFTP daemon, if tftp.server is installed, is configured to operate in secure mode with the following command:
+
+$ grep -i execstart /usr/lib/systemd/system/tftp.service
+ExecStart=/usr/sbin/in.tftpd -s /var/lib/tftpboot
 
-If the "tftp-server" package is installed, this is a finding.</check-content></check></Rule></Group><Group id="V-257836"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257836r1044908_rule" weight="10.0" severity="medium"><version>RHEL-09-215065</version><title>RHEL 9 must not have the quagga package installed.</title><description>&lt;VulnDiscussion&gt;Quagga is a network routing software suite providing implementations of Open Shortest Path First (OSPF), Routing Information Protocol (RIP), Border Gateway Protocol (BGP) for Unix and Linux platforms.
+Note: The "-s" option ensures the TFTP server only serves files from the specified directory, which is a security measure to prevent unauthorized access to other parts of the file system.</check-content></check></Rule></Group><Group id="V-257836"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257836r1044908_rule" weight="10.0" severity="medium"><version>RHEL-09-215065</version><title>RHEL 9 must not have the quagga package installed.</title><description>&lt;VulnDiscussion&gt;Quagga is a network routing software suite providing implementations of Open Shortest Path First (OSPF), Routing Information Protocol (RIP), Border Gateway Protocol (BGP) for Unix and Linux platforms.
 
 If there is no need to make the router software available, removing it provides a safeguard against its activation.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61501r925494_fix">Remove the quagga package with the following command:
 
@@ -1443,9 +1338,9 @@ $ mount | grep '\s/boot\s'
 
 /dev/sda1 on /boot type xfs (rw,nosuid,relatime,seclabe,attr2,inode64,noquota)
 
-If the /boot file system does not have the "nosuid" option set, this is a finding.</check-content></check></Rule></Group><Group id="V-257862"><title>SRG-OS-000368-GPOS-00154</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257862r1134908_rule" weight="10.0" severity="medium"><version>RHEL-09-231105</version><title>RHEL 9 must prevent files with the setuid and setgid bit set from being executed on the /boot/efi directory.</title><description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system not to execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
+If the /boot file system does not have the "nosuid" option set, this is a finding.</check-content></check></Rule></Group><Group id="V-257862"><title>SRG-OS-000368-GPOS-00154</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257862r1155661_rule" weight="10.0" severity="medium"><version>RHEL-09-231105</version><title>RHEL 9 must prevent files with the setuid and setgid bit set from being executed on the /boot/efi directory.</title><description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system not to execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
 
-Satisfies: SRG-OS-000368-GPOS-00154, SRG-OS-000480-GPOS-00227&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001764</ident><fixtext fixref="F-61527r1051264_fix">Modify "/etc/fstab" to use the "nosuid" option on the "/boot/efi" directory.</fixtext><fix id="F-61527r1051264_fix" /><check system="C-61603r1134907_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Note: For systems that use BIOS, this requirement is not applicable. 
+Satisfies: SRG-OS-000368-GPOS-00154, SRG-OS-000480-GPOS-00227&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001764</ident><fixtext fixref="F-61527r1051264_fix">Modify "/etc/fstab" to use the "nosuid" option on the "/boot/efi" directory.</fixtext><fix id="F-61527r1051264_fix" /><check system="C-61603r1155660_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Note: For systems that use vfat file systems and for systems that use BIOS, this requirement is not applicable. 
 
 Verify the /boot/efi directory is mounted with the "nosuid" option with the following command:
 
@@ -1455,60 +1350,58 @@ $ mount | grep '\s/boot/efi\s'
 
 If the /boot/efi file system does not have the "nosuid" option set, this is a finding.
 
-Note: This control is not applicable to vfat file systems.</check-content></check></Rule></Group><Group id="V-257863"><title>SRG-OS-000368-GPOS-00154</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257863r958804_rule" weight="10.0" severity="medium"><version>RHEL-09-231110</version><title>RHEL 9 must mount /dev/shm with the nodev option.</title><description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
+Note: This control is not applicable to vfat file systems.</check-content></check></Rule></Group><Group id="V-257863"><title>SRG-OS-000368-GPOS-00154</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257863r1155633_rule" weight="10.0" severity="medium"><version>RHEL-09-231110</version><title>RHEL 9 must mount /dev/shm with the nodev option.</title><description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
 
-The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001764</ident><fixtext fixref="F-61528r925575_fix">Modify "/etc/fstab" to use the "nodev" option on the "/dev/shm" file system.</fixtext><fix id="F-61528r925575_fix" /><check system="C-61604r925574_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify "/dev/shm" is mounted with the "nodev" option with the following command:
+The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001764</ident><fixtext fixref="F-61528r1155632_fix">Configure "/dev/shm" to mount with the "nodev" option.
 
-$ mount | grep /dev/shm
+Modify "/etc/fstab" to use the "nodev" option on the "/dev/shm" file system.
 
-tmpfs on /dev/shm type tmpfs (rw,nodev,nosuid,noexec,seclabel)
+To reload all implicit mount units and update the dependency graph so that new options will apply correctly at next remount, run the following command:
 
-If the /dev/shm file system is mounted without the "nodev" option, this is a finding.</check-content></check></Rule></Group><Group id="V-257864"><title>SRG-OS-000368-GPOS-00154</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257864r1106304_rule" weight="10.0" severity="medium"><version>RHEL-09-231115</version><title>RHEL 9 must mount /dev/shm with the noexec option.</title><description>&lt;VulnDiscussion&gt;The "noexec" mount option causes the system to not execute binary files. This option must be used for mounting any file system not containing approved binary files, as they may be incompatible. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001764</ident><fixtext fixref="F-61529r1106303_fix">Configure "/dev/shm" to mount with the "noexec" option.
+$ sudo systemctl daemon-reload
 
-Determine how /dev/shm is managed.
+Use the following command to apply the changes immediately without a reboot:
 
-$ systemctl status systemd-tmpfiles-setup
-If "active", systemd is managing temporary files (including /dev/shm).
-Otherwise, /etc/fstab is managing temporary files.
+$ sudo mount -o remount /dev/shm</fixtext><fix id="F-61528r1155632_fix" /><check system="C-61604r1155631_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify "/dev/shm" is mounted with the "nodev" option with the following command:
 
-If systemd is managing /dev/shm, use the following commands to add the noexec option to the mount:
-     If /etc/tmpfiles.d does not exist, create it:
-     $ sudo mkdir -p /etc/tmpfiles.d
+$ findmnt /dev/shm
 
-     Add a configuration file with the appropriate options for /dev/shm as follows:
-     $ echo 'd /dev/shm 1777 root root 10d' | sudo tee /etc/tmpfiles.d/dev-shm.conf
-     $ echo 'x /dev/shm' | sudo tee -a /etc/tmpfiles.d/dev-shm.conf
+TARGET   SOURCE FSTYPE OPTIONS
+/dev/shm tmpfs  tmpfs  rw,nodev,nosuid,noexec,seclabel
 
-     Apply new mount options with the following commands:
-     $ sudo systemctl mask tmp.mount
-     Created symlink /etc/systemd/system/tmp.mount ? /dev/null.
+If the mount options for /dev/shm does not include nodev, this is a finding.</check-content></check></Rule></Group><Group id="V-257864"><title>SRG-OS-000368-GPOS-00154</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257864r1155639_rule" weight="10.0" severity="medium"><version>RHEL-09-231115</version><title>RHEL 9 must mount /dev/shm with the noexec option.</title><description>&lt;VulnDiscussion&gt;The "noexec" mount option causes the system to not execute binary files. This option must be used for mounting any file system not containing approved binary files, as they may be incompatible. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001764</ident><fixtext fixref="F-61529r1155638_fix">Configure "/dev/shm" to mount with the "noexec" option.
 
-     $ echo 'tmpfs /dev/shm tmpfs rw,nodev,nosuid,noexec,seclabel 0 0' | sudo tee -a /etc/fstab
-     $ sudo mount -o remount /dev/shm
-     $ sudo systemctl daemon-reload
+Modify "/etc/fstab" to use the "noexec" option on the "/dev/shm" file system.
 
-If /dev/shm is managed by /etc/fstab, use the following commands to add the noexec option to the mount:
-     $ sudo vi /etc/fstab
+To reload all implicit mount units and update the dependency graph so that new options will apply correctly at next remount, run the following command:
 
-     Add or modify the following line:
-     tmpfs /dev/shm tmpfs rw,nodev,nosuid,noexec,seclabel 0 0
+$ sudo systemctl daemon-reload
 
-     Remount /dev/shm:
-     $ sudo mount -o remount /dev/shm
+Use the following command to apply the changes immediately without a reboot:
 
-Note: Although systemd manages tmpfs mounts by default, administrators can override settings by adding entries to /etc/fstab. Either approach is acceptable.</fixtext><fix id="F-61529r1106303_fix" /><check system="C-61605r1102006_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify "/dev/shm" is mounted with the "noexec" option with the following command:
+$ sudo mount -o remount /dev/shm</fixtext><fix id="F-61529r1155638_fix" /><check system="C-61605r1155637_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify "/dev/shm" is mounted with the "noexec" option with the following command:
 
 $ findmnt /dev/shm
-TARGET   SOURCE FSTYPE OPTIONS
-/dev/shm tmpfs  tmpfs  rw,nodev,nosuid,noexec,seclabel 0 0
 
-If the /dev/shm file system is mounted without the "noexec" option, this is a finding.</check-content></check></Rule></Group><Group id="V-257865"><title>SRG-OS-000368-GPOS-00154</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257865r1044946_rule" weight="10.0" severity="medium"><version>RHEL-09-231120</version><title>RHEL 9 must mount /dev/shm with the nosuid option.</title><description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system to not execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001764</ident><fixtext fixref="F-61530r925581_fix">Modify "/etc/fstab" to use the "nosuid" option on the "/dev/shm" file system.</fixtext><fix id="F-61530r925581_fix" /><check system="C-61606r1044945_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify "/dev/shm" is mounted with the "nosuid" option with the following command:
+/dev/shm tmpfs  tmpfs  rw,nodev,nosuid,noexec,seclabel
 
-$ mount | grep /dev/shm
+If the mount options for /dev/shm does not include noexec, this is a finding.</check-content></check></Rule></Group><Group id="V-257865"><title>SRG-OS-000368-GPOS-00154</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257865r1155636_rule" weight="10.0" severity="medium"><version>RHEL-09-231120</version><title>RHEL 9 must mount /dev/shm with the nosuid option.</title><description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system to not execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001764</ident><fixtext fixref="F-61530r1155635_fix">Configure "/dev/shm" to mount with the "nosuid" option.
+
+Modify "/etc/fstab" to use the "nosuid" option on the "/dev/shm" file system.
+
+To reload all implicit mount units and update the dependency graph so that new options will apply correctly at next remount, run the following command:
+
+$ sudo systemctl daemon-reload
 
-tmpfs on /dev/shm type tmpfs (rw,nodev,nosuid,noexec,seclabel)
+Use the following command to apply the changes immediately without a reboot:
 
-If the /dev/shm file system is mounted without the "nosuid" option, this is a finding.</check-content></check></Rule></Group><Group id="V-257866"><title>SRG-OS-000368-GPOS-00154</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257866r958804_rule" weight="10.0" severity="medium"><version>RHEL-09-231125</version><title>RHEL 9 must mount /tmp with the nodev option.</title><description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
+$ sudo mount -o remount /dev/shm</fixtext><fix id="F-61530r1155635_fix" /><check system="C-61606r1155634_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify "/dev/shm" is mounted with the "nosuid" option with the following command:
+
+$ findmnt /dev/shm
+
+/dev/shm tmpfs  tmpfs  rw,nodev,nosuid,noexec,seclabel
+
+If the mount options for /dev/shm does not include nosuid, this is a finding.</check-content></check></Rule></Group><Group id="V-257866"><title>SRG-OS-000368-GPOS-00154</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257866r958804_rule" weight="10.0" severity="medium"><version>RHEL-09-231125</version><title>RHEL 9 must mount /tmp with the nodev option.</title><description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
 
 The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001764</ident><fixtext fixref="F-61531r925584_fix">Modify "/etc/fstab" to use the "nodev" option on the "/tmp" directory.</fixtext><fix id="F-61531r925584_fix" /><check system="C-61607r925583_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify "/tmp" is mounted with the "nodev" option:
 
@@ -1658,9 +1551,11 @@ $ grep -r cramfs /etc/modprobe.conf /etc/modprobe.d/*
 install cramfs /bin/false
 blacklist cramfs
 
-If the command does not return any output or the lines are commented out, and use of cramfs is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-257881"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257881r991589_rule" weight="10.0" severity="medium"><version>RHEL-09-231200</version><title>RHEL 9 must prevent special devices on non-root local partitions.</title><description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
+If the command does not return any output or the lines are commented out, and use of cramfs is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-257881"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257881r1155663_rule" weight="10.0" severity="medium"><version>RHEL-09-231200</version><title>RHEL 9 must prevent special devices on non-root local partitions.</title><description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
+
+The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61546r925629_fix">Configure the "/etc/fstab" to use the "nodev" option on all non-root local partitions.</fixtext><fix id="F-61546r925629_fix" /><check system="C-61622r1155662_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Note: This control is not applicable to vfat file systems.
 
-The only legitimate location for device files is the "/dev" directory located on the root partition, with the exception of chroot jails if implemented.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61546r925629_fix">Configure the "/etc/fstab" to use the "nodev" option on all non-root local partitions.</fixtext><fix id="F-61546r925629_fix" /><check system="C-61622r925628_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify all non-root local partitions are mounted with the "nodev" option with the following command:
+Verify all non-root local partitions are mounted with the "nodev" option with the following command:
 
 $ sudo mount | grep '^/dev\S* on /\S' | grep --invert-match 'nodev'
 
@@ -2125,19 +2020,19 @@ root /etc/cron.monthly
 root /etc/crontab
 root /etc/cron.weekly
 
-If any crontab is not group owned by root, this is a finding.</check-content></check></Rule></Group><Group id="V-257928"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257928r1044992_rule" weight="10.0" severity="medium"><version>RHEL-09-232240</version><title>All RHEL 9 world-writable directories must be owned by root, sys, bin, or an application user.</title><description>&lt;VulnDiscussion&gt;If a world-writable directory is not owned by root, sys, bin, or an application user identifier (UID), unauthorized users may be able to modify files created by others.
+If any crontab is not group owned by root, this is a finding.</check-content></check></Rule></Group><Group id="V-257928"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257928r1155576_rule" weight="10.0" severity="medium"><version>RHEL-09-232240</version><title>All RHEL 9 world-writable directories must be owned by root, sys, bin, or an application user.</title><description>&lt;VulnDiscussion&gt;If a world-writable directory is not owned by root, sys, bin, or an application user identifier (UID), unauthorized users may be able to modify files created by others.
 
 The only authorized public directories are those temporary directories supplied with the system or those designed to be temporary file repositories. The setting is normally reserved for directories used by the system and by users for temporary file storage, (e.g., /tmp), and for directories requiring global read/write access.
 
-Satisfies: SRG-OS-000480-GPOS-00227, SRG-OS-000138-GPOS-00069&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001090</ident><fixtext fixref="F-61593r925770_fix">Configure all public directories to be owned by root or a system account to prevent unauthorized and unintended information transferred via shared system resources.
+Satisfies: SRG-OS-000480-GPOS-00227, SRG-OS-000138-GPOS-00069&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001090</ident><fixtext fixref="F-61593r1155575_fix">Configure all RHEL 9 public directories to be owned by root or a system account to prevent unauthorized and unintended information transferred via shared system resources.
 
-Set the owner of all public directories as root or a system account using the command, replace "[Public Directory]" with any directory path not owned by root or a system account:
+Use the following command template to set ownership of public directories to root or a system account:
 
-$ sudo chown root [Public Directory]</fixtext><fix id="F-61593r925770_fix" /><check system="C-61669r925769_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify that world writable directories are owned by root, a system account, or an application account with the following command. It will discover and print world-writable directories that are not owned by root.  Run it once for each local partition [PART]:
+$ sudo chown [root or system account] [Public Directory]</fixtext><fix id="F-61593r1155575_fix" /><check system="C-61669r1155574_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 world writable directories are owned by root, a system account, or an application account with the following command:
 
-$ sudo find  PART  -xdev -type d -perm -0002 -uid +0 -print 
+$ sudo find / -xdev -type d -perm -0002 -uid +999 -exec stat -c "%U, %u, %A, %n" {} \; 2&gt;/dev/null
 
-If there is output, this is a finding.</check-content></check></Rule></Group><Group id="V-257929"><title>SRG-OS-000138-GPOS-00069</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257929r1117267_rule" weight="10.0" severity="medium"><version>RHEL-09-232245</version><title>A sticky bit must be set on all RHEL 9 public directories.</title><description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
+If there is output that indicates world-writable directories are owned by any account other than root or an approved system account, this is a finding.</check-content></check></Rule></Group><Group id="V-257929"><title>SRG-OS-000138-GPOS-00069</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257929r1137695_rule" weight="10.0" severity="medium"><version>RHEL-09-232245</version><title>A sticky bit must be set on all RHEL 9 public directories.</title><description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
 
 This requirement generally applies to the design of an information technology product, but it can also apply to the configuration of particular information system components that are, or use, such products. This can be verified by acceptance/validation processes in DOD or other government agencies.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001090</ident><fixtext fixref="F-61594r925773_fix">Configure all world-writable directories to have the sticky bit set to prevent unauthorized and unintended information transferred via shared system resources.
 
@@ -2305,48 +2200,36 @@ $ sudo ip link set dev &lt;devicename&gt; multicast off promisc off</fixtext><fi
 
 $ ip link | grep -i promisc
 
-If network interfaces are found on the system in promiscuous mode and their use has not been approved by the ISSO and documented, this is a finding.</check-content></check></Rule></Group><Group id="V-257942"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257942r1106314_rule" weight="10.0" severity="medium"><version>RHEL-09-251045</version><title>RHEL 9 must enable hardening for the Berkeley Packet Filter just-in-time compiler.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+If network interfaces are found on the system in promiscuous mode and their use has not been approved by the ISSO and documented, this is a finding.</check-content></check></Rule></Group><Group id="V-257942"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257942r1155718_rule" weight="10.0" severity="medium"><version>RHEL-09-251045</version><title>RHEL 9 must enable hardening for the Berkeley Packet Filter just-in-time compiler.</title><description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
 Enabling hardening for the Berkeley Packet Filter (BPF) Just-in-time (JIT) compiler aids in mitigating JIT spraying attacks. Setting the value to "2" enables JIT hardening for all users.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61607r1106313_fix">Configure RHEL 9 to enable hardening for the BPF JIT compiler by adding the following line to a file, in the "/etc/sysctl.d" directory:
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61607r1155717_fix">Configure RHEL 9 to enable hardening for the BPF JIT compiler.
 
-net.core.bpf_jit_harden = 2
+Create the drop-in file if it does not already exist:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
-
-The system configuration files must be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
-
-$ sudo sysctl --system</fixtext><fix id="F-61607r1106313_fix" /><check system="C-61683r1101971_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 enables hardening for the BPF JIT with the following commands:
-
-$ sudo sysctl net.core.bpf_jit_harden
+$ sudo vi /etc/sysctl.d/99-net_core-bpf_jit_harden.conf
 
+Add the following line to the file:
 net.core.bpf_jit_harden = 2
 
-If the returned line does not have a value of "2", or a line is not returned, this is a finding.
+Reload settings from all system configuration files with the following command:
 
-Check that the configuration files are present to enable this network parameter.
+$ sudo sysctl --system</fixtext><fix id="F-61607r1155717_fix" /><check system="C-61683r1155716_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 enables hardening for the BPF JIT compiler.
 
-$ sudo grep -r net.core.bpf_jit_harden /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
+Check the status of the "net.core.bpf_jit_harden" parameter with the following command:
 
-/etc/sysctl.d/99-sysctl.conf: net.core.bpf_jit_harden = 2
-
-If "net.core.bpf_jit_harden" is not set to "2", is missing or commented out, this is a finding.
+$ sudo sysctl net.core.bpf_jit_harden
+net.core.bpf_jit_harden = 2
 
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257943"><title>SRG-OS-000355-GPOS-00143</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257943r1045001_rule" weight="10.0" severity="medium"><version>RHEL-09-252010</version><title>RHEL 9 must have the chrony package installed.</title><description>&lt;VulnDiscussion&gt;Inaccurate time stamps make it more difficult to correlate events and can lead to an inaccurate analysis. Determining the correct time a particular event occurred on a system is critical when conducting forensic analysis and investigating system events. Sources outside the configured acceptable allowance (drift) may be inaccurate.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-004923</ident><ident system="http://cyber.mil/cci">CCI-001891</ident><fixtext fixref="F-61608r925815_fix">The chrony package can be installed with the following command:
+If "net.core.bpf_jit_harden" is not equal to "2" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-257943"><title>SRG-OS-000355-GPOS-00143</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257943r1045001_rule" weight="10.0" severity="medium"><version>RHEL-09-252010</version><title>RHEL 9 must have the chrony package installed.</title><description>&lt;VulnDiscussion&gt;Inaccurate time stamps make it more difficult to correlate events and can lead to an inaccurate analysis. Determining the correct time a particular event occurred on a system is critical when conducting forensic analysis and investigating system events. Sources outside the configured acceptable allowance (drift) may be inaccurate.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-004923</ident><ident system="http://cyber.mil/cci">CCI-001891</ident><fixtext fixref="F-61608r925815_fix">The chrony package can be installed with the following command:
  
 $ sudo dnf install chrony</fixtext><fix id="F-61608r925815_fix" /><check system="C-61684r1045000_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify that RHEL 9 has the chrony package installed with the following command:
 
@@ -2522,7 +2405,7 @@ $ sudo rm /[path]/[to]/[file]/.shosts</fixtext><fix id="F-61621r925854_fix" /><c
 
 $ sudo find / -name .shosts
 
-If a ".shosts" file is found, this is a finding.</check-content></check></Rule></Group><Group id="V-257957"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257957r1106317_rule" weight="10.0" severity="medium"><version>RHEL-09-253010</version><title>RHEL 9 must be configured to use TCP syncookies.</title><description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
+If a ".shosts" file is found, this is a finding.</check-content></check></Rule></Group><Group id="V-257957"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257957r1155618_rule" weight="10.0" severity="medium"><version>RHEL-09-253010</version><title>RHEL 9 must be configured to use TCP syncookies.</title><description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
 
 This requirement generally applies to the design of an information technology product, but it can also apply to the configuration of particular information system components that are, or use, such products. This can be verified by acceptance/validation processes in DOD or other government agencies.
 
@@ -2530,7 +2413,7 @@ There may be shared resources with configurable protections (e.g., files in stor
 
 Restricting access to the kernel message buffer limits access to only root. This prevents attackers from gaining additional system information as a nonprivileged user.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -2539,127 +2422,79 @@ The sysctl --system command will load settings from all system configuration fil
 /lib/sysctl.d/*.conf
 /etc/sysctl.conf
 
-Satisfies: SRG-OS-000480-GPOS-00227, SRG-OS-000420-GPOS-00186, SRG-OS-000142-GPOS-00071&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001095</ident><ident system="http://cyber.mil/cci">CCI-002385</ident><fixtext fixref="F-61622r1101958_fix">Configure RHEL 9 to use TCP syncookies.
+Satisfies: SRG-OS-000480-GPOS-00227, SRG-OS-000420-GPOS-00186, SRG-OS-000142-GPOS-00071&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001095</ident><ident system="http://cyber.mil/cci">CCI-002385</ident><fixtext fixref="F-61622r1155617_fix">Configure RHEL 9 to use TCP syncookies.
 
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+Create a configuration file if it does not already exist:
 
-net.ipv4.tcp_syncookies = 1
-
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+$ sudo vi /etc/sysctl.d/99-ipv4_tcp_syncookies.conf
 
-Load settings from all system configuration files with the following command:
+Add the following line to the file:
+net.ipv4.tcp_syncookies = 1
 
-$ sudo sysctl --system</fixtext><fix id="F-61622r1101958_fix" /><check system="C-61698r1106316_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is configured to use IPv4 TCP syncookies.
+Reload settings from all system configuration files with the following command:
 
-Determine if syncookies are used with the following command:
+$ sudo sysctl --system</fixtext><fix id="F-61622r1155617_fix" /><check system="C-61698r1155616_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is configured to use IPv4 TCP syncookies.
 
-Check the status of TCP syncookies.
+Check the value of all "tcp_syncookies" variables with the following command:
 
 $ sudo sysctl net.ipv4.tcp_syncookies
-
 net.ipv4.tcp_syncookies = 1
 
-Check that the configuration files are present to enable this kernel parameter.
-
-$ sudo grep -r kernel.dmesg_restrict /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf:net.ipv4.tcp_syncookies = 1
+If the network parameter "ipv4.tcp_syncookies" is not equal to "1" or nothing is returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257958"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257958r1155721_rule" weight="10.0" severity="medium"><version>RHEL-09-253015</version><title>RHEL 9 must ignore Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirect messages.</title><description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
 
-If "net.ipv4.tcp_syncookies" is not set to "1", is missing, or commented out, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257958"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257958r1106319_rule" weight="10.0" severity="medium"><version>RHEL-09-253015</version><title>RHEL 9 must ignore Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirect messages.</title><description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
-
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61623r1101988_fix">Configure RHEL 9 to ignore IPv4 ICMP redirect messages.
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61623r1155720_fix">Configure RHEL 9 to ignore IPv4 ICMP redirect messages.
 
-Add or edit the following line in a system configuration file, in the "/etc/sysctl.d/" directory:
+Create a configuration file if it does not already exist:
 
-net.ipv4.conf.all.accept_redirects = 0
+$ sudo vi /etc/sysctl.d/99-ipv4_accept_redirects.conf
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Add the following line to the file:
+net.ipv4.conf.all.accept_redirects = 0
 
-Load settings from all system configuration files with the following command:
+Reload settings from all system configuration files with the following command:
 
-$ sudo sysctl --system</fixtext><fix id="F-61623r1101988_fix" /><check system="C-61699r1106318_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 ignores IPv4 ICMP redirect messages.
+$ sudo sysctl --system</fixtext><fix id="F-61623r1155720_fix" /><check system="C-61699r1155719_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 will not accept IPv4 ICMP redirect messages.
 
-Check the value of the "accept_redirects" variables with the following command:
+Check the value of all "net.ipv4.conf.all.accept_redirects" variables with the following command:
 
 $ sudo sysctl net.ipv4.conf.all.accept_redirects
-
 net.ipv4.conf.all.accept_redirects = 0
 
-If the returned line does not have a value of "0", a line is not returned, or the line is commented out, this is a finding.
-
-Check that the configuration files are present to enable this network parameter.
+If "net.ipv4.conf.all.accept_redirects" is not set to "0" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-257959"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257959r1155724_rule" weight="10.0" severity="medium"><version>RHEL-09-253020</version><title>RHEL 9 must not forward Internet Protocol version 4 (IPv4) source-routed packets.</title><description>&lt;VulnDiscussion&gt;Source-routed packets allow the source of the packet to suggest that routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when forwarding is enabled and the system is functioning as a router.
 
-$ sudo grep -r net.ipv4.conf.all.accept_redirects /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf: net.ipv4.conf.all.accept_redirects = 0
-
-If "net.ipv4.conf.all.accept_redirects" is not set to "0", is missing, or commented out, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257959"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257959r1102024_rule" weight="10.0" severity="medium"><version>RHEL-09-253020</version><title>RHEL 9 must not forward Internet Protocol version 4 (IPv4) source-routed packets.</title><description>&lt;VulnDiscussion&gt;Source-routed packets allow the source of the packet to suggest that routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when forwarding is enabled and the system is functioning as a router.
-
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of which of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61624r1102023_fix">Configure RHEL 9 to not forward IPv4 source-routed packets.
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61624r1155723_fix">Configure RHEL 9 to ignore IPv4 source-routed packets.
 
-Add or edit the following line in a system configuration file, in the "/etc/sysctl.d/" directory:
+Create a configuration file if it does not already exist:
 
-net.ipv4.conf.all.accept_source_route=0
+$ sudo vi /etc/sysctl.d/99-ipv4_accept_source.conf
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Add the following line to the file:
+net.ipv4.conf.all.accept_source_route = 0
 
-Load settings from all system configuration files with the following command:
+Reload settings from all system configuration files with the following command:
 
-$ sudo sysctl --system</fixtext><fix id="F-61624r1102023_fix" /><check system="C-61700r1102022_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 does not accept IPv4 source-routed packets.
+$ sudo sysctl --system</fixtext><fix id="F-61624r1155723_fix" /><check system="C-61700r1155722_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 will not accept IPv4 source-routed packets.
 
-Check the value of the accept source route variable with the following command:
+Check the value of the "accept_source_route" variable with the following command:
 
 $ sudo sysctl net.ipv4.conf.all.accept_source_route
-
 net.ipv4.conf.all.accept_source_route = 0
 
-If the returned line does not have a value of "0", a line is not returned, or the line is commented out, this is a finding.
-
-Check that the configuration files are present to enable this network parameter.
-
-$ sudo grep -r net.ipv4.conf.all.accept_source_route /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf: net.ipv4.conf.all.accept_source_route = 0
-
-If "net.ipv4.conf.all.accept_source_route" is not set to "0", is missing or commented out, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257960"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257960r1106321_rule" weight="10.0" severity="medium"><version>RHEL-09-253025</version><title>RHEL 9 must log IPv4 packets with impossible addresses.</title><description>&lt;VulnDiscussion&gt;The presence of "martian" packets (which have impossible addresses) as well as spoofed packets, source-routed packets, and redirects could be a sign of nefarious network activity. Logging these packets enables this activity to be detected.
+If "net.ipv4.conf.all.accept_source_route" is not set to "0" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-257960"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257960r1155727_rule" weight="10.0" severity="medium"><version>RHEL-09-253025</version><title>RHEL 9 must log IPv4 packets with impossible addresses.</title><description>&lt;VulnDiscussion&gt;The presence of "martian" packets (which have impossible addresses) as well as spoofed packets, source-routed packets, and redirects could be a sign of nefarious network activity. Logging these packets enables this activity to be detected.
 
 Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
 
@@ -2669,40 +2504,32 @@ There may be shared resources with configurable protections (e.g., files in stor
 
 Restricting access to the kernel message buffer limits access to only root. This prevents attackers from gaining additional system information as a nonprivileged user.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61625r1106320_fix">Configure RHEL 9 to log martian packets on IPv4 interfaces.
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61625r1155726_fix">Configure RHEL 9 to log martian packets on IPv4 interfaces.
+
+Create a configuration file if it does not already exist:
 
-Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
+$ sudo vi /etc/sysctl.d/99-ipv4_log_martians.conf
 
+Add the following line to the file:
 net.ipv4.conf.all.log_martians=1
 
-Load settings from all system configuration files with the following command:
+Reload settings from all system configuration files with the following command:
 
-$ sudo sysctl --system</fixtext><fix id="F-61625r1106320_fix" /><check system="C-61701r1102004_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 logs IPv4 martian packets.
+$ sudo sysctl --system</fixtext><fix id="F-61625r1155726_fix" /><check system="C-61701r1155725_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 logs IPv4 martian packets.
 
-Check the value of the accept source route variable with the following command:
+Check the value of the "log_martians" variable with the following command:
 
 $ sudo sysctl net.ipv4.conf.all.log_martians
-
 net.ipv4.conf.all.log_martians = 1
 
-If the returned line does not have a value of "1", a line is not returned, or the line is commented out, this is a finding.
-
-Check that the configuration files are present to enable this network parameter.
-
-$ sudo grep -r net.ipv4.conf.all.log_martians /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf:net.ipv4.conf.all.log_martians = 1
-
-If "net.ipv4.conf.all.log_martians" is not set to "1" or is missing, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257961"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257961r1106323_rule" weight="10.0" severity="medium"><version>RHEL-09-253030</version><title>RHEL 9 must log IPv4 packets with impossible addresses by default.</title><description>&lt;VulnDiscussion&gt;The presence of "martian" packets (which have impossible addresses) as well as spoofed packets, source-routed packets, and redirects could be a sign of nefarious network activity. Logging these packets enables this activity to be detected.
+If "net.ipv4.conf.all.log_martians" is not set to "1" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-257961"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257961r1155730_rule" weight="10.0" severity="medium"><version>RHEL-09-253030</version><title>RHEL 9 must log IPv4 packets with impossible addresses by default.</title><description>&lt;VulnDiscussion&gt;The presence of "martian" packets (which have impossible addresses) as well as spoofed packets, source-routed packets, and redirects could be a sign of nefarious network activity. Logging these packets enables this activity to be detected.
 
 Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
 
@@ -2712,167 +2539,115 @@ There may be shared resources with configurable protections (e.g., files in stor
 
 Restricting access to the kernel message buffer limits access to only root. This prevents attackers from gaining additional system information as a nonprivileged user.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61626r1106322_fix">Configure RHEL 9 to log martian packets on IPv4 interfaces by default.
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61626r1155729_fix">Configure RHEL 9 to log martian packets on IPv4 interfaces by default.
 
-Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
+Create a configuration file if it does not already exist:
 
-net.ipv4.conf.default.log_martians = 1
+$ sudo vi /etc/sysctl.d/99-ipv4_log_martians.conf
 
-Load settings from all system configuration files with the following command:
+Add the following line to the file:
+net.ipv4.conf.default.log_martians=1
 
-$ sudo sysctl --system</fixtext><fix id="F-61626r1106322_fix" /><check system="C-61702r1102001_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 logs IPv4 martian packets by default.
+Reload settings from all system configuration files with the following command:
 
-Check the value of the accept source route variable with the following command:
+$ sudo sysctl --system</fixtext><fix id="F-61626r1155729_fix" /><check system="C-61702r1155728_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 logs IPv4 martian packets by default.
 
-$ sudo sysctl net.ipv4.conf.default.log_martians
+Check the value of the "default.log_martians" variable with the following command:
 
+$ sudo sysctl net.ipv4.conf.default.log_martians
 net.ipv4.conf.default.log_martians = 1
 
-If the returned line does not have a value of "1", a line is not returned, or the line is commented out, this is a finding.
-
-Check that the configuration files are present to enable this network parameter.
-
-$ sudo grep -r net.ipv4.conf.default.log_martians /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
+If "net.ipv4.conf.default.log_martians" is not set to "1" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-257962"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257962r1155733_rule" weight="10.0" severity="medium"><version>RHEL-09-253035</version><title>RHEL 9 must use reverse path filtering on all IPv4 interfaces.</title><description>&lt;VulnDiscussion&gt;Enabling reverse path filtering drops packets with source addresses that should not have been able to be received on the interface on which they were received. It must not be used on systems that are routers for complicated networks, but is helpful for end hosts and routers serving small networks.
 
-/etc/sysctl.d/99-sysctl.conf:net.ipv4.conf.default.log_martians = 1
-
-If "net.ipv4.conf.default.log_martians" is not set to "1" or is missing, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257962"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257962r1106437_rule" weight="10.0" severity="medium"><version>RHEL-09-253035</version><title>RHEL 9 must use reverse path filtering on all IPv4 interfaces.</title><description>&lt;VulnDiscussion&gt;Enabling reverse path filtering drops packets with source addresses that should not have been able to be received on the interface on which they were received. It must not be used on systems that are routers for complicated networks, but is helpful for end hosts and routers serving small networks.
-
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61627r1106324_fix">Configure RHEL 9 to use reverse path filtering on all IPv4 interfaces by adding the following line to a file in the "/etc/sysctl.d" directory:
-
-net.ipv4.conf.all.rp_filter = 1
-
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
-
-The system configuration files must be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61627r1155732_fix">Configure RHEL 9 to use reverse path filtering on all IPv4 interfaces.
 
-$ sudo sysctl --system</fixtext><fix id="F-61627r1106324_fix" /><check system="C-61703r1106436_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 uses reverse path filtering on all IPv4 interfaces with the following commands:
+Create a configuration file if it does not already exist:
 
-$ sudo sysctl net.ipv4.conf.all.rp_filter
+$ sudo vi /etc/sysctl.d/99-ipv4_rp_filter.conf
 
+Add the following line to the file:
 net.ipv4.conf.all.rp_filter = 1
 
-If the returned line does not have a value of "1" or "2", or a line is not returned, this is a finding.
-
-Check that the configuration files are present to enable this network parameter.
+Reload settings from all system configuration files with the following command:
 
-$ sudo grep -r net.ipv4.conf.all.rp_filter /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
+$ sudo sysctl --system</fixtext><fix id="F-61627r1155732_fix" /><check system="C-61703r1155731_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 uses reverse path filtering on all IPv4 interfaces.
 
-/etc/sysctl.d/99-sysctl.conf: net.ipv4.conf.all.rp_filter = 1
+Check the value of the "rp_filter" variable with the following command:
 
-If "net.ipv4.conf.all.rp_filter" is not set to "1" or "2", is missing, or commented out, this is a finding.
+$ sudo sysctl net.ipv4.conf.all.rp_filter
+net.ipv4.conf.all.rp_filter = 1
 
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257963"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257963r1106328_rule" weight="10.0" severity="medium"><version>RHEL-09-253040</version><title>RHEL 9 must prevent IPv4 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</title><description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
+If "net.ipv4.conf.all.rp_filter" is not set to "1" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-257963"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257963r1155736_rule" weight="10.0" severity="medium"><version>RHEL-09-253040</version><title>RHEL 9 must prevent IPv4 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</title><description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
 
 This feature of the IPv4 protocol has few legitimate uses. It must be disabled unless absolutely required.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61628r1106327_fix">Configure RHEL 9 to prevent IPv4 ICMP redirect messages from being accepted.
-
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
-
-net.ipv4.conf.default.accept_redirects = 0
-
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
-
-Load settings from all system configuration files with the following command:
-
-$ sudo sysctl --system</fixtext><fix id="F-61628r1106327_fix" /><check system="C-61704r1106326_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 will not accept IPv4 ICMP redirect messages.
+/lib/sysctl.d/*.conf
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61628r1155735_fix">Configure RHEL 9 to prevent IPv4 ICMP redirect messages from being accepted.
 
-Check the value of the default "accept_redirects" variables with the following command:
+Create a configuration file if it does not already exist:
 
-$ sudo sysctl net.ipv4.conf.default.accept_redirects
+$ sudo vi /etc/sysctl.d/99-ipv4_accept_redirects.conf
 
+Add the following line to the file:
 net.ipv4.conf.default.accept_redirects = 0
 
-If the returned line does not have a value of "0", a line is not returned, or the line is commented out, this is a finding.
+Reload settings from all system configuration files with the following command:
 
-Check that the configuration files are present to enable this network parameter.
+$ sudo sysctl --system</fixtext><fix id="F-61628r1155735_fix" /><check system="C-61704r1155734_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 will not accept IPv4 ICMP redirect messages.
 
-$ sudo grep -r net.ipv4.conf.default.accept_redirects /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
+Check the value of the default "accept_redirects" variable with the following command:
 
-/etc/sysctl.d/99-sysctl.conf: net.ipv4.conf.default.accept_redirects = 0
-
-If "net.ipv4.conf.default.accept_redirects" is not set to "0", is missing, or commented out, this is a finding.
+$ sudo sysctl net.ipv4.conf.default.accept_redirects
+net.ipv4.conf.default.accept_redirects = 0
 
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257964"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257964r1106438_rule" weight="10.0" severity="medium"><version>RHEL-09-253045</version><title>RHEL 9 must not forward IPv4 source-routed packets by default.</title><description>&lt;VulnDiscussion&gt;Source-routed packets allow the source of the packet to suggest routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when forwarding is enabled and the system is functioning as a router.
+If "net.ipv4.conf.default.accept_redirects" is not set to "0" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-257964"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257964r1155739_rule" weight="10.0" severity="medium"><version>RHEL-09-253045</version><title>RHEL 9 must not forward IPv4 source-routed packets by default.</title><description>&lt;VulnDiscussion&gt;Source-routed packets allow the source of the packet to suggest routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when forwarding is enabled and the system is functioning as a router.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61629r1106330_fix">Configure RHEL 9 to not forward IPv4 source-routed packets by default.
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61629r1155738_fix">Configure RHEL 9 to not forward IPv4 source-routed packets by default.
 
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+Create a configuration file if it does not already exist:
 
-net.ipv4.conf.default.accept_source_route=0
+$ sudo vi /etc/sysctl.d/99-ipv4_accept_source_route.conf
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Add the following line to the file:
+net.ipv4.conf.default.accept_source_route = 0
 
-Load settings from all system configuration files with the following command:
+Reload settings from all system configuration files with the following command:
 
-$ sudo sysctl --system</fixtext><fix id="F-61629r1106330_fix" /><check system="C-61705r1106329_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 does not accept IPv4 source-routed packets by default.
+$ sudo sysctl --system</fixtext><fix id="F-61629r1155738_fix" /><check system="C-61705r1155737_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 does not accept IPv4 source-routed packets by default.
 
-Check the value of the accept source route variable with the following command:
+Check the value of the "accept source route" variable with the following command:
 
 $ sudo sysctl net.ipv4.conf.default.accept_source_route
-
 net.ipv4.conf.default.accept_source_route = 0
 
-If the returned line does not have a value of "0", a line is not returned, or the line is commented out, this is a finding.
-
-Check that the configuration files are present to enable this network parameter.
-
-$ sudo grep -r net.ipv4.conf.default.accept_source_route /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf: net.ipv4.conf.default.accept_source_route = 0
-
-If "net.ipv4.conf.default.accept_source_route" is not set to "0", is missing, or commented out, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257965"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257965r1106333_rule" weight="10.0" severity="medium"><version>RHEL-09-253050</version><title>RHEL 9 must use a reverse-path filter for IPv4 network traffic when possible by default.</title><description>&lt;VulnDiscussion&gt;Enabling reverse path filtering drops packets with source addresses that should not have been able to be received on the interface on which they were received. It must not be used on systems that are routers for complicated networks, but is helpful for end hosts and routers serving small networks.
+If "net.ipv4.conf.default.accept_source_route" is not set to "0" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-257965"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257965r1155646_rule" weight="10.0" severity="medium"><version>RHEL-09-253050</version><title>RHEL 9 must use a reverse-path filter for IPv4 network traffic when possible by default.</title><description>&lt;VulnDiscussion&gt;Enabling reverse path filtering drops packets with source addresses that should not have been able to be received on the interface on which they were received. It must not be used on systems that are routers for complicated networks, but is helpful for end hosts and routers serving small networks.
 
 The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
@@ -2881,544 +2656,371 @@ The sysctl --system command will load settings from all system configuration fil
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61630r1106332_fix">Configure RHEL 9 to use reverse path filtering on IPv4 interfaces by default.
-
-Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
-
-net.ipv4.conf.default.rp_filter = 1
-
-Load settings from all system configuration files with the following command:
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61630r1155645_fix">Configure RHEL 9 to use reverse path filtering on IPv4 interfaces by default.
 
-$ sudo sysctl --system</fixtext><fix id="F-61630r1106332_fix" /><check system="C-61706r1102078_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 uses reverse path filtering on IPv4 interfaces with the following commands:
+Create a configuration file if it does not already exist:
 
-$ sudo sysctl net.ipv4.conf.default.rp_filter
+$ sudo vi /etc/sysctl.d/ipv4_rp_filter.conf
 
+Add the following line to the file:
 net.ipv4.conf.default.rp_filter = 1
 
-If the returned line does not have a value of "1", or a line is not returned, this is a finding.
+Reload settings from all system configuration files with the following command:
 
-Check that the configuration files are present to enable this network parameter.
+$ sudo sysctl --system</fixtext><fix id="F-61630r1155645_fix" /><check system="C-61706r1155644_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 uses reverse path filtering on IPv4 interfaces.
 
-$ sudo grep -r net.ipv4.conf.default.rp_filter /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
+Check the value of the "net.ipv4.conf.default.rp_filter" with the following command:
 
-/etc/sysctl.d/99-sysctl.conf:net.ipv4.conf.default.rp_filter = 1
-
-If "net.ipv4.conf.default.rp_filter" is not set to "1" or is missing, this is a finding.
+$ sudo sysctl net.ipv4.conf.default.rp_filter
+net.ipv4.conf.default.rp_filter = 1
 
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257966"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257966r1106440_rule" weight="10.0" severity="medium"><version>RHEL-09-253055</version><title>RHEL 9 must not respond to Internet Control Message Protocol (ICMP) echoes sent to a broadcast address.</title><description>&lt;VulnDiscussion&gt;Responding to broadcast (ICMP) echoes facilitates network mapping and provides a vector for amplification attacks.
+If the returned line does not have a value of "1", or a line is not returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257966"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257966r1155742_rule" weight="10.0" severity="medium"><version>RHEL-09-253055</version><title>RHEL 9 must not respond to Internet Control Message Protocol (ICMP) echoes sent to a broadcast address.</title><description>&lt;VulnDiscussion&gt;Responding to broadcast (ICMP) echoes facilitates network mapping and provides a vector for amplification attacks.
 
 Ignoring ICMP echo requests (pings) sent to broadcast or multicast addresses makes the system slightly more difficult to enumerate on the network.
 
 There are notable differences between Internet Protocol version 4 (IPv4) and Internet Protocol version 6 (IPv6). IPv6 does not implement the same method of broadcast as IPv4. Instead, IPv6 uses multicast addressing to the all-hosts multicast group. Refer to RFC4294 for an explanation of "IPv6 Node Requirements", which resulted in this difference between IPv4 and IPv6.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61631r1106334_fix">Configure RHEL 9 to not respond to IPv4 ICMP echoes sent to a broadcast address.
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61631r1155741_fix">Configure RHEL 9 to ignore IPv4 ICMP echoes sent to a broadcast address.
 
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+Create a configuration file if it does not already exist:
 
-net.ipv4.icmp_echo_ignore_broadcasts=1
+$ sudo vi /etc/sysctl.d/ipv4_icmp_echo_ignore_broadcasts.conf
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Add the following line to the file:
+net.ipv4.icmp_echo_ignore_broadcasts = 1
 
-Load settings from all system configuration files with the following command:
+Reload settings from all system configuration files with the following command:
 
-$ sudo sysctl --system</fixtext><fix id="F-61631r1106334_fix" /><check system="C-61707r1106439_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 does not respond to ICMP echoes sent to a broadcast address.
+$ sudo sysctl --system</fixtext><fix id="F-61631r1155741_fix" /><check system="C-61707r1155740_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 ignores ICMP echoes sent to a broadcast address.
 
 Check the value of the "icmp_echo_ignore_broadcasts" variable with the following command:
 
 $ sudo sysctl net.ipv4.icmp_echo_ignore_broadcasts
-
 net.ipv4.icmp_echo_ignore_broadcasts = 1
 
-If the returned line does not have a value of "1", a line is not returned, or the retuned line is commented out, this is a finding.
-
-Check that the configuration files are present to enable this network parameter.
+If "net.ipv4.icmp_echo_ignore_broadcasts" is not set to "1" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-257967"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257967r1155745_rule" weight="10.0" severity="medium"><version>RHEL-09-253060</version><title>RHEL 9 must limit the number of bogus Internet Control Message Protocol (ICMP) response errors logs.</title><description>&lt;VulnDiscussion&gt;Some routers will send responses to broadcast frames that violate RFC-1122, which fills up a log file system with many useless error messages. An attacker may take advantage of this and attempt to flood the logs with bogus error logs. Ignoring bogus ICMP error responses reduces log size, although some activity would not be logged.
 
-$ sudo grep -r net.ipv4.icmp_echo_ignore_broadcasts /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf: net.ipv4.icmp_echo_ignore_broadcasts = 1
-
-If "net.ipv4.icmp_echo_ignore_broadcasts" is not set to "1", is missing, or commented out, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257967"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257967r1106337_rule" weight="10.0" severity="medium"><version>RHEL-09-253060</version><title>RHEL 9 must limit the number of bogus Internet Control Message Protocol (ICMP) response errors logs.</title><description>&lt;VulnDiscussion&gt;Some routers will send responses to broadcast frames that violate RFC-1122, which fills up a log file system with many useless error messages. An attacker may take advantage of this and attempt to flood the logs with bogus error logs. Ignoring bogus ICMP error responses reduces log size, although some activity would not be logged.
-
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61632r1106336_fix">Configure RHEL 9 to not log bogus ICMP errors: 
-
-Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
-
-net.ipv4.icmp_ignore_bogus_error_responses = 1
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61632r1155744_fix">Configure RHEL 9 to not log bogus ICMP errors:
 
-Load settings from all system configuration files with the following command:
-
-$ sudo sysctl --system</fixtext><fix id="F-61632r1106336_fix" /><check system="C-61708r1101999_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>The runtime status of the net.ipv4.icmp_ignore_bogus_error_responses kernel parameter can be queried by running the following command:
+Create a configuration file if it does not already exist:
 
-$ sudo sysctl net.ipv4.icmp_ignore_bogus_error_responses 
+$ sudo vi /etc/sysctl.d/ipv4_icmp_ignore_bogus_error_responses.conf
 
+Add the following line to the file:
 net.ipv4.icmp_ignore_bogus_error_responses = 1
 
-If "net.ipv4.icmp_ignore_bogus_error_responses" is not set to "1", this is a finding.
+Reload settings from all system configuration files with the following command:
 
-Check that the configuration files are present to enable this network parameter.
+$ sudo sysctl --system</fixtext><fix id="F-61632r1155744_fix" /><check system="C-61708r1155743_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 limits the number of bogus Internet Control Message Protocol (ICMP) response errors logs.
 
-$ sudo grep -r net.ipv4.icmp_ignore_bogus_error_response /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
+Check the value of the "net.ipv4.icmp_ignore_bogus_error_response" variables with the following command:
 
-/etc/sysctl.d/99-sysctl.conf:net.ipv4.icmp_ignore_bogus_error_responses = 1
-
-If "net.ipv4.icmp_ignore_bogus_error_response" is not set to "1" or is missing, this is a finding.
+$ sudo sysctl net.ipv4.icmp_ignore_bogus_error_responses
+net.ipv4.icmp_ignore_bogus_error_responses = 1
 
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257968"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257968r1106339_rule" weight="10.0" severity="medium"><version>RHEL-09-253065</version><title>RHEL 9 must not send Internet Control Message Protocol (ICMP) redirects.</title><description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages contain information from the system's route table possibly revealing portions of the network topology.
+If "net.ipv4.icmp_ignore_bogus_error_response" is not set to "1" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-257968"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257968r1155748_rule" weight="10.0" severity="medium"><version>RHEL-09-253065</version><title>RHEL 9 must not send Internet Control Message Protocol (ICMP) redirects.</title><description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages contain information from the system's route table possibly revealing portions of the network topology.
 
 The ability to send ICMP redirects is only appropriate for systems acting as routers.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61633r1106338_fix">Configure RHEL 9 to not allow interfaces to perform IPv4 ICMP redirects.
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61633r1155747_fix">Configure RHEL 9 to not allow interfaces to perform IPv4 ICMP redirects.
 
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+Create a configuration file if it does not already exist:
 
-net.ipv4.conf.all.send_redirects=0
+$ sudo vi /etc/sysctl.d/ipv4_send_redirects.conf
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Add the following line to the file:
+net.ipv4.conf.all.send_redirects = 0
 
-Load settings from all system configuration files with the following command:
+Reload settings from all system configuration files with the following command:
 
-$ sudo sysctl --system</fixtext><fix id="F-61633r1106338_fix" /><check system="C-61709r1102041_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 does not IPv4 ICMP redirect messages.
+$ sudo sysctl --system</fixtext><fix id="F-61633r1155747_fix" /><check system="C-61709r1155746_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 does not IPv4 ICMP redirect messages.
 
 Check the value of the "all send_redirects" variables with the following command:
 
 $ sudo sysctl net.ipv4.conf.all.send_redirects
-
 net.ipv4.conf.all.send_redirects = 0
 
-If the returned line does not have a value of "0", or a line is not returned, this is a finding.
-
-Check that the configuration files are present to enable this network parameter.
-
-$ sudo grep -r net.ipv4.conf.all.send_redirects /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
+If "net.ipv4.conf.all.send_redirects" is not set to "0" and is not documented with the information system security officer (ISSO) as an operational requirement or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-257969"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257969r1155623_rule" weight="10.0" severity="medium"><version>RHEL-09-253070</version><title>RHEL 9 must not allow interfaces to perform Internet Control Message Protocol (ICMP) redirects by default.</title><description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages contain information from the system's route table possibly revealing portions of the network topology. The ability to send ICMP redirects is only appropriate for systems acting as routers.
 
-/etc/sysctl.d/99-sysctl.conf: net.ipv4.conf.all.send_redirects = 0
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
-If "net.ipv4.conf.all.send_redirects" is not set to "0", is missing or commented out, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257969"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257969r991589_rule" weight="10.0" severity="medium"><version>RHEL-09-253070</version><title>RHEL 9 must not allow interfaces to perform Internet Control Message Protocol (ICMP) redirects by default.</title><description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages contain information from the system's route table possibly revealing portions of the network topology.
+/etc/sysctl.d/*.conf
+/run/sysctl.d/*.conf
+/usr/local/lib/sysctl.d/*.conf
+/usr/lib/sysctl.d/*.conf
+/lib/sysctl.d/*.conf
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61634r1155622_fix">Configure RHEL 9 to not allow interfaces to perform Internet Protocol version 4 (IPv4) ICMP redirects by default.
 
-The ability to send ICMP redirects is only appropriate for systems acting as routers.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61634r925893_fix">Configure RHEL 9 to not allow interfaces to perform Internet Protocol version 4 (IPv4) ICMP redirects by default.
+Create a configuration file if it does not already exist:
 
-Add or edit the following line in a single system configuration file, in the "/etc/sysctl.d/" directory:
+$ sudo vi /etc/sysctl.d/ipv4_send_redirect.conf
 
+Add the following line to the file:
 net.ipv4.conf.default.send_redirects = 0
 
 Load settings from all system configuration files with the following command:
 
-$ sudo sysctl --system</fixtext><fix id="F-61634r925893_fix" /><check system="C-61710r942998_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 does not allow interfaces to perform Internet Protocol version 4 (IPv4) ICMP redirects by default.
-
-Check the value of the "default send_redirects" variables with the following command:
+$ sudo sysctl --system</fixtext><fix id="F-61634r1155622_fix" /><check system="C-61710r1155621_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Check the value of the "default send_redirects" variables with the following command:
 
 $ sudo sysctl net.ipv4.conf.default.send_redirects
-
 net.ipv4.conf.default.send_redirects=0
 
-If the returned line does not have a value of "0", or a line is not returned, this is a finding.
+If "net.ipv4.conf.default.send_redirects" is not set to "0" and is not documented with the information system security officer (ISSO) as an operational requirement or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-257970"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257970r1155751_rule" weight="10.0" severity="medium"><version>RHEL-09-253075</version><title>RHEL 9 must not enable IPv4 packet forwarding unless the system is a router.</title><description>&lt;VulnDiscussion&gt;Routing protocol daemons are typically used on routers to exchange network topology information with other routers. If this capability is used when not required, system network information may be unnecessarily transmitted across the network.
 
-Check that the configuration files are present to enable this network parameter.
-
-$ sudo /usr/lib/systemd/systemd-sysctl --cat-config | egrep -v '^(#|;)' | grep -F net.ipv4.conf.default.send_redirects | tail -1
-
-net.ipv4.conf.default.send_redirects = 0
-
-If "net.ipv4.conf.default.send_redirects" is not set to "0" and is not documented with the information system security officer (ISSO) as an operational requirement or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-257970"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257970r1106442_rule" weight="10.0" severity="medium"><version>RHEL-09-253075</version><title>RHEL 9 must not enable IPv4 packet forwarding unless the system is a router.</title><description>&lt;VulnDiscussion&gt;Routing protocol daemons are typically used on routers to exchange network topology information with other routers. If this capability is used when not required, system network information may be unnecessarily transmitted across the network.
-
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61635r1106341_fix">Configure RHEL 9 to not allow IPv4 packet forwarding, unless the system is a router.
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61635r1155750_fix">Configure RHEL 9 to not allow IPv4 packet forwarding, unless the system is a router.
 
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+Create a configuration file if it does not already exist:
 
-net.ipv4.conf.all.forwarding=0
+$ sudo vi /etc/sysctl.d/ipv4_forwarding.conf
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Add the following line to the file:
+net.ipv4.conf.all.forwarding = 0
 
-Load settings from all system configuration files with the following command:
+Reload settings from all system configuration files with the following command:
 
-$ sudo sysctl --system</fixtext><fix id="F-61635r1106341_fix" /><check system="C-61711r1106441_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is not performing IPv4 packet forwarding, unless the system is a router.
+$ sudo sysctl --system</fixtext><fix id="F-61635r1155750_fix" /><check system="C-61711r1155749_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is not performing IPv4 packet forwarding unless the system is a router.
 
-Check that IPv4 forwarding is disabled using the following command:
+Check that "net.ipv4.conf.all.forwarding" is disabled using the following command:
 
 $ sudo sysctl net.ipv4.conf.all.forwarding
-
 net.ipv4.conf.all.forwarding = 0
 
-If the IPv4 forwarding value is not "0" and is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.
-
-Check that the configuration files are present to enable this network parameter.
-
-$ sudo grep -r net.ipv4.conf.all.forwarding /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf: net.ipv4.conf.all.forwarding = 0
-
-If "net.ipv4.conf.all.forwarding" is not set to "0", is missing, or commented out, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257971"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257971r1106444_rule" weight="10.0" severity="medium"><version>RHEL-09-254010</version><title>RHEL 9 must not accept router advertisements on all IPv6 interfaces.</title><description>&lt;VulnDiscussion&gt;Routing protocol daemons are typically used on routers to exchange network topology information with other routers. If this software is used when not required, system network information may be unnecessarily transmitted across the network.
+If "net.ipv4.conf.all.forwarding" is not set to "0" and is not documented with the information system security officer (ISSO) as an operational requirement or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-257971"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257971r1155754_rule" weight="10.0" severity="medium"><version>RHEL-09-254010</version><title>RHEL 9 must not accept router advertisements on all IPv6 interfaces.</title><description>&lt;VulnDiscussion&gt;Routing protocol daemons are typically used on routers to exchange network topology information with other routers. If this software is used when not required, system network information may be unnecessarily transmitted across the network.
 
 An illicit router advertisement message could result in a man-in-the-middle attack.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61636r1106343_fix">Configure RHEL 9 to not accept router advertisements on all IPv6 interfaces unless the system is a router.
-
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
-
-net.ipv6.conf.all.accept_ra=0
-
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
-
-Load settings from all system configuration files with the following command:
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61636r1155753_fix">Configure RHEL 9 to not accept router advertisements on all IPv6 interfaces unless the system is a router.
 
-$ sudo sysctl --system</fixtext><fix id="F-61636r1106343_fix" /><check system="C-61712r1106443_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 does not accept router advertisements on all IPv6 interfaces, unless the system is a router.
+Create a configuration file if it does not already exist:
 
-Note: If IPv6 is disabled on the system, this requirement is not applicable.
-
-Check to see if router advertisements are not accepted by using the following command:
-
-$ sudo sysctl  net.ipv6.conf.all.accept_ra
+$ sudo vi /etc/sysctl.d/ipv4_accept_ra.conf
 
+Add the following line to the file:
 net.ipv6.conf.all.accept_ra = 0
 
-If the "accept_ra" value is not "0" and is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.
+Reload settings from all system configuration files with the following command:
 
-Check that the configuration files are present to enable this network parameter.
+$ sudo sysctl --system</fixtext><fix id="F-61636r1155753_fix" /><check system="C-61712r1155752_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 does not accept router advertisements on all IPv6 interfaces, unless the system is a router.
 
-$ sudo grep -r net.ipv6.conf.all.accept_ra /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
+Note: If IPv6 is disabled on the system, this requirement is Not Applicable.
 
-/etc/sysctl.d/99-sysctl.conf: net.ipv6.conf.all.accept_ra = 0
+Check that "net.ipv6.conf.all.accept_ra" is set to not accept router advertisements by using the following command:
 
-If "net.ipv6.conf.all.accept_ra" is not set to "0", is missing, or commented out, this is a finding.
+$ sudo sysctl net.ipv6.conf.all.accept_ra
+net.ipv6.conf.all.accept_ra = 0
 
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257972"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257972r1106446_rule" weight="10.0" severity="medium"><version>RHEL-09-254015</version><title>RHEL 9 must ignore IPv6 Internet Control Message Protocol (ICMP) redirect messages.</title><description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
+If "net.ipv6.conf.all.accept_ra" is not set to "0" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-257972"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257972r1155757_rule" weight="10.0" severity="medium"><version>RHEL-09-254015</version><title>RHEL 9 must ignore IPv6 Internet Control Message Protocol (ICMP) redirect messages.</title><description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61637r1106345_fix">Configure RHEL 9 to ignore IPv6 ICMP redirect messages.
-
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
-
-net.ipv6.conf.all.accept_redirects = 0
-
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
-
-Load settings from all system configuration files with the following command:
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61637r1155756_fix">Configure RHEL 9 to ignore IPv6 ICMP redirect messages.
 
-$ sudo sysctl --system</fixtext><fix id="F-61637r1106345_fix" /><check system="C-61713r1106445_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 ignores IPv6 ICMP redirect messages.
+Create a configuration file if it does not already exist:
 
-Note: If IPv6 is disabled on the system, this requirement is not applicable.
-
-Check the value of the "accept_redirects" variables with the following command:
-
-$ sudo sysctl net.ipv6.conf.all.accept_redirects
+$ sudo vi /etc/sysctl.d/ipv6_accept_redirects.conf
 
+Add the following line to the file:
 net.ipv6.conf.all.accept_redirects = 0
 
-If the returned line does not have a value of "0", a line is not returned, or the line is commented out, this is a finding.
+Reload settings from all system configuration files with the following command:
 
-Check that the configuration files are present to enable this network parameter.
+$ sudo sysctl --system</fixtext><fix id="F-61637r1155756_fix" /><check system="C-61713r1155755_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 ignores IPv6 ICMP redirect messages.
 
-$ sudo grep -r net.ipv6.conf.all.accept_redirects /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
+Note: If IPv6 is disabled on the system, this requirement is Not Applicable.
 
-/etc/sysctl.d/99-sysctl.conf: net.ipv6.conf.all.accept_redirects = 0
+Check the value of the "accept_redirects" variable with the following command:
 
-If "net.ipv6.conf.all.accept_redirects" is not set to "0", is missing, or commented out, this is a finding.
+$ sysctl net.ipv6.conf.all.accept_redirects
+net.ipv6.conf.all.accept_redirects = 0
 
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257973"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257973r1106448_rule" weight="10.0" severity="medium"><version>RHEL-09-254020</version><title>RHEL 9 must not forward IPv6 source-routed packets.</title><description>&lt;VulnDiscussion&gt;Source-routed packets allow the source of the packet to suggest that routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when forwarding is enabled and the system is functioning as a router.
+If "net.ipv6.conf.all.accept_redirects" is not set to "0" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-257973"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257973r1155760_rule" weight="10.0" severity="medium"><version>RHEL-09-254020</version><title>RHEL 9 must not forward IPv6 source-routed packets.</title><description>&lt;VulnDiscussion&gt;Source-routed packets allow the source of the packet to suggest that routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when forwarding is enabled and the system is functioning as a router.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61638r1106347_fix">Configure RHEL 9 to not forward IPv6 source-routed packets.
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61638r1155759_fix">Configure RHEL 9 to not accept IPv6 source-routed packets.
 
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+Create a configuration file if it does not already exist:
 
-net.ipv6.conf.all.accept_source_route=0
+$ sudo vi /etc/sysctl.d/ipv6_accept_source_route.conf
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Add the following line to the file:
+net.ipv6.conf.all.accept_source_route = 0
 
-Load settings from all system configuration files with the following command:
+Reload settings from all system configuration files with the following command:
 
-$ sudo sysctl --system</fixtext><fix id="F-61638r1106347_fix" /><check system="C-61714r1106447_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 does not accept IPv6 source-routed packets.
+$ sudo sysctl --system</fixtext><fix id="F-61638r1155759_fix" /><check system="C-61714r1155758_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 does not accept IPv6 source-routed packets.
 
-Note: If IPv6 is disabled on the system, this requirement is not applicable.
+Note: If IPv6 is disabled on the system, this requirement is Not Applicable.
 
-Check the value of the accept source route variable with the following command:
+Check the value of the "net.ipv6.conf.all.accept_source_route" variable with the following command:
 
 $ sudo sysctl net.ipv6.conf.all.accept_source_route
-
 net.ipv6.conf.all.accept_source_route = 0
 
-If the returned line does not have a value of "0", a line is not returned, or the line is commented out, this is a finding.
-
-Check that the configuration files are present to enable this network parameter.
-
-$ sudo grep -r net.ipv6.conf.all.accept_source_route /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf: net.ipv6.conf.all.accept_source_route = 0
+If "net.ipv6.conf.all.accept_source_route" is not set to "0" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-257974"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257974r1155763_rule" weight="10.0" severity="medium"><version>RHEL-09-254025</version><title>RHEL 9 must not enable IPv6 packet forwarding unless the system is a router.</title><description>&lt;VulnDiscussion&gt;Routing protocol daemons are typically used on routers to exchange network topology information with other routers. If this software is used when not required, system network information may be unnecessarily transmitted across the network.
 
-If "net.ipv6.conf.all.accept_source_route" is not set to "0", is missing, or commented out, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257974"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257974r1106450_rule" weight="10.0" severity="medium"><version>RHEL-09-254025</version><title>RHEL 9 must not enable IPv6 packet forwarding unless the system is a router.</title><description>&lt;VulnDiscussion&gt;Routing protocol daemons are typically used on routers to exchange network topology information with other routers. If this software is used when not required, system network information may be unnecessarily transmitted across the network.
-
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61639r1106349_fix">Configure RHEL 9 to not allow IPv6 packet forwarding, unless the system is a router.
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61639r1155762_fix">Configure RHEL 9 to not allow IPv6 packet forwarding, unless the system is a router.
 
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+Create a configuration file if it does not already exist:
 
-net.ipv6.conf.all.forwarding=0
+$ sudo vi /etc/sysctl.d/ipv6_forwarding.conf
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Add the following line to the file:
+net.ipv6.conf.all.forwarding = 0
 
-Load settings from all system configuration files with the following command:
+Reload settings from all system configuration files with the following command:
 
-$ sudo sysctl --system</fixtext><fix id="F-61639r1106349_fix" /><check system="C-61715r1106449_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is not performing IPv6 packet forwarding, unless the system is a router.
+$ sudo sysctl --system</fixtext><fix id="F-61639r1155762_fix" /><check system="C-61715r1155761_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is not performing IPv6 packet forwarding, unless the system is a router.
 
-Note: If IPv6 is disabled on the system, this requirement is not applicable.
+Note: If IPv6 is disabled on the system, this requirement is Not Applicable.
 
-Check that IPv6 forwarding is disabled using the following commands:
+Check the value of the "net.ipv6.conf.all.forwarding" variable with the following command:
 
 $ sudo sysctl net.ipv6.conf.all.forwarding
-
 net.ipv6.conf.all.forwarding = 0
 
-If the IPv6 forwarding value is not "0" and is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.
-
-Check that the configuration files are present to enable this network parameter.
-
-$ sudo grep -r net.ipv6.conf.all.forwarding /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf: net.ipv6.conf.all.forwarding = 0
-
-If "net.ipv6.conf.all.forwarding" is not set to "0", is missing, or commented out, this is a finding.
+If "net.ipv6.conf.all.forwarding" is not set to "0" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-257975"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257975r1155766_rule" weight="10.0" severity="medium"><version>RHEL-09-254030</version><title>RHEL 9 must not accept router advertisements on all IPv6 interfaces by default.</title><description>&lt;VulnDiscussion&gt;Routing protocol daemons are typically used on routers to exchange network topology information with other routers. If this software is used when not required, system network information may be unnecessarily transmitted across the network. An illicit router advertisement message could result in a man-in-the-middle attack.
 
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257975"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257975r1106452_rule" weight="10.0" severity="medium"><version>RHEL-09-254030</version><title>RHEL 9 must not accept router advertisements on all IPv6 interfaces by default.</title><description>&lt;VulnDiscussion&gt;Routing protocol daemons are typically used on routers to exchange network topology information with other routers. If this software is used when not required, system network information may be unnecessarily transmitted across the network. An illicit router advertisement message could result in a man-in-the-middle attack.
-
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61640r1106351_fix">Configure RHEL 9 to not accept router advertisements on all IPv6 interfaces by default unless the system is a router.
-
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
-
-net.ipv6.conf.default.accept_ra=0
-
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
-
-Load settings from all system configuration files with the following command:
-
-$ sudo sysctl --system</fixtext><fix id="F-61640r1106351_fix" /><check system="C-61716r1106451_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 does not accept router advertisements on all IPv6 interfaces by default, unless the system is a router.
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61640r1155765_fix">Configure RHEL 9 to not accept router advertisements on all IPv6 interfaces by default unless the system is a router.
 
-Note: If IPv6 is disabled on the system, this requirement is not applicable.
+Create a configuration file if it does not already exist:
 
-Check to see if router advertisements are not accepted by default by using the following command:
-
-$ sudo sysctl  net.ipv6.conf.default.accept_ra
+$ sudo vi /etc/sysctl.d/ipv6_accept_ra.conf
 
+Add the following line to the file:
 net.ipv6.conf.default.accept_ra = 0
 
-If the "accept_ra" value is not "0" and is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.
+Reload settings from all system configuration files with the following command:
 
-Check that the configuration files are present to enable this network parameter.
+$ sudo sysctl --system</fixtext><fix id="F-61640r1155765_fix" /><check system="C-61716r1155764_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 does not accept router advertisements on all IPv6 interfaces by default, unless the system is a router.
 
-$ sudo grep -r net.ipv6.conf.default.accept_ra /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
+Note: If IPv6 is disabled on the system, this requirement is Not Applicable.
 
-/etc/sysctl.d/99-sysctl.conf: net.ipv6.conf.default.accept_ra = 0
+Check the value of the "net.ipv6.conf.default.accept_ra" variable with the following command:
 
-If "net.ipv6.conf.default.accept_ra" is not set to "0", is missing, or commented out, this is a finding.
+$ sudo sysctl net.ipv6.conf.default.accept_ra
+net.ipv6.conf.default.accept_ra = 0
 
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257976"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257976r1106454_rule" weight="10.0" severity="medium"><version>RHEL-09-254035</version><title>RHEL 9 must prevent IPv6 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</title><description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
+If "net.ipv6.conf.default.accept_ra" is not set to "0" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-257976"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257976r1155769_rule" weight="10.0" severity="medium"><version>RHEL-09-254035</version><title>RHEL 9 must prevent IPv6 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</title><description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61641r1106353_fix">Configure RHEL 9 to prevent IPv6 ICMP redirect messages from being accepted.
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61641r1155768_fix">Configure RHEL 9 to prevent IPv6 ICMP redirect messages from being accepted.
 
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+Create a configuration file if it does not already exist:
 
-net.ipv6.conf.default.accept_redirects = 0
+$ sudo vi /etc/sysctl.d/ipv6_accept_redirects.conf
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Add the following line to the file:
+net.ipv6.conf.default.accept_redirects = 0
 
-Load settings from all system configuration files with the following command:
+Reload settings from all system configuration files with the following command:
 
-$ sudo sysctl --system</fixtext><fix id="F-61641r1106353_fix" /><check system="C-61717r1106453_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 will not accept IPv6 ICMP redirect messages.
+$ sudo sysctl --system</fixtext><fix id="F-61641r1155768_fix" /><check system="C-61717r1155767_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 to prevent IPv6 ICMP redirect messages.
 
-Note: If IPv6 is disabled on the system, this requirement is not applicable.
+Note: If IPv6 is disabled on the system, this requirement is Not Applicable.
 
-Check the value of the default "accept_redirects" variables with the following command:
+Check the value of the "net.ipv6.conf.default.accept_redirects" variables with the following command:
 
 $ sudo sysctl net.ipv6.conf.default.accept_redirects
-
 net.ipv6.conf.default.accept_redirects = 0
 
-If the returned line does not have a value of "0", a line is not returned, or the line is commented out, this is a finding.
-
-Check that the configuration files are present to enable this network parameter.
-
-$ sudo grep -r net.ipv6.conf.default.accept_redirects /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf: net.ipv6.conf.default.accept_redirects = 0
-
-If "net.ipv6.conf.default.accept_redirects" is not set to "0", is missing, or commented out, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257977"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257977r1106456_rule" weight="10.0" severity="medium"><version>RHEL-09-254040</version><title>RHEL 9 must not forward IPv6 source-routed packets by default.</title><description>&lt;VulnDiscussion&gt;Source-routed packets allow the source of the packet to suggest that routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when forwarding is enabled and the system is functioning as a router.
+If "net.ipv6.conf.default.accept_redirects" is not set to "0" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-257977"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257977r1155772_rule" weight="10.0" severity="medium"><version>RHEL-09-254040</version><title>RHEL 9 must not forward IPv6 source-routed packets by default.</title><description>&lt;VulnDiscussion&gt;Source-routed packets allow the source of the packet to suggest that routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when forwarding is enabled and the system is functioning as a router.
 
 Accepting source-routed packets in the IPv6 protocol has few legitimate uses. It must be disabled unless it is absolutely required.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
 /usr/local/lib/sysctl.d/*.conf
 /usr/lib/sysctl.d/*.conf
 /lib/sysctl.d/*.conf
-/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61642r1106355_fix">Configure RHEL 9 to not forward IPv6 source-routed packets by default.
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61642r1155771_fix">Configure RHEL 9 to not accept IPv6 source-routed packets by default.
 
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+Create a configuration file if it does not already exist:
 
-net.ipv6.conf.default.accept_source_route=0
+$ sudo vi /etc/sysctl.d/ipv6_accept_source_route.conf
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Add the following line to the file:
+net.ipv6.conf.default.accept_source_route = 0
 
-Load settings from all system configuration files with the following command:
+Reload settings from all system configuration files with the following command:
 
-$ sudo sysctl --system</fixtext><fix id="F-61642r1106355_fix" /><check system="C-61718r1106455_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 does not accept IPv6 source-routed packets by default.
+$ sudo sysctl --system</fixtext><fix id="F-61642r1155771_fix" /><check system="C-61718r1155770_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 does not accept IPv6 source-routed packets by default.
 
-Note: If IPv6 is disabled on the system, this requirement is not applicable.
+Note: If IPv6 is disabled on the system, this requirement is Not Applicable.
 
-Check the value of the accept source route variable with the following command:
+Check the value of the "net.ipv6.conf.default.accept_source_route" variables with the following command:
 
 $ sudo sysctl net.ipv6.conf.default.accept_source_route
-
 net.ipv6.conf.default.accept_source_route = 0
 
-If the returned line does not have a value of "0", a line is not returned, or the line is commented out, this is a finding.
-
-Check that the configuration files are present to enable this network parameter.
-
-$ sudo grep -r net.ipv6.conf.default.accept_source_route /run/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf /etc/sysctl.d/*.conf
-
-/etc/sysctl.d/99-sysctl.conf: net.ipv6.conf.default.accept_source_route = 0
-
-If "net.ipv6.conf.default.accept_source_route" is not set to "0", is missing, or commented out, this is a finding.
-
-If conflicting results are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-257978"><title>SRG-OS-000423-GPOS-00187</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257978r1045013_rule" weight="10.0" severity="medium"><version>RHEL-09-255010</version><title>All RHEL 9 networked systems must have SSH installed.</title><description>&lt;VulnDiscussion&gt;Without protection of the transmitted information, confidentiality and integrity may be compromised because unprotected communications can be intercepted and either read or altered. 
+If "net.ipv6.conf.default.accept_source_route" is not set to "0" or is missing, this is a finding.</check-content></check></Rule></Group><Group id="V-257978"><title>SRG-OS-000423-GPOS-00187</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257978r1045013_rule" weight="10.0" severity="medium"><version>RHEL-09-255010</version><title>All RHEL 9 networked systems must have SSH installed.</title><description>&lt;VulnDiscussion&gt;Without protection of the transmitted information, confidentiality and integrity may be compromised because unprotected communications can be intercepted and either read or altered. 
 
 This requirement applies to both internal and external networks and all types of information system components from which information can be transmitted (e.g., servers, mobile devices, notebook computers, printers, copiers, scanners, and facsimile machines). Communication paths outside the physical protection of a controlled boundary are exposed to the possibility of interception and modification. 
 
@@ -3716,10 +3318,10 @@ root /etc/ssh/sshd_config.d
 root /etc/ssh/sshd_config.d/50-cloud-init.conf
 root /etc/ssh/sshd_config.d/50-redhat.conf
 
-If the "/etc/ssh/sshd_config" file or "/etc/ssh/sshd_config.d" or any files in the "sshd_config.d" directory do not have an owner of "root", this is a finding.</check-content></check></Rule></Group><Group id="V-257999"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257999r1134918_rule" weight="10.0" severity="medium"><version>RHEL-09-255115</version><title>RHEL 9 SSH server configuration files' permissions must not be modified.</title><description>&lt;VulnDiscussion&gt;Service configuration files enable or disable features of their respective services, that if configured incorrectly, can lead to insecure and vulnerable configurations. Therefore, service configuration files must have correct permissions (owner, group owner, mode) to prevent unauthorized changes.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61664r1134917_fix">Run the following commands to restore the correct permissions of OpenSSH server configuration files:
+If the "/etc/ssh/sshd_config" file or "/etc/ssh/sshd_config.d" or any files in the "sshd_config.d" directory do not have an owner of "root", this is a finding.</check-content></check></Rule></Group><Group id="V-257999"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-257999r1155686_rule" weight="10.0" severity="medium"><version>RHEL-09-255115</version><title>RHEL 9 SSH server configuration files' permissions must not be modified.</title><description>&lt;VulnDiscussion&gt;Service configuration files enable or disable features of their respective services, that if configured incorrectly, can lead to insecure and vulnerable configurations. Therefore, service configuration files must have correct permissions (owner, group owner, mode) to prevent unauthorized changes.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61664r1155685_fix">Run the following commands to restore the correct permissions of OpenSSH server configuration files:
 
-$ rpm --setugids openssh-server
-$ rpm --setperms openssh-server</fixtext><fix id="F-61664r1134917_fix" /><check system="C-61740r1134916_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify the permissions of the "/etc/ssh/sshd_config" file with the following command:
+$ sudo rpm --setugids openssh-server
+$ sudo rpm --setperms openssh-server</fixtext><fix id="F-61664r1155685_fix" /><check system="C-61740r1134916_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify the permissions of the "/etc/ssh/sshd_config" file with the following command:
 
 $ sudo rpm --verify openssh-server | awk '! ($2 == "c" &amp;&amp; $1 ~ /^.\..\.\.\.\..\./) {print $0}'
 
@@ -3755,7 +3357,12 @@ $ sudo stat -c "%a %n" /etc/ssh/*.pub
 644 /etc/ssh/ssh_host_ed25519_key.pub
 644 /etc/ssh/ssh_host_rsa_key.pub
 
-If any key.pub file has a mode more permissive than "0644", this is a finding.</check-content></check></Rule></Group><Group id="V-258002"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258002r991589_rule" weight="10.0" severity="medium"><version>RHEL-09-255130</version><title>RHEL 9 SSH daemon must not allow compression or must only allow compression after successful authentication.</title><description>&lt;VulnDiscussion&gt;If compression is allowed in an SSH connection prior to authentication, vulnerabilities in the compression software could result in compromise of the system from an unauthenticated connection, potentially with root privileges.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61667r925992_fix">Configure the SSH daemon to not allow compression.
+If any key.pub file has a mode more permissive than "0644", this is a finding.</check-content></check></Rule></Group><Group id="V-258002"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258002r1155590_rule" weight="10.0" severity="medium"><version>RHEL-09-255130</version><title>RHEL 9 SSH daemon must not allow compression or must only allow compression after successful authentication.</title><description>&lt;VulnDiscussion&gt;If compression is allowed in an SSH connection prior to authentication, vulnerabilities in the compression software could result in compromise of the system from an unauthenticated connection, potentially with root privileges.
+
+Compression options are:
+no - disables compression
+delayed - allow compression only after authentication
+yes - enables compression before authentication, which can leak sensitive metadata and is not recommended&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61667r925992_fix">Configure the SSH daemon to not allow compression.
 
 Uncomment the "Compression" keyword in "/etc/ssh/sshd_config" on the system and set the value to "delayed" or "no":
 
@@ -3763,11 +3370,10 @@ Compression no
 
 The SSH service must be restarted for changes to take effect:
 
-$ sudo systemctl restart sshd.service</fixtext><fix id="F-61667r925992_fix" /><check system="C-61743r952199_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify the SSH daemon performs compression after a user successfully authenticates with the following command:
+$ sudo systemctl restart sshd.service</fixtext><fix id="F-61667r925992_fix" /><check system="C-61743r1155589_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify the RHEL 9 SSH daemon performs compression after a user successfully authenticates with the following command:
 
 $ sudo /usr/sbin/sshd -dd 2&gt;&amp;1 | awk '/filename/ {print $4}' | tr -d '\r' | tr '\n' ' ' | xargs sudo grep -iH '^\s*compression'
-
-Compression delayed
+/etc/ssh/sshd_config:Compression no
 
 If the "Compression" keyword is set to "yes", is missing, or the returned line is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-258003"><title>SRG-OS-000364-GPOS-00151</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258003r1045065_rule" weight="10.0" severity="medium"><version>RHEL-09-255135</version><title>RHEL 9 SSH daemon must not allow GSSAPI authentication.</title><description>&lt;VulnDiscussion&gt;Generic Security Service Application Program Interface (GSSAPI) authentication is used to provide additional authentication mechanisms to applications. Allowing GSSAPI authentication through SSH exposes the system's GSSAPI to remote hosts, increasing the attack surface of the system.
 
@@ -4009,7 +3615,7 @@ $ gsettings get org.gnome.desktop.media-handling autorun-never
 
 true
 
-If "autorun-never" is set to "false", and is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-258017"><title>SRG-OS-000114-GPOS-00059</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258017r1045088_rule" weight="10.0" severity="medium"><version>RHEL-09-271035</version><title>RHEL 9 must prevent a user from overriding the disabling of the graphical user interface autorun function.</title><description>&lt;VulnDiscussion&gt;Techniques used to address this include protocols using nonces (e.g., numbers generated for a specific one-time use) or challenges (e.g., TLS, WS_Security). Additional techniques include time-synchronous or challenge-response one-time authenticators.
+If "autorun-never" is set to "false", and is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-258017"><title>SRG-OS-000114-GPOS-00059</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258017r1155688_rule" weight="10.0" severity="medium"><version>RHEL-09-271035</version><title>RHEL 9 must prevent a user from overriding the disabling of the graphical user interface autorun function.</title><description>&lt;VulnDiscussion&gt;Techniques used to address this include protocols using nonces (e.g., numbers generated for a specific one-time use) or challenges (e.g., TLS, WS_Security). Additional techniques include time-synchronous or challenge-response one-time authenticators.
 
 Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163, SRG-OS-000480-GPOS-00227&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000778</ident><ident system="http://cyber.mil/cci">CCI-001958</ident><fixtext fixref="F-61682r926037_fix">Configure the GNOME desktop to not allow a user to change the setting that disables autorun on removable media.
 
@@ -4019,11 +3625,11 @@ Add the following line to "/etc/dconf/db/local.d/locks/00-security-settings-lock
 
 Then update the dconf system databases:
 
-$ sudo dconf update</fixtext><fix id="F-61682r926037_fix" /><check system="C-61758r1045087_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Note: This requirement assumes the use of the RHEL 9 default graphical user interface, the GNOME desktop environment. If the system does not have any graphical user interface installed, this requirement is Not Applicable.
+$ sudo dconf update</fixtext><fix id="F-61682r926037_fix" /><check system="C-61758r1155687_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Note: This requirement assumes the use of the RHEL 9 default graphical user interface, the GNOME desktop environment. If the system does not have any graphical user interface installed, this requirement is Not Applicable.
 
 Verify RHEL 9 disables ability of the user to override the graphical user interface autorun setting.
 
-Determine which profile the system database is using with the following command:
+Check that the autorun setting is set to prevent user modification with the following command:
 
 $ gsettings writable org.gnome.desktop.media-handling autorun-never
  
@@ -4144,31 +3750,31 @@ $ gsettings writable org.gnome.desktop.screensaver lock-enabled
  
 false
  
-If "lock-enabled" is writable and the result is "true", this is a finding.</check-content></check></Rule></Group><Group id="V-258023"><title>SRG-OS-000029-GPOS-00010</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258023r958402_rule" weight="10.0" severity="medium"><version>RHEL-09-271065</version><title>RHEL 9 must automatically lock graphical user sessions after 15 minutes of inactivity.</title><description>&lt;VulnDiscussion&gt;A session time-out lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not logout because of the temporary nature of the absence. Rather than relying on the user to manually lock their operating system session prior to vacating the vicinity, the GNOME desktop can be configured to identify when a user's session has idled and take action to initiate a session lock.
+If "lock-enabled" is writable and the result is "true", this is a finding.</check-content></check></Rule></Group><Group id="V-258023"><title>SRG-OS-000029-GPOS-00010</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258023r1155656_rule" weight="10.0" severity="medium"><version>RHEL-09-271065</version><title>RHEL 9 must automatically lock graphical user sessions after 10 minutes of inactivity.</title><description>&lt;VulnDiscussion&gt;A session time-out lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not logout because of the temporary nature of the absence. Rather than relying on the user to manually lock their operating system session prior to vacating the vicinity, the GNOME desktop can be configured to identify when a user's session has idled and take action to initiate a session lock.
 
-Satisfies: SRG-OS-000029-GPOS-00010, SRG-OS-000031-GPOS-00012&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000057</ident><ident system="http://cyber.mil/cci">CCI-000060</ident><fixtext fixref="F-61688r926055_fix">Configure RHEL 9 to initiate a screensaver after a 15-minute period of inactivity for graphical user interfaces.
+Satisfies: SRG-OS-000029-GPOS-00010, SRG-OS-000031-GPOS-00012&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000057</ident><ident system="http://cyber.mil/cci">CCI-000060</ident><fixtext fixref="F-61688r1155655_fix">Configure RHEL 9 to initiate a screensaver after a 10-minute period of inactivity for graphical user interfaces.
 
-Create a database to contain the system-wide screensaver settings (if it does not already exist) with the following command:
+Create a database to contain the systemwide screensaver settings (if it does not already exist) with the following command:
 
 $ sudo touch /etc/dconf/db/local.d/00-screensaver
 
 Edit /etc/dconf/db/local.d/00-screensaver and add or update the following lines:
 
 [org/gnome/desktop/session]
-# Set the lock time out to 900 seconds before the session is considered idle
-idle-delay=uint32 900
+# Set the lock time out to 600 seconds before the session is considered idle
+idle-delay=uint32 600
 
 Update the system databases:
 
-$ sudo dconf update</fixtext><fix id="F-61688r926055_fix" /><check system="C-61764r926054_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 initiates a session lock after a 15-minute period of inactivity for graphical user interfaces with the following command:
+$ sudo dconf update</fixtext><fix id="F-61688r1155655_fix" /><check system="C-61764r1155654_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 initiates a session lock after a 10-minute period of inactivity for graphical user interfaces with the following command:
 
 Note: This requirement assumes the use of the RHEL 9 default graphical user interface, the GNOME desktop environment. If the system does not have any graphical user interface installed, this requirement is Not Applicable.
 
 $ sudo gsettings get org.gnome.desktop.session idle-delay
 
-uint32 900
+uint32 600
 
-If "idle-delay" is set to "0" or a value greater than "900", this is a finding.</check-content></check></Rule></Group><Group id="V-258024"><title>SRG-OS-000029-GPOS-00010</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258024r1045100_rule" weight="10.0" severity="medium"><version>RHEL-09-271070</version><title>RHEL 9 must prevent a user from overriding the session idle-delay setting for the graphical user interface.</title><description>&lt;VulnDiscussion&gt;A session time-out lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not logout because of the temporary nature of the absence. Rather than relying on the user to manually lock their operating system session prior to vacating the vicinity, the GNOME desktop can be configured to identify when a user's session has idled and take action to initiate the session lock. As such, users should not be allowed to change session settings.
+If "idle-delay" is set to "0" or a value greater than "600", this is a finding.</check-content></check></Rule></Group><Group id="V-258024"><title>SRG-OS-000029-GPOS-00010</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258024r1045100_rule" weight="10.0" severity="medium"><version>RHEL-09-271070</version><title>RHEL 9 must prevent a user from overriding the session idle-delay setting for the graphical user interface.</title><description>&lt;VulnDiscussion&gt;A session time-out lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not logout because of the temporary nature of the absence. Rather than relying on the user to manually lock their operating system session prior to vacating the vicinity, the GNOME desktop can be configured to identify when a user's session has idled and take action to initiate the session lock. As such, users should not be allowed to change session settings.
 
 Satisfies: SRG-OS-000029-GPOS-00010, SRG-OS-000031-GPOS-00012&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000057</ident><ident system="http://cyber.mil/cci">CCI-000060</ident><fixtext fixref="F-61689r1045099_fix">Configure RHEL 9 to prevent a user from overriding settings for graphical user interfaces.
 
@@ -4621,22 +4227,25 @@ djohnson:x:1002:1002:djohnson:/home/djohnson:/bin/bash
 
 Inspect the output and verify that all interactive users (normally users with a user identifier (UID) greater that 1000) have a home directory defined.
 
-If users home directory is not defined, this is a finding.</check-content></check></Rule></Group><Group id="V-258052"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258052r991589_rule" weight="10.0" severity="medium"><version>RHEL-09-411065</version><title>All RHEL 9 local interactive user home directories defined in the /etc/passwd file must exist.</title><description>&lt;VulnDiscussion&gt;If a local interactive user has a home directory defined that does not exist, the user may be given access to the / directory as the current working directory upon logon. This could create a denial of service because the user would not be able to access their logon configuration files, and it may give them visibility to system files they normally would not be able to access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61717r926142_fix">Create home directories to all local interactive users that currently do not have a home directory assigned. Use the following commands to create the user home directory assigned in "/etc/ passwd":
+If users home directory is not defined, this is a finding.</check-content></check></Rule></Group><Group id="V-258052"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258052r1155588_rule" weight="10.0" severity="medium"><version>RHEL-09-411065</version><title>All RHEL 9 local interactive user home directories defined in the /etc/passwd file must exist.</title><description>&lt;VulnDiscussion&gt;If a local interactive user has a home directory defined that does not exist, the user may be given access to the / directory as the current working directory upon logon. This could create a denial of service because the user would not be able to access their logon configuration files, and it may give them visibility to system files they normally would not be able to access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61717r1155587_fix">Create home directories to all local interactive users that currently do not have a home directory assigned. Use the following commands to create the user home directory assigned in "/etc/ passwd":
 
-Note: The example will be for the user wadea, who has a home directory of "/home/wadea", a user identifier (UID) of "wadea", and a Group Identifier (GID) of "users assigned" in "/etc/passwd".
+Note: The example will be for the user wadea, who has a home directory of "/home/wadea", a user identifier (UID) of "wadea", and a group identifier (GID) of "users assigned" in "/etc/passwd".
 
 $ sudo mkdir /home/wadea 
 $ sudo chown wadea /home/wadea
 $ sudo chgrp users /home/wadea
-$ sudo chmod 0750 /home/wadea</fixtext><fix id="F-61717r926142_fix" /><check system="C-61793r926141_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify the assigned home directories of all interactive users on the system exist with the following command:
+$ sudo chmod 0750 /home/wadea</fixtext><fix id="F-61717r1155587_fix" /><check system="C-61793r1155586_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify the assigned home directories of all interactive users on the system exist with the following command:
 
 $ sudo pwck -r 
 
-user 'mailnull': directory 'var/spool/mqueue' does not exist
+The output should not return any interactive (human) users.
+
+Ask the system administrator (SA) if any users found without home directories are local interactive users. 
+If the SA is unable to provide a response, check for users with a user identifier (UID) of 1000 or greater with the following command:
 
-The output should not return any interactive users.
+$ awk -F: '($3&gt;=1000)&amp;&amp;($1!="nobody"){print $1 ":" $3}' /etc/passwd
 
-If users home directory does not exist, this is a finding.</check-content></check></Rule></Group><Group id="V-258053"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258053r991589_rule" weight="10.0" severity="medium"><version>RHEL-09-411070</version><title>All RHEL 9 local interactive user home directories must be group-owned by the home directory owner's primary group.</title><description>&lt;VulnDiscussion&gt;If the Group Identifier (GID) of a local interactive users home directory is not the same as the primary GID of the user, this would allow unauthorized access to the users files, and users that share the same group may not be able to access files that they legitimately should.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61718r926145_fix">Change the group owner of a local interactive user's home directory to the group found in "/etc/passwd". To change the group owner of a local interactive user's home directory, use the following command:
+If any interactive users do not have a home directory assigned, this is a finding.</check-content></check></Rule></Group><Group id="V-258053"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258053r991589_rule" weight="10.0" severity="medium"><version>RHEL-09-411070</version><title>All RHEL 9 local interactive user home directories must be group-owned by the home directory owner's primary group.</title><description>&lt;VulnDiscussion&gt;If the Group Identifier (GID) of a local interactive users home directory is not the same as the primary GID of the user, this would allow unauthorized access to the users files, and users that share the same group may not be able to access files that they legitimately should.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61718r926145_fix">Change the group owner of a local interactive user's home directory to the group found in "/etc/passwd". To change the group owner of a local interactive user's home directory, use the following command:
 
 Note: The example will be for the user "wadea", who has a home directory of "/home/wadea", and has a primary group of users.
 
@@ -4748,15 +4357,7 @@ If the "dir" option is not set to a nondefault documented tally log directory or
  
  $  cut -d : -f 3 /etc/group | uniq -d
  
-If the system has duplicate GIDs, this is a finding.</check-content></check></Rule></Group><Group id="V-258062"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258062r991589_rule" weight="10.0" severity="medium"><version>RHEL-09-411115</version><title>Local RHEL 9 initialization files must not execute world-writable programs.</title><description>&lt;VulnDiscussion&gt;If user start-up files execute world-writable programs, especially in unprotected directories, they could be maliciously modified to destroy user files or otherwise compromise the system at the user level. If the system is compromised at the user level, it is easier to elevate privileges to eventually compromise the system at the root and network level.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61727r926172_fix">Set the mode on files being executed by the local initialization files with the following command:
-
-$ sudo chmod 0755 &lt;file&gt;</fixtext><fix id="F-61727r926172_fix" /><check system="C-61803r926171_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify that local initialization files do not execute world-writable programs with the following command:
-
-Note: The example will be for a system that is configured to create user home directories in the "/home" directory.
-
-$ sudo find /home -perm -002 -type f -name ".[^.]*" -exec ls -ld {} \; 
-
-If any local initialization files are found to reference world-writable files, this is a finding.</check-content></check></Rule></Group><Group id="V-258068"><title>SRG-OS-000163-GPOS-00072</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258068r1101950_rule" weight="10.0" severity="medium"><version>RHEL-09-412035</version><title>RHEL 9 must automatically exit interactive command shell user sessions after 10 minutes of inactivity.</title><description>&lt;VulnDiscussion&gt;Terminating an idle interactive command shell user session within a short time period reduces the window of opportunity for unauthorized personnel to take control of it when left unattended in a virtual terminal or physical console.
+If the system has duplicate GIDs, this is a finding.</check-content></check></Rule></Group><Group id="V-258068"><title>SRG-OS-000163-GPOS-00072</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258068r1101950_rule" weight="10.0" severity="medium"><version>RHEL-09-412035</version><title>RHEL 9 must automatically exit interactive command shell user sessions after 10 minutes of inactivity.</title><description>&lt;VulnDiscussion&gt;Terminating an idle interactive command shell user session within a short time period reduces the window of opportunity for unauthorized personnel to take control of it when left unattended in a virtual terminal or physical console.
 
 Satisfies: SRG-OS-000163-GPOS-00072, SRG-OS-000029-GPOS-00010&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000057</ident><ident system="http://cyber.mil/cci">CCI-001133</ident><fixtext fixref="F-61733r1014871_fix">Configure RHEL 9 to exit interactive command shell user sessions after 10 minutes of inactivity.
 
@@ -4862,29 +4463,28 @@ $ grep umask /etc/profile
 
 umask 077
 
-If the value for the "umask" parameter is not "077", or the "umask" parameter is missing or is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-258076"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258076r991589_rule" weight="10.0" severity="low"><version>RHEL-09-412075</version><title>RHEL 9 must display the date and time of the last successful account logon upon logon.</title><description>&lt;VulnDiscussion&gt;Users need to be aware of activity that occurs regarding their account. Providing users with information regarding the number of unsuccessful attempts that were made to login to their account allows the user to determine if any unauthorized activity has occurred and gives them an opportunity to notify administrators.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61741r926214_fix">Configure RHEL 9 to provide users with feedback on when account accesses last occurred by setting the required configuration options in "/etc/pam.d/postlogin". 
+If the value for the "umask" parameter is not "077", or the "umask" parameter is missing or is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-258077"><title>SRG-OS-000163-GPOS-00072</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258077r1155659_rule" weight="10.0" severity="medium"><version>RHEL-09-412080</version><title>RHEL 9 must terminate idle user sessions.</title><description>&lt;VulnDiscussion&gt;Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a management session enabled on the console or console port that has been left unattended.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001133</ident><fixtext fixref="F-61742r1155658_fix">Configure RHEL 9 to log out idle sessions.
 
-Add the following line to the top of "/etc/pam.d/postlogin":
+Create the directory if necessary:
 
-session required pam_lastlog.so showfailed</fixtext><fix id="F-61741r926214_fix" /><check system="C-61817r926213_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify users are provided with feedback on when account accesses last occurred with the following command:
+$ mkdir -p /etc/systemd/logind.conf.d/
 
-$ sudo grep pam_lastlog /etc/pam.d/postlogin
+Create a *.conf file in /etc/systemd/logind.conf.d/ with the following content:
 
-session required pam_lastlog.so showfailed
+[Login]
+StopIdleSessionSec=600
+KillUserProcesses=no
 
-If "pam_lastlog" is missing from "/etc/pam.d/postlogin" file, or the silent option is present, this is a finding.</check-content></check></Rule></Group><Group id="V-258077"><title>SRG-OS-000163-GPOS-00072</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258077r1014874_rule" weight="10.0" severity="medium"><version>RHEL-09-412080</version><title>RHEL 9 must terminate idle user sessions.</title><description>&lt;VulnDiscussion&gt;Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a management session enabled on the console or console port that has been left unattended.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001133</ident><fixtext fixref="F-61742r1014873_fix">Configure RHEL 9 to log out idle sessions by editing the /etc/systemd/logind.conf file with the following line:
+Restart systemd-logind:
 
-StopIdleSessionSec=900
+$ systemctl restart systemd-logind</fixtext><fix id="F-61742r1155658_fix" /><check system="C-61818r1155657_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 logs out sessions that are idle for 10 minutes with the following command:
 
-The "logind" service must be restarted for the changes to take effect. To restart the "logind" service, run the following command:
+$ systemd-analyze cat-config systemd/logind.conf | grep StopIdleSessionSec
 
-$ sudo systemctl restart systemd-logind</fixtext><fix id="F-61742r1014873_fix" /><check system="C-61818r926216_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify that RHEL 9 logs out sessions that are idle for 15 minutes with the following command:
+#StopIdleSessionSec=infinity
+StopIdleSessionSec=600
 
-$ sudo grep -i ^StopIdleSessionSec /etc/systemd/logind.conf
-
-StopIdleSessionSec=900
-
-If "StopIdleSessionSec" is not configured to "900" seconds, this is a finding.</check-content></check></Rule></Group><Group id="V-258078"><title>SRG-OS-000445-GPOS-00199</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258078r958944_rule" weight="10.0" severity="high"><version>RHEL-09-431010</version><title>RHEL 9 must use a Linux Security Module configured to enforce limits on system services.</title><description>&lt;VulnDiscussion&gt;Without verification of the security functions, security functions may not operate correctly and the failure may go unnoticed. Security function is defined as the hardware, software, and/or firmware of the information system responsible for enforcing the system security policy and supporting the isolation of code and data on which the protection is based. Security functionality includes, but is not limited to, establishing system accounts, configuring access authorizations (i.e., permissions, privileges), setting events to be audited, and setting intrusion detection parameters.
+If "StopIdleSessionSec" is not configured to "600" seconds, this is a finding.</check-content></check></Rule></Group><Group id="V-258078"><title>SRG-OS-000445-GPOS-00199</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258078r958944_rule" weight="10.0" severity="high"><version>RHEL-09-431010</version><title>RHEL 9 must use a Linux Security Module configured to enforce limits on system services.</title><description>&lt;VulnDiscussion&gt;Without verification of the security functions, security functions may not operate correctly and the failure may go unnoticed. Security function is defined as the hardware, software, and/or firmware of the information system responsible for enforcing the system security policy and supporting the isolation of code and data on which the protection is based. Security functionality includes, but is not limited to, establishing system accounts, configuring access authorizations (i.e., permissions, privileges), setting events to be audited, and setting intrusion detection parameters.
 
 This requirement applies to operating systems performing security function verification/testing and/or systems and environments that require this functionality.
 
@@ -5048,7 +4648,7 @@ $ sudo grep -iwR 'ALL' /etc/sudoers /etc/sudoers.d/ | grep -v '#'
 
 If the either of the following entries are returned, this is a finding:
 ALL     ALL=(ALL) ALL
-ALL     ALL=(ALL:ALL) ALL</check-content></check></Rule></Group><Group id="V-258088"><title>SRG-OS-000373-GPOS-00156</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258088r1050789_rule" weight="10.0" severity="medium"><version>RHEL-09-432035</version><title>RHEL 9 must restrict the use of the "su" command.</title><description>&lt;VulnDiscussion&gt;The "su" program allows to run commands with a substitute user and group ID. It is commonly used to run commands as the root user. Limiting access to such commands is considered a good security practice.
+ALL     ALL=(ALL:ALL) ALL</check-content></check></Rule></Group><Group id="V-258088"><title>SRG-OS-000373-GPOS-00156</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258088r1155643_rule" weight="10.0" severity="medium"><version>RHEL-09-432035</version><title>RHEL 9 must restrict the use of the "su" command.</title><description>&lt;VulnDiscussion&gt;The "su" program allows to run commands with a substitute user and group ID. It is commonly used to run commands as the root user. Limiting access to such commands is considered a good security practice.
 
 Satisfies: SRG-OS-000373-GPOS-00156, SRG-OS-000312-GPOS-00123&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-004895</ident><ident system="http://cyber.mil/cci">CCI-002165</ident><ident system="http://cyber.mil/cci">CCI-002038</ident><fixtext fixref="F-61753r926250_fix">Configure RHEL 9 to require users to be in the "wheel" group to run "su" command.
 
@@ -5058,13 +4658,13 @@ In file "/etc/pam.d/su", uncomment the following line:
 
 $ sed '/^[[:space:]]*#[[:space:]]*auth[[:space:]]\+required[[:space:]]\+pam_wheel\.so[[:space:]]\+use_uid$/s/^[[:space:]]*#//' -i /etc/pam.d/su
 
-If necessary, create a "wheel" group and add administrative users to the group.</fixtext><fix id="F-61753r926250_fix" /><check system="C-61829r926249_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify that RHEL 9 requires uses to be members of the "wheel" group with the following command:
+If necessary, create a "wheel" group and add administrative users to the group.</fixtext><fix id="F-61753r926250_fix" /><check system="C-61829r1155642_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 includes users who require privilege escalation to be members of the "wheel" group with the following command:
 
-$ grep pam_wheel /etc/pam.d/su 
+$ sudo grep pam_wheel /etc/pam.d/su 
 
 auth             required        pam_wheel.so use_uid 
 
-If a line for "pam_wheel.so" does not exist, or is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-258089"><title>SRG-OS-000370-GPOS-00155</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258089r1045179_rule" weight="10.0" severity="medium"><version>RHEL-09-433010</version><title>RHEL 9 fapolicy module must be installed.</title><description>&lt;VulnDiscussion&gt;The organization must identify authorized software programs and permit execution of authorized software. The process used to identify software programs that are authorized to execute on organizational information systems is commonly referred to as allow listing.
+If a line for "pam_wheel.so" does not exist, or the line is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-258089"><title>SRG-OS-000370-GPOS-00155</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258089r1045179_rule" weight="10.0" severity="medium"><version>RHEL-09-433010</version><title>RHEL 9 fapolicy module must be installed.</title><description>&lt;VulnDiscussion&gt;The organization must identify authorized software programs and permit execution of authorized software. The process used to identify software programs that are authorized to execute on organizational information systems is commonly referred to as allow listing.
 
 Utilizing an allow list provides a configuration management method for allowing the execution of only authorized software. Using only authorized software decreases risk by limiting the number of potential vulnerabilities. Verification of allow listed software occurs prior to execution or at system startup.
 
@@ -5448,17 +5048,17 @@ $ sudo passwd -l [username]</fixtext><fix id="F-61785r926346_fix" /><check syste
 
 $ sudo awk -F: '!$2 {print $1}' /etc/shadow
 
-If the command returns any results, this is a finding.</check-content></check></Rule></Group><Group id="V-258121"><title>SRG-OS-000104-GPOS-00051</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258121r1102086_rule" weight="10.0" severity="medium"><version>RHEL-09-611160</version><title>RHEL 9 must use the common access card (CAC) smart card driver.</title><description>&lt;VulnDiscussion&gt;Smart card login provides two-factor authentication stronger than that provided by a username and password combination. Smart cards leverage public key infrastructure to provide and verify credentials. Configuring the smart card driver in use by the organization helps to prevent users from using unauthorized smart cards.
+If the command returns any results, this is a finding.</check-content></check></Rule></Group><Group id="V-258121"><title>SRG-OS-000104-GPOS-00051</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258121r1155682_rule" weight="10.0" severity="medium"><version>RHEL-09-611160</version><title>RHEL 9 must use the common access card (CAC) smart card driver.</title><description>&lt;VulnDiscussion&gt;Smart card login provides two-factor authentication stronger than that provided by a username and password combination. Smart cards leverage public key infrastructure to provide and verify credentials. Configuring the smart card driver in use by the organization helps to prevent users from using unauthorized smart cards.
 
-Satisfies: SRG-OS-000104-GPOS-00051, SRG-OS-000106-GPOS-00053, SRG-OS-000107-GPOS-00054, SRG-OS-000109-GPOS-00056, SRG-OS-000108-GPOS-00055, SRG-OS-000112-GPOS-00057, SRG-OS-000113-GPOS-00058&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000764</ident><ident system="http://cyber.mil/cci">CCI-000766</ident><ident system="http://cyber.mil/cci">CCI-000765</ident><ident system="http://cyber.mil/cci">CCI-004045</ident><ident system="http://cyber.mil/cci">CCI-001941</ident><ident system="http://cyber.mil/cci">CCI-000767</ident><ident system="http://cyber.mil/cci">CCI-000768</ident><ident system="http://cyber.mil/cci">CCI-000770</ident><ident system="http://cyber.mil/cci">CCI-001942</ident><fixtext fixref="F-61786r1045242_fix">Configure RHEL 9 to load the CAC driver.
+Satisfies: SRG-OS-000104-GPOS-00051, SRG-OS-000106-GPOS-00053, SRG-OS-000107-GPOS-00054, SRG-OS-000109-GPOS-00056, SRG-OS-000108-GPOS-00055, SRG-OS-000112-GPOS-00057, SRG-OS-000113-GPOS-00058&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000764</ident><ident system="http://cyber.mil/cci">CCI-000766</ident><ident system="http://cyber.mil/cci">CCI-000765</ident><ident system="http://cyber.mil/cci">CCI-004045</ident><ident system="http://cyber.mil/cci">CCI-001941</ident><ident system="http://cyber.mil/cci">CCI-000767</ident><ident system="http://cyber.mil/cci">CCI-000768</ident><ident system="http://cyber.mil/cci">CCI-000770</ident><ident system="http://cyber.mil/cci">CCI-001942</ident><fixtext fixref="F-61786r1155681_fix">Configure RHEL 9 to load the CAC driver.
 
-$ sudo opensc-tool --set-conf-entry app:default:card_driver:cac
+$ sudo opensc-tool --set-conf-entry app:default:card_drivers:cac
 
 Restart the pcscd service to apply the changes:
 
-$ sudo systemctl restart pcscd</fixtext><fix id="F-61786r1045242_fix" /><check system="C-61862r1102085_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify that RHEL loads the CAC driver with the following command:
+$ sudo systemctl restart pcscd</fixtext><fix id="F-61786r1155681_fix" /><check system="C-61862r1155680_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL loads the CAC driver with the following command:
 
-$ sudo opensc-tool --get-conf-entry app:default:card_drivers cac
+$ sudo opensc-tool --get-conf-entry app:default:card_drivers
 
 cac
 
@@ -5541,15 +5141,15 @@ Example output:
 
 opensc.x86_64          0.22.0-2.el9
 
-If the "opensc" package is not installed, this is a finding.</check-content></check></Rule></Group><Group id="V-258127"><title>SRG-OS-000067-GPOS-00035</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258127r1134925_rule" weight="10.0" severity="medium"><version>RHEL-09-611190</version><title>RHEL 9, for PKI-based authentication, must enforce authorized access to the corresponding private key.</title><description>&lt;VulnDiscussion&gt;If the private key is discovered, an attacker can use the key to authenticate as an authorized user and gain access to the network infrastructure.
+If the "opensc" package is not installed, this is a finding.</check-content></check></Rule></Group><Group id="V-258127"><title>SRG-OS-000067-GPOS-00035</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258127r1155648_rule" weight="10.0" severity="medium"><version>RHEL-09-611190</version><title>RHEL 9, for PKI-based authentication, must enforce authorized access to the corresponding private key.</title><description>&lt;VulnDiscussion&gt;If the private key is discovered, an attacker can use the key to authenticate as an authorized user and gain access to the network infrastructure.
 
 The cornerstone of the PKI is the private key used to encrypt or digitally sign information.
 
 If the private key is stolen, this will lead to the compromise of the authentication and nonrepudiation gained through PKI because the attacker can use the private key to digitally sign documents and pretend to be the authorized user.
 
-Both the holders of a digital certificate and the issuing authority must protect the computers, storage devices, or whatever they use to keep the private keys.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000186</ident><fixtext fixref="F-61792r926367_fix">Create a new private and public key pair that utilizes a passcode with the following command:
+Both the holders of a digital certificate and the issuing authority must protect the computers, storage devices, or whatever they use to keep the private keys.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000186</ident><fixtext fixref="F-61792r1155647_fix">Create a new private and public key pair that utilizes a passcode with the following command:
 
-$ sudo ssh-keygen -n [passphrase]</fixtext><fix id="F-61792r926367_fix" /><check system="C-61868r1134924_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Note: If the system administrator demonstrates the use of an approved alternate multifactor authentication method, this requirement is not applicable.
+$ sudo ssh-keygen -N [passphrase]</fixtext><fix id="F-61792r1155647_fix" /><check system="C-61868r1134924_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Note: If the system administrator demonstrates the use of an approved alternate multifactor authentication method, this requirement is not applicable.
 
 Verify the SSH private key files have a passcode.
 
@@ -5560,43 +5160,61 @@ $ sudo ssh-keygen -y -f /path/to/file
 The expected output is a password prompt:
  "Enter passphrase:"
 
-If the password prompt is not displayed, and the contents of the key are displayed, this is a finding.</check-content></check></Rule></Group><Group id="V-258128"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258128r1117265_rule" weight="10.0" severity="medium"><version>RHEL-09-611195</version><title>RHEL 9 must require authentication to access emergency mode.</title><description>&lt;VulnDiscussion&gt;To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DOD-approved PKIs, all DOD systems (e.g., web servers and web portals) must be properly configured to incorporate access control methods that do not rely solely on the possession of a certificate for access. Successful authentication must not automatically give an entity access to an asset or security boundary. Authorization procedures and controls must be implemented to ensure each authenticated entity also has a validated and current authorization. Authorization is the process of determining whether an entity, once authenticated, is permitted to access a specific asset. Information systems use access control policies and enforcement mechanisms to implement this requirement.
+If the password prompt is not displayed, and the contents of the key are displayed, this is a finding.</check-content></check></Rule></Group><Group id="V-258128"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258128r1155626_rule" weight="10.0" severity="medium"><version>RHEL-09-611195</version><title>RHEL 9 must require authentication to access emergency mode.</title><description>&lt;VulnDiscussion&gt;To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DOD-approved PKIs, all DOD systems (e.g., web servers and web portals) must be properly configured to incorporate access control methods that do not rely solely on the possession of a certificate for access. Successful authentication must not automatically give an entity access to an asset or security boundary. Authorization procedures and controls must be implemented to ensure each authenticated entity also has a validated and current authorization. Authorization is the process of determining whether an entity, once authenticated, is permitted to access a specific asset. Information systems use access control policies and enforcement mechanisms to implement this requirement.
+
+This requirement prevents attackers with physical access from trivially bypassing security on the machine and gaining root access. Such accesses are further prevented by configuring the bootloader password.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-61793r1155625_fix">Configure RHEL 9 to require authentication for emergency mode.
+
+Create a directory for supplementary configuration files: 
+$ sudo mkdir /etc/systemd/system/emergency.service.d/
 
-This requirement prevents attackers with physical access from trivially bypassing security on the machine and gaining root access. Such accesses are further prevented by configuring the bootloader password.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-61793r926370_fix">Configure RHEL 9 to require authentication for emergency mode.
+Copy the original file emergency.service file to the new directory with:
+$ sudo cp  /usr/lib/systemd/system/emergency.service  /etc/systemd/system/emergency.service.d/emergency.service.conf
 
-Add or modify the following line in the "/usr/lib/systemd/system/emergency.service" file:
+Open the new file:
+$ sudo vi /etc/systemd/system/emergency.service.d/emergency.service.conf
 
-ExecStart=-/usr/lib/systemd/systemd-sulogin-shell emergency</fixtext><fix id="F-61793r926370_fix" /><check system="C-61869r926369_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify that RHEL 9 requires authentication for emergency mode with the following command:
+Add or modify the following line in the new file:
+ExecStart=-/usr/lib/systemd/systemd-sulogin-shell emergency
+
+Comment out or remove the ExecStart and ExecStartPre lines in /usr/lib/systemd/system/emergency.service as they can only exist in one location.
+
+Apply changes to unit files without rebooting the system:
+$ sudo systemctl daemon-reload</fixtext><fix id="F-61793r1155625_fix" /><check system="C-61869r1155624_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 requires authentication for emergency mode with the following command:
 
 $ grep sulogin /usr/lib/systemd/system/emergency.service 
 
 ExecStart=-/usr/lib/systemd/systemd-sulogin-shell emergency
 
-If this line is not returned, or is commented out, this is a finding. If the output is different, this is a finding.</check-content></check></Rule></Group><Group id="V-258129"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258129r1117265_rule" weight="10.0" severity="medium"><version>RHEL-09-611200</version><title>RHEL 9 must require authentication to access single-user mode.</title><description>&lt;VulnDiscussion&gt;To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DOD-approved PKIs, all DOD systems (e.g., web servers and web portals) must be properly configured to incorporate access control methods that do not rely solely on the possession of a certificate for access. Successful authentication must not automatically give an entity access to an asset or security boundary. Authorization procedures and controls must be implemented to ensure each authenticated entity also has a validated and current authorization. Authorization is the process of determining whether an entity, once authenticated, is permitted to access a specific asset. Information systems use access control policies and enforcement mechanisms to implement this requirement.
+If the line is not returned from the default systemd file, use the following command to look for modifications to the emergency.service:
+
+$ grep sulogin /etc/systemd/system/emergency.service.d/*.conf 
+
+If the line is not returned from either location this is a finding.
+
+Note: The configuration setting can only be in either the default location, or in the drop in file, not both locations.</check-content></check></Rule></Group><Group id="V-258129"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258129r1155628_rule" weight="10.0" severity="medium"><version>RHEL-09-611200</version><title>RHEL 9 must require authentication to access single-user mode.</title><description>&lt;VulnDiscussion&gt;To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DOD-approved PKIs, all DOD systems (e.g., web servers and web portals) must be properly configured to incorporate access control methods that do not rely solely on the possession of a certificate for access. Successful authentication must not automatically give an entity access to an asset or security boundary. Authorization procedures and controls must be implemented to ensure each authenticated entity also has a validated and current authorization. Authorization is the process of determining whether an entity, once authenticated, is permitted to access a specific asset. Information systems use access control policies and enforcement mechanisms to implement this requirement.
 
 This requirement prevents attackers with physical access from trivially bypassing security on the machine and gaining root access. Such accesses are further prevented by configuring the bootloader password.
 
 To modify properties, such as dependencies or timeouts, of a service that is handled by a SysV initscript, do not modify the initscript itself. Instead, create a systemd drop-in configuration file for the service. Then manage this service in the same way as a normal systemd service.
 
-For example, to extend the configuration of the network service, do not modify the /etc/rc.d/init.d/network initscript file. Instead, create new directory /etc/systemd/system/network.service.d/ and a systemd drop-in file /etc/systemd/system/network.service.d/my_config.conf. Then, put the modified values into the drop-in file. Note: systemd knows the network service as network.service, which is why the created directory must be called "network.service.d".&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-61794r1102058_fix">Configure RHEL 9 to require authentication for single-user mode.
+For example, to extend the configuration of the network service, do not modify the /etc/rc.d/init.d/network initscript file. Instead, create new directory /etc/systemd/system/network.service.d/ and a systemd drop-in file /etc/systemd/system/network.service.d/my_config.conf. Then, put the modified values into the drop-in file. Note: systemd knows the network service as network.service, which is why the created directory must be called "network.service.d".&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-61794r1155627_fix">Configure RHEL 9 to require authentication for single-user mode.
 
-Create a directory for supplementary configuration files at /etc/systemd/system/rescue.service.d/
+Create a directory for supplementary configuration files: 
+$ sudo mkdir /etc/systemd/system/rescue.service.d/
 
 Copy the original file rescue.service file to the new directory with:
-
 $ sudo cp  /usr/lib/systemd/system/rescue.service  /etc/systemd/system/rescue.service.d/rescue.service.conf
 
-Add or modify the following line in the "etc/systemd/system/rescue.service.d/rescue.service.conf" file:
+Open the new file:
+$ sudo vi etc/systemd/system/rescue.service.d/rescue.service.conf
 
+Add this line to the new file:
 ExecStart=-/usr/lib/systemd/systemd-sulogin-shell rescue
 
-Apply changes to unit files without rebooting the system:
-
-$ sudo systemctl daemon-reload
-
-If the modified unit file belongs to a running service, restart the service:
+Comment out or remove the ExecStart and ExecStartPre lines in /usr/lib/systemd/system/rescue.service as they can only exist in one location.
 
-$ sudo  systemctl restart rescue.service</fixtext><fix id="F-61794r1102058_fix" /><check system="C-61870r1106457_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 requires authentication for single-user mode with the following command:
+Apply changes to unit files without rebooting the system:
+$ sudo systemctl daemon-reload</fixtext><fix id="F-61794r1155627_fix" /><check system="C-61870r1106457_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 requires authentication for single-user mode with the following command:
 
 $ grep sulogin /usr/lib/systemd/system/rescue.service 
 
@@ -5686,7 +5304,7 @@ $ sudo grep -ir offline_credentials_expiration /etc/sssd/sssd.conf /etc/sssd/con
 
 offline_credentials_expiration = 1
 
-If "offline_credentials_expiration" is not set to a value of "1", this is a finding.</check-content></check></Rule></Group><Group id="V-258134"><title>SRG-OS-000363-GPOS-00150</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258134r1101983_rule" weight="10.0" severity="medium"><version>RHEL-09-651010</version><title>RHEL 9 must have the AIDE package installed.</title><description>&lt;VulnDiscussion&gt;Without verification of the security functions, security functions may not operate correctly, and the failure may go unnoticed. Security function is defined as the hardware, software, and/or firmware of the information system responsible for enforcing the system security policy and supporting the isolation of code and data on which the protection is based. Security functionality includes, but is not limited to, establishing system accounts, configuring access authorizations (i.e., permissions, privileges), setting events to be audited, and setting intrusion detection parameters.
+If "offline_credentials_expiration" is not set to a value of "1", this is a finding.</check-content></check></Rule></Group><Group id="V-258134"><title>SRG-OS-000363-GPOS-00150</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258134r1155620_rule" weight="10.0" severity="medium"><version>RHEL-09-651010</version><title>RHEL 9 must have the AIDE package installed.</title><description>&lt;VulnDiscussion&gt;Without verification of the security functions, security functions may not operate correctly, and the failure may go unnoticed. Security function is defined as the hardware, software, and/or firmware of the information system responsible for enforcing the system security policy and supporting the isolation of code and data on which the protection is based. Security functionality includes, but is not limited to, establishing system accounts, configuring access authorizations (i.e., permissions, privileges), setting events to be audited, and setting intrusion detection parameters.
 
 Selection lines in the aide.conf file determine which files and directories AIDE will monitor for changes. They follow this format:
 
@@ -5740,21 +5358,23 @@ Example output:
 2023-06-05 10:16:08 -0600 (AIDE 0.16)
 AIDE found NO differences between database and filesystem. Looks okay!!
 
-...</fixtext><fix id="F-61799r926388_fix" /><check system="C-61875r1101982_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify the file integrity tool is configured to verify ACLs.
+...</fixtext><fix id="F-61799r926388_fix" /><check system="C-61875r1155619_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify the file integrity tool is configured to verify ACLs.
 
 Note: AIDE is highly configurable at install time. This requirement assumes the "aide.conf" file is under the "/etc" directory.
 
-If AIDE is not installed, ask the system administrator (SA) how file integrity checks are performed on the system.
+Verify AIDE is installed with the following command:
 
-Use the following command to determine if the file is in a location other than "/etc/aide/aide.conf":
+$ sudo dnf list installed aide
 
-$ sudo find / -name aide.conf
+Updating Subscription Management repositories.
+Installed Packages
+aide.x86_64                                0.16-103.el9                                @rhel-9-for-x86_64-appstream-rpms
 
-Use the following command to review the "aide.conf" file to determine if the "acl" rule has been added to the rule list being applied to the files and directories selection lists:
+Use the following command to determine if the file is in a location other than "/etc/aide/aide.conf":
 
-$ sudo cat /etc/aide.conf | more
+$ sudo find / -name aide.conf
 
-If the "acl" rule is not being used on all selection lines in the "/etc/aide.conf" file, is commented out, or ACLs are not being checked by another file integrity tool, this is a finding.</check-content></check></Rule></Group><Group id="V-258135"><title>SRG-OS-000363-GPOS-00150</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258135r1045267_rule" weight="10.0" severity="medium"><version>RHEL-09-651015</version><title>RHEL 9 must routinely check the baseline configuration for unauthorized changes and notify the system administrator when anomalies in the operation of any security functions are discovered.</title><description>&lt;VulnDiscussion&gt;Unauthorized changes to the baseline configuration could make the system vulnerable to various attacks or allow unauthorized access to the operating system. Changes to operating system configurations can have unintended side effects, some of which may be relevant to security.
+If AIDE is not installed, ask the system administrator (SA) how file integrity checks are performed on the system.</check-content></check></Rule></Group><Group id="V-258135"><title>SRG-OS-000363-GPOS-00150</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258135r1045267_rule" weight="10.0" severity="medium"><version>RHEL-09-651015</version><title>RHEL 9 must routinely check the baseline configuration for unauthorized changes and notify the system administrator when anomalies in the operation of any security functions are discovered.</title><description>&lt;VulnDiscussion&gt;Unauthorized changes to the baseline configuration could make the system vulnerable to various attacks or allow unauthorized access to the operating system. Changes to operating system configurations can have unintended side effects, some of which may be relevant to security.
 
 Detecting such changes and providing an automated response can help avoid unintended, negative consequences that could ultimately affect the security state of the operating system. The operating system's information management officer (IMO)/information system security officer (ISSO) and system administrators (SAs) must be notified via email and/or monitoring system trap when there is an unauthorized modification of a configuration item.
 
@@ -5879,11 +5499,14 @@ $ systemctl is-active rsyslog
 
 active
 
-If the rsyslog service is not active, this is a finding.</check-content></check></Rule></Group><Group id="V-258143"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258143r1134931_rule" weight="10.0" severity="medium"><version>RHEL-09-652025</version><title>RHEL 9 must be configured so that the rsyslog daemon does not accept log messages from other servers unless the server is being used for log aggregation.</title><description>&lt;VulnDiscussion&gt;Unintentionally running a rsyslog server accepting remote messages puts the system at increased risk. Malicious rsyslog messages sent to the server could exploit vulnerabilities in the server software itself, could introduce misleading information into the system's logs, or could fill the system's storage leading to a denial of service.
+If the rsyslog service is not active, this is a finding.</check-content></check></Rule></Group><Group id="V-258143"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258143r1155671_rule" weight="10.0" severity="medium"><version>RHEL-09-652025</version><title>RHEL 9 must be configured so that the rsyslog daemon does not accept log messages from other servers unless the server is being used for log aggregation.</title><description>&lt;VulnDiscussion&gt;Unintentionally running a rsyslog server accepting remote messages puts the system at increased risk. Malicious rsyslog messages sent to the server could exploit vulnerabilities in the server software itself, could introduce misleading information into the system's logs, or could fill the system's storage leading to a denial of service.
 
-If the system is intended to be a log aggregation server, its use must be documented with the information system security officer (ISSO).&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61808r1045282_fix">Configure RHEL 9 to not receive remote logs using rsyslog.
+If the system is intended to be a log aggregation server, its use must be documented with the information system security officer (ISSO).&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-61808r1155670_fix">Configure RHEL 9 to not receive remote logs using rsyslog.
 
 Remove the lines in /etc/rsyslog.conf and any files in the /etc/rsyslog.d directory that match any of the following:
+InputTCPServerRun
+UDPServerRun
+RELPServerRun
 module(load="imtcp")
 module(load="imudp")
 module(load="imrelp")
@@ -5893,21 +5516,21 @@ input(type="imrelp" port="514")
 
 The rsyslog daemon must be restarted for the changes to take effect:
 
-$ sudo systemctl restart rsyslog.service</fixtext><fix id="F-61808r1045282_fix" /><check system="C-61884r1134930_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Note: If the system administrator can demonstrate that another tool (e.g., SPLUNK) is being used to manage log offload and aggregation in lieu of rsyslog, this check is not applicable.
+$ sudo systemctl restart rsyslog.service</fixtext><fix id="F-61808r1155670_fix" /><check system="C-61884r1155669_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Note: If the system administrator can demonstrate that another tool (e.g., SPLUNK) is being used to manage log off-load and aggregation in lieu of rsyslog, this check is not applicable.
 
-Verify that RHEL 9 is not configured to receive remote logs using rsyslog with the following commands:
+Verify RHEL 9 is not configured to receive remote logs using rsyslog with the following commands:
 
 $ ss -tulnp | grep rsyslog
 
-If no output is returned, rsyslog is not listening for remote logs.
+If no output is returned, rsyslog is not listening for remote messages, and is compliant.
 
 If output appears, check for configured ports (514 is the default for syslog).
 
 Check for remote logging configuration in rsyslog by examining the rsyslog configuration files:
 
-$ sudo grep -E 'InputTCPServerRun | UDPServerRun' /etc/rsyslog.conf /etc/rsyslog.d/*
+$ sudo grep -E 'InputTCPServerRun | UDPServerRun | RELPServerRun | imtcp | imudp | imrelp' /etc/rsyslog.conf /etc/rsyslog.d/*
 
-If uncommented lines are returned, this is a finding.</check-content></check></Rule></Group><Group id="V-258144"><title>SRG-OS-000032-GPOS-00013</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258144r1045286_rule" weight="10.0" severity="medium"><version>RHEL-09-652030</version><title>All RHEL 9 remote access methods must be monitored.</title><description>&lt;VulnDiscussion&gt;Logging remote access methods can be used to trace the decrease in the risks associated with remote user access management. It can also be used to spot cyberattacks and ensure ongoing compliance with organizational policies surrounding the use of remote access methods.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000067</ident><fixtext fixref="F-61809r1045285_fix">Add or update the following lines to the "/etc/rsyslog.conf" file or a file in "/etc/rsyslog.d":
+If this command returns uncommented lines enabling network listeners, the system is accepting remote logs.  If this system is not documented and authorized as a log aggregation server, this is a finding.</check-content></check></Rule></Group><Group id="V-258144"><title>SRG-OS-000032-GPOS-00013</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258144r1045286_rule" weight="10.0" severity="medium"><version>RHEL-09-652030</version><title>All RHEL 9 remote access methods must be monitored.</title><description>&lt;VulnDiscussion&gt;Logging remote access methods can be used to trace the decrease in the risks associated with remote user access management. It can also be used to spot cyberattacks and ensure ongoing compliance with organizational policies surrounding the use of remote access methods.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000067</ident><fixtext fixref="F-61809r1045285_fix">Add or update the following lines to the "/etc/rsyslog.conf" file or a file in "/etc/rsyslog.d":
 
 auth.*;authpriv.*;daemon.* /var/log/secure
 
@@ -5983,7 +5606,7 @@ $ grep -Ei 'DefaultNetStreamDriver\b|StreamDriver.Name' /etc/rsyslog.conf /etc/r
 
 If the value of the "$DefaultNetstreamDriver or StreamDriver" option is not set to "gtls" or the line is commented out, this is a finding.
 
-If the variable name "StreamDriver" is present in an omfwd statement block, this is not a finding. However, if the "StreamDriver" variable is in a module block, this is a finding.</check-content></check></Rule></Group><Group id="V-258149"><title>SRG-OS-000479-GPOS-00224</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258149r1106462_rule" weight="10.0" severity="medium"><version>RHEL-09-652055</version><title>RHEL 9 must be configured to forward audit records via TCP to a different system or media from the system being audited via rsyslog.</title><description>&lt;VulnDiscussion&gt;Information stored in one location is vulnerable to accidental or incidental deletion or alteration.
+If the variable name "StreamDriver" is present in an omfwd statement block, this is not a finding. However, if the "StreamDriver" variable is in a module block, this is a finding.</check-content></check></Rule></Group><Group id="V-258149"><title>SRG-OS-000479-GPOS-00224</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258149r1155580_rule" weight="10.0" severity="medium"><version>RHEL-09-652055</version><title>RHEL 9 must be configured to forward audit records via TCP to a different system or media from the system being audited via rsyslog.</title><description>&lt;VulnDiscussion&gt;Information stored in one location is vulnerable to accidental or incidental deletion or alteration.
 
 Off-loading is a common process in information systems with limited audit storage capacity.
 
@@ -5997,13 +5620,29 @@ TCP *.* @@remotesystemname
 RELP *.* :omrelp:remotesystemname:2514
 Note that a port number was given as there is no standard port for RELP.
 
-Satisfies: SRG-OS-000479-GPOS-00224, SRG-OS-000480-GPOS-00227, SRG-OS-000342-GPOS-00133&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001851</ident><fixtext fixref="F-61814r1106361_fix">Configure RHEL 9 to off-load audit records onto a different system or media from the system being audited via TCP using rsyslog by specifying the remote logging server in "/etc/rsyslog.conf" or "/etc/rsyslog.d/[customfile].conf" with the name or IP address of the log aggregation server.
+Satisfies: SRG-OS-000479-GPOS-00224, SRG-OS-000480-GPOS-00227, SRG-OS-000342-GPOS-00133&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001851</ident><fixtext fixref="F-61814r1155579_fix">Configure RHEL 9 to off-load audit records onto a different system or media from the system being audited via TCP using rsyslog by specifying the remote logging server in "/etc/rsyslog.conf" or "/etc/rsyslog.d/[customfile].conf" with the name or IP address of the log aggregation server. The following are examples of the configuration for the legacy syntax and for the newer Rainer script. Only one should be used.
 
-*.* @@[remoteloggingserver]:[port]</fixtext><fix id="F-61814r1106361_fix" /><check system="C-61890r1106461_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 audit system off-loads audit records onto a different system or media from the system being audited via rsyslog using TCP with the following command:
+Using legacy '@host:port" syntax example:
+*.* @@[remoteloggingserver]:[port]
 
-$ sudo grep -iR '@@' /etc/rsyslog.conf /etc/rsyslog.d/
+Using Rainer script example:
+action(
+    type="omfwd"
+    target="logserver.example.com"
+    port="514"
+    protocol="tcp"
+    action.resumeRetryCount="-1"
+    queue.type="linkedList"
+    que.size="10000"
+)
 
-/etc/rsyslog.d/remoteLogging.conf:*.* @@[remoteloggingserver]:[port]
+Note: The Rainer Script above does not contain the required encryption settings.</fixtext><fix id="F-61814r1155579_fix" /><check system="C-61890r1155578_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 audit system off-loads audit records onto a different system or media from the system being audited via rsyslog using TCP with the following commands:
+
+To check for legacy configuration syntax, perform the following:
+$ sudo grep -ir '@@' /etc/rsyslog.conf /etc/rsyslog.d/
+
+To check for Rainer script syntax, perform the following:
+$ sudo grep -rq 'type="omfwd"' /etc/rsyslog.conf /etc/rsyslog.d/
 
 If a remote server is not configured, or the line is commented out, ask the system administrator (SA) to indicate how the audit logs are off-loaded to a different system or media. 
 
@@ -6272,7 +5911,7 @@ $ sudo stat -c '%U %n' /var/log/audit
 
 root /var/log/audit
 
-If the audit log directory is not owned by "root", this is a finding.</check-content></check></Rule></Group><Group id="V-258167"><title>SRG-OS-000057-GPOS-00027</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258167r1101918_rule" weight="10.0" severity="medium"><version>RHEL-09-653090</version><title>RHEL 9 audit logs file must have mode 0600 or less permissive to prevent unauthorized access to the audit log.</title><description>&lt;VulnDiscussion&gt;Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state or can identify the RHEL 9 system or platform. Additionally, Personally Identifiable Information (PII) and operational information must not be revealed through error messages to unauthorized personnel or their designated representatives.
+If the audit log directory is not owned by "root", this is a finding.</check-content></check></Rule></Group><Group id="V-258167"><title>SRG-OS-000057-GPOS-00027</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258167r1155630_rule" weight="10.0" severity="medium"><version>RHEL-09-653090</version><title>RHEL 9 audit logs file must have mode 0600 or less permissive to prevent unauthorized access to the audit log.</title><description>&lt;VulnDiscussion&gt;Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state or can identify the RHEL 9 system or platform. Additionally, Personally Identifiable Information (PII) and operational information must not be revealed through error messages to unauthorized personnel or their designated representatives.
 
 The structure and content of error messages must be carefully considered by the organization and development team. The extent to which the information system is able to identify and handle error conditions is guided by organizational policy and operational requirements.
 
@@ -6294,19 +5933,19 @@ $ sudo chmod 0440 $log_file.*
 Otherwise, configure the permissions the following way:
 
 $ sudo chmod 0600 $log_file
-$ sudo chmod 0400 $log_file.*</fixtext><fix id="F-61832r1045305_fix" /><check system="C-61908r1101917_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify the audit logs have a mode of "0600". 
+$ sudo chmod 0400 $log_file.*</fixtext><fix id="F-61832r1045305_fix" /><check system="C-61908r1155629_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify the audit logs have a mode of "0600". 
 
 Determine where the audit logs are stored with the following command:
 
-$ sudo find /var/log/audit/ -type f -exec stat -c '%a %n' {} \;
+$ sudo grep "^log_file" /etc/audit/auditd.conf
 
-600 /var/log/audit/audit.log
+log_file = /var/log/audit/audit.log
 
 Using the location of the audit log file, determine the mode of each audit log with the following command:
 
 $ sudo find /var/log/audit/ -type f -exec stat -c '%a %n' {} \;
 
-rw-------. 2 root root 237923 Jun 11 11:56 /var/log/audit/audit.log
+600 /var/log/audit/audit.log
 
 If the audit logs have a mode more permissive than "0600", this is a finding.</check-content></check></Rule></Group><Group id="V-258168"><title>SRG-OS-000051-GPOS-00024</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258168r958428_rule" weight="10.0" severity="medium"><version>RHEL-09-653095</version><title>RHEL 9 must periodically flush audit records to disk to prevent the loss of audit records.</title><description>&lt;VulnDiscussion&gt;If option "freq" is not set to a value that requires audit records being written to disk after a threshold number is reached, then audit records may be lost.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000154</ident><fixtext fixref="F-61833r943023_fix">Configure RHEL 9 to flush audit to disk by adding or updating the following rule in "/etc/audit/auditd.conf":
 
@@ -6405,7 +6044,7 @@ Example output:
 
 audispd-plugins.x86_64          3.0.7-101.el9_0.2
 
-If the "audispd-plugins" package is not installed, this is a finding.</check-content></check></Rule></Group><Group id="V-258176"><title>SRG-OS-000326-GPOS-00126</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258176r1106366_rule" weight="10.0" severity="medium"><version>RHEL-09-654010</version><title>RHEL 9 must audit uses of the "execve" system call.</title><description>&lt;VulnDiscussion&gt;Misuse of privileged functions, either intentionally or unintentionally by authorized users, or by unauthorized external entities that have compromised information system accounts, is a serious and ongoing concern and can have significant adverse impacts on organizations. Auditing the use of privileged functions is one way to detect such misuse and identify the risk from insider threats and the advanced persistent threat.
+If the "audispd-plugins" package is not installed, this is a finding.</check-content></check></Rule></Group><Group id="V-258176"><title>SRG-OS-000326-GPOS-00126</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258176r1155595_rule" weight="10.0" severity="medium"><version>RHEL-09-654010</version><title>RHEL 9 must audit uses of the "execve" system call.</title><description>&lt;VulnDiscussion&gt;Misuse of privileged functions, either intentionally or unintentionally by authorized users, or by unauthorized external entities that have compromised information system accounts, is a serious and ongoing concern and can have significant adverse impacts on organizations. Auditing the use of privileged functions is one way to detect such misuse and identify the risk from insider threats and the advanced persistent threat.
 
 Satisfies: SRG-OS-000326-GPOS-00126, SRG-OS-000327-GPOS-00127&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-002233</ident><ident system="http://cyber.mil/cci">CCI-002234</ident><fixtext fixref="F-61841r1045312_fix">Configure RHEL 9 to audit the execution of the "execve" system call.
 
@@ -6418,16 +6057,16 @@ Add or update the following file system rules to "/etc/audit/rules.d/audit.rules
 
 To load the rules to the kernel immediately, use the following command:
 
-$ sudo augenrules --load</fixtext><fix id="F-61841r1045312_fix" /><check system="C-61917r1106365_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is configured to audit the execution of the "execve" system call with the following command:
+$ sudo augenrules --load</fixtext><fix id="F-61841r1045312_fix" /><check system="C-61917r1155594_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is configured to audit the execution of the "execve" system call with the following command:
 
 $ sudo auditctl -l | grep execve
 
--a always,exit -S arch=b32 -S execve -C uid!=euid -F euid=0 -F key=execpriv
--a always,exit -S arch=b64 -S execve -C uid!=euid -F euid=0 -F key=execpriv
--a always,exit -S arch=b32 -S execve -C gid!=egid -F egid=0 -F key=execpriv
--a always,exit -S arch=b64 -S execve -C gid!=egid -F egid=0 -F key=execpriv
+-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -k execpriv
+-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -k execpriv
+-a always,exit -F arch=b32 -S execve -C gid!=egid -F egid=0 -k execpriv
+-a always,exit -F arch=b64 -S execve -C gid!=egid -F egid=0 -k execpriv
 
-If the command does not return all lines, or the lines are commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-258177"><title>SRG-OS-000037-GPOS-00015</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258177r1106368_rule" weight="10.0" severity="medium"><version>RHEL-09-654015</version><title>RHEL 9 must audit all uses of the chmod, fchmod, and fchmodat system calls.</title><description>&lt;VulnDiscussion&gt;Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+If the command does not return all lines, or the lines are commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-258177"><title>SRG-OS-000037-GPOS-00015</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258177r1155597_rule" weight="10.0" severity="medium"><version>RHEL-09-654015</version><title>RHEL 9 must audit all uses of the chmod, fchmod, and fchmodat system calls.</title><description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
 
 Audit records can be generated from various components within the information system (e.g., module or policy filter).
 
@@ -6444,14 +6083,14 @@ Add or update the following rules in "/etc/audit/rules.d/audit.rules":
 
 To load the rules to the kernel immediately, use the following command:
 
-$ sudo augenrules --load</fixtext><fix id="F-61842r1045315_fix" /><check system="C-61918r1106367_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is configured to audit the execution of the "chmod", "fchmod", and "fchmodat" system calls with the following command:
+$ sudo augenrules --load</fixtext><fix id="F-61842r1045315_fix" /><check system="C-61918r1155596_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is configured to audit the execution of the "chmod", "fchmod", and "fchmodat" system calls with the following command:
 
 $ sudo auditctl -l | grep chmod
 
--a always,exit -S arch=b32 -S chmod,fchmod,fchmodat -F auid&gt;=1000 -F auid!=-1 -F key=perm_mod
--a always,exit -S arch=b64 -S chmod,fchmod,fchmodat -F auid&gt;=1000 -F auid!=-1 -F key=perm_mod
+-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid&gt;=1000 -F auid!=-1 -F key=perm_mod
+-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid&gt;=1000 -F auid!=-1 -F key=perm_mod
 
-If both the "b32" and "b64" audit rules are not defined for the "chmod", "fchmod", and "fchmodat" system calls, this is a finding.</check-content></check></Rule></Group><Group id="V-258178"><title>SRG-OS-000037-GPOS-00015</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258178r1106370_rule" weight="10.0" severity="medium"><version>RHEL-09-654020</version><title>RHEL 9 must audit all uses of the chown, fchown, fchownat, and lchown system calls.</title><description>&lt;VulnDiscussion&gt;Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+If both the "b32" and "b64" audit rules are not defined for the "chmod", "fchmod", and "fchmodat" system calls, this is a finding.</check-content></check></Rule></Group><Group id="V-258178"><title>SRG-OS-000037-GPOS-00015</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258178r1155599_rule" weight="10.0" severity="medium"><version>RHEL-09-654020</version><title>RHEL 9 must audit all uses of the chown, fchown, fchownat, and lchown system calls.</title><description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
 
 Audit records can be generated from various components within the information system (e.g., module or policy filter).
 
@@ -6468,14 +6107,14 @@ Add or update the following rules in "/etc/audit/rules.d/audit.rules":
 
 To load the rules to the kernel immediately, use the following command:
 
-$ sudo augenrules --load</fixtext><fix id="F-61843r1045318_fix" /><check system="C-61919r1106369_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is configured to audit the execution of the  "chown", "fchown", "fchownat", and "lchown" system calls with the following command:
+$ sudo augenrules --load</fixtext><fix id="F-61843r1045318_fix" /><check system="C-61919r1155598_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is configured to audit the execution of the  "chown", "fchown", "fchownat", and "lchown" system calls with the following command:
 
 $ sudo auditctl -l | grep chown
 
--a always,exit -S arch=b32 -S lchown,fchown,chown,fchownat -F auid&gt;=1000 -F auid!=-1 -F key=perm_mod
--a always,exit -S arch=b64 -S chown,fchown,lchown,fchownat -F auid&gt;=1000 -F auid!=-1 -F key=perm_mod
+-a always,exit -F arch=b32 -S lchown,fchown,chown,fchownat -F auid&gt;=1000 -F auid!=-1 -F key=perm_mod
+-a always,exit -F arch=b64 -S chown,fchown,lchown,fchownat -F auid&gt;=1000 -F auid!=-1 -F key=perm_mod
 
-If both the "b32" and "b64" audit rules are not defined for the "chown", "fchown", "fchownat", and "lchown" system calls, this is a finding.</check-content></check></Rule></Group><Group id="V-258179"><title>SRG-OS-000037-GPOS-00015</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258179r1106371_rule" weight="10.0" severity="medium"><version>RHEL-09-654025</version><title>RHEL 9 must audit all uses of the setxattr, fsetxattr, lsetxattr, removexattr, fremovexattr, and lremovexattr system calls.</title><description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+If both the "b32" and "b64" audit rules are not defined for the "chown", "fchown", "fchownat", and "lchown" system calls, this is a finding.</check-content></check></Rule></Group><Group id="V-258179"><title>SRG-OS-000037-GPOS-00015</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258179r1155601_rule" weight="10.0" severity="medium"><version>RHEL-09-654025</version><title>RHEL 9 must audit all uses of the setxattr, fsetxattr, lsetxattr, removexattr, fremovexattr, and lremovexattr system calls.</title><description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
 
 Audit records can be generated from various components within the information system (e.g., module or policy filter).
 
@@ -6492,14 +6131,14 @@ Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPO
 
 To load the rules to the kernel immediately, use the following command:
 
-$ sudo augenrules --load</fixtext><fix id="F-61844r1045321_fix" /><check system="C-61920r1101944_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is configured to audit the execution of the "setxattr", "fsetxattr", "lsetxattr", "removexattr", "fremovexattr", and "lremovexattr" system calls with the following command:
+$ sudo augenrules --load</fixtext><fix id="F-61844r1045321_fix" /><check system="C-61920r1155600_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is configured to audit the execution of the "setxattr", "fsetxattr", "lsetxattr", "removexattr", "fremovexattr", and "lremovexattr" system calls with the following command:
 
 $ sudo auditctl -l | grep xattr
 
--a always,exit -S arch=b32 -S setxattr,lsetxattr,fsetxattr,removexattr,lremovexattr,fremovexattr -F auid&gt;=1000 -F auid!=-1 -F key=perm_mod
--a always,exit -S arch=b64 -S setxattr,lsetxattr,fsetxattr,removexattr,lremovexattr,fremovexattr -F auid&gt;=1000 -F auid!=-1 -F key=perm_mod
--a always,exit -S arch=b32 -S setxattr,lsetxattr,fsetxattr,removexattr,lremovexattr,fremovexattr -F auid=0 -F key=perm_mod
--a always,exit -S arch=b64 -S setxattr,lsetxattr,fsetxattr,removexattr,lremovexattr,fremovexattr -F auid=0 -F key=perm_mod
+-a always,exit -F arch=b32 -S setxattr,lsetxattr,fsetxattr,removexattr,lremovexattr,fremovexattr -F auid&gt;=1000 -F auid!=-1 -F key=perm_mod
+-a always,exit -F arch=b64 -S setxattr,lsetxattr,fsetxattr,removexattr,lremovexattr,fremovexattr -F auid&gt;=1000 -F auid!=-1 -F key=perm_mod
+-a always,exit -F arch=b32 -S setxattr,lsetxattr,fsetxattr,removexattr,lremovexattr,fremovexattr -F auid=0 -F key=perm_mod
+-a always,exit -F arch=b64 -S setxattr,lsetxattr,fsetxattr,removexattr,lremovexattr,fremovexattr -F auid=0 -F key=perm_mod
 
 If both the "b32" and "b64" audit rules are not defined for the "setxattr", "fsetxattr", "lsetxattr", "removexattr", "fremovexattr", and "lremovexattr" system calls, or any of the lines returned are commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-258180"><title>SRG-OS-000037-GPOS-00015</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258180r1045325_rule" weight="10.0" severity="medium"><version>RHEL-09-654030</version><title>RHEL 9 must audit all uses of umount system calls.</title><description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
 
@@ -6641,7 +6280,7 @@ $ sudo auditctl -l | grep setsebool
 
 -a always,exit -S all -F path=/usr/sbin/setsebool -F perm=x -F auid&gt;=1000 -F auid!=-1 -F key=privileged
 
-If the command does not return a line, or the line is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-258187"><title>SRG-OS-000037-GPOS-00015</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258187r1106373_rule" weight="10.0" severity="medium"><version>RHEL-09-654065</version><title>RHEL 9 must audit all uses of the rename, unlink, rmdir, renameat, and unlinkat system calls.</title><description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+If the command does not return a line, or the line is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-258187"><title>SRG-OS-000037-GPOS-00015</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258187r1155603_rule" weight="10.0" severity="medium"><version>RHEL-09-654065</version><title>RHEL 9 must audit all uses of the rename, unlink, rmdir, renameat, and unlinkat system calls.</title><description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
 
 Audit records can be generated from various components within the information system (e.g., module or policy filter).
 
@@ -6656,14 +6295,14 @@ Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPO
 
 To load the rules to the kernel immediately, use the following command:
 
-$ sudo augenrules --load</fixtext><fix id="F-61852r1045345_fix" /><check system="C-61928r1106372_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is configured to audit successful/unsuccessful attempts to use the "rename", "unlink", "rmdir", "renameat", and "unlinkat" system calls with the following command:
+$ sudo augenrules --load</fixtext><fix id="F-61852r1045345_fix" /><check system="C-61928r1155602_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is configured to audit successful/unsuccessful attempts to use the "rename", "unlink", "rmdir", "renameat", and "unlinkat" system calls with the following command:
 
 $ sudo auditctl -l | grep 'rename\|unlink\|rmdir'
 
--a always,exit -S arch=b32 -S unlink,rename,rmdir,unlinkat,renameat -F auid&gt;=1000 -F auid!=-1 -F key=delete
--a always,exit -S arch=b64 -S rename,rmdir,unlink,unlinkat,renameat -F auid&gt;=1000 -F auid!=-1 -F key=delete
+-a always,exit -F arch=b32 -S unlink,rename,rmdir,unlinkat,renameat -F auid&gt;=1000 -F auid!=-1 -F key=delete
+-a always,exit -F arch=b64 -S rename,rmdir,unlink,unlinkat,renameat -F auid&gt;=1000 -F auid!=-1 -F key=delete
 
-If the command does not return an audit rule for "rename", "unlink", "rmdir", "renameat", and "unlinkat" or any of the lines returned are commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-258188"><title>SRG-OS-000037-GPOS-00015</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258188r1106375_rule" weight="10.0" severity="medium"><version>RHEL-09-654070</version><title>RHEL 9 must audit all uses of the truncate, ftruncate, creat, open, openat, and open_by_handle_at system calls.</title><description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+If the command does not return an audit rule for "rename", "unlink", "rmdir", "renameat", and "unlinkat" or any of the lines returned are commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-258188"><title>SRG-OS-000037-GPOS-00015</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258188r1155605_rule" weight="10.0" severity="medium"><version>RHEL-09-654070</version><title>RHEL 9 must audit all uses of the truncate, ftruncate, creat, open, openat, and open_by_handle_at system calls.</title><description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
 
 Audit records can be generated from various components within the information system (e.g., module or policy filter).
 
@@ -6681,20 +6320,20 @@ Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPO
 
 To load the rules to the kernel immediately, use the following command:
 
-$ sudo augenrules --load</fixtext><fix id="F-61853r1045348_fix" /><check system="C-61929r1106374_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is configured to audit successful/unsuccessful attempts to use the "truncate", "ftruncate", "creat", "open", "openat", and "open_by_handle_at" system calls with the following command:
+$ sudo augenrules --load</fixtext><fix id="F-61853r1045348_fix" /><check system="C-61929r1155604_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is configured to audit successful/unsuccessful attempts to use the "truncate", "ftruncate", "creat", "open", "openat", and "open_by_handle_at" system calls with the following command:
 
 $ sudo auditctl -l | grep 'open\b\|openat\|open_by_handle_at\|truncate\|creat'
 
--a always,exit -S arch=b32 -S open,creat,truncate,ftruncate,openat,open_by_handle_at -F exit=-EPERM -F auid&gt;=1000 -S auid!=-1 -F key=perm_access
--a always,exit -F arch=b64 -S open,truncate,ftruncate,creat,openat,open_by_handle_at -F exit=-EPERM -F auid&gt;=1000 -S auid!=-1 -F key=perm_access
--a always,exit -F arch=b32 -S open,creat,truncate,ftruncate,openat,open_by_handle_at -F exit=-EACCES -F auid&gt;=1000 -S auid!=-1 -F key=perm_access
--a always,exit -F arch=b64 -S open,truncate,ftruncate,creat,openat,open_by_handle_at -F exit=-EACCES -F auid&gt;=1000 -S auid!=-1 -F key=perm_access
+-a always,exit -F arch=b32 -S open,creat,truncate,ftruncate,openat,open_by_handle_at -F exit=-EPERM -F auid&gt;=1000 -F auid!=-1 -F key=perm_access
+-a always,exit -F arch=b64 -S open,truncate,ftruncate,creat,openat,open_by_handle_at -F exit=-EPERM -F auid&gt;=1000 -F auid!=-1 -F key=perm_access
+-a always,exit -F arch=b32 -S open,creat,truncate,ftruncate,openat,open_by_handle_at -F exit=-EACCES -F auid&gt;=1000 -F auid!=-1 -F key=perm_access
+-a always,exit -F arch=b64 -S open,truncate,ftruncate,creat,openat,open_by_handle_at -F exit=-EACCES -F auid&gt;=1000 -F auid!=-1 -F key=perm_access
 
 If the output does not produce rules containing "-F exit=-EPERM", this is a finding.
 
 If the output does not produce rules containing "-F exit=-EACCES", this is a finding.
 
-If the command does not return an audit rule for "truncate", "ftruncate", "creat", "open", "openat", and "open_by_handle_at" or any of the lines returned are commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-258189"><title>SRG-OS-000037-GPOS-00015</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258189r1106377_rule" weight="10.0" severity="medium"><version>RHEL-09-654075</version><title>RHEL 9 must audit all uses of the delete_module system call.</title><description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+If the command does not return an audit rule for "truncate", "ftruncate", "creat", "open", "openat", and "open_by_handle_at" or any of the lines returned are commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-258189"><title>SRG-OS-000037-GPOS-00015</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258189r1155607_rule" weight="10.0" severity="medium"><version>RHEL-09-654075</version><title>RHEL 9 must audit all uses of the delete_module system call.</title><description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
 
 Audit records can be generated from various components within the information system (e.g., module or policy filter).
 
@@ -6709,14 +6348,14 @@ Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPO
 
 To load the rules to the kernel immediately, use the following command:
 
-$ sudo augenrules --load</fixtext><fix id="F-61854r1045351_fix" /><check system="C-61930r1106376_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is configured to audit the execution of the "delete_module" system call with the following command:
+$ sudo augenrules --load</fixtext><fix id="F-61854r1045351_fix" /><check system="C-61930r1155606_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is configured to audit the execution of the "delete_module" system call with the following command:
 
 $ sudo auditctl -l | grep delete_module
 
--a always,exit -S arch=b32 -S delete_module -F auid&gt;=1000 -F auid!=-1 -F key=module_chng
--a always,exit -S arch=b64 -S delete_module -F auid&gt;=1000 -F auid!=-1 -F key=module_chng
+-a always,exit -F arch=b32 -S delete_module -F auid&gt;=1000 -F auid!=-1 -F key=module_chng
+-a always,exit -F arch=b64 -S delete_module -F auid&gt;=1000 -F auid!=-1 -F key=module_chng
 
-If both the "b32" and "b64" audit rules are not defined for the "delete_module" system call, or any of the lines returned are commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-258190"><title>SRG-OS-000037-GPOS-00015</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258190r1106379_rule" weight="10.0" severity="medium"><version>RHEL-09-654080</version><title>RHEL 9 must audit all uses of the init_module and finit_module system calls.</title><description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+If both the "b32" and "b64" audit rules are not defined for the "delete_module" system call, or any of the lines returned are commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-258190"><title>SRG-OS-000037-GPOS-00015</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258190r1155609_rule" weight="10.0" severity="medium"><version>RHEL-09-654080</version><title>RHEL 9 must audit all uses of the init_module and finit_module system calls.</title><description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
 
 Audit records can be generated from various components within the information system (e.g., module or policy filter).
 
@@ -6731,12 +6370,12 @@ Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPO
 
 To load the rules to the kernel immediately, use the following command:
 
-$ sudo augenrules --load</fixtext><fix id="F-61855r1045354_fix" /><check system="C-61931r1106378_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is configured to audit the execution of the "init_module" and "finit_module" system calls with the following command:
+$ sudo augenrules --load</fixtext><fix id="F-61855r1045354_fix" /><check system="C-61931r1155608_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is configured to audit the execution of the "init_module" and "finit_module" system calls with the following command:
 
 $ sudo auditctl -l | grep init_module
 
--a always,exit -S arch=b32 -S init_module,finit_module -F auid&gt;=1000 -F auid!=-1 -F key=module_chng
--a always,exit -S arch=b64 -S init_module,finit_module -F auid&gt;=1000 -F auid!=-1 -F key=module_chng
+-a always,exit -F arch=b32 -S init_module,finit_module -F auid&gt;=1000 -F auid!=-1 -F key=module_chng
+-a always,exit -F arch=b64 -S init_module,finit_module -F auid&gt;=1000 -F auid!=-1 -F key=module_chng
 
 If both the "b32" and "b64" audit rules are not defined for the "init_module" system call, or any of the lines returned are commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-258191"><title>SRG-OS-000037-GPOS-00015</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258191r1045358_rule" weight="10.0" severity="medium"><version>RHEL-09-654085</version><title>RHEL 9 must audit all uses of the chage command.</title><description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
 
@@ -7186,7 +6825,7 @@ $ sudo cat /etc/audit/rules.d/* | grep shutdown
 
 -a always,exit -S all -F path=/usr/sbin/shutdown -F perm=x -F auid&gt;=1000 -F auid!=-1 -F key=privileged-shutdown
 
-If the command does not return a line, or the line is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-258215"><title>SRG-OS-000037-GPOS-00015</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258215r1106381_rule" weight="10.0" severity="medium"><version>RHEL-09-654205</version><title>Successful/unsuccessful uses of the umount system call in RHEL 9 must generate an audit record.</title><description>&lt;VulnDiscussion&gt;The changing of file permissions could indicate that a user is attempting to gain access to information that would otherwise be disallowed. Auditing DAC modifications can facilitate the identification of patterns of abuse among both authorized and unauthorized users.
+If the command does not return a line, or the line is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-258215"><title>SRG-OS-000037-GPOS-00015</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258215r1155611_rule" weight="10.0" severity="medium"><version>RHEL-09-654205</version><title>Successful/unsuccessful uses of the umount system call in RHEL 9 must generate an audit record.</title><description>&lt;VulnDiscussion&gt;The changing of file permissions could indicate that a user is attempting to gain access to information that would otherwise be disallowed. Auditing DAC modifications can facilitate the identification of patterns of abuse among both authorized and unauthorized users.
 
 Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000130</ident><ident system="http://cyber.mil/cci">CCI-000169</ident><ident system="http://cyber.mil/cci">CCI-000172</ident><ident system="http://cyber.mil/cci">CCI-002884</ident><fixtext fixref="F-61880r1045429_fix">Configure the audit system to generate an audit event for any successful/unsuccessful use of the "umount" system call by adding or updating the following rules in "/etc/audit/audit.rules" and adding the following rules to "/etc/audit/rules.d/perm_mod.rules" or updating the existing rules in files in the "/etc/audit/rules.d/" directory:
 
@@ -7194,13 +6833,13 @@ Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPO
 
 To load the rules to the kernel immediately, use the following command:
 
-$ sudo augenrules --load</fixtext><fix id="F-61880r1045429_fix" /><check system="C-61956r1106380_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 generates an audit record for all uses of the "umount" and system call with the following command:
+$ sudo augenrules --load</fixtext><fix id="F-61880r1045429_fix" /><check system="C-61956r1155610_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 generates an audit record for all uses of the "umount" and system call with the following command:
 
 $ sudo auditctl -l | grep b32 | grep 'umount\b'
 
--a always,exit -S arch=b32 -S umount -F auid&gt;=1000 -F auid!=-1 -F key=privileged-umount
+-a always,exit -F arch=b32 -S umount -F auid&gt;=1000 -F auid!=-1 -F key=privileged-umount
 
-If the command does not return a line, or the line is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-258216"><title>SRG-OS-000037-GPOS-00015</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258216r1102090_rule" weight="10.0" severity="medium"><version>RHEL-09-654210</version><title>Successful/unsuccessful uses of the umount2 system call in RHEL 9 must generate an audit record.</title><description>&lt;VulnDiscussion&gt;The changing of file permissions could indicate that a user is attempting to gain access to information that would otherwise be disallowed. Auditing DAC modifications can facilitate the identification of patterns of abuse among both authorized and unauthorized users.
+If the command does not return a line, or the line is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-258216"><title>SRG-OS-000037-GPOS-00015</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258216r1155613_rule" weight="10.0" severity="medium"><version>RHEL-09-654210</version><title>Successful/unsuccessful uses of the umount2 system call in RHEL 9 must generate an audit record.</title><description>&lt;VulnDiscussion&gt;The changing of file permissions could indicate that a user is attempting to gain access to information that would otherwise be disallowed. Auditing DAC modifications can facilitate the identification of patterns of abuse among both authorized and unauthorized users.
 
 Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPOS-00172, SRG-OS-000462-GPOS-00206, SRG-OS-000471-GPOS-00215&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000130</ident><ident system="http://cyber.mil/cci">CCI-000169</ident><ident system="http://cyber.mil/cci">CCI-000172</ident><ident system="http://cyber.mil/cci">CCI-002884</ident><fixtext fixref="F-61881r1045432_fix">Configure the audit system to generate an audit event for any successful/unsuccessful use of the "umount2" system call by adding or updating the following rules in a file in "/etc/audit/rules.d".
 
@@ -7209,12 +6848,12 @@ Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000062-GPOS-00031, SRG-OS-000392-GPO
 
 To load the rules to the kernel immediately, use the following command:
 
-$ sudo augenrules --load</fixtext><fix id="F-61881r1045432_fix" /><check system="C-61957r1102089_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>To determine if the system is configured to audit calls to the umount2 system call, run the following command:
+$ sudo augenrules --load</fixtext><fix id="F-61881r1045432_fix" /><check system="C-61957r1155612_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>To determine if the system is configured to audit calls to the umount2 system call, run the following command:
 
 $ sudo auditctl -l | grep umount2
 
--a always,exit -S arch=b64 -S umount2 -F auid&gt;=1000 -F auid!=-1 -F key=privileged-umount
--a always,exit -S arch=b32 -S umount2 -F auid&gt;=1000 -F auid!=-1 -F key=privileged-umount
+-a always,exit -F arch=b64 -S umount2 -F auid&gt;=1000 -F auid!=-1 -F key=privileged-umount
+-a always,exit -F arch=b32 -S umount2 -F auid&gt;=1000 -F auid!=-1 -F key=privileged-umount
 
 If no line is returned, this is a finding.</check-content></check></Rule></Group><Group id="V-258217"><title>SRG-OS-000004-GPOS-00004</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258217r1045436_rule" weight="10.0" severity="medium"><version>RHEL-09-654215</version><title>RHEL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/sudoers.</title><description>&lt;VulnDiscussion&gt;The actions taken by system administrators must be audited to keep a record of what was executed on the system, as well as for accountability purposes. Editing the sudoers file may be sign of an attacker trying to establish persistent methods to a system, auditing the editing of the sudoers files mitigates this risk.
 
@@ -7392,13 +7031,20 @@ $ sudo grep "^\s*[^#]" /etc/audit/audit.rules | tail -1
 
 -e 2
 
-If the audit system is not set to be immutable by adding the "-e 2" option to the end of "/etc/audit/audit.rules", this is a finding.</check-content></check></Rule></Group><Group id="V-258230"><title>SRG-OS-000033-GPOS-00014</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258230r1134936_rule" weight="10.0" severity="high"><version>RHEL-09-671010</version><title>RHEL 9 must enable FIPS mode.</title><description>&lt;VulnDiscussion&gt;Use of weak or untested encryption algorithms undermines the purposes of utilizing encryption to protect data. The operating system must implement cryptographic modules adhering to the higher standards approved by the federal government since this provides assurance they have been tested and validated. This includes NIST FIPS-validated cryptography for the following: Provisioning digital signatures, generating cryptographic hashes, and to protect data requiring data-at-rest protections in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, and standards.
+If the audit system is not set to be immutable by adding the "-e 2" option to the end of "/etc/audit/audit.rules", this is a finding.</check-content></check></Rule></Group><Group id="V-258230"><title>SRG-OS-000033-GPOS-00014</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-258230r1155585_rule" weight="10.0" severity="high"><version>RHEL-09-671010</version><title>RHEL 9 must enable FIPS mode.</title><description>&lt;VulnDiscussion&gt;Use of weak or untested encryption algorithms undermines the purposes of utilizing encryption to protect data. The operating system must implement cryptographic modules adhering to the higher standards approved by the federal government since this provides assurance they have been tested and validated. This includes NIST FIPS-validated cryptography for the following: Provisioning digital signatures, generating cryptographic hashes, and to protect data requiring data-at-rest protections in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, and standards.
 
-Satisfies: SRG-OS-000033-GPOS-00014, SRG-OS-000125-GPOS-00065, SRG-OS-000396-GPOS-00176, SRG-OS-000423-GPOS-00187, SRG-OS-000478-GPOS-00223&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000068</ident><ident system="http://cyber.mil/cci">CCI-000877</ident><ident system="http://cyber.mil/cci">CCI-002418</ident><ident system="http://cyber.mil/cci">CCI-002450</ident><fixtext fixref="F-61895r926676_fix">Configure the operating system to implement FIPS mode with the following command
+Satisfies: SRG-OS-000033-GPOS-00014, SRG-OS-000125-GPOS-00065, SRG-OS-000396-GPOS-00176, SRG-OS-000423-GPOS-00187, SRG-OS-000478-GPOS-00223&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000068</ident><ident system="http://cyber.mil/cci">CCI-000877</ident><ident system="http://cyber.mil/cci">CCI-002418</ident><ident system="http://cyber.mil/cci">CCI-002450</ident><fixtext fixref="F-61895r1155584_fix">Configure the operating system to implement FIPS mode with the following command
 
 $ sudo fips-mode-setup --enable
 
-Reboot the system for the changes to take effect.</fixtext><fix id="F-61895r926676_fix" /><check system="C-61971r1134935_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify that RHEL 9 is in FIPS mode with the following command:
+To ensure the kernel enables FIPS mode for early boot, "fips=1" must be added to the grub config:
+$ sudo grubby --update-kernel=ALL --args="fips=1"
+
+Verify the setting with the following command:
+$ cat /proc/cmdline
+BOOT_IMAGE=(hd0,gpt2)/vmlinuz-5.14.0-570.21.1.el9_6.x86_64 root=/dev/mapper/rhel-root ro resume=/dev/mapper/rhel-swap rd.luks.uuid=luks-cd37eb8d-a2c3-4671-96ee-1e6a3a681561 rd.lvm.lv=rhel/root rd.lvm.lv=rhel/swap rhgb quiet fips=1 boot=UUID=acbbb4ee-adc0-4cb2-9546-afab857b8849 audit_backlog_limit=8192 crashkernel=1G-4G:192M,4G-64G:256M,64G-:512M
+
+Reboot the system for the changes to take effect.</fixtext><fix id="F-61895r1155584_fix" /><check system="C-61971r1155583_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is in FIPS mode with the following command:
 
 $ sudo fips-mode-setup --check
 FIPS mode is enabled.
@@ -7614,7 +7260,7 @@ banner-message-text=
 
 Note: The "\n " characters are for formatting only. They will not be displayed on the graphical interface.
 
-If the banner does not match the Standard Mandatory DOD Notice and Consent Banner exactly, this is a finding.</check-content></check></Rule></Group><Group id="V-270175"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-270175r1117265_rule" weight="10.0" severity="medium"><version>RHEL-09-232103</version><title>RHEL 9 "/etc/audit/" must be owned by root.</title><description>&lt;VulnDiscussion&gt;The "/etc/audit/" directory contains files that ensure the proper auditing of command execution, privilege escalation, file manipulation, and more. Protection of this directory is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000162</ident><fixtext fixref="F-74109r1044963_fix">Change the owner of the file "/etc/audit/" to "root" by running the following command:
+If the banner does not match the Standard Mandatory DOD Notice and Consent Banner exactly, this is a finding.</check-content></check></Rule></Group><Group id="V-270175"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-270175r1137691_rule" weight="10.0" severity="medium"><version>RHEL-09-232103</version><title>RHEL 9 "/etc/audit/" must be owned by root.</title><description>&lt;VulnDiscussion&gt;The "/etc/audit/" directory contains files that ensure the proper auditing of command execution, privilege escalation, file manipulation, and more. Protection of this directory is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000162</ident><fixtext fixref="F-74109r1044963_fix">Change the owner of the file "/etc/audit/" to "root" by running the following command:
 
 $ sudo chown root /etc/audit/</fixtext><fix id="F-74109r1044963_fix" /><check system="C-74208r1044962_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify the ownership of the "/etc/audit/" directory with the following command:
 
@@ -7622,7 +7268,7 @@ $ sudo stat -c "%U %n" /etc/audit/
 
 root /etc/audit/
 
-If the "/etc/audit/" directory does not have an owner of "root", this is a finding.</check-content></check></Rule></Group><Group id="V-270176"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-270176r1117265_rule" weight="10.0" severity="medium"><version>RHEL-09-232104</version><title>RHEL 9 "/etc/audit/" must be group-owned by root.</title><description>&lt;VulnDiscussion&gt;The "/etc/audit/" directory contains files that ensure the proper auditing of command execution, privilege escalation, file manipulation, and more. Protection of this directory is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000162</ident><fixtext fixref="F-74110r1044966_fix">Change the group of the file "/etc/audit/" to "root" by running the following command:
+If the "/etc/audit/" directory does not have an owner of "root", this is a finding.</check-content></check></Rule></Group><Group id="V-270176"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-270176r1137691_rule" weight="10.0" severity="medium"><version>RHEL-09-232104</version><title>RHEL 9 "/etc/audit/" must be group-owned by root.</title><description>&lt;VulnDiscussion&gt;The "/etc/audit/" directory contains files that ensure the proper auditing of command execution, privilege escalation, file manipulation, and more. Protection of this directory is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000162</ident><fixtext fixref="F-74110r1044966_fix">Change the group of the file "/etc/audit/" to "root" by running the following command:
 
 $ sudo chgrp root /etc/audit/</fixtext><fix id="F-74110r1044966_fix" /><check system="C-74209r1044965_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify the group ownership of the "/etc/audit/" directory with the following command:
 
@@ -7718,11 +7364,13 @@ allow exe=/usr/bin/python3.7 : ftype=text/x-python
 deny_audit perm=any pattern=ld_so : all
 deny perm=any all : all
 
-If "fapolicyd" is not running in enforcement mode with a deny-all, permit-by-exception policy, this is a finding.</check-content></check></Rule></Group><Group id="V-272488"><title>SRG-OS-000304-GPOS-00121</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-272488r1082178_rule" weight="10.0" severity="medium"><version>RHEL-09-215101</version><title>RHEL 9 must have the Postfix package installed.</title><description>&lt;VulnDiscussion&gt;Postfix is a free, open-source mail transfer agent (MTA) that sends and receives emails. It is a server-side application that can be used to set up a local mail server, create a null-client mail relay, use a Postfix server as a destination for multiple domains, or choose an LDAP directory instead of files for lookups. Postfix supports protocols such as LDAP, SMTP AUTH (SASL), and TLS. It uses the Simple Mail Transfer Protocol (SMTP) to transfer emails between servers.
+If "fapolicyd" is not running in enforcement mode with a deny-all, permit-by-exception policy, this is a finding.</check-content></check></Rule></Group><Group id="V-272488"><title>SRG-OS-000304-GPOS-00121</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-272488r1155665_rule" weight="10.0" severity="medium"><version>RHEL-09-215101</version><title>RHEL 9 must have the Postfix package installed.</title><description>&lt;VulnDiscussion&gt;Postfix is a free, open-source mail transfer agent (MTA) that sends and receives emails. It is a server-side application that can be used to set up a local mail server, create a null-client mail relay, use a Postfix server as a destination for multiple domains, or choose an LDAP directory instead of files for lookups. Postfix supports protocols such as LDAP, SMTP AUTH (SASL), and TLS. It uses the Simple Mail Transfer Protocol (SMTP) to transfer emails between servers.
 
 Satisfies: SRG-OS-000304-GPOS-00121, SRG-OS-000343-GPOS-00134, SRG-OS-000363-GPOS-00150, SRG-OS-000447-GPOS-00201&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000015</ident><fixtext fixref="F-76447r1082177_fix">Install the Postfix package with the following command:
  
-$ sudo dnf install postfix</fixtext><fix id="F-76447r1082177_fix" /><check system="C-76542r1082176_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify that RHEL 9 has the Postfix package installed with the following command:
+$ sudo dnf install postfix</fixtext><fix id="F-76447r1082177_fix" /><check system="C-76542r1155664_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Note: If the admin can demonstrate that there is another system/service to send audit failure notifications to the administrator/ISSO, this control is not applicable.
+
+Verify RHEL 9 has the Postfix package installed with the following command:
 
 $ sudo dnf list --installed postfix
 
@@ -7730,12 +7378,12 @@ Example output:
 
 postfix.x86_64                             2:3.5.25-1.el9 
 
-If the "postfix" package is not installed, this is a finding.</check-content></check></Rule></Group><Group id="V-272496"><title>SRG-OS-000445-GPOS-00199</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-272496r1134956_rule" weight="10.0" severity="medium"><version>RHEL-09-431016</version><title>RHEL 9 must elevate the SELinux context when an administrator calls the sudo command.</title><description>&lt;VulnDiscussion&gt;Without verification of the security functions, security functions may not operate correctly and the failure may go unnoticed. Security function is defined as the hardware, software, and/or firmware of the information system responsible for enforcing the system security policy and supporting the isolation of code and data on which the protection is based. Security functionality includes, but is not limited to, establishing system accounts, configuring access authorizations (i.e., permissions, privileges), setting events to be audited, and setting intrusion detection parameters.
-
-This requirement applies to operating systems performing security function verification/testing and/or systems and environments that require this functionality.
-
-Preventing nonprivileged users from executing privileged functions mitigates the risk that unauthorized individuals or processes may gain unnecessary access to information or privileges.
-
+If the "postfix" package is not installed, this is a finding.</check-content></check></Rule></Group><Group id="V-272496"><title>SRG-OS-000445-GPOS-00199</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-272496r1155582_rule" weight="10.0" severity="medium"><version>RHEL-09-431016</version><title>RHEL 9 must elevate the SELinux context when an administrator calls the sudo command.</title><description>&lt;VulnDiscussion&gt;Without verification of the security functions, security functions may not operate correctly and the failure may go unnoticed. Security function is defined as the hardware, software, and/or firmware of the information system responsible for enforcing the system security policy and supporting the isolation of code and data on which the protection is based. Security functionality includes, but is not limited to, establishing system accounts, configuring access authorizations (i.e., permissions, privileges), setting events to be audited, and setting intrusion detection parameters.
+
+This requirement applies to operating systems performing security function verification/testing and/or systems and environments that require this functionality.
+
+Preventing nonprivileged users from executing privileged functions mitigates the risk that unauthorized individuals or processes may gain unnecessary access to information or privileges.
+
 Privileged functions include, for example, establishing accounts, performing system integrity checks, or administering cryptographic key management activities. Nonprivileged users are individuals who do not possess appropriate authorizations. Circumventing intrusion detection and prevention mechanisms or malicious code protection mechanisms are examples of privileged functions that require protection from nonprivileged users.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-002235</ident><fixtext fixref="F-76453r1082183_fix">Configure RHEL 9 to elevate the SELinux context when an administrator calls the sudo command.
 
 Edit a file in the "/etc/sudoers.d" directory with the following command:
@@ -7749,13 +7397,27 @@ Use the following example to build the &lt;customfile&gt; in the /etc/sudoers.d
 Remove any configurations that conflict with the above from the following locations:
  
 /etc/sudoers
-/etc/sudoers.d/</fixtext><fix id="F-76453r1082183_fix" /><check system="C-76549r1069439_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify that RHEL 9 elevates the SELinux context when an administrator calls the sudo command with the following command:
+/etc/sudoers.d/</fixtext><fix id="F-76453r1082183_fix" /><check system="C-76549r1155581_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 elevates the SELinux context when an administrator calls the sudo command with the following command:
 
 This command must be run as root:
 
 # grep -r sysadm_r /etc/sudoers /etc/sudoers.d
 %{designated_group_or_user_name} ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL
 
-If conflicting results are returned, this is a finding.
+If a designated sudoers administrator group or account(s) is not configured to elevate the SELinux type and role to "sysadm_t" and "sysadm_r" with the use of the sudo command, this is a finding.</check-content></check></Rule></Group><Group id="V-279936"><title>SRG-OS-000471-GPOS-00215</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-279936r1156361_rule" weight="10.0" severity="medium"><version>RHEL-09-654097</version><title>RHEL 9 must audit any script or executable called by cron as root or by any privileged user.</title><description>&lt;VulnDiscussion&gt;Any script or executable called by cron as root or by any privileged user must be owned by that user. It must also have the permissions 755 or more restrictive and should have no extended rights that allow any nonprivileged user to modify the script or executable.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>Red Hat Enterprise Linux 9</dc:subject><dc:identifier>5551</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000172</ident><fixtext fixref="F-84401r1156360_fix">Configure RHEL 9 to audit the execution of any system call made by cron as root or by any privileged user.
+
+Add or update the following file system rules to "/etc/audit/rules.d/audit.rules":
+-w /etc/cron.d/ -p wa -k cronjobs
+-w /var/spool/cron/ -p wa -k cronjobs
+
+To load the rules to the kernel immediately, use the following command:
+
+$ sudo augenrules --load</fixtext><fix id="F-84401r1156360_fix" /><check system="C-84496r1156359_chk"><check-content-ref href="Red_Hat_Enterprise_Linux_9_STIG.xml" name="M" /><check-content>Verify RHEL 9 is configured to audit the execution of any system call made by cron as root or by any privileged user.
+
+$ sudo auditctl -l | grep /etc/cron.d
+-w /etc/cron.d -p wa -k cronjobs
+
+$ sudo auditctl -l | grep /var/spool/cron
+-w /var/spool/cron -p wa -k cronjobs
 
-If a designated sudoers administrator group or account(s) is not configured to elevate the SELinux type and role to "sysadm_t" and "sysadm_r" with the use of the sudo command, this is a finding.</check-content></check></Rule></Group></Benchmark>
\ No newline at end of file
+If either of these commands do not return the expected output, or the lines are commented out, this is a finding.</check-content></check></Rule></Group></Benchmark>
\ No newline at end of file
diff --git a/shared/references/disa-stig-rhel9-v2r6-xccdf-scap.xml b/shared/references/disa-stig-rhel9-v2r7-xccdf-scap.xml
similarity index 93%
rename from shared/references/disa-stig-rhel9-v2r6-xccdf-scap.xml
rename to shared/references/disa-stig-rhel9-v2r7-xccdf-scap.xml
index 7545d9f22b79..1e605cb9f0f6 100644
--- a/shared/references/disa-stig-rhel9-v2r6-xccdf-scap.xml
+++ b/shared/references/disa-stig-rhel9-v2r7-xccdf-scap.xml
@@ -1,36 +1,36 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<data-stream-collection xmlns="http://scap.nist.gov/schema/scap/source/1.2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" id="scap_mil.disa.stig_collection_U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark" schematron-version="1.3" xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2 http://scap.nist.gov/schema/xccdf/1.2/xccdf_1.2.xsd http://cpe.mitre.org/dictionary/2.0 http://scap.nist.gov/schema/cpe/2.3/cpe-dictionary_2.3.xsd http://cpe.mitre.org/language/2.0 https://csrc.nist.gov/schema/cpe/2.3/cpe-language_2.3.xsd http://oval.mitre.org/XMLSchema/oval-common-5 https://github.com/OVALProject/Language/tree/5.11.2/schemas/oval-common-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5 https://github.com/OVALProject/Language/tree/5.11.2/schemas/oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#independent https://github.com/OVALProject/Language/tree/5.11.2/schemas/independent-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#linux https://github.com/OVALProject/Language/tree/5.11.2/schemas/linux-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#unix https://github.com/OVALProject/Language/tree/5.11.2/schemas/unix-definitions-schema.xsd http://scap.nist.gov/schema/scap/source/1.2 http://scap.nist.gov/schema/scap/1.3/scap-source-data-stream_1.3.xsd">
-  <data-stream id="scap_mil.disa.stig_datastream_U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark" use-case="CONFIGURATION" scap-version="1.3" timestamp="2025-09-27T23:03:44.382-04:00">
+<data-stream-collection xmlns="http://scap.nist.gov/schema/scap/source/1.2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" id="scap_mil.disa.stig_collection_U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark" schematron-version="1.3" xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2 http://scap.nist.gov/schema/xccdf/1.2/xccdf_1.2.xsd http://cpe.mitre.org/dictionary/2.0 http://scap.nist.gov/schema/cpe/2.3/cpe-dictionary_2.3.xsd http://cpe.mitre.org/language/2.0 https://csrc.nist.gov/schema/cpe/2.3/cpe-language_2.3.xsd http://oval.mitre.org/XMLSchema/oval-common-5 https://github.com/OVALProject/Language/tree/5.11.2/schemas/oval-common-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5 https://github.com/OVALProject/Language/tree/5.11.2/schemas/oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#independent https://github.com/OVALProject/Language/tree/5.11.2/schemas/independent-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#linux https://github.com/OVALProject/Language/tree/5.11.2/schemas/linux-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#unix https://github.com/OVALProject/Language/tree/5.11.2/schemas/unix-definitions-schema.xsd http://scap.nist.gov/schema/scap/source/1.2 http://scap.nist.gov/schema/scap/1.3/scap-source-data-stream_1.3.xsd">
+  <data-stream id="scap_mil.disa.stig_datastream_U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark" use-case="CONFIGURATION" scap-version="1.3" timestamp="2026-01-05T14:28:20.090-05:00">
     <dictionaries>
-      <component-ref xmlns:xlink="http://www.w3.org/1999/xlink" id="scap_mil.disa.stig_cref_U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-cpe-dictionary.xml" xlink:href="#scap_mil.disa.stig_comp_U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-cpe-dictionary.xml">
+      <component-ref xmlns:xlink="http://www.w3.org/1999/xlink" id="scap_mil.disa.stig_cref_U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-cpe-dictionary.xml" xlink:href="#scap_mil.disa.stig_comp_U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-cpe-dictionary.xml">
         <catalog xmlns="urn:oasis:names:tc:entity:xmlns:xml:catalog">
-          <uri name="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" uri="#scap_mil.disa.stig_cref_U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" />
+          <uri name="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" uri="#scap_mil.disa.stig_cref_U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" />
         </catalog>
       </component-ref>
     </dictionaries>
     <checklists>
-      <component-ref xmlns:xlink="http://www.w3.org/1999/xlink" id="scap_mil.disa.stig_cref_U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-xccdf.xml" xlink:href="#scap_mil.disa.stig_comp_U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-xccdf.xml">
+      <component-ref xmlns:xlink="http://www.w3.org/1999/xlink" id="scap_mil.disa.stig_cref_U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-xccdf.xml" xlink:href="#scap_mil.disa.stig_comp_U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-xccdf.xml">
         <catalog xmlns="urn:oasis:names:tc:entity:xmlns:xml:catalog">
-          <uri name="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" uri="#scap_mil.disa.stig_cref_U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" />
+          <uri name="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" uri="#scap_mil.disa.stig_cref_U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" />
         </catalog>
       </component-ref>
     </checklists>
     <checks>
-      <component-ref xmlns:xlink="http://www.w3.org/1999/xlink" id="scap_mil.disa.stig_cref_U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" xlink:href="#scap_mil.disa.stig_comp_U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" />
-      <component-ref xmlns:xlink="http://www.w3.org/1999/xlink" id="scap_mil.disa.stig_cref_U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" xlink:href="#scap_mil.disa.stig_comp_U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" />
+      <component-ref xmlns:xlink="http://www.w3.org/1999/xlink" id="scap_mil.disa.stig_cref_U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" xlink:href="#scap_mil.disa.stig_comp_U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" />
+      <component-ref xmlns:xlink="http://www.w3.org/1999/xlink" id="scap_mil.disa.stig_cref_U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" xlink:href="#scap_mil.disa.stig_comp_U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" />
     </checks>
   </data-stream>
-  <component id="scap_mil.disa.stig_comp_U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-cpe-dictionary.xml" timestamp="2025-09-27T23:03:44.383-04:00">
+  <component id="scap_mil.disa.stig_comp_U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-cpe-dictionary.xml" timestamp="2026-01-05T14:28:20.092-05:00">
     <cpe-list xmlns="http://cpe.mitre.org/dictionary/2.0">
       <cpe-item name="cpe:/o:redhat:enterprise_linux:9.0">
         <title xml:lang="en-us">Red Hat Enterprise Linux 9</title>
-        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-cpe-oval.xml">oval:mil.disa.stig.rhel9os:def:1</check>
+        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-cpe-oval.xml">oval:mil.disa.stig.rhel9os:def:1</check>
       </cpe-item>
     </cpe-list>
   </component>
-  <component id="scap_mil.disa.stig_comp_U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-xccdf.xml" timestamp="2025-09-27T23:03:44.388-04:00">
+  <component id="scap_mil.disa.stig_comp_U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-xccdf.xml" timestamp="2026-01-05T14:28:20.114-05:00">
     <xccdf:Benchmark xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" id="xccdf_mil.disa.stig_benchmark_RHEL_9_STIG" style="SCAP_1.3" xml:lang="en">
-      <xccdf:status date="2025-08-20">accepted</xccdf:status>
+      <xccdf:status date="2025-11-24">accepted</xccdf:status>
       <xccdf:title>Red Hat Enterprise Linux 9 STIG SCAP Benchmark</xccdf:title>
       <xccdf:description>This Security Technical Implementation Guide is published as a tool to improve the security of Department of Defense (DOD) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.</xccdf:description>
       <xccdf:notice id="terms-of-use" xml:lang="en" />
@@ -40,67 +40,85 @@
         <dc:publisher>DISA</dc:publisher>
         <dc:source>STIG.DOD.MIL</dc:source>
       </xccdf:reference>
-      <xccdf:plain-text id="release-info">Benchmark Date: 01 Oct 2025</xccdf:plain-text>
-      <xccdf:plain-text id="generator">3.5.1</xccdf:plain-text>
+      <xccdf:plain-text id="release-info">Benchmark Date: 05 Jan 2026</xccdf:plain-text>
+      <xccdf:plain-text id="generator">3.5.2</xccdf:plain-text>
       <xccdf:plain-text id="conventionsVersion">1.10.0</xccdf:plain-text>
       <cpe:platform-specification>
         <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxBIND">
           <cpe:title>Linux with BIND installed</cpe:title>
           <cpe:logical-test operator="AND" negate="false">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25824200" />
-          </cpe:logical-test>
-        </cpe:platform>
-        <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxGnome">
-          <cpe:title>Gnome-shell Package</cpe:title>
-          <cpe:logical-test operator="AND" negate="false">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100005" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25824200" />
           </cpe:logical-test>
         </cpe:platform>
         <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxNFSMounts">
           <cpe:title>Linux with NFS mounts configured</cpe:title>
           <cpe:logical-test operator="AND" negate="false">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25785400" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25785400" />
           </cpe:logical-test>
         </cpe:platform>
         <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxIPv6enabled">
           <cpe:title>Linux IPv6 Enabled</cpe:title>
           <cpe:logical-test operator="AND" negate="true">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100012" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100012" />
           </cpe:logical-test>
         </cpe:platform>
         <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxLibreswan">
           <cpe:title>Linux with Libreswan installed</cpe:title>
           <cpe:logical-test operator="AND" negate="false">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25823200" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25823200" />
+          </cpe:logical-test>
+        </cpe:platform>
+        <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxGnome">
+          <cpe:title>Gnome-shell Package</cpe:title>
+          <cpe:logical-test operator="AND" negate="false">
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100005" />
+          </cpe:logical-test>
+        </cpe:platform>
+        <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxNoNFSMounts">
+          <cpe:title>Linux with no NFS mounts configured</cpe:title>
+          <cpe:logical-test operator="AND" negate="true">
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25785400" />
+          </cpe:logical-test>
+        </cpe:platform>
+        <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxTFTP">
+          <cpe:title>Linux with TFTP installed</cpe:title>
+          <cpe:logical-test operator="AND" negate="false">
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25795200" />
+          </cpe:logical-test>
+        </cpe:platform>
+        <cpe:platform id="xccdf_mil.disa.stig_platform_RHEL_9_NotFIPS">
+          <cpe:title>RHEL9 and Not FIPS</cpe:title>
+          <cpe:logical-test operator="AND" negate="true">
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:258230" />
           </cpe:logical-test>
         </cpe:platform>
         <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxKernelDumps">
           <cpe:title>Kernel dumps are enabled</cpe:title>
           <cpe:logical-test operator="AND" negate="true">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:230311" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:230311" />
           </cpe:logical-test>
         </cpe:platform>
         <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxUEFIBootPartitionNotVfat">
           <cpe:title>Linux UEFI system with boot partition file type other than VFAT</cpe:title>
           <cpe:logical-test operator="AND" negate="false">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100016" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.linux:def:100016" />
           </cpe:logical-test>
         </cpe:platform>
         <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxPostfix">
           <cpe:title>Linux with postfix installed</cpe:title>
           <cpe:logical-test operator="AND" negate="false">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25795100" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25795100" />
           </cpe:logical-test>
         </cpe:platform>
         <cpe:platform id="xccdf_mil.disa.stig_platform_LinuxAutofs">
           <cpe:title>Linux with autofs installed</cpe:title>
           <cpe:logical-test operator="AND" negate="false">
-            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25784900" />
+            <cpe:check-fact-ref system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" id-ref="oval:mil.disa.stig.defs:def:25784900" />
           </cpe:logical-test>
         </cpe:platform>
       </cpe:platform-specification>
       <xccdf:platform idref="cpe:/o:redhat:enterprise_linux:9.0" />
-      <xccdf:version>002.006</xccdf:version>
+      <xccdf:version>002.007</xccdf:version>
       <xccdf:metadata>
         <dc:creator>DISA</dc:creator>
         <dc:publisher>DISA</dc:publisher>
@@ -318,12 +336,10 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258013" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258014" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258015" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258017" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258018" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258019" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258020" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258022" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258023" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258024" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258026" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258029" selected="true" />
@@ -358,7 +374,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258073" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258074" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258075" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258076" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258077" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258078" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258079" selected="true" />
@@ -491,6 +506,7 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258227" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258228" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258229" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258230" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258231" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258232" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258233" selected="true" />
@@ -716,12 +732,10 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258013" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258014" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258015" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258017" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258018" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258019" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258020" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258022" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258023" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258024" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258026" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258029" selected="true" />
@@ -756,7 +770,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258073" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258074" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258075" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258076" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258077" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258078" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258079" selected="true" />
@@ -889,6 +902,7 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258227" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258228" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258229" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258230" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258231" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258232" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258233" selected="true" />
@@ -1114,12 +1128,10 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258013" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258014" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258015" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258017" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258018" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258019" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258020" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258022" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258023" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258024" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258026" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258029" selected="true" />
@@ -1154,7 +1166,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258073" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258074" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258075" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258076" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258077" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258078" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258079" selected="true" />
@@ -1287,6 +1298,7 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258227" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258228" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258229" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258230" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258231" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258232" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258233" selected="true" />
@@ -1512,12 +1524,10 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258013" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258014" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258015" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258017" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258018" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258019" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258020" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258022" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258023" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258024" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258026" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258029" selected="true" />
@@ -1552,7 +1562,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258073" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258074" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258075" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258076" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258077" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258078" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258079" selected="true" />
@@ -1685,6 +1694,7 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258227" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258228" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258229" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258230" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258231" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258232" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258233" selected="true" />
@@ -1910,12 +1920,10 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258013" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258014" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258015" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258017" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258018" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258019" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258020" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258022" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258023" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258024" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258026" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258029" selected="true" />
@@ -1950,7 +1958,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258073" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258074" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258075" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258076" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258077" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258078" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258079" selected="true" />
@@ -2083,6 +2090,7 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258227" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258228" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258229" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258230" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258231" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258232" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258233" selected="true" />
@@ -2308,12 +2316,10 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258013" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258014" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258015" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258017" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258018" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258019" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258020" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258022" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258023" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258024" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258026" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258029" selected="true" />
@@ -2348,7 +2354,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258073" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258074" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258075" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258076" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258077" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258078" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258079" selected="true" />
@@ -2481,6 +2486,7 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258227" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258228" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258229" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258230" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258231" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258232" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258233" selected="true" />
@@ -2706,12 +2712,10 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258013" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258014" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258015" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258017" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258018" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258019" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258020" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258022" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258023" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258024" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258026" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258029" selected="true" />
@@ -2746,7 +2750,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258073" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258074" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258075" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258076" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258077" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258078" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258079" selected="true" />
@@ -2879,6 +2882,7 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258227" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258228" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258229" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258230" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258231" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258232" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258233" selected="true" />
@@ -3104,12 +3108,10 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258013" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258014" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258015" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258017" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258018" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258019" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258020" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258022" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258023" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258024" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258026" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258029" selected="true" />
@@ -3144,7 +3146,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258073" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258074" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258075" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258076" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258077" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258078" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258079" selected="true" />
@@ -3277,6 +3278,7 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258227" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258228" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258229" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258230" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258231" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258232" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258233" selected="true" />
@@ -3502,12 +3504,10 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258013" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258014" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258015" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258017" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258018" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258019" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258020" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258022" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258023" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258024" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258026" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258029" selected="true" />
@@ -3542,7 +3542,6 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258073" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258074" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258075" selected="true" />
-        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258076" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258077" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258078" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258079" selected="true" />
@@ -3675,6 +3674,7 @@
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258227" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258228" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258229" selected="true" />
+        <xccdf:select idref="xccdf_mil.disa.stig_group_V-258230" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258231" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258232" selected="true" />
         <xccdf:select idref="xccdf_mil.disa.stig_group_V-258233" selected="true" />
@@ -3707,13 +3707,11 @@
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258014r1045084_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258006r1045071_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258049r1015092_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258077r1014874_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258210r1045415_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258182r1045331_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258039r1045131_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258223r1015134_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257796r1044847_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257962r1106437_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258022r1045097_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258042r1045133_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258193r1045364_rule" selected="false" />
@@ -3723,42 +3721,42 @@
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257993r1045049_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258206r1045403_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257825r1044888_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257957r1155618_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258003r1045065_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257890r1044961_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257907r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257922r1044988_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257810r1117266_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257906r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258115r1045238_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257798r1155694_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258029r1045109_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258103r1045210_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257869r1102009_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257959r1102024_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257949r1134947_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257804r1044853_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258048r1069380_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257908r991589_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257975r1106452_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257909r991589_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257787r1117265_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257923r1044991_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258169r991556_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258233r1015136_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257967r1106337_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258195r1045370_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258178r1106370_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258162r958754_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-270175r1117265_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257832r1044900_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257939r1044997_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258155r1045300_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257968r1155748_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258071r991588_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258057r1045146_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258165r958434_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257983r1045024_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258215r1155611_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258110r1045223_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258121r1155682_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257947r958480_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258178r1155599_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257964r1155739_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258081r1045164_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257974r1155763_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258142r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258198r1045379_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258212r1045421_rule" selected="false" />
@@ -3768,64 +3766,71 @@
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258231r1069375_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258203r1045394_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257946r958480_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257965r1155646_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258061r958482_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257814r1156057_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258041r1038967_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258149r1155580_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257866r958804_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257792r1044842_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257829r1044896_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257867r958804_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257844r1044918_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258046r991589_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258129r1155628_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258043r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258007r1045073_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257811r1155674_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257911r991589_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258215r1106381_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257863r958804_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257912r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257850r1044930_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257913r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257861r1044941_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258128r1155626_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257831r1044898_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257951r1014843_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257995r1045053_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257885r1044953_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257972r1155757_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258220r1015131_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257958r1106319_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258077r1155659_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257828r1044894_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258035r1045125_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258201r1045388_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257910r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258013r1045082_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258163r958424_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258023r958402_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258159r971542_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257803r1155668_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258152r1015127_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258194r1045367_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257896r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257786r1044834_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258179r1155601_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258211r1045418_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258234r1051250_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257898r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257935r1044994_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257827r1044892_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257864r1106304_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258207r1045406_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258125r1045253_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258141r1045280_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257797r1155691_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257892r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257944r1038944_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257977r1155772_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258168r958428_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257807r1044862_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257964r1106438_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258189r1155607_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257852r991589_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258176r1106366_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257894r991589_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257968r1106339_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257810r1155712_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257954r1106315_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257978r1045013_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257836r1044908_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258218r1101981_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258228r991572_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-270176r1137691_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258209r1045412_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-270178r1051243_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257805r1044856_rule" selected="false" />
@@ -3838,25 +3843,29 @@
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257921r1106308_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258133r1045263_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257914r1044969_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257963r1155736_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258160r1038966_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258102r1045207_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258224r1014988_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-272488r1082178_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257974r1106450_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257967r1155745_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257843r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257948r1045004_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258033r1045120_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257958r1155721_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257959r1155724_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258056r1045143_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258075r991590_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257925r991557_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257975r1155766_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257842r1044916_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258101r1045204_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257802r1155706_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257841r1044914_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257996r1134915_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-272496r1155582_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258154r1038966_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258091r1045185_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258213r1045424_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257881r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258202r1045391_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258222r1015133_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257878r958804_rule" selected="false" />
@@ -3865,12 +3874,10 @@
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257936r1044995_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258173r1101933_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258175r1045310_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258076r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257876r958804_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257926r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257903r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257905r991589_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257963r1106328_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257788r1044838_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258199r1045382_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257917r1101914_rule" selected="false" />
@@ -3878,7 +3885,8 @@
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257874r958804_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257901r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258229r958434_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258190r1106379_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257960r1155727_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257816r1155715_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258200r1045385_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257870r958804_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258030r1045112_rule" selected="false" />
@@ -3887,33 +3895,31 @@
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257872r958804_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258086r1102063_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258118r1050789_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258088r1155643_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258137r1102081_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257834r1044904_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258054r958736_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257941r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258170r991589_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257977r1106456_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257966r1106440_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258166r1045303_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257832r1155653_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257794r1069362_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258184r1045337_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258012r1014855_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258083r1045168_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258011r1045079_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258099r1045198_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258149r1106462_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257998r1082181_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-272496r1134956_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257816r1106435_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257808r1044865_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-272488r1155665_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258148r1045292_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258037r1014863_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258109r1045220_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258177r1106368_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-270175r1137691_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257806r1044859_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258123r1134923_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257787r1137691_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257791r991589_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257801r1106279_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257812r1134897_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257790r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257837r1044910_rule" selected="false" />
@@ -3926,84 +3932,76 @@
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257884r1106306_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258208r1045409_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257793r1044843_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257942r1106314_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257918r1044977_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257798r1117266_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257800r1155700_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258171r1134934_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257797r1117266_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258060r1045150_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258156r1106364_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257962r1155733_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257976r1155769_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258225r1014990_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257966r1155742_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257818r1044876_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257838r1044912_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258055r1045140_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258128r1117265_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258187r1155603_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258167r1155630_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257943r1045001_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257994r1045051_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257957r1106317_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258100r1045201_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257970r1106442_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257801r1155703_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258185r1045340_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258120r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258157r1134932_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258187r1106373_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257809r1155709_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258008r1045075_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258214r1045427_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258019r1045092_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258116r1045240_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258144r1045286_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257882r991560_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257961r1106323_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258112r1045229_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258143r1155671_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258242r958908_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258005r1045069_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257883r991560_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257880r1044951_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257862r1155661_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258034r1051267_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258001r991589_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258002r991589_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258188r1106375_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258097r1045193_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257965r1106333_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257802r1106282_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257934r991589_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257976r1106454_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258017r1045088_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258082r1045166_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258216r1102090_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258188r1155605_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257920r1101926_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257970r1155751_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257839r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257953r958424_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257981r1101970_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257897r991589_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257864r1155639_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257865r1155636_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258158r971542_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258129r1117265_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257824r1044886_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258192r1045361_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258032r1045117_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258088r1050789_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257813r1134899_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258036r1014861_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257891r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257899r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258153r1038966_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258189r1106377_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258084r1050789_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258219r1015130_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258205r1045400_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258121r1102086_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258143r1134931_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257862r1134908_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257799r1155697_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258114r1045235_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257845r1044920_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257893r991589_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258179r1106371_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257868r958804_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257895r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257847r1044924_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257919r1044979_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257927r991589_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257973r1106448_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257980r1045016_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258183r1045334_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257886r1044955_rule" selected="false" />
@@ -4015,26 +4013,29 @@
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257979r958908_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258117r1015116_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257855r1044936_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258216r1155613_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258015r1045086_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257991r1051246_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257799r1106273_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258002r1155590_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258147r1045290_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258104r1015104_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258164r1045301_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257960r1106321_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258098r1045195_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257961r1155730_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258045r958482_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257800r1117266_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258122r1045246_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-270176r1117265_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257881r1155663_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257969r1155623_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257992r1045047_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258105r1045212_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257782r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257849r1044928_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257863r1155633_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258085r1045173_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257924r991557_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258089r1045179_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257783r991562_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257973r1155760_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258020r1045094_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258186r1045343_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258087r1102071_rule" selected="false" />
@@ -4045,38 +4046,34 @@
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257815r1134903_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258204r1045397_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257916r1101916_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258167r1101918_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257915r1044971_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257989r1051240_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258090r958808_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258009r1045077_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258177r1155597_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258140r1106460_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257971r1106444_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257840r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258111r1045226_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257982r1045021_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258073r1045157_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257811r1117266_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257942r1155718_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257904r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257877r958804_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257972r1106446_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258151r1045298_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258217r1045436_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257969r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257795r1044845_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257865r1044946_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258176r1155595_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257873r958804_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257900r991589_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257803r1106429_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257809r1106288_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257875r958804_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257902r991589_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258026r1045103_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258181r1045328_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-270180r1045182_rule" selected="false" />
-        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257814r1134901_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257971r1155754_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257848r1044926_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258072r1045155_rule" selected="false" />
+        <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258190r1155609_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257871r958804_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-258024r1045100_rule" selected="false" />
         <xccdf:select idref="xccdf_mil.disa.stig_rule_SV-257997r1069370_rule" selected="false" />
@@ -4084,12 +4081,15 @@
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257777">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257777r991589_rule" severity="high" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257777r1155676_rule" severity="high" weight="10.0">
           <xccdf:version>RHEL-09-211010</xccdf:version>
           <xccdf:title>RHEL 9 must be a vendor-supported release.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;An operating system release is considered "supported" if the vendor continues to provide security patches for the product. With an unsupported release, it will not be possible to resolve security issues discovered in the system software.
 
-Red Hat offers the Extended Update Support (EUS) add-on to a Red Hat Enterprise Linux subscription, for a fee, for those customers who wish to standardize on a specific minor release for an extended period.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+End Of Life dates for Red Hat Linux 9 releases are as follows:
+Current end of Full Support for Red Hat Linux 9 is 31 May 2027.
+Current end of Maintenance Support for Red Hat Linux 9 is 31 May 3032.
+Current end of Extended Life Cycle Support (ELS) for Red Hat Linux 9 is 31 May 2035.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
           <xccdf:reference>
             <dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title>
             <dc:publisher>DISA</dc:publisher>
@@ -4101,7 +4101,7 @@ Red Hat offers the Extended Update Support (EUS) add-on to a Red Hat Enterprise
           <xccdf:fixtext fixref="F-61442r925317_fix">Upgrade to a supported version of RHEL 9.</xccdf:fixtext>
           <xccdf:fix id="F-61442r925317_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257777" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257777" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4125,7 +4125,7 @@ Red Hat offers the Extended Update Support (EUS) add-on to a Red Hat Enterprise
 $ sudo systemctl set-default multi-user.target</xccdf:fixtext>
           <xccdf:fix id="F-61446r925329_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257781" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257781" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4145,6 +4145,7 @@ The rngd service feeds random data from hardware device to kernel random device.
             <dc:subject>Red Hat Enterprise Linux 9</dc:subject>
             <dc:identifier>5551</dc:identifier>
           </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_RHEL_9_NotFIPS" />
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
           <xccdf:fixtext fixref="F-61447r925332_fix">Install the rng-tools package with the following command:
 
@@ -4155,7 +4156,7 @@ Then enable the rngd service run the following command:
 $ sudo systemctl enable --now rngd</xccdf:fixtext>
           <xccdf:fix id="F-61447r925332_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257782" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257782" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4179,14 +4180,14 @@ $ sudo systemctl enable --now rngd</xccdf:fixtext>
 $ sudo systemctl enable --now systemd-journald</xccdf:fixtext>
           <xccdf:fix id="F-61448r925335_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257783" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257783" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257784">
         <xccdf:title>SRG-OS-000324-GPOS-00125</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257784r1044832_rule" severity="high" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257784r1155651_rule" severity="high" weight="10.0">
           <xccdf:version>RHEL-09-211045</xccdf:version>
           <xccdf:title>The systemd Ctrl-Alt-Delete burst key sequence in RHEL 9 must be disabled.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;A locally logged-on user who presses Ctrl-Alt-Delete when at the console can reboot the system. If accidentally pressed, as could happen in the case of a mixed OS environment, this can create the risk of short-term loss of availability of systems due to unintentional reboot. In a graphical user environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is reduced because the user will be prompted before any action is taken.
@@ -4200,16 +4201,22 @@ Satisfies: SRG-OS-000324-GPOS-00125, SRG-OS-000480-GPOS-00227&lt;/VulnDiscussion
             <dc:identifier>5551</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-002235</xccdf:ident>
-          <xccdf:fixtext fixref="F-61449r925338_fix">Configure the system to disable the CtrlAltDelBurstAction by added or modifying the following line in the "/etc/systemd/system.conf" configuration file:
+          <xccdf:fixtext fixref="F-61449r1155650_fix">Configure RHEL 9 to disable the CtrlAltDelBurstAction by adding it to a drop file in a "/etc/systemd/system.conf.d/" configuration file:
+
+If no drop file exists, create one with the following command:
+
+$ sudo mkdir -p /etc/systemd/system.conf.d &amp;&amp; sudo vi /etc/systemd/system.conf.d/55-CtrlAltDel-BurstAction
+
+Edit the file to contain the setting by adding the following text:
 
 CtrlAltDelBurstAction=none
 
 Reload the daemon for this change to take effect.
 
 $ sudo systemctl daemon-reload</xccdf:fixtext>
-          <xccdf:fix id="F-61449r925338_fix" />
+          <xccdf:fix id="F-61449r1155650_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257784" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257784" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4236,7 +4243,7 @@ $ sudo systemctl disable --now ctrl-alt-del.target
 $ sudo systemctl mask --now ctrl-alt-del.target</xccdf:fixtext>
           <xccdf:fix id="F-61450r925341_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257785" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257785" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4263,14 +4270,14 @@ $ sudo systemctl disable --now debug-shell.service
 $ sudo systemctl mask --now debug-shell.service</xccdf:fixtext>
           <xccdf:fix id="F-61451r943025_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257786" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257786" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257787">
         <xccdf:title>SRG-OS-000080-GPOS-00048</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257787r1117265_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257787r1137691_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-212010</xccdf:version>
           <xccdf:title>RHEL 9 must require a boot loader superuser password.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DOD-approved PKIs, all DOD systems (e.g., web servers and web portals) must be properly configured to incorporate access control methods that do not rely solely on the possession of a certificate for access. Successful authentication must not automatically give an entity access to an asset or security boundary. Authorization procedures and controls must be implemented to ensure each authenticated entity also has a validated and current authorization. Authorization is the process of determining whether an entity, once authenticated, is permitted to access a specific asset. Information systems use access control policies and enforcement mechanisms to implement this requirement.
@@ -4293,7 +4300,7 @@ Enter password:
 Confirm password:</xccdf:fixtext>
           <xccdf:fix id="F-61452r925347_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257787" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257787" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4317,7 +4324,7 @@ Confirm password:</xccdf:fixtext>
 $ sudo grubby --update-kernel=ALL --remove-args="systemd.confirm_spawn"</xccdf:fixtext>
           <xccdf:fix id="F-61453r1044837_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257788" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257788" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4341,7 +4348,7 @@ $ sudo grubby --update-kernel=ALL --remove-args="systemd.confirm_spawn"</xccdf:f
 $ sudo chgrp root /boot/grub2/grub.cfg</xccdf:fixtext>
           <xccdf:fix id="F-61455r925356_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257790" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257790" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4365,7 +4372,7 @@ $ sudo chgrp root /boot/grub2/grub.cfg</xccdf:fixtext>
 $ sudo chown root /boot/grub2/grub.cfg</xccdf:fixtext>
           <xccdf:fix id="F-61456r925359_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257791" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257791" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4397,7 +4404,7 @@ Add or modify the following line in "/etc/default/grub" to ensure the configurat
 GRUB_CMDLINE_LINUX="vsyscall=none"</xccdf:fixtext>
           <xccdf:fix id="F-61457r925362_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257792" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257792" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4427,7 +4434,7 @@ Add or modify the following line in "/etc/default/grub" to ensure the configurat
 GRUB_CMDLINE_LINUX="page_poison=1"</xccdf:fixtext>
           <xccdf:fix id="F-61458r925365_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257793" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257793" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4467,7 +4474,7 @@ Reboot the system:
 $ sudo reboot</xccdf:fixtext>
           <xccdf:fix id="F-61459r1069361_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257794" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257794" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4498,7 +4505,7 @@ Add or modify the following line in "/etc/default/grub" to ensure the configurat
 GRUB_CMDLINE_LINUX="pti=on"</xccdf:fixtext>
           <xccdf:fix id="F-61460r925371_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257795" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257795" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4535,14 +4542,14 @@ Add or modify the following line in "/etc/default/grub" to ensure the configurat
 GRUB_CMDLINE_LINUX="audit=1"</xccdf:fixtext>
           <xccdf:fix id="F-61461r925374_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257796" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257796" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257797">
         <xccdf:title>SRG-OS-000132-GPOS-00067</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257797r1117266_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257797r1155691_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-213010</xccdf:version>
           <xccdf:title>RHEL 9 must restrict access to the kernel message buffer.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
@@ -4553,7 +4560,7 @@ There may be shared resources with configurable protections (e.g., files in stor
 
 Restricting access to the kernel message buffer limits access to only root. This prevents attackers from gaining additional system information as a nonprivileged user.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -4572,33 +4579,28 @@ Satisfies: SRG-OS-000132-GPOS-00067, SRG-OS-000138-GPOS-00069&lt;/VulnDiscussion
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-001082</xccdf:ident>
           <xccdf:ident system="http://cyber.mil/cci">CCI-001090</xccdf:ident>
-          <xccdf:fixtext fixref="F-61462r1102065_fix">Configure RHEL 9 to restrict access to the kernel message buffer.
+          <xccdf:fixtext fixref="F-61462r1155690_fix">Configure RHEL 9 to restrict access to the kernel message buffer.
 
-Add or edit the following line in a system configuration file, in the "/etc/sysctl.d/" directory:
+Create a drop-in if it does not already exist:
 
-kernel.dmesg_restrict = 1
+$ sudo vi /etc/sysctl.d/99-dmesg_restrict.conf
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Add the following to the file:
+kernel.dmesg_restrict = 1
 
-Load settings from all system configuration files with the following command:
+Reload settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-61462r1102065_fix" />
+          <xccdf:fix id="F-61462r1155690_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257797" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257797" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257798">
         <xccdf:title>SRG-OS-000132-GPOS-00067</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257798r1117266_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257798r1155694_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-213015</xccdf:version>
           <xccdf:title>RHEL 9 must prevent kernel profiling by nonprivileged users.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
@@ -4609,7 +4611,7 @@ There may be shared resources with configurable protections (e.g., files in stor
 
 Setting the kernel.perf_event_paranoid kernel parameter to "2" prevents attackers from gaining additional system information as a nonprivileged user.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -4628,40 +4630,35 @@ Satisfies: SRG-OS-000132-GPOS-00067, SRG-OS-000138-GPOS-00069&lt;/VulnDiscussion
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-001082</xccdf:ident>
           <xccdf:ident system="http://cyber.mil/cci">CCI-001090</xccdf:ident>
-          <xccdf:fixtext fixref="F-61463r1102051_fix">Configure RHEL 9 to prevent kernel profiling by nonprivileged users.
+          <xccdf:fixtext fixref="F-61463r1155693_fix">Configure RHEL 9 to prevent kernel profiling by nonprivileged users.
 
-Add or edit the following line in a system configuration file, in the "/etc/sysctl.d/" directory:
+Create a drop-in if it does not already exist:
 
-kernel.perf_event_paranoid = 2
+$ sudo vi /etc/sysctl.d/99-kernel_perf_event_paranoid.conf
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Add the following to the file:
+kernel.perf_event_paranoid = 2
 
-Load settings from all system configuration files with the following command:
+Reload settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-61463r1102051_fix" />
+          <xccdf:fix id="F-61463r1155693_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257798" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257798" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257799">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257799r1106273_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257799r1155697_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-213020</xccdf:version>
           <xccdf:title>RHEL 9 must prevent the loading of a new kernel for later execution.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Changes to any software components can have significant effects on the overall security of the operating system. This requirement ensures the software has not been tampered with and that it has been provided by a trusted vendor.
 
 Disabling kexec_load prevents an unsigned kernel image (that could be a windows kernel or modified vulnerable kernel) from being loaded. Kexec can be used subvert the entire secureboot process and should be avoided at all costs especially since it can load unsigned kernel images.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -4680,36 +4677,33 @@ Satisfies: SRG-OS-000480-GPOS-00227, SRG-OS-000366-GPOS-00153&lt;/VulnDiscussion
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-003992</xccdf:ident>
           <xccdf:ident system="http://cyber.mil/cci">CCI-001749</xccdf:ident>
-          <xccdf:fixtext fixref="F-61464r1106272_fix">Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+          <xccdf:fixtext fixref="F-61464r1155696_fix">Configure RHEL 9 to disable kernel image loading.
 
-kernel.kexec_load_disabled = 1
+Create a drop-in if it does not already exist:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+$ sudo vi /etc/sysctl.d/99-kernel_kexec_load_disabled.conf
 
-Load settings from all system configuration files with the following command:
+Add the following to the file:
+kernel.kexec_load_disabled = 1
+
+Reload settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-61464r1106272_fix" />
+          <xccdf:fix id="F-61464r1155696_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257799" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257799" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257800">
         <xccdf:title>SRG-OS-000132-GPOS-00067</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257800r1117266_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257800r1155700_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-213025</xccdf:version>
           <xccdf:title>RHEL 9 must restrict exposed kernel pointer addresses access.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -4728,40 +4722,37 @@ Satisfies: SRG-OS-000132-GPOS-00067, SRG-OS-000433-GPOS-00192, SRG-OS-000480-GPO
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-001082</xccdf:ident>
           <xccdf:ident system="http://cyber.mil/cci">CCI-002824</xccdf:ident>
-          <xccdf:fixtext fixref="F-61465r1106275_fix">Configure RHEL 9 to restrict exposed kernel pointer addresses access by adding the following line to a file in the "/etc/sysctl.d" directory:
+          <xccdf:fixtext fixref="F-61465r1155699_fix">Configure RHEL 9 to restrict exposed kernel pointer addresses access.
 
-kernel.kptr_restrict = 1
+Create a drop-in if it does not already exist:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+$ sudo vi /etc/sysctl.d/99-kernel_kptr_restrict.conf
+
+Add the following to the file:
+kernel.kptr_restrict = 1
 
-The system configuration files need to be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
+Reload settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-61465r1106275_fix" />
+          <xccdf:fix id="F-61465r1155699_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257800" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257800" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257801">
         <xccdf:title>SRG-OS-000312-GPOS-00123</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257801r1106279_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257801r1155703_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-213030</xccdf:version>
-          <xccdf:title>RHEL 9 must enable kernel parameters to enforce discretionary access control on hardlinks.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Discretionary Access Control (DAC) is based on the notion that individual users are "owners" of objects and therefore have discretion over who should be authorized to access the object and in which mode (e.g., read or write). Ownership is usually acquired as a consequence of creating the object or via specified ownership assignment. DAC allows the owner to determine who will have access to objects they control. An example of DAC includes user-controlled file permissions.
+          <xccdf:title>RHEL 9 must enable kernel parameters to enforce discretionary access control (DAC) on hardlinks.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;DAC is based on the notion that individual users are "owners" of objects and therefore have discretion over who should be authorized to access the object and in which mode (e.g., read or write). Ownership is usually acquired as a consequence of creating the object or via specified ownership assignment. DAC allows the owner to determine who will have access to objects they control. An example of DAC includes user-controlled file permissions.
 
 When discretionary access control policies are implemented, subjects are not constrained with regard to what actions they can take with information for which they have already been granted access. Thus, subjects that have been granted access to information are not prevented from passing (i.e., the subjects have the discretion to pass) the information to other subjects or objects. A subject that is constrained in its operation by Mandatory Access Control policies is still able to operate under the less rigorous constraints of this requirement. Thus, while Mandatory Access Control imposes constraints preventing a subject from passing information to another subject operating at a different sensitivity level, this requirement permits the subject to pass the information to any subject at the same sensitivity level. The policy is bounded by the information system boundary. Once the information is passed outside the control of the information system, additional means may be required to ensure the constraints remain in effect. While the older, more traditional definitions of discretionary access control require identity-based access control, that limitation is not required for this use of discretionary access control.
 
 By enabling the fs.protected_hardlinks kernel parameter, users can no longer create soft or hard links to files they do not own. Disallowing such hardlinks mitigate vulnerabilities based on insecure file system accessed by privileged programs, avoiding an exploitation vector exploiting unsafe use of open() or creat().
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -4780,40 +4771,37 @@ Satisfies: SRG-OS-000312-GPOS-00122, SRG-OS-000312-GPOS-00123, SRG-OS-000312-GPO
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-002165</xccdf:ident>
           <xccdf:ident system="http://cyber.mil/cci">CCI-002235</xccdf:ident>
-          <xccdf:fixtext fixref="F-61466r1106278_fix">Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+          <xccdf:fixtext fixref="F-61466r1155702_fix">Configure RHEL 9 to enable DAC on hardlinks.
 
-fs.protected_hardlinks = 1
+Create a drop-in if it does not already exist:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+$ sudo vi /etc/sysctl.d/99-fs_protected_hardlinks.conf
 
-Load settings from all system configuration files with the following command:
+Add the following to the file:
+fs.protected_hardlinks = 1
+
+Reload settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-61466r1106278_fix" />
+          <xccdf:fix id="F-61466r1155702_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257801" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257801" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257802">
         <xccdf:title>SRG-OS-000312-GPOS-00123</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257802r1106282_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257802r1155706_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-213035</xccdf:version>
-          <xccdf:title>RHEL 9 must enable kernel parameters to enforce discretionary access control on symlinks.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Discretionary Access Control (DAC) is based on the notion that individual users are "owners" of objects and therefore have discretion over who should be authorized to access the object and in which mode (e.g., read or write). Ownership is usually acquired as a consequence of creating the object or via specified ownership assignment. DAC allows the owner to determine who will have access to objects they control. An example of DAC includes user-controlled file permissions.
+          <xccdf:title>RHEL 9 must enable kernel parameters to enforce discretionary access (DAC) control on symlinks.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;DAC is based on the notion that individual users are "owners" of objects and therefore have discretion over who should be authorized to access the object and in which mode (e.g., read or write). Ownership is usually acquired as a consequence of creating the object or via specified ownership assignment. DAC allows the owner to determine who will have access to objects they control. An example of DAC includes user-controlled file permissions.
 
 When discretionary access control policies are implemented, subjects are not constrained with regard to what actions they can take with information for which they have already been granted access. Thus, subjects that have been granted access to information are not prevented from passing (i.e., the subjects have the discretion to pass) the information to other subjects or objects. A subject that is constrained in its operation by Mandatory Access Control policies is still able to operate under the less rigorous constraints of this requirement. Thus, while Mandatory Access Control imposes constraints preventing a subject from passing information to another subject operating at a different sensitivity level, this requirement permits the subject to pass the information to any subject at the same sensitivity level. The policy is bounded by the information system boundary. Once the information is passed outside the control of the information system, additional means may be required to ensure the constraints remain in effect. While the older, more traditional definitions of discretionary access control require identity-based access control, that limitation is not required for this use of discretionary access control.
 
 By enabling the fs.protected_symlinks kernel parameter, symbolic links are permitted to be followed only when outside a sticky world-writable directory, or when the UID of the link and follower match, or when the directory owner matches the symlink's owner. Disallowing such symlinks helps mitigate vulnerabilities based on insecure file system accessed by privileged programs, avoiding an exploitation vector exploiting unsafe use of open() or creat().
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -4832,38 +4820,33 @@ Satisfies: SRG-OS-000312-GPOS-00122, SRG-OS-000312-GPOS-00123, SRG-OS-000312-GPO
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-002165</xccdf:ident>
           <xccdf:ident system="http://cyber.mil/cci">CCI-002235</xccdf:ident>
-          <xccdf:fixtext fixref="F-61467r1106281_fix">Configure RHEL 9 to enable DAC on symlinks.
+          <xccdf:fixtext fixref="F-61467r1155705_fix">Configure RHEL 9 to enable DAC on symlinks with the following:
 
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+Create a drop-in if it does not already exist:
 
-fs.protected_symlinks = 1
+$ sudo vi /etc/sysctl.d/99-fs_protected_symlinks.conf
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Add the following to the file:
+fs.protected_symlinks = 1
 
-Load settings from all system configuration files with the following command:
+Reload settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-61467r1106281_fix" />
+          <xccdf:fix id="F-61467r1155705_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257802" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257802" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257803">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257803r1106429_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257803r1155668_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-213040</xccdf:version>
           <xccdf:title>RHEL 9 must disable the kernel.core_pattern.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore, may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
+          <xccdf:description>&lt;VulnDiscussion&gt;A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -4879,26 +4862,21 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>5551</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-61468r1106428_fix">Configure RHEL 9 to disable storing core dumps.
+          <xccdf:fixtext fixref="F-61468r1155667_fix">Configure RHEL 9 to disable storing core dumps. 
 
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+Create a drop-in if it does not already exist:
 
-kernel.core_pattern = |/bin/false
+$ sudo vi /etc/sysctl.d/99-kernel_core_pattern.conf
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Add the following to the file:
+kernel.core_pattern = |/bin/false
 
-The system configuration files must reloaded for the changes to take effect. To reload the contents of the files, run the following command:
+Reload settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-61468r1106428_fix" />
+          <xccdf:fix id="F-61468r1155667_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257803" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257803" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4923,7 +4901,7 @@ install atm /bin/false
 blacklist atm</xccdf:fixtext>
           <xccdf:fix id="F-61469r925398_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257804" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257804" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4948,7 +4926,7 @@ install can /bin/false
 blacklist can</xccdf:fixtext>
           <xccdf:fix id="F-61470r1044855_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257805" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257805" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -4973,7 +4951,7 @@ install firewire-core /bin/false
 blacklist firewire-core</xccdf:fixtext>
           <xccdf:fix id="F-61471r1044858_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257806" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257806" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5002,7 +4980,7 @@ install sctp /bin/false
 blacklist sctp</xccdf:fixtext>
           <xccdf:fix id="F-61472r1044861_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257807" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257807" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5031,21 +5009,21 @@ install tipc /bin/false
 blacklist tipc</xccdf:fixtext>
           <xccdf:fix id="F-61473r1044864_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257808" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257808" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257809">
         <xccdf:title>SRG-OS-000433-GPOS-00193</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257809r1106288_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257809r1155709_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-213070</xccdf:version>
           <xccdf:title>RHEL 9 must implement address space layout randomization (ASLR) to protect its memory from unauthorized code execution.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Some adversaries launch attacks with the intent of executing code in nonexecutable regions of memory or in memory locations that are prohibited. Security safeguards employed to protect memory include, for example, data execution prevention and address space layout randomization. Data execution prevention safeguards can be either hardware-enforced or software-enforced with hardware providing the greater strength of mechanism.
 
 Examples of attacks are buffer overflow attacks.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -5063,38 +5041,33 @@ Satisfies: SRG-OS-000433-GPOS-00193, SRG-OS-000480-GPOS-00227&lt;/VulnDiscussion
             <dc:identifier>5551</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-002824</xccdf:ident>
-          <xccdf:fixtext fixref="F-61474r1106287_fix">Configure RHEL 9 to implement virtual address space randomization.
+          <xccdf:fixtext fixref="F-61474r1155708_fix">Configure RHEL 9 to implement ASLR.
 
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+Create the drop-in if it does not already exist:
 
-kernel.randomize_va_space=2
+$ sudo vi /etc/sysctl.d/99-kernel_randomize_va_space.conf
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Add the following line to the file:
+kernel.randomize_va_space = 2
 
-Issue the following command to make the changes take effect:
+Reload settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-61474r1106287_fix" />
+          <xccdf:fix id="F-61474r1155708_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257809" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257809" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257810">
         <xccdf:title>SRG-OS-000132-GPOS-00067</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257810r1117266_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257810r1155712_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-213075</xccdf:version>
           <xccdf:title>RHEL 9 must disable access to network bpf system call from nonprivileged processes.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore, may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -5112,31 +5085,28 @@ Satisfies: SRG-OS-000132-GPOS-00067, SRG-OS-000480-GPOS-00227&lt;/VulnDiscussion
             <dc:identifier>5551</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-001082</xccdf:ident>
-          <xccdf:fixtext fixref="F-61475r1106430_fix">Configure RHEL 9 to prevent privilege escalation through the kernel by disabling access to the bpf syscall by adding the following line to a file in the "/etc/sysctl.d" directory:
+          <xccdf:fixtext fixref="F-61475r1155711_fix">Configure RHEL 9 to prevent privilege escalation through the kernel by disabling access to the bpf system call.
 
-kernel.unprivileged_bpf_disabled = 1
+Create the drop-in file if it does not already exist:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+$ sudo vi /etc/sysctl.d/99-kernel_unprivileged_bpf_disabled.conf
+
+Add the following line to the file:
+kernel.unprivileged_bpf_disabled = 1
 
-The system configuration files must be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
+Reload settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-61475r1106430_fix" />
+          <xccdf:fix id="F-61475r1155711_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257810" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257810" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257811">
         <xccdf:title>SRG-OS-000132-GPOS-00067</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257811r1117266_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257811r1155674_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-213080</xccdf:version>
           <xccdf:title>RHEL 9 must restrict usage of ptrace to descendant processes.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore, may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
@@ -5159,24 +5129,21 @@ Satisfies: SRG-OS-000132-GPOS-00067, SRG-OS-000480-GPOS-00227&lt;/VulnDiscussion
             <dc:identifier>5551</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-001082</xccdf:ident>
-          <xccdf:fixtext fixref="F-61476r1106432_fix">Configure RHEL 9 to restrict usage of ptrace to descendant processes by adding the following line to a file in the "/etc/sysctl.d" directory:
+          <xccdf:fixtext fixref="F-61476r1155673_fix">Configure RHEL 9 to restrict the usage of ptrace to descendant processes.
 
-kernel.yama.ptrace_scope = 1
+Create the drop-in if it doesn't already exist:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+$ sudo vi /etc/sysctl.d/99-kernel_yama.ptrace_scope.conf
+
+Add the following line to the file:
+kernel.yama.ptrace_scope = 1
 
-The system configuration files must be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
+Reload settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-61476r1106432_fix" />
+          <xccdf:fix id="F-61476r1155673_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257811" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257811" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5205,7 +5172,7 @@ Add or modify the following line in /etc/systemd/coredump.conf:
 ProcessSizeMax=0</xccdf:fixtext>
           <xccdf:fix id="F-61477r925422_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257812" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257812" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5232,14 +5199,14 @@ Add or modify the following line in /etc/systemd/coredump.conf:
 Storage=none</xccdf:fixtext>
           <xccdf:fix id="F-61478r925425_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257813" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257813" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257814">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257814r1134901_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257814r1156057_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-213095</xccdf:version>
           <xccdf:title>RHEL 9 must disable core dumps for all users.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
@@ -5252,14 +5219,16 @@ Storage=none</xccdf:fixtext>
           </xccdf:reference>
           <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxKernelDumps" />
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-61479r925428_fix">Configure the operating system to disable core dumps for all users.
+          <xccdf:fixtext fixref="F-61479r1155592_fix">Configure RHEL 9 to disable core dumps for all users.
 
 Add the following line to the top of the /etc/security/limits.conf or in a single ".conf" file defined in /etc/security/limits.d/:
 
-* hard core 0</xccdf:fixtext>
-          <xccdf:fix id="F-61479r925428_fix" />
+* hard core 0
+
+Remove or comment out any entries for users or groups with a value set to anything other than "0".</xccdf:fixtext>
+          <xccdf:fix id="F-61479r1155592_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257814" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257814" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5290,19 +5259,19 @@ Reload the daemon for this change to take effect.
 $ sudo systemctl daemon-reload</xccdf:fixtext>
           <xccdf:fix id="F-61480r925431_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257815" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257815" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257816">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257816r1106435_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257816r1155715_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-213105</xccdf:version>
           <xccdf:title>RHEL 9 must disable the use of user namespaces.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore, may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -5318,24 +5287,22 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>5551</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-61481r1106434_fix">Configure RHEL 9 to disable the use of user namespaces by adding the following line to a file in the "/etc/sysctl.d" directory:
+          <xccdf:fixtext fixref="F-61481r1155714_fix">Configure RHEL 9 to disable the use of user namespaces.
 
-user.max_user_namespaces = 0
+Create the drop-in if it does not already exist:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+$ sudo vi /etc/sysctl.d/99-user_max_user_namespaces.conf
+
+Add the following line to the file:
+
+user.max_user_namespaces = 0
 
-The system configuration files must be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
+Reload settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-61481r1106434_fix" />
+          <xccdf:fix id="F-61481r1155714_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257816" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257816" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5365,7 +5332,7 @@ To mask the kdump service run the following command:
 $ sudo systemctl mask --now kdump</xccdf:fixtext>
           <xccdf:fix id="F-61483r925440_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257818" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257818" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5396,7 +5363,7 @@ Add or update the following line in the [main] section of the /etc/dnf/dnf.conf
 gpgcheck=1</xccdf:fixtext>
           <xccdf:fix id="F-61485r925446_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257820" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257820" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5427,14 +5394,14 @@ Add or update the following line in the [main] section of the /etc/dnf/dnf.conf
 localpkg_gpgcheck=1</xccdf:fixtext>
           <xccdf:fix id="F-61486r925449_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257821" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257821" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257822">
         <xccdf:title>SRG-OS-000366-GPOS-00153</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257822r1044880_rule" severity="high" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257822r1155615_rule" severity="high" weight="10.0">
           <xccdf:version>RHEL-09-214025</xccdf:version>
           <xccdf:title>RHEL 9 must have GPG signature verification enabled for all software repositories.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Changes to any software components can have significant effects on the overall security of the operating system. This requirement ensures the software has not been tampered with and that it has been provided by a trusted vendor.
@@ -5456,7 +5423,7 @@ Verifying the authenticity of software prior to installation validates the integ
 $ sudo sed -i 's/gpgcheck\s*=.*/gpgcheck=1/g' /etc/yum.repos.d/*</xccdf:fixtext>
           <xccdf:fix id="F-61487r925452_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257822" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257822" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5482,7 +5449,7 @@ Edit the file /etc/dnf/dnf.conf by adding or editing the following line:
  clean_requirements_on_remove=True</xccdf:fixtext>
           <xccdf:fix id="F-61489r1044885_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257824" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257824" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5507,7 +5474,7 @@ Edit the file /etc/dnf/dnf.conf by adding or editing the following line:
 $ sudo dnf install subscription-manager</xccdf:fixtext>
           <xccdf:fix id="F-61490r925461_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257825" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257825" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5538,7 +5505,7 @@ Satisfies: SRG-OS-000074-GPOS-00042, SRG-OS-000095-GPOS-00049, SRG-OS-000480-GPO
 $ sudo dnf remove vsftpd</xccdf:fixtext>
           <xccdf:fix id="F-61491r925464_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257826" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257826" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5564,7 +5531,7 @@ Satisfies: SRG-OS-000480-GPOS-00227, SRG-OS-000095-GPOS-00049&lt;/VulnDiscussion
 $ sudo dnf remove sendmail</xccdf:fixtext>
           <xccdf:fix id="F-61492r925467_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257827" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257827" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5588,7 +5555,7 @@ $ sudo dnf remove sendmail</xccdf:fixtext>
 $ sudo dnf remove nfs-utils</xccdf:fixtext>
           <xccdf:fix id="F-61493r925470_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257828" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257828" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5614,7 +5581,7 @@ Removing the "ypserv" package decreases the risk of the accidental (or intention
 $ sudo dnf remove ypserv</xccdf:fixtext>
           <xccdf:fix id="F-61494r925473_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257829" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257829" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5642,14 +5609,14 @@ Removing the "telnet-server" package decreases the risk of accidental (or intent
 $ sudo dnf remove telnet-server</xccdf:fixtext>
           <xccdf:fix id="F-61496r925479_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257831" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257831" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257832">
         <xccdf:title>SRG-OS-000095-GPOS-00049</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257832r1044900_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257832r1155653_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-215045</xccdf:version>
           <xccdf:title>RHEL 9 must not have the gssproxy package installed.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore, may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
@@ -5666,13 +5633,14 @@ Satisfies: SRG-OS-000095-GPOS-00049, SRG-OS-000480-GPOS-00227&lt;/VulnDiscussion
             <dc:subject>Red Hat Enterprise Linux 9</dc:subject>
             <dc:identifier>5551</dc:identifier>
           </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxNoNFSMounts" />
           <xccdf:ident system="http://cyber.mil/cci">CCI-000381</xccdf:ident>
           <xccdf:fixtext fixref="F-61497r925482_fix">Remove the gssproxy package with the following command:
 
 $ sudo dnf remove gssproxy</xccdf:fixtext>
           <xccdf:fix id="F-61497r925482_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257832" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257832" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5702,7 +5670,7 @@ Satisfies: SRG-OS-000095-GPOS-00049, SRG-OS-000480-GPOS-00227&lt;/VulnDiscussion
 $ sudo dnf remove iprutils</xccdf:fixtext>
           <xccdf:fix id="F-61498r925485_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257833" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257833" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5732,19 +5700,21 @@ Satisfies: SRG-OS-000095-GPOS-00049, SRG-OS-000480-GPOS-00227&lt;/VulnDiscussion
 $ sudo dnf remove tuned</xccdf:fixtext>
           <xccdf:fix id="F-61499r925488_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257834" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257834" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257835">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257835r1102037_rule" severity="high" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257835r1155679_rule" severity="high" weight="10.0">
           <xccdf:version>RHEL-09-215060</xccdf:version>
-          <xccdf:title>RHEL 9 must not have a Trivial File Transfer Protocol (TFTP) server package installed.</xccdf:title>
+          <xccdf:title>The Trivial File Transfer Protocol (TFTP) server must not be installed unless it is required, and if required, the RHEL 9 TFTP daemon must be configured to operate in secure mode.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Removing the "tftp-server" package decreases the risk of the accidental (or intentional) activation of tftp services.
 
-If TFTP is required for operational support (such as transmission of router configurations), its use must be documented with the information systems security manager (ISSM), restricted to only authorized personnel, and have access control rules established.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+If TFTP is required for operational support (such as transmission of router configurations), its use must be documented with the information systems security manager (ISSM), restricted to only authorized personnel, and have access control rules established.
+
+Restricting TFTP to a specific directory prevents remote users from copying, transferring, or overwriting system files.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
           <xccdf:reference>
             <dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title>
             <dc:publisher>DISA</dc:publisher>
@@ -5752,13 +5722,29 @@ If TFTP is required for operational support (such as transmission of router conf
             <dc:subject>Red Hat Enterprise Linux 9</dc:subject>
             <dc:identifier>5551</dc:identifier>
           </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxTFTP" />
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-61500r952170_fix">The "tftp-server" package can be removed with the following command:
+          <xccdf:fixtext fixref="F-61500r1155678_fix">Configure RHEL 9 so that TFTP operates in secure mode if installed.
+
+If TFTP server is not required, remove it with the following command:
+$ sudo dnf -y remove tftp-server
+
+Configure the TFTP daemon to operate in secure mode with the following command:
+$ sudo systemctl edit tftp.service
+
+In the editor, enter:
+[Service]
+ExecStart=/usr/sbin/in.tftpd -s /var/lib/tftpboot
 
-$ sudo dnf remove tftp-server</xccdf:fixtext>
-          <xccdf:fix id="F-61500r952170_fix" />
+After making changes, reload the systemd daemon and restart the TFTP service as follows:
+
+$ sudo systemctl daemon-reload
+$ sudo systemctl restart tftp.service
+
+If the "-s" option is not present in the "ExecStart" line or if the line is missing, this is a finding.</xccdf:fixtext>
+          <xccdf:fix id="F-61500r1155678_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257835" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257835" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5784,7 +5770,7 @@ If there is no need to make the router software available, removing it provides
 $ sudo dnf remove quagga</xccdf:fixtext>
           <xccdf:fix id="F-61501r925494_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257836" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257836" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5815,7 +5801,7 @@ $ sudo dnf remove "xorg*"
 $ sudo systemctl set-default multi-user.target</xccdf:fixtext>
           <xccdf:fix id="F-61502r925497_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257837" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257837" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5845,7 +5831,7 @@ Satisfies: SRG-OS-000105-GPOS-00052, SRG-OS-000375-GPOS-00160, SRG-OS-000376-GPO
 $ sudo dnf install openssl-pkcs11</xccdf:fixtext>
           <xccdf:fix id="F-61503r925500_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257838" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257838" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5869,7 +5855,7 @@ $ sudo dnf install openssl-pkcs11</xccdf:fixtext>
 $ sudo dnf install gnutls-utils</xccdf:fixtext>
           <xccdf:fix id="F-61504r925503_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257839" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257839" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5893,7 +5879,7 @@ $ sudo dnf install gnutls-utils</xccdf:fixtext>
 $ sudo dnf install nss-tools</xccdf:fixtext>
           <xccdf:fix id="F-61505r925506_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257840" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257840" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5917,7 +5903,7 @@ $ sudo dnf install nss-tools</xccdf:fixtext>
 $ sudo dnf install rng-tools</xccdf:fixtext>
           <xccdf:fix id="F-61506r925509_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257841" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257841" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5941,7 +5927,7 @@ $ sudo dnf install rng-tools</xccdf:fixtext>
 $ sudo dnf install s-nail</xccdf:fixtext>
           <xccdf:fix id="F-61507r925512_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257842" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257842" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5963,7 +5949,7 @@ $ sudo dnf install s-nail</xccdf:fixtext>
           <xccdf:fixtext fixref="F-61508r925515_fix">Migrate the "/home" directory onto a separate file system/partition.</xccdf:fixtext>
           <xccdf:fix id="F-61508r925515_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257843" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257843" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -5985,7 +5971,7 @@ $ sudo dnf install s-nail</xccdf:fixtext>
           <xccdf:fixtext fixref="F-61509r925518_fix">Migrate the "/tmp" path onto a separate file system.</xccdf:fixtext>
           <xccdf:fix id="F-61509r925518_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257844" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257844" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6007,7 +5993,7 @@ $ sudo dnf install s-nail</xccdf:fixtext>
           <xccdf:fixtext fixref="F-61510r925521_fix">Migrate the "/var" path onto a separate file system.</xccdf:fixtext>
           <xccdf:fix id="F-61510r925521_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257845" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257845" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6029,7 +6015,7 @@ $ sudo dnf install s-nail</xccdf:fixtext>
           <xccdf:fixtext fixref="F-61511r925524_fix">Migrate the "/var/log" path onto a separate file system.</xccdf:fixtext>
           <xccdf:fix id="F-61511r925524_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257846" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257846" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6053,7 +6039,7 @@ Satisfies: SRG-OS-000341-GPOS-00132, SRG-OS-000480-GPOS-00227&lt;/VulnDiscussion
           <xccdf:fixtext fixref="F-61512r925527_fix">Migrate the system audit data path onto a separate file system.</xccdf:fixtext>
           <xccdf:fix id="F-61512r925527_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257847" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257847" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6075,7 +6061,7 @@ Satisfies: SRG-OS-000341-GPOS-00132, SRG-OS-000480-GPOS-00227&lt;/VulnDiscussion
           <xccdf:fixtext fixref="F-61513r925530_fix">Migrate the "/var/tmp" path onto a separate file system.</xccdf:fixtext>
           <xccdf:fix id="F-61513r925530_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257848" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257848" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6105,7 +6091,7 @@ The autofs service can be disabled with the following command:
 $ sudo systemctl mask --now autofs.service</xccdf:fixtext>
           <xccdf:fix id="F-61514r925533_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257849" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257849" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6129,7 +6115,7 @@ The only legitimate location for device files is the "/dev" directory located on
           <xccdf:fixtext fixref="F-61515r925536_fix">Modify "/etc/fstab" to use the "nodev" option on the "/home" directory.</xccdf:fixtext>
           <xccdf:fix id="F-61515r925536_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257850" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257850" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6153,7 +6139,7 @@ Satisfies: SRG-OS-000368-GPOS-00154, SRG-OS-000480-GPOS-00227&lt;/VulnDiscussion
           <xccdf:fixtext fixref="F-61516r925539_fix">Modify "/etc/fstab" to use the "nosuid" option on the "/home" directory.</xccdf:fixtext>
           <xccdf:fix id="F-61516r925539_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257851" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257851" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6175,7 +6161,7 @@ Satisfies: SRG-OS-000368-GPOS-00154, SRG-OS-000480-GPOS-00227&lt;/VulnDiscussion
           <xccdf:fixtext fixref="F-61517r925542_fix">Modify "/etc/fstab" to use the "noexec" option on the "/home" directory.</xccdf:fixtext>
           <xccdf:fix id="F-61517r925542_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257852" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257852" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6198,7 +6184,7 @@ Satisfies: SRG-OS-000368-GPOS-00154, SRG-OS-000480-GPOS-00227&lt;/VulnDiscussion
           <xccdf:fixtext fixref="F-61519r925548_fix">Update each NFS mounted file system to use the "nodev" option on file systems that are being imported via NFS.</xccdf:fixtext>
           <xccdf:fix id="F-61519r925548_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257854" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257854" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6216,11 +6202,12 @@ Satisfies: SRG-OS-000368-GPOS-00154, SRG-OS-000480-GPOS-00227&lt;/VulnDiscussion
             <dc:subject>Red Hat Enterprise Linux 9</dc:subject>
             <dc:identifier>5551</dc:identifier>
           </xccdf:reference>
+          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxNFSMounts" />
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
           <xccdf:fixtext fixref="F-61520r925551_fix">Update each NFS mounted file system to use the "noexec" option on file systems that are being imported via NFS.</xccdf:fixtext>
           <xccdf:fix id="F-61520r925551_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257855" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257855" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6243,7 +6230,7 @@ Satisfies: SRG-OS-000368-GPOS-00154, SRG-OS-000480-GPOS-00227&lt;/VulnDiscussion
           <xccdf:fixtext fixref="F-61521r925554_fix">Update each NFS mounted file system to use the "nosuid" option on file systems that are being imported via NFS.</xccdf:fixtext>
           <xccdf:fix id="F-61521r925554_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257856" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257856" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6265,7 +6252,7 @@ Satisfies: SRG-OS-000368-GPOS-00154, SRG-OS-000480-GPOS-00227&lt;/VulnDiscussion
           <xccdf:fixtext fixref="F-61525r925566_fix">Modify "/etc/fstab" to use the "nodev" option on the "/boot" directory.</xccdf:fixtext>
           <xccdf:fix id="F-61525r925566_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257860" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257860" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6289,14 +6276,14 @@ Satisfies: SRG-OS-000368-GPOS-00154, SRG-OS-000480-GPOS-00227&lt;/VulnDiscussion
           <xccdf:fixtext fixref="F-61526r925569_fix">Modify "/etc/fstab" to use the "nosuid" option on the "/boot" directory.</xccdf:fixtext>
           <xccdf:fix id="F-61526r925569_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257861" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257861" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257862">
         <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257862r1134908_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257862r1155661_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-231105</xccdf:version>
           <xccdf:title>RHEL 9 must prevent files with the setuid and setgid bit set from being executed on the /boot/efi directory.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system not to execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
@@ -6314,14 +6301,14 @@ Satisfies: SRG-OS-000368-GPOS-00154, SRG-OS-000480-GPOS-00227&lt;/VulnDiscussion
           <xccdf:fixtext fixref="F-61527r1051264_fix">Modify "/etc/fstab" to use the "nosuid" option on the "/boot/efi" directory.</xccdf:fixtext>
           <xccdf:fix id="F-61527r1051264_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257862" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257862" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257863">
         <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257863r958804_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257863r1155633_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-231110</xccdf:version>
           <xccdf:title>RHEL 9 must mount /dev/shm with the nodev option.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
@@ -6335,17 +6322,27 @@ The only legitimate location for device files is the "/dev" directory located on
             <dc:identifier>5551</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
-          <xccdf:fixtext fixref="F-61528r925575_fix">Modify "/etc/fstab" to use the "nodev" option on the "/dev/shm" file system.</xccdf:fixtext>
-          <xccdf:fix id="F-61528r925575_fix" />
+          <xccdf:fixtext fixref="F-61528r1155632_fix">Configure "/dev/shm" to mount with the "nodev" option.
+
+Modify "/etc/fstab" to use the "nodev" option on the "/dev/shm" file system.
+
+To reload all implicit mount units and update the dependency graph so that new options will apply correctly at next remount, run the following command:
+
+$ sudo systemctl daemon-reload
+
+Use the following command to apply the changes immediately without a reboot:
+
+$ sudo mount -o remount /dev/shm</xccdf:fixtext>
+          <xccdf:fix id="F-61528r1155632_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257863" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257863" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257864">
         <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257864r1106304_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257864r1155639_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-231115</xccdf:version>
           <xccdf:title>RHEL 9 must mount /dev/shm with the noexec option.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;The "noexec" mount option causes the system to not execute binary files. This option must be used for mounting any file system not containing approved binary files, as they may be incompatible. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
@@ -6357,50 +6354,27 @@ The only legitimate location for device files is the "/dev" directory located on
             <dc:identifier>5551</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
-          <xccdf:fixtext fixref="F-61529r1106303_fix">Configure "/dev/shm" to mount with the "noexec" option.
-
-Determine how /dev/shm is managed.
-
-$ systemctl status systemd-tmpfiles-setup
-If "active", systemd is managing temporary files (including /dev/shm).
-Otherwise, /etc/fstab is managing temporary files.
+          <xccdf:fixtext fixref="F-61529r1155638_fix">Configure "/dev/shm" to mount with the "noexec" option.
 
-If systemd is managing /dev/shm, use the following commands to add the noexec option to the mount:
-     If /etc/tmpfiles.d does not exist, create it:
-     $ sudo mkdir -p /etc/tmpfiles.d
+Modify "/etc/fstab" to use the "noexec" option on the "/dev/shm" file system.
 
-     Add a configuration file with the appropriate options for /dev/shm as follows:
-     $ echo 'd /dev/shm 1777 root root 10d' | sudo tee /etc/tmpfiles.d/dev-shm.conf
-     $ echo 'x /dev/shm' | sudo tee -a /etc/tmpfiles.d/dev-shm.conf
+To reload all implicit mount units and update the dependency graph so that new options will apply correctly at next remount, run the following command:
 
-     Apply new mount options with the following commands:
-     $ sudo systemctl mask tmp.mount
-     Created symlink /etc/systemd/system/tmp.mount ? /dev/null.
-
-     $ echo 'tmpfs /dev/shm tmpfs rw,nodev,nosuid,noexec,seclabel 0 0' | sudo tee -a /etc/fstab
-     $ sudo mount -o remount /dev/shm
-     $ sudo systemctl daemon-reload
-
-If /dev/shm is managed by /etc/fstab, use the following commands to add the noexec option to the mount:
-     $ sudo vi /etc/fstab
-
-     Add or modify the following line:
-     tmpfs /dev/shm tmpfs rw,nodev,nosuid,noexec,seclabel 0 0
+$ sudo systemctl daemon-reload
 
-     Remount /dev/shm:
-     $ sudo mount -o remount /dev/shm
+Use the following command to apply the changes immediately without a reboot:
 
-Note: Although systemd manages tmpfs mounts by default, administrators can override settings by adding entries to /etc/fstab. Either approach is acceptable.</xccdf:fixtext>
-          <xccdf:fix id="F-61529r1106303_fix" />
+$ sudo mount -o remount /dev/shm</xccdf:fixtext>
+          <xccdf:fix id="F-61529r1155638_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257864" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257864" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257865">
         <xccdf:title>SRG-OS-000368-GPOS-00154</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257865r1044946_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257865r1155636_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-231120</xccdf:version>
           <xccdf:title>RHEL 9 must mount /dev/shm with the nosuid option.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;The "nosuid" mount option causes the system to not execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
@@ -6412,10 +6386,20 @@ Note: Although systemd manages tmpfs mounts by default, administrators can overr
             <dc:identifier>5551</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-001764</xccdf:ident>
-          <xccdf:fixtext fixref="F-61530r925581_fix">Modify "/etc/fstab" to use the "nosuid" option on the "/dev/shm" file system.</xccdf:fixtext>
-          <xccdf:fix id="F-61530r925581_fix" />
+          <xccdf:fixtext fixref="F-61530r1155635_fix">Configure "/dev/shm" to mount with the "nosuid" option.
+
+Modify "/etc/fstab" to use the "nosuid" option on the "/dev/shm" file system.
+
+To reload all implicit mount units and update the dependency graph so that new options will apply correctly at next remount, run the following command:
+
+$ sudo systemctl daemon-reload
+
+Use the following command to apply the changes immediately without a reboot:
+
+$ sudo mount -o remount /dev/shm</xccdf:fixtext>
+          <xccdf:fix id="F-61530r1155635_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257865" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257865" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6439,7 +6423,7 @@ The only legitimate location for device files is the "/dev" directory located on
           <xccdf:fixtext fixref="F-61531r925584_fix">Modify "/etc/fstab" to use the "nodev" option on the "/tmp" directory.</xccdf:fixtext>
           <xccdf:fix id="F-61531r925584_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257866" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257866" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6461,7 +6445,7 @@ The only legitimate location for device files is the "/dev" directory located on
           <xccdf:fixtext fixref="F-61532r925587_fix">Modify "/etc/fstab" to use the "noexec" option on the "/tmp" directory.</xccdf:fixtext>
           <xccdf:fix id="F-61532r925587_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257867" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257867" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6483,7 +6467,7 @@ The only legitimate location for device files is the "/dev" directory located on
           <xccdf:fixtext fixref="F-61533r925590_fix">Modify "/etc/fstab" to use the "nosuid" option on the "/tmp" directory.</xccdf:fixtext>
           <xccdf:fix id="F-61533r925590_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257868" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257868" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6507,7 +6491,7 @@ The only legitimate location for device files is the "/dev" directory located on
           <xccdf:fixtext fixref="F-61534r925593_fix">Modify "/etc/fstab" to use the "nodev" option on the "/var" directory.</xccdf:fixtext>
           <xccdf:fix id="F-61534r925593_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257869" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257869" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6531,7 +6515,7 @@ The only legitimate location for device files is the "/dev" directory located on
           <xccdf:fixtext fixref="F-61535r925596_fix">Modify "/etc/fstab" to use the "nodev" option on the "/var/log" directory.</xccdf:fixtext>
           <xccdf:fix id="F-61535r925596_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257870" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257870" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6553,7 +6537,7 @@ The only legitimate location for device files is the "/dev" directory located on
           <xccdf:fixtext fixref="F-61536r925599_fix">Modify "/etc/fstab" to use the "noexec" option on the "/var/log" directory.</xccdf:fixtext>
           <xccdf:fix id="F-61536r925599_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257871" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257871" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6575,7 +6559,7 @@ The only legitimate location for device files is the "/dev" directory located on
           <xccdf:fixtext fixref="F-61537r925602_fix">Modify "/etc/fstab" to use the "nosuid" option on the "/var/log" directory.</xccdf:fixtext>
           <xccdf:fix id="F-61537r925602_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257872" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257872" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6599,7 +6583,7 @@ The only legitimate location for device files is the "/dev" directory located on
           <xccdf:fixtext fixref="F-61538r925605_fix">Modify "/etc/fstab" to use the "nodev" option on the "/var/log/audit" directory.</xccdf:fixtext>
           <xccdf:fix id="F-61538r925605_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257873" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257873" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6621,7 +6605,7 @@ The only legitimate location for device files is the "/dev" directory located on
           <xccdf:fixtext fixref="F-61539r925608_fix">Modify "/etc/fstab" to use the "noexec" option on the "/var/log/audit" directory.</xccdf:fixtext>
           <xccdf:fix id="F-61539r925608_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257874" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257874" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6643,7 +6627,7 @@ The only legitimate location for device files is the "/dev" directory located on
           <xccdf:fixtext fixref="F-61540r925611_fix">Modify "/etc/fstab" to use the "nosuid" option on the "/var/log/audit" directory.</xccdf:fixtext>
           <xccdf:fix id="F-61540r925611_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257875" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257875" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6667,7 +6651,7 @@ The only legitimate location for device files is the "/dev" directory located on
           <xccdf:fixtext fixref="F-61541r925614_fix">Modify "/etc/fstab" to use the "nodev" option on the "/var/tmp" directory.</xccdf:fixtext>
           <xccdf:fix id="F-61541r925614_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257876" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257876" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6689,7 +6673,7 @@ The only legitimate location for device files is the "/dev" directory located on
           <xccdf:fixtext fixref="F-61542r925617_fix">Modify "/etc/fstab" to use the "noexec" option on the "/var/tmp" directory.</xccdf:fixtext>
           <xccdf:fix id="F-61542r925617_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257877" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257877" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6711,7 +6695,7 @@ The only legitimate location for device files is the "/dev" directory located on
           <xccdf:fixtext fixref="F-61543r925620_fix">Modify "/etc/fstab" to use the "nosuid" option on the "/var/tmp" directory.</xccdf:fixtext>
           <xccdf:fix id="F-61543r925620_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257878" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257878" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6740,14 +6724,14 @@ install cramfs /bin/false
 blacklist cramfs</xccdf:fixtext>
           <xccdf:fix id="F-61545r1044950_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257880" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257880" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257881">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257881r991589_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257881r1155663_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-231200</xccdf:version>
           <xccdf:title>RHEL 9 must prevent special devices on non-root local partitions.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.
@@ -6764,7 +6748,7 @@ The only legitimate location for device files is the "/dev" directory located on
           <xccdf:fixtext fixref="F-61546r925629_fix">Configure the "/etc/fstab" to use the "nodev" option on all non-root local partitions.</xccdf:fixtext>
           <xccdf:fix id="F-61546r925629_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257881" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257881" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6792,7 +6776,7 @@ Run the following command, replacing "[FILE]" with any system command with a mod
 $ sudo chmod 755 [FILE]</xccdf:fixtext>
           <xccdf:fix id="F-61547r925632_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257882" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257882" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6820,7 +6804,7 @@ Run the following command, replacing "[DIRECTORY]" with any library directory wi
 $ sudo chmod 755 [DIRECTORY]</xccdf:fixtext>
           <xccdf:fix id="F-61548r925635_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257883" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257883" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6846,7 +6830,7 @@ This requirement applies to RHEL 9 with software libraries that are accessible a
 $ sudo find /lib /lib64 /usr/lib /usr/lib64 -type f -name '*.so*' -perm /022 -exec chmod go-w {} +</xccdf:fixtext>
           <xccdf:fix id="F-61549r1106305_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257884" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257884" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6872,7 +6856,7 @@ The structure and content of error messages must be carefully considered by the
 $ sudo chmod 0755 /var/log</xccdf:fixtext>
           <xccdf:fix id="F-61550r925641_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257885" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257885" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6898,7 +6882,7 @@ The structure and content of error messages must be carefully considered by the
 $ sudo chmod 0640 /var/log/messages</xccdf:fixtext>
           <xccdf:fix id="F-61551r925644_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257886" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257886" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6928,7 +6912,7 @@ $ sudo chmod 0755 [audit_tool]
 Replace "[audit_tool]" with each audit tool that has a more permissive mode than 0755.</xccdf:fixtext>
           <xccdf:fix id="F-61552r925647_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257887" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257887" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6954,7 +6938,7 @@ Note: The example will be for the wadea user, who has a home directory of "/home
 $ sudo chmod 0740 /home/wadea/.&lt;INIT_FILE&gt;</xccdf:fixtext>
           <xccdf:fix id="F-61554r925653_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257889" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257889" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -6980,7 +6964,7 @@ Note: The example will be for the user "wadea".
 $ sudo chmod 0750 /home/wadea</xccdf:fixtext>
           <xccdf:fix id="F-61555r925656_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257890" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257890" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7004,7 +6988,7 @@ $ sudo chmod 0750 /home/wadea</xccdf:fixtext>
 $ sudo chmod 0644 /etc/group</xccdf:fixtext>
           <xccdf:fix id="F-61556r925659_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257891" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257891" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7028,7 +7012,7 @@ $ sudo chmod 0644 /etc/group</xccdf:fixtext>
 $ sudo chmod 0644 /etc/group-</xccdf:fixtext>
           <xccdf:fix id="F-61557r925662_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257892" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257892" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7052,7 +7036,7 @@ $ sudo chmod 0644 /etc/group-</xccdf:fixtext>
 $ sudo chmod 0000 /etc/gshadow</xccdf:fixtext>
           <xccdf:fix id="F-61558r925665_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257893" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257893" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7076,7 +7060,7 @@ $ sudo chmod 0000 /etc/gshadow</xccdf:fixtext>
 $ sudo chmod 0000 /etc/gshadow-</xccdf:fixtext>
           <xccdf:fix id="F-61559r925668_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257894" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257894" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7100,7 +7084,7 @@ $ sudo chmod 0000 /etc/gshadow-</xccdf:fixtext>
 $ sudo chmod 0644 /etc/passwd</xccdf:fixtext>
           <xccdf:fix id="F-61560r925671_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257895" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257895" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7124,7 +7108,7 @@ $ sudo chmod 0644 /etc/passwd</xccdf:fixtext>
 $ sudo chmod 0644 /etc/passwd-</xccdf:fixtext>
           <xccdf:fix id="F-61561r925674_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257896" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257896" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7148,7 +7132,7 @@ $ sudo chmod 0644 /etc/passwd-</xccdf:fixtext>
 $ sudo chmod 0000 /etc/shadow-</xccdf:fixtext>
           <xccdf:fix id="F-61562r925677_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257897" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257897" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7172,7 +7156,7 @@ $ sudo chmod 0000 /etc/shadow-</xccdf:fixtext>
 $ sudo chown root /etc/group</xccdf:fixtext>
           <xccdf:fix id="F-61563r925680_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257898" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257898" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7196,7 +7180,7 @@ $ sudo chown root /etc/group</xccdf:fixtext>
 $ sudo chgrp root /etc/group</xccdf:fixtext>
           <xccdf:fix id="F-61564r925683_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257899" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257899" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7220,7 +7204,7 @@ $ sudo chgrp root /etc/group</xccdf:fixtext>
 $ sudo chown root /etc/group-</xccdf:fixtext>
           <xccdf:fix id="F-61565r925686_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257900" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257900" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7244,7 +7228,7 @@ $ sudo chown root /etc/group-</xccdf:fixtext>
 $ sudo chgrp root /etc/group-</xccdf:fixtext>
           <xccdf:fix id="F-61566r925689_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257901" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257901" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7268,7 +7252,7 @@ $ sudo chgrp root /etc/group-</xccdf:fixtext>
 $ sudo chown root /etc/gshadow</xccdf:fixtext>
           <xccdf:fix id="F-61567r925692_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257902" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257902" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7292,7 +7276,7 @@ $ sudo chown root /etc/gshadow</xccdf:fixtext>
 $ sudo chgrp root /etc/gshadow</xccdf:fixtext>
           <xccdf:fix id="F-61568r925695_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257903" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257903" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7316,7 +7300,7 @@ $ sudo chgrp root /etc/gshadow</xccdf:fixtext>
 $ sudo chown root /etc/gshadow-</xccdf:fixtext>
           <xccdf:fix id="F-61569r925698_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257904" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257904" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7340,7 +7324,7 @@ $ sudo chown root /etc/gshadow-</xccdf:fixtext>
 $ sudo chgrp root /etc/gshadow-</xccdf:fixtext>
           <xccdf:fix id="F-61570r925701_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257905" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257905" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7364,7 +7348,7 @@ $ sudo chgrp root /etc/gshadow-</xccdf:fixtext>
 $ sudo chown root /etc/passwd</xccdf:fixtext>
           <xccdf:fix id="F-61571r925704_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257906" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257906" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7388,7 +7372,7 @@ $ sudo chown root /etc/passwd</xccdf:fixtext>
 $ sudo chgrp root /etc/passwd</xccdf:fixtext>
           <xccdf:fix id="F-61572r925707_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257907" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257907" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7412,7 +7396,7 @@ $ sudo chgrp root /etc/passwd</xccdf:fixtext>
 $ sudo chown root /etc/passwd-</xccdf:fixtext>
           <xccdf:fix id="F-61573r925710_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257908" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257908" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7436,7 +7420,7 @@ $ sudo chown root /etc/passwd-</xccdf:fixtext>
 $ sudo chgrp root /etc/passwd-</xccdf:fixtext>
           <xccdf:fix id="F-61574r925713_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257909" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257909" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7460,7 +7444,7 @@ $ sudo chgrp root /etc/passwd-</xccdf:fixtext>
 $ sudo chown root /etc/shadow</xccdf:fixtext>
           <xccdf:fix id="F-61575r925716_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257910" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257910" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7484,7 +7468,7 @@ $ sudo chown root /etc/shadow</xccdf:fixtext>
 $ sudo chgrp root /etc/shadow</xccdf:fixtext>
           <xccdf:fix id="F-61576r925719_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257911" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257911" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7508,7 +7492,7 @@ $ sudo chgrp root /etc/shadow</xccdf:fixtext>
 $ sudo chown root /etc/shadow-</xccdf:fixtext>
           <xccdf:fix id="F-61577r925722_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257912" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257912" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7532,7 +7516,7 @@ $ sudo chown root /etc/shadow-</xccdf:fixtext>
 $ sudo chgrp root /etc/shadow-</xccdf:fixtext>
           <xccdf:fix id="F-61578r925725_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257913" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257913" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7558,7 +7542,7 @@ The structure and content of error messages must be carefully considered by the
 $ sudo chown root /var/log</xccdf:fixtext>
           <xccdf:fix id="F-61579r925728_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257914" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257914" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7584,7 +7568,7 @@ The structure and content of error messages must be carefully considered by the
 $ sudo chgrp root /var/log</xccdf:fixtext>
           <xccdf:fix id="F-61580r925731_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257915" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257915" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7610,7 +7594,7 @@ The structure and content of error messages must be carefully considered by the
 $ sudo chown root /var/log/messages</xccdf:fixtext>
           <xccdf:fix id="F-61581r925734_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257916" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257916" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7636,7 +7620,7 @@ The structure and content of error messages must be carefully considered by the
 $ sudo chgrp root /var/log/messages</xccdf:fixtext>
           <xccdf:fix id="F-61582r925737_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257917" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257917" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7664,7 +7648,7 @@ Run the following command, replacing "[FILE]" with any system command file not o
 $ sudo chown root [FILE]</xccdf:fixtext>
           <xccdf:fix id="F-61583r925740_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257918" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257918" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7692,7 +7676,7 @@ Run the following command, replacing "[FILE]" with any system command file not g
 $ sudo chgrp root [FILE]</xccdf:fixtext>
           <xccdf:fix id="F-61584r925743_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257919" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257919" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7718,7 +7702,7 @@ This requirement applies to RHEL 9 with software libraries that are accessible a
 $ sudo find /lib /lib64 /usr/lib /usr/lib64 -type f -name '*.so*' ! -user root -exec chown root {} +</xccdf:fixtext>
           <xccdf:fix id="F-61585r1101925_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257920" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257920" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7744,7 +7728,7 @@ This requirement applies to RHEL 9 with software libraries that are accessible a
 $ sudo find /lib /lib64 /usr/lib /usr/lib64 -type f -name '*.so*' ! -group root -exec chown :root {} +</xccdf:fixtext>
           <xccdf:fix id="F-61586r1106307_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257921" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257921" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7772,7 +7756,7 @@ Run the following command, replacing "[DIRECTORY]" with any library directory no
 $ sudo chown root [DIRECTORY]</xccdf:fixtext>
           <xccdf:fix id="F-61587r1044987_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257922" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257922" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7800,7 +7784,7 @@ Run the following command, replacing "[DIRECTORY]" with any library directory no
 $ sudo chgrp root [DIRECTORY]</xccdf:fixtext>
           <xccdf:fix id="F-61588r1044990_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257923" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257923" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7830,7 +7814,7 @@ $ sudo chown root [audit_tool]
 Replace "[audit_tool]" with each audit tool not owned by "root".</xccdf:fixtext>
           <xccdf:fix id="F-61589r925758_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257924" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257924" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7860,7 +7844,7 @@ $ sudo chgrp root [audit_tool]
 Replace "[audit_tool]" with each audit tool not group-owned by "root".</xccdf:fixtext>
           <xccdf:fix id="F-61590r925761_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257925" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257925" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7884,7 +7868,7 @@ Replace "[audit_tool]" with each audit tool not group-owned by "root".</xccdf:fi
 $ sudo chown root [cron config file]</xccdf:fixtext>
           <xccdf:fix id="F-61591r925764_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257926" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257926" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7908,7 +7892,7 @@ $ sudo chown root [cron config file]</xccdf:fixtext>
 $ sudo chgrp root [cron config file]</xccdf:fixtext>
           <xccdf:fix id="F-61592r925767_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257927" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257927" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7932,7 +7916,7 @@ $ sudo chgrp root [cron config file]</xccdf:fixtext>
 $ sudo chmod 0000 /etc/shadow</xccdf:fixtext>
           <xccdf:fix id="F-61599r925788_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257934" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257934" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7966,7 +7950,7 @@ Satisfies: SRG-OS-000096-GPOS-00050, SRG-OS-000297-GPOS-00115, SRG-OS-000298-GPO
 $ sudo dnf install firewalld</xccdf:fixtext>
           <xccdf:fix id="F-61600r925791_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257935" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257935" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -7999,7 +7983,7 @@ Satisfies: SRG-OS-000096-GPOS-00050, SRG-OS-000297-GPOS-00115, SRG-OS-000480-GPO
 $ sudo systemctl enable --now firewalld</xccdf:fixtext>
           <xccdf:fix id="F-61601r925794_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257936" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257936" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8027,7 +8011,7 @@ FirewallBackend=nftables
 Establish rate-limiting rules based on organization-defined types of DoS attacks on impacted network interfaces.</xccdf:fixtext>
           <xccdf:fix id="F-61604r1044996_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257939" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257939" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8055,21 +8039,21 @@ Set the promiscuous mode of an interface to off with the following command:
 $ sudo ip link set dev &lt;devicename&gt; multicast off promisc off</xccdf:fixtext>
           <xccdf:fix id="F-61606r925809_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257941" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257941" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257942">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257942r1106314_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257942r1155718_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-251045</xccdf:version>
           <xccdf:title>RHEL 9 must enable hardening for the Berkeley Packet Filter just-in-time compiler.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors.
 
 Enabling hardening for the Berkeley Packet Filter (BPF) Just-in-time (JIT) compiler aids in mitigating JIT spraying attacks. Setting the value to "2" enables JIT hardening for all users.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -8085,24 +8069,21 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>5551</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-61607r1106313_fix">Configure RHEL 9 to enable hardening for the BPF JIT compiler by adding the following line to a file, in the "/etc/sysctl.d" directory:
+          <xccdf:fixtext fixref="F-61607r1155717_fix">Configure RHEL 9 to enable hardening for the BPF JIT compiler.
 
-net.core.bpf_jit_harden = 2
+Create the drop-in file if it does not already exist:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+$ sudo vi /etc/sysctl.d/99-net_core-bpf_jit_harden.conf
+
+Add the following line to the file:
+net.core.bpf_jit_harden = 2
 
-The system configuration files must be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
+Reload settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-61607r1106313_fix" />
+          <xccdf:fix id="F-61607r1155717_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257942" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257942" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8127,7 +8108,7 @@ $ sudo sysctl --system</xccdf:fixtext>
 $ sudo dnf install chrony</xccdf:fixtext>
           <xccdf:fix id="F-61608r925815_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257943" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257943" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8154,7 +8135,7 @@ Synchronizing internal information system clocks provides uniformity of time sta
 $ sudo systemctl enable --now chronyd</xccdf:fixtext>
           <xccdf:fix id="F-61609r925818_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257944" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257944" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8181,7 +8162,7 @@ Satisfies: SRG-OS-000096-GPOS-00050, SRG-OS-000095-GPOS-00049&lt;/VulnDiscussion
 port 0</xccdf:fixtext>
           <xccdf:fix id="F-61611r925824_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257946" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257946" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8208,7 +8189,7 @@ Satisfies: SRG-OS-000096-GPOS-00050, SRG-OS-000095-GPOS-00049&lt;/VulnDiscussion
 cmdport 0</xccdf:fixtext>
           <xccdf:fix id="F-61612r925827_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257947" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257947" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8243,7 +8224,7 @@ $ nmcli connection modify [connection name] ipv4.dns [name server 1],[name serve
 Replace [name server 1] and [name server 2] with the IPs of two different DNS resolvers. Replace [connection name] with a valid NetworkManager connection name on the system. Replace ipv4 with ipv6 if IPv6 DNS servers are used.</xccdf:fixtext>
           <xccdf:fix id="F-61613r1045003_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257948" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257948" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8280,7 +8261,7 @@ NetworkManager must be reloaded for the change to take effect.
 $ sudo systemctl reload NetworkManager</xccdf:fixtext>
           <xccdf:fix id="F-61614r1134912_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257949" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257949" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8305,7 +8286,7 @@ $ sudo systemctl reload NetworkManager</xccdf:fixtext>
 $ sudo postconf -e 'smtpd_client_restrictions = permit_mynetworks,reject'</xccdf:fixtext>
           <xccdf:fix id="F-61616r925839_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257951" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257951" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8337,7 +8318,7 @@ Then, run the following command:
 $ sudo newaliases</xccdf:fixtext>
           <xccdf:fix id="F-61618r925845_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257953" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257953" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8363,7 +8344,7 @@ Satisfies: SRG-OS-000480-GPOS-00227, SRG-OS-000120-GPOS-00061&lt;/VulnDiscussion
 $ sudo dnf install libreswan</xccdf:fixtext>
           <xccdf:fix id="F-61619r925848_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257954" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257954" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8387,7 +8368,7 @@ $ sudo dnf install libreswan</xccdf:fixtext>
 $ sudo rm /[path]/[to]/[file]/shosts.equiv</xccdf:fixtext>
           <xccdf:fix id="F-61620r925851_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257955" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257955" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -8411,14 +8392,14 @@ $ sudo rm /[path]/[to]/[file]/shosts.equiv</xccdf:fixtext>
 $ sudo rm /[path]/[to]/[file]/.shosts</xccdf:fixtext>
           <xccdf:fix id="F-61621r925854_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257956" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257956" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257957">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257957r1106317_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257957r1155618_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-253010</xccdf:version>
           <xccdf:title>RHEL 9 must be configured to use TCP syncookies.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
@@ -8429,7 +8410,7 @@ There may be shared resources with configurable protections (e.g., files in stor
 
 Restricting access to the kernel message buffer limits access to only root. This prevents attackers from gaining additional system information as a nonprivileged user.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -8448,38 +8429,33 @@ Satisfies: SRG-OS-000480-GPOS-00227, SRG-OS-000420-GPOS-00186, SRG-OS-000142-GPO
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-001095</xccdf:ident>
           <xccdf:ident system="http://cyber.mil/cci">CCI-002385</xccdf:ident>
-          <xccdf:fixtext fixref="F-61622r1101958_fix">Configure RHEL 9 to use TCP syncookies.
+          <xccdf:fixtext fixref="F-61622r1155617_fix">Configure RHEL 9 to use TCP syncookies.
 
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+Create a configuration file if it does not already exist:
 
-net.ipv4.tcp_syncookies = 1
+$ sudo vi /etc/sysctl.d/99-ipv4_tcp_syncookies.conf
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Add the following line to the file:
+net.ipv4.tcp_syncookies = 1
 
-Load settings from all system configuration files with the following command:
+Reload settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-61622r1101958_fix" />
+          <xccdf:fix id="F-61622r1155617_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257957" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257957" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257958">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257958r1106319_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257958r1155721_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-253015</xccdf:version>
           <xccdf:title>RHEL 9 must ignore Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirect messages.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -8495,38 +8471,33 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>5551</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-61623r1101988_fix">Configure RHEL 9 to ignore IPv4 ICMP redirect messages.
+          <xccdf:fixtext fixref="F-61623r1155720_fix">Configure RHEL 9 to ignore IPv4 ICMP redirect messages.
 
-Add or edit the following line in a system configuration file, in the "/etc/sysctl.d/" directory:
+Create a configuration file if it does not already exist:
 
-net.ipv4.conf.all.accept_redirects = 0
+$ sudo vi /etc/sysctl.d/99-ipv4_accept_redirects.conf
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Add the following line to the file:
+net.ipv4.conf.all.accept_redirects = 0
 
-Load settings from all system configuration files with the following command:
+Reload settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-61623r1101988_fix" />
+          <xccdf:fix id="F-61623r1155720_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257958" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257958" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257959">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257959r1102024_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257959r1155724_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-253020</xccdf:version>
           <xccdf:title>RHEL 9 must not forward Internet Protocol version 4 (IPv4) source-routed packets.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Source-routed packets allow the source of the packet to suggest that routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when forwarding is enabled and the system is functioning as a router.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of which of the directories they reside in. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of which of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -8542,33 +8513,28 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>5551</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-61624r1102023_fix">Configure RHEL 9 to not forward IPv4 source-routed packets.
+          <xccdf:fixtext fixref="F-61624r1155723_fix">Configure RHEL 9 to ignore IPv4 source-routed packets.
 
-Add or edit the following line in a system configuration file, in the "/etc/sysctl.d/" directory:
+Create a configuration file if it does not already exist:
 
-net.ipv4.conf.all.accept_source_route=0
+$ sudo vi /etc/sysctl.d/99-ipv4_accept_source.conf
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Add the following line to the file:
+net.ipv4.conf.all.accept_source_route = 0
 
-Load settings from all system configuration files with the following command:
+Reload settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-61624r1102023_fix" />
+          <xccdf:fix id="F-61624r1155723_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257959" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257959" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257960">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257960r1106321_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257960r1155727_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-253025</xccdf:version>
           <xccdf:title>RHEL 9 must log IPv4 packets with impossible addresses.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;The presence of "martian" packets (which have impossible addresses) as well as spoofed packets, source-routed packets, and redirects could be a sign of nefarious network activity. Logging these packets enables this activity to be detected.
@@ -8581,7 +8547,7 @@ There may be shared resources with configurable protections (e.g., files in stor
 
 Restricting access to the kernel message buffer limits access to only root. This prevents attackers from gaining additional system information as a nonprivileged user.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -8597,25 +8563,28 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>5551</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-61625r1106320_fix">Configure RHEL 9 to log martian packets on IPv4 interfaces.
+          <xccdf:fixtext fixref="F-61625r1155726_fix">Configure RHEL 9 to log martian packets on IPv4 interfaces.
 
-Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
+Create a configuration file if it does not already exist:
 
+$ sudo vi /etc/sysctl.d/99-ipv4_log_martians.conf
+
+Add the following line to the file:
 net.ipv4.conf.all.log_martians=1
 
-Load settings from all system configuration files with the following command:
+Reload settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-61625r1106320_fix" />
+          <xccdf:fix id="F-61625r1155726_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257960" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257960" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257961">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257961r1106323_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257961r1155730_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-253030</xccdf:version>
           <xccdf:title>RHEL 9 must log IPv4 packets with impossible addresses by default.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;The presence of "martian" packets (which have impossible addresses) as well as spoofed packets, source-routed packets, and redirects could be a sign of nefarious network activity. Logging these packets enables this activity to be detected.
@@ -8628,7 +8597,7 @@ There may be shared resources with configurable protections (e.g., files in stor
 
 Restricting access to the kernel message buffer limits access to only root. This prevents attackers from gaining additional system information as a nonprivileged user.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -8644,30 +8613,33 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>5551</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-61626r1106322_fix">Configure RHEL 9 to log martian packets on IPv4 interfaces by default.
+          <xccdf:fixtext fixref="F-61626r1155729_fix">Configure RHEL 9 to log martian packets on IPv4 interfaces by default.
 
-Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
+Create a configuration file if it does not already exist:
 
-net.ipv4.conf.default.log_martians = 1
+$ sudo vi /etc/sysctl.d/99-ipv4_log_martians.conf
 
-Load settings from all system configuration files with the following command:
+Add the following line to the file:
+net.ipv4.conf.default.log_martians=1
+
+Reload settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-61626r1106322_fix" />
+          <xccdf:fix id="F-61626r1155729_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257961" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257961" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257962">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257962r1106437_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257962r1155733_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-253035</xccdf:version>
           <xccdf:title>RHEL 9 must use reverse path filtering on all IPv4 interfaces.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Enabling reverse path filtering drops packets with source addresses that should not have been able to be received on the interface on which they were received. It must not be used on systems that are routers for complicated networks, but is helpful for end hosts and routers serving small networks.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -8683,38 +8655,35 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>5551</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-61627r1106324_fix">Configure RHEL 9 to use reverse path filtering on all IPv4 interfaces by adding the following line to a file in the "/etc/sysctl.d" directory:
+          <xccdf:fixtext fixref="F-61627r1155732_fix">Configure RHEL 9 to use reverse path filtering on all IPv4 interfaces.
 
-net.ipv4.conf.all.rp_filter = 1
+Create a configuration file if it does not already exist:
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+$ sudo vi /etc/sysctl.d/99-ipv4_rp_filter.conf
+
+Add the following line to the file:
+net.ipv4.conf.all.rp_filter = 1
 
-The system configuration files must be reloaded for the changes to take effect. To reload the contents of the files, run the following command:
+Reload settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-61627r1106324_fix" />
+          <xccdf:fix id="F-61627r1155732_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257962" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257962" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257963">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257963r1106328_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257963r1155736_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-253040</xccdf:version>
           <xccdf:title>RHEL 9 must prevent IPv4 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
 
 This feature of the IPv4 protocol has few legitimate uses. It must be disabled unless absolutely required.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -8730,38 +8699,33 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>5551</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-61628r1106327_fix">Configure RHEL 9 to prevent IPv4 ICMP redirect messages from being accepted.
+          <xccdf:fixtext fixref="F-61628r1155735_fix">Configure RHEL 9 to prevent IPv4 ICMP redirect messages from being accepted.
 
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+Create a configuration file if it does not already exist:
 
-net.ipv4.conf.default.accept_redirects = 0
+$ sudo vi /etc/sysctl.d/99-ipv4_accept_redirects.conf
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Add the following line to the file:
+net.ipv4.conf.default.accept_redirects = 0
 
-Load settings from all system configuration files with the following command:
+Reload settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-61628r1106327_fix" />
+          <xccdf:fix id="F-61628r1155735_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257963" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257963" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257964">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257964r1106438_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257964r1155739_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-253045</xccdf:version>
           <xccdf:title>RHEL 9 must not forward IPv4 source-routed packets by default.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Source-routed packets allow the source of the packet to suggest routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when forwarding is enabled and the system is functioning as a router.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -8777,33 +8741,28 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>5551</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-61629r1106330_fix">Configure RHEL 9 to not forward IPv4 source-routed packets by default.
+          <xccdf:fixtext fixref="F-61629r1155738_fix">Configure RHEL 9 to not forward IPv4 source-routed packets by default.
 
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+Create a configuration file if it does not already exist:
 
-net.ipv4.conf.default.accept_source_route=0
+$ sudo vi /etc/sysctl.d/99-ipv4_accept_source_route.conf
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Add the following line to the file:
+net.ipv4.conf.default.accept_source_route = 0
 
-Load settings from all system configuration files with the following command:
+Reload settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-61629r1106330_fix" />
+          <xccdf:fix id="F-61629r1155738_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257964" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257964" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257965">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257965r1106333_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257965r1155646_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-253050</xccdf:version>
           <xccdf:title>RHEL 9 must use a reverse-path filter for IPv4 network traffic when possible by default.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Enabling reverse path filtering drops packets with source addresses that should not have been able to be received on the interface on which they were received. It must not be used on systems that are routers for complicated networks, but is helpful for end hosts and routers serving small networks.
@@ -8824,25 +8783,28 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>5551</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-61630r1106332_fix">Configure RHEL 9 to use reverse path filtering on IPv4 interfaces by default.
+          <xccdf:fixtext fixref="F-61630r1155645_fix">Configure RHEL 9 to use reverse path filtering on IPv4 interfaces by default.
+
+Create a configuration file if it does not already exist:
 
-Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
+$ sudo vi /etc/sysctl.d/ipv4_rp_filter.conf
 
+Add the following line to the file:
 net.ipv4.conf.default.rp_filter = 1
 
-Load settings from all system configuration files with the following command:
+Reload settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-61630r1106332_fix" />
+          <xccdf:fix id="F-61630r1155645_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257965" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257965" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257966">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257966r1106440_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257966r1155742_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-253055</xccdf:version>
           <xccdf:title>RHEL 9 must not respond to Internet Control Message Protocol (ICMP) echoes sent to a broadcast address.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Responding to broadcast (ICMP) echoes facilitates network mapping and provides a vector for amplification attacks.
@@ -8851,7 +8813,7 @@ Ignoring ICMP echo requests (pings) sent to broadcast or multicast addresses mak
 
 There are notable differences between Internet Protocol version 4 (IPv4) and Internet Protocol version 6 (IPv6). IPv6 does not implement the same method of broadcast as IPv4. Instead, IPv6 uses multicast addressing to the all-hosts multicast group. Refer to RFC4294 for an explanation of "IPv6 Node Requirements", which resulted in this difference between IPv4 and IPv6.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -8867,38 +8829,33 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>5551</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-61631r1106334_fix">Configure RHEL 9 to not respond to IPv4 ICMP echoes sent to a broadcast address.
+          <xccdf:fixtext fixref="F-61631r1155741_fix">Configure RHEL 9 to ignore IPv4 ICMP echoes sent to a broadcast address.
 
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+Create a configuration file if it does not already exist:
 
-net.ipv4.icmp_echo_ignore_broadcasts=1
+$ sudo vi /etc/sysctl.d/ipv4_icmp_echo_ignore_broadcasts.conf
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Add the following line to the file:
+net.ipv4.icmp_echo_ignore_broadcasts = 1
 
-Load settings from all system configuration files with the following command:
+Reload settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-61631r1106334_fix" />
+          <xccdf:fix id="F-61631r1155741_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257966" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257966" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257967">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257967r1106337_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257967r1155745_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-253060</xccdf:version>
           <xccdf:title>RHEL 9 must limit the number of bogus Internet Control Message Protocol (ICMP) response errors logs.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Some routers will send responses to broadcast frames that violate RFC-1122, which fills up a log file system with many useless error messages. An attacker may take advantage of this and attempt to flood the logs with bogus error logs. Ignoring bogus ICMP error responses reduces log size, although some activity would not be logged.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -8914,32 +8871,35 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>5551</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-61632r1106336_fix">Configure RHEL 9 to not log bogus ICMP errors: 
+          <xccdf:fixtext fixref="F-61632r1155744_fix">Configure RHEL 9 to not log bogus ICMP errors:
 
-Add or edit the following line in a single system configuration file in the "/etc/sysctl.d/" directory:
+Create a configuration file if it does not already exist:
 
+$ sudo vi /etc/sysctl.d/ipv4_icmp_ignore_bogus_error_responses.conf
+
+Add the following line to the file:
 net.ipv4.icmp_ignore_bogus_error_responses = 1
 
-Load settings from all system configuration files with the following command:
+Reload settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-61632r1106336_fix" />
+          <xccdf:fix id="F-61632r1155744_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257967" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257967" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257968">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257968r1106339_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257968r1155748_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-253065</xccdf:version>
           <xccdf:title>RHEL 9 must not send Internet Control Message Protocol (ICMP) redirects.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages contain information from the system's route table possibly revealing portions of the network topology.
 
 The ability to send ICMP redirects is only appropriate for systems acting as routers.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -8955,70 +8915,75 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>5551</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-61633r1106338_fix">Configure RHEL 9 to not allow interfaces to perform IPv4 ICMP redirects.
+          <xccdf:fixtext fixref="F-61633r1155747_fix">Configure RHEL 9 to not allow interfaces to perform IPv4 ICMP redirects.
 
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+Create a configuration file if it does not already exist:
 
-net.ipv4.conf.all.send_redirects=0
+$ sudo vi /etc/sysctl.d/ipv4_send_redirects.conf
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Add the following line to the file:
+net.ipv4.conf.all.send_redirects = 0
 
-Load settings from all system configuration files with the following command:
+Reload settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-61633r1106338_fix" />
+          <xccdf:fix id="F-61633r1155747_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257968" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257968" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257969">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257969r991589_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257969r1155623_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-253070</xccdf:version>
           <xccdf:title>RHEL 9 must not allow interfaces to perform Internet Control Message Protocol (ICMP) redirects by default.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages contain information from the system's route table possibly revealing portions of the network topology.
+          <xccdf:description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages contain information from the system's route table possibly revealing portions of the network topology. The ability to send ICMP redirects is only appropriate for systems acting as routers.
 
-The ability to send ICMP redirects is only appropriate for systems acting as routers.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Red Hat Enterprise Linux 9</dc:subject>
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+
+/etc/sysctl.d/*.conf
+/run/sysctl.d/*.conf
+/usr/local/lib/sysctl.d/*.conf
+/usr/lib/sysctl.d/*.conf
+/lib/sysctl.d/*.conf
+/etc/sysctl.conf&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Red Hat Enterprise Linux 9</dc:subject>
             <dc:identifier>5551</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-61634r925893_fix">Configure RHEL 9 to not allow interfaces to perform Internet Protocol version 4 (IPv4) ICMP redirects by default.
+          <xccdf:fixtext fixref="F-61634r1155622_fix">Configure RHEL 9 to not allow interfaces to perform Internet Protocol version 4 (IPv4) ICMP redirects by default.
 
-Add or edit the following line in a single system configuration file, in the "/etc/sysctl.d/" directory:
+Create a configuration file if it does not already exist:
 
+$ sudo vi /etc/sysctl.d/ipv4_send_redirect.conf
+
+Add the following line to the file:
 net.ipv4.conf.default.send_redirects = 0
 
 Load settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-61634r925893_fix" />
+          <xccdf:fix id="F-61634r1155622_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257969" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257969" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257970">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257970r1106442_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257970r1155751_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-253075</xccdf:version>
           <xccdf:title>RHEL 9 must not enable IPv4 packet forwarding unless the system is a router.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Routing protocol daemons are typically used on routers to exchange network topology information with other routers. If this capability is used when not required, system network information may be unnecessarily transmitted across the network.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -9034,40 +8999,35 @@ The sysctl --system command will load settings from all system configuration fil
             <dc:identifier>5551</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-61635r1106341_fix">Configure RHEL 9 to not allow IPv4 packet forwarding, unless the system is a router.
+          <xccdf:fixtext fixref="F-61635r1155750_fix">Configure RHEL 9 to not allow IPv4 packet forwarding, unless the system is a router.
 
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+Create a configuration file if it does not already exist:
 
-net.ipv4.conf.all.forwarding=0
+$ sudo vi /etc/sysctl.d/ipv4_forwarding.conf
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Add the following line to the file:
+net.ipv4.conf.all.forwarding = 0
 
-Load settings from all system configuration files with the following command:
+Reload settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-61635r1106341_fix" />
+          <xccdf:fix id="F-61635r1155750_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257970" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257970" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257971">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257971r1106444_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257971r1155754_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-254010</xccdf:version>
           <xccdf:title>RHEL 9 must not accept router advertisements on all IPv6 interfaces.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Routing protocol daemons are typically used on routers to exchange network topology information with other routers. If this software is used when not required, system network information may be unnecessarily transmitted across the network.
 
 An illicit router advertisement message could result in a man-in-the-middle attack.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -9084,38 +9044,33 @@ The sysctl --system command will load settings from all system configuration fil
           </xccdf:reference>
           <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxIPv6enabled" />
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-61636r1106343_fix">Configure RHEL 9 to not accept router advertisements on all IPv6 interfaces unless the system is a router.
+          <xccdf:fixtext fixref="F-61636r1155753_fix">Configure RHEL 9 to not accept router advertisements on all IPv6 interfaces unless the system is a router.
 
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+Create a configuration file if it does not already exist:
 
-net.ipv6.conf.all.accept_ra=0
+$ sudo vi /etc/sysctl.d/ipv4_accept_ra.conf
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Add the following line to the file:
+net.ipv6.conf.all.accept_ra = 0
 
-Load settings from all system configuration files with the following command:
+Reload settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-61636r1106343_fix" />
+          <xccdf:fix id="F-61636r1155753_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257971" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257971" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257972">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257972r1106446_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257972r1155757_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-254015</xccdf:version>
           <xccdf:title>RHEL 9 must ignore IPv6 Internet Control Message Protocol (ICMP) redirect messages.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -9132,38 +9087,33 @@ The sysctl --system command will load settings from all system configuration fil
           </xccdf:reference>
           <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxIPv6enabled" />
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-61637r1106345_fix">Configure RHEL 9 to ignore IPv6 ICMP redirect messages.
+          <xccdf:fixtext fixref="F-61637r1155756_fix">Configure RHEL 9 to ignore IPv6 ICMP redirect messages.
 
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+Create a configuration file if it does not already exist:
 
-net.ipv6.conf.all.accept_redirects = 0
+$ sudo vi /etc/sysctl.d/ipv6_accept_redirects.conf
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Add the following line to the file:
+net.ipv6.conf.all.accept_redirects = 0
 
-Load settings from all system configuration files with the following command:
+Reload settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-61637r1106345_fix" />
+          <xccdf:fix id="F-61637r1155756_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257972" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257972" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257973">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257973r1106448_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257973r1155760_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-254020</xccdf:version>
           <xccdf:title>RHEL 9 must not forward IPv6 source-routed packets.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Source-routed packets allow the source of the packet to suggest that routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when forwarding is enabled and the system is functioning as a router.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -9180,38 +9130,33 @@ The sysctl --system command will load settings from all system configuration fil
           </xccdf:reference>
           <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxIPv6enabled" />
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-61638r1106347_fix">Configure RHEL 9 to not forward IPv6 source-routed packets.
+          <xccdf:fixtext fixref="F-61638r1155759_fix">Configure RHEL 9 to not accept IPv6 source-routed packets.
 
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+Create a configuration file if it does not already exist:
 
-net.ipv6.conf.all.accept_source_route=0
+$ sudo vi /etc/sysctl.d/ipv6_accept_source_route.conf
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Add the following line to the file:
+net.ipv6.conf.all.accept_source_route = 0
 
-Load settings from all system configuration files with the following command:
+Reload settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-61638r1106347_fix" />
+          <xccdf:fix id="F-61638r1155759_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257973" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257973" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257974">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257974r1106450_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257974r1155763_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-254025</xccdf:version>
           <xccdf:title>RHEL 9 must not enable IPv6 packet forwarding unless the system is a router.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Routing protocol daemons are typically used on routers to exchange network topology information with other routers. If this software is used when not required, system network information may be unnecessarily transmitted across the network.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -9228,38 +9173,33 @@ The sysctl --system command will load settings from all system configuration fil
           </xccdf:reference>
           <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxIPv6enabled" />
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-61639r1106349_fix">Configure RHEL 9 to not allow IPv6 packet forwarding, unless the system is a router.
+          <xccdf:fixtext fixref="F-61639r1155762_fix">Configure RHEL 9 to not allow IPv6 packet forwarding, unless the system is a router.
 
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+Create a configuration file if it does not already exist:
 
-net.ipv6.conf.all.forwarding=0
+$ sudo vi /etc/sysctl.d/ipv6_forwarding.conf
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Add the following line to the file:
+net.ipv6.conf.all.forwarding = 0
 
-Load settings from all system configuration files with the following command:
+Reload settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-61639r1106349_fix" />
+          <xccdf:fix id="F-61639r1155762_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257974" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257974" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257975">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257975r1106452_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257975r1155766_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-254030</xccdf:version>
           <xccdf:title>RHEL 9 must not accept router advertisements on all IPv6 interfaces by default.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Routing protocol daemons are typically used on routers to exchange network topology information with other routers. If this software is used when not required, system network information may be unnecessarily transmitted across the network. An illicit router advertisement message could result in a man-in-the-middle attack.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -9276,38 +9216,33 @@ The sysctl --system command will load settings from all system configuration fil
           </xccdf:reference>
           <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxIPv6enabled" />
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-61640r1106351_fix">Configure RHEL 9 to not accept router advertisements on all IPv6 interfaces by default unless the system is a router.
+          <xccdf:fixtext fixref="F-61640r1155765_fix">Configure RHEL 9 to not accept router advertisements on all IPv6 interfaces by default unless the system is a router.
 
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+Create a configuration file if it does not already exist:
 
-net.ipv6.conf.default.accept_ra=0
+$ sudo vi /etc/sysctl.d/ipv6_accept_ra.conf
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Add the following line to the file:
+net.ipv6.conf.default.accept_ra = 0
 
-Load settings from all system configuration files with the following command:
+Reload settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-61640r1106351_fix" />
+          <xccdf:fix id="F-61640r1155765_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257975" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257975" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257976">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257976r1106454_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257976r1155769_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-254035</xccdf:version>
           <xccdf:title>RHEL 9 must prevent IPv6 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -9324,40 +9259,35 @@ The sysctl --system command will load settings from all system configuration fil
           </xccdf:reference>
           <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxIPv6enabled" />
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-61641r1106353_fix">Configure RHEL 9 to prevent IPv6 ICMP redirect messages from being accepted.
+          <xccdf:fixtext fixref="F-61641r1155768_fix">Configure RHEL 9 to prevent IPv6 ICMP redirect messages from being accepted.
 
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+Create a configuration file if it does not already exist:
 
-net.ipv6.conf.default.accept_redirects = 0
+$ sudo vi /etc/sysctl.d/ipv6_accept_redirects.conf
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Add the following line to the file:
+net.ipv6.conf.default.accept_redirects = 0
 
-Load settings from all system configuration files with the following command:
+Reload settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-61641r1106353_fix" />
+          <xccdf:fix id="F-61641r1155768_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257976" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257976" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-257977">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257977r1106456_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-257977r1155772_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-254040</xccdf:version>
           <xccdf:title>RHEL 9 must not forward IPv6 source-routed packets by default.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Source-routed packets allow the source of the packet to suggest that routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when forwarding is enabled and the system is functioning as a router.
 
 Accepting source-routed packets in the IPv6 protocol has few legitimate uses. It must be disabled unless it is absolutely required.
 
-The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographic order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
+The sysctl --system command will load settings from all system configuration files. All configuration files are sorted by their filename in lexicographical order, regardless of the directories in which they reside. If multiple files specify the same option, the entry in the file with the lexicographically latest name will take precedence. Files are read from directories in the following list from top to bottom. Once a file of a given filename is loaded, any file of the same name in subsequent directories is ignored.
 
 /etc/sysctl.d/*.conf
 /run/sysctl.d/*.conf
@@ -9374,26 +9304,21 @@ The sysctl --system command will load settings from all system configuration fil
           </xccdf:reference>
           <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxIPv6enabled" />
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-61642r1106355_fix">Configure RHEL 9 to not forward IPv6 source-routed packets by default.
+          <xccdf:fixtext fixref="F-61642r1155771_fix">Configure RHEL 9 to not accept IPv6 source-routed packets by default.
 
-Add or edit the following line in a system configuration file in the "/etc/sysctl.d/" directory:
+Create a configuration file if it does not already exist:
 
-net.ipv6.conf.default.accept_source_route=0
+$ sudo vi /etc/sysctl.d/ipv6_accept_source_route.conf
 
-Remove any configurations that conflict with the above from the following locations: 
-/run/sysctl.d/*.conf
-/usr/local/lib/sysctl.d/*.conf
-/usr/lib/sysctl.d/*.conf
-/lib/sysctl.d/*.conf
-/etc/sysctl.conf
-/etc/sysctl.d/*.conf
+Add the following line to the file:
+net.ipv6.conf.default.accept_source_route = 0
 
-Load settings from all system configuration files with the following command:
+Reload settings from all system configuration files with the following command:
 
 $ sudo sysctl --system</xccdf:fixtext>
-          <xccdf:fix id="F-61642r1106355_fix" />
+          <xccdf:fix id="F-61642r1155771_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257977" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257977" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9426,7 +9351,7 @@ Satisfies: SRG-OS-000423-GPOS-00187, SRG-OS-000424-GPOS-00188, SRG-OS-000425-GPO
 $ sudo dnf install openssh-server</xccdf:fixtext>
           <xccdf:fix id="F-61643r925920_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257978" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257978" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9459,7 +9384,7 @@ Satisfies: SRG-OS-000423-GPOS-00187, SRG-OS-000424-GPOS-00188, SRG-OS-000425-GPO
 $ systemctl enable --now sshd</xccdf:fixtext>
           <xccdf:fix id="F-61644r925923_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257979" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257979" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9483,7 +9408,7 @@ $ systemctl enable --now sshd</xccdf:fixtext>
 $ sudo dnf install openssh-clients</xccdf:fixtext>
           <xccdf:fix id="F-61645r1045015_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257980" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257980" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9518,7 +9443,7 @@ An example configuration line is:
 Banner /etc/issue</xccdf:fixtext>
           <xccdf:fix id="F-61646r1045018_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257981" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257981" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9546,7 +9471,7 @@ Restart the SSH daemon for the settings to take effect:
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-61647r1045020_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257982" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257982" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9579,7 +9504,7 @@ Restart the SSH daemon for the settings to take effect:
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-61648r1045023_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257983" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257983" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9609,7 +9534,7 @@ Restart the SSH daemon for the settings to take effect:
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-61649r1045025_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257984" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257984" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9640,7 +9565,7 @@ Restart the SSH daemon for the settings to take effect:
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-61650r1045027_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257985" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257985" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9668,7 +9593,7 @@ Restart the SSH daemon for the settings to take effect:
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-61651r1045029_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257986" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257986" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9708,7 +9633,7 @@ Setting system policy to FIPS
 Note: Systemwide crypto policies are applied on application startup. It is recommended to restart the system for the change of policies to fully take place.</xccdf:fixtext>
           <xccdf:fix id="F-61654r1051239_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257989" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257989" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9748,7 +9673,7 @@ Setting system policy to FIPS
 Note: Systemwide crypto policies are applied on application startup. It is recommended to restart the system for the change of policies to fully take place.</xccdf:fixtext>
           <xccdf:fix id="F-61656r1051245_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257991" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257991" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9776,7 +9701,7 @@ Restart the SSH daemon for the settings to take effect:
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-61657r1045046_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257992" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257992" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9804,7 +9729,7 @@ Restart the SSH daemon  for the setting to take effect:
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-61658r1045048_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257993" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257993" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9842,7 +9767,7 @@ Restart the SSH daemon for the settings to take effect.
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-61659r1045050_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257994" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257994" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9881,7 +9806,7 @@ For the changes to take effect, the SSH daemon must be restarted.
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-61660r1045052_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257995" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257995" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9921,7 +9846,7 @@ For the changes to take effect, the SSH daemon must be restarted.
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-61661r1045054_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257996" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257996" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9945,7 +9870,7 @@ $ sudo systemctl restart sshd.service</xccdf:fixtext>
 $ sudo chgrp root /etc/ssh/sshd_config /etc/ssh/sshd_config.d</xccdf:fixtext>
           <xccdf:fix id="F-61662r1069369_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257997" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257997" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9969,7 +9894,7 @@ $ sudo chgrp root /etc/ssh/sshd_config /etc/ssh/sshd_config.d</xccdf:fixtext>
 $ sudo chown -R root /etc/ssh/sshd_config /etc/ssh/sshd_config.d</xccdf:fixtext>
           <xccdf:fix id="F-61663r1082180_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257998" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:257998" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -9997,7 +9922,7 @@ Restart the SSH daemon for the changes to take effect:
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-61665r925986_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258000" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258000" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10025,17 +9950,22 @@ Restart the SSH daemon for the changes to take effect:
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-61666r925989_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258001" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258001" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-258002">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258002r991589_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258002r1155590_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-255130</xccdf:version>
           <xccdf:title>RHEL 9 SSH daemon must not allow compression or must only allow compression after successful authentication.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;If compression is allowed in an SSH connection prior to authentication, vulnerabilities in the compression software could result in compromise of the system from an unauthenticated connection, potentially with root privileges.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:description>&lt;VulnDiscussion&gt;If compression is allowed in an SSH connection prior to authentication, vulnerabilities in the compression software could result in compromise of the system from an unauthenticated connection, potentially with root privileges.
+
+Compression options are:
+no - disables compression
+delayed - allow compression only after authentication
+yes - enables compression before authentication, which can leak sensitive metadata and is not recommended&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
           <xccdf:reference>
             <dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title>
             <dc:publisher>DISA</dc:publisher>
@@ -10055,7 +9985,7 @@ The SSH service must be restarted for changes to take effect:
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-61667r925992_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258002" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258002" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10087,7 +10017,7 @@ The SSH service must be restarted for changes to take effect:
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-61668r1045064_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258003" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258003" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10119,7 +10049,7 @@ The SSH service must be restarted for changes to take effect:
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-61669r1045066_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258004" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258004" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10149,7 +10079,7 @@ The SSH service must be restarted for changes to take effect:
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-61670r1045068_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258005" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258005" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10179,7 +10109,7 @@ The SSH service must be restarted for changes to take effect:
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-61671r1045070_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258006" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258006" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10209,7 +10139,7 @@ The SSH service must be restarted for changes to take effect:
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-61672r1045072_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258007" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258007" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10239,7 +10169,7 @@ The SSH service must be restarted for changes to take effect:
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-61673r1045074_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258008" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258008" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10269,7 +10199,7 @@ The SSH service must be restarted for changes to take effect:
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-61674r1045076_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258009" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258009" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10299,7 +10229,7 @@ The SSH service must be restarted for changes to take effect:
 $ sudo systemctl restart sshd.service</xccdf:fixtext>
           <xccdf:fix id="F-61676r1045078_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258011" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258011" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10345,7 +10275,7 @@ Run the following command to update the database:
 $ sudo dconf update</xccdf:fixtext>
           <xccdf:fix id="F-61677r926022_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258012" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258012" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10389,7 +10319,7 @@ Run the following command to update the database:
 $ sudo dconf update</xccdf:fixtext>
           <xccdf:fix id="F-61678r1045081_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258013" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258013" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10426,7 +10356,7 @@ Then update the dconf system databases:
 $ sudo dconf update</xccdf:fixtext>
           <xccdf:fix id="F-61679r926028_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258014" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258014" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10460,41 +10390,7 @@ Then update the dconf system databases:
 $ sudo dconf update</xccdf:fixtext>
           <xccdf:fix id="F-61680r926031_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258015" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-258017">
-        <xccdf:title>SRG-OS-000114-GPOS-00059</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258017r1045088_rule" severity="medium" weight="10.0">
-          <xccdf:version>RHEL-09-271035</xccdf:version>
-          <xccdf:title>RHEL 9 must prevent a user from overriding the disabling of the graphical user interface autorun function.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Techniques used to address this include protocols using nonces (e.g., numbers generated for a specific one-time use) or challenges (e.g., TLS, WS_Security). Additional techniques include time-synchronous or challenge-response one-time authenticators.
-
-Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163, SRG-OS-000480-GPOS-00227&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Red Hat Enterprise Linux 9</dc:subject>
-            <dc:identifier>5551</dc:identifier>
-          </xccdf:reference>
-          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxGnome" />
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000778</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-001958</xccdf:ident>
-          <xccdf:fixtext fixref="F-61682r926037_fix">Configure the GNOME desktop to not allow a user to change the setting that disables autorun on removable media.
-
-Add the following line to "/etc/dconf/db/local.d/locks/00-security-settings-lock" to prevent user modification:
-
-/org/gnome/desktop/media-handling/autorun-never
-
-Then update the dconf system databases:
-
-$ sudo dconf update</xccdf:fixtext>
-          <xccdf:fix id="F-61682r926037_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258017" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258015" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10522,7 +10418,7 @@ Set AutomaticLoginEnable to false in the [daemon] section in /etc/gdm/custom.con
 AutomaticLoginEnable=false</xccdf:fixtext>
           <xccdf:fix id="F-61683r926040_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258018" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258018" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10566,7 +10462,7 @@ Then update the dconf system databases:
 $ sudo dconf update</xccdf:fixtext>
           <xccdf:fix id="F-61684r926043_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258019" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258019" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10601,7 +10497,7 @@ Then update the dconf system databases:
 $ sudo dconf update</xccdf:fixtext>
           <xccdf:fix id="F-61685r926046_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258020" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258020" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10646,47 +10542,7 @@ Run the following command to update the database:
 $ sudo dconf update</xccdf:fixtext>
           <xccdf:fix id="F-61687r1045096_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258022" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-258023">
-        <xccdf:title>SRG-OS-000029-GPOS-00010</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258023r958402_rule" severity="medium" weight="10.0">
-          <xccdf:version>RHEL-09-271065</xccdf:version>
-          <xccdf:title>RHEL 9 must automatically lock graphical user sessions after 15 minutes of inactivity.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;A session time-out lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not logout because of the temporary nature of the absence. Rather than relying on the user to manually lock their operating system session prior to vacating the vicinity, the GNOME desktop can be configured to identify when a user's session has idled and take action to initiate a session lock.
-
-Satisfies: SRG-OS-000029-GPOS-00010, SRG-OS-000031-GPOS-00012&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Red Hat Enterprise Linux 9</dc:subject>
-            <dc:identifier>5551</dc:identifier>
-          </xccdf:reference>
-          <xccdf:platform idref="#xccdf_mil.disa.stig_platform_LinuxGnome" />
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000057</xccdf:ident>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000060</xccdf:ident>
-          <xccdf:fixtext fixref="F-61688r926055_fix">Configure RHEL 9 to initiate a screensaver after a 15-minute period of inactivity for graphical user interfaces.
-
-Create a database to contain the system-wide screensaver settings (if it does not already exist) with the following command:
-
-$ sudo touch /etc/dconf/db/local.d/00-screensaver
-
-Edit /etc/dconf/db/local.d/00-screensaver and add or update the following lines:
-
-[org/gnome/desktop/session]
-# Set the lock time out to 900 seconds before the session is considered idle
-idle-delay=uint32 900
-
-Update the system databases:
-
-$ sudo dconf update</xccdf:fixtext>
-          <xccdf:fix id="F-61688r926055_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258023" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258022" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10726,7 +10582,7 @@ Run the following command to update the database:
 $ sudo dconf update</xccdf:fixtext>
           <xccdf:fix id="F-61689r1045099_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258024" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258024" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10763,7 +10619,7 @@ Run the following command to update the database:
 $ sudo dconf update</xccdf:fixtext>
           <xccdf:fix id="F-61691r1045102_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258026" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258026" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10792,7 +10648,7 @@ Update the dconf system databases:
 $ sudo dconf update</xccdf:fixtext>
           <xccdf:fix id="F-61694r1045108_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258029" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258029" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10827,7 +10683,7 @@ Run the following command to update the database:
 $ sudo dconf update</xccdf:fixtext>
           <xccdf:fix id="F-61695r1045111_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258030" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258030" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10862,7 +10718,7 @@ Run the following command to update the database:
 $ sudo dconf update</xccdf:fixtext>
           <xccdf:fix id="F-61697r1045116_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258032" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258032" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10897,7 +10753,7 @@ Update the system databases:
 $ sudo dconf update</xccdf:fixtext>
           <xccdf:fix id="F-61698r1045119_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258033" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258033" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10926,7 +10782,7 @@ install usb-storage /bin/false
 blacklist usb-storage</xccdf:fixtext>
           <xccdf:fix id="F-61699r1045122_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258034" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258034" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10962,7 +10818,7 @@ $ sudo systemctl status usbguard
 Note: usbguard will need to be configured to allow authorized devices once it is enabled on RHEL 9.</xccdf:fixtext>
           <xccdf:fix id="F-61700r1045124_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258035" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258035" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -10989,7 +10845,7 @@ The system administrator (SA) must work with the site information system securit
 $ sudo systemctl enable --now usbguard</xccdf:fixtext>
           <xccdf:fix id="F-61701r926094_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258036" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258036" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11031,7 +10887,7 @@ Add or edit the following line in /etc/usbguard/usbguard-daemon.conf
 AuditBackend=LinuxAudit</xccdf:fixtext>
           <xccdf:fix id="F-61702r926097_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258037" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258037" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11063,7 +10919,7 @@ blacklist bluetooth
 Reboot the system for the settings to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-61704r1045130_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258039" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258039" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11092,7 +10948,7 @@ Add or modify the following line in the "/etc/login.defs" file:
 PASS_MAX_DAYS 60</xccdf:fixtext>
           <xccdf:fix id="F-61706r926109_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258041" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258041" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11117,7 +10973,7 @@ PASS_MAX_DAYS 60</xccdf:fixtext>
 passwd -x 60 [user]</xccdf:fixtext>
           <xccdf:fix id="F-61707r926112_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258042" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258042" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11141,7 +10997,7 @@ passwd -x 60 [user]</xccdf:fixtext>
 CREATE_HOME yes</xccdf:fixtext>
           <xccdf:fix id="F-61708r926115_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258043" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258043" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11167,7 +11023,7 @@ Satisfies: SRG-OS-000104-GPOS-00051, SRG-OS-000121-GPOS-00062, SRG-OS-000042-GPO
           <xccdf:fixtext fixref="F-61710r926121_fix">Edit the file "/etc/passwd" and provide each interactive user account that has a duplicate UID with a unique UID.</xccdf:fixtext>
           <xccdf:fix id="F-61710r926121_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258045" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258045" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11199,7 +11055,7 @@ $ sudo usermod --shell /sbin/nologin &lt;user&gt;
 Do not perform the steps in this section on the root account. Doing so will cause the system to become inaccessible.</xccdf:fixtext>
           <xccdf:fix id="F-61711r926124_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258046" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258046" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11223,7 +11079,7 @@ Do not perform the steps in this section on the root account. Doing so will caus
 Edit the file "/etc/passwd" and ensure that every user's GID is a valid GID.</xccdf:fixtext>
           <xccdf:fix id="F-61713r926130_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258048" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258048" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11257,7 +11113,7 @@ $ sudo useradd -D -f 35
 The recommendation is 35 days, but a lower value is acceptable.</xccdf:fixtext>
           <xccdf:fix id="F-61714r926133_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258049" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258049" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11279,7 +11135,7 @@ The recommendation is 35 days, but a lower value is acceptable.</xccdf:fixtext>
           <xccdf:fixtext fixref="F-61716r926139_fix">Create and assign home directories to all local interactive users on RHEL 9 that currently do not have a home directory assigned.</xccdf:fixtext>
           <xccdf:fix id="F-61716r926139_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258051" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258051" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11308,7 +11164,7 @@ Add/modify the "/etc/security/faillock.conf" file to match the following line:
 deny = 3</xccdf:fixtext>
           <xccdf:fix id="F-61719r926148_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258054" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258054" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11339,7 +11195,7 @@ Edit the "/etc/security/faillock.conf" by uncommenting or adding the following l
 even_deny_root</xccdf:fixtext>
           <xccdf:fix id="F-61720r1045139_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258055" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258055" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11370,7 +11226,7 @@ Then edit the "/etc/security/faillock.conf" file as follows:
 fail_interval = 900</xccdf:fixtext>
           <xccdf:fix id="F-61721r1045142_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258056" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258056" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11401,7 +11257,7 @@ Edit the "/etc/security/faillock.conf" file as follows:
 unlock_time = 0</xccdf:fixtext>
           <xccdf:fix id="F-61722r1045145_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258057" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258057" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11425,7 +11281,7 @@ unlock_time = 0</xccdf:fixtext>
 If the account is associated with system commands or applications, the UID should be changed to one greater than "0" but less than "1000". Otherwise, assign a UID of greater than "1000" that has not already been assigned.</xccdf:fixtext>
           <xccdf:fix id="F-61724r926163_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258059" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258059" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11451,7 +11307,7 @@ Add/modify the "/etc/security/faillock.conf" file to match the following line:
 dir = /var/log/faillock</xccdf:fixtext>
           <xccdf:fix id="F-61725r926166_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258060" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258060" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11473,7 +11329,7 @@ dir = /var/log/faillock</xccdf:fixtext>
           <xccdf:fixtext fixref="F-61726r926169_fix">Edit the file "/etc/group" and provide each group that has a duplicate GID with a unique GID.</xccdf:fixtext>
           <xccdf:fix id="F-61726r926169_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258061" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258061" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11504,7 +11360,7 @@ Add or edit the following line in "/etc/profile.d/tmout.sh":
 declare -xr TMOUT=600</xccdf:fixtext>
           <xccdf:fix id="F-61733r1014871_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258068" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258068" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11532,7 +11388,7 @@ Add the following line to the top of the /etc/security/limits.conf or in a ".con
 * hard maxlogins 10</xccdf:fixtext>
           <xccdf:fix id="F-61734r926193_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258069" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258069" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11562,7 +11418,7 @@ Add/modify the "/etc/security/faillock.conf" file to match the following line:
 audit</xccdf:fixtext>
           <xccdf:fix id="F-61735r1045152_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258070" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258070" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11588,7 +11444,7 @@ Modify the "/etc/login.defs" file to set the "FAIL_DELAY" parameter to 4 or grea
 FAIL_DELAY 4</xccdf:fixtext>
           <xccdf:fix id="F-61736r926199_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258071" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258071" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11616,7 +11472,7 @@ Add or edit the lines for the "umask" parameter in the "/etc/bashrc" file to "07
 umask 077</xccdf:fixtext>
           <xccdf:fix id="F-61737r926202_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258072" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258072" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11644,7 +11500,7 @@ Add or edit the lines for the "umask" parameter in the "/etc/csh.cshrc" file to
 umask 077</xccdf:fixtext>
           <xccdf:fix id="F-61738r926205_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258073" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258073" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11670,7 +11526,7 @@ Add or edit the lines for the "UMASK" parameter in the "/etc/login.defs" file to
 UMASK 077</xccdf:fixtext>
           <xccdf:fix id="F-61739r926208_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258074" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258074" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11698,40 +11554,14 @@ Add or edit the lines for the "umask" parameter in the "/etc/profile" file to "0
 umask 077</xccdf:fixtext>
           <xccdf:fix id="F-61740r926211_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258075" />
-          </xccdf:check>
-        </xccdf:Rule>
-      </xccdf:Group>
-      <xccdf:Group id="xccdf_mil.disa.stig_group_V-258076">
-        <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
-        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258076r991589_rule" severity="low" weight="10.0">
-          <xccdf:version>RHEL-09-412075</xccdf:version>
-          <xccdf:title>RHEL 9 must display the date and time of the last successful account logon upon logon.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Users need to be aware of activity that occurs regarding their account. Providing users with information regarding the number of unsuccessful attempts that were made to login to their account allows the user to determine if any unauthorized activity has occurred and gives them an opportunity to notify administrators.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
-          <xccdf:reference>
-            <dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title>
-            <dc:publisher>DISA</dc:publisher>
-            <dc:type>DPMS Target</dc:type>
-            <dc:subject>Red Hat Enterprise Linux 9</dc:subject>
-            <dc:identifier>5551</dc:identifier>
-          </xccdf:reference>
-          <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-61741r926214_fix">Configure RHEL 9 to provide users with feedback on when account accesses last occurred by setting the required configuration options in "/etc/pam.d/postlogin". 
-
-Add the following line to the top of "/etc/pam.d/postlogin":
-
-session required pam_lastlog.so showfailed</xccdf:fixtext>
-          <xccdf:fix id="F-61741r926214_fix" />
-          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258076" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258075" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-258077">
         <xccdf:title>SRG-OS-000163-GPOS-00072</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258077r1014874_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258077r1155659_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-412080</xccdf:version>
           <xccdf:title>RHEL 9 must terminate idle user sessions.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a management session enabled on the console or console port that has been left unattended.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
@@ -11743,16 +11573,24 @@ session required pam_lastlog.so showfailed</xccdf:fixtext>
             <dc:identifier>5551</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-001133</xccdf:ident>
-          <xccdf:fixtext fixref="F-61742r1014873_fix">Configure RHEL 9 to log out idle sessions by editing the /etc/systemd/logind.conf file with the following line:
+          <xccdf:fixtext fixref="F-61742r1155658_fix">Configure RHEL 9 to log out idle sessions.
+
+Create the directory if necessary:
+
+$ mkdir -p /etc/systemd/logind.conf.d/
+
+Create a *.conf file in /etc/systemd/logind.conf.d/ with the following content:
 
-StopIdleSessionSec=900
+[Login]
+StopIdleSessionSec=600
+KillUserProcesses=no
 
-The "logind" service must be restarted for the changes to take effect. To restart the "logind" service, run the following command:
+Restart systemd-logind:
 
-$ sudo systemctl restart systemd-logind</xccdf:fixtext>
-          <xccdf:fix id="F-61742r1014873_fix" />
+$ systemctl restart systemd-logind</xccdf:fixtext>
+          <xccdf:fix id="F-61742r1155658_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258077" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258077" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11785,7 +11623,7 @@ Edit the file "/etc/selinux/config" and add or modify the following line:
 A reboot is required for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-61743r926220_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258078" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258078" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11815,7 +11653,7 @@ Edit the file "/etc/selinux/config" and add or modify the following line:
 A reboot is required for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-61744r926223_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258079" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258079" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11843,7 +11681,7 @@ Satisfies: SRG-OS-000480-GPOS-00227, SRG-OS-000134-GPOS-00068&lt;/VulnDiscussion
 $ sudo dnf install policycoreutils</xccdf:fixtext>
           <xccdf:fix id="F-61746r926229_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258081" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258081" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11867,7 +11705,7 @@ $ sudo dnf install policycoreutils</xccdf:fixtext>
 $ sudo dnf install policycoreutils-python-utils</xccdf:fixtext>
           <xccdf:fix id="F-61747r926232_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258082" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258082" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11891,7 +11729,7 @@ $ sudo dnf install policycoreutils-python-utils</xccdf:fixtext>
 $ sudo dnf install sudo</xccdf:fixtext>
           <xccdf:fix id="F-61748r926235_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258083" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258083" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11922,7 +11760,7 @@ Add the following line to "/etc/sudoers" or a file in "/etc/sudoers.d":
 Defaults timestamp_timeout=0</xccdf:fixtext>
           <xccdf:fix id="F-61749r1045170_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258084" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258084" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11948,7 +11786,7 @@ Defaults !rootpw
 Defaults !runaspw</xccdf:fixtext>
           <xccdf:fix id="F-61750r926241_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258085" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258085" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -11979,7 +11817,7 @@ Remove any occurrence of "!authenticate" found in "/etc/sudoers" file or files i
 $ sudo sed -i '/\!authenticate/ s/^/# /g' /etc/sudoers /etc/sudoers.d/*</xccdf:fixtext>
           <xccdf:fix id="F-61751r926244_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258086" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258086" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12004,14 +11842,14 @@ ALL     ALL=(ALL) ALL
 ALL     ALL=(ALL:ALL) ALL</xccdf:fixtext>
           <xccdf:fix id="F-61752r926247_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258087" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258087" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-258088">
         <xccdf:title>SRG-OS-000373-GPOS-00156</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258088r1050789_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258088r1155643_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-432035</xccdf:version>
           <xccdf:title>RHEL 9 must restrict the use of the "su" command.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;The "su" program allows to run commands with a substitute user and group ID. It is commonly used to run commands as the root user. Limiting access to such commands is considered a good security practice.
@@ -12038,7 +11876,7 @@ $ sed '/^[[:space:]]*#[[:space:]]*auth[[:space:]]\+required[[:space:]]\+pam_whee
 If necessary, create a "wheel" group and add administrative users to the group.</xccdf:fixtext>
           <xccdf:fix id="F-61753r926250_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258088" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258088" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12073,7 +11911,7 @@ Satisfies: SRG-OS-000370-GPOS-00155, SRG-OS-000368-GPOS-00154&lt;/VulnDiscussion
 $ sudo dnf install fapolicyd</xccdf:fixtext>
           <xccdf:fix id="F-61754r926253_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258089" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258089" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12108,7 +11946,7 @@ Satisfies: SRG-OS-000370-GPOS-00155, SRG-OS-000368-GPOS-00154&lt;/VulnDiscussion
 $ systemctl enable --now fapolicyd</xccdf:fixtext>
           <xccdf:fix id="F-61755r926256_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258090" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258090" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12141,7 +11979,7 @@ Add or update the following line in the "/etc/security/pwquality.conf" file or a
 retry = 3</xccdf:fixtext>
           <xccdf:fix id="F-61756r1045184_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258091" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258091" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12169,7 +12007,7 @@ Otherwise, remove any instances of the "nullok" option in the "/etc/pam.d/passwo
 Note: Manual changes to the listed file may be overwritten by the "authselect" program.</xccdf:fixtext>
           <xccdf:fix id="F-61759r1045186_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258094" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258094" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12199,7 +12037,7 @@ Add the following line to the "/etc/pam.d/password-auth" file (or modify the lin
 password required pam_pwquality.so</xccdf:fixtext>
           <xccdf:fix id="F-61762r926277_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258097" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258097" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12225,7 +12063,7 @@ Add the following line to the "/etc/pam.d/system-auth" file(or modify the line t
 password required pam_pwquality.so</xccdf:fixtext>
           <xccdf:fix id="F-61763r926280_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258098" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258098" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12259,7 +12097,7 @@ password sufficient pam_unix.so sha512 rounds=100000
 Note: Running authselect will overwrite this value unless a custom authselect policy is created.</xccdf:fixtext>
           <xccdf:fix id="F-61764r1045197_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258099" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258099" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12293,7 +12131,7 @@ password sufficient pam_unix.so sha512 rounds=100000
 Note: Running authselect will overwrite this value unless a custom authselect policy is created.</xccdf:fixtext>
           <xccdf:fix id="F-61765r1045200_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258100" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258100" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12329,7 +12167,7 @@ Add or update the following line in the "/etc/security/pwquality.conf" file or a
 enforce_for_root</xccdf:fixtext>
           <xccdf:fix id="F-61766r1045203_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258101" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258101" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12358,7 +12196,7 @@ Add or update the following line in the "/etc/security/pwquality.conf" file or a
 lcredit = -1</xccdf:fixtext>
           <xccdf:fix id="F-61767r1045206_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258102" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258102" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12387,7 +12225,7 @@ Add or update the following line in the "/etc/security/pwquality.conf" file or a
 dcredit = -1</xccdf:fixtext>
           <xccdf:fix id="F-61768r1045209_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258103" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258103" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12416,7 +12254,7 @@ Add the following line in "/etc/login.defs" (or modify the line to have the requ
 PASS_MIN_DAYS 1</xccdf:fixtext>
           <xccdf:fix id="F-61769r926298_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258104" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258104" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12441,7 +12279,7 @@ PASS_MIN_DAYS 1</xccdf:fixtext>
 $ sudo passwd -n 1 [user]</xccdf:fixtext>
           <xccdf:fix id="F-61770r926301_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258105" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258105" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12472,7 +12310,7 @@ Remove any occurrence of "NOPASSWD" found in "/etc/sudoers" file or files in the
 $ sudo find /etc/sudoers /etc/sudoers.d -type f -exec sed -i '/NOPASSWD/ s/^/# /g' {} \;</xccdf:fixtext>
           <xccdf:fix id="F-61771r1045214_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258106" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258106" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12507,7 +12345,7 @@ Add or update the following line in the "/etc/security/pwquality.conf" file or a
 minlen = 15</xccdf:fixtext>
           <xccdf:fix id="F-61772r1045217_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258107" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258107" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12534,7 +12372,7 @@ Add or update the following line in the "/etc/security/pwquality.conf" file or a
 ocredit = -1</xccdf:fixtext>
           <xccdf:fix id="F-61774r1045219_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258109" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258109" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12560,7 +12398,7 @@ Add or update the following line in the "/etc/security/pwquality.conf" file or a
 dictcheck=1</xccdf:fixtext>
           <xccdf:fix id="F-61775r1045222_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258110" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258110" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12587,7 +12425,7 @@ Add or update the following line in the "/etc/security/pwquality.conf" file or a
 ucredit = -1</xccdf:fixtext>
           <xccdf:fix id="F-61776r1045225_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258111" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258111" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12616,7 +12454,7 @@ Add or update the following line in the "/etc/security/pwquality.conf" file or a
 difok = 8</xccdf:fixtext>
           <xccdf:fix id="F-61777r1045228_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258112" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258112" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12645,7 +12483,7 @@ Add or update the following line in the "/etc/security/pwquality.conf" file or a
 maxclassrepeat = 4</xccdf:fixtext>
           <xccdf:fix id="F-61778r1045231_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258113" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258113" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12674,7 +12512,7 @@ Add or update the following line in the "/etc/security/pwquality.conf" file or a
 maxrepeat = 3</xccdf:fixtext>
           <xccdf:fix id="F-61779r1045234_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258114" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258114" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12703,7 +12541,7 @@ Add or update the following line in the "/etc/security/pwquality.conf" file or a
 minclass = 4</xccdf:fixtext>
           <xccdf:fix id="F-61780r1045237_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258115" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258115" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12732,7 +12570,7 @@ Add or change the following line in the "[defaults]" section of "/etc/libuser.co
 crypt_style = sha512</xccdf:fixtext>
           <xccdf:fix id="F-61781r1014895_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258116" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258116" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12761,7 +12599,7 @@ Add or update the following line in the "/etc/login.defs" file:
 ENCRYPT_METHOD SHA512</xccdf:fixtext>
           <xccdf:fix id="F-61782r926337_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258117" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258117" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12788,7 +12626,7 @@ Satisfies: SRG-OS-000373-GPOS-00156, SRG-OS-000373-GPOS-00157, SRG-OS-000373-GPO
 Remove any occurrences of " pam_succeed_if " in the  "/etc/pam.d/sudo" file.</xccdf:fixtext>
           <xccdf:fix id="F-61783r926340_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258118" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258118" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12818,14 +12656,14 @@ To lock an account:
 $ sudo passwd -l [username]</xccdf:fixtext>
           <xccdf:fix id="F-61785r926346_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258120" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258120" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-258121">
         <xccdf:title>SRG-OS-000104-GPOS-00051</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258121r1102086_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258121r1155682_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-611160</xccdf:version>
           <xccdf:title>RHEL 9 must use the common access card (CAC) smart card driver.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Smart card login provides two-factor authentication stronger than that provided by a username and password combination. Smart cards leverage public key infrastructure to provide and verify credentials. Configuring the smart card driver in use by the organization helps to prevent users from using unauthorized smart cards.
@@ -12847,16 +12685,16 @@ Satisfies: SRG-OS-000104-GPOS-00051, SRG-OS-000106-GPOS-00053, SRG-OS-000107-GPO
           <xccdf:ident system="http://cyber.mil/cci">CCI-000768</xccdf:ident>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000770</xccdf:ident>
           <xccdf:ident system="http://cyber.mil/cci">CCI-001942</xccdf:ident>
-          <xccdf:fixtext fixref="F-61786r1045242_fix">Configure RHEL 9 to load the CAC driver.
+          <xccdf:fixtext fixref="F-61786r1155681_fix">Configure RHEL 9 to load the CAC driver.
 
-$ sudo opensc-tool --set-conf-entry app:default:card_driver:cac
+$ sudo opensc-tool --set-conf-entry app:default:card_drivers:cac
 
 Restart the pcscd service to apply the changes:
 
 $ sudo systemctl restart pcscd</xccdf:fixtext>
-          <xccdf:fix id="F-61786r1045242_fix" />
+          <xccdf:fix id="F-61786r1155681_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258121" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258121" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12885,7 +12723,7 @@ Satisfies: SRG-OS-000375-GPOS-00160, SRG-OS-000105-GPOS-00052&lt;/VulnDiscussion
 pam_cert_auth = True</xccdf:fixtext>
           <xccdf:fix id="F-61787r1045245_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258122" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258122" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12930,7 +12768,7 @@ The "sssd" service must be restarted for the changes to take effect. To restart
 $ sudo systemctl restart sssd.service</xccdf:fixtext>
           <xccdf:fix id="F-61788r926355_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258123" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258123" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12955,7 +12793,7 @@ $ sudo systemctl restart sssd.service</xccdf:fixtext>
 $ sudo dnf install pcsc-lite</xccdf:fixtext>
           <xccdf:fix id="F-61789r926358_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258124" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258124" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -12982,7 +12820,7 @@ The daemon program for pcsc-lite and the MuscleCard framework is pcscd. It is a
 $ sudo systemctl enable --now pcscd.socket</xccdf:fixtext>
           <xccdf:fix id="F-61790r1045252_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258125" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258125" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -13012,14 +12850,14 @@ Satisfies: SRG-OS-000375-GPOS-00160, SRG-OS-000376-GPOS-00161&lt;/VulnDiscussion
 $ sudo dnf install opensc</xccdf:fixtext>
           <xccdf:fix id="F-61791r926364_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258126" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258126" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-258128">
         <xccdf:title>SRG-OS-000080-GPOS-00048</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258128r1117265_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258128r1155626_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-611195</xccdf:version>
           <xccdf:title>RHEL 9 must require authentication to access emergency mode.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DOD-approved PKIs, all DOD systems (e.g., web servers and web portals) must be properly configured to incorporate access control methods that do not rely solely on the possession of a certificate for access. Successful authentication must not automatically give an entity access to an asset or security boundary. Authorization procedures and controls must be implemented to ensure each authenticated entity also has a validated and current authorization. Authorization is the process of determining whether an entity, once authenticated, is permitted to access a specific asset. Information systems use access control policies and enforcement mechanisms to implement this requirement.
@@ -13033,21 +12871,34 @@ This requirement prevents attackers with physical access from trivially bypassin
             <dc:identifier>5551</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000213</xccdf:ident>
-          <xccdf:fixtext fixref="F-61793r926370_fix">Configure RHEL 9 to require authentication for emergency mode.
+          <xccdf:fixtext fixref="F-61793r1155625_fix">Configure RHEL 9 to require authentication for emergency mode.
 
-Add or modify the following line in the "/usr/lib/systemd/system/emergency.service" file:
+Create a directory for supplementary configuration files: 
+$ sudo mkdir /etc/systemd/system/emergency.service.d/
 
-ExecStart=-/usr/lib/systemd/systemd-sulogin-shell emergency</xccdf:fixtext>
-          <xccdf:fix id="F-61793r926370_fix" />
+Copy the original file emergency.service file to the new directory with:
+$ sudo cp  /usr/lib/systemd/system/emergency.service  /etc/systemd/system/emergency.service.d/emergency.service.conf
+
+Open the new file:
+$ sudo vi /etc/systemd/system/emergency.service.d/emergency.service.conf
+
+Add or modify the following line in the new file:
+ExecStart=-/usr/lib/systemd/systemd-sulogin-shell emergency
+
+Comment out or remove the ExecStart and ExecStartPre lines in /usr/lib/systemd/system/emergency.service as they can only exist in one location.
+
+Apply changes to unit files without rebooting the system:
+$ sudo systemctl daemon-reload</xccdf:fixtext>
+          <xccdf:fix id="F-61793r1155625_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258128" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258128" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-258129">
         <xccdf:title>SRG-OS-000080-GPOS-00048</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258129r1117265_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258129r1155628_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-611200</xccdf:version>
           <xccdf:title>RHEL 9 must require authentication to access single-user mode.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DOD-approved PKIs, all DOD systems (e.g., web servers and web portals) must be properly configured to incorporate access control methods that do not rely solely on the possession of a certificate for access. Successful authentication must not automatically give an entity access to an asset or security boundary. Authorization procedures and controls must be implemented to ensure each authenticated entity also has a validated and current authorization. Authorization is the process of determining whether an entity, once authenticated, is permitted to access a specific asset. Information systems use access control policies and enforcement mechanisms to implement this requirement.
@@ -13065,28 +12916,27 @@ For example, to extend the configuration of the network service, do not modify t
             <dc:identifier>5551</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000213</xccdf:ident>
-          <xccdf:fixtext fixref="F-61794r1102058_fix">Configure RHEL 9 to require authentication for single-user mode.
+          <xccdf:fixtext fixref="F-61794r1155627_fix">Configure RHEL 9 to require authentication for single-user mode.
 
-Create a directory for supplementary configuration files at /etc/systemd/system/rescue.service.d/
+Create a directory for supplementary configuration files: 
+$ sudo mkdir /etc/systemd/system/rescue.service.d/
 
 Copy the original file rescue.service file to the new directory with:
-
 $ sudo cp  /usr/lib/systemd/system/rescue.service  /etc/systemd/system/rescue.service.d/rescue.service.conf
 
-Add or modify the following line in the "etc/systemd/system/rescue.service.d/rescue.service.conf" file:
+Open the new file:
+$ sudo vi etc/systemd/system/rescue.service.d/rescue.service.conf
 
+Add this line to the new file:
 ExecStart=-/usr/lib/systemd/systemd-sulogin-shell rescue
 
-Apply changes to unit files without rebooting the system:
-
-$ sudo systemctl daemon-reload
-
-If the modified unit file belongs to a running service, restart the service:
+Comment out or remove the ExecStart and ExecStartPre lines in /usr/lib/systemd/system/rescue.service as they can only exist in one location.
 
-$ sudo  systemctl restart rescue.service</xccdf:fixtext>
-          <xccdf:fix id="F-61794r1102058_fix" />
+Apply changes to unit files without rebooting the system:
+$ sudo systemctl daemon-reload</xccdf:fixtext>
+          <xccdf:fix id="F-61794r1155627_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258129" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258129" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -13112,7 +12962,7 @@ Edit the file "/etc/sssd/sssd.conf" or a configuration file in "/etc/sssd/conf.d
 offline_credentials_expiration = 1</xccdf:fixtext>
           <xccdf:fix id="F-61798r1045262_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258133" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258133" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -13152,7 +13002,7 @@ Satisfies: SRG-OS-000256-GPOS-00097, SRG-OS-000257-GPOS-00098, SRG-OS-000258-GPO
 /usr/sbin/augenrules p+i+n+u+g+s+b+acl+xattrs+sha512</xccdf:fixtext>
           <xccdf:fix id="F-61802r943020_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258137" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258137" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -13179,7 +13029,7 @@ Satisfies: SRG-OS-000479-GPOS-00224, SRG-OS-000051-GPOS-00024, SRG-OS-000480-GPO
 $ sudo dnf install rsyslog</xccdf:fixtext>
           <xccdf:fix id="F-61805r1106358_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258140" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258140" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -13205,7 +13055,7 @@ Satisfies: SRG-OS-000480-GPOS-00227, SRG-OS-000120-GPOS-00061&lt;/VulnDiscussion
 $ sudo dnf install rsyslog-gnutls</xccdf:fixtext>
           <xccdf:fix id="F-61806r926409_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258141" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258141" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -13229,14 +13079,14 @@ $ sudo dnf install rsyslog-gnutls</xccdf:fixtext>
 $ sudo systemctl enable --now rsyslog</xccdf:fixtext>
           <xccdf:fix id="F-61807r926412_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258142" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258142" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-258143">
         <xccdf:title>SRG-OS-000480-GPOS-00227</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258143r1134931_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258143r1155671_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-652025</xccdf:version>
           <xccdf:title>RHEL 9 must be configured so that the rsyslog daemon does not accept log messages from other servers unless the server is being used for log aggregation.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Unintentionally running a rsyslog server accepting remote messages puts the system at increased risk. Malicious rsyslog messages sent to the server could exploit vulnerabilities in the server software itself, could introduce misleading information into the system's logs, or could fill the system's storage leading to a denial of service.
@@ -13250,9 +13100,12 @@ If the system is intended to be a log aggregation server, its use must be docume
             <dc:identifier>5551</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-000366</xccdf:ident>
-          <xccdf:fixtext fixref="F-61808r1045282_fix">Configure RHEL 9 to not receive remote logs using rsyslog.
+          <xccdf:fixtext fixref="F-61808r1155670_fix">Configure RHEL 9 to not receive remote logs using rsyslog.
 
 Remove the lines in /etc/rsyslog.conf and any files in the /etc/rsyslog.d directory that match any of the following:
+InputTCPServerRun
+UDPServerRun
+RELPServerRun
 module(load="imtcp")
 module(load="imudp")
 module(load="imrelp")
@@ -13263,9 +13116,9 @@ input(type="imrelp" port="514")
 The rsyslog daemon must be restarted for the changes to take effect:
 
 $ sudo systemctl restart rsyslog.service</xccdf:fixtext>
-          <xccdf:fix id="F-61808r1045282_fix" />
+          <xccdf:fix id="F-61808r1155670_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258143" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258143" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -13293,7 +13146,7 @@ The "rsyslog" service must be restarted for the changes to take effect with the
 $ sudo systemctl restart rsyslog.service</xccdf:fixtext>
           <xccdf:fix id="F-61809r1045285_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258144" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258144" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -13329,7 +13182,7 @@ Satisfies: SRG-OS-000342-GPOS-00133, SRG-OS-000479-GPOS-00224&lt;/VulnDiscussion
 $ActionSendStreamDriverAuthMode x509/name</xccdf:fixtext>
           <xccdf:fix id="F-61811r926424_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258146" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258146" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -13365,7 +13218,7 @@ Satisfies: SRG-OS-000342-GPOS-00133, SRG-OS-000479-GPOS-00224&lt;/VulnDiscussion
 $ActionSendStreamDriverMode 1</xccdf:fixtext>
           <xccdf:fix id="F-61812r926427_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258147" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258147" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -13395,14 +13248,14 @@ Satisfies: SRG-OS-000342-GPOS-00133, SRG-OS-000479-GPOS-00224&lt;/VulnDiscussion
 $DefaultNetstreamDriver gtls</xccdf:fixtext>
           <xccdf:fix id="F-61813r926430_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258148" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258148" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-258149">
         <xccdf:title>SRG-OS-000479-GPOS-00224</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258149r1106462_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258149r1155580_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-652055</xccdf:version>
           <xccdf:title>RHEL 9 must be configured to forward audit records via TCP to a different system or media from the system being audited via rsyslog.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Information stored in one location is vulnerable to accidental or incidental deletion or alteration.
@@ -13428,12 +13281,26 @@ Satisfies: SRG-OS-000479-GPOS-00224, SRG-OS-000480-GPOS-00227, SRG-OS-000342-GPO
             <dc:identifier>5551</dc:identifier>
           </xccdf:reference>
           <xccdf:ident system="http://cyber.mil/cci">CCI-001851</xccdf:ident>
-          <xccdf:fixtext fixref="F-61814r1106361_fix">Configure RHEL 9 to off-load audit records onto a different system or media from the system being audited via TCP using rsyslog by specifying the remote logging server in "/etc/rsyslog.conf" or "/etc/rsyslog.d/[customfile].conf" with the name or IP address of the log aggregation server.
+          <xccdf:fixtext fixref="F-61814r1155579_fix">Configure RHEL 9 to off-load audit records onto a different system or media from the system being audited via TCP using rsyslog by specifying the remote logging server in "/etc/rsyslog.conf" or "/etc/rsyslog.d/[customfile].conf" with the name or IP address of the log aggregation server. The following are examples of the configuration for the legacy syntax and for the newer Rainer script. Only one should be used.
+
+Using legacy '@host:port" syntax example:
+*.* @@[remoteloggingserver]:[port]
 
-*.* @@[remoteloggingserver]:[port]</xccdf:fixtext>
-          <xccdf:fix id="F-61814r1106361_fix" />
+Using Rainer script example:
+action(
+    type="omfwd"
+    target="logserver.example.com"
+    port="514"
+    protocol="tcp"
+    action.resumeRetryCount="-1"
+    queue.type="linkedList"
+    que.size="10000"
+)
+
+Note: The Rainer Script above does not contain the required encryption settings.</xccdf:fixtext>
+          <xccdf:fix id="F-61814r1155579_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258149" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258149" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -13488,7 +13355,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000038-GPO
 $ sudo dnf install audit</xccdf:fixtext>
           <xccdf:fix id="F-61816r926439_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258151" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258151" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -13541,7 +13408,7 @@ Satisfies: SRG-OS-000062-GPOS-00031, SRG-OS-000037-GPOS-00015, SRG-OS-000038-GPO
 $ sudo systemctl enable --now auditd</xccdf:fixtext>
           <xccdf:fix id="F-61817r926442_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258152" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258152" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -13569,7 +13436,7 @@ disk_error_action = HALT
 If availability has been determined to be more important, and this decision is documented with the information system security officer (ISSO), configure the operating system to notify SA staff and ISSO staff in the event of an audit processing failure by setting the "disk_error_action" to "SYSLOG".</xccdf:fixtext>
           <xccdf:fix id="F-61818r926445_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258153" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258153" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -13597,7 +13464,7 @@ disk_full_action = HALT
 If availability has been determined to be more important, and this decision is documented with the information system security officer (ISSO), configure the operating system to notify SA staff and ISSO staff in the event of an audit processing failure by setting the "disk_full_action" to "SYSLOG".</xccdf:fixtext>
           <xccdf:fix id="F-61819r926448_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258154" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258154" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -13628,7 +13495,7 @@ If audit records are stored on a partition made specifically for audit records,
 If audit records are not stored on a partition made specifically for audit records, a new partition with sufficient space will need be to be created.</xccdf:fixtext>
           <xccdf:fix id="F-61820r926451_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258155" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258155" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -13652,7 +13519,7 @@ If audit records are not stored on a partition made specifically for audit recor
 space_left  = 25%</xccdf:fixtext>
           <xccdf:fix id="F-61821r1102076_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258156" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258156" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -13676,7 +13543,7 @@ space_left  = 25%</xccdf:fixtext>
 space_left_action = email</xccdf:fixtext>
           <xccdf:fix id="F-61822r926457_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258157" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258157" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -13700,7 +13567,7 @@ space_left_action = email</xccdf:fixtext>
 admin_space_left  = 5%</xccdf:fixtext>
           <xccdf:fix id="F-61823r926460_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258158" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258158" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -13728,7 +13595,7 @@ admin_space_left_action = single
 The audit daemon must be restarted for changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-61824r926463_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258159" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258159" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -13754,7 +13621,7 @@ Add or update the following line in "/etc/audit/auditd.conf" file:
 max_log_file_action = ROTATE</xccdf:fixtext>
           <xccdf:fix id="F-61825r926466_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258160" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258160" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -13785,7 +13652,7 @@ name_format = hostname
 The audit daemon must be restarted for changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-61826r926469_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258161" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258161" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -13815,7 +13682,7 @@ overflow_action = syslog
 The audit daemon must be restarted for changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-61827r926472_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258162" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258162" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -13850,7 +13717,7 @@ action_mail_acct = root
 The audit daemon must be restarted for changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-61828r926475_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258163" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258163" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -13880,7 +13747,7 @@ local_events = yes
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-61829r926478_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258164" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258164" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -13915,7 +13782,7 @@ Change the ownership to that group:
 $ sudo chgrp ${GROUP} /var/log/audit</xccdf:fixtext>
           <xccdf:fix id="F-61830r926481_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258165" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258165" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -13944,14 +13811,14 @@ Satisfies: SRG-OS-000057-GPOS-00027, SRG-OS-000058-GPOS-00028, SRG-OS-000059-GPO
 $ sudo chown root /var/log/audit</xccdf:fixtext>
           <xccdf:fix id="F-61831r926484_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258166" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258166" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-258167">
         <xccdf:title>SRG-OS-000057-GPOS-00027</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258167r1101918_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258167r1155630_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-653090</xccdf:version>
           <xccdf:title>RHEL 9 audit logs file must have mode 0600 or less permissive to prevent unauthorized access to the audit log.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state or can identify the RHEL 9 system or platform. Additionally, Personally Identifiable Information (PII) and operational information must not be revealed through error messages to unauthorized personnel or their designated representatives.
@@ -13991,7 +13858,7 @@ $ sudo chmod 0600 $log_file
 $ sudo chmod 0400 $log_file.*</xccdf:fixtext>
           <xccdf:fix id="F-61832r1045305_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258167" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258167" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -14017,7 +13884,7 @@ freq = 100
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-61833r943023_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258168" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258168" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -14050,7 +13917,7 @@ log_format = ENRICHED
 The audit daemon must be restarted for changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-61834r926493_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258169" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258169" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -14078,7 +13945,7 @@ write_logs = yes
 The audit daemon must be restarted for changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-61835r926496_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258170" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258170" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -14104,7 +13971,7 @@ $ sudo chmod 0640 /etc/audit/rules.d/[customrulesfile].rules
 $ sudo chmod 0640 /etc/audit/auditd.conf</xccdf:fixtext>
           <xccdf:fix id="F-61836r926499_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258171" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258171" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -14137,7 +14004,7 @@ Satisfies: SRG-OS-000254-GPOS-00095, SRG-OS-000341-GPOS-00132&lt;/VulnDiscussion
 $ sudo grubby --update-kernel=ALL --args=audit_backlog_limit=8192</xccdf:fixtext>
           <xccdf:fix id="F-61838r926505_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258173" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258173" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -14161,14 +14028,14 @@ $ sudo grubby --update-kernel=ALL --args=audit_backlog_limit=8192</xccdf:fixtext
 $ sudo dnf install audispd-plugins</xccdf:fixtext>
           <xccdf:fix id="F-61840r926511_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258175" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258175" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-258176">
         <xccdf:title>SRG-OS-000326-GPOS-00126</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258176r1106366_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258176r1155595_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-654010</xccdf:version>
           <xccdf:title>RHEL 9 must audit uses of the "execve" system call.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Misuse of privileged functions, either intentionally or unintentionally by authorized users, or by unauthorized external entities that have compromised information system accounts, is a serious and ongoing concern and can have significant adverse impacts on organizations. Auditing the use of privileged functions is one way to detect such misuse and identify the risk from insider threats and the advanced persistent threat.
@@ -14197,17 +14064,17 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61841r1045312_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258176" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258176" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-258177">
         <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258177r1106368_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258177r1155597_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-654015</xccdf:version>
           <xccdf:title>RHEL 9 must audit all uses of the chmod, fchmod, and fchmodat system calls.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
 
 Audit records can be generated from various components within the information system (e.g., module or policy filter).
 
@@ -14240,17 +14107,17 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61842r1045315_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258177" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258177" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-258178">
         <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258178r1106370_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258178r1155599_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-654020</xccdf:version>
           <xccdf:title>RHEL 9 must audit all uses of the chown, fchown, fchownat, and lchown system calls.</xccdf:title>
-          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
+          <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
 
 Audit records can be generated from various components within the information system (e.g., module or policy filter).
 
@@ -14283,14 +14150,14 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61843r1045318_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258178" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258178" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-258179">
         <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258179r1106371_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258179r1155601_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-654025</xccdf:version>
           <xccdf:title>RHEL 9 must audit all uses of the setxattr, fsetxattr, lsetxattr, removexattr, fremovexattr, and lremovexattr system calls.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
@@ -14326,7 +14193,7 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61844r1045321_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258179" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258179" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -14365,7 +14232,7 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61845r1045324_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258180" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258180" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -14405,7 +14272,7 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61846r1045327_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258181" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258181" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -14445,7 +14312,7 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61847r1045330_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258182" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258182" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -14485,7 +14352,7 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61848r1045333_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258183" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258183" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -14525,7 +14392,7 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61849r1045336_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258184" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258184" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -14565,7 +14432,7 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61850r1045339_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258185" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258185" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -14605,14 +14472,14 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61851r1045342_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258186" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258186" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-258187">
         <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258187r1106373_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258187r1155603_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-654065</xccdf:version>
           <xccdf:title>RHEL 9 must audit all uses of the rename, unlink, rmdir, renameat, and unlinkat system calls.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
@@ -14646,14 +14513,14 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61852r1045345_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258187" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258187" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-258188">
         <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258188r1106375_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258188r1155605_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-654070</xccdf:version>
           <xccdf:title>RHEL 9 must audit all uses of the truncate, ftruncate, creat, open, openat, and open_by_handle_at system calls.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
@@ -14690,14 +14557,14 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61853r1045348_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258188" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258188" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-258189">
         <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258189r1106377_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258189r1155607_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-654075</xccdf:version>
           <xccdf:title>RHEL 9 must audit all uses of the delete_module system call.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
@@ -14731,14 +14598,14 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61854r1045351_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258189" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258189" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-258190">
         <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258190r1106379_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258190r1155609_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-654080</xccdf:version>
           <xccdf:title>RHEL 9 must audit all uses of the init_module and finit_module system calls.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.
@@ -14772,7 +14639,7 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61855r1045354_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258190" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258190" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -14812,7 +14679,7 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61856r1045357_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258191" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258191" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -14852,7 +14719,7 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61857r1045360_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258192" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258192" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -14892,7 +14759,7 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61858r1045363_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258193" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258193" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -14932,7 +14799,7 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61859r1045366_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258194" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258194" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -14972,7 +14839,7 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61860r1045369_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258195" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258195" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -15012,7 +14879,7 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61861r1045372_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258196" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258196" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -15052,7 +14919,7 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61862r1045375_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258197" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258197" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -15092,7 +14959,7 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61863r1045378_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258198" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258198" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -15132,7 +14999,7 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61864r1045381_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258199" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258199" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -15172,7 +15039,7 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61865r1045384_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258200" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258200" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -15212,7 +15079,7 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61866r1045387_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258201" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258201" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -15252,7 +15119,7 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61867r1045390_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258202" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258202" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -15292,7 +15159,7 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61868r1045393_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258203" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258203" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -15332,7 +15199,7 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61869r1045396_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258204" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258204" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -15372,7 +15239,7 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61870r1045399_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258205" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258205" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -15412,7 +15279,7 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61871r1045402_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258206" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258206" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -15452,7 +15319,7 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61872r1045405_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258207" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258207" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -15492,7 +15359,7 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61873r1045408_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258208" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258208" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -15532,7 +15399,7 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61874r1045411_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258209" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258209" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -15572,7 +15439,7 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61875r1045414_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258210" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258210" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -15600,7 +15467,7 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61876r1045417_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258211" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258211" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -15628,7 +15495,7 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61877r1045420_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258212" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258212" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -15656,7 +15523,7 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61878r1045423_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258213" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258213" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -15684,14 +15551,14 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61879r1045426_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258214" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258214" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-258215">
         <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258215r1106381_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258215r1155611_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-654205</xccdf:version>
           <xccdf:title>Successful/unsuccessful uses of the umount system call in RHEL 9 must generate an audit record.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;The changing of file permissions could indicate that a user is attempting to gain access to information that would otherwise be disallowed. Auditing DAC modifications can facilitate the identification of patterns of abuse among both authorized and unauthorized users.
@@ -15717,14 +15584,14 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61880r1045429_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258215" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258215" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-258216">
         <xccdf:title>SRG-OS-000037-GPOS-00015</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258216r1102090_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258216r1155613_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-654210</xccdf:version>
           <xccdf:title>Successful/unsuccessful uses of the umount2 system call in RHEL 9 must generate an audit record.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;The changing of file permissions could indicate that a user is attempting to gain access to information that would otherwise be disallowed. Auditing DAC modifications can facilitate the identification of patterns of abuse among both authorized and unauthorized users.
@@ -15751,7 +15618,7 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61881r1045432_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258216" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258216" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -15794,7 +15661,7 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61882r1045435_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258217" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258217" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -15837,7 +15704,7 @@ To load the rules to the kernel immediately, use the following command:
 $ sudo augenrules --load</xccdf:fixtext>
           <xccdf:fix id="F-61883r1045438_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258218" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258218" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -15878,7 +15745,7 @@ Add or update the following file system rule to "/etc/audit/rules.d/audit.rules"
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-61884r926643_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258219" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258219" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -15919,7 +15786,7 @@ Add or update the following file system rule to "/etc/audit/rules.d/audit.rules"
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-61885r926646_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258220" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258220" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -15960,7 +15827,7 @@ Add or update the following file system rule to "/etc/audit/rules.d/audit.rules"
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-61886r926649_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258221" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258221" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -16005,7 +15872,7 @@ Add or update the following file system rule to "/etc/audit/rules.d/audit.rules"
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-61887r926652_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258222" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258222" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -16046,7 +15913,7 @@ Add or update the following file system rule to "/etc/audit/rules.d/audit.rules"
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-61888r926655_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258223" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258223" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -16079,7 +15946,7 @@ The audit daemon must be restarted for the changes to take effect.
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-61889r1014987_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258224" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258224" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -16115,7 +15982,7 @@ The audit daemon must be restarted for the changes to take effect.
 $ sudo service auditd restart</xccdf:fixtext>
           <xccdf:fix id="F-61890r1014989_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258225" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258225" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -16146,7 +16013,7 @@ Add the following line to the bottom of the /etc/audit/rules.d/audit.rules file:
 -f 2</xccdf:fixtext>
           <xccdf:fix id="F-61892r1014991_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258227" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258227" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -16177,7 +16044,7 @@ Satisfies: SRG-OS-000462-GPOS-00206, SRG-OS-000475-GPOS-00220, SRG-OS-000057-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-61893r926670_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258228" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258228" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -16211,7 +16078,45 @@ Satisfies: SRG-OS-000057-GPOS-00027, SRG-OS-000058-GPOS-00028, SRG-OS-000059-GPO
 The audit daemon must be restarted for the changes to take effect.</xccdf:fixtext>
           <xccdf:fix id="F-61894r926673_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258229" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258229" />
+          </xccdf:check>
+        </xccdf:Rule>
+      </xccdf:Group>
+      <xccdf:Group id="xccdf_mil.disa.stig_group_V-258230">
+        <xccdf:title>SRG-OS-000033-GPOS-00014</xccdf:title>
+        <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-258230r1155585_rule" severity="high" weight="10.0">
+          <xccdf:version>RHEL-09-671010</xccdf:version>
+          <xccdf:title>RHEL 9 must enable FIPS mode.</xccdf:title>
+          <xccdf:description>&lt;VulnDiscussion&gt;Use of weak or untested encryption algorithms undermines the purposes of utilizing encryption to protect data. The operating system must implement cryptographic modules adhering to the higher standards approved by the federal government since this provides assurance they have been tested and validated. This includes NIST FIPS-validated cryptography for the following: Provisioning digital signatures, generating cryptographic hashes, and to protect data requiring data-at-rest protections in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, and standards.
+
+Satisfies: SRG-OS-000033-GPOS-00014, SRG-OS-000125-GPOS-00065, SRG-OS-000396-GPOS-00176, SRG-OS-000423-GPOS-00187, SRG-OS-000478-GPOS-00223&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
+          <xccdf:reference>
+            <dc:title>DPMS Target Red Hat Enterprise Linux 9</dc:title>
+            <dc:publisher>DISA</dc:publisher>
+            <dc:type>DPMS Target</dc:type>
+            <dc:subject>Red Hat Enterprise Linux 9</dc:subject>
+            <dc:identifier>5551</dc:identifier>
+          </xccdf:reference>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000068</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-000877</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002418</xccdf:ident>
+          <xccdf:ident system="http://cyber.mil/cci">CCI-002450</xccdf:ident>
+          <xccdf:fixtext fixref="F-61895r1155584_fix">Configure the operating system to implement FIPS mode with the following command
+
+$ sudo fips-mode-setup --enable
+
+To ensure the kernel enables FIPS mode for early boot, "fips=1" must be added to the grub config:
+$ sudo grubby --update-kernel=ALL --args="fips=1"
+
+Verify the setting with the following command:
+$ cat /proc/cmdline
+BOOT_IMAGE=(hd0,gpt2)/vmlinuz-5.14.0-570.21.1.el9_6.x86_64 root=/dev/mapper/rhel-root ro resume=/dev/mapper/rhel-swap rd.luks.uuid=luks-cd37eb8d-a2c3-4671-96ee-1e6a3a681561 rd.lvm.lv=rhel/root rd.lvm.lv=rhel/swap rhgb quiet fips=1 boot=UUID=acbbb4ee-adc0-4cb2-9546-afab857b8849 audit_backlog_limit=8192 crashkernel=1G-4G:192M,4G-64G:256M,64G-:512M
+
+Reboot the system for the changes to take effect.</xccdf:fixtext>
+          <xccdf:fix id="F-61895r1155584_fix" />
+          <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258230" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -16239,7 +16144,7 @@ Satisfies: SRG-OS-000073-GPOS-00041, SRG-OS-000120-GPOS-00061&lt;/VulnDiscussion
           <xccdf:fixtext fixref="F-61896r926679_fix">Lock all interactive user accounts not using SHA-512 hashing until the passwords can be regenerated with SHA-512.</xccdf:fixtext>
           <xccdf:fix id="F-61896r926679_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258231" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258231" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -16266,7 +16171,7 @@ Add the following line to "/etc/ipsec.conf":
 include /etc/crypto-policies/back-ends/libreswan.config</xccdf:fixtext>
           <xccdf:fix id="F-61897r926682_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258232" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258232" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -16297,7 +16202,7 @@ Edit/modify the following line in the "/etc/pam.d/password-auth" file to include
 password sufficient pam_unix.so sha512</xccdf:fixtext>
           <xccdf:fix id="F-61898r926685_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258233" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258233" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -16325,7 +16230,7 @@ Satisfies: SRG-OS-000396-GPOS-00176, SRG-OS-000393-GPOS-00173, SRG-OS-000394-GPO
 $ sudo dnf -y install crypto-policies</xccdf:fixtext>
           <xccdf:fix id="F-61899r1051249_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258234" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258234" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -16363,7 +16268,7 @@ Setting system policy to FIPS
 Note: Systemwide crypto policies are applied on application startup. It is recommended to restart the system for the change of policies to fully take place.</xccdf:fixtext>
           <xccdf:fix id="F-61901r1051252_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258236" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258236" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -16397,14 +16302,14 @@ Add the following line to the "options" section in "/etc/named.conf":
 include "/etc/crypto-policies/back-ends/bind.config";</xccdf:fixtext>
           <xccdf:fix id="F-61907r926712_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258242" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:258242" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-270175">
         <xccdf:title>SRG-OS-000080-GPOS-00048</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-270175r1117265_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-270175r1137691_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-232103</xccdf:version>
           <xccdf:title>RHEL 9 "/etc/audit/" must be owned by root.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/audit/" directory contains files that ensure the proper auditing of command execution, privilege escalation, file manipulation, and more. Protection of this directory is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
@@ -16421,14 +16326,14 @@ include "/etc/crypto-policies/back-ends/bind.config";</xccdf:fixtext>
 $ sudo chown root /etc/audit/</xccdf:fixtext>
           <xccdf:fix id="F-74109r1044963_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:270175" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:270175" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-270176">
         <xccdf:title>SRG-OS-000080-GPOS-00048</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-270176r1117265_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-270176r1137691_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-232104</xccdf:version>
           <xccdf:title>RHEL 9 "/etc/audit/" must be group-owned by root.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;The "/etc/audit/" directory contains files that ensure the proper auditing of command execution, privilege escalation, file manipulation, and more. Protection of this directory is critical for system security.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</xccdf:description>
@@ -16445,7 +16350,7 @@ $ sudo chown root /etc/audit/</xccdf:fixtext>
 $ sudo chgrp root /etc/audit/</xccdf:fixtext>
           <xccdf:fix id="F-74110r1044966_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:270176" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:270176" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -16485,7 +16390,7 @@ Setting system policy to FIPS
 Note: Systemwide crypto policies are applied on application startup. It is recommended to restart the system for the change of policies to fully take place.</xccdf:fixtext>
           <xccdf:fix id="F-74111r1051236_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:270177" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:270177" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -16525,7 +16430,7 @@ Setting system policy to FIPS
 Note: Systemwide crypto policies are applied on application startup. It is recommended to restart the system for the change of policies to fully take place.</xccdf:fixtext>
           <xccdf:fix id="F-74112r1051242_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:270178" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:270178" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
@@ -16567,14 +16472,14 @@ Once it is determined the allow list is built correctly, set the "fapolicyd" to
 permissive = 0</xccdf:fixtext>
           <xccdf:fix id="F-74114r1045181_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:270180" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:270180" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-272488">
         <xccdf:title>SRG-OS-000304-GPOS-00121</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-272488r1082178_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-272488r1155665_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-215101</xccdf:version>
           <xccdf:title>RHEL 9 must have the Postfix package installed.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Postfix is a free, open-source mail transfer agent (MTA) that sends and receives emails. It is a server-side application that can be used to set up a local mail server, create a null-client mail relay, use a Postfix server as a destination for multiple domains, or choose an LDAP directory instead of files for lookups. Postfix supports protocols such as LDAP, SMTP AUTH (SASL), and TLS. It uses the Simple Mail Transfer Protocol (SMTP) to transfer emails between servers.
@@ -16593,14 +16498,14 @@ Satisfies: SRG-OS-000304-GPOS-00121, SRG-OS-000343-GPOS-00134, SRG-OS-000363-GPO
 $ sudo dnf install postfix</xccdf:fixtext>
           <xccdf:fix id="F-76447r1082177_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:272488" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:272488" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
       <xccdf:Group id="xccdf_mil.disa.stig_group_V-272496">
         <xccdf:title>SRG-OS-000445-GPOS-00199</xccdf:title>
         <xccdf:description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</xccdf:description>
-        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-272496r1134956_rule" severity="medium" weight="10.0">
+        <xccdf:Rule id="xccdf_mil.disa.stig_rule_SV-272496r1155582_rule" severity="medium" weight="10.0">
           <xccdf:version>RHEL-09-431016</xccdf:version>
           <xccdf:title>RHEL 9 must elevate the SELinux context when an administrator calls the sudo command.</xccdf:title>
           <xccdf:description>&lt;VulnDiscussion&gt;Without verification of the security functions, security functions may not operate correctly and the failure may go unnoticed. Security function is defined as the hardware, software, and/or firmware of the information system responsible for enforcing the system security policy and supporting the isolation of code and data on which the protection is based. Security functionality includes, but is not limited to, establishing system accounts, configuring access authorizations (i.e., permissions, privileges), setting events to be audited, and setting intrusion detection parameters.
@@ -16634,18 +16539,18 @@ Remove any configurations that conflict with the above from the following locati
 /etc/sudoers.d/</xccdf:fixtext>
           <xccdf:fix id="F-76453r1082183_fix" />
           <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <xccdf:check-content-ref href="U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:272496" />
+            <xccdf:check-content-ref href="U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" name="oval:mil.disa.stig.rhel9os:def:272496" />
           </xccdf:check>
         </xccdf:Rule>
       </xccdf:Group>
     </xccdf:Benchmark>
   </component>
-  <component id="scap_mil.disa.stig_comp_U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-oval.xml" timestamp="2025-09-27T23:04:04.074-04:00">
+  <component id="scap_mil.disa.stig_comp_U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-oval.xml" timestamp="2026-01-05T14:28:52.220-05:00">
     <oval_definitions xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5">
       <generator>
-        <oval:product_name>Security Content Tool 1.6.0</oval:product_name>
+        <oval:product_name>Security Content Tool 1.7.0</oval:product_name>
         <oval:schema_version>5.11</oval:schema_version>
-        <oval:timestamp>2025-09-27T11:04:04</oval:timestamp>
+        <oval:timestamp>2026-01-05T02:28:52</oval:timestamp>
       </generator>
       <definitions>
         <definition id="oval:mil.disa.stig.defs:def:204417" version="2" class="compliance">
@@ -16667,16 +16572,6 @@ Remove any configurations that conflict with the above from the following locati
             <criterion test_ref="oval:mil.disa.stig.linux:tst:20444300" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:204611" version="3" class="compliance">
-          <metadata>
-            <title>The operating system must use a reverse-path filter for IPv4 network traffic when possible by default.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:20461100" comment="net.ipv4.conf.default.rp_filter setting in kernel is set to 1" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:20461100" comment="net.ipv4.conf.default.rp_filter setting in admin sysctl configuration files is set to 1" />
-          </criteria>
-        </definition>
         <definition id="oval:mil.disa.stig.defs:def:230231" version="1" class="compliance">
           <metadata>
             <title>The operating system must encrypt all stored passwords with a FIPS 140-2 approved cryptographic hashing algorithm.</title>
@@ -16724,15 +16619,6 @@ Remove any configurations that conflict with the above from the following locati
             <criterion test_ref="oval:mil.disa.stig.linux:tst:23024100" comment="package policycoreutils is installed" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230244" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must be configured so that all network connections associated with SSH traffic are terminated at the end of the session or after 10 minutes of inactivity, except to fulfill documented and validated mission requirements.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23024400" comment="/etc/ssh/sshd_config:ClientAliveCountMax = 1" />
-          </criteria>
-        </definition>
         <definition id="oval:mil.disa.stig.defs:def:230245" version="1" class="compliance">
           <metadata>
             <title>The operating system /var/log/messages file must have mode 0640 or less permissive.</title>
@@ -16861,36 +16747,6 @@ Remove any configurations that conflict with the above from the following locati
             <criterion test_ref="oval:mil.disa.stig.ind:tst:23026601" comment="kernel.kexec_load_disabled setting in sysctl configuration files is set to 1, and nothing else" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230268" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must enable kernel parameters to enforce discretionary access control on hardlinks.</title>
-            <description />
-          </metadata>
-          <criteria operator="AND">
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23026800" comment="fs.protected_hardlinks setting in kernel is 1" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23026801" comment="fs.protected_hardlinks setting in sysctl configuration files is set to 1, and nothing else, and there are no conflicting settings in other files" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230269" version="3" class="compliance">
-          <metadata>
-            <title>The operating system must restrict access to the kernel message buffer.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23026900" comment="kernel.dmesg_restrict setting in kernel is 1" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23026900" comment="kernel.dmesg_restrict setting in sysctl configuration files is set to 1" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230270" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must prevent kernel profiling by unprivileged users.</title>
-            <description />
-          </metadata>
-          <criteria operator="AND">
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23027000" comment="kernel.perf_event_paranoid setting in kernel is 2" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23027001" comment="kernel.perf_event_paranoid setting in sysctl configuration files is set to 2, and nothing else, and there are no conflicting settings in other files" />
-          </criteria>
-        </definition>
         <definition id="oval:mil.disa.stig.defs:def:230271" version="1" class="compliance">
           <metadata>
             <title>The operating system must require users to provide a password for privilege escalation.</title>
@@ -16940,16 +16796,6 @@ Remove any configurations that conflict with the above from the following locati
             <criterion test_ref="oval:mil.disa.stig.ind:tst:23027901" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230280" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must implement address space layout randomization (ASLR) to protect its memory from unauthorized code execution.</title>
-            <description />
-          </metadata>
-          <criteria operator="AND">
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23028000" comment="kernel.randomize_va_space setting in kernel is 2" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23028000" comment="kernel.randomize_va_space setting in sysctl configuration files is set to 2" />
-          </criteria>
-        </definition>
         <definition id="oval:mil.disa.stig.defs:def:230281" version="1" class="compliance">
           <metadata>
             <title>YUM must remove all software components after updated versions have been installed on the operating system.</title>
@@ -17121,14 +16967,13 @@ Remove any configurations that conflict with the above from the following locati
             <criterion test_ref="oval:mil.disa.stig.linux:tst:23031002" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230311" version="2" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:230311" version="3" class="compliance">
           <metadata>
             <title>The operating system must disable the kernel.core_pattern.</title>
             <description />
           </metadata>
           <criteria>
             <criterion test_ref="oval:mil.disa.stig.unix:tst:23031100" comment="kernel.core_pattern setting in kernel is |/bin/false" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23031100" comment="kernel.core_pattern setting in sysctl configuration files is set to |/bin/false" />
           </criteria>
         </definition>
         <definition id="oval:mil.disa.stig.defs:def:230312" version="1" class="compliance">
@@ -17449,16 +17294,6 @@ Remove any configurations that conflict with the above from the following locati
             <criterion test_ref="oval:mil.disa.stig.ind:tst:23037800" comment="/etc/login.defs: FAIL_DELAY = 4 or greater" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230381" version="3" class="compliance">
-          <metadata>
-            <title>The operating system must display the date and time of the last successful account logon upon logon.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23038100" comment="pam_lastlog is configured to show last successful logon" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23038101" comment="pam_lastlog is not used with the silent option" />
-          </criteria>
-        </definition>
         <definition id="oval:mil.disa.stig.defs:def:230383" version="1" class="compliance">
           <metadata>
             <title>The operating system must define default permissions for all authenticated users in such a way that the user can only read and modify their own files.</title>
@@ -18441,15 +18276,6 @@ Remove any configurations that conflict with the above from the following locati
             <criterion test_ref="oval:mil.disa.stig.unix:tst:23053200" comment="debug-shell.service is masked" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230533" version="1" class="compliance">
-          <metadata>
-            <title>The Trivial File Transfer Protocol (TFTP) server package must not be installed if not required for the operating system operational support.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:23053300" comment="The tftp-server package is absent." />
-          </criteria>
-        </definition>
         <definition id="oval:mil.disa.stig.defs:def:230534" version="1" class="compliance">
           <metadata>
             <title>The root account must be the only account having unrestricted access to the operating system system.</title>
@@ -18459,146 +18285,25 @@ Remove any configurations that conflict with the above from the following locati
             <criterion test_ref="oval:mil.disa.stig.unix:tst:23053400" comment="Only the root account has a UID of zero." />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230535" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:230546" version="2" class="compliance">
           <metadata>
-            <title>The operating system must prevent IPv6 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</title>
+            <title>The operating system must restrict usage of ptrace to descendant processes.</title>
             <description />
           </metadata>
           <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23053500" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23053500" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054600" comment="kernel.yama.ptrace_scope setting in kernel is set to 1" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230536" version="2" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:230550" version="2" class="compliance">
           <metadata>
-            <title>The operating system must not send Internet Control Message Protocol (ICMP) redirects.</title>
+            <title>The operating system must be configured to prevent unrestricted mail relaying.</title>
             <description />
           </metadata>
           <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23053600" comment="net.ipv4.conf.all.send_redirects setting in kernel is 0" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23053600" comment="net.ipv4.conf.all.send_redirects setting in sysctl configuration files is set to 0" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:23055001" comment="/etc/postfix/main.cf: smtpd_client_restrictions = permit_mynetworks,reject" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230537" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must not respond to Internet Control Message Protocol (ICMP) echoes sent to a broadcast address.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23053700" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23053700" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230538" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must not forward IPv6 source-routed packets.</title>
-            <description />
-          </metadata>
-          <criteria operator="AND">
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23053800" comment="net.ipv6.conf.all.accept_source_route setting in kernel is 0" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23053801" comment="net.ipv6.conf.all.accept_source_route setting in sysctl configuration files is set to 0, and nothing else" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230539" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must not forward IPv6 source-routed packets by default.</title>
-            <description />
-          </metadata>
-          <criteria operator="AND">
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23053902" comment="net.ipv6.conf.default.accept_source_route setting in kernel is 0" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23053903" comment="net.ipv6.conf.default.accept_source_route setting in sysctl configuration files is set to 0, and nothing else" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230540" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must not enable IPv6 packet forwarding unless the system is a router.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23054000" comment="net.ipv6.conf.all.forwarding setting in sysctl configuration files is set to 0" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054000" comment="net.ipv6.conf.all.forwarding setting in kernel is 0" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230542" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must not accept router advertisements on all IPv6 interfaces by default.</title>
-            <description />
-          </metadata>
-          <criteria operator="AND">
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25312000" comment="net.ipv6.conf.default.accept_ra setting in kernel is 0" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25312001" comment="net.ipv6.conf.default.accept_ra setting in sysctl configuration files is set to 0, and nothing else" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230543" version="3" class="compliance">
-          <metadata>
-            <title>The operating system must not allow interfaces to perform Internet Control Message Protocol (ICMP) redirects by default.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054300" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23054301" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230544" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must ignore IPv6 Internet Control Message Protocol (ICMP) redirect messages.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054400" comment="net.ipv6.conf.all.accept_redirects setting in kernel is 0" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23054401" comment="net.ipv6.conf.all.accept_redirects setting in sysctl configuration files is set to 0, and nothing else" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230545" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must disable access to network bpf syscall from unprivileged processes.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054500" comment="kernel.unprivileged_bpf_disabled setting in kernel is '1'." />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23054501" comment="kernel.unprivileged_bpf_disabled setting is set to '1' without conflicting settings in other files" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230546" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must restrict usage of ptrace to descendant  processes.</title>
-            <description />
-          </metadata>
-          <criteria operator="AND">
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054600" comment="kernel.yama.ptrace_scope setting in kernel is set to 1" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23054601" comment="kernel.yama.ptrace_scope in sysctl configuration files is set to 1, and nothing else, and there are no conflicting settings in other files" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230548" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must disable the use of user namespaces.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054800" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23054801" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230549" version="5" class="compliance">
-          <metadata>
-            <title>The operating system must use reverse path filtering on all IPv4 interfaces.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23054900" comment="net.ipv4.conf.all.rp_filter setting in sysctl configuration files is set to 1 or 2" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054900" comment="net.ipv4.conf.all.rp_filter setting in kernel is 1 or 2" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230550" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must be configured to prevent unrestricted mail relaying.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23055001" comment="/etc/postfix/main.cf: smtpd_client_restrictions = permit_mynetworks,reject" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:230553" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:230553" version="1" class="compliance">
           <metadata>
             <title>The graphical display manager must not be installed on the operating system unless approved.</title>
             <description />
@@ -18707,16 +18412,6 @@ Remove any configurations that conflict with the above from the following locati
             <criterion test_ref="oval:mil.disa.stig.ind:tst:23827800" comment="Audit invocations of /usr/bin/sudoedit" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:238333" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must be configured to use TCP syncookies.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23833300" comment="net.ipv4.tcp_syncookies setting in kernel to 1" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23833301" comment="net.ipv4.tcp_syncookies setting in sysctl configuration files is set to 1" />
-          </criteria>
-        </definition>
         <definition id="oval:mil.disa.stig.defs:def:244519" version="1" class="compliance">
           <metadata>
             <title>The operating system must display a banner before granting local or remote access to the system via a graphical user logon.</title>
@@ -18841,34 +18536,40 @@ Remove any configurations that conflict with the above from the following locati
             <criterion test_ref="oval:mil.disa.stig.linux:tst:24454900" comment="SSH is installed" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:244550" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:248577" version="2" class="compliance">
           <metadata>
-            <title>The operating system must prevent IPv4 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</title>
+            <title>The operating system must enable kernel parameters to enforce discretionary access control on symlinks.</title>
             <description />
           </metadata>
-          <criteria operator="AND">
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:24455000" comment="net.ipv4.conf.default.accept_redirects setting in kernel is 0" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:24455001" comment="net.ipv4.conf.default.accept_redirects setting in acceptable directory is set to 0, and nothing else, and it only appears once" />
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:24857700" comment="fs.protected_symlinks setting in kernel is 1" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:244552" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:248578" version="1" class="compliance">
           <metadata>
-            <title>The operating system must not forward IPv4 source-routed packets by default.</title>
+            <title>The operating system must enable kernel parameters to enforce discretionary access control on hardlinks.</title>
             <description />
           </metadata>
-          <criteria operator="AND">
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:24455200" comment="net.ipv4.conf.default.accept_source_route setting in kernel is 0" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:24455201" comment="net.ipv4.conf.default.accept_source_route setting in acceptable directory is set to 0, and nothing else, and there are no conflicting settings in other files" />
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:24857800" comment="fs.protected_hardlinks setting in kernel is 1" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:244554" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:248579" version="1" class="compliance">
           <metadata>
-            <title>The operating system must enable hardening for the Berkeley Packet Filter Just-in-time compiler.</title>
+            <title>The operating system must restrict access to the kernel message buffer.</title>
             <description />
           </metadata>
           <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:24455400" comment="net.core.bpf_jit_harden is set to 2 in kernel" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:24455401" comment="net.core.bpf_jit_harden is set to 2 in the sysctl configuration files." />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:24857900" comment="kernel.dmesg_restrict setting in kernel is 1" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:248580" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must prevent kernel profiling by unprivileged users.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:24858000" comment="kernel.perf_event_paranoid setting in kernel is 2" />
           </criteria>
         </definition>
         <definition id="oval:mil.disa.stig.defs:def:248774" version="1" class="compliance">
@@ -18881,6 +18582,15 @@ Remove any configurations that conflict with the above from the following locati
             <criterion test_ref="oval:mil.disa.stig.ind:tst:24877401" comment="Audit 64-bit invocations of rmdir" />
           </criteria>
         </definition>
+        <definition id="oval:mil.disa.stig.defs:def:248882" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must not forward IPv6 source-routed packets by default.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:24888202" comment="net.ipv6.conf.default.accept_source_route setting in kernel is 0" />
+          </criteria>
+        </definition>
         <definition id="oval:mil.disa.stig.defs:def:251706" version="1" class="compliance">
           <metadata>
             <title>The operating system operating system must not have accounts configured with blank or null passwords.</title>
@@ -18926,15 +18636,6 @@ Remove any configurations that conflict with the above from the following locati
             <criterion test_ref="oval:mil.disa.stig.ind:tst:25171300" comment="system-auth pam_pwquality" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:251714" version="1" class="compliance">
-          <metadata>
-            <title>Systems below version 8.4 must ensure the password complexity module in the system-auth file is configured for three retries or less.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25171400" comment="/etc/pam.d/system-auth:retry not greater than 3 and not 0" />
-          </criteria>
-        </definition>
         <definition id="oval:mil.disa.stig.defs:def:251718" version="1" class="compliance">
           <metadata>
             <title>The graphical display manager must not be the default target on the operating system unless approved.</title>
@@ -19044,6 +18745,15 @@ Remove any configurations that conflict with the above from the following locati
             <criterion test_ref="oval:mil.disa.stig.ind:tst:25303803" />
           </criteria>
         </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257258" version="1" class="compliance">
+          <metadata>
+            <title>The system must terminate idle user sessions.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25725800" comment="The system terminates idle user sessions." />
+          </criteria>
+        </definition>
         <definition id="oval:mil.disa.stig.defs:def:257777" version="1" class="compliance">
           <metadata>
             <title>The operating system must be a vendor-supported release.</title>
@@ -19109,24 +18819,13 @@ Remove any configurations that conflict with the above from the following locati
             <criterion test_ref="oval:mil.disa.stig.unix:tst:25779100" comment="/boot/grub2/grub.cfg is owned by root." />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257800" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:257800" version="2" class="compliance">
           <metadata>
             <title>The operating system must restrict exposed kernel pointer addresses access.</title>
             <description />
           </metadata>
           <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25780000" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25780001" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257802" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must enable kernel parameters to enforce discretionary access control on symlinks.</title>
-            <description />
-          </metadata>
-          <criteria operator="AND">
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:23026700" comment="fs.protected_symlinks setting in kernel is 1" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:23026701" comment="fs.protected_symlinks setting in sysctl configuration files is set to 1, and nothing else, and there are no conflicting settings in other files" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25780000" comment="kernel.kptr_restrict is set to 1" />
           </criteria>
         </definition>
         <definition id="oval:mil.disa.stig.defs:def:257804" version="1" class="compliance">
@@ -19231,6 +18930,15 @@ Remove any configurations that conflict with the above from the following locati
             <criterion test_ref="oval:mil.disa.stig.linux:tst:23055900" comment="gssproxy package is not installed" />
           </criteria>
         </definition>
+        <definition id="oval:mil.disa.stig.defs:def:257835" version="1" class="compliance">
+          <metadata>
+            <title>The TFTP daemon must be configured to operate in secure mode.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:24890200" comment="/usr/lib/systemd/system/tftp.service: ExecStart has a -s option with a subdirectory assigned" />
+          </criteria>
+        </definition>
         <definition id="oval:mil.disa.stig.defs:def:257836" version="1" class="compliance">
           <metadata>
             <title>The operating system must not have the quagga package installed.</title>
@@ -19612,76 +19320,6 @@ Remove any configurations that conflict with the above from the following locati
             <criterion test_ref="oval:mil.disa.stig.linux:tst:25795400" comment="libreswan package is installed" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257958" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must ignore IPv4 Internet Control Message Protocol (ICMP) redirect messages.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:24455300" comment="net.ipv4.conf.all.accept_redirects setting in kernel to 0" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25795800" comment="net.ipv4.conf.all.accept_redirects setting in sysctl configuration files is set to 0" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257959" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must not forward IPv4 source-routed packets.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25795900" comment="net.ipv4.conf.all.accept_source_routesetting in kernel is set to 0" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25795900" comment="net.ipv4.conf.all.accept_source_route setting in sysctl configuration files is set to 0" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257960" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must log IPv4 packets with impossible addresses.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25796000" comment="net.ipv4.conf.all.log_martians setting in kernel to 1" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25796001" comment="net.ipv4.conf.all.log_martians setting in sysctl configuration files is set to 1" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257961" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must log IPv4 packets with impossible addresses by default.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25796100" comment="net.ipv4.conf.default.log_martians setting in kernel is 1" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25796100" comment="net.ipv4.conf.default.log_martians setting in sysctl configuration files is set to 1" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257967" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must limit the number of bogus Internet Control Message Protocol (ICMP) response errors logs.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25796700" comment="net.ipv4.icmp_ignore_bogus_error_responses setting in kernel is 1" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25796700" comment="net.ipv4.icmp_ignore_bogus_error_responses setting in sysctl configuration files is set to 1" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257970" version="1" class="compliance">
-          <metadata>
-            <title>The operating system must not enable IPv4 packet forwarding unless the system is a router.</title>
-            <description />
-          </metadata>
-          <criteria operator="AND">
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25797000" comment="net.ipv4.conf.all.forwarding setting in kernel is 0" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25797001" comment="net.ipv4.conf.all.forwarding setting in acceptable directory is set to 0, and nothing else, and there are no conflicting settings in other files" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.defs:def:257971" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must not accept router advertisements on all IPv6 interfaces.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25797100" comment="net.ipv6.conf.all.accept_ra setting in sysctl configuration files is set to 0" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25797100" comment="net.ipv6.conf.all.accept_ra setting in kernel is set to 0" />
-          </criteria>
-        </definition>
         <definition id="oval:mil.disa.stig.defs:def:257979" version="2" class="compliance">
           <metadata>
             <title>All the operating system networked systems must have and implement SSH to protect the confidentiality and integrity of transmitted and received information, as well as information during preparation for transmission.</title>
@@ -19833,9 +19471,9 @@ Remove any configurations that conflict with the above from the following locati
             <criterion test_ref="oval:mil.disa.stig.ind:tst:25800500" comment="/etc/ssh/sshd_config and /etc/ssh/sshd_config.d/*:IgnoreRhosts == yes" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258006" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:258006" version="2" class="compliance">
           <metadata>
-            <title>The operating system SSH daemon must not allow authentication using known host’s authentication.</title>
+            <title>The operating system SSH daemon must not allow authentication using known host's authentication.</title>
             <description />
           </metadata>
           <criteria operator="OR">
@@ -19888,16 +19526,6 @@ Remove any configurations that conflict with the above from the following locati
             <criterion test_ref="oval:mil.disa.stig.ind:tst:25801500" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258017" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must prevent a user from overriding the disabling of the graphical user interface autorun function.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25801700" comment="check that /etc/dconf/profile/user:system-db is at minimum set to local" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25801701" comment="Check that the automount setting is locked from nonprivileged user modification" />
-          </criteria>
-        </definition>
         <definition id="oval:mil.disa.stig.defs:def:258020" version="1" class="compliance">
           <metadata>
             <title>The operating system must prevent a user from overriding the disabling of the graphical user smart card removal action.</title>
@@ -19908,16 +19536,6 @@ Remove any configurations that conflict with the above from the following locati
             <criterion test_ref="oval:mil.disa.stig.ind:tst:25802000" comment="/org/gnome/settings-daemon/peripherals/smartcard/removal-action in dconf user database locks directories exists" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258023" version="2" class="compliance">
-          <metadata>
-            <title>The operating system must automatically lock graphical user sessions after 15 minutes of inactivity.</title>
-            <description />
-          </metadata>
-          <criteria operator="OR">
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25802300" negate="true" comment="gnome session idle delay does not exist" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25802301" negate="true" comment="gnome session idle delay correct" />
-          </criteria>
-        </definition>
         <definition id="oval:mil.disa.stig.defs:def:258026" version="1" class="compliance">
           <metadata>
             <title>The operating system must prevent a user from overriding the session lock-delay setting for the graphical user interface.</title>
@@ -20074,15 +19692,6 @@ Remove any configurations that conflict with the above from the following locati
             <criterion test_ref="oval:mil.disa.stig.ind:tst:25807500" comment="/etc/profile:umask == 077" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258077" version="1" class="compliance">
-          <metadata>
-            <title>The system must terminate idle user sessions.</title>
-            <description />
-          </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25807700" comment="The system terminates idle user sessions." />
-          </criteria>
-        </definition>
         <definition id="oval:mil.disa.stig.defs:def:258082" version="1" class="compliance">
           <metadata>
             <title>The operating system policycoreutils-python-utils package must be installed.</title>
@@ -20139,6 +19748,15 @@ Remove any configurations that conflict with the above from the following locati
             <criterion test_ref="oval:mil.disa.stig.linux:tst:25808900" comment="fapolicyd package is installed" />
           </criteria>
         </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258091" version="1" class="compliance">
+          <metadata>
+            <title>Systems below version 8.4 must ensure the password complexity module in the system-auth file is configured for three retries or less.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25809100" comment="/etc/security/pwquality.conf:retry not greater than 3 and not 0" />
+          </criteria>
+        </definition>
         <definition id="oval:mil.disa.stig.defs:def:258099" version="2" class="compliance">
           <metadata>
             <title>The operating system password-auth must be configured to use a sufficient number of hashing rounds.</title>
@@ -20324,250 +19942,485 @@ Remove any configurations that conflict with the above from the following locati
             <criterion test_ref="oval:mil.disa.stig.ind:tst:25815500" comment="Audit file system total space &gt;= 10GiB" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258158" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:258158" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must take action when allocated audit record storage volume reaches 95 percent of the audit record storage capacity.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25815800" comment="/etc/audit/auditd.conf: admin_space_left = 5%" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258159" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must take action when allocated audit record storage volume reaches 95 percent of the repository maximum audit record storage capacity.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25815900" comment="/etc/audit/auditd.conf: admin_space_left_action = SINGLE" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258160" version="1" class="compliance">
+          <metadata>
+            <title>The operating system audit system must take appropriate action when the audit files have reached maximum size.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25816000" comment="/etc/audit/auditd.conf: max_log_file_action is ROTATE or SINGLE" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258168" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must periodically flush audit records to disk to prevent the loss of audit records.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25816800" comment="/etc/audit/auditd.conf: freq = 1-100" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258170" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must write audit records to disk.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25817000" comment="/etc/audit/auditd.conf: write_logs = yes" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258175" version="1" class="compliance">
+          <metadata>
+            <title>The operating system audispd-plugins package must be installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25817500" comment="audispd-plugins package is installed" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258211" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the init command in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25821100" comment="Audit invocations of /usr/sbin/init" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258212" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the poweroff command in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25821200" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258213" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the reboot command in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25821300" comment="Audit invocations of /usr/sbin/reboot" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258214" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the shutdown command in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25821400" comment="Audit invocations of /usr/sbin/shutdown" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258215" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the umount system call in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25821500" comment="Audit 32-bit invocations of umount syscall" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258216" version="1" class="compliance">
+          <metadata>
+            <title>Successful/unsuccessful uses of the umount2 system call in the operating system must generate an audit record.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25821600" comment="Audit 32-bit invocations of umount2 syscall" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25821601" comment="Audit 64-bit invocations of umount2 syscall" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258224" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /var/log/faillock.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25822400" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258227" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must take appropriate action when a critical audit processing failure occurs.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25822700" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258230" version="2" class="compliance">
+          <metadata>
+            <title>The operating system must enable FIPS mode.</title>
+            <description />
+          </metadata>
+          <criteria operator="OR">
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25823000" comment="/proc/sys/crypto/fips_enabled is set to 1" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25823001" comment="The system-wide crypto-policy is set to FIPS" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258232" version="1" class="compliance">
+          <metadata>
+            <title>The operating system IP tunnels must use FIPS 140-2/140-3 approved cryptographic algorithms.</title>
+            <description />
+          </metadata>
+          <criteria operator="OR">
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25823200" comment="ipsec.conf includes crypto-policy" />
+            <criteria>
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:25823201" comment="ipsec.conf includes /etc/ipsec.d/*.conf" />
+              <criterion test_ref="oval:mil.disa.stig.ind:tst:25823202" comment="/etc/ipsec.d/*.conf includes crypto-policy" />
+            </criteria>
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258234" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must have the crypto-policies package installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25823400" comment="crypto-policies package is installed" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258236" version="1" class="compliance">
+          <metadata>
+            <title>The operating system crypto policy must not be overridden.</title>
+            <description />
+          </metadata>
+          <criteria operator="AND">
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25823600" comment="bind" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25823601" comment="gnutls" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25823602" comment="java" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25823603" comment="javasystem" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25823604" comment="krb5" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25823605" comment="libreswan" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25823606" comment="libssh" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25823607" comment="nss" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25823608" comment="openssh" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25823609" comment="opensshserver" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25823610" comment="opensslcnf" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25823611" comment="openssl" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:258242" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must implement DOD-approved encryption in the bind package.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:25824201" comment="named.conf includes crypto-policy" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:260487" version="1" class="compliance">
+          <metadata>
+            <title>The operating system library directories must have mode 0755 or less permissive.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:26048700" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:26048701" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:26048702" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:26048703" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:26048704" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:270175" version="1" class="compliance">
+          <metadata>
+            <title>The operating system "/etc/audit/" must be owned by root.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:27017500" comment="/etc/audit directory is owned by root" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:270176" version="1" class="compliance">
+          <metadata>
+            <title>The operating system "/etc/audit/" must be group-owned by root.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:27017600" comment="/etc/audit directory is group-owned by root" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:270177" version="1" class="compliance">
+          <metadata>
+            <title>The operating system SSH client must be configured to use only DOD-approved encryption ciphers employing FIPS 140-3 validated cryptographic hash algorithms to protect the confidentiality of SSH client connections.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:27017700" comment="openssh.config ciphers correct" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:270178" version="1" class="compliance">
+          <metadata>
+            <title>The operating system SSH client must be configured to use only DOD-approved Message Authentication Codes (MACs) employing FIPS 140-3 validated cryptographic hash algorithms to protect the confidentiality of SSH client connections.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:27017800" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:270180" version="1" class="compliance">
+          <metadata>
+            <title>The operating system fapolicy module must be configured to employ a deny-all, permit-by-exception policy to allow the execution of authorized software programs.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:27018000" comment="/etc/fapolicyd/fapolicyd.conf: permissive = 0" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:27018001" comment="/etc/fapolicyd/compiled.rules: deny all" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271709" version="1" class="compliance">
+          <metadata>
+            <title>The operating system must be configured so that all network connections associated with SSH traffic are terminated at the end of the session or after 10 minutes of inactivity, except to fulfill documented and validated mission requirements.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:27170900" comment="/etc/ssh/sshd_config:ClientAliveCountMax = 1" />
+          </criteria>
+        </definition>
+        <definition id="oval:mil.disa.stig.defs:def:271720" version="1" class="compliance">
           <metadata>
-            <title>The operating system must take action when allocated audit record storage volume reaches 95 percent of the audit record storage capacity.</title>
+            <title>The operating system must not allow users to override SSH environment variables.</title>
             <description />
           </metadata>
           <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25815800" comment="/etc/audit/auditd.conf: admin_space_left = 5%" />
+            <criterion test_ref="oval:mil.disa.stig.ind:tst:27172000" comment="Check to see if PermitUserEnvironment is set to no in /etc/ssh/sshd_config and /etc/ssh/sshd_config.d/*.conf" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258159" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:271727" version="1" class="compliance">
           <metadata>
-            <title>The operating system must take action when allocated audit record storage volume reaches 95 percent of the repository maximum audit record storage capacity.</title>
+            <title>The operating system must disable the use of user namespaces.</title>
             <description />
           </metadata>
           <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25815900" comment="/etc/audit/auditd.conf: admin_space_left_action = SINGLE" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054800" comment="user.max_user_namespaces is set to 0" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258160" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:271748" version="1" class="compliance">
           <metadata>
-            <title>The operating system audit system must take appropriate action when the audit files have reached maximum size.</title>
+            <title>The operating system must disable access to network bpf system call from nonprivileged processes.</title>
             <description />
           </metadata>
           <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25816000" comment="/etc/audit/auditd.conf: max_log_file_action is ROTATE or SINGLE" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054500" comment="kernel.unprivileged_bpf_disabled setting in kernel is '1'." />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258168" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:271761" version="1" class="compliance">
           <metadata>
-            <title>The operating system must periodically flush audit records to disk to prevent the loss of audit records.</title>
+            <title>The operating system must implement address space layout randomization (ASLR) to protect its memory from unauthorized code execution.</title>
             <description />
           </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25816800" comment="/etc/audit/auditd.conf: freq = 1-100" />
+          <criteria operator="AND">
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23028000" comment="kernel.randomize_va_space setting in kernel is 2" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258170" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:271768" version="1" class="compliance">
           <metadata>
-            <title>The operating system must write audit records to disk.</title>
+            <title>The operating system must enable hardening for the Berkeley Packet Filter Just-in-time compiler.</title>
             <description />
           </metadata>
           <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25817000" comment="/etc/audit/auditd.conf: write_logs = yes" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:24455400" comment="net.core.bpf_jit_harden is set to 2" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258175" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:271864" version="1" class="compliance">
           <metadata>
-            <title>The operating system audispd-plugins package must be installed.</title>
+            <title>The operating system must ignore Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirect messages.</title>
             <description />
           </metadata>
           <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25817500" comment="audispd-plugins package is installed" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:24455300" comment="net.ipv4.conf.all.accept_redirects setting in kernel to 0" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258211" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:271865" version="1" class="compliance">
           <metadata>
-            <title>Successful/unsuccessful uses of the init command in the operating system must generate an audit record.</title>
+            <title>The operating system must not forward IPv4 source-routed packets.</title>
             <description />
           </metadata>
           <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25821100" comment="Audit invocations of /usr/sbin/init" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25795900" comment="net.ipv4.conf.all.accept_source_routesetting in kernel is set to 0" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258212" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:271866" version="1" class="compliance">
           <metadata>
-            <title>Successful/unsuccessful uses of the poweroff command in the operating system must generate an audit record.</title>
+            <title>The operating system must log IPv4 packets with impossible addresses.</title>
             <description />
           </metadata>
           <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25821200" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25796000" comment="net.ipv4.conf.all.log_martians setting in kernel set to 1" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258213" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:271867" version="1" class="compliance">
           <metadata>
-            <title>Successful/unsuccessful uses of the reboot command in the operating system must generate an audit record.</title>
+            <title>The operating system must log IPv4 packets with impossible addresses by default.</title>
             <description />
           </metadata>
           <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25821300" comment="Audit invocations of /usr/sbin/reboot" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25796100" comment="net.ipv4.conf.default.log_martians setting in kernel is 1" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258214" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:271868" version="1" class="compliance">
           <metadata>
-            <title>Successful/unsuccessful uses of the shutdown command in the operating system must generate an audit record.</title>
+            <title>The operating system must use reverse path filtering on all IPv4 interfaces.</title>
             <description />
           </metadata>
           <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25821400" comment="Audit invocations of /usr/sbin/shutdown" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:27186800" comment="net.ipv4.conf.all.rp_filter setting in kernel is 1" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258215" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:271869" version="1" class="compliance">
           <metadata>
-            <title>Successful/unsuccessful uses of the umount system call in the operating system must generate an audit record.</title>
+            <title>The operating system must prevent IPv4 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</title>
             <description />
           </metadata>
-          <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25821500" comment="Audit 32-bit invocations of umount syscall" />
+          <criteria operator="AND">
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:24455000" comment="net.ipv4.conf.default.accept_redirects setting in kernel is 0" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258216" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:271870" version="1" class="compliance">
           <metadata>
-            <title>Successful/unsuccessful uses of the umount2 system call in the operating system must generate an audit record.</title>
+            <title>The operating system must not forward IPv4 source-routed packets by default.</title>
             <description />
           </metadata>
           <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25821600" comment="Audit 32-bit invocations of umount2 syscall" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25821601" comment="Audit 64-bit invocations of umount2 syscall" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:24455200" comment="net.ipv4.conf.default.accept_source_route setting in kernel is 0" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258224" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:271871" version="1" class="compliance">
           <metadata>
-            <title>The operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /var/log/faillock.</title>
+            <title>The operating system must use a reverse-path filter for IPv4 network traffic, when possible, by default.</title>
             <description />
           </metadata>
           <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25822400" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:20461100" comment="net.ipv4.conf.default.rp_filter setting in kernel is set to 1" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258227" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:271872" version="1" class="compliance">
           <metadata>
-            <title>The operating system must take appropriate action when a critical audit processing failure occurs.</title>
+            <title>The operating system must not enable IPv4 packet forwarding unless the system is a router.</title>
             <description />
           </metadata>
           <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25822700" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25797000" comment="net.ipv4.conf.all.forwarding setting in kernel is 0" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258232" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:271873" version="1" class="compliance">
           <metadata>
-            <title>The operating system IP tunnels must use FIPS 140-2/140-3 approved cryptographic algorithms.</title>
+            <title>The operating system must not respond to Internet Control Message Protocol (ICMP) echoes sent to a broadcast address.</title>
             <description />
           </metadata>
-          <criteria operator="OR">
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25823200" comment="ipsec.conf includes crypto-policy" />
-            <criteria>
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:25823201" comment="ipsec.conf includes /etc/ipsec.d/*.conf" />
-              <criterion test_ref="oval:mil.disa.stig.ind:tst:25823202" comment="/etc/ipsec.d/*.conf includes crypto-policy" />
-            </criteria>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23053700" comment="net.ipv4.icmp_echo_ignore_broadcasts is set to 1 in kernel" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258234" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:271874" version="1" class="compliance">
           <metadata>
-            <title>The operating system must have the crypto-policies package installed.</title>
+            <title>The operating system must limit the number of bogus Internet Control Message Protocol (ICMP) response errors logs.</title>
             <description />
           </metadata>
           <criteria>
-            <criterion test_ref="oval:mil.disa.stig.linux:tst:25823400" comment="crypto-policies package is installed" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25796700" comment="net.ipv4.icmp_ignore_bogus_error_responses setting in kernel is 1" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258236" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:271875" version="1" class="compliance">
           <metadata>
-            <title>The operating system crypto policy must not be overridden.</title>
+            <title>The operating system must not send Internet Control Message Protocol (ICMP) redirects.</title>
             <description />
           </metadata>
-          <criteria operator="AND">
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25823600" comment="bind" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25823601" comment="gnutls" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25823602" comment="java" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25823603" comment="javasystem" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25823604" comment="krb5" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25823605" comment="libreswan" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25823606" comment="libssh" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25823607" comment="nss" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25823608" comment="openssh" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25823609" comment="opensshserver" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25823610" comment="opensslcnf" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:25823611" comment="openssl" />
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23053600" comment="net.ipv4.conf.all.send_redirects setting in kernel is 0" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:258242" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:271876" version="1" class="compliance">
           <metadata>
-            <title>The operating system must implement DOD-approved encryption in the bind package.</title>
+            <title>The operating system must not allow interfaces to perform Internet Control Message Protocol (ICMP) redirects by default.</title>
             <description />
           </metadata>
           <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:25824201" comment="named.conf includes crypto-policy" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054300" comment="net.ipv4.conf.default.send_redirects is set to 0 in kernel" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:260487" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:271877" version="1" class="compliance">
           <metadata>
-            <title>The operating system library directories must have mode 0755 or less permissive.</title>
+            <title>The operating system must not accept router advertisements on all IPv6 interfaces.</title>
             <description />
           </metadata>
           <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:26048700" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:26048701" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:26048702" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:26048703" />
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:26048704" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25797100" comment="net.ipv6.conf.all.accept_ra setting in kernel is set to 0" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:270175" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:271878" version="1" class="compliance">
           <metadata>
-            <title>The operating system "/etc/audit/" must be owned by root.</title>
+            <title>The operating system must ignore IPv6 Internet Control Message Protocol (ICMP) redirect messages.</title>
             <description />
           </metadata>
           <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:27017500" comment="/etc/audit directory is owned by root" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054400" comment="net.ipv6.conf.all.accept_redirects setting in kernel is 0" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:270176" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:271879" version="1" class="compliance">
           <metadata>
-            <title>The operating system "/etc/audit/" must be group-owned by root.</title>
+            <title>The operating system must not forward IPv6 source-routed packets.</title>
             <description />
           </metadata>
           <criteria>
-            <criterion test_ref="oval:mil.disa.stig.unix:tst:27017600" comment="/etc/audit directory is group-owned by root" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23053800" comment="net.ipv6.conf.all.accept_source_route setting in kernel is 0" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:270177" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:271880" version="1" class="compliance">
           <metadata>
-            <title>The operating system SSH client must be configured to use only DOD-approved encryption ciphers employing FIPS 140-3 validated cryptographic hash algorithms to protect the confidentiality of SSH client connections.</title>
+            <title>The operating system must not enable IPv6 packet forwarding unless the system is a router.</title>
             <description />
           </metadata>
           <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:27017700" comment="openssh.config ciphers correct" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23054000" comment="net.ipv6.conf.all.forwarding setting in kernel is 0" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:270178" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:271881" version="1" class="compliance">
           <metadata>
-            <title>The operating system SSH client must be configured to use only DOD-approved Message Authentication Codes (MACs) employing FIPS 140-3 validated cryptographic hash algorithms to protect the confidentiality of SSH client connections.</title>
+            <title>The operating system must not accept router advertisements on all IPv6 interfaces by default.</title>
             <description />
           </metadata>
           <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:27017800" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:25312000" comment="net.ipv6.conf.default.accept_ra setting in kernel is 0" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:270180" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:271882" version="1" class="compliance">
           <metadata>
-            <title>The operating system fapolicy module must be configured to employ a deny-all, permit-by-exception policy to allow the execution of authorized software programs.</title>
+            <title>The operating system must prevent IPv6 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</title>
             <description />
           </metadata>
           <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:27018000" comment="/etc/fapolicyd/fapolicyd.conf: permissive = 0" />
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:27018001" comment="/etc/fapolicyd/compiled.rules: deny all" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23053500" comment="net.ipv6.conf.default.accept_redirects is set to 0 in kernel" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.defs:def:271720" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.defs:def:271884" version="2" class="compliance">
           <metadata>
-            <title>The operating system must not allow users to override SSH environment variables.</title>
+            <title>The operating system must be configured to use TCP syncookies.</title>
             <description />
           </metadata>
           <criteria>
-            <criterion test_ref="oval:mil.disa.stig.ind:tst:27172000" comment="Check to see if PermitUserEnvironment is set to no in /etc/ssh/sshd_config and /etc/ssh/sshd_config.d/*.conf" />
+            <criterion test_ref="oval:mil.disa.stig.unix:tst:23833300" comment="net.ipv4.tcp_syncookies setting in kernel to 1" />
           </criteria>
         </definition>
         <definition id="oval:mil.disa.stig.defs:def:272488" version="1" class="compliance">
@@ -20615,6 +20468,15 @@ Remove any configurations that conflict with the above from the following locati
             <criterion test_ref="oval:mil.disa.stig.linux:tst:23055000" comment="The postifx package is installed." />
           </criteria>
         </definition>
+        <definition id="oval:mil.disa.stig.defs:def:25795200" version="1" class="compliance">
+          <metadata>
+            <title>The Trivial File Transfer Protocol (TFTP) server package is installed.</title>
+            <description />
+          </metadata>
+          <criteria>
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:25795201" comment="The tftp-server package is installed." />
+          </criteria>
+        </definition>
         <definition id="oval:mil.disa.stig.defs:def:25823200" version="1" class="inventory">
           <metadata>
             <title>The libreswan package is installed.</title>
@@ -20916,7 +20778,7 @@ Satisfies: SRG-OS-000037-GPOS-00015, SRG-OS-000042-GPOS-00020, SRG-OS-000062-GPO
             <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230468" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:257797" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel9os:def:257797" version="2" class="compliance">
           <metadata>
             <title>RHEL-09-213010 - RHEL 9 must restrict access to the kernel message buffer.</title>
             <affected family="unix">
@@ -20933,10 +20795,10 @@ Restricting access to the kernel message buffer limits access to only root. This
 Satisfies: SRG-OS-000132-GPOS-00067, SRG-OS-000138-GPOS-00069</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230269" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:248579" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:257798" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel9os:def:257798" version="2" class="compliance">
           <metadata>
             <title>RHEL-09-213015 - RHEL 9 must prevent kernel profiling by nonprivileged users.</title>
             <affected family="unix">
@@ -20953,7 +20815,7 @@ Setting the kernel.perf_event_paranoid kernel parameter to "2" prevents attacker
 Satisfies: SRG-OS-000132-GPOS-00067, SRG-OS-000138-GPOS-00069</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230270" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:248580" />
           </criteria>
         </definition>
         <definition id="oval:mil.disa.stig.rhel9os:def:257799" version="1" class="compliance">
@@ -20986,7 +20848,7 @@ Satisfies: SRG-OS-000132-GPOS-00067, SRG-OS-000433-GPOS-00192, SRG-OS-000480-GPO
             <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257800" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:257801" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel9os:def:257801" version="2" class="compliance">
           <metadata>
             <title>RHEL-09-213030 - RHEL 9 must enable kernel parameters to enforce discretionary access control on hardlinks.</title>
             <affected family="unix">
@@ -20997,10 +20859,10 @@ Satisfies: SRG-OS-000132-GPOS-00067, SRG-OS-000433-GPOS-00192, SRG-OS-000480-GPO
 Satisfies: SRG-OS-000312-GPOS-00123, SRG-OS-000324-GPOS-00125</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230268" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:248578" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:257802" version="2" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel9os:def:257802" version="3" class="compliance">
           <metadata>
             <title>RHEL-09-213035 - RHEL 9 must enable kernel parameters to enforce discretionary access control on symlinks.</title>
             <affected family="unix">
@@ -21011,7 +20873,7 @@ Satisfies: SRG-OS-000312-GPOS-00123, SRG-OS-000324-GPOS-00125</description>
 Satisfies: SRG-OS-000312-GPOS-00123, SRG-OS-000324-GPOS-00125</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257802" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:248577" />
           </criteria>
         </definition>
         <definition id="oval:mil.disa.stig.rhel9os:def:257803" version="1" class="compliance">
@@ -21094,7 +20956,7 @@ The Transparent Inter Process Communication (TIPC) is a protocol that is special
             <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230497" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:257809" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel9os:def:257809" version="2" class="compliance">
           <metadata>
             <title>RHEL-09-213070 - RHEL 9 must implement address space layout randomization (ASLR) to protect its memory from unauthorized code execution.</title>
             <affected family="unix">
@@ -21105,10 +20967,10 @@ The Transparent Inter Process Communication (TIPC) is a protocol that is special
 Satisfies: SRG-OS-000433-GPOS-00193, SRG-OS-000480-GPOS-00227</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230280" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271761" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:257810" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel9os:def:257810" version="2" class="compliance">
           <metadata>
             <title>RHEL-09-213075 - RHEL 9 must disable access to network bpf system call from nonprivileged processes.</title>
             <affected family="unix">
@@ -21119,7 +20981,7 @@ Satisfies: SRG-OS-000433-GPOS-00193, SRG-OS-000480-GPOS-00227</description>
 Satisfies: SRG-OS-000132-GPOS-00067, SRG-OS-000480-GPOS-00227</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230545" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271748" />
           </criteria>
         </definition>
         <definition id="oval:mil.disa.stig.rhel9os:def:257811" version="2" class="compliance">
@@ -21186,7 +21048,7 @@ Enabling core dumps on production systems is not recommended; however, there may
             <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230312" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:257816" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel9os:def:257816" version="2" class="compliance">
           <metadata>
             <title>RHEL-09-213105 - RHEL 9 must disable the use of user namespaces.</title>
             <affected family="unix">
@@ -21195,7 +21057,7 @@ Enabling core dumps on production systems is not recommended; however, there may
             <description>User namespaces are used primarily for Linux containers. The value "0" disallows the use of user namespaces.</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230548" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271727" />
           </criteria>
         </definition>
         <definition id="oval:mil.disa.stig.rhel9os:def:257818" version="1" class="compliance">
@@ -21408,18 +21270,20 @@ Satisfies: SRG-OS-000095-GPOS-00049, SRG-OS-000480-GPOS-00227</description>
             <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230561" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:257835" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel9os:def:257835" version="2" class="compliance">
           <metadata>
-            <title>RHEL-09-215060 - RHEL 9 must not have a Trivial File Transfer Protocol (TFTP) server package installed.</title>
+            <title>RHEL-09-215060 - The Trivial File Transfer Protocol (TFTP) server must not be installed unless it is required, and if required, the RHEL 9 TFTP daemon must be configured to operate in secure mode.</title>
             <affected family="unix">
               <platform>Red Hat Enterprise Linux 9</platform>
             </affected>
             <description>Removing the "tftp-server" package decreases the risk of the accidental (or intentional) activation of tftp services.
 
-If TFTP is required for operational support (such as transmission of router configurations), its use must be documented with the information systems security manager (ISSM), restricted to only authorized personnel, and have access control rules established.</description>
+If TFTP is required for operational support (such as transmission of router configurations), its use must be documented with the information systems security manager (ISSM), restricted to only authorized personnel, and have access control rules established.
+
+Restricting TFTP to a specific directory prevents remote users from copying, transferring, or overwriting system files.</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230533" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257835" />
           </criteria>
         </definition>
         <definition id="oval:mil.disa.stig.rhel9os:def:257836" version="1" class="compliance">
@@ -22618,7 +22482,7 @@ If the system is being used to perform a network troubleshooting function, the u
             <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230554" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:257942" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel9os:def:257942" version="2" class="compliance">
           <metadata>
             <title>RHEL-09-251045 - RHEL 9 must enable hardening for the Berkeley Packet Filter just-in-time compiler.</title>
             <affected family="unix">
@@ -22627,7 +22491,7 @@ If the system is being used to perform a network troubleshooting function, the u
             <description>When hardened, the extended Berkeley Packet Filter (BPF) just-in-time (JIT) compiler will randomize any kernel addresses in the BPF programs and maps, and will not expose the JIT addresses in "/proc/kallsyms".</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244554" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271768" />
           </criteria>
         </definition>
         <definition id="oval:mil.disa.stig.rhel9os:def:257943" version="1" class="compliance">
@@ -22772,7 +22636,7 @@ Satisfies: SRG-OS-000480-GPOS-00227, SRG-OS-000120-GPOS-00061</description>
             <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230284" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:257957" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel9os:def:257957" version="3" class="compliance">
           <metadata>
             <title>RHEL-09-253010 - RHEL 9 must be configured to use TCP syncookies.</title>
             <affected family="unix">
@@ -22785,10 +22649,10 @@ Managing excess capacity ensures that sufficient capacity is available to counte
 Satisfies: SRG-OS-000480-GPOS-00227, SRG-OS-000420-GPOS-00186, SRG-OS-000142-GPOS-00071</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:238333" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271884" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:257958" version="2" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel9os:def:257958" version="3" class="compliance">
           <metadata>
             <title>RHEL-09-253015 - RHEL 9 must ignore Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirect messages.</title>
             <affected family="unix">
@@ -22799,10 +22663,10 @@ Satisfies: SRG-OS-000480-GPOS-00227, SRG-OS-000420-GPOS-00186, SRG-OS-000142-GPO
 This feature of the IPv4 protocol has few legitimate uses. It should be disabled unless absolutely required.</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257958" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271864" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:257959" version="2" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel9os:def:257959" version="3" class="compliance">
           <metadata>
             <title>RHEL-09-253020 - RHEL 9 must not forward Internet Protocol version 4 (IPv4) source-routed packets.</title>
             <affected family="unix">
@@ -22813,10 +22677,10 @@ This feature of the IPv4 protocol has few legitimate uses. It should be disabled
 Accepting source-routed packets in the IPv4 protocol has few legitimate uses. It must be disabled unless it is absolutely required.</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257959" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271865" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:257960" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel9os:def:257960" version="3" class="compliance">
           <metadata>
             <title>RHEL-09-253025 - RHEL 9 must log IPv4 packets with impossible addresses.</title>
             <affected family="unix">
@@ -22825,10 +22689,10 @@ Accepting source-routed packets in the IPv4 protocol has few legitimate uses. It
             <description>The presence of "martian" packets (which have impossible addresses) as well as spoofed packets, source-routed packets, and redirects could be a sign of nefarious network activity. Logging these packets enables this activity to be detected.</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257960" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271866" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:257961" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel9os:def:257961" version="2" class="compliance">
           <metadata>
             <title>RHEL-09-253030 - RHEL 9 must log IPv4 packets with impossible addresses by default.</title>
             <affected family="unix">
@@ -22837,10 +22701,10 @@ Accepting source-routed packets in the IPv4 protocol has few legitimate uses. It
             <description>The presence of "martian" packets (which have impossible addresses) as well as spoofed packets, source-routed packets, and redirects could be a sign of nefarious network activity. Logging these packets enables this activity to be detected.</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257961" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271867" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:257962" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel9os:def:257962" version="2" class="compliance">
           <metadata>
             <title>RHEL-09-253035 - RHEL 9 must use reverse path filtering on all IPv4 interfaces.</title>
             <affected family="unix">
@@ -22849,10 +22713,10 @@ Accepting source-routed packets in the IPv4 protocol has few legitimate uses. It
             <description>Enabling reverse path filtering drops packets with source addresses that should not have been able to be received on the interface on which they were received. It must not be used on systems that are routers for complicated networks, but is helpful for end hosts and routers serving small networks.</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230549" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271868" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:257963" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel9os:def:257963" version="2" class="compliance">
           <metadata>
             <title>RHEL-09-253040 - RHEL 9 must prevent IPv4 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</title>
             <affected family="unix">
@@ -22863,10 +22727,10 @@ Accepting source-routed packets in the IPv4 protocol has few legitimate uses. It
 This feature of the IPv4 protocol has few legitimate uses. It must be disabled unless absolutely required.</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244550" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271869" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:257964" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel9os:def:257964" version="2" class="compliance">
           <metadata>
             <title>RHEL-09-253045 - RHEL 9 must not forward IPv4 source-routed packets by default.</title>
             <affected family="unix">
@@ -22877,10 +22741,10 @@ This feature of the IPv4 protocol has few legitimate uses. It must be disabled u
 Accepting source-routed packets in the IPv4 protocol has few legitimate uses. It must be disabled unless it is absolutely required, such as when IPv4 forwarding is enabled and the system is legitimately functioning as a router.</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244552" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271870" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:257965" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel9os:def:257965" version="2" class="compliance">
           <metadata>
             <title>RHEL-09-253050 - RHEL 9 must use a reverse-path filter for IPv4 network traffic when possible by default.</title>
             <affected family="unix">
@@ -22889,10 +22753,10 @@ Accepting source-routed packets in the IPv4 protocol has few legitimate uses. It
             <description>Enabling reverse path filtering drops packets with source addresses that should not have been able to be received on the interface on which they were received. It must not be used on systems that are routers for complicated networks, but is helpful for end hosts and routers serving small networks.</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:204611" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271871" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:257966" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel9os:def:257966" version="2" class="compliance">
           <metadata>
             <title>RHEL-09-253055 - RHEL 9 must not respond to Internet Control Message Protocol (ICMP) echoes sent to a broadcast address.</title>
             <affected family="unix">
@@ -22903,10 +22767,10 @@ Accepting source-routed packets in the IPv4 protocol has few legitimate uses. It
 Ignoring ICMP echo requests (pings) sent to broadcast or multicast addresses makes the system slightly more difficult to enumerate on the network.</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230537" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271873" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:257967" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel9os:def:257967" version="2" class="compliance">
           <metadata>
             <title>RHEL-09-253060 - RHEL 9 must limit the number of bogus Internet Control Message Protocol (ICMP) response errors logs.</title>
             <affected family="unix">
@@ -22915,10 +22779,10 @@ Ignoring ICMP echo requests (pings) sent to broadcast or multicast addresses mak
             <description>Some routers will send responses to broadcast frames that violate RFC-1122, which fills up a log file system with many useless error messages. An attacker may take advantage of this and attempt to flood the logs with bogus error logs. Ignoring bogus ICMP error responses reduces log size, although some activity would not be logged.</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257967" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271874" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:257968" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel9os:def:257968" version="2" class="compliance">
           <metadata>
             <title>RHEL-09-253065 - RHEL 9 must not send Internet Control Message Protocol (ICMP) redirects.</title>
             <affected family="unix">
@@ -22929,10 +22793,10 @@ Ignoring ICMP echo requests (pings) sent to broadcast or multicast addresses mak
 The ability to send ICMP redirects is only appropriate for systems acting as routers.</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230536" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271875" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:257969" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel9os:def:257969" version="2" class="compliance">
           <metadata>
             <title>RHEL-09-253070 - RHEL 9 must not allow interfaces to perform Internet Control Message Protocol (ICMP) redirects by default.</title>
             <affected family="unix">
@@ -22943,10 +22807,10 @@ The ability to send ICMP redirects is only appropriate for systems acting as rou
 The ability to send ICMP redirects is only appropriate for systems acting as routers.</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230543" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271876" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:257970" version="2" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel9os:def:257970" version="3" class="compliance">
           <metadata>
             <title>RHEL-09-253075 - RHEL 9 must not enable IPv4 packet forwarding unless the system is a router.</title>
             <affected family="unix">
@@ -22955,10 +22819,10 @@ The ability to send ICMP redirects is only appropriate for systems acting as rou
             <description>Routing protocol daemons are typically used on routers to exchange network topology information with other routers. If this capability is used when not required, system network information may be unnecessarily transmitted across the network.</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257970" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271872" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:257971" version="2" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel9os:def:257971" version="3" class="compliance">
           <metadata>
             <title>RHEL-09-254010 - RHEL 9 must not accept router advertisements on all IPv6 interfaces.</title>
             <affected family="unix">
@@ -22967,10 +22831,10 @@ The ability to send ICMP redirects is only appropriate for systems acting as rou
             <description>An illicit router advertisement message could result in a man-in-the-middle attack.</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257971" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271877" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:257972" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel9os:def:257972" version="2" class="compliance">
           <metadata>
             <title>RHEL-09-254015 - RHEL 9 must ignore IPv6 Internet Control Message Protocol (ICMP) redirect messages.</title>
             <affected family="unix">
@@ -22979,10 +22843,10 @@ The ability to send ICMP redirects is only appropriate for systems acting as rou
             <description>An illicit ICMP redirect message could result in a man-in-the-middle attack.</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230544" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271878" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:257973" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel9os:def:257973" version="2" class="compliance">
           <metadata>
             <title>RHEL-09-254020 - RHEL 9 must not forward IPv6 source-routed packets.</title>
             <affected family="unix">
@@ -22991,10 +22855,10 @@ The ability to send ICMP redirects is only appropriate for systems acting as rou
             <description>Source-routed packets allow the source of the packet to suggest that routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when forwarding is enabled and the system is functioning as a router.</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230538" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271879" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:257974" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel9os:def:257974" version="2" class="compliance">
           <metadata>
             <title>RHEL-09-254025 - RHEL 9 must not enable IPv6 packet forwarding unless the system is a router.</title>
             <affected family="unix">
@@ -23003,10 +22867,10 @@ The ability to send ICMP redirects is only appropriate for systems acting as rou
             <description>IP forwarding permits the kernel to forward packets from one network interface to another. The ability to forward packets between two networks is only appropriate for systems acting as routers.</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230540" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271880" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:257975" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel9os:def:257975" version="2" class="compliance">
           <metadata>
             <title>RHEL-09-254030 - RHEL 9 must not accept router advertisements on all IPv6 interfaces by default.</title>
             <affected family="unix">
@@ -23015,10 +22879,10 @@ The ability to send ICMP redirects is only appropriate for systems acting as rou
             <description>An illicit router advertisement message could result in a man-in-the-middle attack.</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230542" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271881" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:257976" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel9os:def:257976" version="2" class="compliance">
           <metadata>
             <title>RHEL-09-254035 - RHEL 9 must prevent IPv6 Internet Control Message Protocol (ICMP) redirect messages from being accepted.</title>
             <affected family="unix">
@@ -23027,10 +22891,10 @@ The ability to send ICMP redirects is only appropriate for systems acting as rou
             <description>ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230535" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271882" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:257977" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel9os:def:257977" version="2" class="compliance">
           <metadata>
             <title>RHEL-09-254040 - RHEL 9 must not forward IPv6 source-routed packets by default.</title>
             <affected family="unix">
@@ -23041,7 +22905,7 @@ The ability to send ICMP redirects is only appropriate for systems acting as rou
 Accepting source-routed packets in the IPv6 protocol has few legitimate uses. It must be disabled unless it is absolutely required.</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230539" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:248882" />
           </criteria>
         </definition>
         <definition id="oval:mil.disa.stig.rhel9os:def:257978" version="1" class="compliance">
@@ -23254,7 +23118,7 @@ Satisfies: SRG-OS-000423-GPOS-00187, SRG-OS-000033-GPOS-00014, SRG-OS-000424-GPO
             <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230527" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:257995" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel9os:def:257995" version="2" class="compliance">
           <metadata>
             <title>RHEL-09-255095 - RHEL 9 must be configured so that all network connections associated with SSH traffic terminate after becoming unresponsive.</title>
             <affected family="unix">
@@ -23269,7 +23133,7 @@ RHEL 9 utilizes /etc/ssh/sshd_config for configurations of OpenSSH. Within the s
 Satisfies: SRG-OS-000163-GPOS-00072, SRG-OS-000279-GPOS-00109</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230244" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:271709" />
           </criteria>
         </definition>
         <definition id="oval:mil.disa.stig.rhel9os:def:257996" version="2" class="compliance">
@@ -23510,20 +23374,6 @@ Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163, SRG-OS-000480-GPO
             <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258015" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:258017" version="1" class="compliance">
-          <metadata>
-            <title>RHEL-09-271035 - RHEL 9 must prevent a user from overriding the disabling of the graphical user interface autorun function.</title>
-            <affected family="unix">
-              <platform>Red Hat Enterprise Linux 9</platform>
-            </affected>
-            <description>Techniques used to address this include protocols using nonces (e.g., numbers generated for a specific one-time use) or challenges (e.g., TLS, WS_Security). Additional techniques include time-synchronous or challenge-response one-time authenticators.
-
-Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163, SRG-OS-000480-GPOS-00227</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258017" />
-          </criteria>
-        </definition>
         <definition id="oval:mil.disa.stig.rhel9os:def:258018" version="1" class="compliance">
           <metadata>
             <title>RHEL-09-271040 - RHEL 9 must not allow unattended or automatic logon via the graphical user interface.</title>
@@ -23586,20 +23436,6 @@ Satisfies: SRG-OS-000028-GPOS-00009, SRG-OS-000030-GPOS-00011</description>
             <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244539" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:258023" version="2" class="compliance">
-          <metadata>
-            <title>RHEL-09-271065 - RHEL 9 must automatically lock graphical user sessions after 15 minutes of inactivity.</title>
-            <affected family="unix">
-              <platform>Red Hat Enterprise Linux 9</platform>
-            </affected>
-            <description>A session time-out lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not logout because of the temporary nature of the absence. Rather than relying on the user to manually lock their operating system session prior to vacating the vicinity, the GNOME desktop can be configured to identify when a user's session has idled and take action to initiate a session lock.
-
-Satisfies: SRG-OS-000029-GPOS-00010, SRG-OS-000031-GPOS-00012</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258023" />
-          </criteria>
-        </definition>
         <definition id="oval:mil.disa.stig.rhel9os:def:258024" version="1" class="compliance">
           <metadata>
             <title>RHEL-09-271070 - RHEL 9 must prevent a user from overriding the session idle-delay setting for the graphical user interface.</title>
@@ -24060,19 +23896,7 @@ Satisfies: SRG-OS-000480-GPOS-00228, SRG-OS-000480-GPOS-00227</description>
             <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258075" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:258076" version="1" class="compliance">
-          <metadata>
-            <title>RHEL-09-412075 - RHEL 9 must display the date and time of the last successful account logon upon logon.</title>
-            <affected family="unix">
-              <platform>Red Hat Enterprise Linux 9</platform>
-            </affected>
-            <description>Users need to be aware of activity that occurs regarding their account. Providing users with information regarding the number of unsuccessful attempts that were made to login to their account allows the user to determine if any unauthorized activity has occurred and gives them an opportunity to notify administrators.</description>
-          </metadata>
-          <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230381" />
-          </criteria>
-        </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:258077" version="2" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel9os:def:258077" version="3" class="compliance">
           <metadata>
             <title>RHEL-09-412080 - RHEL 9 must terminate idle user sessions.</title>
             <affected family="unix">
@@ -24081,7 +23905,7 @@ Satisfies: SRG-OS-000480-GPOS-00228, SRG-OS-000480-GPOS-00227</description>
             <description>Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a management session enabled on the console or console port that has been left unattended.</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258077" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:257258" />
           </criteria>
         </definition>
         <definition id="oval:mil.disa.stig.rhel9os:def:258078" version="1" class="compliance">
@@ -24268,7 +24092,7 @@ Satisfies: SRG-OS-000370-GPOS-00155, SRG-OS-000368-GPOS-00154</description>
             <extend_definition definition_ref="oval:mil.disa.stig.defs:def:244545" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:258091" version="1" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel9os:def:258091" version="2" class="compliance">
           <metadata>
             <title>RHEL-09-611010 - RHEL 9 must ensure the password complexity module in the system-auth file is configured for three retries or less.</title>
             <affected family="unix">
@@ -24278,12 +24102,12 @@ Satisfies: SRG-OS-000370-GPOS-00155, SRG-OS-000368-GPOS-00154</description>
 
 RHEL 9 uses "pwquality" as a mechanism to enforce password complexity. This is set in both:
 /etc/pam.d/password-auth
-/etc/pam.d/system-auth
+/etc/security/pwquality.conf
 
 By limiting the number of attempts to meet the pwquality module complexity requirements before returning with an error, the system will audit abnormal attempts at password changes.</description>
           </metadata>
           <criteria>
-            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:251714" />
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258091" />
           </criteria>
         </definition>
         <definition id="oval:mil.disa.stig.rhel9os:def:258094" version="1" class="compliance">
@@ -24499,13 +24323,13 @@ The DOD minimum password requirement is 15 characters.</description>
             <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230357" />
           </criteria>
         </definition>
-        <definition id="oval:mil.disa.stig.rhel9os:def:258112" version="3" class="compliance">
+        <definition id="oval:mil.disa.stig.rhel9os:def:258112" version="4" class="compliance">
           <metadata>
             <title>RHEL-09-611115 - RHEL 9 must require the change of at least eight characters when passwords are changed.</title>
             <affected family="unix">
               <platform>Red Hat Enterprise Linux 9</platform>
             </affected>
-            <description>Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute–force attacks. 
+            <description>Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute force attacks. 
 
 Password complexity is one factor of several that determines how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised. Requiring a minimum number of different characters during password changes ensures that newly changed passwords will not resemble previously compromised ones. Note that passwords changed on compromised systems will still be compromised.</description>
           </metadata>
@@ -26189,6 +26013,20 @@ Satisfies: SRG-OS-000057-GPOS-00027, SRG-OS-000058-GPOS-00028, SRG-OS-000059-GPO
             <extend_definition definition_ref="oval:mil.disa.stig.defs:def:230402" />
           </criteria>
         </definition>
+        <definition id="oval:mil.disa.stig.rhel9os:def:258230" version="2" class="compliance">
+          <metadata>
+            <title>RHEL-09-672582300 - RHEL 9 must enable FIPS mode.</title>
+            <affected family="unix">
+              <platform>Red Hat Enterprise Linux 9</platform>
+            </affected>
+            <description>Use of weak or untested encryption algorithms undermines the purposes of utilizing encryption to protect data. The operating system must implement cryptographic modules adhering to the higher standards approved by the federal government since this provides assurance they have been tested and validated. This includes NIST FIPS-validated cryptography for the following: Provisioning digital signatures, generating cryptographic hashes, and to protect data requiring data-at-rest protections in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, and standards.
+
+Satisfies: SRG-OS-000033-GPOS-00014, SRG-OS-000125-GPOS-00065, SRG-OS-000396-GPOS-00176, SRG-OS-000423-GPOS-00187, SRG-OS-000478-GPOS-00223</description>
+          </metadata>
+          <criteria>
+            <extend_definition definition_ref="oval:mil.disa.stig.defs:def:258230" />
+          </criteria>
+        </definition>
         <definition id="oval:mil.disa.stig.rhel9os:def:258231" version="1" class="compliance">
           <metadata>
             <title>RHEL-09-671015 - RHEL 9 must employ FIPS 140-3 approved cryptographic hashing algorithms for all stored passwords.</title>
@@ -26417,10 +26255,6 @@ Privileged functions include, for example, establishing accounts, performing sys
           <object object_ref="oval:mil.disa.stig.ind:obj:20441701" />
           <state state_ref="oval:mil.disa.stig.ind:ste:20441701" />
         </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:20461100" version="2" check="all" comment="net.ipv4.conf.default.rp_filter setting in sysctl configuration files is set to 1">
-          <object object_ref="oval:mil.disa.stig.ind:obj:20461102" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
-        </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23023100" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/login.defs:ENCRYPT_METHOD &gt;= SHA512">
           <object object_ref="oval:mil.disa.stig.ind:obj:23023100" />
           <state state_ref="oval:mil.disa.stig.ind:ste:23023100" />
@@ -26439,10 +26273,6 @@ Privileged functions include, for example, establishing accounts, performing sys
           <object object_ref="oval:mil.disa.stig.ind:obj:23024001" />
           <state state_ref="oval:mil.disa.stig.ind:ste:23024001" />
         </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23024400" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/ssh/sshd_config:ClientAliveCountMax = 1">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23024400" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
-        </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23026400" version="1" check_existence="all_exist" check="all" comment="Every /etc/yum.repos.d/*.repo:[{reponame}] has a gpgcheck set to 1.">
           <object object_ref="oval:mil.disa.stig.ind:obj:23026400" />
           <state state_ref="oval:mil.disa.stig.ind:ste:23026400" />
@@ -26459,22 +26289,6 @@ Privileged functions include, for example, establishing accounts, performing sys
           <object object_ref="oval:mil.disa.stig.ind:obj:23026603" />
           <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
         </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23026701" version="1" check_existence="at_least_one_exists" check="all" comment="fs.protected_symlinks setting in sysctl configuration files is set to 1, and nothing else, and there are no conflicting settings in other files">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23026703" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23026801" version="3" check_existence="at_least_one_exists" check="all" comment="fs.protected_hardlinks setting in /etc/sysctl.d/99-sysctl.conf is set to 1, and nothing else, and there are no conflicting settings in other files">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23026803" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23026801" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23026900" version="3" check_existence="at_least_one_exists" check="all" comment="kernel.dmesg_restrict setting in system sysctl configuration files is set to 1">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23026902" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23027001" version="1" check_existence="at_least_one_exists" check="all" comment="kernel.perf_event_paranoid setting in /etc/sysctl.d/99-*.conf is set to 2, and nothing else, and there are no conflicting settings in other files">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23027003" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000004" />
-        </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23027100" version="1" check_existence="none_exist" check="all" comment="'NOPASSWD' does not exist in /etc/sudoers">
           <object object_ref="oval:mil.disa.stig.ind:obj:23027100" />
         </textfilecontent54_test>
@@ -26497,10 +26311,6 @@ Privileged functions include, for example, establishing accounts, performing sys
           <object object_ref="oval:mil.disa.stig.ind:obj:25779301" />
           <state state_ref="oval:mil.disa.stig.ind:ste:23027900" />
         </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23028000" version="2" check_existence="at_least_one_exists" check="all" comment="kernel.randomize_va_space setting in admin sysctl configuration files is set to 2">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23028002" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000004" />
-        </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23028100" version="1" check="all" comment="/etc/dnf/dnf.conf: clean_requirements_on_remove is set to True, 1 or yes">
           <object object_ref="oval:mil.disa.stig.ind:obj:23028100" />
         </textfilecontent54_test>
@@ -26529,7 +26339,7 @@ Privileged functions include, for example, establishing accounts, performing sys
           <object object_ref="oval:mil.disa.stig.ind:obj:23030001" />
           <state state_ref="oval:mil.disa.stig.ind:ste:2303001" />
         </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23030101" version="1" check_existence="any_exist" check="all" comment="Device files are configured in /etc/fstab to use the nodev option.  Mounts on '/' are ignored.">
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23030101" version="2" check_existence="any_exist" check="all" comment="Device files are configured in /etc/fstab to use the nodev option.  Mounts on '/', and vfat mounts, are ignored.">
           <object object_ref="oval:mil.disa.stig.ind:obj:23030101" />
           <state state_ref="oval:mil.disa.stig.ind:ste:23030100" />
         </textfilecontent54_test>
@@ -26545,10 +26355,6 @@ Privileged functions include, for example, establishing accounts, performing sys
           <object object_ref="oval:mil.disa.stig.ind:obj:25785400" />
           <state state_ref="oval:mil.disa.stig.ind:ste:23030800" />
         </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23031100" version="2" check_existence="at_least_one_exists" check="all" comment="kernel.core_pattern setting in sysctl configuration files is set to |/bin/false">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23031102" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23031100" />
-        </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23031300" version="2" check="all" comment="For the global domain, core is set to 0.">
           <object object_ref="oval:mil.disa.stig.ind:obj:23031300" />
           <state state_ref="oval:mil.disa.stig.ind:ste:23031300" />
@@ -26685,12 +26491,6 @@ Privileged functions include, for example, establishing accounts, performing sys
           <object object_ref="oval:mil.disa.stig.ind:obj:23037800" />
           <state state_ref="oval:mil.disa.stig.ind:ste:23037800" />
         </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23038100" version="1" check="all" comment="pam_lastlog is configured to show last successful logon">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23038100" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23038101" version="7" check_existence="none_exist" check="none satisfy" comment="pam_lastlog is not used with the silent option">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23038101" />
-        </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23038200" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/ssh/sshd_config:PrintLastLog == yes">
           <object object_ref="oval:mil.disa.stig.ind:obj:23038200" />
           <state state_ref="oval:mil.disa.stig.ind:ste:20000016" />
@@ -27210,55 +27010,6 @@ Privileged functions include, for example, establishing accounts, performing sys
           <object object_ref="oval:mil.disa.stig.ind:obj:23052701" />
           <state state_ref="oval:mil.disa.stig.ind:ste:23052700" />
         </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23053500" version="1" check="all" comment="net.ipv6.conf.default.accept_redirects is set to 0 in the sysctl configuration files.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23053502" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23053600" version="2" check_existence="at_least_one_exists" check="all" comment="net.ipv4.conf.all.send_redirects setting in sysctl configuration files is set to 0">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23053602" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23053700" version="1" check="all" comment="net.ipv4.icmp_echo_ignore_broadcasts is set to 1 in the sysctl configuration files.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23053702" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23053801" version="1" check_existence="at_least_one_exists" check="all" comment="net.ipv6.conf.all.accept_source_route setting in /etc/sysctl.d/99-sysctl.conf is set to 0, and nothing else">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23053801" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23053903" version="3" check_existence="at_least_one_exists" check="all" comment="net.ipv6.conf.default.accept_source_route setting in /etc/sysctl.d/99-sysctl.conf is set to 0, and nothing else">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23053903" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23054000" version="4" check_existence="at_least_one_exists" check="all" comment="net.ipv6.conf.all.forwarding setting in sysctl configuration files is set to 0">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23054002" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23054301" version="2" check="all" comment="net.ipv4.conf.default.send_redirects is set to 0 in the sysctl configuration files.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23054303" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23054401" version="1" check_existence="at_least_one_exists" check="all" comment="net.ipv6.conf.all.accept_redirects setting in sysctl configuration files is set to 0, and nothing else">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23054403" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23054501" version="1" check="all" comment="kernel.unprivileged_bpf_disabled is set to 1, and nothing else, and there are no conflicting settings in other files">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23054501" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23054601" version="1" check="all" comment="kernel.yama.ptrace_scope in sysctl configuration files is set to 1, and nothing else, and there are no conflicting settings in other files">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23054603" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23054801" version="1" check="all" comment="user.max_user_namespaces is set to 0 in the sysctl configuration files.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23054803" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23054900" version="3" check_existence="at_least_one_exists" check="all" state_operator="OR" comment="net.ipv4.conf.all.rp_filter setting in sysctl configuration files is set to 1 or 2">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23054900" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000004" />
-        </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23055001" version="1" check="all" comment="/etc/postfix/main.cf: smtpd_client_restrictions = permit_mynetworks,reject">
           <object object_ref="oval:mil.disa.stig.ind:obj:23055001" />
         </textfilecontent54_test>
@@ -27307,10 +27058,6 @@ Privileged functions include, for example, establishing accounts, performing sys
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23827800" version="1" check_existence="all_exist" check="all" comment="Audit invocations of /usr/bin/sudoedit">
           <object object_ref="oval:mil.disa.stig.ind:obj:23827800" />
         </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:23833301" version="1" check_existence="at_least_one_exists" check="all" comment="net.ipv4.tcp_syncookies setting in sysctl configuration files is set to 1">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23833301" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
-        </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24451900" version="1" check_existence="all_exist" check="all" comment="/etc/dconf/db/local.d/*/banner-message-enable is set to true">
           <object object_ref="oval:mil.disa.stig.ind:obj:24451900" />
           <state state_ref="oval:mil.disa.stig.ind:ste:20000001" />
@@ -27347,24 +27094,15 @@ Privileged functions include, for example, establishing accounts, performing sys
           <object object_ref="oval:mil.disa.stig.ind:obj:24454300" />
           <state state_ref="oval:mil.disa.stig.ind:ste:24454300" />
         </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24455001" version="1" check_existence="at_least_one_exists" check="all" comment="net.ipv4.conf.default.accept_redirects setting in a configuration file in an acceptable directory is set to 0, and nothing else, and no conflicting configurations are in the files">
-          <object object_ref="oval:mil.disa.stig.ind:obj:24455003" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24455201" version="1" check_existence="at_least_one_exists" check="all" comment="net.ipv4.conf.default.accept_source_route setting in acceptable directory is set to 0, and nothing else, and there are no conflicting settings in other files">
-          <object object_ref="oval:mil.disa.stig.ind:obj:24455203" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24455401" version="1" check="all" comment="net.core.bpf_jit_harden is set to 2 in the sysctl configuration files.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:24455401" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000004" />
-        </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24877400" version="1" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of the rmdir">
           <object object_ref="oval:mil.disa.stig.ind:obj:24877400" />
         </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24877401" version="1" check_existence="all_exist" check="all" comment="Audit 64-bit invocations of the rmdir">
           <object object_ref="oval:mil.disa.stig.ind:obj:24877401" />
         </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:24890200" version="1" check="all" comment="/usr/lib/systemd/system/tftp.service: ExecStart has a -s option with a subdirectory assigned">
+          <object object_ref="oval:mil.disa.stig.ind:obj:24890200" />
+        </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25170600" version="1" check_existence="none_exist" check="all" comment="There are no accounts in /etc/shadow that have blank password fields.">
           <object object_ref="oval:mil.disa.stig.ind:obj:25170600" />
         </textfilecontent54_test>
@@ -27372,10 +27110,6 @@ Privileged functions include, for example, establishing accounts, performing sys
           <object object_ref="oval:mil.disa.stig.ind:obj:25171300" />
           <state state_ref="oval:mil.disa.stig.ind:ste:25171300" />
         </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25171400" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/pam.d/system-auth:retry not greater than 3 and not 0">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25171400" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000018" />
-        </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25299700" version="4" check_existence="all_exist" check="all" comment="Audit 32-bit invocations of rename">
           <object object_ref="oval:mil.disa.stig.ind:obj:25299700" />
         </textfilecontent54_test>
@@ -27460,16 +27194,12 @@ Privileged functions include, for example, establishing accounts, performing sys
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25303803" version="1" check="all" comment="Audit 64-bit invocations of the removexattr system call by root user.">
           <object object_ref="oval:mil.disa.stig.ind:obj:25303803" />
         </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25312001" version="1" check_existence="at_least_one_exists" check="all" comment="net.ipv6.conf.default.accept_ra setting in the sysctl configuration files is set to 0, and nothing else">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25312003" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25725800" version="1" check="all" comment="The system terminates idle user sessions.">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25725800" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25725800" />
         </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25777700" version="2" check_existence="at_least_one_exists" check="all" state_operator="OR" comment="The RHEL 9 minor version is supported.">
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25777700" version="3" check_existence="at_least_one_exists" check="all" state_operator="OR" comment="The RHEL 9 minor version is supported.">
           <object object_ref="oval:mil.disa.stig.ind:obj:25777700" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000004" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000006" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000007" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000008" />
           <state state_ref="oval:mil.disa.stig.ind:ste:20000009" />
           <state state_ref="oval:mil.disa.stig.ind:ste:20000010" />
           <state state_ref="oval:mil.disa.stig.ind:ste:20000011" />
@@ -27499,10 +27229,6 @@ Privileged functions include, for example, establishing accounts, performing sys
           <object object_ref="oval:mil.disa.stig.ind:obj:25779301" />
           <state state_ref="oval:mil.disa.stig.ind:ste:25779300" />
         </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25780001" version="1" check_existence="at_least_one_exists" check="all" comment="kernel.kptr_restrict is set to 1 in the sysctl configuration files, and no conflicting configs exist.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:23054703" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:23054701" />
-        </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25780400" version="2" check="all" comment="/etc/modprobe.conf contains a file that contains 'install atm /bin/false'">
           <object object_ref="oval:mil.disa.stig.ind:obj:25780400" />
         </textfilecontent54_test>
@@ -27542,37 +27268,9 @@ Privileged functions include, for example, establishing accounts, performing sys
           <state state_ref="oval:mil.disa.stig.ind:ste:25794902" />
           <state state_ref="oval:mil.disa.stig.ind:ste:25794903" />
         </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25794901" version="1" check_existence="at_least_one_exists" check="all" comment="DNS setting exists in NetworkManager.conf main section">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25794901" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25794900" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25795800" version="1" check="all" comment="net.ipv4.conf.all.accept_redirects is set to 0 in the sysctl configuration files.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25795800" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25795900" version="3" check="all" comment="net.ipv4.conf.all.accept_source_route setting in sysctl configuration files is set to 0">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25795902" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25796001" version="1" check_existence="at_least_one_exists" check="all" comment="net.ipv4.conf.all.log_martians setting in sysctl configuration files is set to 1">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25796001" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25796100" version="2" check_existence="at_least_one_exists" check="all" comment="net.ipv4.conf.default.log_martians setting in sysctl configuration files is set to 1">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25796102" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25796700" version="2" check_existence="at_least_one_exists" check="all" comment="net.ipv4.icmp_ignore_bogus_error_responses setting in sysctl configuration files is set to 1">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25796702" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25797001" version="1" check_existence="at_least_one_exists" check="all" comment="net.ipv4.conf.all.forwarding setting in acceptable directory is set to 0, and nothing else, and there are no conflicting settings in other files">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25797003" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
-        </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25797100" version="2" check="all" comment="net.ipv6.conf.all.accept_ra setting in sysctl configuration files is set to 0">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25797102" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:20000002" />
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25794901" version="1" check_existence="at_least_one_exists" check="all" comment="DNS setting exists in NetworkManager.conf main section">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25794901" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:25794900" />
         </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25798100" version="3" check_existence="at_least_one_exists" check="all" comment="/etc/ssh/sshd_config:banner == /etc/issue">
           <object object_ref="oval:mil.disa.stig.ind:obj:25798102" />
@@ -27662,21 +27360,9 @@ Privileged functions include, for example, establishing accounts, performing sys
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25801700" version="4" check_existence="at_least_one_exists" check="all" comment="check that /etc/dconf/profile/user:system-db is at minimum set to local">
           <object object_ref="oval:mil.disa.stig.ind:obj:25801700" />
         </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25801701" version="1" check_existence="at_least_one_exists" check="all" comment="Check that the automount setting is locked from nonprivileged user modification">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25801701" />
-        </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25802000" version="1" check_existence="at_least_one_exists" check="all" comment="/org/gnome/settings-daemon/peripherals/smartcard/removal-action in dconf user database locks directories exists">
           <object object_ref="oval:mil.disa.stig.ind:obj:25802000" />
         </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25802300" version="1" check_existence="at_least_one_exists" check="at least one" comment="idle-delay exists">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25802300" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25802300" />
-        </textfilecontent54_test>
-        <variable_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25802301" version="2" check_existence="at_least_one_exists" check="at least one" state_operator="OR" comment="idle-delay incorrect">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25802301" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25802301" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25802302" />
-        </variable_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25802600" version="1" check_existence="at_least_one_exists" check="all" comment="dconf user database(s) exist">
           <object object_ref="oval:mil.disa.stig.ind:obj:25802600" />
         </textfilecontent54_test>
@@ -27722,10 +27408,6 @@ Privileged functions include, for example, establishing accounts, performing sys
           <object object_ref="oval:mil.disa.stig.ind:obj:25807500" />
           <state state_ref="oval:mil.disa.stig.ind:ste:20000025" />
         </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25807700" version="1" check="all" comment="The system terminates idle user sessions.">
-          <object object_ref="oval:mil.disa.stig.ind:obj:25807700" />
-          <state state_ref="oval:mil.disa.stig.ind:ste:25807700" />
-        </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25808600" version="1" check_existence="none_exist" check="all" comment="'!authenticate' does not exist in /etc/sudoers">
           <object object_ref="oval:mil.disa.stig.ind:obj:25808600" />
         </textfilecontent54_test>
@@ -27741,6 +27423,10 @@ Privileged functions include, for example, establishing accounts, performing sys
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25808800" version="1" check="all" comment="Users must be members of the wheel group to run the su command.">
           <object object_ref="oval:mil.disa.stig.ind:obj:25808800" />
         </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25809100" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/security/pwquality.conf:retry not greater than 3 and not 0">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25809100" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000018" />
+        </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25809900" version="2" check="all" comment="The pam_unix module is included in password-auth and configured for 100000 or more rounds.">
           <object object_ref="oval:mil.disa.stig.ind:obj:25809900" />
           <state state_ref="oval:mil.disa.stig.ind:ste:25810000" />
@@ -27873,6 +27559,13 @@ Privileged functions include, for example, establishing accounts, performing sys
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25822700" version="1" check="all" comment="/etc/audit/audit.rules: -f 2 option is present">
           <object object_ref="oval:mil.disa.stig.ind:obj:25822700" />
         </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25823000" version="1" check_existence="all_exist" check="all" comment="fips_enabled == 1">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25823000" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
+        </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25823001" version="1" check_existence="all_exist" check="all" comment="The system-wide crypto-policy is set to FIPS">
+          <object object_ref="oval:mil.disa.stig.ind:obj:25823001" />
+        </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:25823200" version="1" check_existence="at_least_one_exists" check="at least one" comment="ipsec.conf includes crypto-policy">
           <object object_ref="oval:mil.disa.stig.ind:obj:25823200" />
           <state state_ref="oval:mil.disa.stig.ind:ste:25823200" />
@@ -27907,11 +27600,15 @@ Privileged functions include, for example, establishing accounts, performing sys
           <object object_ref="oval:mil.disa.stig.ind:obj:27018001" />
           <state state_ref="oval:mil.disa.stig.ind:ste:27018000" />
         </textfilecontent54_test>
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:27170900" version="1" check_existence="at_least_one_exists" check="all" comment="/etc/ssh/sshd_config:ClientAliveCountMax = 1">
+          <object object_ref="oval:mil.disa.stig.ind:obj:27170902" />
+          <state state_ref="oval:mil.disa.stig.ind:ste:20000003" />
+        </textfilecontent54_test>
         <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:27172000" version="1" check_existence="at_least_one_exists" check="all" comment="The PermitUserEnvironment option is not set to yes in /etc/ssh/sshd_config and /etc/ssh/sshd_config.d/*.conf.">
           <object object_ref="oval:mil.disa.stig.ind:obj:27172000" />
           <state state_ref="oval:mil.disa.stig.ind:ste:20000017" />
         </textfilecontent54_test>
-        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:27249600" version="1" check_existence="only_one_exists" check="all" comment="elevate the SELinux context when an administrator calls the sudo command">
+        <textfilecontent54_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:tst:27249600" version="2" check_existence="at_least_one_exists" check="all" comment="elevate the SELinux context when an administrator calls the sudo command">
           <object object_ref="oval:mil.disa.stig.ind:obj:27249602" />
           <state state_ref="oval:mil.disa.stig.ind:ste:27249600" />
         </textfilecontent54_test>
@@ -27962,7 +27659,7 @@ Privileged functions include, for example, establishing accounts, performing sys
           <object object_ref="oval:mil.disa.stig.linux:obj:23030000" />
           <state state_ref="oval:mil.disa.stig.linux:ste:20000002" />
         </partition_test>
-        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23030100" version="1" check_existence="any_exist" check="all" comment="Device files are mounted with the nodev option.  Mounts on '/' are ignored.">
+        <partition_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23030100" version="2" check_existence="any_exist" check="all" comment="Device files are mounted with the nodev option.  Mounts on '/', and vfat mounts, are ignored.">
           <object object_ref="oval:mil.disa.stig.linux:obj:23030100" />
           <state state_ref="oval:mil.disa.stig.linux:ste:20000001" />
         </partition_test>
@@ -28071,9 +27768,6 @@ Privileged functions include, for example, establishing accounts, performing sys
           <object object_ref="oval:mil.disa.stig.linux:obj:23052200" />
           <state state_ref="oval:mil.disa.stig.linux:ste:20000000" />
         </partition_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23053300" version="1" check_existence="none_exist" check="all" comment="The tftp-server package is absent.">
-          <object object_ref="oval:mil.disa.stig.linux:obj:23053300" />
-        </rpminfo_test>
         <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:23055000" version="1" check="all" comment="The postfix package is installed">
           <object object_ref="oval:mil.disa.stig.linux:obj:23055000" />
         </rpminfo_test>
@@ -28161,6 +27855,9 @@ Privileged functions include, for example, establishing accounts, performing sys
           <object object_ref="oval:mil.disa.stig.linux:obj:25794400" />
           <state state_ref="oval:mil.disa.stig.linux:ste:20000003" />
         </systemdunitproperty_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25795201" version="1" check_existence="at_least_one_exists" check="all" comment="The tftp-server package is iinstalled.">
+          <object object_ref="oval:mil.disa.stig.linux:obj:23053300" />
+        </rpminfo_test>
         <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25795400" version="1" check_existence="at_least_one_exists" check="all" comment="libreswan package is installed">
           <object object_ref="oval:mil.disa.stig.linux:obj:25795400" />
         </rpminfo_test>
@@ -28212,7 +27909,7 @@ Privileged functions include, for example, establishing accounts, performing sys
         <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25817500" version="1" check_existence="at_least_one_exists" check="all" comment="audispd-plugins package is installed">
           <object object_ref="oval:mil.disa.stig.linux:obj:25817500" />
         </rpminfo_test>
-        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25823400" version="1" check_existence="at_least_one_exists" check="all" comment="libreswan package is installed">
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25823400" version="2" check_existence="at_least_one_exists" check="all" comment="crypto-policies package is installed">
           <object object_ref="oval:mil.disa.stig.linux:obj:25823400" />
         </rpminfo_test>
         <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:25824200" version="1" check_existence="at_least_one_exists" check="all" comment="BIND installed">
@@ -28278,22 +27975,6 @@ Privileged functions include, for example, establishing accounts, performing sys
           <object object_ref="oval:mil.disa.stig.unix:obj:23026600" />
           <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
         </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23026700" version="1" check_existence="all_exist" check="all" comment="fs.protected_symlinks setting in kernel is set to 1">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23026700" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
-        </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23026800" version="1" check_existence="all_exist" check="all" comment="fs.protected_hardlinks setting in kernel is set to 1">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23026800" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:23026800" />
-        </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23026900" version="2" check_existence="all_exist" check="all" comment="kernel.dmesg_restrict setting in kernel is set to 1">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23026900" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
-        </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23027000" version="1" check_existence="all_exist" check="all" comment="kernel.perf_event_paranoid setting in kernel is set to 2">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23027000" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000011" />
-        </sysctl_test>
         <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23028000" version="2" check_existence="all_exist" check="all" comment="kernel.randomize_va_space setting in kernel is set to 2">
           <object object_ref="oval:mil.disa.stig.unix:obj:23028000" />
           <state state_ref="oval:mil.disa.stig.unix:ste:20000011" />
@@ -28397,10 +28078,6 @@ Privileged functions include, for example, establishing accounts, performing sys
           <object object_ref="oval:mil.disa.stig.unix:obj:23053800" />
           <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
         </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23053902" version="1" check_existence="all_exist" check="all" comment="net.ipv6.conf.default.accept_source_route setting in kernel is set to 0">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23053904" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
-        </sysctl_test>
         <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23054000" version="1" check_existence="all_exist" check="all" comment="net.ipv6.conf.all.forwarding setting in kernel is set to 0">
           <object object_ref="oval:mil.disa.stig.unix:obj:23054000" />
           <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
@@ -28425,11 +28102,6 @@ Privileged functions include, for example, establishing accounts, performing sys
           <object object_ref="oval:mil.disa.stig.unix:obj:23054800" />
           <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
         </sysctl_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23054900" version="3" check_existence="all_exist" check="all" state_operator="OR" comment="net.ipv4.conf.all.rp_filter setting in kernel is set to 1 or 2">
-          <object object_ref="oval:mil.disa.stig.unix:obj:23054900" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:20000011" />
-        </sysctl_test>
         <interface_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:23055400" version="1" check_existence="any_exist" check="all" comment="no network interfaces are in promiscuous mode">
           <object object_ref="oval:mil.disa.stig.unix:obj:23055400" />
           <state state_ref="oval:mil.disa.stig.unix:ste:23055400" />
@@ -28454,6 +28126,26 @@ Privileged functions include, for example, establishing accounts, performing sys
           <object object_ref="oval:mil.disa.stig.unix:obj:24455400" />
           <state state_ref="oval:mil.disa.stig.unix:ste:20000011" />
         </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:24857700" version="1" check_existence="all_exist" check="all" comment="fs.protected_symlinks setting in kernel is set to 1">
+          <object object_ref="oval:mil.disa.stig.unix:obj:24857700" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
+        </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:24857800" version="2" check_existence="all_exist" check="all" comment="fs.protected_hardlinks setting in kernel is set to 1">
+          <object object_ref="oval:mil.disa.stig.unix:obj:24857800" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
+        </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:24857900" version="1" check_existence="all_exist" check="all" comment="kernel.dmesg_restrict setting in kernel is set to 1">
+          <object object_ref="oval:mil.disa.stig.unix:obj:24857900" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
+        </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:24858000" version="1" check_existence="all_exist" check="all" comment="kernel.perf_event_paranoid setting in kernel is set to 2">
+          <object object_ref="oval:mil.disa.stig.unix:obj:24858000" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000011" />
+        </sysctl_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:24888202" version="1" check_existence="all_exist" check="all" comment="net.ipv6.conf.default.accept_source_route setting in kernel is set to 0">
+          <object object_ref="oval:mil.disa.stig.unix:obj:24888204" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000009" />
+        </sysctl_test>
         <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25170700" version="3" check="all" comment="Library directories have mode 755 or less permissive.">
           <object object_ref="oval:mil.disa.stig.unix:obj:25170800" />
           <state state_ref="oval:mil.disa.stig.unix:ste:20000003" />
@@ -28482,9 +28174,9 @@ Privileged functions include, for example, establishing accounts, performing sys
           <object object_ref="oval:mil.disa.stig.unix:obj:25779100" />
           <state state_ref="oval:mil.disa.stig.unix:ste:20000005" />
         </file_test>
-        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25780000" version="1" check="all" comment="kernel.kptr_restrict is set to 1 in kernel">
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25780000" version="2" check="all" comment="kernel.kptr_restrict is set to 1">
           <object object_ref="oval:mil.disa.stig.unix:obj:23054700" />
-          <state state_ref="oval:mil.disa.stig.unix:ste:23054700" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
         </sysctl_test>
         <file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:25789000" version="2" check_existence="any_exist" check="all" comment="All local interactive user home directories are 0750 or less">
           <object object_ref="oval:mil.disa.stig.unix:obj:25789001" />
@@ -28733,6 +28425,10 @@ Privileged functions include, for example, establishing accounts, performing sys
           <object object_ref="oval:mil.disa.stig.unix:obj:20000022" />
           <state state_ref="oval:mil.disa.stig.unix:ste:20000006" />
         </file_test>
+        <sysctl_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:tst:27186800" version="1" check_existence="all_exist" check="all" comment="net.ipv4.conf.all.rp_filter setting in kernel is set to 1">
+          <object object_ref="oval:mil.disa.stig.unix:obj:23054900" />
+          <state state_ref="oval:mil.disa.stig.unix:ste:20000010" />
+        </sysctl_test>
       </tests>
       <objects>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:230345" version="1">
@@ -28820,23 +28516,6 @@ Privileged functions include, for example, establishing accounts, performing sys
           <pattern operation="pattern match">^\s*crypt_style\s*=\s*(\S+)\s*$</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:20461100" version="2">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*net\.ipv4\.conf\.default\.rp_filter\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:20461101" version="2">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^\s*net\.ipv4\.conf\.default\.rp_filter\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:20461102" version="1" comment="all sysctl configuration files - net.ipv4.conf.default.rp_filter">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:20461100</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:20461101</object_reference>
-          </set>
-        </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23023100" version="1" comment="/etc/login.defs:ENCRYPT_METHOD">
           <filepath>/etc/login.defs</filepath>
           <pattern operation="pattern match">^\s*ENCRYPT_METHOD\s+([^#\r\n]*)</pattern>
@@ -28870,11 +28549,6 @@ Privileged functions include, for example, establishing accounts, performing sys
           <pattern operation="pattern match">^SELINUX=(.*)\s*$</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23024400" version="1">
-          <filepath>/etc/ssh/sshd_config</filepath>
-          <pattern operation="pattern match">^\s*(?i)ClientAliveCountMax(?-i)\s+"?(\d+)"?\s*(?:|(?:#.*))?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026400" version="1">
           <path>/etc/yum.repos.d</path>
           <filename operation="pattern match">\.repo$</filename>
@@ -28904,74 +28578,6 @@ Privileged functions include, for example, establishing accounts, performing sys
             <object_reference>oval:mil.disa.stig.ind:obj:23026602</object_reference>
           </set>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026701" version="1" comment="other sysctl configuration files">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*fs\.protected_symlinks\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026702" version="1" comment="/etc/sysctl.conf">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*fs\.protected_symlinks\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026703" version="1" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23026701</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23026702</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026801" version="3" comment="/etc/sysctl.d/99-sysctl.conf">
-          <path var_ref="oval:mil.disa.stig.ind:var:23026800" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*fs\.protected_hardlinks\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026802" version="2" comment="/etc/sysctl.conf">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*fs\.protected_hardlinks\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026803" version="1" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23026801</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23026802</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026900" version="3">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*kernel\.dmesg_restrict\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026901" version="4">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^\s*kernel\.dmesg_restrict\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23026902" version="1" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23026900</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23026901</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23027001" version="1" comment="other sysctl configuration files">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*kernel\.perf_event_paranoid\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23027002" version="1" comment="/etc/sysctl.conf">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*kernel\.perf_event_paranoid\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23027003" version="1" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23027001</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23027002</object_reference>
-          </set>
-        </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23027100" version="1">
           <behaviors ignore_case="true" />
           <filepath>/etc/sudoers</filepath>
@@ -28985,23 +28591,6 @@ Privileged functions include, for example, establishing accounts, performing sys
           <pattern operation="pattern match">^(?!#).*\s+NOPASSWD.*$</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23028000" version="2">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*kernel\.randomize_va_space\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23028001" version="4" comment="system sysctl configuration files - kernel.randomize_va_space">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^\s*kernel\.randomize_va_space\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23028002" version="1" comment="all sysctl configuration files - kernel.randomize_va_space">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23028000</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23028001</object_reference>
-          </set>
-        </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23028100" version="1">
           <filepath>/etc/dnf/dnf.conf</filepath>
           <pattern operation="pattern match">^[ \t]*clean_requirements_on_remove[ \t]*=[ \t]*(?:True|1|yes)[ \t]*$</pattern>
@@ -29072,9 +28661,9 @@ Privileged functions include, for example, establishing accounts, performing sys
           <pattern operation="pattern match">^\s*[^#\s]+\s+/boot\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
           <instance datatype="int">1</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23030101" version="1">
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23030101" version="2">
           <filepath>/etc/fstab</filepath>
-          <pattern operation="pattern match">^\s*/dev\S*\s+/\S+\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
+          <pattern operation="pattern match">^\s*/dev\S*\s+/\S+\s+(?!vfat\s+)\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23030600" version="1">
@@ -29087,23 +28676,6 @@ Privileged functions include, for example, establishing accounts, performing sys
           <pattern operation="pattern match">^\s*\[?[\.\w:-]+\]?:[/\w-]+\s+[/\w-]+\s+nfs[4]?\s+(.*)$</pattern>
           <instance datatype="int" operation="not equal">0</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031100" version="2">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*kernel\.core_pattern\s*=\s*(.+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031101" version="4">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^\s*kernel\.core_pattern\s*=\s*(.+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031102" version="1" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23031100</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23031101</object_reference>
-          </set>
-        </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23031300" version="1">
           <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
             <object_reference>oval:mil.disa.stig.ind:obj:23031302</object_reference>
@@ -29487,16 +29059,6 @@ Privileged functions include, for example, establishing accounts, performing sys
           <pattern operation="pattern match">^\s*FAIL_DELAY\s+(\d+)\s*$</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23038100" version="3">
-          <filepath datatype="string">/etc/pam.d/postlogin</filepath>
-          <pattern operation="pattern match">^\s*session\s+.+\s+pam_lastlog\.so\s+(?:\w+\s+)*showfailed\b\s*(?:\w+\b\s*)*\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23038101" version="5">
-          <filepath datatype="string">/etc/pam.d/postlogin</filepath>
-          <pattern operation="pattern match">^\s*session\s+.+\s+pam_lastlog\.so\s+(?:\w+\s+)*silent\b\s*(?:\w+\b\s*)*\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23038200" version="1">
           <filepath>/etc/ssh/sshd_config</filepath>
           <pattern operation="pattern match">^\s*(?i)PrintLastLog(?-i)[ \t]+([\w\"]+)[\s]*(?:|(?:#.*))?$</pattern>
@@ -30237,255 +29799,34 @@ Privileged functions include, for example, establishing accounts, performing sys
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23051901" version="1">
           <filepath>/etc/fstab</filepath>
           <pattern operation="pattern match">^\s*[^#\s]+\s+/var/log/audit\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23052001" version="1">
-          <filepath>/etc/fstab</filepath>
-          <pattern operation="pattern match">^\s*[^#\s]+\s+/var/tmp\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23052101" version="1">
-          <filepath>/etc/fstab</filepath>
-          <pattern operation="pattern match">^\s*[^#\s]+\s+/var/tmp\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23052500" version="1">
-          <filepath>/etc/firewalld/firewalld.conf</filepath>
-          <pattern operation="pattern match">^\s*FirewallBackend\s*=\s*(\w+)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23052700" version="3">
-          <behaviors ignore_case="true" />
-          <filepath>/etc/ssh/sshd_config</filepath>
-          <pattern operation="pattern match">^\s*RekeyLimit\s+\d+[kmg]?\s+\d+[smdhw]?\s*</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23052701" version="3">
-          <behaviors ignore_case="true" />
-          <path>/etc/ssh/sshd_config.d</path>
-          <filename operation="pattern match">^.+\.conf$</filename>
-          <pattern operation="pattern match">^\s*RekeyLimit\s+\d+[kmg]?\s+\d+[smdhw]?\s*</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23053500" version="1" comment="Setting for net.ipv6.conf.default.accept_redirects in sysctl.d directories.">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">^\s*net.ipv6.conf.default.accept_redirects\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23053501" version="1" comment="Setting for net.ipv6.conf.default.accept_redirects in /etc/sysctl.conf.">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*net.ipv6.conf.default.accept_redirects\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23053502" version="1" comment="Setting for net.ipv6.conf.default.accept_redirects in all sysctl configuration files.">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <object_reference>oval:mil.disa.stig.ind:obj:23053500</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23053501</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23053600" version="2">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*net\.ipv4\.conf\.all\.send_redirects\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23053601" version="3">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^\s*net\.ipv4\.conf\.all\.send_redirects\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23053602" version="1" comment="all sysctl configuration files - net.ipv4.conf.all.send_redirects ">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23053600</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23053601</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23053700" version="1" comment="Setting for net.ipv4.icmp_echo_ignore_broadcasts in sysctl.d directories.">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">^\s*net\.ipv4\.icmp_echo_ignore_broadcasts\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23053701" version="1" comment="Setting for net.ipv4.icmp_echo_ignore_broadcasts in /etc/sysctl.conf.">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*net\.ipv4\.icmp_echo_ignore_broadcasts\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23053702" version="1" comment="Setting for net.ipv4.icmp_echo_ignore_broadcasts in all sysctl configuration files.">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <object_reference>oval:mil.disa.stig.ind:obj:23053700</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23053701</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23053801" version="2" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23053802</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23053803</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23053802" version="1" comment="other sysctl configuration files">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">(?:^|.*\n)\s*net.ipv6.conf.all.accept_source_route\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23053803" version="1" comment="/etc/sysctl.conf">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">(?:^|.*\n)\s*net.ipv6.conf.all.accept_source_route\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23053902" version="2" comment="/etc/sysctl.conf">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">(?:^|.*\n)\s*net\.ipv6\.conf\.default\.accept_source_route\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23053903" version="2" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23053902</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23053905</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23053905" version="3" comment="Check the sysctl configuration files for net.ipv6.conf.default.accept_source_route">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">(?:^|.*\n)\s*net\.ipv6\.conf\.default\.accept_source_route\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054000" version="2">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*net\.ipv6\.conf\.all\.forwarding\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054001" version="2">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^\s*net\.ipv6\.conf\.all\.forwarding\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054002" version="1" comment="all sysctl configuration files - net.ipv6.conf.all.forwarding ">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23054000</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23054001</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054301" version="3">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="only one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">^\s*net\.ipv4\.conf\.default\.send_redirects\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054302" version="2">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*net\.ipv4\.conf\.default\.send_redirects\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054303" version="2">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23054301</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23054302</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054401" version="1" comment="Search other sysctl configuration files for net.ipv6.conf.all.accept_redirects">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf</filename>
-          <pattern operation="pattern match">(?:^|.*\n)\s*net\.ipv6\.conf\.all\.accept_redirects\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054402" version="1" comment="/etc/sysctl.conf">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">(?:^|.*\n)\s*net\.ipv6\.conf\.all\.accept_redirects\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054403" version="1" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23054401</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23054402</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054501" version="1" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23054502</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23054503</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054502" version="1">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*kernel\.unprivileged_bpf_disabled\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054503" version="1">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*kernel\.unprivileged_bpf_disabled\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054601" version="11">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*kernel\.yama\.ptrace_scope\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054602" version="1" comment="other sysctl configuration files">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*kernel\.yama\.ptrace_scope\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054603" version="1" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23054601</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23054602</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054701" version="7">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="only one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">^\s*kernel\.kptr_restrict\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054702" version="2">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*kernel\.kptr_restrict\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
+          <instance datatype="int">1</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054703" version="2">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23054701</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23054702</object_reference>
-          </set>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23052001" version="1">
+          <filepath>/etc/fstab</filepath>
+          <pattern operation="pattern match">^\s*[^#\s]+\s+/var/tmp\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
+          <instance datatype="int">1</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054801" version="1">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="only one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">^\s*user\.max_user_namespaces\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23052101" version="1">
+          <filepath>/etc/fstab</filepath>
+          <pattern operation="pattern match">^\s*[^#\s]+\s+/var/tmp\s+\S+\s+(\S+)\s+\S+\s+\S+\s*$</pattern>
+          <instance datatype="int">1</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054802" version="1">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*user\.max_user_namespaces\s*=\s*(\d+)\s*$</pattern>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23052500" version="1">
+          <filepath>/etc/firewalld/firewalld.conf</filepath>
+          <pattern operation="pattern match">^\s*FirewallBackend\s*=\s*(\w+)\s*(?:#.*)?$</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054803" version="1">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23054801</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23054802</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054900" version="3" comment="system sysctl configuration files - net.ipv4.conf.all.rp_filter">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23054901</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23054902</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054901" version="4">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^\s*net\.ipv4\.conf\.all\.rp_filter\s*=\s*(\d+)\s*$</pattern>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23052700" version="3">
+          <behaviors ignore_case="true" />
+          <filepath>/etc/ssh/sshd_config</filepath>
+          <pattern operation="pattern match">^\s*RekeyLimit\s+\d+[kmg]?\s+\d+[smdhw]?\s*</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23054902" version="2">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*net\.ipv4\.conf\.all\.rp_filter\s*=\s*(\d+)\s*$</pattern>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23052701" version="3">
+          <behaviors ignore_case="true" />
+          <path>/etc/ssh/sshd_config.d</path>
+          <filename operation="pattern match">^.+\.conf$</filename>
+          <pattern operation="pattern match">^\s*RekeyLimit\s+\d+[kmg]?\s+\d+[smdhw]?\s*</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23055001" version="1">
@@ -30621,23 +29962,6 @@ Privileged functions include, for example, establishing accounts, performing sys
           <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)(?:\s+-S\s+all)?\s+-F\s+path=/usr/bin/sudoedit\s+(-F\s+perm=([rwa]*x[rwa]*)\s+)?-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)\S+)?\s*$</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23833301" version="1">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:23833302</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:23833303</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23833302" version="1">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">(?:^|.*\n)\s*net\.ipv4\.tcp_syncookies\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:23833303" version="2">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">(?:^|.*\n)\s*net\.ipv4\.tcp_syncookies\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24451900" version="1">
           <path datatype="string">/etc/dconf/db/local.d</path>
           <filename datatype="string" operation="pattern match">.*</filename>
@@ -30694,62 +30018,6 @@ Privileged functions include, for example, establishing accounts, performing sys
           <pattern operation="pattern match">(?i)^\s*space_left_action\s*=\s*(\w+)\s*(?:#.*)?$</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24455001" version="1" comment="other sysctl configuration files">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*net\.ipv4\.conf\.default\.accept_redirects\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24455002" version="1" comment="/etc/sysctl.conf">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*net\.ipv4\.conf\.default\.accept_redirects\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24455003" version="1" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:24455001</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:24455002</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24455201" version="1" comment="other sysctl configuration files">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*net\.ipv4\.conf\.default\.accept_source_route\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24455202" version="1" comment="/etc/sysctl.conf">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">(?:^|.*\n)\s*net\.ipv4\.conf\.default\.accept_source_route\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24455203" version="1" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:24455201</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:24455202</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24455301" version="1" comment="Setting for net.ipv4.conf.all.accept_redirects in /etc/sysctl.conf.">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*net\.ipv4\.conf\.all\.accept_redirects\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24455401" version="1">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:24455402</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:24455403</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24455402" version="1">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="only one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">^\s*net\.core\.bpf_jit_harden\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24455403" version="1">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*net\.core\.bpf_jit_harden\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24877400" version="1" comment="Audit 32-bit invocations of rmdir">
           <filepath>/etc/audit/audit.rules</filepath>
           <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+rmdir\s+|(\s+|,)rmdir(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
@@ -30760,6 +30028,11 @@ Privileged functions include, for example, establishing accounts, performing sys
           <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b64\s+(?:.*(-S\s+rmdir\s+|(\s+|,)rmdir(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:24890200" version="1">
+          <filepath>/usr/lib/systemd/system/tftp.service</filepath>
+          <pattern operation="pattern match">^ExecStart[ \t]*=[ \t]*\/usr\/sbin\/in\.tftpd[ \t]*-s[ \t]+/\S+[ \t]*$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25170600" version="1">
           <filepath>/etc/shadow</filepath>
           <pattern operation="pattern match">^[^:]+::[^:]*:[^:]*:</pattern>
@@ -30771,11 +30044,6 @@ Privileged functions include, for example, establishing accounts, performing sys
           <pattern operation="pattern match">^\s*password\s+(?:required|requisite)\s+(.*)$</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25171400" version="1" comment="in /etc/pam.d/system-auth check for pam_pwquality.so retry equals value">
-          <filepath>/etc/pam.d/system-auth</filepath>
-          <pattern operation="pattern match">^[ \t]*password[ \t]+(?:(?:required)|(?:requisite))[ \t]+pam_pwquality\.so(?:[ \t]+|(?:[ \t][^#\r\f\n]+[ \t]+))retry=([0-9]+)(?:\s|$)</pattern>
-          <instance datatype="int">1</instance>
-        </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25299700" version="2" comment="32-bit rename command">
           <filepath>/etc/audit/audit.rules</filepath>
           <pattern operation="pattern match">^\s*-a\s+(always,exit|exit,always)\s+-F\s+arch=b32\s+(?:.*(-S\s+rename\s+|(\s+|,)rename(\s+|,))).*-F\s+auid&gt;=1000\s+-F\s+auid!=(4294967295|-1|unset)(\s+(-k\s+|-F\s+key=)[-\w]+)*\s*$</pattern>
@@ -30916,23 +30184,11 @@ Privileged functions include, for example, establishing accounts, performing sys
           <pattern operation="pattern match" var_ref="oval:mil.disa.stig.defs:var:25303803" />
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25312001" version="1" comment="other sysctl configuration files">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*net\.ipv6\.conf\.default\.accept_ra\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25312002" version="1" comment="/etc/sysctl.conf">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*net\.ipv6\.conf\.default\.accept_ra\s*=\s*(\d+)\s*$</pattern>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25725800" version="3">
+          <filepath>/etc/systemd/logind.conf</filepath>
+          <pattern operation="pattern match">^\s*StopIdleSessionSec\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25312003" version="1" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:25312001</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:25312002</object_reference>
-          </set>
-        </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25777700" version="4">
           <path>/etc</path>
           <filename>redhat-release</filename>
@@ -31015,120 +30271,6 @@ Privileged functions include, for example, establishing accounts, performing sys
           <pattern operation="pattern match">^\[main\]((?:\r?\n(?:[^[\r\n].*)?)*)</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25795800" version="1">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
-            <object_reference>oval:mil.disa.stig.ind:obj:24455301</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:25795801</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25795801" version="2">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">^\s*net\.ipv4\.conf\.all\.accept_redirects\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25795900" version="2">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*net\.ipv4\.conf\.all\.accept_source_route\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25795901" version="2" comment="system sysctl configuration files - net.ipv4.conf.all.accept_source_route">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^\s*net\.ipv4\.conf\.all\.accept_source_route\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25795902" version="1" comment="all sysctl configuration files - net.ipv4.conf.all.accept_source_route">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:25795900</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:25795901</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25796001" version="1">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:25796002</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:25796003</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25796002" version="1">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">(?:^|.*\n)\s*net\.ipv4\.conf\.all\.log_martians\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25796003" version="2">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">(?:^|.*\n)\s*net\.ipv4\.conf\.all\.log_martians\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25796100" version="2">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*net\.ipv4\.conf\.default\.log_martians\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25796101" version="2">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^\s*net\.ipv4\.conf\.default\.log_martians\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25796102" version="1" comment="all sysctl configuration files - net.ipv4.conf.default.log_martians">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:25796100</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:25796101</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25796700" version="2">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*net\.ipv4\.icmp_ignore_bogus_error_responses\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25796701" version="2">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^\s*net\.ipv4\.icmp_ignore_bogus_error_responses\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25796702" version="1" comment="all sysctl configuration files - net.ipv4.icmp_ignore_bogus_error_responses">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:25796700</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:25796701</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25797001" version="1" comment="other sysctl configuration files">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">\.conf$</filename>
-          <pattern operation="pattern match">(?:^|\.*\n)\s*net\.ipv4\.conf\.all\.forwarding\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25797002" version="1" comment="/etc/sysctl.conf">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">(?:^|.*\n)\s*net\.ipv4\.conf\.all\.forwarding\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25797003" version="1" comment="all sysctl configuration files">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:25797001</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:25797002</object_reference>
-          </set>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25797100" version="2">
-          <filepath>/etc/sysctl.conf</filepath>
-          <pattern operation="pattern match">^\s*net\.ipv6\.conf\.all\.accept_ra\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25797101" version="2">
-          <path var_ref="oval:mil.disa.stig.defs:var:20000005" var_check="at least one" />
-          <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^\s*net\.ipv6\.conf\.all\.accept_ra\s*=\s*(\d+)\s*$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25797102" version="1" comment="all sysctl configuration files - net.ipv4.conf.all.send_redirects ">
-          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
-            <object_reference>oval:mil.disa.stig.ind:obj:25797100</object_reference>
-            <object_reference>oval:mil.disa.stig.ind:obj:25797101</object_reference>
-          </set>
-        </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25798100" version="1" comment="Pull value of /etc/ssh/sshd_config:banner">
           <filepath>/etc/ssh/sshd_config</filepath>
           <pattern operation="pattern match">^\s*(?i)banner(?-i)[ \t\"]+([\w\/]+)[\"\s]*(?:|(?:#.*))?$</pattern>
@@ -31353,27 +30495,12 @@ Privileged functions include, for example, establishing accounts, performing sys
           <pattern operation="pattern match">^\s*system-db\s*:\s*local\s*$</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25801701" version="1" comment="Check that the automount setting is locked from nonprivileged user modification">
-          <path>/etc/dconf/db/local.d/locks</path>
-          <filename operation="pattern match">^.*$</filename>
-          <pattern datatype="string" operation="pattern match">^\s*\/org\/gnome\/desktop\/media-handling\/autorun-never$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25802000" version="1" comment="/org/gnome/settings-daemon/peripherals/smartcard/removal-action in dconf user database locks directories">
           <path var_ref="oval:mil.disa.stig.defs:var:25802600" var_check="at least one" />
           <filename operation="pattern match">.*</filename>
           <pattern operation="pattern match">^/org/gnome/settings-daemon/peripherals/smartcard/removal-action$</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25802300" version="1" comment="dconf org/gnome/desktop/session sections">
-          <path datatype="string" var_ref="oval:mil.disa.stig.defs:var:25802300" var_check="at least one" />
-          <filename datatype="string" operation="pattern match">.*</filename>
-          <pattern operation="pattern match">^\[org/gnome/desktop/session](?:\r?\n(?:[^[\r\n].*)?)*</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
-        <variable_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25802301" version="1" comment="idle-delay value">
-          <var_ref>oval:mil.disa.stig.defs:var:25802301</var_ref>
-        </variable_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25802600" version="2" comment="dconf user databases">
           <filepath>/etc/dconf/profile/user</filepath>
           <pattern operation="pattern match">^system-db:(\S+)\s*$</pattern>
@@ -31458,11 +30585,6 @@ Privileged functions include, for example, establishing accounts, performing sys
           <pattern operation="pattern match">^(?i)\s*umask\s+([^#\s]+)</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
-        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25807700" version="3">
-          <filepath>/etc/systemd/logind.conf</filepath>
-          <pattern operation="pattern match">^\s*StopIdleSessionSec\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
-          <instance datatype="int" operation="greater than or equal">1</instance>
-        </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25808600" version="4">
           <behaviors ignore_case="true" />
           <filepath>/etc/sudoers</filepath>
@@ -31494,6 +30616,24 @@ Privileged functions include, for example, establishing accounts, performing sys
           <pattern operation="pattern match">^\s*auth\s+(?:required|requisite)\s+pam_wheel\.so(?:\s|$)</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25809100" version="1">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:25809101</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:25809102</object_reference>
+          </set>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25809101" version="2" comment="in /etc/security/pwquality.conf check for pam_pwquality.so retry equals value">
+          <filepath>/etc/security/pwquality.conf</filepath>
+          <pattern operation="pattern match">^\s*retry\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25809102" version="2" comment="in /etc/security/pwquality.conf check for pam_pwquality.so retry equals value">
+          <behaviors recurse_direction="down" />
+          <path>/etc/security/pwquality.conf.d</path>
+          <filename operation="pattern match">\.conf$</filename>
+          <pattern operation="pattern match">^\s*retry\s*=\s*(-?\d*)\s*(?:#.*)?$</pattern>
+          <instance datatype="int">1</instance>
+        </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25809900" version="1">
           <filepath>/etc/pam.d/password-auth</filepath>
           <pattern operation="pattern match">^\s*password\s+sufficient\s+pam_unix\.so\s+[^#\n]*\brounds=(\d+)\b</pattern>
@@ -31618,35 +30758,35 @@ Privileged functions include, for example, establishing accounts, performing sys
         </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814403" version="1">
           <filepath>/etc/rsyslog.conf</filepath>
-          <pattern operation="pattern match">^[ \t]*(?:(?:\w+,)*auth(?:,\w+)*\.\*|\S+;auth\.\*|auth\.\*;\S+|\S+;auth\.\*;\S+)[ \t]+(?:(?!action\()\S+|action\([^)]*file\s*=\s*["'][^"']+["'][^)]*\))\s*$</pattern>
+          <pattern operation="pattern match">^[ \t]*(?:\S+;auth\.\*|auth\.\*;\S+|auth\.\*|\S+;auth\.\*;\S+)[ \t]+\S+\s*$</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814404" version="1">
           <filepath>/etc/rsyslog.conf</filepath>
-          <pattern operation="pattern match">^[ \t]*(?:(?:\w+,)*authpriv(?:,\w+)*\.\*|\S+;authpriv\.\*|authpriv\.\*;\S+|\S+;authpriv\.\*;\S+)[ \t]+(?:(?!action\()\S+|action\([^)]*file\s*=\s*["'][^"']+["'][^)]*\))\s*$</pattern>
+          <pattern operation="pattern match">^[ \t]*(?:\S+;authpriv\.\*|authpriv\.\*;\S+|authpriv\.\*|\S+;authpriv\.\*;\S+)[ \t]+\S+\s*$</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814405" version="1">
           <filepath>/etc/rsyslog.conf</filepath>
-          <pattern operation="pattern match">^[ \t]*(?:(?:\w+,)*daemon(?:,\w+)*\.\*|\S+;daemon\.\*|daemon\.\*;\S+|\S+;daemon\.\*;\S+)[ \t]+(?:(?!action\()\S+|action\([^)]*file\s*=\s*["'][^"']+["'][^)]*\))\s*$</pattern>
+          <pattern operation="pattern match">^[ \t]*(?:\S+;daemon\.\*|daemon\.\*;\S+|daemon\.\*|\S+;daemon\.\*;\S+)[ \t]+\S+\s*$</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814406" version="1">
           <path>/etc/rsyslog.d</path>
           <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^[ \t]*(?:(?:\w+,)*auth(?:,\w+)*\.\*|\S+;auth\.\*|auth\.\*;\S+|\S+;auth\.\*;\S+)[ \t]+(?:(?!action\()\S+|action\([^)]*file\s*=\s*["'][^"']+["'][^)]*\))\s*$</pattern>
+          <pattern operation="pattern match">^[ \t]*(?:\S+;auth\.\*|auth\.\*;\S+|auth\.\*|\S+;auth\.\*;\S+)[ \t]+\S+\s*$</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814407" version="1">
           <path>/etc/rsyslog.d</path>
           <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^[ \t]*(?:(?:\w+,)*authpriv(?:,\w+)*\.\*|\S+;authpriv\.\*|authpriv\.\*;\S+|\S+;authpriv\.\*;\S+)[ \t]+(?:(?!action\()\S+|action\([^)]*file\s*=\s*["'][^"']+["'][^)]*\))\s*$</pattern>
+          <pattern operation="pattern match">^[ \t]*(?:\S+;authpriv\.\*|authpriv\.\*;\S+|authpriv\.\*|\S+;authpriv\.\*;\S+)[ \t]+\S+\s*$</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814408" version="1">
           <path>/etc/rsyslog.d</path>
           <filename operation="pattern match">^.*\.conf$</filename>
-          <pattern operation="pattern match">^[ \t]*(?:(?:\w+,)*daemon(?:,\w+)*\.\*|\S+;daemon\.\*|daemon\.\*;\S+|\S+;daemon\.\*;\S+)[ \t]+(?:(?!action\()\S+|action\([^)]*file\s*=\s*["'][^"']+["'][^)]*\))\s*$</pattern>
+          <pattern operation="pattern match">^[ \t]*(?:\S+;daemon\.\*|daemon\.\*;\S+|daemon\.\*|\S+;daemon\.\*;\S+)[ \t]+\S+\s*$</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25814600" version="1" comment="ActionSendStreamDriverAuthMode">
@@ -31779,6 +30919,16 @@ Privileged functions include, for example, establishing accounts, performing sys
           <pattern operation="pattern match">^[ \t]*-f[ \t]+2\s*$</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25823000" version="1" comment="/proc/sys/crypto/fips_enabled">
+          <filepath datatype="string">/proc/sys/crypto/fips_enabled</filepath>
+          <pattern operation="pattern match">^(\d+)$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25823001" version="1">
+          <filepath datatype="string">/etc/crypto-policies/config</filepath>
+          <pattern datatype="string" operation="pattern match">^FIPS$</pattern>
+          <instance datatype="int" operation="equals">1</instance>
+        </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:25823200" version="1" comment="/etc/ipsec.conf includes">
           <filepath>/etc/ipsec.conf</filepath>
           <pattern operation="pattern match">^\s*include\s+(.*)\s*$</pattern>
@@ -31816,6 +30966,23 @@ Privileged functions include, for example, establishing accounts, performing sys
           <pattern operation="pattern match">(.*\S.*)\s*$</pattern>
           <instance datatype="int" operation="greater than or equal">1</instance>
         </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27170900" version="1">
+          <filepath>/etc/ssh/sshd_config</filepath>
+          <pattern operation="pattern match">^\s*(?i)ClientAliveCountMax(?-i)\s+"?(\d+)"?\s*(?:|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27170901" version="1">
+          <path>/etc/ssh/sshd_config.d</path>
+          <filename operation="pattern match">.+</filename>
+          <pattern operation="pattern match">^\s*(?i)ClientAliveCountMax(?-i)\s+"?(\d+)"?\s*(?:|(?:#.*))?$</pattern>
+          <instance datatype="int" operation="greater than or equal">1</instance>
+        </textfilecontent54_object>
+        <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27170902" version="2" comment="all sshd_config and sshd_config.d/* files">
+          <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
+            <object_reference>oval:mil.disa.stig.ind:obj:27170900</object_reference>
+            <object_reference>oval:mil.disa.stig.ind:obj:27170901</object_reference>
+          </set>
+        </textfilecontent54_object>
         <textfilecontent54_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:obj:27172000" version="1">
           <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" set_operator="UNION">
             <object_reference>oval:mil.disa.stig.ind:obj:27172001</object_reference>
@@ -31892,8 +31059,9 @@ Privileged functions include, for example, establishing accounts, performing sys
         <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23030000" version="1">
           <mount_point>/boot</mount_point>
         </partition_object>
-        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23030100" version="1">
+        <partition_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23030100" version="2">
           <mount_point operation="pattern match">^/\S+$</mount_point>
+          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="exclude">oval:mil.disa.stig.linux:ste:23030103</filter>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.linux:ste:23030102</filter>
         </partition_object>
         <systemdunitproperty_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:23031000" version="1">
@@ -32195,35 +31363,23 @@ Privileged functions include, for example, establishing accounts, performing sys
             <filter>oval:mil.disa.stig.unix:ste:23025800</filter>
           </set>
         </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23026100" version="4">
-          <behaviors recurse="directories" recurse_direction="down" />
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23026100" version="5">
+          <behaviors recurse_direction="down" />
           <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
-          <filename operation="pattern match">\.so(\.\d+)*$</filename>
+          <filename operation="pattern match">\.so(\S+)*$</filename>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.stig.unix:ste:20000005</filter>
         </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23026200" version="2">
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23026200" version="3">
           <behaviors recurse_direction="down" />
           <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
-          <filename operation="pattern match">\.so(\.\d+)*$</filename>
+          <filename operation="pattern match">(\.so\S*)$</filename>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">oval:mil.disa.stig.unix:ste:20000006</filter>
         </file_object>
         <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23026600" version="1">
           <name>kernel.kexec_load_disabled</name>
         </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23026700" version="1">
-          <name>fs.protected_symlinks</name>
-        </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23026800" version="1">
-          <name>fs.protected_hardlinks</name>
-        </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23026900" version="1">
-          <name>kernel.dmesg_restrict</name>
-        </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23027000" version="1">
-          <name>kernel.perf_event_paranoid</name>
-        </sysctl_object>
         <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23028000" version="1">
           <name>kernel.randomize_va_space</name>
         </sysctl_object>
@@ -32334,9 +31490,6 @@ Privileged functions include, for example, establishing accounts, performing sys
         <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23053800" version="1">
           <name>net.ipv6.conf.all.accept_source_route</name>
         </sysctl_object>
-        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23053904" version="1">
-          <name>net.ipv6.conf.default.accept_source_route</name>
-        </sysctl_object>
         <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:23054000" version="1">
           <name>net.ipv6.conf.all.forwarding</name>
         </sysctl_object>
@@ -32383,6 +31536,21 @@ Privileged functions include, for example, establishing accounts, performing sys
         <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:24455400" version="1">
           <name>net.core.bpf_jit_harden</name>
         </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:24857700" version="1">
+          <name>fs.protected_symlinks</name>
+        </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:24857800" version="1">
+          <name>fs.protected_hardlinks</name>
+        </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:24857900" version="1">
+          <name>kernel.dmesg_restrict</name>
+        </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:24858000" version="1">
+          <name>kernel.perf_event_paranoid</name>
+        </sysctl_object>
+        <sysctl_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:24888204" version="1">
+          <name>net.ipv6.conf.default.accept_source_route</name>
+        </sysctl_object>
         <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25170800" version="3" comment="All system-wide library directories">
           <behaviors recurse_direction="down" />
           <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
@@ -32515,12 +31683,6 @@ Privileged functions include, for example, establishing accounts, performing sys
           <path>/etc/ssh/sshd_config.d</path>
           <filename operation="pattern match">.*</filename>
         </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25802300" version="1" comment="dconf database directories">
-          <behaviors max_depth="1" recurse_direction="down" />
-          <path>/etc/dconf/db</path>
-          <filename xsi:nil="true" />
-          <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:25802300</filter>
-        </file_object>
         <password_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25804500" version="1" comment="Interactive Users">
           <username operation="pattern match">.*</username>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:25804500</filter>
@@ -32574,38 +31736,38 @@ Privileged functions include, for example, establishing accounts, performing sys
         <symlink_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:25823611" version="1" comment="openssl">
           <filepath>/etc/crypto-policies/back-ends/openssl.config</filepath>
         </symlink_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048700" version="2">
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048700" version="3">
           <behaviors recurse_direction="down" />
           <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
-          <filename operation="pattern match">\.so</filename>
+          <filename operation="pattern match">\.so\S*$</filename>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:26048700</filter>
         </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048701" version="2">
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048701" version="3">
           <behaviors recurse_direction="down" />
           <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
-          <filename operation="pattern match">\.so</filename>
+          <filename operation="pattern match">\.so\S*$</filename>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:26048701</filter>
         </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048702" version="2">
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048702" version="3">
           <behaviors recurse_direction="down" />
           <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
-          <filename operation="pattern match">\.so</filename>
+          <filename operation="pattern match">\.so\S*$</filename>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:26048702</filter>
         </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048703" version="2">
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048703" version="3">
           <behaviors recurse_direction="down" />
           <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
-          <filename operation="pattern match">\.so</filename>
+          <filename operation="pattern match">\.so\S*$</filename>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:26048703</filter>
         </file_object>
-        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048704" version="2">
+        <file_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:obj:26048704" version="3">
           <behaviors recurse_direction="down" />
           <path var_ref="oval:mil.disa.stig.defs:var:20000018" var_check="only one" />
-          <filename operation="pattern match">\.so</filename>
+          <filename operation="pattern match">\.so\S*$</filename>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:20000015</filter>
           <filter xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" action="include">oval:mil.disa.stig.unix:ste:26048704</filter>
         </file_object>
@@ -32632,18 +31794,6 @@ Privileged functions include, for example, establishing accounts, performing sys
         <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000003" version="1">
           <subexpression datatype="int" operation="equals">1</subexpression>
         </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000004" version="1">
-          <subexpression datatype="int" operation="equals">2</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000006" version="1">
-          <subexpression datatype="int" operation="equals">4</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000007" version="1">
-          <subexpression datatype="int" operation="equals">5</subexpression>
-        </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000008" version="1">
-          <subexpression datatype="int" operation="equals">6</subexpression>
-        </textfilecontent54_state>
         <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:20000009" version="1">
           <subexpression datatype="int" operation="equals">7</subexpression>
         </textfilecontent54_state>
@@ -32725,9 +31875,6 @@ Privileged functions include, for example, establishing accounts, performing sys
         <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23026401" version="1">
           <text datatype="string" operation="pattern match">\n\s*gpgcheck\s*=\s*(False|0|no)\s*(\n|$)</text>
         </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23026801" version="1">
-          <subexpression datatype="int" operation="equals">1</subexpression>
-        </textfilecontent54_state>
         <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23027800" version="1">
           <subexpression operation="pattern match">(^|\s)vsyscall=none(\s|$)</subexpression>
         </textfilecontent54_state>
@@ -32746,9 +31893,6 @@ Privileged functions include, for example, establishing accounts, performing sys
         <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23030800" version="1">
           <subexpression operation="pattern match">(^|,)nosuid(,|$)</subexpression>
         </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23031100" version="1">
-          <subexpression datatype="string" operation="equals">|/bin/false</subexpression>
-        </textfilecontent54_state>
         <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23031300" version="1">
           <subexpression datatype="int">0</subexpression>
         </textfilecontent54_state>
@@ -32902,9 +32046,6 @@ Privileged functions include, for example, establishing accounts, performing sys
         <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23052700" version="1">
           <text datatype="string" operation="pattern match">^(?i)\s*RekeyLimit\s+[1-9][0-9]*[kmg]?\s+([1-9][0-9]*[smhdw]?)+\s*$</text>
         </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23054701" version="2">
-          <subexpression datatype="int">1</subexpression>
-        </textfilecontent54_state>
         <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:23481500" version="1" comment="LogLevel value is set to VERBOSE">
           <subexpression datatype="string" operation="pattern match">^VERBOSE$|^"VERBOSE"$</subexpression>
         </textfilecontent54_state>
@@ -32923,6 +32064,9 @@ Privileged functions include, for example, establishing accounts, performing sys
         <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25294300" version="1">
           <subexpression datatype="string" operation="pattern match">^(delayed|"delayed")$</subexpression>
         </textfilecontent54_state>
+        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25725800" version="2">
+          <subexpression datatype="int">600</subexpression>
+        </textfilecontent54_state>
         <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25778700" version="1" comment="GRUB superuser name">
           <subexpression datatype="string" operation="pattern match">^\S+$</subexpression>
         </textfilecontent54_state>
@@ -32977,15 +32121,6 @@ Privileged functions include, for example, establishing accounts, performing sys
         <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25799601" version="1">
           <subexpression datatype="int" operation="greater than">0</subexpression>
         </textfilecontent54_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25802300" version="1">
-          <text datatype="string" operation="pattern match">\nidle-delay=uint32 \d+\s*(\n|$)</text>
-        </textfilecontent54_state>
-        <variable_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25802301" version="1">
-          <value datatype="int">0</value>
-        </variable_state>
-        <variable_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25802302" version="1">
-          <value datatype="int" operation="greater than">900</value>
-        </variable_state>
         <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25802900" version="3">
           <text datatype="string" operation="pattern match">\ndisable-restart-buttons=(true|'true')\s*(\n|$)</text>
         </textfilecontent54_state>
@@ -32998,9 +32133,6 @@ Privileged functions include, for example, establishing accounts, performing sys
         <variable_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25806100" version="1" comment="count of unique GIDs">
           <value datatype="int" var_ref="oval:mil.disa.stig.defs:var:25806101" />
         </variable_state>
-        <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25807700" version="1">
-          <subexpression datatype="int">900</subexpression>
-        </textfilecontent54_state>
         <textfilecontent54_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" id="oval:mil.disa.stig.ind:ste:25810000" version="2">
           <subexpression datatype="int" operation="greater than or equal">100000</subexpression>
         </textfilecontent54_state>
@@ -33100,6 +32232,9 @@ Privileged functions include, for example, establishing accounts, performing sys
         <partition_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:23030102" version="1">
           <device operation="pattern match">^/dev\S*$</device>
         </partition_state>
+        <partition_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:23030103" version="1">
+          <fs_type>vfat</fs_type>
+        </partition_state>
         <partition_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:ste:23050900" version="1">
           <mount_options entity_check="at least one">nosuid</mount_options>
         </partition_state>
@@ -33228,9 +32363,6 @@ Privileged functions include, for example, establishing accounts, performing sys
         <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23025900" version="1">
           <group_id datatype="int" operation="less than">1000</group_id>
         </file_state>
-        <sysctl_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23026800" version="1">
-          <value datatype="int" operation="equals">1</value>
-        </sysctl_state>
         <sysctl_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23031100" version="1">
           <value datatype="string" operation="equals">|/bin/false</value>
         </sysctl_state>
@@ -33264,9 +32396,6 @@ Privileged functions include, for example, establishing accounts, performing sys
         <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23053400" version="1">
           <user_id datatype="int" operation="not equal">0</user_id>
         </password_state>
-        <sysctl_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23054700" version="2">
-          <value datatype="int">1</value>
-        </sysctl_state>
         <interface_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:23055400" version="1" comment="Interface is not in PROMISC mode">
           <flag entity_check="none satisfy" operation="pattern match">(^|\s)PROMISC(\s|$)</flag>
         </interface_state>
@@ -33285,9 +32414,6 @@ Privileged functions include, for example, establishing accounts, performing sys
         <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:25789003" version="1" comment="uid = 65534 (nobody)">
           <user_id datatype="int">65534</user_id>
         </password_state>
-        <file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:25802300" version="1" comment="dconf database directories">
-          <path operation="pattern match">^/etc/dconf/db/.*\.d$</path>
-        </file_state>
         <password_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" id="oval:mil.disa.stig.unix:ste:25804500" version="1" comment="Interactive Users">
           <user_id datatype="int" operation="greater than or equal">1000</user_id>
         </password_state>
@@ -33572,14 +32698,6 @@ Privileged functions include, for example, establishing accounts, performing sys
         <local_variable id="oval:mil.disa.stig.defs:var:25789000" version="1" datatype="string" comment="home directories of local interactive users without nologin">
           <object_component object_ref="oval:mil.disa.stig.unix:obj:25789000" item_field="home_dir" />
         </local_variable>
-        <local_variable id="oval:mil.disa.stig.defs:var:25802300" version="1" datatype="string" comment="dconf database directories">
-          <object_component object_ref="oval:mil.disa.stig.unix:obj:25802300" item_field="path" />
-        </local_variable>
-        <local_variable id="oval:mil.disa.stig.defs:var:25802301" version="1" datatype="int" comment="idle-delay value">
-          <regex_capture pattern="\nidle-delay=uint32 (\d+)\s*(?:\n|$)">
-            <object_component object_ref="oval:mil.disa.stig.ind:obj:25802300" item_field="text" />
-          </regex_capture>
-        </local_variable>
         <local_variable id="oval:mil.disa.stig.defs:var:25802600" version="2" datatype="string" comment="dconf user database locks directories">
           <concat>
             <literal_component>/etc/dconf/db/</literal_component>
@@ -33614,19 +32732,16 @@ Privileged functions include, for example, establishing accounts, performing sys
             </unique>
           </count>
         </local_variable>
-        <constant_variable id="oval:mil.disa.stig.defs:var:25814300" version="3" datatype="string" comment="Patterns for remote log acceptance config">
-          <value>^\s*\$ModLoad\s+imtcp</value>
-          <value>^\s*\$ModLoad\s+imudp</value>
-          <value>^\s*\$ModLoad\s+imrelp</value>
-          <value>^\s*\$InputTCPServerRun</value>
-          <value>^\s*\$UDPServerRun</value>
-          <value>^\s*\$InputRELPServerRun</value>
-          <value>^\s*module\s*\(.*\bload\s*=\s*"imtcp".*\)</value>
-          <value>^\s*module\s*\(.*\bload\s*=\s*"imudp".*\)</value>
-          <value>^\s*module\s*\(.*\bload\s*=\s*"imrelp".*\)</value>
-          <value>^\s*input\s*\(.*\btype\s*=\s*"imtcp".*\)</value>
-          <value>^\s*input\s*\(.*\btype\s*=\s*"imudp".*\)</value>
-          <value>^\s*input\s*\(.*\btype\s*=\s*"imrelp".*\)</value>
+        <constant_variable id="oval:mil.disa.stig.defs:var:25814300" version="4" datatype="string" comment="Patterns for remote log acceptance config">
+          <value>^[^#]*InputTCPServerRun</value>
+          <value>^[^#]*UDPServerRun</value>
+          <value>^[^#]*RELPServerRun</value>
+          <value>^[^#]*module\s*\(.*\bload\s*=\s*"imtcp".*\)</value>
+          <value>^[^#]*module\s*\(.*\bload\s*=\s*"imudp".*\)</value>
+          <value>^[^#]*module\s*\(.*\bload\s*=\s*"imrelp".*\)</value>
+          <value>^[^#]*input\s*\(.*\btype\b\s*=\s*"imtcp"\s*\bport\b\s*=\s*"514".*\)</value>
+          <value>^[^#]*input\s*\(.*\btype\b\s*=\s*"imudp"\s*\bport\b\s*=\s*"514".*\)</value>
+          <value>^[^#]*input\s*\(.*\btype\b\s*=\s*"imrelp"\s*\bport\b\s*=\s*"514".*\)</value>
         </constant_variable>
         <local_variable id="oval:mil.disa.stig.defs:var:25815500" version="1" datatype="string" comment="audit partition total size in bytes">
           <arithmetic arithmetic_operation="multiply">
@@ -33634,13 +32749,6 @@ Privileged functions include, for example, establishing accounts, performing sys
             <object_component object_ref="oval:mil.disa.stig.linux:obj:23029400" item_field="total_space" />
           </arithmetic>
         </local_variable>
-        <constant_variable id="oval:mil.disa.stig.ind:var:23026800" version="1" datatype="string" comment="other sysctl configuration file locations">
-          <value>/etc/sysctl.d</value>
-          <value>/run/sysctl.d</value>
-          <value>/lib/sysctl.d</value>
-          <value>/usr/lib/sysctl.d</value>
-          <value>/usr/local/lib/sysctl.d</value>
-        </constant_variable>
         <local_variable id="oval:mil.disa.stig.ind:var:23031600" version="1" datatype="int" comment="count of unique name servers">
           <count>
             <unique>
@@ -33671,15 +32779,15 @@ Privileged functions include, for example, establishing accounts, performing sys
       </variables>
     </oval_definitions>
   </component>
-  <component id="scap_mil.disa.stig_comp_U_RHEL_9_V2R6_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" timestamp="2025-09-27T23:04:04.250-04:00">
+  <component id="scap_mil.disa.stig_comp_U_RHEL_9_V2R7_STIG_SCAP_1-3_Benchmark-cpe-oval.xml" timestamp="2026-01-05T14:28:56.958-05:00">
     <oval_definitions xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5">
       <generator>
-        <oval:product_name>Security Content Tool 1.6.0</oval:product_name>
+        <oval:product_name>Security Content Tool 1.7.0</oval:product_name>
         <oval:schema_version>5.11</oval:schema_version>
-        <oval:timestamp>2025-09-27T11:04:04</oval:timestamp>
+        <oval:timestamp>2026-01-05T02:28:56</oval:timestamp>
       </generator>
       <definitions>
-        <definition id="oval:mil.disa.stig.rhel9os:def:1" version="1" class="inventory">
+        <definition id="oval:mil.disa.stig.rhel9os:def:1" version="2" class="inventory">
           <metadata>
             <title>RHEL 9 is installed</title>
             <affected family="unix">
@@ -33690,6 +32798,8 @@ Privileged functions include, for example, establishing accounts, performing sys
           </metadata>
           <criteria>
             <criterion test_ref="oval:mil.disa.stig.linux:tst:10000006" comment="The redhat-release package is version 9" />
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:10000009" comment="The TOSS Package is not Installed" />
+            <criterion test_ref="oval:mil.disa.stig.linux:tst:10000010" comment="The Oracle Linux Package is not Installed" />
           </criteria>
         </definition>
       </definitions>
@@ -33698,8 +32808,20 @@ Privileged functions include, for example, establishing accounts, performing sys
           <object object_ref="oval:mil.disa.stig.linux:obj:10000004" />
           <state state_ref="oval:mil.disa.stig.linux:ste:10000004" />
         </rpminfo_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:10000009" version="1" check_existence="none_exist" check="all" comment="The TOSS Package is not Installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:10000002" />
+        </rpminfo_test>
+        <rpminfo_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:tst:10000010" version="1" check_existence="none_exist" check="all" comment="The Oracle Linux Package is not Installed">
+          <object object_ref="oval:mil.disa.stig.linux:obj:10000003" />
+        </rpminfo_test>
       </tests>
       <objects>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:10000002" version="1">
+          <name>toss-release</name>
+        </rpminfo_object>
+        <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:10000003" version="1">
+          <name>oraclelinux-release</name>
+        </rpminfo_object>
         <rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:mil.disa.stig.linux:obj:10000004" version="1">
           <name>redhat-release</name>
         </rpminfo_object>
diff --git a/shared/references/disa-stig-sle12-v3r3-xccdf-manual.xml b/shared/references/disa-stig-sle12-v3r4-xccdf-manual.xml
similarity index 89%
rename from shared/references/disa-stig-sle12-v3r3-xccdf-manual.xml
rename to shared/references/disa-stig-sle12-v3r4-xccdf-manual.xml
index 545d79c1b059..32bf6eb5f24a 100644
--- a/shared/references/disa-stig-sle12-v3r3-xccdf-manual.xml
+++ b/shared/references/disa-stig-sle12-v3r4-xccdf-manual.xml
@@ -1,4 +1,11 @@
-<?xml version="1.0" encoding="utf-8"?><?xml-stylesheet type='text/xsl' href='STIG_unclass.xsl'?><Benchmark xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.1 http://nvd.nist.gov/schema/xccdf-1.1.4.xsd http://cpe.mitre.org/dictionary/2.0 http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd" id="SLES_12_STIG" xml:lang="en" xmlns="http://checklists.nist.gov/xccdf/1.1"><status date="2025-05-14">accepted</status><title>SUSE Linux Enterprise Server 12 Security Technical Implementation Guide</title><description>This Security Technical Implementation Guide is published as a tool to improve the security of Department of Defense (DOD) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.</description><notice id="terms-of-use" xml:lang="en"></notice><front-matter xml:lang="en"></front-matter><rear-matter xml:lang="en"></rear-matter><reference href="https://cyber.mil"><dc:publisher>DISA</dc:publisher><dc:source>STIG.DOD.MIL</dc:source></reference><plain-text id="release-info">Release: 3 Benchmark Date: 02 Jul 2025</plain-text><plain-text id="generator">3.5</plain-text><plain-text id="conventionsVersion">1.10.0</plain-text><version>3</version><Profile id="MAC-1_Classified"><title>I - Mission Critical Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-217101" selected="true" /><select idref="V-217102" selected="true" /><select idref="V-217103" selected="true" /><select idref="V-217104" selected="true" /><select idref="V-217105" selected="true" /><select idref="V-217106" selected="true" /><select idref="V-217107" selected="true" /><select idref="V-217108" selected="true" /><select idref="V-217109" selected="true" /><select idref="V-217110" selected="true" /><select idref="V-217111" selected="true" /><select idref="V-217112" selected="true" /><select idref="V-217113" selected="true" /><select idref="V-217114" selected="true" /><select idref="V-217116" selected="true" /><select idref="V-217117" selected="true" /><select idref="V-217118" selected="true" /><select idref="V-217119" selected="true" /><select idref="V-217120" selected="true" /><select idref="V-217121" selected="true" /><select idref="V-217122" selected="true" /><select idref="V-217123" selected="true" /><select idref="V-217124" selected="true" /><select idref="V-217125" selected="true" /><select idref="V-217126" selected="true" /><select idref="V-217127" selected="true" /><select idref="V-217128" selected="true" /><select idref="V-217129" selected="true" /><select idref="V-217130" selected="true" /><select idref="V-217131" selected="true" /><select idref="V-217134" selected="true" /><select idref="V-217135" selected="true" /><select idref="V-217136" selected="true" /><select idref="V-217138" selected="true" /><select idref="V-217139" selected="true" /><select idref="V-217140" selected="true" /><select idref="V-217141" selected="true" /><select idref="V-217142" selected="true" /><select idref="V-217143" selected="true" /><select idref="V-217144" selected="true" /><select idref="V-217145" selected="true" /><select idref="V-217146" selected="true" /><select idref="V-217147" selected="true" /><select idref="V-217148" selected="true" /><select idref="V-217149" selected="true" /><select idref="V-217150" selected="true" /><select idref="V-217151" selected="true" /><select idref="V-217152" selected="true" /><select idref="V-217153" selected="true" /><select idref="V-217154" selected="true" /><select idref="V-217155" selected="true" /><select idref="V-217156" selected="true" /><select idref="V-217158" selected="true" /><select idref="V-217159" selected="true" /><select idref="V-217160" selected="true" /><select idref="V-217161" selected="true" /><select idref="V-217162" selected="true" /><select idref="V-217163" selected="true" /><select idref="V-217164" selected="true" /><select idref="V-217166" selected="true" /><select idref="V-217167" selected="true" /><select idref="V-217168" selected="true" /><select idref="V-217169" selected="true" /><select idref="V-217170" selected="true" /><select idref="V-217171" selected="true" /><select idref="V-217172" selected="true" /><select idref="V-217173" selected="true" /><select idref="V-217174" selected="true" /><select idref="V-217175" selected="true" /><select idref="V-217176" selected="true" /><select idref="V-217177" selected="true" /><select idref="V-217178" selected="true" /><select idref="V-217179" selected="true" /><select idref="V-217180" selected="true" /><select idref="V-217181" selected="true" /><select idref="V-217182" selected="true" /><select idref="V-217183" selected="true" /><select idref="V-217184" selected="true" /><select idref="V-217185" selected="true" /><select idref="V-217186" selected="true" /><select idref="V-217188" selected="true" /><select idref="V-217189" selected="true" /><select idref="V-217190" selected="true" /><select idref="V-217191" selected="true" /><select idref="V-217192" selected="true" /><select idref="V-217193" selected="true" /><select idref="V-217194" selected="true" /><select idref="V-217195" selected="true" /><select idref="V-217196" selected="true" /><select idref="V-217197" selected="true" /><select idref="V-217198" selected="true" /><select idref="V-217199" selected="true" /><select idref="V-217200" selected="true" /><select idref="V-217201" selected="true" /><select idref="V-217202" selected="true" /><select idref="V-217203" selected="true" /><select idref="V-217204" selected="true" /><select idref="V-217205" selected="true" /><select idref="V-217206" selected="true" /><select idref="V-217207" selected="true" /><select idref="V-217208" selected="true" /><select idref="V-217209" selected="true" /><select idref="V-217210" selected="true" /><select idref="V-217211" selected="true" /><select idref="V-217212" selected="true" /><select idref="V-217213" selected="true" /><select idref="V-217214" selected="true" /><select idref="V-217215" selected="true" /><select idref="V-217216" selected="true" /><select idref="V-217217" selected="true" /><select idref="V-217218" selected="true" /><select idref="V-217223" selected="true" /><select idref="V-217227" selected="true" /><select idref="V-217230" selected="true" /><select idref="V-217236" selected="true" /><select idref="V-217237" selected="true" /><select idref="V-217238" selected="true" /><select idref="V-217239" selected="true" /><select idref="V-217240" selected="true" /><select idref="V-217241" selected="true" /><select idref="V-217242" selected="true" /><select idref="V-217243" selected="true" /><select idref="V-217244" selected="true" /><select idref="V-217245" selected="true" /><select idref="V-217246" selected="true" /><select idref="V-217247" selected="true" /><select idref="V-217248" selected="true" /><select idref="V-217249" selected="true" /><select idref="V-217250" selected="true" /><select idref="V-217251" selected="true" /><select idref="V-217252" selected="true" /><select idref="V-217253" selected="true" /><select idref="V-217254" selected="true" /><select idref="V-217255" selected="true" /><select idref="V-217257" selected="true" /><select idref="V-217258" selected="true" /><select idref="V-217260" selected="true" /><select idref="V-217261" selected="true" /><select idref="V-217262" selected="true" /><select idref="V-217263" selected="true" /><select idref="V-217264" selected="true" /><select idref="V-217265" selected="true" /><select idref="V-217266" selected="true" /><select idref="V-217267" selected="true" /><select idref="V-217268" selected="true" /><select idref="V-217269" selected="true" /><select idref="V-217270" selected="true" /><select idref="V-217271" selected="true" /><select idref="V-217272" selected="true" /><select idref="V-217273" selected="true" /><select idref="V-217274" selected="true" /><select idref="V-217275" selected="true" /><select idref="V-217276" selected="true" /><select idref="V-217277" selected="true" /><select idref="V-217278" selected="true" /><select idref="V-217279" selected="true" /><select idref="V-217280" selected="true" /><select idref="V-217281" selected="true" /><select idref="V-217282" selected="true" /><select idref="V-217283" selected="true" /><select idref="V-217284" selected="true" /><select idref="V-217285" selected="true" /><select idref="V-217286" selected="true" /><select idref="V-217287" selected="true" /><select idref="V-217288" selected="true" /><select idref="V-217289" selected="true" /><select idref="V-217290" selected="true" /><select idref="V-217291" selected="true" /><select idref="V-217292" selected="true" /><select idref="V-217293" selected="true" /><select idref="V-217294" selected="true" /><select idref="V-217295" selected="true" /><select idref="V-217296" selected="true" /><select idref="V-217297" selected="true" /><select idref="V-217298" selected="true" /><select idref="V-217299" selected="true" /><select idref="V-217300" selected="true" /><select idref="V-217301" selected="true" /><select idref="V-217302" selected="true" /><select idref="V-222386" selected="true" /><select idref="V-233308" selected="true" /><select idref="V-237603" selected="true" /><select idref="V-237604" selected="true" /><select idref="V-237605" selected="true" /><select idref="V-237606" selected="true" /><select idref="V-237607" selected="true" /><select idref="V-237608" selected="true" /><select idref="V-237609" selected="true" /><select idref="V-237610" selected="true" /><select idref="V-237611" selected="true" /><select idref="V-237612" selected="true" /><select idref="V-237613" selected="true" /><select idref="V-237614" selected="true" /><select idref="V-237615" selected="true" /><select idref="V-237616" selected="true" /><select idref="V-237617" selected="true" /><select idref="V-237618" selected="true" /><select idref="V-237619" selected="true" /><select idref="V-237620" selected="true" /><select idref="V-237621" selected="true" /><select idref="V-237622" selected="true" /><select idref="V-237623" selected="true" /><select idref="V-251719" selected="true" /><select idref="V-251720" selected="true" /><select idref="V-251721" selected="true" /><select idref="V-251722" selected="true" /><select idref="V-255914" selected="true" /><select idref="V-255915" selected="true" /><select idref="V-255916" selected="true" /><select idref="V-256980" selected="true" /><select idref="V-256981" selected="true" /></Profile><Profile id="MAC-1_Public"><title>I - Mission Critical Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-217101" selected="true" /><select idref="V-217102" selected="true" /><select idref="V-217103" selected="true" /><select idref="V-217104" selected="true" /><select idref="V-217105" selected="true" /><select idref="V-217106" selected="true" /><select idref="V-217107" selected="true" /><select idref="V-217108" selected="true" /><select idref="V-217109" selected="true" /><select idref="V-217110" selected="true" /><select idref="V-217111" selected="true" /><select idref="V-217112" selected="true" /><select idref="V-217113" selected="true" /><select idref="V-217114" selected="true" /><select idref="V-217116" selected="true" /><select idref="V-217117" selected="true" /><select idref="V-217118" selected="true" /><select idref="V-217119" selected="true" /><select idref="V-217120" selected="true" /><select idref="V-217121" selected="true" /><select idref="V-217122" selected="true" /><select idref="V-217123" selected="true" /><select idref="V-217124" selected="true" /><select idref="V-217125" selected="true" /><select idref="V-217126" selected="true" /><select idref="V-217127" selected="true" /><select idref="V-217128" selected="true" /><select idref="V-217129" selected="true" /><select idref="V-217130" selected="true" /><select idref="V-217131" selected="true" /><select idref="V-217134" selected="true" /><select idref="V-217135" selected="true" /><select idref="V-217136" selected="true" /><select idref="V-217138" selected="true" /><select idref="V-217139" selected="true" /><select idref="V-217140" selected="true" /><select idref="V-217141" selected="true" /><select idref="V-217142" selected="true" /><select idref="V-217143" selected="true" /><select idref="V-217144" selected="true" /><select idref="V-217145" selected="true" /><select idref="V-217146" selected="true" /><select idref="V-217147" selected="true" /><select idref="V-217148" selected="true" /><select idref="V-217149" selected="true" /><select idref="V-217150" selected="true" /><select idref="V-217151" selected="true" /><select idref="V-217152" selected="true" /><select idref="V-217153" selected="true" /><select idref="V-217154" selected="true" /><select idref="V-217155" selected="true" /><select idref="V-217156" selected="true" /><select idref="V-217158" selected="true" /><select idref="V-217159" selected="true" /><select idref="V-217160" selected="true" /><select idref="V-217161" selected="true" /><select idref="V-217162" selected="true" /><select idref="V-217163" selected="true" /><select idref="V-217164" selected="true" /><select idref="V-217166" selected="true" /><select idref="V-217167" selected="true" /><select idref="V-217168" selected="true" /><select idref="V-217169" selected="true" /><select idref="V-217170" selected="true" /><select idref="V-217171" selected="true" /><select idref="V-217172" selected="true" /><select idref="V-217173" selected="true" /><select idref="V-217174" selected="true" /><select idref="V-217175" selected="true" /><select idref="V-217176" selected="true" /><select idref="V-217177" selected="true" /><select idref="V-217178" selected="true" /><select idref="V-217179" selected="true" /><select idref="V-217180" selected="true" /><select idref="V-217181" selected="true" /><select idref="V-217182" selected="true" /><select idref="V-217183" selected="true" /><select idref="V-217184" selected="true" /><select idref="V-217185" selected="true" /><select idref="V-217186" selected="true" /><select idref="V-217188" selected="true" /><select idref="V-217189" selected="true" /><select idref="V-217190" selected="true" /><select idref="V-217191" selected="true" /><select idref="V-217192" selected="true" /><select idref="V-217193" selected="true" /><select idref="V-217194" selected="true" /><select idref="V-217195" selected="true" /><select idref="V-217196" selected="true" /><select idref="V-217197" selected="true" /><select idref="V-217198" selected="true" /><select idref="V-217199" selected="true" /><select idref="V-217200" selected="true" /><select idref="V-217201" selected="true" /><select idref="V-217202" selected="true" /><select idref="V-217203" selected="true" /><select idref="V-217204" selected="true" /><select idref="V-217205" selected="true" /><select idref="V-217206" selected="true" /><select idref="V-217207" selected="true" /><select idref="V-217208" selected="true" /><select idref="V-217209" selected="true" /><select idref="V-217210" selected="true" /><select idref="V-217211" selected="true" /><select idref="V-217212" selected="true" /><select idref="V-217213" selected="true" /><select idref="V-217214" selected="true" /><select idref="V-217215" selected="true" /><select idref="V-217216" selected="true" /><select idref="V-217217" selected="true" /><select idref="V-217218" selected="true" /><select idref="V-217223" selected="true" /><select idref="V-217227" selected="true" /><select idref="V-217230" selected="true" /><select idref="V-217236" selected="true" /><select idref="V-217237" selected="true" /><select idref="V-217238" selected="true" /><select idref="V-217239" selected="true" /><select idref="V-217240" selected="true" /><select idref="V-217241" selected="true" /><select idref="V-217242" selected="true" /><select idref="V-217243" selected="true" /><select idref="V-217244" selected="true" /><select idref="V-217245" selected="true" /><select idref="V-217246" selected="true" /><select idref="V-217247" selected="true" /><select idref="V-217248" selected="true" /><select idref="V-217249" selected="true" /><select idref="V-217250" selected="true" /><select idref="V-217251" selected="true" /><select idref="V-217252" selected="true" /><select idref="V-217253" selected="true" /><select idref="V-217254" selected="true" /><select idref="V-217255" selected="true" /><select idref="V-217257" selected="true" /><select idref="V-217258" selected="true" /><select idref="V-217260" selected="true" /><select idref="V-217261" selected="true" /><select idref="V-217262" selected="true" /><select idref="V-217263" selected="true" /><select idref="V-217264" selected="true" /><select idref="V-217265" selected="true" /><select idref="V-217266" selected="true" /><select idref="V-217267" selected="true" /><select idref="V-217268" selected="true" /><select idref="V-217269" selected="true" /><select idref="V-217270" selected="true" /><select idref="V-217271" selected="true" /><select idref="V-217272" selected="true" /><select idref="V-217273" selected="true" /><select idref="V-217274" selected="true" /><select idref="V-217275" selected="true" /><select idref="V-217276" selected="true" /><select idref="V-217277" selected="true" /><select idref="V-217278" selected="true" /><select idref="V-217279" selected="true" /><select idref="V-217280" selected="true" /><select idref="V-217281" selected="true" /><select idref="V-217282" selected="true" /><select idref="V-217283" selected="true" /><select idref="V-217284" selected="true" /><select idref="V-217285" selected="true" /><select idref="V-217286" selected="true" /><select idref="V-217287" selected="true" /><select idref="V-217288" selected="true" /><select idref="V-217289" selected="true" /><select idref="V-217290" selected="true" /><select idref="V-217291" selected="true" /><select idref="V-217292" selected="true" /><select idref="V-217293" selected="true" /><select idref="V-217294" selected="true" /><select idref="V-217295" selected="true" /><select idref="V-217296" selected="true" /><select idref="V-217297" selected="true" /><select idref="V-217298" selected="true" /><select idref="V-217299" selected="true" /><select idref="V-217300" selected="true" /><select idref="V-217301" selected="true" /><select idref="V-217302" selected="true" /><select idref="V-222386" selected="true" /><select idref="V-233308" selected="true" /><select idref="V-237603" selected="true" /><select idref="V-237604" selected="true" /><select idref="V-237605" selected="true" /><select idref="V-237606" selected="true" /><select idref="V-237607" selected="true" /><select idref="V-237608" selected="true" /><select idref="V-237609" selected="true" /><select idref="V-237610" selected="true" /><select idref="V-237611" selected="true" /><select idref="V-237612" selected="true" /><select idref="V-237613" selected="true" /><select idref="V-237614" selected="true" /><select idref="V-237615" selected="true" /><select idref="V-237616" selected="true" /><select idref="V-237617" selected="true" /><select idref="V-237618" selected="true" /><select idref="V-237619" selected="true" /><select idref="V-237620" selected="true" /><select idref="V-237621" selected="true" /><select idref="V-237622" selected="true" /><select idref="V-237623" selected="true" /><select idref="V-251719" selected="true" /><select idref="V-251720" selected="true" /><select idref="V-251721" selected="true" /><select idref="V-251722" selected="true" /><select idref="V-255914" selected="true" /><select idref="V-255915" selected="true" /><select idref="V-255916" selected="true" /><select idref="V-256980" selected="true" /><select idref="V-256981" selected="true" /></Profile><Profile id="MAC-1_Sensitive"><title>I - Mission Critical Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-217101" selected="true" /><select idref="V-217102" selected="true" /><select idref="V-217103" selected="true" /><select idref="V-217104" selected="true" /><select idref="V-217105" selected="true" /><select idref="V-217106" selected="true" /><select idref="V-217107" selected="true" /><select idref="V-217108" selected="true" /><select idref="V-217109" selected="true" /><select idref="V-217110" selected="true" /><select idref="V-217111" selected="true" /><select idref="V-217112" selected="true" /><select idref="V-217113" selected="true" /><select idref="V-217114" selected="true" /><select idref="V-217116" selected="true" /><select idref="V-217117" selected="true" /><select idref="V-217118" selected="true" /><select idref="V-217119" selected="true" /><select idref="V-217120" selected="true" /><select idref="V-217121" selected="true" /><select idref="V-217122" selected="true" /><select idref="V-217123" selected="true" /><select idref="V-217124" selected="true" /><select idref="V-217125" selected="true" /><select idref="V-217126" selected="true" /><select idref="V-217127" selected="true" /><select idref="V-217128" selected="true" /><select idref="V-217129" selected="true" /><select idref="V-217130" selected="true" /><select idref="V-217131" selected="true" /><select idref="V-217134" selected="true" /><select idref="V-217135" selected="true" /><select idref="V-217136" selected="true" /><select idref="V-217138" selected="true" /><select idref="V-217139" selected="true" /><select idref="V-217140" selected="true" /><select idref="V-217141" selected="true" /><select idref="V-217142" selected="true" /><select idref="V-217143" selected="true" /><select idref="V-217144" selected="true" /><select idref="V-217145" selected="true" /><select idref="V-217146" selected="true" /><select idref="V-217147" selected="true" /><select idref="V-217148" selected="true" /><select idref="V-217149" selected="true" /><select idref="V-217150" selected="true" /><select idref="V-217151" selected="true" /><select idref="V-217152" selected="true" /><select idref="V-217153" selected="true" /><select idref="V-217154" selected="true" /><select idref="V-217155" selected="true" /><select idref="V-217156" selected="true" /><select idref="V-217158" selected="true" /><select idref="V-217159" selected="true" /><select idref="V-217160" selected="true" /><select idref="V-217161" selected="true" /><select idref="V-217162" selected="true" /><select idref="V-217163" selected="true" /><select idref="V-217164" selected="true" /><select idref="V-217166" selected="true" /><select idref="V-217167" selected="true" /><select idref="V-217168" selected="true" /><select idref="V-217169" selected="true" /><select idref="V-217170" selected="true" /><select idref="V-217171" selected="true" /><select idref="V-217172" selected="true" /><select idref="V-217173" selected="true" /><select idref="V-217174" selected="true" /><select idref="V-217175" selected="true" /><select idref="V-217176" selected="true" /><select idref="V-217177" selected="true" /><select idref="V-217178" selected="true" /><select idref="V-217179" selected="true" /><select idref="V-217180" selected="true" /><select idref="V-217181" selected="true" /><select idref="V-217182" selected="true" /><select idref="V-217183" selected="true" /><select idref="V-217184" selected="true" /><select idref="V-217185" selected="true" /><select idref="V-217186" selected="true" /><select idref="V-217188" selected="true" /><select idref="V-217189" selected="true" /><select idref="V-217190" selected="true" /><select idref="V-217191" selected="true" /><select idref="V-217192" selected="true" /><select idref="V-217193" selected="true" /><select idref="V-217194" selected="true" /><select idref="V-217195" selected="true" /><select idref="V-217196" selected="true" /><select idref="V-217197" selected="true" /><select idref="V-217198" selected="true" /><select idref="V-217199" selected="true" /><select idref="V-217200" selected="true" /><select idref="V-217201" selected="true" /><select idref="V-217202" selected="true" /><select idref="V-217203" selected="true" /><select idref="V-217204" selected="true" /><select idref="V-217205" selected="true" /><select idref="V-217206" selected="true" /><select idref="V-217207" selected="true" /><select idref="V-217208" selected="true" /><select idref="V-217209" selected="true" /><select idref="V-217210" selected="true" /><select idref="V-217211" selected="true" /><select idref="V-217212" selected="true" /><select idref="V-217213" selected="true" /><select idref="V-217214" selected="true" /><select idref="V-217215" selected="true" /><select idref="V-217216" selected="true" /><select idref="V-217217" selected="true" /><select idref="V-217218" selected="true" /><select idref="V-217223" selected="true" /><select idref="V-217227" selected="true" /><select idref="V-217230" selected="true" /><select idref="V-217236" selected="true" /><select idref="V-217237" selected="true" /><select idref="V-217238" selected="true" /><select idref="V-217239" selected="true" /><select idref="V-217240" selected="true" /><select idref="V-217241" selected="true" /><select idref="V-217242" selected="true" /><select idref="V-217243" selected="true" /><select idref="V-217244" selected="true" /><select idref="V-217245" selected="true" /><select idref="V-217246" selected="true" /><select idref="V-217247" selected="true" /><select idref="V-217248" selected="true" /><select idref="V-217249" selected="true" /><select idref="V-217250" selected="true" /><select idref="V-217251" selected="true" /><select idref="V-217252" selected="true" /><select idref="V-217253" selected="true" /><select idref="V-217254" selected="true" /><select idref="V-217255" selected="true" /><select idref="V-217257" selected="true" /><select idref="V-217258" selected="true" /><select idref="V-217260" selected="true" /><select idref="V-217261" selected="true" /><select idref="V-217262" selected="true" /><select idref="V-217263" selected="true" /><select idref="V-217264" selected="true" /><select idref="V-217265" selected="true" /><select idref="V-217266" selected="true" /><select idref="V-217267" selected="true" /><select idref="V-217268" selected="true" /><select idref="V-217269" selected="true" /><select idref="V-217270" selected="true" /><select idref="V-217271" selected="true" /><select idref="V-217272" selected="true" /><select idref="V-217273" selected="true" /><select idref="V-217274" selected="true" /><select idref="V-217275" selected="true" /><select idref="V-217276" selected="true" /><select idref="V-217277" selected="true" /><select idref="V-217278" selected="true" /><select idref="V-217279" selected="true" /><select idref="V-217280" selected="true" /><select idref="V-217281" selected="true" /><select idref="V-217282" selected="true" /><select idref="V-217283" selected="true" /><select idref="V-217284" selected="true" /><select idref="V-217285" selected="true" /><select idref="V-217286" selected="true" /><select idref="V-217287" selected="true" /><select idref="V-217288" selected="true" /><select idref="V-217289" selected="true" /><select idref="V-217290" selected="true" /><select idref="V-217291" selected="true" /><select idref="V-217292" selected="true" /><select idref="V-217293" selected="true" /><select idref="V-217294" selected="true" /><select idref="V-217295" selected="true" /><select idref="V-217296" selected="true" /><select idref="V-217297" selected="true" /><select idref="V-217298" selected="true" /><select idref="V-217299" selected="true" /><select idref="V-217300" selected="true" /><select idref="V-217301" selected="true" /><select idref="V-217302" selected="true" /><select idref="V-222386" selected="true" /><select idref="V-233308" selected="true" /><select idref="V-237603" selected="true" /><select idref="V-237604" selected="true" /><select idref="V-237605" selected="true" /><select idref="V-237606" selected="true" /><select idref="V-237607" selected="true" /><select idref="V-237608" selected="true" /><select idref="V-237609" selected="true" /><select idref="V-237610" selected="true" /><select idref="V-237611" selected="true" /><select idref="V-237612" selected="true" /><select idref="V-237613" selected="true" /><select idref="V-237614" selected="true" /><select idref="V-237615" selected="true" /><select idref="V-237616" selected="true" /><select idref="V-237617" selected="true" /><select idref="V-237618" selected="true" /><select idref="V-237619" selected="true" /><select idref="V-237620" selected="true" /><select idref="V-237621" selected="true" /><select idref="V-237622" selected="true" /><select idref="V-237623" selected="true" /><select idref="V-251719" selected="true" /><select idref="V-251720" selected="true" /><select idref="V-251721" selected="true" /><select idref="V-251722" selected="true" /><select idref="V-255914" selected="true" /><select idref="V-255915" selected="true" /><select idref="V-255916" selected="true" /><select idref="V-256980" selected="true" /><select idref="V-256981" selected="true" /></Profile><Profile id="MAC-2_Classified"><title>II - Mission Support Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-217101" selected="true" /><select idref="V-217102" selected="true" /><select idref="V-217103" selected="true" /><select idref="V-217104" selected="true" /><select idref="V-217105" selected="true" /><select idref="V-217106" selected="true" /><select idref="V-217107" selected="true" /><select idref="V-217108" selected="true" /><select idref="V-217109" selected="true" /><select idref="V-217110" selected="true" /><select idref="V-217111" selected="true" /><select idref="V-217112" selected="true" /><select idref="V-217113" selected="true" /><select idref="V-217114" selected="true" /><select idref="V-217116" selected="true" /><select idref="V-217117" selected="true" /><select idref="V-217118" selected="true" /><select idref="V-217119" selected="true" /><select idref="V-217120" selected="true" /><select idref="V-217121" selected="true" /><select idref="V-217122" selected="true" /><select idref="V-217123" selected="true" /><select idref="V-217124" selected="true" /><select idref="V-217125" selected="true" /><select idref="V-217126" selected="true" /><select idref="V-217127" selected="true" /><select idref="V-217128" selected="true" /><select idref="V-217129" selected="true" /><select idref="V-217130" selected="true" /><select idref="V-217131" selected="true" /><select idref="V-217134" selected="true" /><select idref="V-217135" selected="true" /><select idref="V-217136" selected="true" /><select idref="V-217138" selected="true" /><select idref="V-217139" selected="true" /><select idref="V-217140" selected="true" /><select idref="V-217141" selected="true" /><select idref="V-217142" selected="true" /><select idref="V-217143" selected="true" /><select idref="V-217144" selected="true" /><select idref="V-217145" selected="true" /><select idref="V-217146" selected="true" /><select idref="V-217147" selected="true" /><select idref="V-217148" selected="true" /><select idref="V-217149" selected="true" /><select idref="V-217150" selected="true" /><select idref="V-217151" selected="true" /><select idref="V-217152" selected="true" /><select idref="V-217153" selected="true" /><select idref="V-217154" selected="true" /><select idref="V-217155" selected="true" /><select idref="V-217156" selected="true" /><select idref="V-217158" selected="true" /><select idref="V-217159" selected="true" /><select idref="V-217160" selected="true" /><select idref="V-217161" selected="true" /><select idref="V-217162" selected="true" /><select idref="V-217163" selected="true" /><select idref="V-217164" selected="true" /><select idref="V-217166" selected="true" /><select idref="V-217167" selected="true" /><select idref="V-217168" selected="true" /><select idref="V-217169" selected="true" /><select idref="V-217170" selected="true" /><select idref="V-217171" selected="true" /><select idref="V-217172" selected="true" /><select idref="V-217173" selected="true" /><select idref="V-217174" selected="true" /><select idref="V-217175" selected="true" /><select idref="V-217176" selected="true" /><select idref="V-217177" selected="true" /><select idref="V-217178" selected="true" /><select idref="V-217179" selected="true" /><select idref="V-217180" selected="true" /><select idref="V-217181" selected="true" /><select idref="V-217182" selected="true" /><select idref="V-217183" selected="true" /><select idref="V-217184" selected="true" /><select idref="V-217185" selected="true" /><select idref="V-217186" selected="true" /><select idref="V-217188" selected="true" /><select idref="V-217189" selected="true" /><select idref="V-217190" selected="true" /><select idref="V-217191" selected="true" /><select idref="V-217192" selected="true" /><select idref="V-217193" selected="true" /><select idref="V-217194" selected="true" /><select idref="V-217195" selected="true" /><select idref="V-217196" selected="true" /><select idref="V-217197" selected="true" /><select idref="V-217198" selected="true" /><select idref="V-217199" selected="true" /><select idref="V-217200" selected="true" /><select idref="V-217201" selected="true" /><select idref="V-217202" selected="true" /><select idref="V-217203" selected="true" /><select idref="V-217204" selected="true" /><select idref="V-217205" selected="true" /><select idref="V-217206" selected="true" /><select idref="V-217207" selected="true" /><select idref="V-217208" selected="true" /><select idref="V-217209" selected="true" /><select idref="V-217210" selected="true" /><select idref="V-217211" selected="true" /><select idref="V-217212" selected="true" /><select idref="V-217213" selected="true" /><select idref="V-217214" selected="true" /><select idref="V-217215" selected="true" /><select idref="V-217216" selected="true" /><select idref="V-217217" selected="true" /><select idref="V-217218" selected="true" /><select idref="V-217223" selected="true" /><select idref="V-217227" selected="true" /><select idref="V-217230" selected="true" /><select idref="V-217236" selected="true" /><select idref="V-217237" selected="true" /><select idref="V-217238" selected="true" /><select idref="V-217239" selected="true" /><select idref="V-217240" selected="true" /><select idref="V-217241" selected="true" /><select idref="V-217242" selected="true" /><select idref="V-217243" selected="true" /><select idref="V-217244" selected="true" /><select idref="V-217245" selected="true" /><select idref="V-217246" selected="true" /><select idref="V-217247" selected="true" /><select idref="V-217248" selected="true" /><select idref="V-217249" selected="true" /><select idref="V-217250" selected="true" /><select idref="V-217251" selected="true" /><select idref="V-217252" selected="true" /><select idref="V-217253" selected="true" /><select idref="V-217254" selected="true" /><select idref="V-217255" selected="true" /><select idref="V-217257" selected="true" /><select idref="V-217258" selected="true" /><select idref="V-217260" selected="true" /><select idref="V-217261" selected="true" /><select idref="V-217262" selected="true" /><select idref="V-217263" selected="true" /><select idref="V-217264" selected="true" /><select idref="V-217265" selected="true" /><select idref="V-217266" selected="true" /><select idref="V-217267" selected="true" /><select idref="V-217268" selected="true" /><select idref="V-217269" selected="true" /><select idref="V-217270" selected="true" /><select idref="V-217271" selected="true" /><select idref="V-217272" selected="true" /><select idref="V-217273" selected="true" /><select idref="V-217274" selected="true" /><select idref="V-217275" selected="true" /><select idref="V-217276" selected="true" /><select idref="V-217277" selected="true" /><select idref="V-217278" selected="true" /><select idref="V-217279" selected="true" /><select idref="V-217280" selected="true" /><select idref="V-217281" selected="true" /><select idref="V-217282" selected="true" /><select idref="V-217283" selected="true" /><select idref="V-217284" selected="true" /><select idref="V-217285" selected="true" /><select idref="V-217286" selected="true" /><select idref="V-217287" selected="true" /><select idref="V-217288" selected="true" /><select idref="V-217289" selected="true" /><select idref="V-217290" selected="true" /><select idref="V-217291" selected="true" /><select idref="V-217292" selected="true" /><select idref="V-217293" selected="true" /><select idref="V-217294" selected="true" /><select idref="V-217295" selected="true" /><select idref="V-217296" selected="true" /><select idref="V-217297" selected="true" /><select idref="V-217298" selected="true" /><select idref="V-217299" selected="true" /><select idref="V-217300" selected="true" /><select idref="V-217301" selected="true" /><select idref="V-217302" selected="true" /><select idref="V-222386" selected="true" /><select idref="V-233308" selected="true" /><select idref="V-237603" selected="true" /><select idref="V-237604" selected="true" /><select idref="V-237605" selected="true" /><select idref="V-237606" selected="true" /><select idref="V-237607" selected="true" /><select idref="V-237608" selected="true" /><select idref="V-237609" selected="true" /><select idref="V-237610" selected="true" /><select idref="V-237611" selected="true" /><select idref="V-237612" selected="true" /><select idref="V-237613" selected="true" /><select idref="V-237614" selected="true" /><select idref="V-237615" selected="true" /><select idref="V-237616" selected="true" /><select idref="V-237617" selected="true" /><select idref="V-237618" selected="true" /><select idref="V-237619" selected="true" /><select idref="V-237620" selected="true" /><select idref="V-237621" selected="true" /><select idref="V-237622" selected="true" /><select idref="V-237623" selected="true" /><select idref="V-251719" selected="true" /><select idref="V-251720" selected="true" /><select idref="V-251721" selected="true" /><select idref="V-251722" selected="true" /><select idref="V-255914" selected="true" /><select idref="V-255915" selected="true" /><select idref="V-255916" selected="true" /><select idref="V-256980" selected="true" /><select idref="V-256981" selected="true" /></Profile><Profile id="MAC-2_Public"><title>II - Mission Support Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-217101" selected="true" /><select idref="V-217102" selected="true" /><select idref="V-217103" selected="true" /><select idref="V-217104" selected="true" /><select idref="V-217105" selected="true" /><select idref="V-217106" selected="true" /><select idref="V-217107" selected="true" /><select idref="V-217108" selected="true" /><select idref="V-217109" selected="true" /><select idref="V-217110" selected="true" /><select idref="V-217111" selected="true" /><select idref="V-217112" selected="true" /><select idref="V-217113" selected="true" /><select idref="V-217114" selected="true" /><select idref="V-217116" selected="true" /><select idref="V-217117" selected="true" /><select idref="V-217118" selected="true" /><select idref="V-217119" selected="true" /><select idref="V-217120" selected="true" /><select idref="V-217121" selected="true" /><select idref="V-217122" selected="true" /><select idref="V-217123" selected="true" /><select idref="V-217124" selected="true" /><select idref="V-217125" selected="true" /><select idref="V-217126" selected="true" /><select idref="V-217127" selected="true" /><select idref="V-217128" selected="true" /><select idref="V-217129" selected="true" /><select idref="V-217130" selected="true" /><select idref="V-217131" selected="true" /><select idref="V-217134" selected="true" /><select idref="V-217135" selected="true" /><select idref="V-217136" selected="true" /><select idref="V-217138" selected="true" /><select idref="V-217139" selected="true" /><select idref="V-217140" selected="true" /><select idref="V-217141" selected="true" /><select idref="V-217142" selected="true" /><select idref="V-217143" selected="true" /><select idref="V-217144" selected="true" /><select idref="V-217145" selected="true" /><select idref="V-217146" selected="true" /><select idref="V-217147" selected="true" /><select idref="V-217148" selected="true" /><select idref="V-217149" selected="true" /><select idref="V-217150" selected="true" /><select idref="V-217151" selected="true" /><select idref="V-217152" selected="true" /><select idref="V-217153" selected="true" /><select idref="V-217154" selected="true" /><select idref="V-217155" selected="true" /><select idref="V-217156" selected="true" /><select idref="V-217158" selected="true" /><select idref="V-217159" selected="true" /><select idref="V-217160" selected="true" /><select idref="V-217161" selected="true" /><select idref="V-217162" selected="true" /><select idref="V-217163" selected="true" /><select idref="V-217164" selected="true" /><select idref="V-217166" selected="true" /><select idref="V-217167" selected="true" /><select idref="V-217168" selected="true" /><select idref="V-217169" selected="true" /><select idref="V-217170" selected="true" /><select idref="V-217171" selected="true" /><select idref="V-217172" selected="true" /><select idref="V-217173" selected="true" /><select idref="V-217174" selected="true" /><select idref="V-217175" selected="true" /><select idref="V-217176" selected="true" /><select idref="V-217177" selected="true" /><select idref="V-217178" selected="true" /><select idref="V-217179" selected="true" /><select idref="V-217180" selected="true" /><select idref="V-217181" selected="true" /><select idref="V-217182" selected="true" /><select idref="V-217183" selected="true" /><select idref="V-217184" selected="true" /><select idref="V-217185" selected="true" /><select idref="V-217186" selected="true" /><select idref="V-217188" selected="true" /><select idref="V-217189" selected="true" /><select idref="V-217190" selected="true" /><select idref="V-217191" selected="true" /><select idref="V-217192" selected="true" /><select idref="V-217193" selected="true" /><select idref="V-217194" selected="true" /><select idref="V-217195" selected="true" /><select idref="V-217196" selected="true" /><select idref="V-217197" selected="true" /><select idref="V-217198" selected="true" /><select idref="V-217199" selected="true" /><select idref="V-217200" selected="true" /><select idref="V-217201" selected="true" /><select idref="V-217202" selected="true" /><select idref="V-217203" selected="true" /><select idref="V-217204" selected="true" /><select idref="V-217205" selected="true" /><select idref="V-217206" selected="true" /><select idref="V-217207" selected="true" /><select idref="V-217208" selected="true" /><select idref="V-217209" selected="true" /><select idref="V-217210" selected="true" /><select idref="V-217211" selected="true" /><select idref="V-217212" selected="true" /><select idref="V-217213" selected="true" /><select idref="V-217214" selected="true" /><select idref="V-217215" selected="true" /><select idref="V-217216" selected="true" /><select idref="V-217217" selected="true" /><select idref="V-217218" selected="true" /><select idref="V-217223" selected="true" /><select idref="V-217227" selected="true" /><select idref="V-217230" selected="true" /><select idref="V-217236" selected="true" /><select idref="V-217237" selected="true" /><select idref="V-217238" selected="true" /><select idref="V-217239" selected="true" /><select idref="V-217240" selected="true" /><select idref="V-217241" selected="true" /><select idref="V-217242" selected="true" /><select idref="V-217243" selected="true" /><select idref="V-217244" selected="true" /><select idref="V-217245" selected="true" /><select idref="V-217246" selected="true" /><select idref="V-217247" selected="true" /><select idref="V-217248" selected="true" /><select idref="V-217249" selected="true" /><select idref="V-217250" selected="true" /><select idref="V-217251" selected="true" /><select idref="V-217252" selected="true" /><select idref="V-217253" selected="true" /><select idref="V-217254" selected="true" /><select idref="V-217255" selected="true" /><select idref="V-217257" selected="true" /><select idref="V-217258" selected="true" /><select idref="V-217260" selected="true" /><select idref="V-217261" selected="true" /><select idref="V-217262" selected="true" /><select idref="V-217263" selected="true" /><select idref="V-217264" selected="true" /><select idref="V-217265" selected="true" /><select idref="V-217266" selected="true" /><select idref="V-217267" selected="true" /><select idref="V-217268" selected="true" /><select idref="V-217269" selected="true" /><select idref="V-217270" selected="true" /><select idref="V-217271" selected="true" /><select idref="V-217272" selected="true" /><select idref="V-217273" selected="true" /><select idref="V-217274" selected="true" /><select idref="V-217275" selected="true" /><select idref="V-217276" selected="true" /><select idref="V-217277" selected="true" /><select idref="V-217278" selected="true" /><select idref="V-217279" selected="true" /><select idref="V-217280" selected="true" /><select idref="V-217281" selected="true" /><select idref="V-217282" selected="true" /><select idref="V-217283" selected="true" /><select idref="V-217284" selected="true" /><select idref="V-217285" selected="true" /><select idref="V-217286" selected="true" /><select idref="V-217287" selected="true" /><select idref="V-217288" selected="true" /><select idref="V-217289" selected="true" /><select idref="V-217290" selected="true" /><select idref="V-217291" selected="true" /><select idref="V-217292" selected="true" /><select idref="V-217293" selected="true" /><select idref="V-217294" selected="true" /><select idref="V-217295" selected="true" /><select idref="V-217296" selected="true" /><select idref="V-217297" selected="true" /><select idref="V-217298" selected="true" /><select idref="V-217299" selected="true" /><select idref="V-217300" selected="true" /><select idref="V-217301" selected="true" /><select idref="V-217302" selected="true" /><select idref="V-222386" selected="true" /><select idref="V-233308" selected="true" /><select idref="V-237603" selected="true" /><select idref="V-237604" selected="true" /><select idref="V-237605" selected="true" /><select idref="V-237606" selected="true" /><select idref="V-237607" selected="true" /><select idref="V-237608" selected="true" /><select idref="V-237609" selected="true" /><select idref="V-237610" selected="true" /><select idref="V-237611" selected="true" /><select idref="V-237612" selected="true" /><select idref="V-237613" selected="true" /><select idref="V-237614" selected="true" /><select idref="V-237615" selected="true" /><select idref="V-237616" selected="true" /><select idref="V-237617" selected="true" /><select idref="V-237618" selected="true" /><select idref="V-237619" selected="true" /><select idref="V-237620" selected="true" /><select idref="V-237621" selected="true" /><select idref="V-237622" selected="true" /><select idref="V-237623" selected="true" /><select idref="V-251719" selected="true" /><select idref="V-251720" selected="true" /><select idref="V-251721" selected="true" /><select idref="V-251722" selected="true" /><select idref="V-255914" selected="true" /><select idref="V-255915" selected="true" /><select idref="V-255916" selected="true" /><select idref="V-256980" selected="true" /><select idref="V-256981" selected="true" /></Profile><Profile id="MAC-2_Sensitive"><title>II - Mission Support Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-217101" selected="true" /><select idref="V-217102" selected="true" /><select idref="V-217103" selected="true" /><select idref="V-217104" selected="true" /><select idref="V-217105" selected="true" /><select idref="V-217106" selected="true" /><select idref="V-217107" selected="true" /><select idref="V-217108" selected="true" /><select idref="V-217109" selected="true" /><select idref="V-217110" selected="true" /><select idref="V-217111" selected="true" /><select idref="V-217112" selected="true" /><select idref="V-217113" selected="true" /><select idref="V-217114" selected="true" /><select idref="V-217116" selected="true" /><select idref="V-217117" selected="true" /><select idref="V-217118" selected="true" /><select idref="V-217119" selected="true" /><select idref="V-217120" selected="true" /><select idref="V-217121" selected="true" /><select idref="V-217122" selected="true" /><select idref="V-217123" selected="true" /><select idref="V-217124" selected="true" /><select idref="V-217125" selected="true" /><select idref="V-217126" selected="true" /><select idref="V-217127" selected="true" /><select idref="V-217128" selected="true" /><select idref="V-217129" selected="true" /><select idref="V-217130" selected="true" /><select idref="V-217131" selected="true" /><select idref="V-217134" selected="true" /><select idref="V-217135" selected="true" /><select idref="V-217136" selected="true" /><select idref="V-217138" selected="true" /><select idref="V-217139" selected="true" /><select idref="V-217140" selected="true" /><select idref="V-217141" selected="true" /><select idref="V-217142" selected="true" /><select idref="V-217143" selected="true" /><select idref="V-217144" selected="true" /><select idref="V-217145" selected="true" /><select idref="V-217146" selected="true" /><select idref="V-217147" selected="true" /><select idref="V-217148" selected="true" /><select idref="V-217149" selected="true" /><select idref="V-217150" selected="true" /><select idref="V-217151" selected="true" /><select idref="V-217152" selected="true" /><select idref="V-217153" selected="true" /><select idref="V-217154" selected="true" /><select idref="V-217155" selected="true" /><select idref="V-217156" selected="true" /><select idref="V-217158" selected="true" /><select idref="V-217159" selected="true" /><select idref="V-217160" selected="true" /><select idref="V-217161" selected="true" /><select idref="V-217162" selected="true" /><select idref="V-217163" selected="true" /><select idref="V-217164" selected="true" /><select idref="V-217166" selected="true" /><select idref="V-217167" selected="true" /><select idref="V-217168" selected="true" /><select idref="V-217169" selected="true" /><select idref="V-217170" selected="true" /><select idref="V-217171" selected="true" /><select idref="V-217172" selected="true" /><select idref="V-217173" selected="true" /><select idref="V-217174" selected="true" /><select idref="V-217175" selected="true" /><select idref="V-217176" selected="true" /><select idref="V-217177" selected="true" /><select idref="V-217178" selected="true" /><select idref="V-217179" selected="true" /><select idref="V-217180" selected="true" /><select idref="V-217181" selected="true" /><select idref="V-217182" selected="true" /><select idref="V-217183" selected="true" /><select idref="V-217184" selected="true" /><select idref="V-217185" selected="true" /><select idref="V-217186" selected="true" /><select idref="V-217188" selected="true" /><select idref="V-217189" selected="true" /><select idref="V-217190" selected="true" /><select idref="V-217191" selected="true" /><select idref="V-217192" selected="true" /><select idref="V-217193" selected="true" /><select idref="V-217194" selected="true" /><select idref="V-217195" selected="true" /><select idref="V-217196" selected="true" /><select idref="V-217197" selected="true" /><select idref="V-217198" selected="true" /><select idref="V-217199" selected="true" /><select idref="V-217200" selected="true" /><select idref="V-217201" selected="true" /><select idref="V-217202" selected="true" /><select idref="V-217203" selected="true" /><select idref="V-217204" selected="true" /><select idref="V-217205" selected="true" /><select idref="V-217206" selected="true" /><select idref="V-217207" selected="true" /><select idref="V-217208" selected="true" /><select idref="V-217209" selected="true" /><select idref="V-217210" selected="true" /><select idref="V-217211" selected="true" /><select idref="V-217212" selected="true" /><select idref="V-217213" selected="true" /><select idref="V-217214" selected="true" /><select idref="V-217215" selected="true" /><select idref="V-217216" selected="true" /><select idref="V-217217" selected="true" /><select idref="V-217218" selected="true" /><select idref="V-217223" selected="true" /><select idref="V-217227" selected="true" /><select idref="V-217230" selected="true" /><select idref="V-217236" selected="true" /><select idref="V-217237" selected="true" /><select idref="V-217238" selected="true" /><select idref="V-217239" selected="true" /><select idref="V-217240" selected="true" /><select idref="V-217241" selected="true" /><select idref="V-217242" selected="true" /><select idref="V-217243" selected="true" /><select idref="V-217244" selected="true" /><select idref="V-217245" selected="true" /><select idref="V-217246" selected="true" /><select idref="V-217247" selected="true" /><select idref="V-217248" selected="true" /><select idref="V-217249" selected="true" /><select idref="V-217250" selected="true" /><select idref="V-217251" selected="true" /><select idref="V-217252" selected="true" /><select idref="V-217253" selected="true" /><select idref="V-217254" selected="true" /><select idref="V-217255" selected="true" /><select idref="V-217257" selected="true" /><select idref="V-217258" selected="true" /><select idref="V-217260" selected="true" /><select idref="V-217261" selected="true" /><select idref="V-217262" selected="true" /><select idref="V-217263" selected="true" /><select idref="V-217264" selected="true" /><select idref="V-217265" selected="true" /><select idref="V-217266" selected="true" /><select idref="V-217267" selected="true" /><select idref="V-217268" selected="true" /><select idref="V-217269" selected="true" /><select idref="V-217270" selected="true" /><select idref="V-217271" selected="true" /><select idref="V-217272" selected="true" /><select idref="V-217273" selected="true" /><select idref="V-217274" selected="true" /><select idref="V-217275" selected="true" /><select idref="V-217276" selected="true" /><select idref="V-217277" selected="true" /><select idref="V-217278" selected="true" /><select idref="V-217279" selected="true" /><select idref="V-217280" selected="true" /><select idref="V-217281" selected="true" /><select idref="V-217282" selected="true" /><select idref="V-217283" selected="true" /><select idref="V-217284" selected="true" /><select idref="V-217285" selected="true" /><select idref="V-217286" selected="true" /><select idref="V-217287" selected="true" /><select idref="V-217288" selected="true" /><select idref="V-217289" selected="true" /><select idref="V-217290" selected="true" /><select idref="V-217291" selected="true" /><select idref="V-217292" selected="true" /><select idref="V-217293" selected="true" /><select idref="V-217294" selected="true" /><select idref="V-217295" selected="true" /><select idref="V-217296" selected="true" /><select idref="V-217297" selected="true" /><select idref="V-217298" selected="true" /><select idref="V-217299" selected="true" /><select idref="V-217300" selected="true" /><select idref="V-217301" selected="true" /><select idref="V-217302" selected="true" /><select idref="V-222386" selected="true" /><select idref="V-233308" selected="true" /><select idref="V-237603" selected="true" /><select idref="V-237604" selected="true" /><select idref="V-237605" selected="true" /><select idref="V-237606" selected="true" /><select idref="V-237607" selected="true" /><select idref="V-237608" selected="true" /><select idref="V-237609" selected="true" /><select idref="V-237610" selected="true" /><select idref="V-237611" selected="true" /><select idref="V-237612" selected="true" /><select idref="V-237613" selected="true" /><select idref="V-237614" selected="true" /><select idref="V-237615" selected="true" /><select idref="V-237616" selected="true" /><select idref="V-237617" selected="true" /><select idref="V-237618" selected="true" /><select idref="V-237619" selected="true" /><select idref="V-237620" selected="true" /><select idref="V-237621" selected="true" /><select idref="V-237622" selected="true" /><select idref="V-237623" selected="true" /><select idref="V-251719" selected="true" /><select idref="V-251720" selected="true" /><select idref="V-251721" selected="true" /><select idref="V-251722" selected="true" /><select idref="V-255914" selected="true" /><select idref="V-255915" selected="true" /><select idref="V-255916" selected="true" /><select idref="V-256980" selected="true" /><select idref="V-256981" selected="true" /></Profile><Profile id="MAC-3_Classified"><title>III - Administrative Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-217101" selected="true" /><select idref="V-217102" selected="true" /><select idref="V-217103" selected="true" /><select idref="V-217104" selected="true" /><select idref="V-217105" selected="true" /><select idref="V-217106" selected="true" /><select idref="V-217107" selected="true" /><select idref="V-217108" selected="true" /><select idref="V-217109" selected="true" /><select idref="V-217110" selected="true" /><select idref="V-217111" selected="true" /><select idref="V-217112" selected="true" /><select idref="V-217113" selected="true" /><select idref="V-217114" selected="true" /><select idref="V-217116" selected="true" /><select idref="V-217117" selected="true" /><select idref="V-217118" selected="true" /><select idref="V-217119" selected="true" /><select idref="V-217120" selected="true" /><select idref="V-217121" selected="true" /><select idref="V-217122" selected="true" /><select idref="V-217123" selected="true" /><select idref="V-217124" selected="true" /><select idref="V-217125" selected="true" /><select idref="V-217126" selected="true" /><select idref="V-217127" selected="true" /><select idref="V-217128" selected="true" /><select idref="V-217129" selected="true" /><select idref="V-217130" selected="true" /><select idref="V-217131" selected="true" /><select idref="V-217134" selected="true" /><select idref="V-217135" selected="true" /><select idref="V-217136" selected="true" /><select idref="V-217138" selected="true" /><select idref="V-217139" selected="true" /><select idref="V-217140" selected="true" /><select idref="V-217141" selected="true" /><select idref="V-217142" selected="true" /><select idref="V-217143" selected="true" /><select idref="V-217144" selected="true" /><select idref="V-217145" selected="true" /><select idref="V-217146" selected="true" /><select idref="V-217147" selected="true" /><select idref="V-217148" selected="true" /><select idref="V-217149" selected="true" /><select idref="V-217150" selected="true" /><select idref="V-217151" selected="true" /><select idref="V-217152" selected="true" /><select idref="V-217153" selected="true" /><select idref="V-217154" selected="true" /><select idref="V-217155" selected="true" /><select idref="V-217156" selected="true" /><select idref="V-217158" selected="true" /><select idref="V-217159" selected="true" /><select idref="V-217160" selected="true" /><select idref="V-217161" selected="true" /><select idref="V-217162" selected="true" /><select idref="V-217163" selected="true" /><select idref="V-217164" selected="true" /><select idref="V-217166" selected="true" /><select idref="V-217167" selected="true" /><select idref="V-217168" selected="true" /><select idref="V-217169" selected="true" /><select idref="V-217170" selected="true" /><select idref="V-217171" selected="true" /><select idref="V-217172" selected="true" /><select idref="V-217173" selected="true" /><select idref="V-217174" selected="true" /><select idref="V-217175" selected="true" /><select idref="V-217176" selected="true" /><select idref="V-217177" selected="true" /><select idref="V-217178" selected="true" /><select idref="V-217179" selected="true" /><select idref="V-217180" selected="true" /><select idref="V-217181" selected="true" /><select idref="V-217182" selected="true" /><select idref="V-217183" selected="true" /><select idref="V-217184" selected="true" /><select idref="V-217185" selected="true" /><select idref="V-217186" selected="true" /><select idref="V-217188" selected="true" /><select idref="V-217189" selected="true" /><select idref="V-217190" selected="true" /><select idref="V-217191" selected="true" /><select idref="V-217192" selected="true" /><select idref="V-217193" selected="true" /><select idref="V-217194" selected="true" /><select idref="V-217195" selected="true" /><select idref="V-217196" selected="true" /><select idref="V-217197" selected="true" /><select idref="V-217198" selected="true" /><select idref="V-217199" selected="true" /><select idref="V-217200" selected="true" /><select idref="V-217201" selected="true" /><select idref="V-217202" selected="true" /><select idref="V-217203" selected="true" /><select idref="V-217204" selected="true" /><select idref="V-217205" selected="true" /><select idref="V-217206" selected="true" /><select idref="V-217207" selected="true" /><select idref="V-217208" selected="true" /><select idref="V-217209" selected="true" /><select idref="V-217210" selected="true" /><select idref="V-217211" selected="true" /><select idref="V-217212" selected="true" /><select idref="V-217213" selected="true" /><select idref="V-217214" selected="true" /><select idref="V-217215" selected="true" /><select idref="V-217216" selected="true" /><select idref="V-217217" selected="true" /><select idref="V-217218" selected="true" /><select idref="V-217223" selected="true" /><select idref="V-217227" selected="true" /><select idref="V-217230" selected="true" /><select idref="V-217236" selected="true" /><select idref="V-217237" selected="true" /><select idref="V-217238" selected="true" /><select idref="V-217239" selected="true" /><select idref="V-217240" selected="true" /><select idref="V-217241" selected="true" /><select idref="V-217242" selected="true" /><select idref="V-217243" selected="true" /><select idref="V-217244" selected="true" /><select idref="V-217245" selected="true" /><select idref="V-217246" selected="true" /><select idref="V-217247" selected="true" /><select idref="V-217248" selected="true" /><select idref="V-217249" selected="true" /><select idref="V-217250" selected="true" /><select idref="V-217251" selected="true" /><select idref="V-217252" selected="true" /><select idref="V-217253" selected="true" /><select idref="V-217254" selected="true" /><select idref="V-217255" selected="true" /><select idref="V-217257" selected="true" /><select idref="V-217258" selected="true" /><select idref="V-217260" selected="true" /><select idref="V-217261" selected="true" /><select idref="V-217262" selected="true" /><select idref="V-217263" selected="true" /><select idref="V-217264" selected="true" /><select idref="V-217265" selected="true" /><select idref="V-217266" selected="true" /><select idref="V-217267" selected="true" /><select idref="V-217268" selected="true" /><select idref="V-217269" selected="true" /><select idref="V-217270" selected="true" /><select idref="V-217271" selected="true" /><select idref="V-217272" selected="true" /><select idref="V-217273" selected="true" /><select idref="V-217274" selected="true" /><select idref="V-217275" selected="true" /><select idref="V-217276" selected="true" /><select idref="V-217277" selected="true" /><select idref="V-217278" selected="true" /><select idref="V-217279" selected="true" /><select idref="V-217280" selected="true" /><select idref="V-217281" selected="true" /><select idref="V-217282" selected="true" /><select idref="V-217283" selected="true" /><select idref="V-217284" selected="true" /><select idref="V-217285" selected="true" /><select idref="V-217286" selected="true" /><select idref="V-217287" selected="true" /><select idref="V-217288" selected="true" /><select idref="V-217289" selected="true" /><select idref="V-217290" selected="true" /><select idref="V-217291" selected="true" /><select idref="V-217292" selected="true" /><select idref="V-217293" selected="true" /><select idref="V-217294" selected="true" /><select idref="V-217295" selected="true" /><select idref="V-217296" selected="true" /><select idref="V-217297" selected="true" /><select idref="V-217298" selected="true" /><select idref="V-217299" selected="true" /><select idref="V-217300" selected="true" /><select idref="V-217301" selected="true" /><select idref="V-217302" selected="true" /><select idref="V-222386" selected="true" /><select idref="V-233308" selected="true" /><select idref="V-237603" selected="true" /><select idref="V-237604" selected="true" /><select idref="V-237605" selected="true" /><select idref="V-237606" selected="true" /><select idref="V-237607" selected="true" /><select idref="V-237608" selected="true" /><select idref="V-237609" selected="true" /><select idref="V-237610" selected="true" /><select idref="V-237611" selected="true" /><select idref="V-237612" selected="true" /><select idref="V-237613" selected="true" /><select idref="V-237614" selected="true" /><select idref="V-237615" selected="true" /><select idref="V-237616" selected="true" /><select idref="V-237617" selected="true" /><select idref="V-237618" selected="true" /><select idref="V-237619" selected="true" /><select idref="V-237620" selected="true" /><select idref="V-237621" selected="true" /><select idref="V-237622" selected="true" /><select idref="V-237623" selected="true" /><select idref="V-251719" selected="true" /><select idref="V-251720" selected="true" /><select idref="V-251721" selected="true" /><select idref="V-251722" selected="true" /><select idref="V-255914" selected="true" /><select idref="V-255915" selected="true" /><select idref="V-255916" selected="true" /><select idref="V-256980" selected="true" /><select idref="V-256981" selected="true" /></Profile><Profile id="MAC-3_Public"><title>III - Administrative Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-217101" selected="true" /><select idref="V-217102" selected="true" /><select idref="V-217103" selected="true" /><select idref="V-217104" selected="true" /><select idref="V-217105" selected="true" /><select idref="V-217106" selected="true" /><select idref="V-217107" selected="true" /><select idref="V-217108" selected="true" /><select idref="V-217109" selected="true" /><select idref="V-217110" selected="true" /><select idref="V-217111" selected="true" /><select idref="V-217112" selected="true" /><select idref="V-217113" selected="true" /><select idref="V-217114" selected="true" /><select idref="V-217116" selected="true" /><select idref="V-217117" selected="true" /><select idref="V-217118" selected="true" /><select idref="V-217119" selected="true" /><select idref="V-217120" selected="true" /><select idref="V-217121" selected="true" /><select idref="V-217122" selected="true" /><select idref="V-217123" selected="true" /><select idref="V-217124" selected="true" /><select idref="V-217125" selected="true" /><select idref="V-217126" selected="true" /><select idref="V-217127" selected="true" /><select idref="V-217128" selected="true" /><select idref="V-217129" selected="true" /><select idref="V-217130" selected="true" /><select idref="V-217131" selected="true" /><select idref="V-217134" selected="true" /><select idref="V-217135" selected="true" /><select idref="V-217136" selected="true" /><select idref="V-217138" selected="true" /><select idref="V-217139" selected="true" /><select idref="V-217140" selected="true" /><select idref="V-217141" selected="true" /><select idref="V-217142" selected="true" /><select idref="V-217143" selected="true" /><select idref="V-217144" selected="true" /><select idref="V-217145" selected="true" /><select idref="V-217146" selected="true" /><select idref="V-217147" selected="true" /><select idref="V-217148" selected="true" /><select idref="V-217149" selected="true" /><select idref="V-217150" selected="true" /><select idref="V-217151" selected="true" /><select idref="V-217152" selected="true" /><select idref="V-217153" selected="true" /><select idref="V-217154" selected="true" /><select idref="V-217155" selected="true" /><select idref="V-217156" selected="true" /><select idref="V-217158" selected="true" /><select idref="V-217159" selected="true" /><select idref="V-217160" selected="true" /><select idref="V-217161" selected="true" /><select idref="V-217162" selected="true" /><select idref="V-217163" selected="true" /><select idref="V-217164" selected="true" /><select idref="V-217166" selected="true" /><select idref="V-217167" selected="true" /><select idref="V-217168" selected="true" /><select idref="V-217169" selected="true" /><select idref="V-217170" selected="true" /><select idref="V-217171" selected="true" /><select idref="V-217172" selected="true" /><select idref="V-217173" selected="true" /><select idref="V-217174" selected="true" /><select idref="V-217175" selected="true" /><select idref="V-217176" selected="true" /><select idref="V-217177" selected="true" /><select idref="V-217178" selected="true" /><select idref="V-217179" selected="true" /><select idref="V-217180" selected="true" /><select idref="V-217181" selected="true" /><select idref="V-217182" selected="true" /><select idref="V-217183" selected="true" /><select idref="V-217184" selected="true" /><select idref="V-217185" selected="true" /><select idref="V-217186" selected="true" /><select idref="V-217188" selected="true" /><select idref="V-217189" selected="true" /><select idref="V-217190" selected="true" /><select idref="V-217191" selected="true" /><select idref="V-217192" selected="true" /><select idref="V-217193" selected="true" /><select idref="V-217194" selected="true" /><select idref="V-217195" selected="true" /><select idref="V-217196" selected="true" /><select idref="V-217197" selected="true" /><select idref="V-217198" selected="true" /><select idref="V-217199" selected="true" /><select idref="V-217200" selected="true" /><select idref="V-217201" selected="true" /><select idref="V-217202" selected="true" /><select idref="V-217203" selected="true" /><select idref="V-217204" selected="true" /><select idref="V-217205" selected="true" /><select idref="V-217206" selected="true" /><select idref="V-217207" selected="true" /><select idref="V-217208" selected="true" /><select idref="V-217209" selected="true" /><select idref="V-217210" selected="true" /><select idref="V-217211" selected="true" /><select idref="V-217212" selected="true" /><select idref="V-217213" selected="true" /><select idref="V-217214" selected="true" /><select idref="V-217215" selected="true" /><select idref="V-217216" selected="true" /><select idref="V-217217" selected="true" /><select idref="V-217218" selected="true" /><select idref="V-217223" selected="true" /><select idref="V-217227" selected="true" /><select idref="V-217230" selected="true" /><select idref="V-217236" selected="true" /><select idref="V-217237" selected="true" /><select idref="V-217238" selected="true" /><select idref="V-217239" selected="true" /><select idref="V-217240" selected="true" /><select idref="V-217241" selected="true" /><select idref="V-217242" selected="true" /><select idref="V-217243" selected="true" /><select idref="V-217244" selected="true" /><select idref="V-217245" selected="true" /><select idref="V-217246" selected="true" /><select idref="V-217247" selected="true" /><select idref="V-217248" selected="true" /><select idref="V-217249" selected="true" /><select idref="V-217250" selected="true" /><select idref="V-217251" selected="true" /><select idref="V-217252" selected="true" /><select idref="V-217253" selected="true" /><select idref="V-217254" selected="true" /><select idref="V-217255" selected="true" /><select idref="V-217257" selected="true" /><select idref="V-217258" selected="true" /><select idref="V-217260" selected="true" /><select idref="V-217261" selected="true" /><select idref="V-217262" selected="true" /><select idref="V-217263" selected="true" /><select idref="V-217264" selected="true" /><select idref="V-217265" selected="true" /><select idref="V-217266" selected="true" /><select idref="V-217267" selected="true" /><select idref="V-217268" selected="true" /><select idref="V-217269" selected="true" /><select idref="V-217270" selected="true" /><select idref="V-217271" selected="true" /><select idref="V-217272" selected="true" /><select idref="V-217273" selected="true" /><select idref="V-217274" selected="true" /><select idref="V-217275" selected="true" /><select idref="V-217276" selected="true" /><select idref="V-217277" selected="true" /><select idref="V-217278" selected="true" /><select idref="V-217279" selected="true" /><select idref="V-217280" selected="true" /><select idref="V-217281" selected="true" /><select idref="V-217282" selected="true" /><select idref="V-217283" selected="true" /><select idref="V-217284" selected="true" /><select idref="V-217285" selected="true" /><select idref="V-217286" selected="true" /><select idref="V-217287" selected="true" /><select idref="V-217288" selected="true" /><select idref="V-217289" selected="true" /><select idref="V-217290" selected="true" /><select idref="V-217291" selected="true" /><select idref="V-217292" selected="true" /><select idref="V-217293" selected="true" /><select idref="V-217294" selected="true" /><select idref="V-217295" selected="true" /><select idref="V-217296" selected="true" /><select idref="V-217297" selected="true" /><select idref="V-217298" selected="true" /><select idref="V-217299" selected="true" /><select idref="V-217300" selected="true" /><select idref="V-217301" selected="true" /><select idref="V-217302" selected="true" /><select idref="V-222386" selected="true" /><select idref="V-233308" selected="true" /><select idref="V-237603" selected="true" /><select idref="V-237604" selected="true" /><select idref="V-237605" selected="true" /><select idref="V-237606" selected="true" /><select idref="V-237607" selected="true" /><select idref="V-237608" selected="true" /><select idref="V-237609" selected="true" /><select idref="V-237610" selected="true" /><select idref="V-237611" selected="true" /><select idref="V-237612" selected="true" /><select idref="V-237613" selected="true" /><select idref="V-237614" selected="true" /><select idref="V-237615" selected="true" /><select idref="V-237616" selected="true" /><select idref="V-237617" selected="true" /><select idref="V-237618" selected="true" /><select idref="V-237619" selected="true" /><select idref="V-237620" selected="true" /><select idref="V-237621" selected="true" /><select idref="V-237622" selected="true" /><select idref="V-237623" selected="true" /><select idref="V-251719" selected="true" /><select idref="V-251720" selected="true" /><select idref="V-251721" selected="true" /><select idref="V-251722" selected="true" /><select idref="V-255914" selected="true" /><select idref="V-255915" selected="true" /><select idref="V-255916" selected="true" /><select idref="V-256980" selected="true" /><select idref="V-256981" selected="true" /></Profile><Profile id="MAC-3_Sensitive"><title>III - Administrative Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-217101" selected="true" /><select idref="V-217102" selected="true" /><select idref="V-217103" selected="true" /><select idref="V-217104" selected="true" /><select idref="V-217105" selected="true" /><select idref="V-217106" selected="true" /><select idref="V-217107" selected="true" /><select idref="V-217108" selected="true" /><select idref="V-217109" selected="true" /><select idref="V-217110" selected="true" /><select idref="V-217111" selected="true" /><select idref="V-217112" selected="true" /><select idref="V-217113" selected="true" /><select idref="V-217114" selected="true" /><select idref="V-217116" selected="true" /><select idref="V-217117" selected="true" /><select idref="V-217118" selected="true" /><select idref="V-217119" selected="true" /><select idref="V-217120" selected="true" /><select idref="V-217121" selected="true" /><select idref="V-217122" selected="true" /><select idref="V-217123" selected="true" /><select idref="V-217124" selected="true" /><select idref="V-217125" selected="true" /><select idref="V-217126" selected="true" /><select idref="V-217127" selected="true" /><select idref="V-217128" selected="true" /><select idref="V-217129" selected="true" /><select idref="V-217130" selected="true" /><select idref="V-217131" selected="true" /><select idref="V-217134" selected="true" /><select idref="V-217135" selected="true" /><select idref="V-217136" selected="true" /><select idref="V-217138" selected="true" /><select idref="V-217139" selected="true" /><select idref="V-217140" selected="true" /><select idref="V-217141" selected="true" /><select idref="V-217142" selected="true" /><select idref="V-217143" selected="true" /><select idref="V-217144" selected="true" /><select idref="V-217145" selected="true" /><select idref="V-217146" selected="true" /><select idref="V-217147" selected="true" /><select idref="V-217148" selected="true" /><select idref="V-217149" selected="true" /><select idref="V-217150" selected="true" /><select idref="V-217151" selected="true" /><select idref="V-217152" selected="true" /><select idref="V-217153" selected="true" /><select idref="V-217154" selected="true" /><select idref="V-217155" selected="true" /><select idref="V-217156" selected="true" /><select idref="V-217158" selected="true" /><select idref="V-217159" selected="true" /><select idref="V-217160" selected="true" /><select idref="V-217161" selected="true" /><select idref="V-217162" selected="true" /><select idref="V-217163" selected="true" /><select idref="V-217164" selected="true" /><select idref="V-217166" selected="true" /><select idref="V-217167" selected="true" /><select idref="V-217168" selected="true" /><select idref="V-217169" selected="true" /><select idref="V-217170" selected="true" /><select idref="V-217171" selected="true" /><select idref="V-217172" selected="true" /><select idref="V-217173" selected="true" /><select idref="V-217174" selected="true" /><select idref="V-217175" selected="true" /><select idref="V-217176" selected="true" /><select idref="V-217177" selected="true" /><select idref="V-217178" selected="true" /><select idref="V-217179" selected="true" /><select idref="V-217180" selected="true" /><select idref="V-217181" selected="true" /><select idref="V-217182" selected="true" /><select idref="V-217183" selected="true" /><select idref="V-217184" selected="true" /><select idref="V-217185" selected="true" /><select idref="V-217186" selected="true" /><select idref="V-217188" selected="true" /><select idref="V-217189" selected="true" /><select idref="V-217190" selected="true" /><select idref="V-217191" selected="true" /><select idref="V-217192" selected="true" /><select idref="V-217193" selected="true" /><select idref="V-217194" selected="true" /><select idref="V-217195" selected="true" /><select idref="V-217196" selected="true" /><select idref="V-217197" selected="true" /><select idref="V-217198" selected="true" /><select idref="V-217199" selected="true" /><select idref="V-217200" selected="true" /><select idref="V-217201" selected="true" /><select idref="V-217202" selected="true" /><select idref="V-217203" selected="true" /><select idref="V-217204" selected="true" /><select idref="V-217205" selected="true" /><select idref="V-217206" selected="true" /><select idref="V-217207" selected="true" /><select idref="V-217208" selected="true" /><select idref="V-217209" selected="true" /><select idref="V-217210" selected="true" /><select idref="V-217211" selected="true" /><select idref="V-217212" selected="true" /><select idref="V-217213" selected="true" /><select idref="V-217214" selected="true" /><select idref="V-217215" selected="true" /><select idref="V-217216" selected="true" /><select idref="V-217217" selected="true" /><select idref="V-217218" selected="true" /><select idref="V-217223" selected="true" /><select idref="V-217227" selected="true" /><select idref="V-217230" selected="true" /><select idref="V-217236" selected="true" /><select idref="V-217237" selected="true" /><select idref="V-217238" selected="true" /><select idref="V-217239" selected="true" /><select idref="V-217240" selected="true" /><select idref="V-217241" selected="true" /><select idref="V-217242" selected="true" /><select idref="V-217243" selected="true" /><select idref="V-217244" selected="true" /><select idref="V-217245" selected="true" /><select idref="V-217246" selected="true" /><select idref="V-217247" selected="true" /><select idref="V-217248" selected="true" /><select idref="V-217249" selected="true" /><select idref="V-217250" selected="true" /><select idref="V-217251" selected="true" /><select idref="V-217252" selected="true" /><select idref="V-217253" selected="true" /><select idref="V-217254" selected="true" /><select idref="V-217255" selected="true" /><select idref="V-217257" selected="true" /><select idref="V-217258" selected="true" /><select idref="V-217260" selected="true" /><select idref="V-217261" selected="true" /><select idref="V-217262" selected="true" /><select idref="V-217263" selected="true" /><select idref="V-217264" selected="true" /><select idref="V-217265" selected="true" /><select idref="V-217266" selected="true" /><select idref="V-217267" selected="true" /><select idref="V-217268" selected="true" /><select idref="V-217269" selected="true" /><select idref="V-217270" selected="true" /><select idref="V-217271" selected="true" /><select idref="V-217272" selected="true" /><select idref="V-217273" selected="true" /><select idref="V-217274" selected="true" /><select idref="V-217275" selected="true" /><select idref="V-217276" selected="true" /><select idref="V-217277" selected="true" /><select idref="V-217278" selected="true" /><select idref="V-217279" selected="true" /><select idref="V-217280" selected="true" /><select idref="V-217281" selected="true" /><select idref="V-217282" selected="true" /><select idref="V-217283" selected="true" /><select idref="V-217284" selected="true" /><select idref="V-217285" selected="true" /><select idref="V-217286" selected="true" /><select idref="V-217287" selected="true" /><select idref="V-217288" selected="true" /><select idref="V-217289" selected="true" /><select idref="V-217290" selected="true" /><select idref="V-217291" selected="true" /><select idref="V-217292" selected="true" /><select idref="V-217293" selected="true" /><select idref="V-217294" selected="true" /><select idref="V-217295" selected="true" /><select idref="V-217296" selected="true" /><select idref="V-217297" selected="true" /><select idref="V-217298" selected="true" /><select idref="V-217299" selected="true" /><select idref="V-217300" selected="true" /><select idref="V-217301" selected="true" /><select idref="V-217302" selected="true" /><select idref="V-222386" selected="true" /><select idref="V-233308" selected="true" /><select idref="V-237603" selected="true" /><select idref="V-237604" selected="true" /><select idref="V-237605" selected="true" /><select idref="V-237606" selected="true" /><select idref="V-237607" selected="true" /><select idref="V-237608" selected="true" /><select idref="V-237609" selected="true" /><select idref="V-237610" selected="true" /><select idref="V-237611" selected="true" /><select idref="V-237612" selected="true" /><select idref="V-237613" selected="true" /><select idref="V-237614" selected="true" /><select idref="V-237615" selected="true" /><select idref="V-237616" selected="true" /><select idref="V-237617" selected="true" /><select idref="V-237618" selected="true" /><select idref="V-237619" selected="true" /><select idref="V-237620" selected="true" /><select idref="V-237621" selected="true" /><select idref="V-237622" selected="true" /><select idref="V-237623" selected="true" /><select idref="V-251719" selected="true" /><select idref="V-251720" selected="true" /><select idref="V-251721" selected="true" /><select idref="V-251722" selected="true" /><select idref="V-255914" selected="true" /><select idref="V-255915" selected="true" /><select idref="V-255916" selected="true" /><select idref="V-256980" selected="true" /><select idref="V-256981" selected="true" /></Profile><Group id="V-217101"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-217101r991589_rule" weight="10.0" severity="high"><version>SLES-12-010000</version><title>The SUSE operating system must be a vendor-supported release.</title><description>&lt;VulnDiscussion&gt;A SUSE operating system release is considered "supported" if the vendor continues to provide security patches for the product. With an unsupported release, it will not be possible to resolve security issues discovered in the system software.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Server 12</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Server 12</dc:subject><dc:identifier>4033</dc:identifier></reference><ident system="http://cyber.mil/legacy">V-77045</ident><ident system="http://cyber.mil/legacy">SV-91741</ident><ident system="http://cyber.mil/cci">CCI-001230</ident><fixtext fixref="F-18327r369460_fix">Upgrade the SUSE operating system to a version supported by the vendor. If the system is not registered with the SUSE Customer Center, register the system against the correct subscription.
+<?xml version="1.0" encoding="utf-8"?><?xml-stylesheet type='text/xsl' href='STIG_unclass.xsl'?><Benchmark xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.1 http://nvd.nist.gov/schema/xccdf-1.1.4.xsd http://cpe.mitre.org/dictionary/2.0 http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd" id="SLES_12_STIG" xml:lang="en" xmlns="http://checklists.nist.gov/xccdf/1.1"><status date="2025-11-24">accepted</status><title>SUSE Linux Enterprise Server 12 Security Technical Implementation Guide</title><description>This Security Technical Implementation Guide is published as a tool to improve the security of Department of Defense (DOD) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.</description><notice id="terms-of-use" xml:lang="en"></notice><front-matter xml:lang="en"></front-matter><rear-matter xml:lang="en"></rear-matter><reference href="https://cyber.mil"><dc:publisher>DISA</dc:publisher><dc:source>STIG.DOD.MIL</dc:source></reference><plain-text id="release-info">Release: 4 Benchmark Date: 05 Jan 2026</plain-text><plain-text id="generator">3.5.2</plain-text><plain-text id="conventionsVersion">1.10.0</plain-text><version>3</version><Profile id="MAC-1_Classified"><title>I - Mission Critical Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-217101" selected="true" /><select idref="V-217102" selected="true" /><select idref="V-217103" selected="true" /><select idref="V-217104" selected="true" /><select idref="V-217105" selected="true" /><select idref="V-217106" selected="true" /><select idref="V-217107" selected="true" /><select idref="V-217108" selected="true" /><select idref="V-217109" selected="true" /><select idref="V-217110" selected="true" /><select idref="V-217111" selected="true" /><select idref="V-217112" selected="true" /><select idref="V-217113" selected="true" /><select idref="V-217114" selected="true" /><select idref="V-217116" selected="true" /><select idref="V-217117" selected="true" /><select idref="V-217118" selected="true" /><select idref="V-217119" selected="true" /><select idref="V-217120" selected="true" /><select idref="V-217121" selected="true" /><select idref="V-217122" selected="true" /><select idref="V-217123" selected="true" /><select idref="V-217124" selected="true" /><select idref="V-217125" selected="true" /><select idref="V-217126" selected="true" /><select idref="V-217127" selected="true" /><select idref="V-217128" selected="true" /><select idref="V-217129" selected="true" /><select idref="V-217130" selected="true" /><select idref="V-217131" selected="true" /><select idref="V-217134" selected="true" /><select idref="V-217135" selected="true" /><select idref="V-217136" selected="true" /><select idref="V-217138" selected="true" /><select idref="V-217139" selected="true" /><select idref="V-217141" selected="true" /><select idref="V-217142" selected="true" /><select idref="V-217143" selected="true" /><select idref="V-217144" selected="true" /><select idref="V-217145" selected="true" /><select idref="V-217146" selected="true" /><select idref="V-217147" selected="true" /><select idref="V-217148" selected="true" /><select idref="V-217149" selected="true" /><select idref="V-217150" selected="true" /><select idref="V-217151" selected="true" /><select idref="V-217152" selected="true" /><select idref="V-217153" selected="true" /><select idref="V-217154" selected="true" /><select idref="V-217155" selected="true" /><select idref="V-217156" selected="true" /><select idref="V-217158" selected="true" /><select idref="V-217159" selected="true" /><select idref="V-217160" selected="true" /><select idref="V-217161" selected="true" /><select idref="V-217162" selected="true" /><select idref="V-217163" selected="true" /><select idref="V-217164" selected="true" /><select idref="V-217166" selected="true" /><select idref="V-217167" selected="true" /><select idref="V-217168" selected="true" /><select idref="V-217169" selected="true" /><select idref="V-217170" selected="true" /><select idref="V-217171" selected="true" /><select idref="V-217172" selected="true" /><select idref="V-217173" selected="true" /><select idref="V-217174" selected="true" /><select idref="V-217175" selected="true" /><select idref="V-217176" selected="true" /><select idref="V-217177" selected="true" /><select idref="V-217178" selected="true" /><select idref="V-217179" selected="true" /><select idref="V-217180" selected="true" /><select idref="V-217181" selected="true" /><select idref="V-217182" selected="true" /><select idref="V-217183" selected="true" /><select idref="V-217184" selected="true" /><select idref="V-217185" selected="true" /><select idref="V-217186" selected="true" /><select idref="V-217188" selected="true" /><select idref="V-217189" selected="true" /><select idref="V-217190" selected="true" /><select idref="V-217191" selected="true" /><select idref="V-217192" selected="true" /><select idref="V-217193" selected="true" /><select idref="V-217194" selected="true" /><select idref="V-217195" selected="true" /><select idref="V-217196" selected="true" /><select idref="V-217197" selected="true" /><select idref="V-217198" selected="true" /><select idref="V-217199" selected="true" /><select idref="V-217200" selected="true" /><select idref="V-217201" selected="true" /><select idref="V-217202" selected="true" /><select idref="V-217203" selected="true" /><select idref="V-217204" selected="true" /><select idref="V-217205" selected="true" /><select idref="V-217206" selected="true" /><select idref="V-217207" selected="true" /><select idref="V-217208" selected="true" /><select idref="V-217209" selected="true" /><select idref="V-217210" selected="true" /><select idref="V-217211" selected="true" /><select idref="V-217212" selected="true" /><select idref="V-217213" selected="true" /><select idref="V-217214" selected="true" /><select idref="V-217215" selected="true" /><select idref="V-217216" selected="true" /><select idref="V-217217" selected="true" /><select idref="V-217218" selected="true" /><select idref="V-217223" selected="true" /><select idref="V-217227" selected="true" /><select idref="V-217230" selected="true" /><select idref="V-217236" selected="true" /><select idref="V-217237" selected="true" /><select idref="V-217238" selected="true" /><select idref="V-217239" selected="true" /><select idref="V-217240" selected="true" /><select idref="V-217241" selected="true" /><select idref="V-217242" selected="true" /><select idref="V-217243" selected="true" /><select idref="V-217244" selected="true" /><select idref="V-217245" selected="true" /><select idref="V-217246" selected="true" /><select idref="V-217247" selected="true" /><select idref="V-217248" selected="true" /><select idref="V-217249" selected="true" /><select idref="V-217250" selected="true" /><select idref="V-217251" selected="true" /><select idref="V-217252" selected="true" /><select idref="V-217253" selected="true" /><select idref="V-217254" selected="true" /><select idref="V-217255" selected="true" /><select idref="V-217257" selected="true" /><select idref="V-217258" selected="true" /><select idref="V-217260" selected="true" /><select idref="V-217261" selected="true" /><select idref="V-217262" selected="true" /><select idref="V-217263" selected="true" /><select idref="V-217264" selected="true" /><select idref="V-217265" selected="true" /><select idref="V-217266" selected="true" /><select idref="V-217267" selected="true" /><select idref="V-217268" selected="true" /><select idref="V-217269" selected="true" /><select idref="V-217270" selected="true" /><select idref="V-217271" selected="true" /><select idref="V-217272" selected="true" /><select idref="V-217273" selected="true" /><select idref="V-217274" selected="true" /><select idref="V-217275" selected="true" /><select idref="V-217276" selected="true" /><select idref="V-217277" selected="true" /><select idref="V-217278" selected="true" /><select idref="V-217279" selected="true" /><select idref="V-217280" selected="true" /><select idref="V-217281" selected="true" /><select idref="V-217282" selected="true" /><select idref="V-217283" selected="true" /><select idref="V-217284" selected="true" /><select idref="V-217285" selected="true" /><select idref="V-217286" selected="true" /><select idref="V-217287" selected="true" /><select idref="V-217288" selected="true" /><select idref="V-217289" selected="true" /><select idref="V-217290" selected="true" /><select idref="V-217291" selected="true" /><select idref="V-217292" selected="true" /><select idref="V-217293" selected="true" /><select idref="V-217294" selected="true" /><select idref="V-217295" selected="true" /><select idref="V-217296" selected="true" /><select idref="V-217297" selected="true" /><select idref="V-217298" selected="true" /><select idref="V-217299" selected="true" /><select idref="V-217300" selected="true" /><select idref="V-217301" selected="true" /><select idref="V-217302" selected="true" /><select idref="V-222386" selected="true" /><select idref="V-233308" selected="true" /><select idref="V-237603" selected="true" /><select idref="V-237604" selected="true" /><select idref="V-237605" selected="true" /><select idref="V-237606" selected="true" /><select idref="V-237607" selected="true" /><select idref="V-237608" selected="true" /><select idref="V-237609" selected="true" /><select idref="V-237610" selected="true" /><select idref="V-237611" selected="true" /><select idref="V-237612" selected="true" /><select idref="V-237613" selected="true" /><select idref="V-237614" selected="true" /><select idref="V-237615" selected="true" /><select idref="V-237616" selected="true" /><select idref="V-237617" selected="true" /><select idref="V-237618" selected="true" /><select idref="V-237619" selected="true" /><select idref="V-237620" selected="true" /><select idref="V-237621" selected="true" /><select idref="V-237622" selected="true" /><select idref="V-237623" selected="true" /><select idref="V-251719" selected="true" /><select idref="V-251720" selected="true" /><select idref="V-251721" selected="true" /><select idref="V-251722" selected="true" /><select idref="V-255914" selected="true" /><select idref="V-255915" selected="true" /><select idref="V-255916" selected="true" /><select idref="V-256980" selected="true" /><select idref="V-256981" selected="true" /></Profile><Profile id="MAC-1_Public"><title>I - Mission Critical Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-217101" selected="true" /><select idref="V-217102" selected="true" /><select idref="V-217103" selected="true" /><select idref="V-217104" selected="true" /><select idref="V-217105" selected="true" /><select idref="V-217106" selected="true" /><select idref="V-217107" selected="true" /><select idref="V-217108" selected="true" /><select idref="V-217109" selected="true" /><select idref="V-217110" selected="true" /><select idref="V-217111" selected="true" /><select idref="V-217112" selected="true" /><select idref="V-217113" selected="true" /><select idref="V-217114" selected="true" /><select idref="V-217116" selected="true" /><select idref="V-217117" selected="true" /><select idref="V-217118" selected="true" /><select idref="V-217119" selected="true" /><select idref="V-217120" selected="true" /><select idref="V-217121" selected="true" /><select idref="V-217122" selected="true" /><select idref="V-217123" selected="true" /><select idref="V-217124" selected="true" /><select idref="V-217125" selected="true" /><select idref="V-217126" selected="true" /><select idref="V-217127" selected="true" /><select idref="V-217128" selected="true" /><select idref="V-217129" selected="true" /><select idref="V-217130" selected="true" /><select idref="V-217131" selected="true" /><select idref="V-217134" selected="true" /><select idref="V-217135" selected="true" /><select idref="V-217136" selected="true" /><select idref="V-217138" selected="true" /><select idref="V-217139" selected="true" /><select idref="V-217141" selected="true" /><select idref="V-217142" selected="true" /><select idref="V-217143" selected="true" /><select idref="V-217144" selected="true" /><select idref="V-217145" selected="true" /><select idref="V-217146" selected="true" /><select idref="V-217147" selected="true" /><select idref="V-217148" selected="true" /><select idref="V-217149" selected="true" /><select idref="V-217150" selected="true" /><select idref="V-217151" selected="true" /><select idref="V-217152" selected="true" /><select idref="V-217153" selected="true" /><select idref="V-217154" selected="true" /><select idref="V-217155" selected="true" /><select idref="V-217156" selected="true" /><select idref="V-217158" selected="true" /><select idref="V-217159" selected="true" /><select idref="V-217160" selected="true" /><select idref="V-217161" selected="true" /><select idref="V-217162" selected="true" /><select idref="V-217163" selected="true" /><select idref="V-217164" selected="true" /><select idref="V-217166" selected="true" /><select idref="V-217167" selected="true" /><select idref="V-217168" selected="true" /><select idref="V-217169" selected="true" /><select idref="V-217170" selected="true" /><select idref="V-217171" selected="true" /><select idref="V-217172" selected="true" /><select idref="V-217173" selected="true" /><select idref="V-217174" selected="true" /><select idref="V-217175" selected="true" /><select idref="V-217176" selected="true" /><select idref="V-217177" selected="true" /><select idref="V-217178" selected="true" /><select idref="V-217179" selected="true" /><select idref="V-217180" selected="true" /><select idref="V-217181" selected="true" /><select idref="V-217182" selected="true" /><select idref="V-217183" selected="true" /><select idref="V-217184" selected="true" /><select idref="V-217185" selected="true" /><select idref="V-217186" selected="true" /><select idref="V-217188" selected="true" /><select idref="V-217189" selected="true" /><select idref="V-217190" selected="true" /><select idref="V-217191" selected="true" /><select idref="V-217192" selected="true" /><select idref="V-217193" selected="true" /><select idref="V-217194" selected="true" /><select idref="V-217195" selected="true" /><select idref="V-217196" selected="true" /><select idref="V-217197" selected="true" /><select idref="V-217198" selected="true" /><select idref="V-217199" selected="true" /><select idref="V-217200" selected="true" /><select idref="V-217201" selected="true" /><select idref="V-217202" selected="true" /><select idref="V-217203" selected="true" /><select idref="V-217204" selected="true" /><select idref="V-217205" selected="true" /><select idref="V-217206" selected="true" /><select idref="V-217207" selected="true" /><select idref="V-217208" selected="true" /><select idref="V-217209" selected="true" /><select idref="V-217210" selected="true" /><select idref="V-217211" selected="true" /><select idref="V-217212" selected="true" /><select idref="V-217213" selected="true" /><select idref="V-217214" selected="true" /><select idref="V-217215" selected="true" /><select idref="V-217216" selected="true" /><select idref="V-217217" selected="true" /><select idref="V-217218" selected="true" /><select idref="V-217223" selected="true" /><select idref="V-217227" selected="true" /><select idref="V-217230" selected="true" /><select idref="V-217236" selected="true" /><select idref="V-217237" selected="true" /><select idref="V-217238" selected="true" /><select idref="V-217239" selected="true" /><select idref="V-217240" selected="true" /><select idref="V-217241" selected="true" /><select idref="V-217242" selected="true" /><select idref="V-217243" selected="true" /><select idref="V-217244" selected="true" /><select idref="V-217245" selected="true" /><select idref="V-217246" selected="true" /><select idref="V-217247" selected="true" /><select idref="V-217248" selected="true" /><select idref="V-217249" selected="true" /><select idref="V-217250" selected="true" /><select idref="V-217251" selected="true" /><select idref="V-217252" selected="true" /><select idref="V-217253" selected="true" /><select idref="V-217254" selected="true" /><select idref="V-217255" selected="true" /><select idref="V-217257" selected="true" /><select idref="V-217258" selected="true" /><select idref="V-217260" selected="true" /><select idref="V-217261" selected="true" /><select idref="V-217262" selected="true" /><select idref="V-217263" selected="true" /><select idref="V-217264" selected="true" /><select idref="V-217265" selected="true" /><select idref="V-217266" selected="true" /><select idref="V-217267" selected="true" /><select idref="V-217268" selected="true" /><select idref="V-217269" selected="true" /><select idref="V-217270" selected="true" /><select idref="V-217271" selected="true" /><select idref="V-217272" selected="true" /><select idref="V-217273" selected="true" /><select idref="V-217274" selected="true" /><select idref="V-217275" selected="true" /><select idref="V-217276" selected="true" /><select idref="V-217277" selected="true" /><select idref="V-217278" selected="true" /><select idref="V-217279" selected="true" /><select idref="V-217280" selected="true" /><select idref="V-217281" selected="true" /><select idref="V-217282" selected="true" /><select idref="V-217283" selected="true" /><select idref="V-217284" selected="true" /><select idref="V-217285" selected="true" /><select idref="V-217286" selected="true" /><select idref="V-217287" selected="true" /><select idref="V-217288" selected="true" /><select idref="V-217289" selected="true" /><select idref="V-217290" selected="true" /><select idref="V-217291" selected="true" /><select idref="V-217292" selected="true" /><select idref="V-217293" selected="true" /><select idref="V-217294" selected="true" /><select idref="V-217295" selected="true" /><select idref="V-217296" selected="true" /><select idref="V-217297" selected="true" /><select idref="V-217298" selected="true" /><select idref="V-217299" selected="true" /><select idref="V-217300" selected="true" /><select idref="V-217301" selected="true" /><select idref="V-217302" selected="true" /><select idref="V-222386" selected="true" /><select idref="V-233308" selected="true" /><select idref="V-237603" selected="true" /><select idref="V-237604" selected="true" /><select idref="V-237605" selected="true" /><select idref="V-237606" selected="true" /><select idref="V-237607" selected="true" /><select idref="V-237608" selected="true" /><select idref="V-237609" selected="true" /><select idref="V-237610" selected="true" /><select idref="V-237611" selected="true" /><select idref="V-237612" selected="true" /><select idref="V-237613" selected="true" /><select idref="V-237614" selected="true" /><select idref="V-237615" selected="true" /><select idref="V-237616" selected="true" /><select idref="V-237617" selected="true" /><select idref="V-237618" selected="true" /><select idref="V-237619" selected="true" /><select idref="V-237620" selected="true" /><select idref="V-237621" selected="true" /><select idref="V-237622" selected="true" /><select idref="V-237623" selected="true" /><select idref="V-251719" selected="true" /><select idref="V-251720" selected="true" /><select idref="V-251721" selected="true" /><select idref="V-251722" selected="true" /><select idref="V-255914" selected="true" /><select idref="V-255915" selected="true" /><select idref="V-255916" selected="true" /><select idref="V-256980" selected="true" /><select idref="V-256981" selected="true" /></Profile><Profile id="MAC-1_Sensitive"><title>I - Mission Critical Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-217101" selected="true" /><select idref="V-217102" selected="true" /><select idref="V-217103" selected="true" /><select idref="V-217104" selected="true" /><select idref="V-217105" selected="true" /><select idref="V-217106" selected="true" /><select idref="V-217107" selected="true" /><select idref="V-217108" selected="true" /><select idref="V-217109" selected="true" /><select idref="V-217110" selected="true" /><select idref="V-217111" selected="true" /><select idref="V-217112" selected="true" /><select idref="V-217113" selected="true" /><select idref="V-217114" selected="true" /><select idref="V-217116" selected="true" /><select idref="V-217117" selected="true" /><select idref="V-217118" selected="true" /><select idref="V-217119" selected="true" /><select idref="V-217120" selected="true" /><select idref="V-217121" selected="true" /><select idref="V-217122" selected="true" /><select idref="V-217123" selected="true" /><select idref="V-217124" selected="true" /><select idref="V-217125" selected="true" /><select idref="V-217126" selected="true" /><select idref="V-217127" selected="true" /><select idref="V-217128" selected="true" /><select idref="V-217129" selected="true" /><select idref="V-217130" selected="true" /><select idref="V-217131" selected="true" /><select idref="V-217134" selected="true" /><select idref="V-217135" selected="true" /><select idref="V-217136" selected="true" /><select idref="V-217138" selected="true" /><select idref="V-217139" selected="true" /><select idref="V-217141" selected="true" /><select idref="V-217142" selected="true" /><select idref="V-217143" selected="true" /><select idref="V-217144" selected="true" /><select idref="V-217145" selected="true" /><select idref="V-217146" selected="true" /><select idref="V-217147" selected="true" /><select idref="V-217148" selected="true" /><select idref="V-217149" selected="true" /><select idref="V-217150" selected="true" /><select idref="V-217151" selected="true" /><select idref="V-217152" selected="true" /><select idref="V-217153" selected="true" /><select idref="V-217154" selected="true" /><select idref="V-217155" selected="true" /><select idref="V-217156" selected="true" /><select idref="V-217158" selected="true" /><select idref="V-217159" selected="true" /><select idref="V-217160" selected="true" /><select idref="V-217161" selected="true" /><select idref="V-217162" selected="true" /><select idref="V-217163" selected="true" /><select idref="V-217164" selected="true" /><select idref="V-217166" selected="true" /><select idref="V-217167" selected="true" /><select idref="V-217168" selected="true" /><select idref="V-217169" selected="true" /><select idref="V-217170" selected="true" /><select idref="V-217171" selected="true" /><select idref="V-217172" selected="true" /><select idref="V-217173" selected="true" /><select idref="V-217174" selected="true" /><select idref="V-217175" selected="true" /><select idref="V-217176" selected="true" /><select idref="V-217177" selected="true" /><select idref="V-217178" selected="true" /><select idref="V-217179" selected="true" /><select idref="V-217180" selected="true" /><select idref="V-217181" selected="true" /><select idref="V-217182" selected="true" /><select idref="V-217183" selected="true" /><select idref="V-217184" selected="true" /><select idref="V-217185" selected="true" /><select idref="V-217186" selected="true" /><select idref="V-217188" selected="true" /><select idref="V-217189" selected="true" /><select idref="V-217190" selected="true" /><select idref="V-217191" selected="true" /><select idref="V-217192" selected="true" /><select idref="V-217193" selected="true" /><select idref="V-217194" selected="true" /><select idref="V-217195" selected="true" /><select idref="V-217196" selected="true" /><select idref="V-217197" selected="true" /><select idref="V-217198" selected="true" /><select idref="V-217199" selected="true" /><select idref="V-217200" selected="true" /><select idref="V-217201" selected="true" /><select idref="V-217202" selected="true" /><select idref="V-217203" selected="true" /><select idref="V-217204" selected="true" /><select idref="V-217205" selected="true" /><select idref="V-217206" selected="true" /><select idref="V-217207" selected="true" /><select idref="V-217208" selected="true" /><select idref="V-217209" selected="true" /><select idref="V-217210" selected="true" /><select idref="V-217211" selected="true" /><select idref="V-217212" selected="true" /><select idref="V-217213" selected="true" /><select idref="V-217214" selected="true" /><select idref="V-217215" selected="true" /><select idref="V-217216" selected="true" /><select idref="V-217217" selected="true" /><select idref="V-217218" selected="true" /><select idref="V-217223" selected="true" /><select idref="V-217227" selected="true" /><select idref="V-217230" selected="true" /><select idref="V-217236" selected="true" /><select idref="V-217237" selected="true" /><select idref="V-217238" selected="true" /><select idref="V-217239" selected="true" /><select idref="V-217240" selected="true" /><select idref="V-217241" selected="true" /><select idref="V-217242" selected="true" /><select idref="V-217243" selected="true" /><select idref="V-217244" selected="true" /><select idref="V-217245" selected="true" /><select idref="V-217246" selected="true" /><select idref="V-217247" selected="true" /><select idref="V-217248" selected="true" /><select idref="V-217249" selected="true" /><select idref="V-217250" selected="true" /><select idref="V-217251" selected="true" /><select idref="V-217252" selected="true" /><select idref="V-217253" selected="true" /><select idref="V-217254" selected="true" /><select idref="V-217255" selected="true" /><select idref="V-217257" selected="true" /><select idref="V-217258" selected="true" /><select idref="V-217260" selected="true" /><select idref="V-217261" selected="true" /><select idref="V-217262" selected="true" /><select idref="V-217263" selected="true" /><select idref="V-217264" selected="true" /><select idref="V-217265" selected="true" /><select idref="V-217266" selected="true" /><select idref="V-217267" selected="true" /><select idref="V-217268" selected="true" /><select idref="V-217269" selected="true" /><select idref="V-217270" selected="true" /><select idref="V-217271" selected="true" /><select idref="V-217272" selected="true" /><select idref="V-217273" selected="true" /><select idref="V-217274" selected="true" /><select idref="V-217275" selected="true" /><select idref="V-217276" selected="true" /><select idref="V-217277" selected="true" /><select idref="V-217278" selected="true" /><select idref="V-217279" selected="true" /><select idref="V-217280" selected="true" /><select idref="V-217281" selected="true" /><select idref="V-217282" selected="true" /><select idref="V-217283" selected="true" /><select idref="V-217284" selected="true" /><select idref="V-217285" selected="true" /><select idref="V-217286" selected="true" /><select idref="V-217287" selected="true" /><select idref="V-217288" selected="true" /><select idref="V-217289" selected="true" /><select idref="V-217290" selected="true" /><select idref="V-217291" selected="true" /><select idref="V-217292" selected="true" /><select idref="V-217293" selected="true" /><select idref="V-217294" selected="true" /><select idref="V-217295" selected="true" /><select idref="V-217296" selected="true" /><select idref="V-217297" selected="true" /><select idref="V-217298" selected="true" /><select idref="V-217299" selected="true" /><select idref="V-217300" selected="true" /><select idref="V-217301" selected="true" /><select idref="V-217302" selected="true" /><select idref="V-222386" selected="true" /><select idref="V-233308" selected="true" /><select idref="V-237603" selected="true" /><select idref="V-237604" selected="true" /><select idref="V-237605" selected="true" /><select idref="V-237606" selected="true" /><select idref="V-237607" selected="true" /><select idref="V-237608" selected="true" /><select idref="V-237609" selected="true" /><select idref="V-237610" selected="true" /><select idref="V-237611" selected="true" /><select idref="V-237612" selected="true" /><select idref="V-237613" selected="true" /><select idref="V-237614" selected="true" /><select idref="V-237615" selected="true" /><select idref="V-237616" selected="true" /><select idref="V-237617" selected="true" /><select idref="V-237618" selected="true" /><select idref="V-237619" selected="true" /><select idref="V-237620" selected="true" /><select idref="V-237621" selected="true" /><select idref="V-237622" selected="true" /><select idref="V-237623" selected="true" /><select idref="V-251719" selected="true" /><select idref="V-251720" selected="true" /><select idref="V-251721" selected="true" /><select idref="V-251722" selected="true" /><select idref="V-255914" selected="true" /><select idref="V-255915" selected="true" /><select idref="V-255916" selected="true" /><select idref="V-256980" selected="true" /><select idref="V-256981" selected="true" /></Profile><Profile id="MAC-2_Classified"><title>II - Mission Support Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-217101" selected="true" /><select idref="V-217102" selected="true" /><select idref="V-217103" selected="true" /><select idref="V-217104" selected="true" /><select idref="V-217105" selected="true" /><select idref="V-217106" selected="true" /><select idref="V-217107" selected="true" /><select idref="V-217108" selected="true" /><select idref="V-217109" selected="true" /><select idref="V-217110" selected="true" /><select idref="V-217111" selected="true" /><select idref="V-217112" selected="true" /><select idref="V-217113" selected="true" /><select idref="V-217114" selected="true" /><select idref="V-217116" selected="true" /><select idref="V-217117" selected="true" /><select idref="V-217118" selected="true" /><select idref="V-217119" selected="true" /><select idref="V-217120" selected="true" /><select idref="V-217121" selected="true" /><select idref="V-217122" selected="true" /><select idref="V-217123" selected="true" /><select idref="V-217124" selected="true" /><select idref="V-217125" selected="true" /><select idref="V-217126" selected="true" /><select idref="V-217127" selected="true" /><select idref="V-217128" selected="true" /><select idref="V-217129" selected="true" /><select idref="V-217130" selected="true" /><select idref="V-217131" selected="true" /><select idref="V-217134" selected="true" /><select idref="V-217135" selected="true" /><select idref="V-217136" selected="true" /><select idref="V-217138" selected="true" /><select idref="V-217139" selected="true" /><select idref="V-217141" selected="true" /><select idref="V-217142" selected="true" /><select idref="V-217143" selected="true" /><select idref="V-217144" selected="true" /><select idref="V-217145" selected="true" /><select idref="V-217146" selected="true" /><select idref="V-217147" selected="true" /><select idref="V-217148" selected="true" /><select idref="V-217149" selected="true" /><select idref="V-217150" selected="true" /><select idref="V-217151" selected="true" /><select idref="V-217152" selected="true" /><select idref="V-217153" selected="true" /><select idref="V-217154" selected="true" /><select idref="V-217155" selected="true" /><select idref="V-217156" selected="true" /><select idref="V-217158" selected="true" /><select idref="V-217159" selected="true" /><select idref="V-217160" selected="true" /><select idref="V-217161" selected="true" /><select idref="V-217162" selected="true" /><select idref="V-217163" selected="true" /><select idref="V-217164" selected="true" /><select idref="V-217166" selected="true" /><select idref="V-217167" selected="true" /><select idref="V-217168" selected="true" /><select idref="V-217169" selected="true" /><select idref="V-217170" selected="true" /><select idref="V-217171" selected="true" /><select idref="V-217172" selected="true" /><select idref="V-217173" selected="true" /><select idref="V-217174" selected="true" /><select idref="V-217175" selected="true" /><select idref="V-217176" selected="true" /><select idref="V-217177" selected="true" /><select idref="V-217178" selected="true" /><select idref="V-217179" selected="true" /><select idref="V-217180" selected="true" /><select idref="V-217181" selected="true" /><select idref="V-217182" selected="true" /><select idref="V-217183" selected="true" /><select idref="V-217184" selected="true" /><select idref="V-217185" selected="true" /><select idref="V-217186" selected="true" /><select idref="V-217188" selected="true" /><select idref="V-217189" selected="true" /><select idref="V-217190" selected="true" /><select idref="V-217191" selected="true" /><select idref="V-217192" selected="true" /><select idref="V-217193" selected="true" /><select idref="V-217194" selected="true" /><select idref="V-217195" selected="true" /><select idref="V-217196" selected="true" /><select idref="V-217197" selected="true" /><select idref="V-217198" selected="true" /><select idref="V-217199" selected="true" /><select idref="V-217200" selected="true" /><select idref="V-217201" selected="true" /><select idref="V-217202" selected="true" /><select idref="V-217203" selected="true" /><select idref="V-217204" selected="true" /><select idref="V-217205" selected="true" /><select idref="V-217206" selected="true" /><select idref="V-217207" selected="true" /><select idref="V-217208" selected="true" /><select idref="V-217209" selected="true" /><select idref="V-217210" selected="true" /><select idref="V-217211" selected="true" /><select idref="V-217212" selected="true" /><select idref="V-217213" selected="true" /><select idref="V-217214" selected="true" /><select idref="V-217215" selected="true" /><select idref="V-217216" selected="true" /><select idref="V-217217" selected="true" /><select idref="V-217218" selected="true" /><select idref="V-217223" selected="true" /><select idref="V-217227" selected="true" /><select idref="V-217230" selected="true" /><select idref="V-217236" selected="true" /><select idref="V-217237" selected="true" /><select idref="V-217238" selected="true" /><select idref="V-217239" selected="true" /><select idref="V-217240" selected="true" /><select idref="V-217241" selected="true" /><select idref="V-217242" selected="true" /><select idref="V-217243" selected="true" /><select idref="V-217244" selected="true" /><select idref="V-217245" selected="true" /><select idref="V-217246" selected="true" /><select idref="V-217247" selected="true" /><select idref="V-217248" selected="true" /><select idref="V-217249" selected="true" /><select idref="V-217250" selected="true" /><select idref="V-217251" selected="true" /><select idref="V-217252" selected="true" /><select idref="V-217253" selected="true" /><select idref="V-217254" selected="true" /><select idref="V-217255" selected="true" /><select idref="V-217257" selected="true" /><select idref="V-217258" selected="true" /><select idref="V-217260" selected="true" /><select idref="V-217261" selected="true" /><select idref="V-217262" selected="true" /><select idref="V-217263" selected="true" /><select idref="V-217264" selected="true" /><select idref="V-217265" selected="true" /><select idref="V-217266" selected="true" /><select idref="V-217267" selected="true" /><select idref="V-217268" selected="true" /><select idref="V-217269" selected="true" /><select idref="V-217270" selected="true" /><select idref="V-217271" selected="true" /><select idref="V-217272" selected="true" /><select idref="V-217273" selected="true" /><select idref="V-217274" selected="true" /><select idref="V-217275" selected="true" /><select idref="V-217276" selected="true" /><select idref="V-217277" selected="true" /><select idref="V-217278" selected="true" /><select idref="V-217279" selected="true" /><select idref="V-217280" selected="true" /><select idref="V-217281" selected="true" /><select idref="V-217282" selected="true" /><select idref="V-217283" selected="true" /><select idref="V-217284" selected="true" /><select idref="V-217285" selected="true" /><select idref="V-217286" selected="true" /><select idref="V-217287" selected="true" /><select idref="V-217288" selected="true" /><select idref="V-217289" selected="true" /><select idref="V-217290" selected="true" /><select idref="V-217291" selected="true" /><select idref="V-217292" selected="true" /><select idref="V-217293" selected="true" /><select idref="V-217294" selected="true" /><select idref="V-217295" selected="true" /><select idref="V-217296" selected="true" /><select idref="V-217297" selected="true" /><select idref="V-217298" selected="true" /><select idref="V-217299" selected="true" /><select idref="V-217300" selected="true" /><select idref="V-217301" selected="true" /><select idref="V-217302" selected="true" /><select idref="V-222386" selected="true" /><select idref="V-233308" selected="true" /><select idref="V-237603" selected="true" /><select idref="V-237604" selected="true" /><select idref="V-237605" selected="true" /><select idref="V-237606" selected="true" /><select idref="V-237607" selected="true" /><select idref="V-237608" selected="true" /><select idref="V-237609" selected="true" /><select idref="V-237610" selected="true" /><select idref="V-237611" selected="true" /><select idref="V-237612" selected="true" /><select idref="V-237613" selected="true" /><select idref="V-237614" selected="true" /><select idref="V-237615" selected="true" /><select idref="V-237616" selected="true" /><select idref="V-237617" selected="true" /><select idref="V-237618" selected="true" /><select idref="V-237619" selected="true" /><select idref="V-237620" selected="true" /><select idref="V-237621" selected="true" /><select idref="V-237622" selected="true" /><select idref="V-237623" selected="true" /><select idref="V-251719" selected="true" /><select idref="V-251720" selected="true" /><select idref="V-251721" selected="true" /><select idref="V-251722" selected="true" /><select idref="V-255914" selected="true" /><select idref="V-255915" selected="true" /><select idref="V-255916" selected="true" /><select idref="V-256980" selected="true" /><select idref="V-256981" selected="true" /></Profile><Profile id="MAC-2_Public"><title>II - Mission Support Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-217101" selected="true" /><select idref="V-217102" selected="true" /><select idref="V-217103" selected="true" /><select idref="V-217104" selected="true" /><select idref="V-217105" selected="true" /><select idref="V-217106" selected="true" /><select idref="V-217107" selected="true" /><select idref="V-217108" selected="true" /><select idref="V-217109" selected="true" /><select idref="V-217110" selected="true" /><select idref="V-217111" selected="true" /><select idref="V-217112" selected="true" /><select idref="V-217113" selected="true" /><select idref="V-217114" selected="true" /><select idref="V-217116" selected="true" /><select idref="V-217117" selected="true" /><select idref="V-217118" selected="true" /><select idref="V-217119" selected="true" /><select idref="V-217120" selected="true" /><select idref="V-217121" selected="true" /><select idref="V-217122" selected="true" /><select idref="V-217123" selected="true" /><select idref="V-217124" selected="true" /><select idref="V-217125" selected="true" /><select idref="V-217126" selected="true" /><select idref="V-217127" selected="true" /><select idref="V-217128" selected="true" /><select idref="V-217129" selected="true" /><select idref="V-217130" selected="true" /><select idref="V-217131" selected="true" /><select idref="V-217134" selected="true" /><select idref="V-217135" selected="true" /><select idref="V-217136" selected="true" /><select idref="V-217138" selected="true" /><select idref="V-217139" selected="true" /><select idref="V-217141" selected="true" /><select idref="V-217142" selected="true" /><select idref="V-217143" selected="true" /><select idref="V-217144" selected="true" /><select idref="V-217145" selected="true" /><select idref="V-217146" selected="true" /><select idref="V-217147" selected="true" /><select idref="V-217148" selected="true" /><select idref="V-217149" selected="true" /><select idref="V-217150" selected="true" /><select idref="V-217151" selected="true" /><select idref="V-217152" selected="true" /><select idref="V-217153" selected="true" /><select idref="V-217154" selected="true" /><select idref="V-217155" selected="true" /><select idref="V-217156" selected="true" /><select idref="V-217158" selected="true" /><select idref="V-217159" selected="true" /><select idref="V-217160" selected="true" /><select idref="V-217161" selected="true" /><select idref="V-217162" selected="true" /><select idref="V-217163" selected="true" /><select idref="V-217164" selected="true" /><select idref="V-217166" selected="true" /><select idref="V-217167" selected="true" /><select idref="V-217168" selected="true" /><select idref="V-217169" selected="true" /><select idref="V-217170" selected="true" /><select idref="V-217171" selected="true" /><select idref="V-217172" selected="true" /><select idref="V-217173" selected="true" /><select idref="V-217174" selected="true" /><select idref="V-217175" selected="true" /><select idref="V-217176" selected="true" /><select idref="V-217177" selected="true" /><select idref="V-217178" selected="true" /><select idref="V-217179" selected="true" /><select idref="V-217180" selected="true" /><select idref="V-217181" selected="true" /><select idref="V-217182" selected="true" /><select idref="V-217183" selected="true" /><select idref="V-217184" selected="true" /><select idref="V-217185" selected="true" /><select idref="V-217186" selected="true" /><select idref="V-217188" selected="true" /><select idref="V-217189" selected="true" /><select idref="V-217190" selected="true" /><select idref="V-217191" selected="true" /><select idref="V-217192" selected="true" /><select idref="V-217193" selected="true" /><select idref="V-217194" selected="true" /><select idref="V-217195" selected="true" /><select idref="V-217196" selected="true" /><select idref="V-217197" selected="true" /><select idref="V-217198" selected="true" /><select idref="V-217199" selected="true" /><select idref="V-217200" selected="true" /><select idref="V-217201" selected="true" /><select idref="V-217202" selected="true" /><select idref="V-217203" selected="true" /><select idref="V-217204" selected="true" /><select idref="V-217205" selected="true" /><select idref="V-217206" selected="true" /><select idref="V-217207" selected="true" /><select idref="V-217208" selected="true" /><select idref="V-217209" selected="true" /><select idref="V-217210" selected="true" /><select idref="V-217211" selected="true" /><select idref="V-217212" selected="true" /><select idref="V-217213" selected="true" /><select idref="V-217214" selected="true" /><select idref="V-217215" selected="true" /><select idref="V-217216" selected="true" /><select idref="V-217217" selected="true" /><select idref="V-217218" selected="true" /><select idref="V-217223" selected="true" /><select idref="V-217227" selected="true" /><select idref="V-217230" selected="true" /><select idref="V-217236" selected="true" /><select idref="V-217237" selected="true" /><select idref="V-217238" selected="true" /><select idref="V-217239" selected="true" /><select idref="V-217240" selected="true" /><select idref="V-217241" selected="true" /><select idref="V-217242" selected="true" /><select idref="V-217243" selected="true" /><select idref="V-217244" selected="true" /><select idref="V-217245" selected="true" /><select idref="V-217246" selected="true" /><select idref="V-217247" selected="true" /><select idref="V-217248" selected="true" /><select idref="V-217249" selected="true" /><select idref="V-217250" selected="true" /><select idref="V-217251" selected="true" /><select idref="V-217252" selected="true" /><select idref="V-217253" selected="true" /><select idref="V-217254" selected="true" /><select idref="V-217255" selected="true" /><select idref="V-217257" selected="true" /><select idref="V-217258" selected="true" /><select idref="V-217260" selected="true" /><select idref="V-217261" selected="true" /><select idref="V-217262" selected="true" /><select idref="V-217263" selected="true" /><select idref="V-217264" selected="true" /><select idref="V-217265" selected="true" /><select idref="V-217266" selected="true" /><select idref="V-217267" selected="true" /><select idref="V-217268" selected="true" /><select idref="V-217269" selected="true" /><select idref="V-217270" selected="true" /><select idref="V-217271" selected="true" /><select idref="V-217272" selected="true" /><select idref="V-217273" selected="true" /><select idref="V-217274" selected="true" /><select idref="V-217275" selected="true" /><select idref="V-217276" selected="true" /><select idref="V-217277" selected="true" /><select idref="V-217278" selected="true" /><select idref="V-217279" selected="true" /><select idref="V-217280" selected="true" /><select idref="V-217281" selected="true" /><select idref="V-217282" selected="true" /><select idref="V-217283" selected="true" /><select idref="V-217284" selected="true" /><select idref="V-217285" selected="true" /><select idref="V-217286" selected="true" /><select idref="V-217287" selected="true" /><select idref="V-217288" selected="true" /><select idref="V-217289" selected="true" /><select idref="V-217290" selected="true" /><select idref="V-217291" selected="true" /><select idref="V-217292" selected="true" /><select idref="V-217293" selected="true" /><select idref="V-217294" selected="true" /><select idref="V-217295" selected="true" /><select idref="V-217296" selected="true" /><select idref="V-217297" selected="true" /><select idref="V-217298" selected="true" /><select idref="V-217299" selected="true" /><select idref="V-217300" selected="true" /><select idref="V-217301" selected="true" /><select idref="V-217302" selected="true" /><select idref="V-222386" selected="true" /><select idref="V-233308" selected="true" /><select idref="V-237603" selected="true" /><select idref="V-237604" selected="true" /><select idref="V-237605" selected="true" /><select idref="V-237606" selected="true" /><select idref="V-237607" selected="true" /><select idref="V-237608" selected="true" /><select idref="V-237609" selected="true" /><select idref="V-237610" selected="true" /><select idref="V-237611" selected="true" /><select idref="V-237612" selected="true" /><select idref="V-237613" selected="true" /><select idref="V-237614" selected="true" /><select idref="V-237615" selected="true" /><select idref="V-237616" selected="true" /><select idref="V-237617" selected="true" /><select idref="V-237618" selected="true" /><select idref="V-237619" selected="true" /><select idref="V-237620" selected="true" /><select idref="V-237621" selected="true" /><select idref="V-237622" selected="true" /><select idref="V-237623" selected="true" /><select idref="V-251719" selected="true" /><select idref="V-251720" selected="true" /><select idref="V-251721" selected="true" /><select idref="V-251722" selected="true" /><select idref="V-255914" selected="true" /><select idref="V-255915" selected="true" /><select idref="V-255916" selected="true" /><select idref="V-256980" selected="true" /><select idref="V-256981" selected="true" /></Profile><Profile id="MAC-2_Sensitive"><title>II - Mission Support Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-217101" selected="true" /><select idref="V-217102" selected="true" /><select idref="V-217103" selected="true" /><select idref="V-217104" selected="true" /><select idref="V-217105" selected="true" /><select idref="V-217106" selected="true" /><select idref="V-217107" selected="true" /><select idref="V-217108" selected="true" /><select idref="V-217109" selected="true" /><select idref="V-217110" selected="true" /><select idref="V-217111" selected="true" /><select idref="V-217112" selected="true" /><select idref="V-217113" selected="true" /><select idref="V-217114" selected="true" /><select idref="V-217116" selected="true" /><select idref="V-217117" selected="true" /><select idref="V-217118" selected="true" /><select idref="V-217119" selected="true" /><select idref="V-217120" selected="true" /><select idref="V-217121" selected="true" /><select idref="V-217122" selected="true" /><select idref="V-217123" selected="true" /><select idref="V-217124" selected="true" /><select idref="V-217125" selected="true" /><select idref="V-217126" selected="true" /><select idref="V-217127" selected="true" /><select idref="V-217128" selected="true" /><select idref="V-217129" selected="true" /><select idref="V-217130" selected="true" /><select idref="V-217131" selected="true" /><select idref="V-217134" selected="true" /><select idref="V-217135" selected="true" /><select idref="V-217136" selected="true" /><select idref="V-217138" selected="true" /><select idref="V-217139" selected="true" /><select idref="V-217141" selected="true" /><select idref="V-217142" selected="true" /><select idref="V-217143" selected="true" /><select idref="V-217144" selected="true" /><select idref="V-217145" selected="true" /><select idref="V-217146" selected="true" /><select idref="V-217147" selected="true" /><select idref="V-217148" selected="true" /><select idref="V-217149" selected="true" /><select idref="V-217150" selected="true" /><select idref="V-217151" selected="true" /><select idref="V-217152" selected="true" /><select idref="V-217153" selected="true" /><select idref="V-217154" selected="true" /><select idref="V-217155" selected="true" /><select idref="V-217156" selected="true" /><select idref="V-217158" selected="true" /><select idref="V-217159" selected="true" /><select idref="V-217160" selected="true" /><select idref="V-217161" selected="true" /><select idref="V-217162" selected="true" /><select idref="V-217163" selected="true" /><select idref="V-217164" selected="true" /><select idref="V-217166" selected="true" /><select idref="V-217167" selected="true" /><select idref="V-217168" selected="true" /><select idref="V-217169" selected="true" /><select idref="V-217170" selected="true" /><select idref="V-217171" selected="true" /><select idref="V-217172" selected="true" /><select idref="V-217173" selected="true" /><select idref="V-217174" selected="true" /><select idref="V-217175" selected="true" /><select idref="V-217176" selected="true" /><select idref="V-217177" selected="true" /><select idref="V-217178" selected="true" /><select idref="V-217179" selected="true" /><select idref="V-217180" selected="true" /><select idref="V-217181" selected="true" /><select idref="V-217182" selected="true" /><select idref="V-217183" selected="true" /><select idref="V-217184" selected="true" /><select idref="V-217185" selected="true" /><select idref="V-217186" selected="true" /><select idref="V-217188" selected="true" /><select idref="V-217189" selected="true" /><select idref="V-217190" selected="true" /><select idref="V-217191" selected="true" /><select idref="V-217192" selected="true" /><select idref="V-217193" selected="true" /><select idref="V-217194" selected="true" /><select idref="V-217195" selected="true" /><select idref="V-217196" selected="true" /><select idref="V-217197" selected="true" /><select idref="V-217198" selected="true" /><select idref="V-217199" selected="true" /><select idref="V-217200" selected="true" /><select idref="V-217201" selected="true" /><select idref="V-217202" selected="true" /><select idref="V-217203" selected="true" /><select idref="V-217204" selected="true" /><select idref="V-217205" selected="true" /><select idref="V-217206" selected="true" /><select idref="V-217207" selected="true" /><select idref="V-217208" selected="true" /><select idref="V-217209" selected="true" /><select idref="V-217210" selected="true" /><select idref="V-217211" selected="true" /><select idref="V-217212" selected="true" /><select idref="V-217213" selected="true" /><select idref="V-217214" selected="true" /><select idref="V-217215" selected="true" /><select idref="V-217216" selected="true" /><select idref="V-217217" selected="true" /><select idref="V-217218" selected="true" /><select idref="V-217223" selected="true" /><select idref="V-217227" selected="true" /><select idref="V-217230" selected="true" /><select idref="V-217236" selected="true" /><select idref="V-217237" selected="true" /><select idref="V-217238" selected="true" /><select idref="V-217239" selected="true" /><select idref="V-217240" selected="true" /><select idref="V-217241" selected="true" /><select idref="V-217242" selected="true" /><select idref="V-217243" selected="true" /><select idref="V-217244" selected="true" /><select idref="V-217245" selected="true" /><select idref="V-217246" selected="true" /><select idref="V-217247" selected="true" /><select idref="V-217248" selected="true" /><select idref="V-217249" selected="true" /><select idref="V-217250" selected="true" /><select idref="V-217251" selected="true" /><select idref="V-217252" selected="true" /><select idref="V-217253" selected="true" /><select idref="V-217254" selected="true" /><select idref="V-217255" selected="true" /><select idref="V-217257" selected="true" /><select idref="V-217258" selected="true" /><select idref="V-217260" selected="true" /><select idref="V-217261" selected="true" /><select idref="V-217262" selected="true" /><select idref="V-217263" selected="true" /><select idref="V-217264" selected="true" /><select idref="V-217265" selected="true" /><select idref="V-217266" selected="true" /><select idref="V-217267" selected="true" /><select idref="V-217268" selected="true" /><select idref="V-217269" selected="true" /><select idref="V-217270" selected="true" /><select idref="V-217271" selected="true" /><select idref="V-217272" selected="true" /><select idref="V-217273" selected="true" /><select idref="V-217274" selected="true" /><select idref="V-217275" selected="true" /><select idref="V-217276" selected="true" /><select idref="V-217277" selected="true" /><select idref="V-217278" selected="true" /><select idref="V-217279" selected="true" /><select idref="V-217280" selected="true" /><select idref="V-217281" selected="true" /><select idref="V-217282" selected="true" /><select idref="V-217283" selected="true" /><select idref="V-217284" selected="true" /><select idref="V-217285" selected="true" /><select idref="V-217286" selected="true" /><select idref="V-217287" selected="true" /><select idref="V-217288" selected="true" /><select idref="V-217289" selected="true" /><select idref="V-217290" selected="true" /><select idref="V-217291" selected="true" /><select idref="V-217292" selected="true" /><select idref="V-217293" selected="true" /><select idref="V-217294" selected="true" /><select idref="V-217295" selected="true" /><select idref="V-217296" selected="true" /><select idref="V-217297" selected="true" /><select idref="V-217298" selected="true" /><select idref="V-217299" selected="true" /><select idref="V-217300" selected="true" /><select idref="V-217301" selected="true" /><select idref="V-217302" selected="true" /><select idref="V-222386" selected="true" /><select idref="V-233308" selected="true" /><select idref="V-237603" selected="true" /><select idref="V-237604" selected="true" /><select idref="V-237605" selected="true" /><select idref="V-237606" selected="true" /><select idref="V-237607" selected="true" /><select idref="V-237608" selected="true" /><select idref="V-237609" selected="true" /><select idref="V-237610" selected="true" /><select idref="V-237611" selected="true" /><select idref="V-237612" selected="true" /><select idref="V-237613" selected="true" /><select idref="V-237614" selected="true" /><select idref="V-237615" selected="true" /><select idref="V-237616" selected="true" /><select idref="V-237617" selected="true" /><select idref="V-237618" selected="true" /><select idref="V-237619" selected="true" /><select idref="V-237620" selected="true" /><select idref="V-237621" selected="true" /><select idref="V-237622" selected="true" /><select idref="V-237623" selected="true" /><select idref="V-251719" selected="true" /><select idref="V-251720" selected="true" /><select idref="V-251721" selected="true" /><select idref="V-251722" selected="true" /><select idref="V-255914" selected="true" /><select idref="V-255915" selected="true" /><select idref="V-255916" selected="true" /><select idref="V-256980" selected="true" /><select idref="V-256981" selected="true" /></Profile><Profile id="MAC-3_Classified"><title>III - Administrative Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-217101" selected="true" /><select idref="V-217102" selected="true" /><select idref="V-217103" selected="true" /><select idref="V-217104" selected="true" /><select idref="V-217105" selected="true" /><select idref="V-217106" selected="true" /><select idref="V-217107" selected="true" /><select idref="V-217108" selected="true" /><select idref="V-217109" selected="true" /><select idref="V-217110" selected="true" /><select idref="V-217111" selected="true" /><select idref="V-217112" selected="true" /><select idref="V-217113" selected="true" /><select idref="V-217114" selected="true" /><select idref="V-217116" selected="true" /><select idref="V-217117" selected="true" /><select idref="V-217118" selected="true" /><select idref="V-217119" selected="true" /><select idref="V-217120" selected="true" /><select idref="V-217121" selected="true" /><select idref="V-217122" selected="true" /><select idref="V-217123" selected="true" /><select idref="V-217124" selected="true" /><select idref="V-217125" selected="true" /><select idref="V-217126" selected="true" /><select idref="V-217127" selected="true" /><select idref="V-217128" selected="true" /><select idref="V-217129" selected="true" /><select idref="V-217130" selected="true" /><select idref="V-217131" selected="true" /><select idref="V-217134" selected="true" /><select idref="V-217135" selected="true" /><select idref="V-217136" selected="true" /><select idref="V-217138" selected="true" /><select idref="V-217139" selected="true" /><select idref="V-217141" selected="true" /><select idref="V-217142" selected="true" /><select idref="V-217143" selected="true" /><select idref="V-217144" selected="true" /><select idref="V-217145" selected="true" /><select idref="V-217146" selected="true" /><select idref="V-217147" selected="true" /><select idref="V-217148" selected="true" /><select idref="V-217149" selected="true" /><select idref="V-217150" selected="true" /><select idref="V-217151" selected="true" /><select idref="V-217152" selected="true" /><select idref="V-217153" selected="true" /><select idref="V-217154" selected="true" /><select idref="V-217155" selected="true" /><select idref="V-217156" selected="true" /><select idref="V-217158" selected="true" /><select idref="V-217159" selected="true" /><select idref="V-217160" selected="true" /><select idref="V-217161" selected="true" /><select idref="V-217162" selected="true" /><select idref="V-217163" selected="true" /><select idref="V-217164" selected="true" /><select idref="V-217166" selected="true" /><select idref="V-217167" selected="true" /><select idref="V-217168" selected="true" /><select idref="V-217169" selected="true" /><select idref="V-217170" selected="true" /><select idref="V-217171" selected="true" /><select idref="V-217172" selected="true" /><select idref="V-217173" selected="true" /><select idref="V-217174" selected="true" /><select idref="V-217175" selected="true" /><select idref="V-217176" selected="true" /><select idref="V-217177" selected="true" /><select idref="V-217178" selected="true" /><select idref="V-217179" selected="true" /><select idref="V-217180" selected="true" /><select idref="V-217181" selected="true" /><select idref="V-217182" selected="true" /><select idref="V-217183" selected="true" /><select idref="V-217184" selected="true" /><select idref="V-217185" selected="true" /><select idref="V-217186" selected="true" /><select idref="V-217188" selected="true" /><select idref="V-217189" selected="true" /><select idref="V-217190" selected="true" /><select idref="V-217191" selected="true" /><select idref="V-217192" selected="true" /><select idref="V-217193" selected="true" /><select idref="V-217194" selected="true" /><select idref="V-217195" selected="true" /><select idref="V-217196" selected="true" /><select idref="V-217197" selected="true" /><select idref="V-217198" selected="true" /><select idref="V-217199" selected="true" /><select idref="V-217200" selected="true" /><select idref="V-217201" selected="true" /><select idref="V-217202" selected="true" /><select idref="V-217203" selected="true" /><select idref="V-217204" selected="true" /><select idref="V-217205" selected="true" /><select idref="V-217206" selected="true" /><select idref="V-217207" selected="true" /><select idref="V-217208" selected="true" /><select idref="V-217209" selected="true" /><select idref="V-217210" selected="true" /><select idref="V-217211" selected="true" /><select idref="V-217212" selected="true" /><select idref="V-217213" selected="true" /><select idref="V-217214" selected="true" /><select idref="V-217215" selected="true" /><select idref="V-217216" selected="true" /><select idref="V-217217" selected="true" /><select idref="V-217218" selected="true" /><select idref="V-217223" selected="true" /><select idref="V-217227" selected="true" /><select idref="V-217230" selected="true" /><select idref="V-217236" selected="true" /><select idref="V-217237" selected="true" /><select idref="V-217238" selected="true" /><select idref="V-217239" selected="true" /><select idref="V-217240" selected="true" /><select idref="V-217241" selected="true" /><select idref="V-217242" selected="true" /><select idref="V-217243" selected="true" /><select idref="V-217244" selected="true" /><select idref="V-217245" selected="true" /><select idref="V-217246" selected="true" /><select idref="V-217247" selected="true" /><select idref="V-217248" selected="true" /><select idref="V-217249" selected="true" /><select idref="V-217250" selected="true" /><select idref="V-217251" selected="true" /><select idref="V-217252" selected="true" /><select idref="V-217253" selected="true" /><select idref="V-217254" selected="true" /><select idref="V-217255" selected="true" /><select idref="V-217257" selected="true" /><select idref="V-217258" selected="true" /><select idref="V-217260" selected="true" /><select idref="V-217261" selected="true" /><select idref="V-217262" selected="true" /><select idref="V-217263" selected="true" /><select idref="V-217264" selected="true" /><select idref="V-217265" selected="true" /><select idref="V-217266" selected="true" /><select idref="V-217267" selected="true" /><select idref="V-217268" selected="true" /><select idref="V-217269" selected="true" /><select idref="V-217270" selected="true" /><select idref="V-217271" selected="true" /><select idref="V-217272" selected="true" /><select idref="V-217273" selected="true" /><select idref="V-217274" selected="true" /><select idref="V-217275" selected="true" /><select idref="V-217276" selected="true" /><select idref="V-217277" selected="true" /><select idref="V-217278" selected="true" /><select idref="V-217279" selected="true" /><select idref="V-217280" selected="true" /><select idref="V-217281" selected="true" /><select idref="V-217282" selected="true" /><select idref="V-217283" selected="true" /><select idref="V-217284" selected="true" /><select idref="V-217285" selected="true" /><select idref="V-217286" selected="true" /><select idref="V-217287" selected="true" /><select idref="V-217288" selected="true" /><select idref="V-217289" selected="true" /><select idref="V-217290" selected="true" /><select idref="V-217291" selected="true" /><select idref="V-217292" selected="true" /><select idref="V-217293" selected="true" /><select idref="V-217294" selected="true" /><select idref="V-217295" selected="true" /><select idref="V-217296" selected="true" /><select idref="V-217297" selected="true" /><select idref="V-217298" selected="true" /><select idref="V-217299" selected="true" /><select idref="V-217300" selected="true" /><select idref="V-217301" selected="true" /><select idref="V-217302" selected="true" /><select idref="V-222386" selected="true" /><select idref="V-233308" selected="true" /><select idref="V-237603" selected="true" /><select idref="V-237604" selected="true" /><select idref="V-237605" selected="true" /><select idref="V-237606" selected="true" /><select idref="V-237607" selected="true" /><select idref="V-237608" selected="true" /><select idref="V-237609" selected="true" /><select idref="V-237610" selected="true" /><select idref="V-237611" selected="true" /><select idref="V-237612" selected="true" /><select idref="V-237613" selected="true" /><select idref="V-237614" selected="true" /><select idref="V-237615" selected="true" /><select idref="V-237616" selected="true" /><select idref="V-237617" selected="true" /><select idref="V-237618" selected="true" /><select idref="V-237619" selected="true" /><select idref="V-237620" selected="true" /><select idref="V-237621" selected="true" /><select idref="V-237622" selected="true" /><select idref="V-237623" selected="true" /><select idref="V-251719" selected="true" /><select idref="V-251720" selected="true" /><select idref="V-251721" selected="true" /><select idref="V-251722" selected="true" /><select idref="V-255914" selected="true" /><select idref="V-255915" selected="true" /><select idref="V-255916" selected="true" /><select idref="V-256980" selected="true" /><select idref="V-256981" selected="true" /></Profile><Profile id="MAC-3_Public"><title>III - Administrative Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-217101" selected="true" /><select idref="V-217102" selected="true" /><select idref="V-217103" selected="true" /><select idref="V-217104" selected="true" /><select idref="V-217105" selected="true" /><select idref="V-217106" selected="true" /><select idref="V-217107" selected="true" /><select idref="V-217108" selected="true" /><select idref="V-217109" selected="true" /><select idref="V-217110" selected="true" /><select idref="V-217111" selected="true" /><select idref="V-217112" selected="true" /><select idref="V-217113" selected="true" /><select idref="V-217114" selected="true" /><select idref="V-217116" selected="true" /><select idref="V-217117" selected="true" /><select idref="V-217118" selected="true" /><select idref="V-217119" selected="true" /><select idref="V-217120" selected="true" /><select idref="V-217121" selected="true" /><select idref="V-217122" selected="true" /><select idref="V-217123" selected="true" /><select idref="V-217124" selected="true" /><select idref="V-217125" selected="true" /><select idref="V-217126" selected="true" /><select idref="V-217127" selected="true" /><select idref="V-217128" selected="true" /><select idref="V-217129" selected="true" /><select idref="V-217130" selected="true" /><select idref="V-217131" selected="true" /><select idref="V-217134" selected="true" /><select idref="V-217135" selected="true" /><select idref="V-217136" selected="true" /><select idref="V-217138" selected="true" /><select idref="V-217139" selected="true" /><select idref="V-217141" selected="true" /><select idref="V-217142" selected="true" /><select idref="V-217143" selected="true" /><select idref="V-217144" selected="true" /><select idref="V-217145" selected="true" /><select idref="V-217146" selected="true" /><select idref="V-217147" selected="true" /><select idref="V-217148" selected="true" /><select idref="V-217149" selected="true" /><select idref="V-217150" selected="true" /><select idref="V-217151" selected="true" /><select idref="V-217152" selected="true" /><select idref="V-217153" selected="true" /><select idref="V-217154" selected="true" /><select idref="V-217155" selected="true" /><select idref="V-217156" selected="true" /><select idref="V-217158" selected="true" /><select idref="V-217159" selected="true" /><select idref="V-217160" selected="true" /><select idref="V-217161" selected="true" /><select idref="V-217162" selected="true" /><select idref="V-217163" selected="true" /><select idref="V-217164" selected="true" /><select idref="V-217166" selected="true" /><select idref="V-217167" selected="true" /><select idref="V-217168" selected="true" /><select idref="V-217169" selected="true" /><select idref="V-217170" selected="true" /><select idref="V-217171" selected="true" /><select idref="V-217172" selected="true" /><select idref="V-217173" selected="true" /><select idref="V-217174" selected="true" /><select idref="V-217175" selected="true" /><select idref="V-217176" selected="true" /><select idref="V-217177" selected="true" /><select idref="V-217178" selected="true" /><select idref="V-217179" selected="true" /><select idref="V-217180" selected="true" /><select idref="V-217181" selected="true" /><select idref="V-217182" selected="true" /><select idref="V-217183" selected="true" /><select idref="V-217184" selected="true" /><select idref="V-217185" selected="true" /><select idref="V-217186" selected="true" /><select idref="V-217188" selected="true" /><select idref="V-217189" selected="true" /><select idref="V-217190" selected="true" /><select idref="V-217191" selected="true" /><select idref="V-217192" selected="true" /><select idref="V-217193" selected="true" /><select idref="V-217194" selected="true" /><select idref="V-217195" selected="true" /><select idref="V-217196" selected="true" /><select idref="V-217197" selected="true" /><select idref="V-217198" selected="true" /><select idref="V-217199" selected="true" /><select idref="V-217200" selected="true" /><select idref="V-217201" selected="true" /><select idref="V-217202" selected="true" /><select idref="V-217203" selected="true" /><select idref="V-217204" selected="true" /><select idref="V-217205" selected="true" /><select idref="V-217206" selected="true" /><select idref="V-217207" selected="true" /><select idref="V-217208" selected="true" /><select idref="V-217209" selected="true" /><select idref="V-217210" selected="true" /><select idref="V-217211" selected="true" /><select idref="V-217212" selected="true" /><select idref="V-217213" selected="true" /><select idref="V-217214" selected="true" /><select idref="V-217215" selected="true" /><select idref="V-217216" selected="true" /><select idref="V-217217" selected="true" /><select idref="V-217218" selected="true" /><select idref="V-217223" selected="true" /><select idref="V-217227" selected="true" /><select idref="V-217230" selected="true" /><select idref="V-217236" selected="true" /><select idref="V-217237" selected="true" /><select idref="V-217238" selected="true" /><select idref="V-217239" selected="true" /><select idref="V-217240" selected="true" /><select idref="V-217241" selected="true" /><select idref="V-217242" selected="true" /><select idref="V-217243" selected="true" /><select idref="V-217244" selected="true" /><select idref="V-217245" selected="true" /><select idref="V-217246" selected="true" /><select idref="V-217247" selected="true" /><select idref="V-217248" selected="true" /><select idref="V-217249" selected="true" /><select idref="V-217250" selected="true" /><select idref="V-217251" selected="true" /><select idref="V-217252" selected="true" /><select idref="V-217253" selected="true" /><select idref="V-217254" selected="true" /><select idref="V-217255" selected="true" /><select idref="V-217257" selected="true" /><select idref="V-217258" selected="true" /><select idref="V-217260" selected="true" /><select idref="V-217261" selected="true" /><select idref="V-217262" selected="true" /><select idref="V-217263" selected="true" /><select idref="V-217264" selected="true" /><select idref="V-217265" selected="true" /><select idref="V-217266" selected="true" /><select idref="V-217267" selected="true" /><select idref="V-217268" selected="true" /><select idref="V-217269" selected="true" /><select idref="V-217270" selected="true" /><select idref="V-217271" selected="true" /><select idref="V-217272" selected="true" /><select idref="V-217273" selected="true" /><select idref="V-217274" selected="true" /><select idref="V-217275" selected="true" /><select idref="V-217276" selected="true" /><select idref="V-217277" selected="true" /><select idref="V-217278" selected="true" /><select idref="V-217279" selected="true" /><select idref="V-217280" selected="true" /><select idref="V-217281" selected="true" /><select idref="V-217282" selected="true" /><select idref="V-217283" selected="true" /><select idref="V-217284" selected="true" /><select idref="V-217285" selected="true" /><select idref="V-217286" selected="true" /><select idref="V-217287" selected="true" /><select idref="V-217288" selected="true" /><select idref="V-217289" selected="true" /><select idref="V-217290" selected="true" /><select idref="V-217291" selected="true" /><select idref="V-217292" selected="true" /><select idref="V-217293" selected="true" /><select idref="V-217294" selected="true" /><select idref="V-217295" selected="true" /><select idref="V-217296" selected="true" /><select idref="V-217297" selected="true" /><select idref="V-217298" selected="true" /><select idref="V-217299" selected="true" /><select idref="V-217300" selected="true" /><select idref="V-217301" selected="true" /><select idref="V-217302" selected="true" /><select idref="V-222386" selected="true" /><select idref="V-233308" selected="true" /><select idref="V-237603" selected="true" /><select idref="V-237604" selected="true" /><select idref="V-237605" selected="true" /><select idref="V-237606" selected="true" /><select idref="V-237607" selected="true" /><select idref="V-237608" selected="true" /><select idref="V-237609" selected="true" /><select idref="V-237610" selected="true" /><select idref="V-237611" selected="true" /><select idref="V-237612" selected="true" /><select idref="V-237613" selected="true" /><select idref="V-237614" selected="true" /><select idref="V-237615" selected="true" /><select idref="V-237616" selected="true" /><select idref="V-237617" selected="true" /><select idref="V-237618" selected="true" /><select idref="V-237619" selected="true" /><select idref="V-237620" selected="true" /><select idref="V-237621" selected="true" /><select idref="V-237622" selected="true" /><select idref="V-237623" selected="true" /><select idref="V-251719" selected="true" /><select idref="V-251720" selected="true" /><select idref="V-251721" selected="true" /><select idref="V-251722" selected="true" /><select idref="V-255914" selected="true" /><select idref="V-255915" selected="true" /><select idref="V-255916" selected="true" /><select idref="V-256980" selected="true" /><select idref="V-256981" selected="true" /></Profile><Profile id="MAC-3_Sensitive"><title>III - Administrative Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-217101" selected="true" /><select idref="V-217102" selected="true" /><select idref="V-217103" selected="true" /><select idref="V-217104" selected="true" /><select idref="V-217105" selected="true" /><select idref="V-217106" selected="true" /><select idref="V-217107" selected="true" /><select idref="V-217108" selected="true" /><select idref="V-217109" selected="true" /><select idref="V-217110" selected="true" /><select idref="V-217111" selected="true" /><select idref="V-217112" selected="true" /><select idref="V-217113" selected="true" /><select idref="V-217114" selected="true" /><select idref="V-217116" selected="true" /><select idref="V-217117" selected="true" /><select idref="V-217118" selected="true" /><select idref="V-217119" selected="true" /><select idref="V-217120" selected="true" /><select idref="V-217121" selected="true" /><select idref="V-217122" selected="true" /><select idref="V-217123" selected="true" /><select idref="V-217124" selected="true" /><select idref="V-217125" selected="true" /><select idref="V-217126" selected="true" /><select idref="V-217127" selected="true" /><select idref="V-217128" selected="true" /><select idref="V-217129" selected="true" /><select idref="V-217130" selected="true" /><select idref="V-217131" selected="true" /><select idref="V-217134" selected="true" /><select idref="V-217135" selected="true" /><select idref="V-217136" selected="true" /><select idref="V-217138" selected="true" /><select idref="V-217139" selected="true" /><select idref="V-217141" selected="true" /><select idref="V-217142" selected="true" /><select idref="V-217143" selected="true" /><select idref="V-217144" selected="true" /><select idref="V-217145" selected="true" /><select idref="V-217146" selected="true" /><select idref="V-217147" selected="true" /><select idref="V-217148" selected="true" /><select idref="V-217149" selected="true" /><select idref="V-217150" selected="true" /><select idref="V-217151" selected="true" /><select idref="V-217152" selected="true" /><select idref="V-217153" selected="true" /><select idref="V-217154" selected="true" /><select idref="V-217155" selected="true" /><select idref="V-217156" selected="true" /><select idref="V-217158" selected="true" /><select idref="V-217159" selected="true" /><select idref="V-217160" selected="true" /><select idref="V-217161" selected="true" /><select idref="V-217162" selected="true" /><select idref="V-217163" selected="true" /><select idref="V-217164" selected="true" /><select idref="V-217166" selected="true" /><select idref="V-217167" selected="true" /><select idref="V-217168" selected="true" /><select idref="V-217169" selected="true" /><select idref="V-217170" selected="true" /><select idref="V-217171" selected="true" /><select idref="V-217172" selected="true" /><select idref="V-217173" selected="true" /><select idref="V-217174" selected="true" /><select idref="V-217175" selected="true" /><select idref="V-217176" selected="true" /><select idref="V-217177" selected="true" /><select idref="V-217178" selected="true" /><select idref="V-217179" selected="true" /><select idref="V-217180" selected="true" /><select idref="V-217181" selected="true" /><select idref="V-217182" selected="true" /><select idref="V-217183" selected="true" /><select idref="V-217184" selected="true" /><select idref="V-217185" selected="true" /><select idref="V-217186" selected="true" /><select idref="V-217188" selected="true" /><select idref="V-217189" selected="true" /><select idref="V-217190" selected="true" /><select idref="V-217191" selected="true" /><select idref="V-217192" selected="true" /><select idref="V-217193" selected="true" /><select idref="V-217194" selected="true" /><select idref="V-217195" selected="true" /><select idref="V-217196" selected="true" /><select idref="V-217197" selected="true" /><select idref="V-217198" selected="true" /><select idref="V-217199" selected="true" /><select idref="V-217200" selected="true" /><select idref="V-217201" selected="true" /><select idref="V-217202" selected="true" /><select idref="V-217203" selected="true" /><select idref="V-217204" selected="true" /><select idref="V-217205" selected="true" /><select idref="V-217206" selected="true" /><select idref="V-217207" selected="true" /><select idref="V-217208" selected="true" /><select idref="V-217209" selected="true" /><select idref="V-217210" selected="true" /><select idref="V-217211" selected="true" /><select idref="V-217212" selected="true" /><select idref="V-217213" selected="true" /><select idref="V-217214" selected="true" /><select idref="V-217215" selected="true" /><select idref="V-217216" selected="true" /><select idref="V-217217" selected="true" /><select idref="V-217218" selected="true" /><select idref="V-217223" selected="true" /><select idref="V-217227" selected="true" /><select idref="V-217230" selected="true" /><select idref="V-217236" selected="true" /><select idref="V-217237" selected="true" /><select idref="V-217238" selected="true" /><select idref="V-217239" selected="true" /><select idref="V-217240" selected="true" /><select idref="V-217241" selected="true" /><select idref="V-217242" selected="true" /><select idref="V-217243" selected="true" /><select idref="V-217244" selected="true" /><select idref="V-217245" selected="true" /><select idref="V-217246" selected="true" /><select idref="V-217247" selected="true" /><select idref="V-217248" selected="true" /><select idref="V-217249" selected="true" /><select idref="V-217250" selected="true" /><select idref="V-217251" selected="true" /><select idref="V-217252" selected="true" /><select idref="V-217253" selected="true" /><select idref="V-217254" selected="true" /><select idref="V-217255" selected="true" /><select idref="V-217257" selected="true" /><select idref="V-217258" selected="true" /><select idref="V-217260" selected="true" /><select idref="V-217261" selected="true" /><select idref="V-217262" selected="true" /><select idref="V-217263" selected="true" /><select idref="V-217264" selected="true" /><select idref="V-217265" selected="true" /><select idref="V-217266" selected="true" /><select idref="V-217267" selected="true" /><select idref="V-217268" selected="true" /><select idref="V-217269" selected="true" /><select idref="V-217270" selected="true" /><select idref="V-217271" selected="true" /><select idref="V-217272" selected="true" /><select idref="V-217273" selected="true" /><select idref="V-217274" selected="true" /><select idref="V-217275" selected="true" /><select idref="V-217276" selected="true" /><select idref="V-217277" selected="true" /><select idref="V-217278" selected="true" /><select idref="V-217279" selected="true" /><select idref="V-217280" selected="true" /><select idref="V-217281" selected="true" /><select idref="V-217282" selected="true" /><select idref="V-217283" selected="true" /><select idref="V-217284" selected="true" /><select idref="V-217285" selected="true" /><select idref="V-217286" selected="true" /><select idref="V-217287" selected="true" /><select idref="V-217288" selected="true" /><select idref="V-217289" selected="true" /><select idref="V-217290" selected="true" /><select idref="V-217291" selected="true" /><select idref="V-217292" selected="true" /><select idref="V-217293" selected="true" /><select idref="V-217294" selected="true" /><select idref="V-217295" selected="true" /><select idref="V-217296" selected="true" /><select idref="V-217297" selected="true" /><select idref="V-217298" selected="true" /><select idref="V-217299" selected="true" /><select idref="V-217300" selected="true" /><select idref="V-217301" selected="true" /><select idref="V-217302" selected="true" /><select idref="V-222386" selected="true" /><select idref="V-233308" selected="true" /><select idref="V-237603" selected="true" /><select idref="V-237604" selected="true" /><select idref="V-237605" selected="true" /><select idref="V-237606" selected="true" /><select idref="V-237607" selected="true" /><select idref="V-237608" selected="true" /><select idref="V-237609" selected="true" /><select idref="V-237610" selected="true" /><select idref="V-237611" selected="true" /><select idref="V-237612" selected="true" /><select idref="V-237613" selected="true" /><select idref="V-237614" selected="true" /><select idref="V-237615" selected="true" /><select idref="V-237616" selected="true" /><select idref="V-237617" selected="true" /><select idref="V-237618" selected="true" /><select idref="V-237619" selected="true" /><select idref="V-237620" selected="true" /><select idref="V-237621" selected="true" /><select idref="V-237622" selected="true" /><select idref="V-237623" selected="true" /><select idref="V-251719" selected="true" /><select idref="V-251720" selected="true" /><select idref="V-251721" selected="true" /><select idref="V-251722" selected="true" /><select idref="V-255914" selected="true" /><select idref="V-255915" selected="true" /><select idref="V-255916" selected="true" /><select idref="V-256980" selected="true" /><select idref="V-256981" selected="true" /></Profile><Group id="V-217101"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-217101r1155786_rule" weight="10.0" severity="high"><version>SLES-12-010000</version><title>The SUSE operating system must be a vendor-supported release.</title><description>&lt;VulnDiscussion&gt;A SUSE operating system release is considered "supported" if the vendor continues to provide security patches for the product. With an unsupported release, it will not be possible to resolve security issues discovered in the system software.
+
+Release		Released		General Support		Long Term Support
+12.1		15 Dec 2015		31 May 2017			31 May 2020
+12.2		08 Nov 2016		31 Mar 2018			31 Mar 2021
+12.3		07 Sep 2017		30 Jun 2019			30 Jun 2022
+12.4		12 Dec 2018		30 Jun 2020			30 Jun 2023
+12.5		09 Dec 2019		31 Oct 2024			31 Oct 2027&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Server 12</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Server 12</dc:subject><dc:identifier>4033</dc:identifier></reference><ident system="http://cyber.mil/legacy">V-77045</ident><ident system="http://cyber.mil/legacy">SV-91741</ident><ident system="http://cyber.mil/cci">CCI-001230</ident><fixtext fixref="F-18327r369460_fix">Upgrade the SUSE operating system to a version supported by the vendor. If the system is not registered with the SUSE Customer Center, register the system against the correct subscription.
 
 If the system requires Long-Term Service Pack Support (LTSS), obtain the correct LTSS subscription for the system.</fixtext><fix id="F-18327r369460_fix" /><check system="C-18329r369459_chk"><check-content-ref href="SUSE_Linux_Enterprise_Server_12_STIG.xml" name="M" /><check-content>Verify the SUSE operating system is a vendor-supported release.
 
@@ -674,19 +681,7 @@ DISPLAYMANAGER_PASSWORD_LESS_LOGIN="no"
 
 If the "DISPLAYMANAGER_AUTOLOGIN" parameter includes a username or the
 "DISPLAYMANAGER_PASSWORD_LESS_LOGIN" parameter is not set to "no", this is a
-finding.</check-content></check></Rule></Group><Group id="V-217140"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-217140r991589_rule" weight="10.0" severity="low"><version>SLES-12-010390</version><title>The SUSE operating system must display the date and time of the last successful account logon upon logon.</title><description>&lt;VulnDiscussion&gt;Providing users with feedback on when account accesses last occurred facilitates user recognition and reporting of unauthorized account use.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Server 12</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Server 12</dc:subject><dc:identifier>4033</dc:identifier></reference><ident system="http://cyber.mil/legacy">SV-91831</ident><ident system="http://cyber.mil/legacy">V-77135</ident><ident system="http://cyber.mil/cci">CCI-000052</ident><fixtext fixref="F-18366r369577_fix">Configure the SUSE operating system to provide users with feedback on when account accesses last occurred by setting the required configuration options in "/etc/pam.d/login". 
-
-Add the following line to the top of "/etc/pam.d/login":
-
-session     required      pam_lastlog.so showfailed</fixtext><fix id="F-18366r369577_fix" /><check system="C-18368r646708_chk"><check-content-ref href="SUSE_Linux_Enterprise_Server_12_STIG.xml" name="M" /><check-content>Verify the SUSE operating system users are provided with feedback on when account accesses last occurred.
-
-Check that "pam_lastlog" is used and not silent with the following command:
-
-&gt; grep pam_lastlog /etc/pam.d/login
-
-session required pam_lastlog.so showfailed 
-
-If "pam_lastlog" is missing from "/etc/pam.d/login" file, the "silent" option is present, or the returned line is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-217141"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-217141r991589_rule" weight="10.0" severity="high"><version>SLES-12-010400</version><title>There must be no .shosts files on the SUSE operating system.</title><description>&lt;VulnDiscussion&gt;The .shosts files are used to configure host-based authentication for individual users or the system via SSH. Host-based authentication is not sufficient for preventing unauthorized access to the system, as it does not require interactive identification and authentication of a connection request, or for the use of two-factor authentication.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Server 12</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Server 12</dc:subject><dc:identifier>4033</dc:identifier></reference><ident system="http://cyber.mil/legacy">V-77137</ident><ident system="http://cyber.mil/legacy">SV-91833</ident><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-18367r369580_fix">Remove any ".shosts" files found on the SUSE operating system.
+finding.</check-content></check></Rule></Group><Group id="V-217141"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-217141r991589_rule" weight="10.0" severity="high"><version>SLES-12-010400</version><title>There must be no .shosts files on the SUSE operating system.</title><description>&lt;VulnDiscussion&gt;The .shosts files are used to configure host-based authentication for individual users or the system via SSH. Host-based authentication is not sufficient for preventing unauthorized access to the system, as it does not require interactive identification and authentication of a connection request, or for the use of two-factor authentication.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Server 12</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Server 12</dc:subject><dc:identifier>4033</dc:identifier></reference><ident system="http://cyber.mil/legacy">V-77137</ident><ident system="http://cyber.mil/legacy">SV-91833</ident><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-18367r369580_fix">Remove any ".shosts" files found on the SUSE operating system.
 
 # rm /[path]/[to]/[file]/.shosts</fixtext><fix id="F-18367r369580_fix" /><check system="C-18369r369579_chk"><check-content-ref href="SUSE_Linux_Enterprise_Server_12_STIG.xml" name="M" /><check-content>Verify there are no ".shosts" files on the SUSE operating system.
 
@@ -702,7 +697,7 @@ Check the system for the existence of these files with the following command:
 
 # find /etc -name shosts.equiv
 
-If any "shosts.equiv" files are found on the system, this is a finding.</check-content></check></Rule></Group><Group id="V-217143"><title>SRG-OS-000478-GPOS-00223</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-217143r959006_rule" weight="10.0" severity="medium"><version>SLES-12-010420</version><title>FIPS 140-2 mode must be enabled on the SUSE operating system.</title><description>&lt;VulnDiscussion&gt;Use of weak or untested encryption algorithms undermines the purposes of using encryption to protect data. The SUSE operating system must implement cryptographic modules adhering to the higher standards approved by the federal government since this provides assurance they have been tested and validated.
+If any "shosts.equiv" files are found on the system, this is a finding.</check-content></check></Rule></Group><Group id="V-217143"><title>SRG-OS-000478-GPOS-00223</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-217143r1137699_rule" weight="10.0" severity="medium"><version>SLES-12-010420</version><title>FIPS 140-2 mode must be enabled on the SUSE operating system.</title><description>&lt;VulnDiscussion&gt;Use of weak or untested encryption algorithms undermines the purposes of using encryption to protect data. The SUSE operating system must implement cryptographic modules adhering to the higher standards approved by the federal government since this provides assurance they have been tested and validated.
 
 Satisfies: SRG-OS-000396-GPOS-00176, SRG-OS-000478-GPOS-00223&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Server 12</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Server 12</dc:subject><dc:identifier>4033</dc:identifier></reference><ident system="http://cyber.mil/legacy">SV-91837</ident><ident system="http://cyber.mil/legacy">V-77141</ident><ident system="http://cyber.mil/cci">CCI-002450</ident><fixtext fixref="F-18369r369586_fix">To configure the SUSE operating system to run in FIPS mode, add "fips=1" to the kernel parameter during the SUSE operating system install.
 
@@ -714,7 +709,7 @@ http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140sp/140sp2435.pdf</fixtex
 
 1
 
-If nothing is returned, the file does not exist, or the value returned is "0", this is a finding.</check-content></check></Rule></Group><Group id="V-217144"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-217144r958472_rule" weight="10.0" severity="medium"><version>SLES-12-010430</version><title>SUSE operating systems with a basic input/output system (BIOS) must require authentication upon booting into single-user and maintenance modes.</title><description>&lt;VulnDiscussion&gt;To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DoD-approved PKIs, all DoD systems (e.g., web servers and web portals) must be properly configured to incorporate access control methods that do not rely solely on the possession of a certificate for access. Successful authentication must not automatically give an entity access to an asset or security boundary. Authorization procedures and controls must be implemented to ensure each authenticated entity also has a validated and current authorization. Authorization is the process of determining whether an entity, once authenticated, is permitted to access a specific asset. Information systems use access control policies and enforcement mechanisms to implement this requirement.
+If nothing is returned, the file does not exist, or the value returned is "0", this is a finding.</check-content></check></Rule></Group><Group id="V-217144"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-217144r1137691_rule" weight="10.0" severity="medium"><version>SLES-12-010430</version><title>SUSE operating systems with a basic input/output system (BIOS) must require authentication upon booting into single-user and maintenance modes.</title><description>&lt;VulnDiscussion&gt;To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DoD-approved PKIs, all DoD systems (e.g., web servers and web portals) must be properly configured to incorporate access control methods that do not rely solely on the possession of a certificate for access. Successful authentication must not automatically give an entity access to an asset or security boundary. Authorization procedures and controls must be implemented to ensure each authenticated entity also has a validated and current authorization. Authorization is the process of determining whether an entity, once authenticated, is permitted to access a specific asset. Information systems use access control policies and enforcement mechanisms to implement this requirement.
 
 Access control policies include identity-based policies, role-based policies, and attribute-based policies. Access enforcement mechanisms include access control lists, access control matrices, and cryptography. These policies and mechanisms must be employed by the application to control access between users (or processes acting on behalf of users) and objects (e.g., devices, files, records, processes, programs, and domains) in the information system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Server 12</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Server 12</dc:subject><dc:identifier>4033</dc:identifier></reference><ident system="http://cyber.mil/legacy">V-77143</ident><ident system="http://cyber.mil/legacy">SV-91839</ident><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-18370r369589_fix">Note: If the system does not use a basic input/output system (BIOS) this requirement is Not Applicable.
 
@@ -747,7 +742,7 @@ Check that the encrypted password is set for a boot user with the following comm
 
 password_pbkdf2 boot grub.pbkdf2.sha512.10000.VeryLongString
 
-If the boot user password entry does not begin with "password_pbkdf2", this is a finding.</check-content></check></Rule></Group><Group id="V-217145"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-217145r958472_rule" weight="10.0" severity="medium"><version>SLES-12-010440</version><title>SUSE operating systems with Unified Extensible Firmware Interface (UEFI) implemented must require authentication upon booting into single-user mode and maintenance.</title><description>&lt;VulnDiscussion&gt;If the system allows a user to boot into single-user or maintenance mode without authentication, any user that invokes single-user or maintenance mode is granted privileged access to all system information.
+If the boot user password entry does not begin with "password_pbkdf2", this is a finding.</check-content></check></Rule></Group><Group id="V-217145"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-217145r1137691_rule" weight="10.0" severity="medium"><version>SLES-12-010440</version><title>SUSE operating systems with Unified Extensible Firmware Interface (UEFI) implemented must require authentication upon booting into single-user mode and maintenance.</title><description>&lt;VulnDiscussion&gt;If the system allows a user to boot into single-user or maintenance mode without authentication, any user that invokes single-user or maintenance mode is granted privileged access to all system information.
 
 If the system is running in EFI mode, SLES 12 by default will use GRUB 2 EFI as the boot loader.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Server 12</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Server 12</dc:subject><dc:identifier>4033</dc:identifier></reference><ident system="http://cyber.mil/legacy">SV-91841</ident><ident system="http://cyber.mil/legacy">V-77145</ident><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-18371r369592_fix">Note: If the system does not use UEFI, this requirement is Not Applicable.
 
@@ -812,7 +807,7 @@ truecrypt  /dev/sda3       /etc/container_password  tcrypt
 
 Every persistent disk partition present on the system must have an entry in the file. 
 
-If any partitions other than pseudo file systems (such as /proc or /sys) are not listed or "/etc/crypttab" does not exist, this is a finding.</check-content></check></Rule></Group><Group id="V-217147"><title>SRG-OS-000138-GPOS-00069</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-217147r958524_rule" weight="10.0" severity="medium"><version>SLES-12-010460</version><title>The sticky bit must be set on all SUSE operating system world-writable directories.</title><description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, and hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
+If any partitions other than pseudo file systems (such as /proc or /sys) are not listed or "/etc/crypttab" does not exist, this is a finding.</check-content></check></Rule></Group><Group id="V-217147"><title>SRG-OS-000138-GPOS-00069</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-217147r1137695_rule" weight="10.0" severity="medium"><version>SLES-12-010460</version><title>The sticky bit must be set on all SUSE operating system world-writable directories.</title><description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, and hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
 
 This requirement generally applies to the design of an information technology product, but it can also apply to the configuration of particular information system components that are, or use, such products. This can be verified by acceptance/validation processes in DoD or other government agencies.
 
@@ -974,16 +969,14 @@ Check that "usb-storage" is blacklisted in the "/etc/modprobe.d/50-blacklist.con
 # grep usb-storage /etc/modprobe.d/50-blacklist.conf
 blacklist usb-storage
 
-If nothing is output from the command, this is a finding.</check-content></check></Rule></Group><Group id="V-217156"><title>SRG-OS-000114-GPOS-00059</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-217156r958498_rule" weight="10.0" severity="medium"><version>SLES-12-010590</version><title>The SUSE operating system must disable the file system automounter unless required.</title><description>&lt;VulnDiscussion&gt;Automatically mounting file systems permits easy introduction of unknown devices, thereby facilitating malicious activity.
+If nothing is output from the command, this is a finding.</check-content></check></Rule></Group><Group id="V-217156"><title>SRG-OS-000114-GPOS-00059</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-217156r1155785_rule" weight="10.0" severity="medium"><version>SLES-12-010590</version><title>The SUSE operating system must disable the file system automounter.</title><description>&lt;VulnDiscussion&gt;Automatically mounting file systems permits easy introduction of unknown devices, thereby facilitating malicious activity.
 
-Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163, SRG-OS-000480-GPOS-00227&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Server 12</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Server 12</dc:subject><dc:identifier>4033</dc:identifier></reference><ident system="http://cyber.mil/legacy">V-77167</ident><ident system="http://cyber.mil/legacy">SV-91863</ident><ident system="http://cyber.mil/cci">CCI-000366</ident><ident system="http://cyber.mil/cci">CCI-000778</ident><ident system="http://cyber.mil/cci">CCI-001958</ident><fixtext fixref="F-18382r369625_fix">Configure the SUSE operating system to disable the ability to automount devices.
+Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163, SRG-OS-000480-GPOS-00227&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Server 12</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Server 12</dc:subject><dc:identifier>4033</dc:identifier></reference><ident system="http://cyber.mil/legacy">V-77167</ident><ident system="http://cyber.mil/legacy">SV-91863</ident><ident system="http://cyber.mil/cci">CCI-000366</ident><ident system="http://cyber.mil/cci">CCI-000778</ident><ident system="http://cyber.mil/cci">CCI-001958</ident><fixtext fixref="F-18382r1155784_fix">Configure the SUSE operating system to disable the ability to automount devices.
 
-Turn off the automount service with the following command:
+Turn off the automount service with the following commands:
 
 # systemctl stop autofs
-# systemctl disable autofs
-
-If "autofs" is required for Network File System (NFS), it must be documented with the ISSO.</fixtext><fix id="F-18382r369625_fix" /><check system="C-18384r369624_chk"><check-content-ref href="SUSE_Linux_Enterprise_Server_12_STIG.xml" name="M" /><check-content>Verify the SUSE operating system disables the ability to automount devices.
+# systemctl disable autofs</fixtext><fix id="F-18382r1155784_fix" /><check system="C-18384r1155783_chk"><check-content-ref href="SUSE_Linux_Enterprise_Server_12_STIG.xml" name="M" /><check-content>Verify the SUSE operating system disables the ability to automount devices.
 
 Check to see if automounter service is active with the following command:
 
@@ -992,7 +985,7 @@ autofs.service - Automounts filesystems on demand
 Loaded: loaded (/usr/lib/systemd/system/autofs.service; disabled)
 Active: inactive (dead)
 
-If the "autofs" status is set to "active" and is not documented with the Information System Security Officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-217158"><title>SRG-OS-000312-GPOS-00122</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-217158r958702_rule" weight="10.0" severity="medium"><version>SLES-12-010600</version><title>The SUSE operating system Apparmor tool must be configured to control whitelisted applications and user home directory access control.</title><description>&lt;VulnDiscussion&gt;Using a whitelist provides a configuration management method for allowing the execution of only authorized software. Using only authorized software decreases risk by limiting the number of potential vulnerabilities.
+If the "autofs" status is set to "active" this is a finding.</check-content></check></Rule></Group><Group id="V-217158"><title>SRG-OS-000312-GPOS-00122</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-217158r958702_rule" weight="10.0" severity="medium"><version>SLES-12-010600</version><title>The SUSE operating system Apparmor tool must be configured to control whitelisted applications and user home directory access control.</title><description>&lt;VulnDiscussion&gt;Using a whitelist provides a configuration management method for allowing the execution of only authorized software. Using only authorized software decreases risk by limiting the number of potential vulnerabilities.
 
 The organization must identify authorized software programs and permit execution of authorized software by adding each authorized program to the "pam_apparmor" exception policy. The process used to identify software programs that are authorized to execute on organizational information systems is commonly referred to as whitelisting.
 
@@ -3900,7 +3893,7 @@ Restart the "sshd" service for changes to take effect:
      $ sudo grep -i kexalgorithms /etc/ssh/sshd_config
      KexAlgorithms ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256
  
-If "KexAlgorithms" is not configured, is commented out, or does not contain only the algorithms "ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256" in exact order, this is a finding.</check-content></check></Rule></Group><Group id="V-255915"><title>SRG-OS-000138-GPOS-00069</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-255915r958524_rule" weight="10.0" severity="low"><version>SLES-12-010375</version><title>The SUSE operating system must restrict access to the kernel message buffer.</title><description>&lt;VulnDiscussion&gt;Restricting access to the kernel message buffer limits access only to root. This prevents attackers from gaining additional system information as a nonprivileged user.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Server 12</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Server 12</dc:subject><dc:identifier>4033</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001090</ident><fixtext fixref="F-59535r880927_fix">Configure the operating system to restrict access to the kernel message buffer.
+If "KexAlgorithms" is not configured, is commented out, or does not contain only the algorithms "ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256" in exact order, this is a finding.</check-content></check></Rule></Group><Group id="V-255915"><title>SRG-OS-000138-GPOS-00069</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-255915r1137695_rule" weight="10.0" severity="low"><version>SLES-12-010375</version><title>The SUSE operating system must restrict access to the kernel message buffer.</title><description>&lt;VulnDiscussion&gt;Restricting access to the kernel message buffer limits access only to root. This prevents attackers from gaining additional system information as a nonprivileged user.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Server 12</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Server 12</dc:subject><dc:identifier>4033</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001090</ident><fixtext fixref="F-59535r880927_fix">Configure the operating system to restrict access to the kernel message buffer.
 
 Set the system to the required kernel parameter by adding or modifying the following line in /etc/sysctl.conf or a config file in the /etc/sysctl.d/ directory:
 
diff --git a/shared/references/disa-stig-sle15-v2r5-xccdf-manual.xml b/shared/references/disa-stig-sle15-v2r6-xccdf-manual.xml
similarity index 88%
rename from shared/references/disa-stig-sle15-v2r5-xccdf-manual.xml
rename to shared/references/disa-stig-sle15-v2r6-xccdf-manual.xml
index 293ad43f48ee..90fda462d6a4 100644
--- a/shared/references/disa-stig-sle15-v2r5-xccdf-manual.xml
+++ b/shared/references/disa-stig-sle15-v2r6-xccdf-manual.xml
@@ -1,4 +1,13 @@
-<?xml version="1.0" encoding="utf-8"?><?xml-stylesheet type='text/xsl' href='STIG_unclass.xsl'?><Benchmark xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.1 http://nvd.nist.gov/schema/xccdf-1.1.4.xsd http://cpe.mitre.org/dictionary/2.0 http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd" id="SLES_15_STIG" xml:lang="en" xmlns="http://checklists.nist.gov/xccdf/1.1"><status date="2025-05-14">accepted</status><title>SUSE Linux Enterprise Server 15 Security Technical Implementation Guide</title><description>This Security Technical Implementation Guide is published as a tool to improve the security of Department of Defense (DOD) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.</description><notice id="terms-of-use" xml:lang="en"></notice><front-matter xml:lang="en"></front-matter><rear-matter xml:lang="en"></rear-matter><reference href="https://cyber.mil"><dc:publisher>DISA</dc:publisher><dc:source>STIG.DOD.MIL</dc:source></reference><plain-text id="release-info">Release: 5 Benchmark Date: 02 Jul 2025</plain-text><plain-text id="generator">3.5</plain-text><plain-text id="conventionsVersion">1.10.0</plain-text><version>2</version><Profile id="MAC-1_Classified"><title>I - Mission Critical Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-234800" selected="true" /><select idref="V-234802" selected="true" /><select idref="V-234803" selected="true" /><select idref="V-234804" selected="true" /><select idref="V-234805" selected="true" /><select idref="V-234806" selected="true" /><select idref="V-234807" selected="true" /><select idref="V-234808" selected="true" /><select idref="V-234809" selected="true" /><select idref="V-234810" selected="true" /><select idref="V-234811" selected="true" /><select idref="V-234812" selected="true" /><select idref="V-234813" selected="true" /><select idref="V-234814" selected="true" /><select idref="V-234815" selected="true" /><select idref="V-234816" selected="true" /><select idref="V-234817" selected="true" /><select idref="V-234818" selected="true" /><select idref="V-234819" selected="true" /><select idref="V-234820" selected="true" /><select idref="V-234821" selected="true" /><select idref="V-234822" selected="true" /><select idref="V-234823" selected="true" /><select idref="V-234825" selected="true" /><select idref="V-234826" selected="true" /><select idref="V-234827" selected="true" /><select idref="V-234828" selected="true" /><select idref="V-234829" selected="true" /><select idref="V-234830" selected="true" /><select idref="V-234831" selected="true" /><select idref="V-234832" selected="true" /><select idref="V-234833" selected="true" /><select idref="V-234834" selected="true" /><select idref="V-234835" selected="true" /><select idref="V-234836" selected="true" /><select idref="V-234837" selected="true" /><select idref="V-234838" selected="true" /><select idref="V-234839" selected="true" /><select idref="V-234840" selected="true" /><select idref="V-234841" selected="true" /><select idref="V-234842" selected="true" /><select idref="V-234843" selected="true" /><select idref="V-234844" selected="true" /><select idref="V-234845" selected="true" /><select idref="V-234846" selected="true" /><select idref="V-234847" selected="true" /><select idref="V-234848" selected="true" /><select idref="V-234849" selected="true" /><select idref="V-234850" selected="true" /><select idref="V-234851" selected="true" /><select idref="V-234852" selected="true" /><select idref="V-234853" selected="true" /><select idref="V-234854" selected="true" /><select idref="V-234855" selected="true" /><select idref="V-234856" selected="true" /><select idref="V-234857" selected="true" /><select idref="V-234858" selected="true" /><select idref="V-234859" selected="true" /><select idref="V-234860" selected="true" /><select idref="V-234861" selected="true" /><select idref="V-234862" selected="true" /><select idref="V-234863" selected="true" /><select idref="V-234864" selected="true" /><select idref="V-234865" selected="true" /><select idref="V-234866" selected="true" /><select idref="V-234867" selected="true" /><select idref="V-234868" selected="true" /><select idref="V-234869" selected="true" /><select idref="V-234870" selected="true" /><select idref="V-234871" selected="true" /><select idref="V-234872" selected="true" /><select idref="V-234873" selected="true" /><select idref="V-234874" selected="true" /><select idref="V-234875" selected="true" /><select idref="V-234876" selected="true" /><select idref="V-234877" selected="true" /><select idref="V-234878" selected="true" /><select idref="V-234879" selected="true" /><select idref="V-234880" selected="true" /><select idref="V-234881" selected="true" /><select idref="V-234882" selected="true" /><select idref="V-234883" selected="true" /><select idref="V-234884" selected="true" /><select idref="V-234885" selected="true" /><select idref="V-234886" selected="true" /><select idref="V-234887" selected="true" /><select idref="V-234888" selected="true" /><select idref="V-234889" selected="true" /><select idref="V-234890" selected="true" /><select idref="V-234891" selected="true" /><select idref="V-234892" selected="true" /><select idref="V-234895" selected="true" /><select idref="V-234896" selected="true" /><select idref="V-234897" selected="true" /><select idref="V-234898" selected="true" /><select idref="V-234899" selected="true" /><select idref="V-234900" selected="true" /><select idref="V-234901" selected="true" /><select idref="V-234902" selected="true" /><select idref="V-234903" selected="true" /><select idref="V-234904" selected="true" /><select idref="V-234905" selected="true" /><select idref="V-234906" selected="true" /><select idref="V-234907" selected="true" /><select idref="V-234908" selected="true" /><select idref="V-234909" selected="true" /><select idref="V-234910" selected="true" /><select idref="V-234911" selected="true" /><select idref="V-234912" selected="true" /><select idref="V-234913" selected="true" /><select idref="V-234914" selected="true" /><select idref="V-234918" selected="true" /><select idref="V-234924" selected="true" /><select idref="V-234928" selected="true" /><select idref="V-234932" selected="true" /><select idref="V-234933" selected="true" /><select idref="V-234934" selected="true" /><select idref="V-234935" selected="true" /><select idref="V-234936" selected="true" /><select idref="V-234937" selected="true" /><select idref="V-234938" selected="true" /><select idref="V-234939" selected="true" /><select idref="V-234940" selected="true" /><select idref="V-234941" selected="true" /><select idref="V-234942" selected="true" /><select idref="V-234943" selected="true" /><select idref="V-234944" selected="true" /><select idref="V-234945" selected="true" /><select idref="V-234946" selected="true" /><select idref="V-234947" selected="true" /><select idref="V-234948" selected="true" /><select idref="V-234949" selected="true" /><select idref="V-234950" selected="true" /><select idref="V-234951" selected="true" /><select idref="V-234952" selected="true" /><select idref="V-234954" selected="true" /><select idref="V-234955" selected="true" /><select idref="V-234956" selected="true" /><select idref="V-234957" selected="true" /><select idref="V-234958" selected="true" /><select idref="V-234959" selected="true" /><select idref="V-234961" selected="true" /><select idref="V-234962" selected="true" /><select idref="V-234963" selected="true" /><select idref="V-234964" selected="true" /><select idref="V-234965" selected="true" /><select idref="V-234966" selected="true" /><select idref="V-234967" selected="true" /><select idref="V-234968" selected="true" /><select idref="V-234969" selected="true" /><select idref="V-234973" selected="true" /><select idref="V-234975" selected="true" /><select idref="V-234976" selected="true" /><select idref="V-234977" selected="true" /><select idref="V-234978" selected="true" /><select idref="V-234979" selected="true" /><select idref="V-234980" selected="true" /><select idref="V-234981" selected="true" /><select idref="V-234982" selected="true" /><select idref="V-234983" selected="true" /><select idref="V-234984" selected="true" /><select idref="V-234985" selected="true" /><select idref="V-234986" selected="true" /><select idref="V-234987" selected="true" /><select idref="V-234988" selected="true" /><select idref="V-234989" selected="true" /><select idref="V-234990" selected="true" /><select idref="V-234991" selected="true" /><select idref="V-234992" selected="true" /><select idref="V-234993" selected="true" /><select idref="V-234994" selected="true" /><select idref="V-234995" selected="true" /><select idref="V-234996" selected="true" /><select idref="V-234997" selected="true" /><select idref="V-234998" selected="true" /><select idref="V-234999" selected="true" /><select idref="V-235000" selected="true" /><select idref="V-235001" selected="true" /><select idref="V-235002" selected="true" /><select idref="V-235003" selected="true" /><select idref="V-235004" selected="true" /><select idref="V-235005" selected="true" /><select idref="V-235006" selected="true" /><select idref="V-235007" selected="true" /><select idref="V-235008" selected="true" /><select idref="V-235009" selected="true" /><select idref="V-235010" selected="true" /><select idref="V-235013" selected="true" /><select idref="V-235014" selected="true" /><select idref="V-235015" selected="true" /><select idref="V-235016" selected="true" /><select idref="V-235017" selected="true" /><select idref="V-235018" selected="true" /><select idref="V-235019" selected="true" /><select idref="V-235020" selected="true" /><select idref="V-235021" selected="true" /><select idref="V-235022" selected="true" /><select idref="V-235023" selected="true" /><select idref="V-235024" selected="true" /><select idref="V-235025" selected="true" /><select idref="V-235026" selected="true" /><select idref="V-235027" selected="true" /><select idref="V-235028" selected="true" /><select idref="V-235029" selected="true" /><select idref="V-235030" selected="true" /><select idref="V-235031" selected="true" /><select idref="V-235032" selected="true" /><select idref="V-251723" selected="true" /><select idref="V-251724" selected="true" /><select idref="V-251725" selected="true" /><select idref="V-255920" selected="true" /><select idref="V-255921" selected="true" /><select idref="V-255922" selected="true" /><select idref="V-256982" selected="true" /><select idref="V-256983" selected="true" /><select idref="V-274879" selected="true" /></Profile><Profile id="MAC-1_Public"><title>I - Mission Critical Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-234800" selected="true" /><select idref="V-234802" selected="true" /><select idref="V-234803" selected="true" /><select idref="V-234804" selected="true" /><select idref="V-234805" selected="true" /><select idref="V-234806" selected="true" /><select idref="V-234807" selected="true" /><select idref="V-234808" selected="true" /><select idref="V-234809" selected="true" /><select idref="V-234810" selected="true" /><select idref="V-234811" selected="true" /><select idref="V-234812" selected="true" /><select idref="V-234813" selected="true" /><select idref="V-234814" selected="true" /><select idref="V-234815" selected="true" /><select idref="V-234816" selected="true" /><select idref="V-234817" selected="true" /><select idref="V-234818" selected="true" /><select idref="V-234819" selected="true" /><select idref="V-234820" selected="true" /><select idref="V-234821" selected="true" /><select idref="V-234822" selected="true" /><select idref="V-234823" selected="true" /><select idref="V-234825" selected="true" /><select idref="V-234826" selected="true" /><select idref="V-234827" selected="true" /><select idref="V-234828" selected="true" /><select idref="V-234829" selected="true" /><select idref="V-234830" selected="true" /><select idref="V-234831" selected="true" /><select idref="V-234832" selected="true" /><select idref="V-234833" selected="true" /><select idref="V-234834" selected="true" /><select idref="V-234835" selected="true" /><select idref="V-234836" selected="true" /><select idref="V-234837" selected="true" /><select idref="V-234838" selected="true" /><select idref="V-234839" selected="true" /><select idref="V-234840" selected="true" /><select idref="V-234841" selected="true" /><select idref="V-234842" selected="true" /><select idref="V-234843" selected="true" /><select idref="V-234844" selected="true" /><select idref="V-234845" selected="true" /><select idref="V-234846" selected="true" /><select idref="V-234847" selected="true" /><select idref="V-234848" selected="true" /><select idref="V-234849" selected="true" /><select idref="V-234850" selected="true" /><select idref="V-234851" selected="true" /><select idref="V-234852" selected="true" /><select idref="V-234853" selected="true" /><select idref="V-234854" selected="true" /><select idref="V-234855" selected="true" /><select idref="V-234856" selected="true" /><select idref="V-234857" selected="true" /><select idref="V-234858" selected="true" /><select idref="V-234859" selected="true" /><select idref="V-234860" selected="true" /><select idref="V-234861" selected="true" /><select idref="V-234862" selected="true" /><select idref="V-234863" selected="true" /><select idref="V-234864" selected="true" /><select idref="V-234865" selected="true" /><select idref="V-234866" selected="true" /><select idref="V-234867" selected="true" /><select idref="V-234868" selected="true" /><select idref="V-234869" selected="true" /><select idref="V-234870" selected="true" /><select idref="V-234871" selected="true" /><select idref="V-234872" selected="true" /><select idref="V-234873" selected="true" /><select idref="V-234874" selected="true" /><select idref="V-234875" selected="true" /><select idref="V-234876" selected="true" /><select idref="V-234877" selected="true" /><select idref="V-234878" selected="true" /><select idref="V-234879" selected="true" /><select idref="V-234880" selected="true" /><select idref="V-234881" selected="true" /><select idref="V-234882" selected="true" /><select idref="V-234883" selected="true" /><select idref="V-234884" selected="true" /><select idref="V-234885" selected="true" /><select idref="V-234886" selected="true" /><select idref="V-234887" selected="true" /><select idref="V-234888" selected="true" /><select idref="V-234889" selected="true" /><select idref="V-234890" selected="true" /><select idref="V-234891" selected="true" /><select idref="V-234892" selected="true" /><select idref="V-234895" selected="true" /><select idref="V-234896" selected="true" /><select idref="V-234897" selected="true" /><select idref="V-234898" selected="true" /><select idref="V-234899" selected="true" /><select idref="V-234900" selected="true" /><select idref="V-234901" selected="true" /><select idref="V-234902" selected="true" /><select idref="V-234903" selected="true" /><select idref="V-234904" selected="true" /><select idref="V-234905" selected="true" /><select idref="V-234906" selected="true" /><select idref="V-234907" selected="true" /><select idref="V-234908" selected="true" /><select idref="V-234909" selected="true" /><select idref="V-234910" selected="true" /><select idref="V-234911" selected="true" /><select idref="V-234912" selected="true" /><select idref="V-234913" selected="true" /><select idref="V-234914" selected="true" /><select idref="V-234918" selected="true" /><select idref="V-234924" selected="true" /><select idref="V-234928" selected="true" /><select idref="V-234932" selected="true" /><select idref="V-234933" selected="true" /><select idref="V-234934" selected="true" /><select idref="V-234935" selected="true" /><select idref="V-234936" selected="true" /><select idref="V-234937" selected="true" /><select idref="V-234938" selected="true" /><select idref="V-234939" selected="true" /><select idref="V-234940" selected="true" /><select idref="V-234941" selected="true" /><select idref="V-234942" selected="true" /><select idref="V-234943" selected="true" /><select idref="V-234944" selected="true" /><select idref="V-234945" selected="true" /><select idref="V-234946" selected="true" /><select idref="V-234947" selected="true" /><select idref="V-234948" selected="true" /><select idref="V-234949" selected="true" /><select idref="V-234950" selected="true" /><select idref="V-234951" selected="true" /><select idref="V-234952" selected="true" /><select idref="V-234954" selected="true" /><select idref="V-234955" selected="true" /><select idref="V-234956" selected="true" /><select idref="V-234957" selected="true" /><select idref="V-234958" selected="true" /><select idref="V-234959" selected="true" /><select idref="V-234961" selected="true" /><select idref="V-234962" selected="true" /><select idref="V-234963" selected="true" /><select idref="V-234964" selected="true" /><select idref="V-234965" selected="true" /><select idref="V-234966" selected="true" /><select idref="V-234967" selected="true" /><select idref="V-234968" selected="true" /><select idref="V-234969" selected="true" /><select idref="V-234973" selected="true" /><select idref="V-234975" selected="true" /><select idref="V-234976" selected="true" /><select idref="V-234977" selected="true" /><select idref="V-234978" selected="true" /><select idref="V-234979" selected="true" /><select idref="V-234980" selected="true" /><select idref="V-234981" selected="true" /><select idref="V-234982" selected="true" /><select idref="V-234983" selected="true" /><select idref="V-234984" selected="true" /><select idref="V-234985" selected="true" /><select idref="V-234986" selected="true" /><select idref="V-234987" selected="true" /><select idref="V-234988" selected="true" /><select idref="V-234989" selected="true" /><select idref="V-234990" selected="true" /><select idref="V-234991" selected="true" /><select idref="V-234992" selected="true" /><select idref="V-234993" selected="true" /><select idref="V-234994" selected="true" /><select idref="V-234995" selected="true" /><select idref="V-234996" selected="true" /><select idref="V-234997" selected="true" /><select idref="V-234998" selected="true" /><select idref="V-234999" selected="true" /><select idref="V-235000" selected="true" /><select idref="V-235001" selected="true" /><select idref="V-235002" selected="true" /><select idref="V-235003" selected="true" /><select idref="V-235004" selected="true" /><select idref="V-235005" selected="true" /><select idref="V-235006" selected="true" /><select idref="V-235007" selected="true" /><select idref="V-235008" selected="true" /><select idref="V-235009" selected="true" /><select idref="V-235010" selected="true" /><select idref="V-235013" selected="true" /><select idref="V-235014" selected="true" /><select idref="V-235015" selected="true" /><select idref="V-235016" selected="true" /><select idref="V-235017" selected="true" /><select idref="V-235018" selected="true" /><select idref="V-235019" selected="true" /><select idref="V-235020" selected="true" /><select idref="V-235021" selected="true" /><select idref="V-235022" selected="true" /><select idref="V-235023" selected="true" /><select idref="V-235024" selected="true" /><select idref="V-235025" selected="true" /><select idref="V-235026" selected="true" /><select idref="V-235027" selected="true" /><select idref="V-235028" selected="true" /><select idref="V-235029" selected="true" /><select idref="V-235030" selected="true" /><select idref="V-235031" selected="true" /><select idref="V-235032" selected="true" /><select idref="V-251723" selected="true" /><select idref="V-251724" selected="true" /><select idref="V-251725" selected="true" /><select idref="V-255920" selected="true" /><select idref="V-255921" selected="true" /><select idref="V-255922" selected="true" /><select idref="V-256982" selected="true" /><select idref="V-256983" selected="true" /><select idref="V-274879" selected="true" /></Profile><Profile id="MAC-1_Sensitive"><title>I - Mission Critical Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-234800" selected="true" /><select idref="V-234802" selected="true" /><select idref="V-234803" selected="true" /><select idref="V-234804" selected="true" /><select idref="V-234805" selected="true" /><select idref="V-234806" selected="true" /><select idref="V-234807" selected="true" /><select idref="V-234808" selected="true" /><select idref="V-234809" selected="true" /><select idref="V-234810" selected="true" /><select idref="V-234811" selected="true" /><select idref="V-234812" selected="true" /><select idref="V-234813" selected="true" /><select idref="V-234814" selected="true" /><select idref="V-234815" selected="true" /><select idref="V-234816" selected="true" /><select idref="V-234817" selected="true" /><select idref="V-234818" selected="true" /><select idref="V-234819" selected="true" /><select idref="V-234820" selected="true" /><select idref="V-234821" selected="true" /><select idref="V-234822" selected="true" /><select idref="V-234823" selected="true" /><select idref="V-234825" selected="true" /><select idref="V-234826" selected="true" /><select idref="V-234827" selected="true" /><select idref="V-234828" selected="true" /><select idref="V-234829" selected="true" /><select idref="V-234830" selected="true" /><select idref="V-234831" selected="true" /><select idref="V-234832" selected="true" /><select idref="V-234833" selected="true" /><select idref="V-234834" selected="true" /><select idref="V-234835" selected="true" /><select idref="V-234836" selected="true" /><select idref="V-234837" selected="true" /><select idref="V-234838" selected="true" /><select idref="V-234839" selected="true" /><select idref="V-234840" selected="true" /><select idref="V-234841" selected="true" /><select idref="V-234842" selected="true" /><select idref="V-234843" selected="true" /><select idref="V-234844" selected="true" /><select idref="V-234845" selected="true" /><select idref="V-234846" selected="true" /><select idref="V-234847" selected="true" /><select idref="V-234848" selected="true" /><select idref="V-234849" selected="true" /><select idref="V-234850" selected="true" /><select idref="V-234851" selected="true" /><select idref="V-234852" selected="true" /><select idref="V-234853" selected="true" /><select idref="V-234854" selected="true" /><select idref="V-234855" selected="true" /><select idref="V-234856" selected="true" /><select idref="V-234857" selected="true" /><select idref="V-234858" selected="true" /><select idref="V-234859" selected="true" /><select idref="V-234860" selected="true" /><select idref="V-234861" selected="true" /><select idref="V-234862" selected="true" /><select idref="V-234863" selected="true" /><select idref="V-234864" selected="true" /><select idref="V-234865" selected="true" /><select idref="V-234866" selected="true" /><select idref="V-234867" selected="true" /><select idref="V-234868" selected="true" /><select idref="V-234869" selected="true" /><select idref="V-234870" selected="true" /><select idref="V-234871" selected="true" /><select idref="V-234872" selected="true" /><select idref="V-234873" selected="true" /><select idref="V-234874" selected="true" /><select idref="V-234875" selected="true" /><select idref="V-234876" selected="true" /><select idref="V-234877" selected="true" /><select idref="V-234878" selected="true" /><select idref="V-234879" selected="true" /><select idref="V-234880" selected="true" /><select idref="V-234881" selected="true" /><select idref="V-234882" selected="true" /><select idref="V-234883" selected="true" /><select idref="V-234884" selected="true" /><select idref="V-234885" selected="true" /><select idref="V-234886" selected="true" /><select idref="V-234887" selected="true" /><select idref="V-234888" selected="true" /><select idref="V-234889" selected="true" /><select idref="V-234890" selected="true" /><select idref="V-234891" selected="true" /><select idref="V-234892" selected="true" /><select idref="V-234895" selected="true" /><select idref="V-234896" selected="true" /><select idref="V-234897" selected="true" /><select idref="V-234898" selected="true" /><select idref="V-234899" selected="true" /><select idref="V-234900" selected="true" /><select idref="V-234901" selected="true" /><select idref="V-234902" selected="true" /><select idref="V-234903" selected="true" /><select idref="V-234904" selected="true" /><select idref="V-234905" selected="true" /><select idref="V-234906" selected="true" /><select idref="V-234907" selected="true" /><select idref="V-234908" selected="true" /><select idref="V-234909" selected="true" /><select idref="V-234910" selected="true" /><select idref="V-234911" selected="true" /><select idref="V-234912" selected="true" /><select idref="V-234913" selected="true" /><select idref="V-234914" selected="true" /><select idref="V-234918" selected="true" /><select idref="V-234924" selected="true" /><select idref="V-234928" selected="true" /><select idref="V-234932" selected="true" /><select idref="V-234933" selected="true" /><select idref="V-234934" selected="true" /><select idref="V-234935" selected="true" /><select idref="V-234936" selected="true" /><select idref="V-234937" selected="true" /><select idref="V-234938" selected="true" /><select idref="V-234939" selected="true" /><select idref="V-234940" selected="true" /><select idref="V-234941" selected="true" /><select idref="V-234942" selected="true" /><select idref="V-234943" selected="true" /><select idref="V-234944" selected="true" /><select idref="V-234945" selected="true" /><select idref="V-234946" selected="true" /><select idref="V-234947" selected="true" /><select idref="V-234948" selected="true" /><select idref="V-234949" selected="true" /><select idref="V-234950" selected="true" /><select idref="V-234951" selected="true" /><select idref="V-234952" selected="true" /><select idref="V-234954" selected="true" /><select idref="V-234955" selected="true" /><select idref="V-234956" selected="true" /><select idref="V-234957" selected="true" /><select idref="V-234958" selected="true" /><select idref="V-234959" selected="true" /><select idref="V-234961" selected="true" /><select idref="V-234962" selected="true" /><select idref="V-234963" selected="true" /><select idref="V-234964" selected="true" /><select idref="V-234965" selected="true" /><select idref="V-234966" selected="true" /><select idref="V-234967" selected="true" /><select idref="V-234968" selected="true" /><select idref="V-234969" selected="true" /><select idref="V-234973" selected="true" /><select idref="V-234975" selected="true" /><select idref="V-234976" selected="true" /><select idref="V-234977" selected="true" /><select idref="V-234978" selected="true" /><select idref="V-234979" selected="true" /><select idref="V-234980" selected="true" /><select idref="V-234981" selected="true" /><select idref="V-234982" selected="true" /><select idref="V-234983" selected="true" /><select idref="V-234984" selected="true" /><select idref="V-234985" selected="true" /><select idref="V-234986" selected="true" /><select idref="V-234987" selected="true" /><select idref="V-234988" selected="true" /><select idref="V-234989" selected="true" /><select idref="V-234990" selected="true" /><select idref="V-234991" selected="true" /><select idref="V-234992" selected="true" /><select idref="V-234993" selected="true" /><select idref="V-234994" selected="true" /><select idref="V-234995" selected="true" /><select idref="V-234996" selected="true" /><select idref="V-234997" selected="true" /><select idref="V-234998" selected="true" /><select idref="V-234999" selected="true" /><select idref="V-235000" selected="true" /><select idref="V-235001" selected="true" /><select idref="V-235002" selected="true" /><select idref="V-235003" selected="true" /><select idref="V-235004" selected="true" /><select idref="V-235005" selected="true" /><select idref="V-235006" selected="true" /><select idref="V-235007" selected="true" /><select idref="V-235008" selected="true" /><select idref="V-235009" selected="true" /><select idref="V-235010" selected="true" /><select idref="V-235013" selected="true" /><select idref="V-235014" selected="true" /><select idref="V-235015" selected="true" /><select idref="V-235016" selected="true" /><select idref="V-235017" selected="true" /><select idref="V-235018" selected="true" /><select idref="V-235019" selected="true" /><select idref="V-235020" selected="true" /><select idref="V-235021" selected="true" /><select idref="V-235022" selected="true" /><select idref="V-235023" selected="true" /><select idref="V-235024" selected="true" /><select idref="V-235025" selected="true" /><select idref="V-235026" selected="true" /><select idref="V-235027" selected="true" /><select idref="V-235028" selected="true" /><select idref="V-235029" selected="true" /><select idref="V-235030" selected="true" /><select idref="V-235031" selected="true" /><select idref="V-235032" selected="true" /><select idref="V-251723" selected="true" /><select idref="V-251724" selected="true" /><select idref="V-251725" selected="true" /><select idref="V-255920" selected="true" /><select idref="V-255921" selected="true" /><select idref="V-255922" selected="true" /><select idref="V-256982" selected="true" /><select idref="V-256983" selected="true" /><select idref="V-274879" selected="true" /></Profile><Profile id="MAC-2_Classified"><title>II - Mission Support Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-234800" selected="true" /><select idref="V-234802" selected="true" /><select idref="V-234803" selected="true" /><select idref="V-234804" selected="true" /><select idref="V-234805" selected="true" /><select idref="V-234806" selected="true" /><select idref="V-234807" selected="true" /><select idref="V-234808" selected="true" /><select idref="V-234809" selected="true" /><select idref="V-234810" selected="true" /><select idref="V-234811" selected="true" /><select idref="V-234812" selected="true" /><select idref="V-234813" selected="true" /><select idref="V-234814" selected="true" /><select idref="V-234815" selected="true" /><select idref="V-234816" selected="true" /><select idref="V-234817" selected="true" /><select idref="V-234818" selected="true" /><select idref="V-234819" selected="true" /><select idref="V-234820" selected="true" /><select idref="V-234821" selected="true" /><select idref="V-234822" selected="true" /><select idref="V-234823" selected="true" /><select idref="V-234825" selected="true" /><select idref="V-234826" selected="true" /><select idref="V-234827" selected="true" /><select idref="V-234828" selected="true" /><select idref="V-234829" selected="true" /><select idref="V-234830" selected="true" /><select idref="V-234831" selected="true" /><select idref="V-234832" selected="true" /><select idref="V-234833" selected="true" /><select idref="V-234834" selected="true" /><select idref="V-234835" selected="true" /><select idref="V-234836" selected="true" /><select idref="V-234837" selected="true" /><select idref="V-234838" selected="true" /><select idref="V-234839" selected="true" /><select idref="V-234840" selected="true" /><select idref="V-234841" selected="true" /><select idref="V-234842" selected="true" /><select idref="V-234843" selected="true" /><select idref="V-234844" selected="true" /><select idref="V-234845" selected="true" /><select idref="V-234846" selected="true" /><select idref="V-234847" selected="true" /><select idref="V-234848" selected="true" /><select idref="V-234849" selected="true" /><select idref="V-234850" selected="true" /><select idref="V-234851" selected="true" /><select idref="V-234852" selected="true" /><select idref="V-234853" selected="true" /><select idref="V-234854" selected="true" /><select idref="V-234855" selected="true" /><select idref="V-234856" selected="true" /><select idref="V-234857" selected="true" /><select idref="V-234858" selected="true" /><select idref="V-234859" selected="true" /><select idref="V-234860" selected="true" /><select idref="V-234861" selected="true" /><select idref="V-234862" selected="true" /><select idref="V-234863" selected="true" /><select idref="V-234864" selected="true" /><select idref="V-234865" selected="true" /><select idref="V-234866" selected="true" /><select idref="V-234867" selected="true" /><select idref="V-234868" selected="true" /><select idref="V-234869" selected="true" /><select idref="V-234870" selected="true" /><select idref="V-234871" selected="true" /><select idref="V-234872" selected="true" /><select idref="V-234873" selected="true" /><select idref="V-234874" selected="true" /><select idref="V-234875" selected="true" /><select idref="V-234876" selected="true" /><select idref="V-234877" selected="true" /><select idref="V-234878" selected="true" /><select idref="V-234879" selected="true" /><select idref="V-234880" selected="true" /><select idref="V-234881" selected="true" /><select idref="V-234882" selected="true" /><select idref="V-234883" selected="true" /><select idref="V-234884" selected="true" /><select idref="V-234885" selected="true" /><select idref="V-234886" selected="true" /><select idref="V-234887" selected="true" /><select idref="V-234888" selected="true" /><select idref="V-234889" selected="true" /><select idref="V-234890" selected="true" /><select idref="V-234891" selected="true" /><select idref="V-234892" selected="true" /><select idref="V-234895" selected="true" /><select idref="V-234896" selected="true" /><select idref="V-234897" selected="true" /><select idref="V-234898" selected="true" /><select idref="V-234899" selected="true" /><select idref="V-234900" selected="true" /><select idref="V-234901" selected="true" /><select idref="V-234902" selected="true" /><select idref="V-234903" selected="true" /><select idref="V-234904" selected="true" /><select idref="V-234905" selected="true" /><select idref="V-234906" selected="true" /><select idref="V-234907" selected="true" /><select idref="V-234908" selected="true" /><select idref="V-234909" selected="true" /><select idref="V-234910" selected="true" /><select idref="V-234911" selected="true" /><select idref="V-234912" selected="true" /><select idref="V-234913" selected="true" /><select idref="V-234914" selected="true" /><select idref="V-234918" selected="true" /><select idref="V-234924" selected="true" /><select idref="V-234928" selected="true" /><select idref="V-234932" selected="true" /><select idref="V-234933" selected="true" /><select idref="V-234934" selected="true" /><select idref="V-234935" selected="true" /><select idref="V-234936" selected="true" /><select idref="V-234937" selected="true" /><select idref="V-234938" selected="true" /><select idref="V-234939" selected="true" /><select idref="V-234940" selected="true" /><select idref="V-234941" selected="true" /><select idref="V-234942" selected="true" /><select idref="V-234943" selected="true" /><select idref="V-234944" selected="true" /><select idref="V-234945" selected="true" /><select idref="V-234946" selected="true" /><select idref="V-234947" selected="true" /><select idref="V-234948" selected="true" /><select idref="V-234949" selected="true" /><select idref="V-234950" selected="true" /><select idref="V-234951" selected="true" /><select idref="V-234952" selected="true" /><select idref="V-234954" selected="true" /><select idref="V-234955" selected="true" /><select idref="V-234956" selected="true" /><select idref="V-234957" selected="true" /><select idref="V-234958" selected="true" /><select idref="V-234959" selected="true" /><select idref="V-234961" selected="true" /><select idref="V-234962" selected="true" /><select idref="V-234963" selected="true" /><select idref="V-234964" selected="true" /><select idref="V-234965" selected="true" /><select idref="V-234966" selected="true" /><select idref="V-234967" selected="true" /><select idref="V-234968" selected="true" /><select idref="V-234969" selected="true" /><select idref="V-234973" selected="true" /><select idref="V-234975" selected="true" /><select idref="V-234976" selected="true" /><select idref="V-234977" selected="true" /><select idref="V-234978" selected="true" /><select idref="V-234979" selected="true" /><select idref="V-234980" selected="true" /><select idref="V-234981" selected="true" /><select idref="V-234982" selected="true" /><select idref="V-234983" selected="true" /><select idref="V-234984" selected="true" /><select idref="V-234985" selected="true" /><select idref="V-234986" selected="true" /><select idref="V-234987" selected="true" /><select idref="V-234988" selected="true" /><select idref="V-234989" selected="true" /><select idref="V-234990" selected="true" /><select idref="V-234991" selected="true" /><select idref="V-234992" selected="true" /><select idref="V-234993" selected="true" /><select idref="V-234994" selected="true" /><select idref="V-234995" selected="true" /><select idref="V-234996" selected="true" /><select idref="V-234997" selected="true" /><select idref="V-234998" selected="true" /><select idref="V-234999" selected="true" /><select idref="V-235000" selected="true" /><select idref="V-235001" selected="true" /><select idref="V-235002" selected="true" /><select idref="V-235003" selected="true" /><select idref="V-235004" selected="true" /><select idref="V-235005" selected="true" /><select idref="V-235006" selected="true" /><select idref="V-235007" selected="true" /><select idref="V-235008" selected="true" /><select idref="V-235009" selected="true" /><select idref="V-235010" selected="true" /><select idref="V-235013" selected="true" /><select idref="V-235014" selected="true" /><select idref="V-235015" selected="true" /><select idref="V-235016" selected="true" /><select idref="V-235017" selected="true" /><select idref="V-235018" selected="true" /><select idref="V-235019" selected="true" /><select idref="V-235020" selected="true" /><select idref="V-235021" selected="true" /><select idref="V-235022" selected="true" /><select idref="V-235023" selected="true" /><select idref="V-235024" selected="true" /><select idref="V-235025" selected="true" /><select idref="V-235026" selected="true" /><select idref="V-235027" selected="true" /><select idref="V-235028" selected="true" /><select idref="V-235029" selected="true" /><select idref="V-235030" selected="true" /><select idref="V-235031" selected="true" /><select idref="V-235032" selected="true" /><select idref="V-251723" selected="true" /><select idref="V-251724" selected="true" /><select idref="V-251725" selected="true" /><select idref="V-255920" selected="true" /><select idref="V-255921" selected="true" /><select idref="V-255922" selected="true" /><select idref="V-256982" selected="true" /><select idref="V-256983" selected="true" /><select idref="V-274879" selected="true" /></Profile><Profile id="MAC-2_Public"><title>II - Mission Support Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-234800" selected="true" /><select idref="V-234802" selected="true" /><select idref="V-234803" selected="true" /><select idref="V-234804" selected="true" /><select idref="V-234805" selected="true" /><select idref="V-234806" selected="true" /><select idref="V-234807" selected="true" /><select idref="V-234808" selected="true" /><select idref="V-234809" selected="true" /><select idref="V-234810" selected="true" /><select idref="V-234811" selected="true" /><select idref="V-234812" selected="true" /><select idref="V-234813" selected="true" /><select idref="V-234814" selected="true" /><select idref="V-234815" selected="true" /><select idref="V-234816" selected="true" /><select idref="V-234817" selected="true" /><select idref="V-234818" selected="true" /><select idref="V-234819" selected="true" /><select idref="V-234820" selected="true" /><select idref="V-234821" selected="true" /><select idref="V-234822" selected="true" /><select idref="V-234823" selected="true" /><select idref="V-234825" selected="true" /><select idref="V-234826" selected="true" /><select idref="V-234827" selected="true" /><select idref="V-234828" selected="true" /><select idref="V-234829" selected="true" /><select idref="V-234830" selected="true" /><select idref="V-234831" selected="true" /><select idref="V-234832" selected="true" /><select idref="V-234833" selected="true" /><select idref="V-234834" selected="true" /><select idref="V-234835" selected="true" /><select idref="V-234836" selected="true" /><select idref="V-234837" selected="true" /><select idref="V-234838" selected="true" /><select idref="V-234839" selected="true" /><select idref="V-234840" selected="true" /><select idref="V-234841" selected="true" /><select idref="V-234842" selected="true" /><select idref="V-234843" selected="true" /><select idref="V-234844" selected="true" /><select idref="V-234845" selected="true" /><select idref="V-234846" selected="true" /><select idref="V-234847" selected="true" /><select idref="V-234848" selected="true" /><select idref="V-234849" selected="true" /><select idref="V-234850" selected="true" /><select idref="V-234851" selected="true" /><select idref="V-234852" selected="true" /><select idref="V-234853" selected="true" /><select idref="V-234854" selected="true" /><select idref="V-234855" selected="true" /><select idref="V-234856" selected="true" /><select idref="V-234857" selected="true" /><select idref="V-234858" selected="true" /><select idref="V-234859" selected="true" /><select idref="V-234860" selected="true" /><select idref="V-234861" selected="true" /><select idref="V-234862" selected="true" /><select idref="V-234863" selected="true" /><select idref="V-234864" selected="true" /><select idref="V-234865" selected="true" /><select idref="V-234866" selected="true" /><select idref="V-234867" selected="true" /><select idref="V-234868" selected="true" /><select idref="V-234869" selected="true" /><select idref="V-234870" selected="true" /><select idref="V-234871" selected="true" /><select idref="V-234872" selected="true" /><select idref="V-234873" selected="true" /><select idref="V-234874" selected="true" /><select idref="V-234875" selected="true" /><select idref="V-234876" selected="true" /><select idref="V-234877" selected="true" /><select idref="V-234878" selected="true" /><select idref="V-234879" selected="true" /><select idref="V-234880" selected="true" /><select idref="V-234881" selected="true" /><select idref="V-234882" selected="true" /><select idref="V-234883" selected="true" /><select idref="V-234884" selected="true" /><select idref="V-234885" selected="true" /><select idref="V-234886" selected="true" /><select idref="V-234887" selected="true" /><select idref="V-234888" selected="true" /><select idref="V-234889" selected="true" /><select idref="V-234890" selected="true" /><select idref="V-234891" selected="true" /><select idref="V-234892" selected="true" /><select idref="V-234895" selected="true" /><select idref="V-234896" selected="true" /><select idref="V-234897" selected="true" /><select idref="V-234898" selected="true" /><select idref="V-234899" selected="true" /><select idref="V-234900" selected="true" /><select idref="V-234901" selected="true" /><select idref="V-234902" selected="true" /><select idref="V-234903" selected="true" /><select idref="V-234904" selected="true" /><select idref="V-234905" selected="true" /><select idref="V-234906" selected="true" /><select idref="V-234907" selected="true" /><select idref="V-234908" selected="true" /><select idref="V-234909" selected="true" /><select idref="V-234910" selected="true" /><select idref="V-234911" selected="true" /><select idref="V-234912" selected="true" /><select idref="V-234913" selected="true" /><select idref="V-234914" selected="true" /><select idref="V-234918" selected="true" /><select idref="V-234924" selected="true" /><select idref="V-234928" selected="true" /><select idref="V-234932" selected="true" /><select idref="V-234933" selected="true" /><select idref="V-234934" selected="true" /><select idref="V-234935" selected="true" /><select idref="V-234936" selected="true" /><select idref="V-234937" selected="true" /><select idref="V-234938" selected="true" /><select idref="V-234939" selected="true" /><select idref="V-234940" selected="true" /><select idref="V-234941" selected="true" /><select idref="V-234942" selected="true" /><select idref="V-234943" selected="true" /><select idref="V-234944" selected="true" /><select idref="V-234945" selected="true" /><select idref="V-234946" selected="true" /><select idref="V-234947" selected="true" /><select idref="V-234948" selected="true" /><select idref="V-234949" selected="true" /><select idref="V-234950" selected="true" /><select idref="V-234951" selected="true" /><select idref="V-234952" selected="true" /><select idref="V-234954" selected="true" /><select idref="V-234955" selected="true" /><select idref="V-234956" selected="true" /><select idref="V-234957" selected="true" /><select idref="V-234958" selected="true" /><select idref="V-234959" selected="true" /><select idref="V-234961" selected="true" /><select idref="V-234962" selected="true" /><select idref="V-234963" selected="true" /><select idref="V-234964" selected="true" /><select idref="V-234965" selected="true" /><select idref="V-234966" selected="true" /><select idref="V-234967" selected="true" /><select idref="V-234968" selected="true" /><select idref="V-234969" selected="true" /><select idref="V-234973" selected="true" /><select idref="V-234975" selected="true" /><select idref="V-234976" selected="true" /><select idref="V-234977" selected="true" /><select idref="V-234978" selected="true" /><select idref="V-234979" selected="true" /><select idref="V-234980" selected="true" /><select idref="V-234981" selected="true" /><select idref="V-234982" selected="true" /><select idref="V-234983" selected="true" /><select idref="V-234984" selected="true" /><select idref="V-234985" selected="true" /><select idref="V-234986" selected="true" /><select idref="V-234987" selected="true" /><select idref="V-234988" selected="true" /><select idref="V-234989" selected="true" /><select idref="V-234990" selected="true" /><select idref="V-234991" selected="true" /><select idref="V-234992" selected="true" /><select idref="V-234993" selected="true" /><select idref="V-234994" selected="true" /><select idref="V-234995" selected="true" /><select idref="V-234996" selected="true" /><select idref="V-234997" selected="true" /><select idref="V-234998" selected="true" /><select idref="V-234999" selected="true" /><select idref="V-235000" selected="true" /><select idref="V-235001" selected="true" /><select idref="V-235002" selected="true" /><select idref="V-235003" selected="true" /><select idref="V-235004" selected="true" /><select idref="V-235005" selected="true" /><select idref="V-235006" selected="true" /><select idref="V-235007" selected="true" /><select idref="V-235008" selected="true" /><select idref="V-235009" selected="true" /><select idref="V-235010" selected="true" /><select idref="V-235013" selected="true" /><select idref="V-235014" selected="true" /><select idref="V-235015" selected="true" /><select idref="V-235016" selected="true" /><select idref="V-235017" selected="true" /><select idref="V-235018" selected="true" /><select idref="V-235019" selected="true" /><select idref="V-235020" selected="true" /><select idref="V-235021" selected="true" /><select idref="V-235022" selected="true" /><select idref="V-235023" selected="true" /><select idref="V-235024" selected="true" /><select idref="V-235025" selected="true" /><select idref="V-235026" selected="true" /><select idref="V-235027" selected="true" /><select idref="V-235028" selected="true" /><select idref="V-235029" selected="true" /><select idref="V-235030" selected="true" /><select idref="V-235031" selected="true" /><select idref="V-235032" selected="true" /><select idref="V-251723" selected="true" /><select idref="V-251724" selected="true" /><select idref="V-251725" selected="true" /><select idref="V-255920" selected="true" /><select idref="V-255921" selected="true" /><select idref="V-255922" selected="true" /><select idref="V-256982" selected="true" /><select idref="V-256983" selected="true" /><select idref="V-274879" selected="true" /></Profile><Profile id="MAC-2_Sensitive"><title>II - Mission Support Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-234800" selected="true" /><select idref="V-234802" selected="true" /><select idref="V-234803" selected="true" /><select idref="V-234804" selected="true" /><select idref="V-234805" selected="true" /><select idref="V-234806" selected="true" /><select idref="V-234807" selected="true" /><select idref="V-234808" selected="true" /><select idref="V-234809" selected="true" /><select idref="V-234810" selected="true" /><select idref="V-234811" selected="true" /><select idref="V-234812" selected="true" /><select idref="V-234813" selected="true" /><select idref="V-234814" selected="true" /><select idref="V-234815" selected="true" /><select idref="V-234816" selected="true" /><select idref="V-234817" selected="true" /><select idref="V-234818" selected="true" /><select idref="V-234819" selected="true" /><select idref="V-234820" selected="true" /><select idref="V-234821" selected="true" /><select idref="V-234822" selected="true" /><select idref="V-234823" selected="true" /><select idref="V-234825" selected="true" /><select idref="V-234826" selected="true" /><select idref="V-234827" selected="true" /><select idref="V-234828" selected="true" /><select idref="V-234829" selected="true" /><select idref="V-234830" selected="true" /><select idref="V-234831" selected="true" /><select idref="V-234832" selected="true" /><select idref="V-234833" selected="true" /><select idref="V-234834" selected="true" /><select idref="V-234835" selected="true" /><select idref="V-234836" selected="true" /><select idref="V-234837" selected="true" /><select idref="V-234838" selected="true" /><select idref="V-234839" selected="true" /><select idref="V-234840" selected="true" /><select idref="V-234841" selected="true" /><select idref="V-234842" selected="true" /><select idref="V-234843" selected="true" /><select idref="V-234844" selected="true" /><select idref="V-234845" selected="true" /><select idref="V-234846" selected="true" /><select idref="V-234847" selected="true" /><select idref="V-234848" selected="true" /><select idref="V-234849" selected="true" /><select idref="V-234850" selected="true" /><select idref="V-234851" selected="true" /><select idref="V-234852" selected="true" /><select idref="V-234853" selected="true" /><select idref="V-234854" selected="true" /><select idref="V-234855" selected="true" /><select idref="V-234856" selected="true" /><select idref="V-234857" selected="true" /><select idref="V-234858" selected="true" /><select idref="V-234859" selected="true" /><select idref="V-234860" selected="true" /><select idref="V-234861" selected="true" /><select idref="V-234862" selected="true" /><select idref="V-234863" selected="true" /><select idref="V-234864" selected="true" /><select idref="V-234865" selected="true" /><select idref="V-234866" selected="true" /><select idref="V-234867" selected="true" /><select idref="V-234868" selected="true" /><select idref="V-234869" selected="true" /><select idref="V-234870" selected="true" /><select idref="V-234871" selected="true" /><select idref="V-234872" selected="true" /><select idref="V-234873" selected="true" /><select idref="V-234874" selected="true" /><select idref="V-234875" selected="true" /><select idref="V-234876" selected="true" /><select idref="V-234877" selected="true" /><select idref="V-234878" selected="true" /><select idref="V-234879" selected="true" /><select idref="V-234880" selected="true" /><select idref="V-234881" selected="true" /><select idref="V-234882" selected="true" /><select idref="V-234883" selected="true" /><select idref="V-234884" selected="true" /><select idref="V-234885" selected="true" /><select idref="V-234886" selected="true" /><select idref="V-234887" selected="true" /><select idref="V-234888" selected="true" /><select idref="V-234889" selected="true" /><select idref="V-234890" selected="true" /><select idref="V-234891" selected="true" /><select idref="V-234892" selected="true" /><select idref="V-234895" selected="true" /><select idref="V-234896" selected="true" /><select idref="V-234897" selected="true" /><select idref="V-234898" selected="true" /><select idref="V-234899" selected="true" /><select idref="V-234900" selected="true" /><select idref="V-234901" selected="true" /><select idref="V-234902" selected="true" /><select idref="V-234903" selected="true" /><select idref="V-234904" selected="true" /><select idref="V-234905" selected="true" /><select idref="V-234906" selected="true" /><select idref="V-234907" selected="true" /><select idref="V-234908" selected="true" /><select idref="V-234909" selected="true" /><select idref="V-234910" selected="true" /><select idref="V-234911" selected="true" /><select idref="V-234912" selected="true" /><select idref="V-234913" selected="true" /><select idref="V-234914" selected="true" /><select idref="V-234918" selected="true" /><select idref="V-234924" selected="true" /><select idref="V-234928" selected="true" /><select idref="V-234932" selected="true" /><select idref="V-234933" selected="true" /><select idref="V-234934" selected="true" /><select idref="V-234935" selected="true" /><select idref="V-234936" selected="true" /><select idref="V-234937" selected="true" /><select idref="V-234938" selected="true" /><select idref="V-234939" selected="true" /><select idref="V-234940" selected="true" /><select idref="V-234941" selected="true" /><select idref="V-234942" selected="true" /><select idref="V-234943" selected="true" /><select idref="V-234944" selected="true" /><select idref="V-234945" selected="true" /><select idref="V-234946" selected="true" /><select idref="V-234947" selected="true" /><select idref="V-234948" selected="true" /><select idref="V-234949" selected="true" /><select idref="V-234950" selected="true" /><select idref="V-234951" selected="true" /><select idref="V-234952" selected="true" /><select idref="V-234954" selected="true" /><select idref="V-234955" selected="true" /><select idref="V-234956" selected="true" /><select idref="V-234957" selected="true" /><select idref="V-234958" selected="true" /><select idref="V-234959" selected="true" /><select idref="V-234961" selected="true" /><select idref="V-234962" selected="true" /><select idref="V-234963" selected="true" /><select idref="V-234964" selected="true" /><select idref="V-234965" selected="true" /><select idref="V-234966" selected="true" /><select idref="V-234967" selected="true" /><select idref="V-234968" selected="true" /><select idref="V-234969" selected="true" /><select idref="V-234973" selected="true" /><select idref="V-234975" selected="true" /><select idref="V-234976" selected="true" /><select idref="V-234977" selected="true" /><select idref="V-234978" selected="true" /><select idref="V-234979" selected="true" /><select idref="V-234980" selected="true" /><select idref="V-234981" selected="true" /><select idref="V-234982" selected="true" /><select idref="V-234983" selected="true" /><select idref="V-234984" selected="true" /><select idref="V-234985" selected="true" /><select idref="V-234986" selected="true" /><select idref="V-234987" selected="true" /><select idref="V-234988" selected="true" /><select idref="V-234989" selected="true" /><select idref="V-234990" selected="true" /><select idref="V-234991" selected="true" /><select idref="V-234992" selected="true" /><select idref="V-234993" selected="true" /><select idref="V-234994" selected="true" /><select idref="V-234995" selected="true" /><select idref="V-234996" selected="true" /><select idref="V-234997" selected="true" /><select idref="V-234998" selected="true" /><select idref="V-234999" selected="true" /><select idref="V-235000" selected="true" /><select idref="V-235001" selected="true" /><select idref="V-235002" selected="true" /><select idref="V-235003" selected="true" /><select idref="V-235004" selected="true" /><select idref="V-235005" selected="true" /><select idref="V-235006" selected="true" /><select idref="V-235007" selected="true" /><select idref="V-235008" selected="true" /><select idref="V-235009" selected="true" /><select idref="V-235010" selected="true" /><select idref="V-235013" selected="true" /><select idref="V-235014" selected="true" /><select idref="V-235015" selected="true" /><select idref="V-235016" selected="true" /><select idref="V-235017" selected="true" /><select idref="V-235018" selected="true" /><select idref="V-235019" selected="true" /><select idref="V-235020" selected="true" /><select idref="V-235021" selected="true" /><select idref="V-235022" selected="true" /><select idref="V-235023" selected="true" /><select idref="V-235024" selected="true" /><select idref="V-235025" selected="true" /><select idref="V-235026" selected="true" /><select idref="V-235027" selected="true" /><select idref="V-235028" selected="true" /><select idref="V-235029" selected="true" /><select idref="V-235030" selected="true" /><select idref="V-235031" selected="true" /><select idref="V-235032" selected="true" /><select idref="V-251723" selected="true" /><select idref="V-251724" selected="true" /><select idref="V-251725" selected="true" /><select idref="V-255920" selected="true" /><select idref="V-255921" selected="true" /><select idref="V-255922" selected="true" /><select idref="V-256982" selected="true" /><select idref="V-256983" selected="true" /><select idref="V-274879" selected="true" /></Profile><Profile id="MAC-3_Classified"><title>III - Administrative Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-234800" selected="true" /><select idref="V-234802" selected="true" /><select idref="V-234803" selected="true" /><select idref="V-234804" selected="true" /><select idref="V-234805" selected="true" /><select idref="V-234806" selected="true" /><select idref="V-234807" selected="true" /><select idref="V-234808" selected="true" /><select idref="V-234809" selected="true" /><select idref="V-234810" selected="true" /><select idref="V-234811" selected="true" /><select idref="V-234812" selected="true" /><select idref="V-234813" selected="true" /><select idref="V-234814" selected="true" /><select idref="V-234815" selected="true" /><select idref="V-234816" selected="true" /><select idref="V-234817" selected="true" /><select idref="V-234818" selected="true" /><select idref="V-234819" selected="true" /><select idref="V-234820" selected="true" /><select idref="V-234821" selected="true" /><select idref="V-234822" selected="true" /><select idref="V-234823" selected="true" /><select idref="V-234825" selected="true" /><select idref="V-234826" selected="true" /><select idref="V-234827" selected="true" /><select idref="V-234828" selected="true" /><select idref="V-234829" selected="true" /><select idref="V-234830" selected="true" /><select idref="V-234831" selected="true" /><select idref="V-234832" selected="true" /><select idref="V-234833" selected="true" /><select idref="V-234834" selected="true" /><select idref="V-234835" selected="true" /><select idref="V-234836" selected="true" /><select idref="V-234837" selected="true" /><select idref="V-234838" selected="true" /><select idref="V-234839" selected="true" /><select idref="V-234840" selected="true" /><select idref="V-234841" selected="true" /><select idref="V-234842" selected="true" /><select idref="V-234843" selected="true" /><select idref="V-234844" selected="true" /><select idref="V-234845" selected="true" /><select idref="V-234846" selected="true" /><select idref="V-234847" selected="true" /><select idref="V-234848" selected="true" /><select idref="V-234849" selected="true" /><select idref="V-234850" selected="true" /><select idref="V-234851" selected="true" /><select idref="V-234852" selected="true" /><select idref="V-234853" selected="true" /><select idref="V-234854" selected="true" /><select idref="V-234855" selected="true" /><select idref="V-234856" selected="true" /><select idref="V-234857" selected="true" /><select idref="V-234858" selected="true" /><select idref="V-234859" selected="true" /><select idref="V-234860" selected="true" /><select idref="V-234861" selected="true" /><select idref="V-234862" selected="true" /><select idref="V-234863" selected="true" /><select idref="V-234864" selected="true" /><select idref="V-234865" selected="true" /><select idref="V-234866" selected="true" /><select idref="V-234867" selected="true" /><select idref="V-234868" selected="true" /><select idref="V-234869" selected="true" /><select idref="V-234870" selected="true" /><select idref="V-234871" selected="true" /><select idref="V-234872" selected="true" /><select idref="V-234873" selected="true" /><select idref="V-234874" selected="true" /><select idref="V-234875" selected="true" /><select idref="V-234876" selected="true" /><select idref="V-234877" selected="true" /><select idref="V-234878" selected="true" /><select idref="V-234879" selected="true" /><select idref="V-234880" selected="true" /><select idref="V-234881" selected="true" /><select idref="V-234882" selected="true" /><select idref="V-234883" selected="true" /><select idref="V-234884" selected="true" /><select idref="V-234885" selected="true" /><select idref="V-234886" selected="true" /><select idref="V-234887" selected="true" /><select idref="V-234888" selected="true" /><select idref="V-234889" selected="true" /><select idref="V-234890" selected="true" /><select idref="V-234891" selected="true" /><select idref="V-234892" selected="true" /><select idref="V-234895" selected="true" /><select idref="V-234896" selected="true" /><select idref="V-234897" selected="true" /><select idref="V-234898" selected="true" /><select idref="V-234899" selected="true" /><select idref="V-234900" selected="true" /><select idref="V-234901" selected="true" /><select idref="V-234902" selected="true" /><select idref="V-234903" selected="true" /><select idref="V-234904" selected="true" /><select idref="V-234905" selected="true" /><select idref="V-234906" selected="true" /><select idref="V-234907" selected="true" /><select idref="V-234908" selected="true" /><select idref="V-234909" selected="true" /><select idref="V-234910" selected="true" /><select idref="V-234911" selected="true" /><select idref="V-234912" selected="true" /><select idref="V-234913" selected="true" /><select idref="V-234914" selected="true" /><select idref="V-234918" selected="true" /><select idref="V-234924" selected="true" /><select idref="V-234928" selected="true" /><select idref="V-234932" selected="true" /><select idref="V-234933" selected="true" /><select idref="V-234934" selected="true" /><select idref="V-234935" selected="true" /><select idref="V-234936" selected="true" /><select idref="V-234937" selected="true" /><select idref="V-234938" selected="true" /><select idref="V-234939" selected="true" /><select idref="V-234940" selected="true" /><select idref="V-234941" selected="true" /><select idref="V-234942" selected="true" /><select idref="V-234943" selected="true" /><select idref="V-234944" selected="true" /><select idref="V-234945" selected="true" /><select idref="V-234946" selected="true" /><select idref="V-234947" selected="true" /><select idref="V-234948" selected="true" /><select idref="V-234949" selected="true" /><select idref="V-234950" selected="true" /><select idref="V-234951" selected="true" /><select idref="V-234952" selected="true" /><select idref="V-234954" selected="true" /><select idref="V-234955" selected="true" /><select idref="V-234956" selected="true" /><select idref="V-234957" selected="true" /><select idref="V-234958" selected="true" /><select idref="V-234959" selected="true" /><select idref="V-234961" selected="true" /><select idref="V-234962" selected="true" /><select idref="V-234963" selected="true" /><select idref="V-234964" selected="true" /><select idref="V-234965" selected="true" /><select idref="V-234966" selected="true" /><select idref="V-234967" selected="true" /><select idref="V-234968" selected="true" /><select idref="V-234969" selected="true" /><select idref="V-234973" selected="true" /><select idref="V-234975" selected="true" /><select idref="V-234976" selected="true" /><select idref="V-234977" selected="true" /><select idref="V-234978" selected="true" /><select idref="V-234979" selected="true" /><select idref="V-234980" selected="true" /><select idref="V-234981" selected="true" /><select idref="V-234982" selected="true" /><select idref="V-234983" selected="true" /><select idref="V-234984" selected="true" /><select idref="V-234985" selected="true" /><select idref="V-234986" selected="true" /><select idref="V-234987" selected="true" /><select idref="V-234988" selected="true" /><select idref="V-234989" selected="true" /><select idref="V-234990" selected="true" /><select idref="V-234991" selected="true" /><select idref="V-234992" selected="true" /><select idref="V-234993" selected="true" /><select idref="V-234994" selected="true" /><select idref="V-234995" selected="true" /><select idref="V-234996" selected="true" /><select idref="V-234997" selected="true" /><select idref="V-234998" selected="true" /><select idref="V-234999" selected="true" /><select idref="V-235000" selected="true" /><select idref="V-235001" selected="true" /><select idref="V-235002" selected="true" /><select idref="V-235003" selected="true" /><select idref="V-235004" selected="true" /><select idref="V-235005" selected="true" /><select idref="V-235006" selected="true" /><select idref="V-235007" selected="true" /><select idref="V-235008" selected="true" /><select idref="V-235009" selected="true" /><select idref="V-235010" selected="true" /><select idref="V-235013" selected="true" /><select idref="V-235014" selected="true" /><select idref="V-235015" selected="true" /><select idref="V-235016" selected="true" /><select idref="V-235017" selected="true" /><select idref="V-235018" selected="true" /><select idref="V-235019" selected="true" /><select idref="V-235020" selected="true" /><select idref="V-235021" selected="true" /><select idref="V-235022" selected="true" /><select idref="V-235023" selected="true" /><select idref="V-235024" selected="true" /><select idref="V-235025" selected="true" /><select idref="V-235026" selected="true" /><select idref="V-235027" selected="true" /><select idref="V-235028" selected="true" /><select idref="V-235029" selected="true" /><select idref="V-235030" selected="true" /><select idref="V-235031" selected="true" /><select idref="V-235032" selected="true" /><select idref="V-251723" selected="true" /><select idref="V-251724" selected="true" /><select idref="V-251725" selected="true" /><select idref="V-255920" selected="true" /><select idref="V-255921" selected="true" /><select idref="V-255922" selected="true" /><select idref="V-256982" selected="true" /><select idref="V-256983" selected="true" /><select idref="V-274879" selected="true" /></Profile><Profile id="MAC-3_Public"><title>III - Administrative Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-234800" selected="true" /><select idref="V-234802" selected="true" /><select idref="V-234803" selected="true" /><select idref="V-234804" selected="true" /><select idref="V-234805" selected="true" /><select idref="V-234806" selected="true" /><select idref="V-234807" selected="true" /><select idref="V-234808" selected="true" /><select idref="V-234809" selected="true" /><select idref="V-234810" selected="true" /><select idref="V-234811" selected="true" /><select idref="V-234812" selected="true" /><select idref="V-234813" selected="true" /><select idref="V-234814" selected="true" /><select idref="V-234815" selected="true" /><select idref="V-234816" selected="true" /><select idref="V-234817" selected="true" /><select idref="V-234818" selected="true" /><select idref="V-234819" selected="true" /><select idref="V-234820" selected="true" /><select idref="V-234821" selected="true" /><select idref="V-234822" selected="true" /><select idref="V-234823" selected="true" /><select idref="V-234825" selected="true" /><select idref="V-234826" selected="true" /><select idref="V-234827" selected="true" /><select idref="V-234828" selected="true" /><select idref="V-234829" selected="true" /><select idref="V-234830" selected="true" /><select idref="V-234831" selected="true" /><select idref="V-234832" selected="true" /><select idref="V-234833" selected="true" /><select idref="V-234834" selected="true" /><select idref="V-234835" selected="true" /><select idref="V-234836" selected="true" /><select idref="V-234837" selected="true" /><select idref="V-234838" selected="true" /><select idref="V-234839" selected="true" /><select idref="V-234840" selected="true" /><select idref="V-234841" selected="true" /><select idref="V-234842" selected="true" /><select idref="V-234843" selected="true" /><select idref="V-234844" selected="true" /><select idref="V-234845" selected="true" /><select idref="V-234846" selected="true" /><select idref="V-234847" selected="true" /><select idref="V-234848" selected="true" /><select idref="V-234849" selected="true" /><select idref="V-234850" selected="true" /><select idref="V-234851" selected="true" /><select idref="V-234852" selected="true" /><select idref="V-234853" selected="true" /><select idref="V-234854" selected="true" /><select idref="V-234855" selected="true" /><select idref="V-234856" selected="true" /><select idref="V-234857" selected="true" /><select idref="V-234858" selected="true" /><select idref="V-234859" selected="true" /><select idref="V-234860" selected="true" /><select idref="V-234861" selected="true" /><select idref="V-234862" selected="true" /><select idref="V-234863" selected="true" /><select idref="V-234864" selected="true" /><select idref="V-234865" selected="true" /><select idref="V-234866" selected="true" /><select idref="V-234867" selected="true" /><select idref="V-234868" selected="true" /><select idref="V-234869" selected="true" /><select idref="V-234870" selected="true" /><select idref="V-234871" selected="true" /><select idref="V-234872" selected="true" /><select idref="V-234873" selected="true" /><select idref="V-234874" selected="true" /><select idref="V-234875" selected="true" /><select idref="V-234876" selected="true" /><select idref="V-234877" selected="true" /><select idref="V-234878" selected="true" /><select idref="V-234879" selected="true" /><select idref="V-234880" selected="true" /><select idref="V-234881" selected="true" /><select idref="V-234882" selected="true" /><select idref="V-234883" selected="true" /><select idref="V-234884" selected="true" /><select idref="V-234885" selected="true" /><select idref="V-234886" selected="true" /><select idref="V-234887" selected="true" /><select idref="V-234888" selected="true" /><select idref="V-234889" selected="true" /><select idref="V-234890" selected="true" /><select idref="V-234891" selected="true" /><select idref="V-234892" selected="true" /><select idref="V-234895" selected="true" /><select idref="V-234896" selected="true" /><select idref="V-234897" selected="true" /><select idref="V-234898" selected="true" /><select idref="V-234899" selected="true" /><select idref="V-234900" selected="true" /><select idref="V-234901" selected="true" /><select idref="V-234902" selected="true" /><select idref="V-234903" selected="true" /><select idref="V-234904" selected="true" /><select idref="V-234905" selected="true" /><select idref="V-234906" selected="true" /><select idref="V-234907" selected="true" /><select idref="V-234908" selected="true" /><select idref="V-234909" selected="true" /><select idref="V-234910" selected="true" /><select idref="V-234911" selected="true" /><select idref="V-234912" selected="true" /><select idref="V-234913" selected="true" /><select idref="V-234914" selected="true" /><select idref="V-234918" selected="true" /><select idref="V-234924" selected="true" /><select idref="V-234928" selected="true" /><select idref="V-234932" selected="true" /><select idref="V-234933" selected="true" /><select idref="V-234934" selected="true" /><select idref="V-234935" selected="true" /><select idref="V-234936" selected="true" /><select idref="V-234937" selected="true" /><select idref="V-234938" selected="true" /><select idref="V-234939" selected="true" /><select idref="V-234940" selected="true" /><select idref="V-234941" selected="true" /><select idref="V-234942" selected="true" /><select idref="V-234943" selected="true" /><select idref="V-234944" selected="true" /><select idref="V-234945" selected="true" /><select idref="V-234946" selected="true" /><select idref="V-234947" selected="true" /><select idref="V-234948" selected="true" /><select idref="V-234949" selected="true" /><select idref="V-234950" selected="true" /><select idref="V-234951" selected="true" /><select idref="V-234952" selected="true" /><select idref="V-234954" selected="true" /><select idref="V-234955" selected="true" /><select idref="V-234956" selected="true" /><select idref="V-234957" selected="true" /><select idref="V-234958" selected="true" /><select idref="V-234959" selected="true" /><select idref="V-234961" selected="true" /><select idref="V-234962" selected="true" /><select idref="V-234963" selected="true" /><select idref="V-234964" selected="true" /><select idref="V-234965" selected="true" /><select idref="V-234966" selected="true" /><select idref="V-234967" selected="true" /><select idref="V-234968" selected="true" /><select idref="V-234969" selected="true" /><select idref="V-234973" selected="true" /><select idref="V-234975" selected="true" /><select idref="V-234976" selected="true" /><select idref="V-234977" selected="true" /><select idref="V-234978" selected="true" /><select idref="V-234979" selected="true" /><select idref="V-234980" selected="true" /><select idref="V-234981" selected="true" /><select idref="V-234982" selected="true" /><select idref="V-234983" selected="true" /><select idref="V-234984" selected="true" /><select idref="V-234985" selected="true" /><select idref="V-234986" selected="true" /><select idref="V-234987" selected="true" /><select idref="V-234988" selected="true" /><select idref="V-234989" selected="true" /><select idref="V-234990" selected="true" /><select idref="V-234991" selected="true" /><select idref="V-234992" selected="true" /><select idref="V-234993" selected="true" /><select idref="V-234994" selected="true" /><select idref="V-234995" selected="true" /><select idref="V-234996" selected="true" /><select idref="V-234997" selected="true" /><select idref="V-234998" selected="true" /><select idref="V-234999" selected="true" /><select idref="V-235000" selected="true" /><select idref="V-235001" selected="true" /><select idref="V-235002" selected="true" /><select idref="V-235003" selected="true" /><select idref="V-235004" selected="true" /><select idref="V-235005" selected="true" /><select idref="V-235006" selected="true" /><select idref="V-235007" selected="true" /><select idref="V-235008" selected="true" /><select idref="V-235009" selected="true" /><select idref="V-235010" selected="true" /><select idref="V-235013" selected="true" /><select idref="V-235014" selected="true" /><select idref="V-235015" selected="true" /><select idref="V-235016" selected="true" /><select idref="V-235017" selected="true" /><select idref="V-235018" selected="true" /><select idref="V-235019" selected="true" /><select idref="V-235020" selected="true" /><select idref="V-235021" selected="true" /><select idref="V-235022" selected="true" /><select idref="V-235023" selected="true" /><select idref="V-235024" selected="true" /><select idref="V-235025" selected="true" /><select idref="V-235026" selected="true" /><select idref="V-235027" selected="true" /><select idref="V-235028" selected="true" /><select idref="V-235029" selected="true" /><select idref="V-235030" selected="true" /><select idref="V-235031" selected="true" /><select idref="V-235032" selected="true" /><select idref="V-251723" selected="true" /><select idref="V-251724" selected="true" /><select idref="V-251725" selected="true" /><select idref="V-255920" selected="true" /><select idref="V-255921" selected="true" /><select idref="V-255922" selected="true" /><select idref="V-256982" selected="true" /><select idref="V-256983" selected="true" /><select idref="V-274879" selected="true" /></Profile><Profile id="MAC-3_Sensitive"><title>III - Administrative Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-234800" selected="true" /><select idref="V-234802" selected="true" /><select idref="V-234803" selected="true" /><select idref="V-234804" selected="true" /><select idref="V-234805" selected="true" /><select idref="V-234806" selected="true" /><select idref="V-234807" selected="true" /><select idref="V-234808" selected="true" /><select idref="V-234809" selected="true" /><select idref="V-234810" selected="true" /><select idref="V-234811" selected="true" /><select idref="V-234812" selected="true" /><select idref="V-234813" selected="true" /><select idref="V-234814" selected="true" /><select idref="V-234815" selected="true" /><select idref="V-234816" selected="true" /><select idref="V-234817" selected="true" /><select idref="V-234818" selected="true" /><select idref="V-234819" selected="true" /><select idref="V-234820" selected="true" /><select idref="V-234821" selected="true" /><select idref="V-234822" selected="true" /><select idref="V-234823" selected="true" /><select idref="V-234825" selected="true" /><select idref="V-234826" selected="true" /><select idref="V-234827" selected="true" /><select idref="V-234828" selected="true" /><select idref="V-234829" selected="true" /><select idref="V-234830" selected="true" /><select idref="V-234831" selected="true" /><select idref="V-234832" selected="true" /><select idref="V-234833" selected="true" /><select idref="V-234834" selected="true" /><select idref="V-234835" selected="true" /><select idref="V-234836" selected="true" /><select idref="V-234837" selected="true" /><select idref="V-234838" selected="true" /><select idref="V-234839" selected="true" /><select idref="V-234840" selected="true" /><select idref="V-234841" selected="true" /><select idref="V-234842" selected="true" /><select idref="V-234843" selected="true" /><select idref="V-234844" selected="true" /><select idref="V-234845" selected="true" /><select idref="V-234846" selected="true" /><select idref="V-234847" selected="true" /><select idref="V-234848" selected="true" /><select idref="V-234849" selected="true" /><select idref="V-234850" selected="true" /><select idref="V-234851" selected="true" /><select idref="V-234852" selected="true" /><select idref="V-234853" selected="true" /><select idref="V-234854" selected="true" /><select idref="V-234855" selected="true" /><select idref="V-234856" selected="true" /><select idref="V-234857" selected="true" /><select idref="V-234858" selected="true" /><select idref="V-234859" selected="true" /><select idref="V-234860" selected="true" /><select idref="V-234861" selected="true" /><select idref="V-234862" selected="true" /><select idref="V-234863" selected="true" /><select idref="V-234864" selected="true" /><select idref="V-234865" selected="true" /><select idref="V-234866" selected="true" /><select idref="V-234867" selected="true" /><select idref="V-234868" selected="true" /><select idref="V-234869" selected="true" /><select idref="V-234870" selected="true" /><select idref="V-234871" selected="true" /><select idref="V-234872" selected="true" /><select idref="V-234873" selected="true" /><select idref="V-234874" selected="true" /><select idref="V-234875" selected="true" /><select idref="V-234876" selected="true" /><select idref="V-234877" selected="true" /><select idref="V-234878" selected="true" /><select idref="V-234879" selected="true" /><select idref="V-234880" selected="true" /><select idref="V-234881" selected="true" /><select idref="V-234882" selected="true" /><select idref="V-234883" selected="true" /><select idref="V-234884" selected="true" /><select idref="V-234885" selected="true" /><select idref="V-234886" selected="true" /><select idref="V-234887" selected="true" /><select idref="V-234888" selected="true" /><select idref="V-234889" selected="true" /><select idref="V-234890" selected="true" /><select idref="V-234891" selected="true" /><select idref="V-234892" selected="true" /><select idref="V-234895" selected="true" /><select idref="V-234896" selected="true" /><select idref="V-234897" selected="true" /><select idref="V-234898" selected="true" /><select idref="V-234899" selected="true" /><select idref="V-234900" selected="true" /><select idref="V-234901" selected="true" /><select idref="V-234902" selected="true" /><select idref="V-234903" selected="true" /><select idref="V-234904" selected="true" /><select idref="V-234905" selected="true" /><select idref="V-234906" selected="true" /><select idref="V-234907" selected="true" /><select idref="V-234908" selected="true" /><select idref="V-234909" selected="true" /><select idref="V-234910" selected="true" /><select idref="V-234911" selected="true" /><select idref="V-234912" selected="true" /><select idref="V-234913" selected="true" /><select idref="V-234914" selected="true" /><select idref="V-234918" selected="true" /><select idref="V-234924" selected="true" /><select idref="V-234928" selected="true" /><select idref="V-234932" selected="true" /><select idref="V-234933" selected="true" /><select idref="V-234934" selected="true" /><select idref="V-234935" selected="true" /><select idref="V-234936" selected="true" /><select idref="V-234937" selected="true" /><select idref="V-234938" selected="true" /><select idref="V-234939" selected="true" /><select idref="V-234940" selected="true" /><select idref="V-234941" selected="true" /><select idref="V-234942" selected="true" /><select idref="V-234943" selected="true" /><select idref="V-234944" selected="true" /><select idref="V-234945" selected="true" /><select idref="V-234946" selected="true" /><select idref="V-234947" selected="true" /><select idref="V-234948" selected="true" /><select idref="V-234949" selected="true" /><select idref="V-234950" selected="true" /><select idref="V-234951" selected="true" /><select idref="V-234952" selected="true" /><select idref="V-234954" selected="true" /><select idref="V-234955" selected="true" /><select idref="V-234956" selected="true" /><select idref="V-234957" selected="true" /><select idref="V-234958" selected="true" /><select idref="V-234959" selected="true" /><select idref="V-234961" selected="true" /><select idref="V-234962" selected="true" /><select idref="V-234963" selected="true" /><select idref="V-234964" selected="true" /><select idref="V-234965" selected="true" /><select idref="V-234966" selected="true" /><select idref="V-234967" selected="true" /><select idref="V-234968" selected="true" /><select idref="V-234969" selected="true" /><select idref="V-234973" selected="true" /><select idref="V-234975" selected="true" /><select idref="V-234976" selected="true" /><select idref="V-234977" selected="true" /><select idref="V-234978" selected="true" /><select idref="V-234979" selected="true" /><select idref="V-234980" selected="true" /><select idref="V-234981" selected="true" /><select idref="V-234982" selected="true" /><select idref="V-234983" selected="true" /><select idref="V-234984" selected="true" /><select idref="V-234985" selected="true" /><select idref="V-234986" selected="true" /><select idref="V-234987" selected="true" /><select idref="V-234988" selected="true" /><select idref="V-234989" selected="true" /><select idref="V-234990" selected="true" /><select idref="V-234991" selected="true" /><select idref="V-234992" selected="true" /><select idref="V-234993" selected="true" /><select idref="V-234994" selected="true" /><select idref="V-234995" selected="true" /><select idref="V-234996" selected="true" /><select idref="V-234997" selected="true" /><select idref="V-234998" selected="true" /><select idref="V-234999" selected="true" /><select idref="V-235000" selected="true" /><select idref="V-235001" selected="true" /><select idref="V-235002" selected="true" /><select idref="V-235003" selected="true" /><select idref="V-235004" selected="true" /><select idref="V-235005" selected="true" /><select idref="V-235006" selected="true" /><select idref="V-235007" selected="true" /><select idref="V-235008" selected="true" /><select idref="V-235009" selected="true" /><select idref="V-235010" selected="true" /><select idref="V-235013" selected="true" /><select idref="V-235014" selected="true" /><select idref="V-235015" selected="true" /><select idref="V-235016" selected="true" /><select idref="V-235017" selected="true" /><select idref="V-235018" selected="true" /><select idref="V-235019" selected="true" /><select idref="V-235020" selected="true" /><select idref="V-235021" selected="true" /><select idref="V-235022" selected="true" /><select idref="V-235023" selected="true" /><select idref="V-235024" selected="true" /><select idref="V-235025" selected="true" /><select idref="V-235026" selected="true" /><select idref="V-235027" selected="true" /><select idref="V-235028" selected="true" /><select idref="V-235029" selected="true" /><select idref="V-235030" selected="true" /><select idref="V-235031" selected="true" /><select idref="V-235032" selected="true" /><select idref="V-251723" selected="true" /><select idref="V-251724" selected="true" /><select idref="V-251725" selected="true" /><select idref="V-255920" selected="true" /><select idref="V-255921" selected="true" /><select idref="V-255922" selected="true" /><select idref="V-256982" selected="true" /><select idref="V-256983" selected="true" /><select idref="V-274879" selected="true" /></Profile><Group id="V-234800"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-234800r991589_rule" weight="10.0" severity="high"><version>SLES-15-010000</version><title>The SUSE operating system must be a vendor-supported release.</title><description>&lt;VulnDiscussion&gt;A SUSE operating system release is considered "supported" if the vendor continues to provide security patches for the product. With an unsupported release, it will not be possible to resolve security issues discovered in the system software.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Server 15</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Server 15</dc:subject><dc:identifier>5274</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001230</ident><fixtext fixref="F-37951r618670_fix">Upgrade the SUSE operating system to a version supported by the vendor. If the system is not registered with the SUSE Customer Center, register the system against the correct subscription.
+<?xml version="1.0" encoding="utf-8"?><?xml-stylesheet type='text/xsl' href='STIG_unclass.xsl'?><Benchmark xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.1 http://nvd.nist.gov/schema/xccdf-1.1.4.xsd http://cpe.mitre.org/dictionary/2.0 http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd" id="SLES_15_STIG" xml:lang="en" xmlns="http://checklists.nist.gov/xccdf/1.1"><status date="2025-11-24">accepted</status><title>SUSE Linux Enterprise Server 15 Security Technical Implementation Guide</title><description>This Security Technical Implementation Guide is published as a tool to improve the security of Department of Defense (DOD) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.</description><notice id="terms-of-use" xml:lang="en"></notice><front-matter xml:lang="en"></front-matter><rear-matter xml:lang="en"></rear-matter><reference href="https://cyber.mil"><dc:publisher>DISA</dc:publisher><dc:source>STIG.DOD.MIL</dc:source></reference><plain-text id="release-info">Release: 6 Benchmark Date: 05 Jan 2026</plain-text><plain-text id="generator">3.5.2</plain-text><plain-text id="conventionsVersion">1.10.0</plain-text><version>2</version><Profile id="MAC-1_Classified"><title>I - Mission Critical Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-234800" selected="true" /><select idref="V-234802" selected="true" /><select idref="V-234803" selected="true" /><select idref="V-234804" selected="true" /><select idref="V-234805" selected="true" /><select idref="V-234806" selected="true" /><select idref="V-234807" selected="true" /><select idref="V-234808" selected="true" /><select idref="V-234809" selected="true" /><select idref="V-234810" selected="true" /><select idref="V-234811" selected="true" /><select idref="V-234812" selected="true" /><select idref="V-234813" selected="true" /><select idref="V-234814" selected="true" /><select idref="V-234815" selected="true" /><select idref="V-234816" selected="true" /><select idref="V-234817" selected="true" /><select idref="V-234818" selected="true" /><select idref="V-234819" selected="true" /><select idref="V-234820" selected="true" /><select idref="V-234821" selected="true" /><select idref="V-234822" selected="true" /><select idref="V-234823" selected="true" /><select idref="V-234825" selected="true" /><select idref="V-234826" selected="true" /><select idref="V-234827" selected="true" /><select idref="V-234828" selected="true" /><select idref="V-234829" selected="true" /><select idref="V-234830" selected="true" /><select idref="V-234831" selected="true" /><select idref="V-234832" selected="true" /><select idref="V-234833" selected="true" /><select idref="V-234834" selected="true" /><select idref="V-234835" selected="true" /><select idref="V-234836" selected="true" /><select idref="V-234837" selected="true" /><select idref="V-234838" selected="true" /><select idref="V-234839" selected="true" /><select idref="V-234840" selected="true" /><select idref="V-234841" selected="true" /><select idref="V-234842" selected="true" /><select idref="V-234843" selected="true" /><select idref="V-234844" selected="true" /><select idref="V-234845" selected="true" /><select idref="V-234846" selected="true" /><select idref="V-234847" selected="true" /><select idref="V-234848" selected="true" /><select idref="V-234849" selected="true" /><select idref="V-234850" selected="true" /><select idref="V-234851" selected="true" /><select idref="V-234852" selected="true" /><select idref="V-234853" selected="true" /><select idref="V-234854" selected="true" /><select idref="V-234855" selected="true" /><select idref="V-234856" selected="true" /><select idref="V-234857" selected="true" /><select idref="V-234858" selected="true" /><select idref="V-234859" selected="true" /><select idref="V-234860" selected="true" /><select idref="V-234861" selected="true" /><select idref="V-234862" selected="true" /><select idref="V-234863" selected="true" /><select idref="V-234864" selected="true" /><select idref="V-234865" selected="true" /><select idref="V-234866" selected="true" /><select idref="V-234867" selected="true" /><select idref="V-234868" selected="true" /><select idref="V-234869" selected="true" /><select idref="V-234870" selected="true" /><select idref="V-234871" selected="true" /><select idref="V-234872" selected="true" /><select idref="V-234874" selected="true" /><select idref="V-234875" selected="true" /><select idref="V-234876" selected="true" /><select idref="V-234877" selected="true" /><select idref="V-234878" selected="true" /><select idref="V-234879" selected="true" /><select idref="V-234880" selected="true" /><select idref="V-234881" selected="true" /><select idref="V-234882" selected="true" /><select idref="V-234883" selected="true" /><select idref="V-234884" selected="true" /><select idref="V-234885" selected="true" /><select idref="V-234886" selected="true" /><select idref="V-234887" selected="true" /><select idref="V-234888" selected="true" /><select idref="V-234889" selected="true" /><select idref="V-234890" selected="true" /><select idref="V-234891" selected="true" /><select idref="V-234892" selected="true" /><select idref="V-234895" selected="true" /><select idref="V-234896" selected="true" /><select idref="V-234897" selected="true" /><select idref="V-234898" selected="true" /><select idref="V-234899" selected="true" /><select idref="V-234900" selected="true" /><select idref="V-234901" selected="true" /><select idref="V-234902" selected="true" /><select idref="V-234903" selected="true" /><select idref="V-234904" selected="true" /><select idref="V-234905" selected="true" /><select idref="V-234906" selected="true" /><select idref="V-234907" selected="true" /><select idref="V-234908" selected="true" /><select idref="V-234909" selected="true" /><select idref="V-234910" selected="true" /><select idref="V-234911" selected="true" /><select idref="V-234912" selected="true" /><select idref="V-234913" selected="true" /><select idref="V-234914" selected="true" /><select idref="V-234918" selected="true" /><select idref="V-234924" selected="true" /><select idref="V-234928" selected="true" /><select idref="V-234932" selected="true" /><select idref="V-234933" selected="true" /><select idref="V-234934" selected="true" /><select idref="V-234935" selected="true" /><select idref="V-234936" selected="true" /><select idref="V-234937" selected="true" /><select idref="V-234938" selected="true" /><select idref="V-234939" selected="true" /><select idref="V-234940" selected="true" /><select idref="V-234941" selected="true" /><select idref="V-234942" selected="true" /><select idref="V-234943" selected="true" /><select idref="V-234944" selected="true" /><select idref="V-234945" selected="true" /><select idref="V-234946" selected="true" /><select idref="V-234947" selected="true" /><select idref="V-234948" selected="true" /><select idref="V-234949" selected="true" /><select idref="V-234950" selected="true" /><select idref="V-234951" selected="true" /><select idref="V-234952" selected="true" /><select idref="V-234954" selected="true" /><select idref="V-234955" selected="true" /><select idref="V-234956" selected="true" /><select idref="V-234957" selected="true" /><select idref="V-234958" selected="true" /><select idref="V-234959" selected="true" /><select idref="V-234961" selected="true" /><select idref="V-234962" selected="true" /><select idref="V-234963" selected="true" /><select idref="V-234964" selected="true" /><select idref="V-234965" selected="true" /><select idref="V-234966" selected="true" /><select idref="V-234967" selected="true" /><select idref="V-234968" selected="true" /><select idref="V-234969" selected="true" /><select idref="V-234973" selected="true" /><select idref="V-234975" selected="true" /><select idref="V-234976" selected="true" /><select idref="V-234977" selected="true" /><select idref="V-234978" selected="true" /><select idref="V-234979" selected="true" /><select idref="V-234980" selected="true" /><select idref="V-234981" selected="true" /><select idref="V-234982" selected="true" /><select idref="V-234983" selected="true" /><select idref="V-234984" selected="true" /><select idref="V-234985" selected="true" /><select idref="V-234986" selected="true" /><select idref="V-234987" selected="true" /><select idref="V-234988" selected="true" /><select idref="V-234989" selected="true" /><select idref="V-234990" selected="true" /><select idref="V-234991" selected="true" /><select idref="V-234992" selected="true" /><select idref="V-234993" selected="true" /><select idref="V-234994" selected="true" /><select idref="V-234995" selected="true" /><select idref="V-234996" selected="true" /><select idref="V-234997" selected="true" /><select idref="V-234998" selected="true" /><select idref="V-234999" selected="true" /><select idref="V-235000" selected="true" /><select idref="V-235001" selected="true" /><select idref="V-235002" selected="true" /><select idref="V-235003" selected="true" /><select idref="V-235004" selected="true" /><select idref="V-235005" selected="true" /><select idref="V-235006" selected="true" /><select idref="V-235007" selected="true" /><select idref="V-235008" selected="true" /><select idref="V-235009" selected="true" /><select idref="V-235010" selected="true" /><select idref="V-235013" selected="true" /><select idref="V-235014" selected="true" /><select idref="V-235015" selected="true" /><select idref="V-235016" selected="true" /><select idref="V-235017" selected="true" /><select idref="V-235018" selected="true" /><select idref="V-235019" selected="true" /><select idref="V-235020" selected="true" /><select idref="V-235021" selected="true" /><select idref="V-235022" selected="true" /><select idref="V-235023" selected="true" /><select idref="V-235024" selected="true" /><select idref="V-235025" selected="true" /><select idref="V-235026" selected="true" /><select idref="V-235027" selected="true" /><select idref="V-235028" selected="true" /><select idref="V-235029" selected="true" /><select idref="V-235030" selected="true" /><select idref="V-235031" selected="true" /><select idref="V-235032" selected="true" /><select idref="V-251723" selected="true" /><select idref="V-251724" selected="true" /><select idref="V-251725" selected="true" /><select idref="V-255920" selected="true" /><select idref="V-255921" selected="true" /><select idref="V-255922" selected="true" /><select idref="V-256982" selected="true" /><select idref="V-256983" selected="true" /><select idref="V-274879" selected="true" /></Profile><Profile id="MAC-1_Public"><title>I - Mission Critical Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-234800" selected="true" /><select idref="V-234802" selected="true" /><select idref="V-234803" selected="true" /><select idref="V-234804" selected="true" /><select idref="V-234805" selected="true" /><select idref="V-234806" selected="true" /><select idref="V-234807" selected="true" /><select idref="V-234808" selected="true" /><select idref="V-234809" selected="true" /><select idref="V-234810" selected="true" /><select idref="V-234811" selected="true" /><select idref="V-234812" selected="true" /><select idref="V-234813" selected="true" /><select idref="V-234814" selected="true" /><select idref="V-234815" selected="true" /><select idref="V-234816" selected="true" /><select idref="V-234817" selected="true" /><select idref="V-234818" selected="true" /><select idref="V-234819" selected="true" /><select idref="V-234820" selected="true" /><select idref="V-234821" selected="true" /><select idref="V-234822" selected="true" /><select idref="V-234823" selected="true" /><select idref="V-234825" selected="true" /><select idref="V-234826" selected="true" /><select idref="V-234827" selected="true" /><select idref="V-234828" selected="true" /><select idref="V-234829" selected="true" /><select idref="V-234830" selected="true" /><select idref="V-234831" selected="true" /><select idref="V-234832" selected="true" /><select idref="V-234833" selected="true" /><select idref="V-234834" selected="true" /><select idref="V-234835" selected="true" /><select idref="V-234836" selected="true" /><select idref="V-234837" selected="true" /><select idref="V-234838" selected="true" /><select idref="V-234839" selected="true" /><select idref="V-234840" selected="true" /><select idref="V-234841" selected="true" /><select idref="V-234842" selected="true" /><select idref="V-234843" selected="true" /><select idref="V-234844" selected="true" /><select idref="V-234845" selected="true" /><select idref="V-234846" selected="true" /><select idref="V-234847" selected="true" /><select idref="V-234848" selected="true" /><select idref="V-234849" selected="true" /><select idref="V-234850" selected="true" /><select idref="V-234851" selected="true" /><select idref="V-234852" selected="true" /><select idref="V-234853" selected="true" /><select idref="V-234854" selected="true" /><select idref="V-234855" selected="true" /><select idref="V-234856" selected="true" /><select idref="V-234857" selected="true" /><select idref="V-234858" selected="true" /><select idref="V-234859" selected="true" /><select idref="V-234860" selected="true" /><select idref="V-234861" selected="true" /><select idref="V-234862" selected="true" /><select idref="V-234863" selected="true" /><select idref="V-234864" selected="true" /><select idref="V-234865" selected="true" /><select idref="V-234866" selected="true" /><select idref="V-234867" selected="true" /><select idref="V-234868" selected="true" /><select idref="V-234869" selected="true" /><select idref="V-234870" selected="true" /><select idref="V-234871" selected="true" /><select idref="V-234872" selected="true" /><select idref="V-234874" selected="true" /><select idref="V-234875" selected="true" /><select idref="V-234876" selected="true" /><select idref="V-234877" selected="true" /><select idref="V-234878" selected="true" /><select idref="V-234879" selected="true" /><select idref="V-234880" selected="true" /><select idref="V-234881" selected="true" /><select idref="V-234882" selected="true" /><select idref="V-234883" selected="true" /><select idref="V-234884" selected="true" /><select idref="V-234885" selected="true" /><select idref="V-234886" selected="true" /><select idref="V-234887" selected="true" /><select idref="V-234888" selected="true" /><select idref="V-234889" selected="true" /><select idref="V-234890" selected="true" /><select idref="V-234891" selected="true" /><select idref="V-234892" selected="true" /><select idref="V-234895" selected="true" /><select idref="V-234896" selected="true" /><select idref="V-234897" selected="true" /><select idref="V-234898" selected="true" /><select idref="V-234899" selected="true" /><select idref="V-234900" selected="true" /><select idref="V-234901" selected="true" /><select idref="V-234902" selected="true" /><select idref="V-234903" selected="true" /><select idref="V-234904" selected="true" /><select idref="V-234905" selected="true" /><select idref="V-234906" selected="true" /><select idref="V-234907" selected="true" /><select idref="V-234908" selected="true" /><select idref="V-234909" selected="true" /><select idref="V-234910" selected="true" /><select idref="V-234911" selected="true" /><select idref="V-234912" selected="true" /><select idref="V-234913" selected="true" /><select idref="V-234914" selected="true" /><select idref="V-234918" selected="true" /><select idref="V-234924" selected="true" /><select idref="V-234928" selected="true" /><select idref="V-234932" selected="true" /><select idref="V-234933" selected="true" /><select idref="V-234934" selected="true" /><select idref="V-234935" selected="true" /><select idref="V-234936" selected="true" /><select idref="V-234937" selected="true" /><select idref="V-234938" selected="true" /><select idref="V-234939" selected="true" /><select idref="V-234940" selected="true" /><select idref="V-234941" selected="true" /><select idref="V-234942" selected="true" /><select idref="V-234943" selected="true" /><select idref="V-234944" selected="true" /><select idref="V-234945" selected="true" /><select idref="V-234946" selected="true" /><select idref="V-234947" selected="true" /><select idref="V-234948" selected="true" /><select idref="V-234949" selected="true" /><select idref="V-234950" selected="true" /><select idref="V-234951" selected="true" /><select idref="V-234952" selected="true" /><select idref="V-234954" selected="true" /><select idref="V-234955" selected="true" /><select idref="V-234956" selected="true" /><select idref="V-234957" selected="true" /><select idref="V-234958" selected="true" /><select idref="V-234959" selected="true" /><select idref="V-234961" selected="true" /><select idref="V-234962" selected="true" /><select idref="V-234963" selected="true" /><select idref="V-234964" selected="true" /><select idref="V-234965" selected="true" /><select idref="V-234966" selected="true" /><select idref="V-234967" selected="true" /><select idref="V-234968" selected="true" /><select idref="V-234969" selected="true" /><select idref="V-234973" selected="true" /><select idref="V-234975" selected="true" /><select idref="V-234976" selected="true" /><select idref="V-234977" selected="true" /><select idref="V-234978" selected="true" /><select idref="V-234979" selected="true" /><select idref="V-234980" selected="true" /><select idref="V-234981" selected="true" /><select idref="V-234982" selected="true" /><select idref="V-234983" selected="true" /><select idref="V-234984" selected="true" /><select idref="V-234985" selected="true" /><select idref="V-234986" selected="true" /><select idref="V-234987" selected="true" /><select idref="V-234988" selected="true" /><select idref="V-234989" selected="true" /><select idref="V-234990" selected="true" /><select idref="V-234991" selected="true" /><select idref="V-234992" selected="true" /><select idref="V-234993" selected="true" /><select idref="V-234994" selected="true" /><select idref="V-234995" selected="true" /><select idref="V-234996" selected="true" /><select idref="V-234997" selected="true" /><select idref="V-234998" selected="true" /><select idref="V-234999" selected="true" /><select idref="V-235000" selected="true" /><select idref="V-235001" selected="true" /><select idref="V-235002" selected="true" /><select idref="V-235003" selected="true" /><select idref="V-235004" selected="true" /><select idref="V-235005" selected="true" /><select idref="V-235006" selected="true" /><select idref="V-235007" selected="true" /><select idref="V-235008" selected="true" /><select idref="V-235009" selected="true" /><select idref="V-235010" selected="true" /><select idref="V-235013" selected="true" /><select idref="V-235014" selected="true" /><select idref="V-235015" selected="true" /><select idref="V-235016" selected="true" /><select idref="V-235017" selected="true" /><select idref="V-235018" selected="true" /><select idref="V-235019" selected="true" /><select idref="V-235020" selected="true" /><select idref="V-235021" selected="true" /><select idref="V-235022" selected="true" /><select idref="V-235023" selected="true" /><select idref="V-235024" selected="true" /><select idref="V-235025" selected="true" /><select idref="V-235026" selected="true" /><select idref="V-235027" selected="true" /><select idref="V-235028" selected="true" /><select idref="V-235029" selected="true" /><select idref="V-235030" selected="true" /><select idref="V-235031" selected="true" /><select idref="V-235032" selected="true" /><select idref="V-251723" selected="true" /><select idref="V-251724" selected="true" /><select idref="V-251725" selected="true" /><select idref="V-255920" selected="true" /><select idref="V-255921" selected="true" /><select idref="V-255922" selected="true" /><select idref="V-256982" selected="true" /><select idref="V-256983" selected="true" /><select idref="V-274879" selected="true" /></Profile><Profile id="MAC-1_Sensitive"><title>I - Mission Critical Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-234800" selected="true" /><select idref="V-234802" selected="true" /><select idref="V-234803" selected="true" /><select idref="V-234804" selected="true" /><select idref="V-234805" selected="true" /><select idref="V-234806" selected="true" /><select idref="V-234807" selected="true" /><select idref="V-234808" selected="true" /><select idref="V-234809" selected="true" /><select idref="V-234810" selected="true" /><select idref="V-234811" selected="true" /><select idref="V-234812" selected="true" /><select idref="V-234813" selected="true" /><select idref="V-234814" selected="true" /><select idref="V-234815" selected="true" /><select idref="V-234816" selected="true" /><select idref="V-234817" selected="true" /><select idref="V-234818" selected="true" /><select idref="V-234819" selected="true" /><select idref="V-234820" selected="true" /><select idref="V-234821" selected="true" /><select idref="V-234822" selected="true" /><select idref="V-234823" selected="true" /><select idref="V-234825" selected="true" /><select idref="V-234826" selected="true" /><select idref="V-234827" selected="true" /><select idref="V-234828" selected="true" /><select idref="V-234829" selected="true" /><select idref="V-234830" selected="true" /><select idref="V-234831" selected="true" /><select idref="V-234832" selected="true" /><select idref="V-234833" selected="true" /><select idref="V-234834" selected="true" /><select idref="V-234835" selected="true" /><select idref="V-234836" selected="true" /><select idref="V-234837" selected="true" /><select idref="V-234838" selected="true" /><select idref="V-234839" selected="true" /><select idref="V-234840" selected="true" /><select idref="V-234841" selected="true" /><select idref="V-234842" selected="true" /><select idref="V-234843" selected="true" /><select idref="V-234844" selected="true" /><select idref="V-234845" selected="true" /><select idref="V-234846" selected="true" /><select idref="V-234847" selected="true" /><select idref="V-234848" selected="true" /><select idref="V-234849" selected="true" /><select idref="V-234850" selected="true" /><select idref="V-234851" selected="true" /><select idref="V-234852" selected="true" /><select idref="V-234853" selected="true" /><select idref="V-234854" selected="true" /><select idref="V-234855" selected="true" /><select idref="V-234856" selected="true" /><select idref="V-234857" selected="true" /><select idref="V-234858" selected="true" /><select idref="V-234859" selected="true" /><select idref="V-234860" selected="true" /><select idref="V-234861" selected="true" /><select idref="V-234862" selected="true" /><select idref="V-234863" selected="true" /><select idref="V-234864" selected="true" /><select idref="V-234865" selected="true" /><select idref="V-234866" selected="true" /><select idref="V-234867" selected="true" /><select idref="V-234868" selected="true" /><select idref="V-234869" selected="true" /><select idref="V-234870" selected="true" /><select idref="V-234871" selected="true" /><select idref="V-234872" selected="true" /><select idref="V-234874" selected="true" /><select idref="V-234875" selected="true" /><select idref="V-234876" selected="true" /><select idref="V-234877" selected="true" /><select idref="V-234878" selected="true" /><select idref="V-234879" selected="true" /><select idref="V-234880" selected="true" /><select idref="V-234881" selected="true" /><select idref="V-234882" selected="true" /><select idref="V-234883" selected="true" /><select idref="V-234884" selected="true" /><select idref="V-234885" selected="true" /><select idref="V-234886" selected="true" /><select idref="V-234887" selected="true" /><select idref="V-234888" selected="true" /><select idref="V-234889" selected="true" /><select idref="V-234890" selected="true" /><select idref="V-234891" selected="true" /><select idref="V-234892" selected="true" /><select idref="V-234895" selected="true" /><select idref="V-234896" selected="true" /><select idref="V-234897" selected="true" /><select idref="V-234898" selected="true" /><select idref="V-234899" selected="true" /><select idref="V-234900" selected="true" /><select idref="V-234901" selected="true" /><select idref="V-234902" selected="true" /><select idref="V-234903" selected="true" /><select idref="V-234904" selected="true" /><select idref="V-234905" selected="true" /><select idref="V-234906" selected="true" /><select idref="V-234907" selected="true" /><select idref="V-234908" selected="true" /><select idref="V-234909" selected="true" /><select idref="V-234910" selected="true" /><select idref="V-234911" selected="true" /><select idref="V-234912" selected="true" /><select idref="V-234913" selected="true" /><select idref="V-234914" selected="true" /><select idref="V-234918" selected="true" /><select idref="V-234924" selected="true" /><select idref="V-234928" selected="true" /><select idref="V-234932" selected="true" /><select idref="V-234933" selected="true" /><select idref="V-234934" selected="true" /><select idref="V-234935" selected="true" /><select idref="V-234936" selected="true" /><select idref="V-234937" selected="true" /><select idref="V-234938" selected="true" /><select idref="V-234939" selected="true" /><select idref="V-234940" selected="true" /><select idref="V-234941" selected="true" /><select idref="V-234942" selected="true" /><select idref="V-234943" selected="true" /><select idref="V-234944" selected="true" /><select idref="V-234945" selected="true" /><select idref="V-234946" selected="true" /><select idref="V-234947" selected="true" /><select idref="V-234948" selected="true" /><select idref="V-234949" selected="true" /><select idref="V-234950" selected="true" /><select idref="V-234951" selected="true" /><select idref="V-234952" selected="true" /><select idref="V-234954" selected="true" /><select idref="V-234955" selected="true" /><select idref="V-234956" selected="true" /><select idref="V-234957" selected="true" /><select idref="V-234958" selected="true" /><select idref="V-234959" selected="true" /><select idref="V-234961" selected="true" /><select idref="V-234962" selected="true" /><select idref="V-234963" selected="true" /><select idref="V-234964" selected="true" /><select idref="V-234965" selected="true" /><select idref="V-234966" selected="true" /><select idref="V-234967" selected="true" /><select idref="V-234968" selected="true" /><select idref="V-234969" selected="true" /><select idref="V-234973" selected="true" /><select idref="V-234975" selected="true" /><select idref="V-234976" selected="true" /><select idref="V-234977" selected="true" /><select idref="V-234978" selected="true" /><select idref="V-234979" selected="true" /><select idref="V-234980" selected="true" /><select idref="V-234981" selected="true" /><select idref="V-234982" selected="true" /><select idref="V-234983" selected="true" /><select idref="V-234984" selected="true" /><select idref="V-234985" selected="true" /><select idref="V-234986" selected="true" /><select idref="V-234987" selected="true" /><select idref="V-234988" selected="true" /><select idref="V-234989" selected="true" /><select idref="V-234990" selected="true" /><select idref="V-234991" selected="true" /><select idref="V-234992" selected="true" /><select idref="V-234993" selected="true" /><select idref="V-234994" selected="true" /><select idref="V-234995" selected="true" /><select idref="V-234996" selected="true" /><select idref="V-234997" selected="true" /><select idref="V-234998" selected="true" /><select idref="V-234999" selected="true" /><select idref="V-235000" selected="true" /><select idref="V-235001" selected="true" /><select idref="V-235002" selected="true" /><select idref="V-235003" selected="true" /><select idref="V-235004" selected="true" /><select idref="V-235005" selected="true" /><select idref="V-235006" selected="true" /><select idref="V-235007" selected="true" /><select idref="V-235008" selected="true" /><select idref="V-235009" selected="true" /><select idref="V-235010" selected="true" /><select idref="V-235013" selected="true" /><select idref="V-235014" selected="true" /><select idref="V-235015" selected="true" /><select idref="V-235016" selected="true" /><select idref="V-235017" selected="true" /><select idref="V-235018" selected="true" /><select idref="V-235019" selected="true" /><select idref="V-235020" selected="true" /><select idref="V-235021" selected="true" /><select idref="V-235022" selected="true" /><select idref="V-235023" selected="true" /><select idref="V-235024" selected="true" /><select idref="V-235025" selected="true" /><select idref="V-235026" selected="true" /><select idref="V-235027" selected="true" /><select idref="V-235028" selected="true" /><select idref="V-235029" selected="true" /><select idref="V-235030" selected="true" /><select idref="V-235031" selected="true" /><select idref="V-235032" selected="true" /><select idref="V-251723" selected="true" /><select idref="V-251724" selected="true" /><select idref="V-251725" selected="true" /><select idref="V-255920" selected="true" /><select idref="V-255921" selected="true" /><select idref="V-255922" selected="true" /><select idref="V-256982" selected="true" /><select idref="V-256983" selected="true" /><select idref="V-274879" selected="true" /></Profile><Profile id="MAC-2_Classified"><title>II - Mission Support Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-234800" selected="true" /><select idref="V-234802" selected="true" /><select idref="V-234803" selected="true" /><select idref="V-234804" selected="true" /><select idref="V-234805" selected="true" /><select idref="V-234806" selected="true" /><select idref="V-234807" selected="true" /><select idref="V-234808" selected="true" /><select idref="V-234809" selected="true" /><select idref="V-234810" selected="true" /><select idref="V-234811" selected="true" /><select idref="V-234812" selected="true" /><select idref="V-234813" selected="true" /><select idref="V-234814" selected="true" /><select idref="V-234815" selected="true" /><select idref="V-234816" selected="true" /><select idref="V-234817" selected="true" /><select idref="V-234818" selected="true" /><select idref="V-234819" selected="true" /><select idref="V-234820" selected="true" /><select idref="V-234821" selected="true" /><select idref="V-234822" selected="true" /><select idref="V-234823" selected="true" /><select idref="V-234825" selected="true" /><select idref="V-234826" selected="true" /><select idref="V-234827" selected="true" /><select idref="V-234828" selected="true" /><select idref="V-234829" selected="true" /><select idref="V-234830" selected="true" /><select idref="V-234831" selected="true" /><select idref="V-234832" selected="true" /><select idref="V-234833" selected="true" /><select idref="V-234834" selected="true" /><select idref="V-234835" selected="true" /><select idref="V-234836" selected="true" /><select idref="V-234837" selected="true" /><select idref="V-234838" selected="true" /><select idref="V-234839" selected="true" /><select idref="V-234840" selected="true" /><select idref="V-234841" selected="true" /><select idref="V-234842" selected="true" /><select idref="V-234843" selected="true" /><select idref="V-234844" selected="true" /><select idref="V-234845" selected="true" /><select idref="V-234846" selected="true" /><select idref="V-234847" selected="true" /><select idref="V-234848" selected="true" /><select idref="V-234849" selected="true" /><select idref="V-234850" selected="true" /><select idref="V-234851" selected="true" /><select idref="V-234852" selected="true" /><select idref="V-234853" selected="true" /><select idref="V-234854" selected="true" /><select idref="V-234855" selected="true" /><select idref="V-234856" selected="true" /><select idref="V-234857" selected="true" /><select idref="V-234858" selected="true" /><select idref="V-234859" selected="true" /><select idref="V-234860" selected="true" /><select idref="V-234861" selected="true" /><select idref="V-234862" selected="true" /><select idref="V-234863" selected="true" /><select idref="V-234864" selected="true" /><select idref="V-234865" selected="true" /><select idref="V-234866" selected="true" /><select idref="V-234867" selected="true" /><select idref="V-234868" selected="true" /><select idref="V-234869" selected="true" /><select idref="V-234870" selected="true" /><select idref="V-234871" selected="true" /><select idref="V-234872" selected="true" /><select idref="V-234874" selected="true" /><select idref="V-234875" selected="true" /><select idref="V-234876" selected="true" /><select idref="V-234877" selected="true" /><select idref="V-234878" selected="true" /><select idref="V-234879" selected="true" /><select idref="V-234880" selected="true" /><select idref="V-234881" selected="true" /><select idref="V-234882" selected="true" /><select idref="V-234883" selected="true" /><select idref="V-234884" selected="true" /><select idref="V-234885" selected="true" /><select idref="V-234886" selected="true" /><select idref="V-234887" selected="true" /><select idref="V-234888" selected="true" /><select idref="V-234889" selected="true" /><select idref="V-234890" selected="true" /><select idref="V-234891" selected="true" /><select idref="V-234892" selected="true" /><select idref="V-234895" selected="true" /><select idref="V-234896" selected="true" /><select idref="V-234897" selected="true" /><select idref="V-234898" selected="true" /><select idref="V-234899" selected="true" /><select idref="V-234900" selected="true" /><select idref="V-234901" selected="true" /><select idref="V-234902" selected="true" /><select idref="V-234903" selected="true" /><select idref="V-234904" selected="true" /><select idref="V-234905" selected="true" /><select idref="V-234906" selected="true" /><select idref="V-234907" selected="true" /><select idref="V-234908" selected="true" /><select idref="V-234909" selected="true" /><select idref="V-234910" selected="true" /><select idref="V-234911" selected="true" /><select idref="V-234912" selected="true" /><select idref="V-234913" selected="true" /><select idref="V-234914" selected="true" /><select idref="V-234918" selected="true" /><select idref="V-234924" selected="true" /><select idref="V-234928" selected="true" /><select idref="V-234932" selected="true" /><select idref="V-234933" selected="true" /><select idref="V-234934" selected="true" /><select idref="V-234935" selected="true" /><select idref="V-234936" selected="true" /><select idref="V-234937" selected="true" /><select idref="V-234938" selected="true" /><select idref="V-234939" selected="true" /><select idref="V-234940" selected="true" /><select idref="V-234941" selected="true" /><select idref="V-234942" selected="true" /><select idref="V-234943" selected="true" /><select idref="V-234944" selected="true" /><select idref="V-234945" selected="true" /><select idref="V-234946" selected="true" /><select idref="V-234947" selected="true" /><select idref="V-234948" selected="true" /><select idref="V-234949" selected="true" /><select idref="V-234950" selected="true" /><select idref="V-234951" selected="true" /><select idref="V-234952" selected="true" /><select idref="V-234954" selected="true" /><select idref="V-234955" selected="true" /><select idref="V-234956" selected="true" /><select idref="V-234957" selected="true" /><select idref="V-234958" selected="true" /><select idref="V-234959" selected="true" /><select idref="V-234961" selected="true" /><select idref="V-234962" selected="true" /><select idref="V-234963" selected="true" /><select idref="V-234964" selected="true" /><select idref="V-234965" selected="true" /><select idref="V-234966" selected="true" /><select idref="V-234967" selected="true" /><select idref="V-234968" selected="true" /><select idref="V-234969" selected="true" /><select idref="V-234973" selected="true" /><select idref="V-234975" selected="true" /><select idref="V-234976" selected="true" /><select idref="V-234977" selected="true" /><select idref="V-234978" selected="true" /><select idref="V-234979" selected="true" /><select idref="V-234980" selected="true" /><select idref="V-234981" selected="true" /><select idref="V-234982" selected="true" /><select idref="V-234983" selected="true" /><select idref="V-234984" selected="true" /><select idref="V-234985" selected="true" /><select idref="V-234986" selected="true" /><select idref="V-234987" selected="true" /><select idref="V-234988" selected="true" /><select idref="V-234989" selected="true" /><select idref="V-234990" selected="true" /><select idref="V-234991" selected="true" /><select idref="V-234992" selected="true" /><select idref="V-234993" selected="true" /><select idref="V-234994" selected="true" /><select idref="V-234995" selected="true" /><select idref="V-234996" selected="true" /><select idref="V-234997" selected="true" /><select idref="V-234998" selected="true" /><select idref="V-234999" selected="true" /><select idref="V-235000" selected="true" /><select idref="V-235001" selected="true" /><select idref="V-235002" selected="true" /><select idref="V-235003" selected="true" /><select idref="V-235004" selected="true" /><select idref="V-235005" selected="true" /><select idref="V-235006" selected="true" /><select idref="V-235007" selected="true" /><select idref="V-235008" selected="true" /><select idref="V-235009" selected="true" /><select idref="V-235010" selected="true" /><select idref="V-235013" selected="true" /><select idref="V-235014" selected="true" /><select idref="V-235015" selected="true" /><select idref="V-235016" selected="true" /><select idref="V-235017" selected="true" /><select idref="V-235018" selected="true" /><select idref="V-235019" selected="true" /><select idref="V-235020" selected="true" /><select idref="V-235021" selected="true" /><select idref="V-235022" selected="true" /><select idref="V-235023" selected="true" /><select idref="V-235024" selected="true" /><select idref="V-235025" selected="true" /><select idref="V-235026" selected="true" /><select idref="V-235027" selected="true" /><select idref="V-235028" selected="true" /><select idref="V-235029" selected="true" /><select idref="V-235030" selected="true" /><select idref="V-235031" selected="true" /><select idref="V-235032" selected="true" /><select idref="V-251723" selected="true" /><select idref="V-251724" selected="true" /><select idref="V-251725" selected="true" /><select idref="V-255920" selected="true" /><select idref="V-255921" selected="true" /><select idref="V-255922" selected="true" /><select idref="V-256982" selected="true" /><select idref="V-256983" selected="true" /><select idref="V-274879" selected="true" /></Profile><Profile id="MAC-2_Public"><title>II - Mission Support Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-234800" selected="true" /><select idref="V-234802" selected="true" /><select idref="V-234803" selected="true" /><select idref="V-234804" selected="true" /><select idref="V-234805" selected="true" /><select idref="V-234806" selected="true" /><select idref="V-234807" selected="true" /><select idref="V-234808" selected="true" /><select idref="V-234809" selected="true" /><select idref="V-234810" selected="true" /><select idref="V-234811" selected="true" /><select idref="V-234812" selected="true" /><select idref="V-234813" selected="true" /><select idref="V-234814" selected="true" /><select idref="V-234815" selected="true" /><select idref="V-234816" selected="true" /><select idref="V-234817" selected="true" /><select idref="V-234818" selected="true" /><select idref="V-234819" selected="true" /><select idref="V-234820" selected="true" /><select idref="V-234821" selected="true" /><select idref="V-234822" selected="true" /><select idref="V-234823" selected="true" /><select idref="V-234825" selected="true" /><select idref="V-234826" selected="true" /><select idref="V-234827" selected="true" /><select idref="V-234828" selected="true" /><select idref="V-234829" selected="true" /><select idref="V-234830" selected="true" /><select idref="V-234831" selected="true" /><select idref="V-234832" selected="true" /><select idref="V-234833" selected="true" /><select idref="V-234834" selected="true" /><select idref="V-234835" selected="true" /><select idref="V-234836" selected="true" /><select idref="V-234837" selected="true" /><select idref="V-234838" selected="true" /><select idref="V-234839" selected="true" /><select idref="V-234840" selected="true" /><select idref="V-234841" selected="true" /><select idref="V-234842" selected="true" /><select idref="V-234843" selected="true" /><select idref="V-234844" selected="true" /><select idref="V-234845" selected="true" /><select idref="V-234846" selected="true" /><select idref="V-234847" selected="true" /><select idref="V-234848" selected="true" /><select idref="V-234849" selected="true" /><select idref="V-234850" selected="true" /><select idref="V-234851" selected="true" /><select idref="V-234852" selected="true" /><select idref="V-234853" selected="true" /><select idref="V-234854" selected="true" /><select idref="V-234855" selected="true" /><select idref="V-234856" selected="true" /><select idref="V-234857" selected="true" /><select idref="V-234858" selected="true" /><select idref="V-234859" selected="true" /><select idref="V-234860" selected="true" /><select idref="V-234861" selected="true" /><select idref="V-234862" selected="true" /><select idref="V-234863" selected="true" /><select idref="V-234864" selected="true" /><select idref="V-234865" selected="true" /><select idref="V-234866" selected="true" /><select idref="V-234867" selected="true" /><select idref="V-234868" selected="true" /><select idref="V-234869" selected="true" /><select idref="V-234870" selected="true" /><select idref="V-234871" selected="true" /><select idref="V-234872" selected="true" /><select idref="V-234874" selected="true" /><select idref="V-234875" selected="true" /><select idref="V-234876" selected="true" /><select idref="V-234877" selected="true" /><select idref="V-234878" selected="true" /><select idref="V-234879" selected="true" /><select idref="V-234880" selected="true" /><select idref="V-234881" selected="true" /><select idref="V-234882" selected="true" /><select idref="V-234883" selected="true" /><select idref="V-234884" selected="true" /><select idref="V-234885" selected="true" /><select idref="V-234886" selected="true" /><select idref="V-234887" selected="true" /><select idref="V-234888" selected="true" /><select idref="V-234889" selected="true" /><select idref="V-234890" selected="true" /><select idref="V-234891" selected="true" /><select idref="V-234892" selected="true" /><select idref="V-234895" selected="true" /><select idref="V-234896" selected="true" /><select idref="V-234897" selected="true" /><select idref="V-234898" selected="true" /><select idref="V-234899" selected="true" /><select idref="V-234900" selected="true" /><select idref="V-234901" selected="true" /><select idref="V-234902" selected="true" /><select idref="V-234903" selected="true" /><select idref="V-234904" selected="true" /><select idref="V-234905" selected="true" /><select idref="V-234906" selected="true" /><select idref="V-234907" selected="true" /><select idref="V-234908" selected="true" /><select idref="V-234909" selected="true" /><select idref="V-234910" selected="true" /><select idref="V-234911" selected="true" /><select idref="V-234912" selected="true" /><select idref="V-234913" selected="true" /><select idref="V-234914" selected="true" /><select idref="V-234918" selected="true" /><select idref="V-234924" selected="true" /><select idref="V-234928" selected="true" /><select idref="V-234932" selected="true" /><select idref="V-234933" selected="true" /><select idref="V-234934" selected="true" /><select idref="V-234935" selected="true" /><select idref="V-234936" selected="true" /><select idref="V-234937" selected="true" /><select idref="V-234938" selected="true" /><select idref="V-234939" selected="true" /><select idref="V-234940" selected="true" /><select idref="V-234941" selected="true" /><select idref="V-234942" selected="true" /><select idref="V-234943" selected="true" /><select idref="V-234944" selected="true" /><select idref="V-234945" selected="true" /><select idref="V-234946" selected="true" /><select idref="V-234947" selected="true" /><select idref="V-234948" selected="true" /><select idref="V-234949" selected="true" /><select idref="V-234950" selected="true" /><select idref="V-234951" selected="true" /><select idref="V-234952" selected="true" /><select idref="V-234954" selected="true" /><select idref="V-234955" selected="true" /><select idref="V-234956" selected="true" /><select idref="V-234957" selected="true" /><select idref="V-234958" selected="true" /><select idref="V-234959" selected="true" /><select idref="V-234961" selected="true" /><select idref="V-234962" selected="true" /><select idref="V-234963" selected="true" /><select idref="V-234964" selected="true" /><select idref="V-234965" selected="true" /><select idref="V-234966" selected="true" /><select idref="V-234967" selected="true" /><select idref="V-234968" selected="true" /><select idref="V-234969" selected="true" /><select idref="V-234973" selected="true" /><select idref="V-234975" selected="true" /><select idref="V-234976" selected="true" /><select idref="V-234977" selected="true" /><select idref="V-234978" selected="true" /><select idref="V-234979" selected="true" /><select idref="V-234980" selected="true" /><select idref="V-234981" selected="true" /><select idref="V-234982" selected="true" /><select idref="V-234983" selected="true" /><select idref="V-234984" selected="true" /><select idref="V-234985" selected="true" /><select idref="V-234986" selected="true" /><select idref="V-234987" selected="true" /><select idref="V-234988" selected="true" /><select idref="V-234989" selected="true" /><select idref="V-234990" selected="true" /><select idref="V-234991" selected="true" /><select idref="V-234992" selected="true" /><select idref="V-234993" selected="true" /><select idref="V-234994" selected="true" /><select idref="V-234995" selected="true" /><select idref="V-234996" selected="true" /><select idref="V-234997" selected="true" /><select idref="V-234998" selected="true" /><select idref="V-234999" selected="true" /><select idref="V-235000" selected="true" /><select idref="V-235001" selected="true" /><select idref="V-235002" selected="true" /><select idref="V-235003" selected="true" /><select idref="V-235004" selected="true" /><select idref="V-235005" selected="true" /><select idref="V-235006" selected="true" /><select idref="V-235007" selected="true" /><select idref="V-235008" selected="true" /><select idref="V-235009" selected="true" /><select idref="V-235010" selected="true" /><select idref="V-235013" selected="true" /><select idref="V-235014" selected="true" /><select idref="V-235015" selected="true" /><select idref="V-235016" selected="true" /><select idref="V-235017" selected="true" /><select idref="V-235018" selected="true" /><select idref="V-235019" selected="true" /><select idref="V-235020" selected="true" /><select idref="V-235021" selected="true" /><select idref="V-235022" selected="true" /><select idref="V-235023" selected="true" /><select idref="V-235024" selected="true" /><select idref="V-235025" selected="true" /><select idref="V-235026" selected="true" /><select idref="V-235027" selected="true" /><select idref="V-235028" selected="true" /><select idref="V-235029" selected="true" /><select idref="V-235030" selected="true" /><select idref="V-235031" selected="true" /><select idref="V-235032" selected="true" /><select idref="V-251723" selected="true" /><select idref="V-251724" selected="true" /><select idref="V-251725" selected="true" /><select idref="V-255920" selected="true" /><select idref="V-255921" selected="true" /><select idref="V-255922" selected="true" /><select idref="V-256982" selected="true" /><select idref="V-256983" selected="true" /><select idref="V-274879" selected="true" /></Profile><Profile id="MAC-2_Sensitive"><title>II - Mission Support Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-234800" selected="true" /><select idref="V-234802" selected="true" /><select idref="V-234803" selected="true" /><select idref="V-234804" selected="true" /><select idref="V-234805" selected="true" /><select idref="V-234806" selected="true" /><select idref="V-234807" selected="true" /><select idref="V-234808" selected="true" /><select idref="V-234809" selected="true" /><select idref="V-234810" selected="true" /><select idref="V-234811" selected="true" /><select idref="V-234812" selected="true" /><select idref="V-234813" selected="true" /><select idref="V-234814" selected="true" /><select idref="V-234815" selected="true" /><select idref="V-234816" selected="true" /><select idref="V-234817" selected="true" /><select idref="V-234818" selected="true" /><select idref="V-234819" selected="true" /><select idref="V-234820" selected="true" /><select idref="V-234821" selected="true" /><select idref="V-234822" selected="true" /><select idref="V-234823" selected="true" /><select idref="V-234825" selected="true" /><select idref="V-234826" selected="true" /><select idref="V-234827" selected="true" /><select idref="V-234828" selected="true" /><select idref="V-234829" selected="true" /><select idref="V-234830" selected="true" /><select idref="V-234831" selected="true" /><select idref="V-234832" selected="true" /><select idref="V-234833" selected="true" /><select idref="V-234834" selected="true" /><select idref="V-234835" selected="true" /><select idref="V-234836" selected="true" /><select idref="V-234837" selected="true" /><select idref="V-234838" selected="true" /><select idref="V-234839" selected="true" /><select idref="V-234840" selected="true" /><select idref="V-234841" selected="true" /><select idref="V-234842" selected="true" /><select idref="V-234843" selected="true" /><select idref="V-234844" selected="true" /><select idref="V-234845" selected="true" /><select idref="V-234846" selected="true" /><select idref="V-234847" selected="true" /><select idref="V-234848" selected="true" /><select idref="V-234849" selected="true" /><select idref="V-234850" selected="true" /><select idref="V-234851" selected="true" /><select idref="V-234852" selected="true" /><select idref="V-234853" selected="true" /><select idref="V-234854" selected="true" /><select idref="V-234855" selected="true" /><select idref="V-234856" selected="true" /><select idref="V-234857" selected="true" /><select idref="V-234858" selected="true" /><select idref="V-234859" selected="true" /><select idref="V-234860" selected="true" /><select idref="V-234861" selected="true" /><select idref="V-234862" selected="true" /><select idref="V-234863" selected="true" /><select idref="V-234864" selected="true" /><select idref="V-234865" selected="true" /><select idref="V-234866" selected="true" /><select idref="V-234867" selected="true" /><select idref="V-234868" selected="true" /><select idref="V-234869" selected="true" /><select idref="V-234870" selected="true" /><select idref="V-234871" selected="true" /><select idref="V-234872" selected="true" /><select idref="V-234874" selected="true" /><select idref="V-234875" selected="true" /><select idref="V-234876" selected="true" /><select idref="V-234877" selected="true" /><select idref="V-234878" selected="true" /><select idref="V-234879" selected="true" /><select idref="V-234880" selected="true" /><select idref="V-234881" selected="true" /><select idref="V-234882" selected="true" /><select idref="V-234883" selected="true" /><select idref="V-234884" selected="true" /><select idref="V-234885" selected="true" /><select idref="V-234886" selected="true" /><select idref="V-234887" selected="true" /><select idref="V-234888" selected="true" /><select idref="V-234889" selected="true" /><select idref="V-234890" selected="true" /><select idref="V-234891" selected="true" /><select idref="V-234892" selected="true" /><select idref="V-234895" selected="true" /><select idref="V-234896" selected="true" /><select idref="V-234897" selected="true" /><select idref="V-234898" selected="true" /><select idref="V-234899" selected="true" /><select idref="V-234900" selected="true" /><select idref="V-234901" selected="true" /><select idref="V-234902" selected="true" /><select idref="V-234903" selected="true" /><select idref="V-234904" selected="true" /><select idref="V-234905" selected="true" /><select idref="V-234906" selected="true" /><select idref="V-234907" selected="true" /><select idref="V-234908" selected="true" /><select idref="V-234909" selected="true" /><select idref="V-234910" selected="true" /><select idref="V-234911" selected="true" /><select idref="V-234912" selected="true" /><select idref="V-234913" selected="true" /><select idref="V-234914" selected="true" /><select idref="V-234918" selected="true" /><select idref="V-234924" selected="true" /><select idref="V-234928" selected="true" /><select idref="V-234932" selected="true" /><select idref="V-234933" selected="true" /><select idref="V-234934" selected="true" /><select idref="V-234935" selected="true" /><select idref="V-234936" selected="true" /><select idref="V-234937" selected="true" /><select idref="V-234938" selected="true" /><select idref="V-234939" selected="true" /><select idref="V-234940" selected="true" /><select idref="V-234941" selected="true" /><select idref="V-234942" selected="true" /><select idref="V-234943" selected="true" /><select idref="V-234944" selected="true" /><select idref="V-234945" selected="true" /><select idref="V-234946" selected="true" /><select idref="V-234947" selected="true" /><select idref="V-234948" selected="true" /><select idref="V-234949" selected="true" /><select idref="V-234950" selected="true" /><select idref="V-234951" selected="true" /><select idref="V-234952" selected="true" /><select idref="V-234954" selected="true" /><select idref="V-234955" selected="true" /><select idref="V-234956" selected="true" /><select idref="V-234957" selected="true" /><select idref="V-234958" selected="true" /><select idref="V-234959" selected="true" /><select idref="V-234961" selected="true" /><select idref="V-234962" selected="true" /><select idref="V-234963" selected="true" /><select idref="V-234964" selected="true" /><select idref="V-234965" selected="true" /><select idref="V-234966" selected="true" /><select idref="V-234967" selected="true" /><select idref="V-234968" selected="true" /><select idref="V-234969" selected="true" /><select idref="V-234973" selected="true" /><select idref="V-234975" selected="true" /><select idref="V-234976" selected="true" /><select idref="V-234977" selected="true" /><select idref="V-234978" selected="true" /><select idref="V-234979" selected="true" /><select idref="V-234980" selected="true" /><select idref="V-234981" selected="true" /><select idref="V-234982" selected="true" /><select idref="V-234983" selected="true" /><select idref="V-234984" selected="true" /><select idref="V-234985" selected="true" /><select idref="V-234986" selected="true" /><select idref="V-234987" selected="true" /><select idref="V-234988" selected="true" /><select idref="V-234989" selected="true" /><select idref="V-234990" selected="true" /><select idref="V-234991" selected="true" /><select idref="V-234992" selected="true" /><select idref="V-234993" selected="true" /><select idref="V-234994" selected="true" /><select idref="V-234995" selected="true" /><select idref="V-234996" selected="true" /><select idref="V-234997" selected="true" /><select idref="V-234998" selected="true" /><select idref="V-234999" selected="true" /><select idref="V-235000" selected="true" /><select idref="V-235001" selected="true" /><select idref="V-235002" selected="true" /><select idref="V-235003" selected="true" /><select idref="V-235004" selected="true" /><select idref="V-235005" selected="true" /><select idref="V-235006" selected="true" /><select idref="V-235007" selected="true" /><select idref="V-235008" selected="true" /><select idref="V-235009" selected="true" /><select idref="V-235010" selected="true" /><select idref="V-235013" selected="true" /><select idref="V-235014" selected="true" /><select idref="V-235015" selected="true" /><select idref="V-235016" selected="true" /><select idref="V-235017" selected="true" /><select idref="V-235018" selected="true" /><select idref="V-235019" selected="true" /><select idref="V-235020" selected="true" /><select idref="V-235021" selected="true" /><select idref="V-235022" selected="true" /><select idref="V-235023" selected="true" /><select idref="V-235024" selected="true" /><select idref="V-235025" selected="true" /><select idref="V-235026" selected="true" /><select idref="V-235027" selected="true" /><select idref="V-235028" selected="true" /><select idref="V-235029" selected="true" /><select idref="V-235030" selected="true" /><select idref="V-235031" selected="true" /><select idref="V-235032" selected="true" /><select idref="V-251723" selected="true" /><select idref="V-251724" selected="true" /><select idref="V-251725" selected="true" /><select idref="V-255920" selected="true" /><select idref="V-255921" selected="true" /><select idref="V-255922" selected="true" /><select idref="V-256982" selected="true" /><select idref="V-256983" selected="true" /><select idref="V-274879" selected="true" /></Profile><Profile id="MAC-3_Classified"><title>III - Administrative Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-234800" selected="true" /><select idref="V-234802" selected="true" /><select idref="V-234803" selected="true" /><select idref="V-234804" selected="true" /><select idref="V-234805" selected="true" /><select idref="V-234806" selected="true" /><select idref="V-234807" selected="true" /><select idref="V-234808" selected="true" /><select idref="V-234809" selected="true" /><select idref="V-234810" selected="true" /><select idref="V-234811" selected="true" /><select idref="V-234812" selected="true" /><select idref="V-234813" selected="true" /><select idref="V-234814" selected="true" /><select idref="V-234815" selected="true" /><select idref="V-234816" selected="true" /><select idref="V-234817" selected="true" /><select idref="V-234818" selected="true" /><select idref="V-234819" selected="true" /><select idref="V-234820" selected="true" /><select idref="V-234821" selected="true" /><select idref="V-234822" selected="true" /><select idref="V-234823" selected="true" /><select idref="V-234825" selected="true" /><select idref="V-234826" selected="true" /><select idref="V-234827" selected="true" /><select idref="V-234828" selected="true" /><select idref="V-234829" selected="true" /><select idref="V-234830" selected="true" /><select idref="V-234831" selected="true" /><select idref="V-234832" selected="true" /><select idref="V-234833" selected="true" /><select idref="V-234834" selected="true" /><select idref="V-234835" selected="true" /><select idref="V-234836" selected="true" /><select idref="V-234837" selected="true" /><select idref="V-234838" selected="true" /><select idref="V-234839" selected="true" /><select idref="V-234840" selected="true" /><select idref="V-234841" selected="true" /><select idref="V-234842" selected="true" /><select idref="V-234843" selected="true" /><select idref="V-234844" selected="true" /><select idref="V-234845" selected="true" /><select idref="V-234846" selected="true" /><select idref="V-234847" selected="true" /><select idref="V-234848" selected="true" /><select idref="V-234849" selected="true" /><select idref="V-234850" selected="true" /><select idref="V-234851" selected="true" /><select idref="V-234852" selected="true" /><select idref="V-234853" selected="true" /><select idref="V-234854" selected="true" /><select idref="V-234855" selected="true" /><select idref="V-234856" selected="true" /><select idref="V-234857" selected="true" /><select idref="V-234858" selected="true" /><select idref="V-234859" selected="true" /><select idref="V-234860" selected="true" /><select idref="V-234861" selected="true" /><select idref="V-234862" selected="true" /><select idref="V-234863" selected="true" /><select idref="V-234864" selected="true" /><select idref="V-234865" selected="true" /><select idref="V-234866" selected="true" /><select idref="V-234867" selected="true" /><select idref="V-234868" selected="true" /><select idref="V-234869" selected="true" /><select idref="V-234870" selected="true" /><select idref="V-234871" selected="true" /><select idref="V-234872" selected="true" /><select idref="V-234874" selected="true" /><select idref="V-234875" selected="true" /><select idref="V-234876" selected="true" /><select idref="V-234877" selected="true" /><select idref="V-234878" selected="true" /><select idref="V-234879" selected="true" /><select idref="V-234880" selected="true" /><select idref="V-234881" selected="true" /><select idref="V-234882" selected="true" /><select idref="V-234883" selected="true" /><select idref="V-234884" selected="true" /><select idref="V-234885" selected="true" /><select idref="V-234886" selected="true" /><select idref="V-234887" selected="true" /><select idref="V-234888" selected="true" /><select idref="V-234889" selected="true" /><select idref="V-234890" selected="true" /><select idref="V-234891" selected="true" /><select idref="V-234892" selected="true" /><select idref="V-234895" selected="true" /><select idref="V-234896" selected="true" /><select idref="V-234897" selected="true" /><select idref="V-234898" selected="true" /><select idref="V-234899" selected="true" /><select idref="V-234900" selected="true" /><select idref="V-234901" selected="true" /><select idref="V-234902" selected="true" /><select idref="V-234903" selected="true" /><select idref="V-234904" selected="true" /><select idref="V-234905" selected="true" /><select idref="V-234906" selected="true" /><select idref="V-234907" selected="true" /><select idref="V-234908" selected="true" /><select idref="V-234909" selected="true" /><select idref="V-234910" selected="true" /><select idref="V-234911" selected="true" /><select idref="V-234912" selected="true" /><select idref="V-234913" selected="true" /><select idref="V-234914" selected="true" /><select idref="V-234918" selected="true" /><select idref="V-234924" selected="true" /><select idref="V-234928" selected="true" /><select idref="V-234932" selected="true" /><select idref="V-234933" selected="true" /><select idref="V-234934" selected="true" /><select idref="V-234935" selected="true" /><select idref="V-234936" selected="true" /><select idref="V-234937" selected="true" /><select idref="V-234938" selected="true" /><select idref="V-234939" selected="true" /><select idref="V-234940" selected="true" /><select idref="V-234941" selected="true" /><select idref="V-234942" selected="true" /><select idref="V-234943" selected="true" /><select idref="V-234944" selected="true" /><select idref="V-234945" selected="true" /><select idref="V-234946" selected="true" /><select idref="V-234947" selected="true" /><select idref="V-234948" selected="true" /><select idref="V-234949" selected="true" /><select idref="V-234950" selected="true" /><select idref="V-234951" selected="true" /><select idref="V-234952" selected="true" /><select idref="V-234954" selected="true" /><select idref="V-234955" selected="true" /><select idref="V-234956" selected="true" /><select idref="V-234957" selected="true" /><select idref="V-234958" selected="true" /><select idref="V-234959" selected="true" /><select idref="V-234961" selected="true" /><select idref="V-234962" selected="true" /><select idref="V-234963" selected="true" /><select idref="V-234964" selected="true" /><select idref="V-234965" selected="true" /><select idref="V-234966" selected="true" /><select idref="V-234967" selected="true" /><select idref="V-234968" selected="true" /><select idref="V-234969" selected="true" /><select idref="V-234973" selected="true" /><select idref="V-234975" selected="true" /><select idref="V-234976" selected="true" /><select idref="V-234977" selected="true" /><select idref="V-234978" selected="true" /><select idref="V-234979" selected="true" /><select idref="V-234980" selected="true" /><select idref="V-234981" selected="true" /><select idref="V-234982" selected="true" /><select idref="V-234983" selected="true" /><select idref="V-234984" selected="true" /><select idref="V-234985" selected="true" /><select idref="V-234986" selected="true" /><select idref="V-234987" selected="true" /><select idref="V-234988" selected="true" /><select idref="V-234989" selected="true" /><select idref="V-234990" selected="true" /><select idref="V-234991" selected="true" /><select idref="V-234992" selected="true" /><select idref="V-234993" selected="true" /><select idref="V-234994" selected="true" /><select idref="V-234995" selected="true" /><select idref="V-234996" selected="true" /><select idref="V-234997" selected="true" /><select idref="V-234998" selected="true" /><select idref="V-234999" selected="true" /><select idref="V-235000" selected="true" /><select idref="V-235001" selected="true" /><select idref="V-235002" selected="true" /><select idref="V-235003" selected="true" /><select idref="V-235004" selected="true" /><select idref="V-235005" selected="true" /><select idref="V-235006" selected="true" /><select idref="V-235007" selected="true" /><select idref="V-235008" selected="true" /><select idref="V-235009" selected="true" /><select idref="V-235010" selected="true" /><select idref="V-235013" selected="true" /><select idref="V-235014" selected="true" /><select idref="V-235015" selected="true" /><select idref="V-235016" selected="true" /><select idref="V-235017" selected="true" /><select idref="V-235018" selected="true" /><select idref="V-235019" selected="true" /><select idref="V-235020" selected="true" /><select idref="V-235021" selected="true" /><select idref="V-235022" selected="true" /><select idref="V-235023" selected="true" /><select idref="V-235024" selected="true" /><select idref="V-235025" selected="true" /><select idref="V-235026" selected="true" /><select idref="V-235027" selected="true" /><select idref="V-235028" selected="true" /><select idref="V-235029" selected="true" /><select idref="V-235030" selected="true" /><select idref="V-235031" selected="true" /><select idref="V-235032" selected="true" /><select idref="V-251723" selected="true" /><select idref="V-251724" selected="true" /><select idref="V-251725" selected="true" /><select idref="V-255920" selected="true" /><select idref="V-255921" selected="true" /><select idref="V-255922" selected="true" /><select idref="V-256982" selected="true" /><select idref="V-256983" selected="true" /><select idref="V-274879" selected="true" /></Profile><Profile id="MAC-3_Public"><title>III - Administrative Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-234800" selected="true" /><select idref="V-234802" selected="true" /><select idref="V-234803" selected="true" /><select idref="V-234804" selected="true" /><select idref="V-234805" selected="true" /><select idref="V-234806" selected="true" /><select idref="V-234807" selected="true" /><select idref="V-234808" selected="true" /><select idref="V-234809" selected="true" /><select idref="V-234810" selected="true" /><select idref="V-234811" selected="true" /><select idref="V-234812" selected="true" /><select idref="V-234813" selected="true" /><select idref="V-234814" selected="true" /><select idref="V-234815" selected="true" /><select idref="V-234816" selected="true" /><select idref="V-234817" selected="true" /><select idref="V-234818" selected="true" /><select idref="V-234819" selected="true" /><select idref="V-234820" selected="true" /><select idref="V-234821" selected="true" /><select idref="V-234822" selected="true" /><select idref="V-234823" selected="true" /><select idref="V-234825" selected="true" /><select idref="V-234826" selected="true" /><select idref="V-234827" selected="true" /><select idref="V-234828" selected="true" /><select idref="V-234829" selected="true" /><select idref="V-234830" selected="true" /><select idref="V-234831" selected="true" /><select idref="V-234832" selected="true" /><select idref="V-234833" selected="true" /><select idref="V-234834" selected="true" /><select idref="V-234835" selected="true" /><select idref="V-234836" selected="true" /><select idref="V-234837" selected="true" /><select idref="V-234838" selected="true" /><select idref="V-234839" selected="true" /><select idref="V-234840" selected="true" /><select idref="V-234841" selected="true" /><select idref="V-234842" selected="true" /><select idref="V-234843" selected="true" /><select idref="V-234844" selected="true" /><select idref="V-234845" selected="true" /><select idref="V-234846" selected="true" /><select idref="V-234847" selected="true" /><select idref="V-234848" selected="true" /><select idref="V-234849" selected="true" /><select idref="V-234850" selected="true" /><select idref="V-234851" selected="true" /><select idref="V-234852" selected="true" /><select idref="V-234853" selected="true" /><select idref="V-234854" selected="true" /><select idref="V-234855" selected="true" /><select idref="V-234856" selected="true" /><select idref="V-234857" selected="true" /><select idref="V-234858" selected="true" /><select idref="V-234859" selected="true" /><select idref="V-234860" selected="true" /><select idref="V-234861" selected="true" /><select idref="V-234862" selected="true" /><select idref="V-234863" selected="true" /><select idref="V-234864" selected="true" /><select idref="V-234865" selected="true" /><select idref="V-234866" selected="true" /><select idref="V-234867" selected="true" /><select idref="V-234868" selected="true" /><select idref="V-234869" selected="true" /><select idref="V-234870" selected="true" /><select idref="V-234871" selected="true" /><select idref="V-234872" selected="true" /><select idref="V-234874" selected="true" /><select idref="V-234875" selected="true" /><select idref="V-234876" selected="true" /><select idref="V-234877" selected="true" /><select idref="V-234878" selected="true" /><select idref="V-234879" selected="true" /><select idref="V-234880" selected="true" /><select idref="V-234881" selected="true" /><select idref="V-234882" selected="true" /><select idref="V-234883" selected="true" /><select idref="V-234884" selected="true" /><select idref="V-234885" selected="true" /><select idref="V-234886" selected="true" /><select idref="V-234887" selected="true" /><select idref="V-234888" selected="true" /><select idref="V-234889" selected="true" /><select idref="V-234890" selected="true" /><select idref="V-234891" selected="true" /><select idref="V-234892" selected="true" /><select idref="V-234895" selected="true" /><select idref="V-234896" selected="true" /><select idref="V-234897" selected="true" /><select idref="V-234898" selected="true" /><select idref="V-234899" selected="true" /><select idref="V-234900" selected="true" /><select idref="V-234901" selected="true" /><select idref="V-234902" selected="true" /><select idref="V-234903" selected="true" /><select idref="V-234904" selected="true" /><select idref="V-234905" selected="true" /><select idref="V-234906" selected="true" /><select idref="V-234907" selected="true" /><select idref="V-234908" selected="true" /><select idref="V-234909" selected="true" /><select idref="V-234910" selected="true" /><select idref="V-234911" selected="true" /><select idref="V-234912" selected="true" /><select idref="V-234913" selected="true" /><select idref="V-234914" selected="true" /><select idref="V-234918" selected="true" /><select idref="V-234924" selected="true" /><select idref="V-234928" selected="true" /><select idref="V-234932" selected="true" /><select idref="V-234933" selected="true" /><select idref="V-234934" selected="true" /><select idref="V-234935" selected="true" /><select idref="V-234936" selected="true" /><select idref="V-234937" selected="true" /><select idref="V-234938" selected="true" /><select idref="V-234939" selected="true" /><select idref="V-234940" selected="true" /><select idref="V-234941" selected="true" /><select idref="V-234942" selected="true" /><select idref="V-234943" selected="true" /><select idref="V-234944" selected="true" /><select idref="V-234945" selected="true" /><select idref="V-234946" selected="true" /><select idref="V-234947" selected="true" /><select idref="V-234948" selected="true" /><select idref="V-234949" selected="true" /><select idref="V-234950" selected="true" /><select idref="V-234951" selected="true" /><select idref="V-234952" selected="true" /><select idref="V-234954" selected="true" /><select idref="V-234955" selected="true" /><select idref="V-234956" selected="true" /><select idref="V-234957" selected="true" /><select idref="V-234958" selected="true" /><select idref="V-234959" selected="true" /><select idref="V-234961" selected="true" /><select idref="V-234962" selected="true" /><select idref="V-234963" selected="true" /><select idref="V-234964" selected="true" /><select idref="V-234965" selected="true" /><select idref="V-234966" selected="true" /><select idref="V-234967" selected="true" /><select idref="V-234968" selected="true" /><select idref="V-234969" selected="true" /><select idref="V-234973" selected="true" /><select idref="V-234975" selected="true" /><select idref="V-234976" selected="true" /><select idref="V-234977" selected="true" /><select idref="V-234978" selected="true" /><select idref="V-234979" selected="true" /><select idref="V-234980" selected="true" /><select idref="V-234981" selected="true" /><select idref="V-234982" selected="true" /><select idref="V-234983" selected="true" /><select idref="V-234984" selected="true" /><select idref="V-234985" selected="true" /><select idref="V-234986" selected="true" /><select idref="V-234987" selected="true" /><select idref="V-234988" selected="true" /><select idref="V-234989" selected="true" /><select idref="V-234990" selected="true" /><select idref="V-234991" selected="true" /><select idref="V-234992" selected="true" /><select idref="V-234993" selected="true" /><select idref="V-234994" selected="true" /><select idref="V-234995" selected="true" /><select idref="V-234996" selected="true" /><select idref="V-234997" selected="true" /><select idref="V-234998" selected="true" /><select idref="V-234999" selected="true" /><select idref="V-235000" selected="true" /><select idref="V-235001" selected="true" /><select idref="V-235002" selected="true" /><select idref="V-235003" selected="true" /><select idref="V-235004" selected="true" /><select idref="V-235005" selected="true" /><select idref="V-235006" selected="true" /><select idref="V-235007" selected="true" /><select idref="V-235008" selected="true" /><select idref="V-235009" selected="true" /><select idref="V-235010" selected="true" /><select idref="V-235013" selected="true" /><select idref="V-235014" selected="true" /><select idref="V-235015" selected="true" /><select idref="V-235016" selected="true" /><select idref="V-235017" selected="true" /><select idref="V-235018" selected="true" /><select idref="V-235019" selected="true" /><select idref="V-235020" selected="true" /><select idref="V-235021" selected="true" /><select idref="V-235022" selected="true" /><select idref="V-235023" selected="true" /><select idref="V-235024" selected="true" /><select idref="V-235025" selected="true" /><select idref="V-235026" selected="true" /><select idref="V-235027" selected="true" /><select idref="V-235028" selected="true" /><select idref="V-235029" selected="true" /><select idref="V-235030" selected="true" /><select idref="V-235031" selected="true" /><select idref="V-235032" selected="true" /><select idref="V-251723" selected="true" /><select idref="V-251724" selected="true" /><select idref="V-251725" selected="true" /><select idref="V-255920" selected="true" /><select idref="V-255921" selected="true" /><select idref="V-255922" selected="true" /><select idref="V-256982" selected="true" /><select idref="V-256983" selected="true" /><select idref="V-274879" selected="true" /></Profile><Profile id="MAC-3_Sensitive"><title>III - Administrative Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-234800" selected="true" /><select idref="V-234802" selected="true" /><select idref="V-234803" selected="true" /><select idref="V-234804" selected="true" /><select idref="V-234805" selected="true" /><select idref="V-234806" selected="true" /><select idref="V-234807" selected="true" /><select idref="V-234808" selected="true" /><select idref="V-234809" selected="true" /><select idref="V-234810" selected="true" /><select idref="V-234811" selected="true" /><select idref="V-234812" selected="true" /><select idref="V-234813" selected="true" /><select idref="V-234814" selected="true" /><select idref="V-234815" selected="true" /><select idref="V-234816" selected="true" /><select idref="V-234817" selected="true" /><select idref="V-234818" selected="true" /><select idref="V-234819" selected="true" /><select idref="V-234820" selected="true" /><select idref="V-234821" selected="true" /><select idref="V-234822" selected="true" /><select idref="V-234823" selected="true" /><select idref="V-234825" selected="true" /><select idref="V-234826" selected="true" /><select idref="V-234827" selected="true" /><select idref="V-234828" selected="true" /><select idref="V-234829" selected="true" /><select idref="V-234830" selected="true" /><select idref="V-234831" selected="true" /><select idref="V-234832" selected="true" /><select idref="V-234833" selected="true" /><select idref="V-234834" selected="true" /><select idref="V-234835" selected="true" /><select idref="V-234836" selected="true" /><select idref="V-234837" selected="true" /><select idref="V-234838" selected="true" /><select idref="V-234839" selected="true" /><select idref="V-234840" selected="true" /><select idref="V-234841" selected="true" /><select idref="V-234842" selected="true" /><select idref="V-234843" selected="true" /><select idref="V-234844" selected="true" /><select idref="V-234845" selected="true" /><select idref="V-234846" selected="true" /><select idref="V-234847" selected="true" /><select idref="V-234848" selected="true" /><select idref="V-234849" selected="true" /><select idref="V-234850" selected="true" /><select idref="V-234851" selected="true" /><select idref="V-234852" selected="true" /><select idref="V-234853" selected="true" /><select idref="V-234854" selected="true" /><select idref="V-234855" selected="true" /><select idref="V-234856" selected="true" /><select idref="V-234857" selected="true" /><select idref="V-234858" selected="true" /><select idref="V-234859" selected="true" /><select idref="V-234860" selected="true" /><select idref="V-234861" selected="true" /><select idref="V-234862" selected="true" /><select idref="V-234863" selected="true" /><select idref="V-234864" selected="true" /><select idref="V-234865" selected="true" /><select idref="V-234866" selected="true" /><select idref="V-234867" selected="true" /><select idref="V-234868" selected="true" /><select idref="V-234869" selected="true" /><select idref="V-234870" selected="true" /><select idref="V-234871" selected="true" /><select idref="V-234872" selected="true" /><select idref="V-234874" selected="true" /><select idref="V-234875" selected="true" /><select idref="V-234876" selected="true" /><select idref="V-234877" selected="true" /><select idref="V-234878" selected="true" /><select idref="V-234879" selected="true" /><select idref="V-234880" selected="true" /><select idref="V-234881" selected="true" /><select idref="V-234882" selected="true" /><select idref="V-234883" selected="true" /><select idref="V-234884" selected="true" /><select idref="V-234885" selected="true" /><select idref="V-234886" selected="true" /><select idref="V-234887" selected="true" /><select idref="V-234888" selected="true" /><select idref="V-234889" selected="true" /><select idref="V-234890" selected="true" /><select idref="V-234891" selected="true" /><select idref="V-234892" selected="true" /><select idref="V-234895" selected="true" /><select idref="V-234896" selected="true" /><select idref="V-234897" selected="true" /><select idref="V-234898" selected="true" /><select idref="V-234899" selected="true" /><select idref="V-234900" selected="true" /><select idref="V-234901" selected="true" /><select idref="V-234902" selected="true" /><select idref="V-234903" selected="true" /><select idref="V-234904" selected="true" /><select idref="V-234905" selected="true" /><select idref="V-234906" selected="true" /><select idref="V-234907" selected="true" /><select idref="V-234908" selected="true" /><select idref="V-234909" selected="true" /><select idref="V-234910" selected="true" /><select idref="V-234911" selected="true" /><select idref="V-234912" selected="true" /><select idref="V-234913" selected="true" /><select idref="V-234914" selected="true" /><select idref="V-234918" selected="true" /><select idref="V-234924" selected="true" /><select idref="V-234928" selected="true" /><select idref="V-234932" selected="true" /><select idref="V-234933" selected="true" /><select idref="V-234934" selected="true" /><select idref="V-234935" selected="true" /><select idref="V-234936" selected="true" /><select idref="V-234937" selected="true" /><select idref="V-234938" selected="true" /><select idref="V-234939" selected="true" /><select idref="V-234940" selected="true" /><select idref="V-234941" selected="true" /><select idref="V-234942" selected="true" /><select idref="V-234943" selected="true" /><select idref="V-234944" selected="true" /><select idref="V-234945" selected="true" /><select idref="V-234946" selected="true" /><select idref="V-234947" selected="true" /><select idref="V-234948" selected="true" /><select idref="V-234949" selected="true" /><select idref="V-234950" selected="true" /><select idref="V-234951" selected="true" /><select idref="V-234952" selected="true" /><select idref="V-234954" selected="true" /><select idref="V-234955" selected="true" /><select idref="V-234956" selected="true" /><select idref="V-234957" selected="true" /><select idref="V-234958" selected="true" /><select idref="V-234959" selected="true" /><select idref="V-234961" selected="true" /><select idref="V-234962" selected="true" /><select idref="V-234963" selected="true" /><select idref="V-234964" selected="true" /><select idref="V-234965" selected="true" /><select idref="V-234966" selected="true" /><select idref="V-234967" selected="true" /><select idref="V-234968" selected="true" /><select idref="V-234969" selected="true" /><select idref="V-234973" selected="true" /><select idref="V-234975" selected="true" /><select idref="V-234976" selected="true" /><select idref="V-234977" selected="true" /><select idref="V-234978" selected="true" /><select idref="V-234979" selected="true" /><select idref="V-234980" selected="true" /><select idref="V-234981" selected="true" /><select idref="V-234982" selected="true" /><select idref="V-234983" selected="true" /><select idref="V-234984" selected="true" /><select idref="V-234985" selected="true" /><select idref="V-234986" selected="true" /><select idref="V-234987" selected="true" /><select idref="V-234988" selected="true" /><select idref="V-234989" selected="true" /><select idref="V-234990" selected="true" /><select idref="V-234991" selected="true" /><select idref="V-234992" selected="true" /><select idref="V-234993" selected="true" /><select idref="V-234994" selected="true" /><select idref="V-234995" selected="true" /><select idref="V-234996" selected="true" /><select idref="V-234997" selected="true" /><select idref="V-234998" selected="true" /><select idref="V-234999" selected="true" /><select idref="V-235000" selected="true" /><select idref="V-235001" selected="true" /><select idref="V-235002" selected="true" /><select idref="V-235003" selected="true" /><select idref="V-235004" selected="true" /><select idref="V-235005" selected="true" /><select idref="V-235006" selected="true" /><select idref="V-235007" selected="true" /><select idref="V-235008" selected="true" /><select idref="V-235009" selected="true" /><select idref="V-235010" selected="true" /><select idref="V-235013" selected="true" /><select idref="V-235014" selected="true" /><select idref="V-235015" selected="true" /><select idref="V-235016" selected="true" /><select idref="V-235017" selected="true" /><select idref="V-235018" selected="true" /><select idref="V-235019" selected="true" /><select idref="V-235020" selected="true" /><select idref="V-235021" selected="true" /><select idref="V-235022" selected="true" /><select idref="V-235023" selected="true" /><select idref="V-235024" selected="true" /><select idref="V-235025" selected="true" /><select idref="V-235026" selected="true" /><select idref="V-235027" selected="true" /><select idref="V-235028" selected="true" /><select idref="V-235029" selected="true" /><select idref="V-235030" selected="true" /><select idref="V-235031" selected="true" /><select idref="V-235032" selected="true" /><select idref="V-251723" selected="true" /><select idref="V-251724" selected="true" /><select idref="V-251725" selected="true" /><select idref="V-255920" selected="true" /><select idref="V-255921" selected="true" /><select idref="V-255922" selected="true" /><select idref="V-256982" selected="true" /><select idref="V-256983" selected="true" /><select idref="V-274879" selected="true" /></Profile><Group id="V-234800"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-234800r1155796_rule" weight="10.0" severity="high"><version>SLES-15-010000</version><title>The SUSE operating system must be a vendor-supported release.</title><description>&lt;VulnDiscussion&gt;A SUSE operating system release is considered "supported" if the vendor continues to provide security patches for the product. With an unsupported release, it will not be possible to resolve security issues discovered in the system software.
+
+Release		Released		General Support		Long Term Support
+15.1		24 Jun 2019		31 Jan 2021			31 Jan 2024
+15.2		21 Jul 2020		31 Dec 2021			31 Dec 2024
+15.3		22 Jun 2021		31 Dec 2022			31 Dec 2025
+15.4		21 Jun 2022		31 Dec 2023			31 Dec 2026
+15.5		20 Jun 2023		31 Dec 2024			31 Dec 2027
+15.6		26 Jun 2024		31 Dec 2025			31 Dec 2028
+15.7		17 Jun 2025		31 Jul 2031			31 Jul 2034&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Server 15</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Server 15</dc:subject><dc:identifier>5274</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001230</ident><fixtext fixref="F-37951r618670_fix">Upgrade the SUSE operating system to a version supported by the vendor. If the system is not registered with the SUSE Customer Center, register the system against the correct subscription.
 
 If the system requires Long-Term Service Pack Support (LTSS), obtain the correct LTSS subscription for the system.</fixtext><fix id="F-37951r618670_fix" /><check system="C-37988r618669_chk"><check-content-ref href="SUSE_Linux_Enterprise_Server_15_STIG.xml" name="M" /><check-content>Verify the SUSE operating system is a vendor-supported release.
 
@@ -539,7 +548,7 @@ Check that the telnet-server package is not installed on the SUSE operating syst
 
 &gt; zypper info telnet-server | grep Installed
 
-If the telnet-server package is installed, this is a finding.</check-content></check></Rule></Group><Group id="V-234819"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-234819r958472_rule" weight="10.0" severity="high"><version>SLES-15-010190</version><title>SUSE operating systems with a basic input/output system (BIOS) must require authentication upon booting into single-user and maintenance modes.</title><description>&lt;VulnDiscussion&gt;To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DoD-approved PKIs, all DoD systems (e.g., web servers and web portals) must be properly configured to incorporate access control methods that do not rely solely on the possession of a certificate for access. Successful authentication must not automatically give an entity access to an asset or security boundary. Authorization procedures and controls must be implemented to ensure each authenticated entity also has a validated and current authorization. Authorization is the process of determining whether an entity, once authenticated, is permitted to access a specific asset. Information systems use access control policies and enforcement mechanisms to implement this requirement.
+If the telnet-server package is installed, this is a finding.</check-content></check></Rule></Group><Group id="V-234819"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-234819r1137691_rule" weight="10.0" severity="high"><version>SLES-15-010190</version><title>SUSE operating systems with a basic input/output system (BIOS) must require authentication upon booting into single-user and maintenance modes.</title><description>&lt;VulnDiscussion&gt;To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DoD-approved PKIs, all DoD systems (e.g., web servers and web portals) must be properly configured to incorporate access control methods that do not rely solely on the possession of a certificate for access. Successful authentication must not automatically give an entity access to an asset or security boundary. Authorization procedures and controls must be implemented to ensure each authenticated entity also has a validated and current authorization. Authorization is the process of determining whether an entity, once authenticated, is permitted to access a specific asset. Information systems use access control policies and enforcement mechanisms to implement this requirement.
 
 Access control policies include identity-based policies, role-based policies, and attribute-based policies. Access enforcement mechanisms include access control lists, access control matrices, and cryptography. These policies and mechanisms must be employed by the application to control access between users (or processes acting on behalf of users) and objects (e.g., devices, files, records, processes, programs, and domains) in the information system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Server 15</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Server 15</dc:subject><dc:identifier>5274</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-37970r618727_fix">Note: If the system does not use a BIOS this requirement is Not Applicable.
 
@@ -570,7 +579,7 @@ Check that the encrypted password is set for root with the following command:
 
 password_pbkdf2 root grub.pbkdf2.sha512.10000.VeryLongString
 
-If the root password entry does not begin with "password_pbkdf2", this is a finding.</check-content></check></Rule></Group><Group id="V-234820"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-234820r958472_rule" weight="10.0" severity="high"><version>SLES-15-010200</version><title>SUSE operating systems with Unified Extensible Firmware Interface (UEFI) implemented must require authentication upon booting into single-user mode and maintenance.</title><description>&lt;VulnDiscussion&gt;If the system allows a user to boot into single-user or maintenance mode without authentication, any user that invokes single-user or maintenance mode is granted privileged access to all system information.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Server 15</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Server 15</dc:subject><dc:identifier>5274</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-37971r618730_fix">Note: If the system does not use UEFI, this requirement is Not Applicable.
+If the root password entry does not begin with "password_pbkdf2", this is a finding.</check-content></check></Rule></Group><Group id="V-234820"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-234820r1137691_rule" weight="10.0" severity="high"><version>SLES-15-010200</version><title>SUSE operating systems with Unified Extensible Firmware Interface (UEFI) implemented must require authentication upon booting into single-user mode and maintenance.</title><description>&lt;VulnDiscussion&gt;If the system allows a user to boot into single-user or maintenance mode without authentication, any user that invokes single-user or maintenance mode is granted privileged access to all system information.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Server 15</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Server 15</dc:subject><dc:identifier>5274</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-37971r618730_fix">Note: If the system does not use UEFI, this requirement is Not Applicable.
 
 Configure the SUSE operating system to encrypt the boot password.
 
@@ -657,16 +666,14 @@ Check that the SUSE operating system contains no duplicate UIDs for interactive
 
 &gt; awk -F ":" 'list[$3]++{print $1, $3}' /etc/passwd
 
-If output is produced, this is a finding.</check-content></check></Rule></Group><Group id="V-234823"><title>SRG-OS-000114-GPOS-00059</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-234823r958498_rule" weight="10.0" severity="medium"><version>SLES-15-010240</version><title>The SUSE operating system must disable the file system automounter unless required.</title><description>&lt;VulnDiscussion&gt;Automatically mounting file systems permits easy introduction of unknown devices, thereby facilitating malicious activity.
+If output is produced, this is a finding.</check-content></check></Rule></Group><Group id="V-234823"><title>SRG-OS-000114-GPOS-00059</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-234823r1155795_rule" weight="10.0" severity="medium"><version>SLES-15-010240</version><title>The SUSE operating system must disable the file system automounter.</title><description>&lt;VulnDiscussion&gt;Automatically mounting file systems permits easy introduction of unknown devices, thereby facilitating malicious activity.
 
-Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Server 15</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Server 15</dc:subject><dc:identifier>5274</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000778</ident><ident system="http://cyber.mil/cci">CCI-001958</ident><fixtext fixref="F-37974r618739_fix">Configure the SUSE operating system to disable the ability to automount devices.
+Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Server 15</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Server 15</dc:subject><dc:identifier>5274</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000778</ident><ident system="http://cyber.mil/cci">CCI-001958</ident><fixtext fixref="F-37974r1155794_fix">Configure the SUSE operating system to disable the ability to automount devices.
 
-Turn off the automount service with the following command:
+Turn off the automount service with the following commands:
 
 &gt; systemctl stop autofs
-&gt; systemctl disable autofs
-
-If "autofs" is required for Network File System (NFS), it must be documented with the ISSO.</fixtext><fix id="F-37974r618739_fix" /><check system="C-38011r618738_chk"><check-content-ref href="SUSE_Linux_Enterprise_Server_15_STIG.xml" name="M" /><check-content>Verify the SUSE operating system disables the ability to automount devices.
+&gt; systemctl disable autofs</fixtext><fix id="F-37974r1155794_fix" /><check system="C-38011r1155793_chk"><check-content-ref href="SUSE_Linux_Enterprise_Server_15_STIG.xml" name="M" /><check-content>Verify the SUSE operating system disables the ability to automount devices.
 
 Check to see if automounter service is active with the following command:
 
@@ -675,7 +682,7 @@ autofs.service - Automounts filesystems on demand
 Loaded: loaded (/usr/lib/systemd/system/autofs.service; disabled)
 Active: inactive (dead)
 
-If the "autofs" status is set to "active" and is not documented with the Information System Security Officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-234825"><title>SRG-OS-000120-GPOS-00061</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-234825r971535_rule" weight="10.0" severity="medium"><version>SLES-15-010260</version><title>The SUSE operating system must employ FIPS 140-2 approved cryptographic hashing algorithm for system authentication (login.defs).</title><description>&lt;VulnDiscussion&gt;Unapproved mechanisms that are used for authentication to the cryptographic module are not verified and therefore cannot be relied on to provide confidentiality or integrity, and DoD data may be compromised.
+If the "autofs" status is set to "active" this is a finding.</check-content></check></Rule></Group><Group id="V-234825"><title>SRG-OS-000120-GPOS-00061</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-234825r971535_rule" weight="10.0" severity="medium"><version>SLES-15-010260</version><title>The SUSE operating system must employ FIPS 140-2 approved cryptographic hashing algorithm for system authentication (login.defs).</title><description>&lt;VulnDiscussion&gt;Unapproved mechanisms that are used for authentication to the cryptographic module are not verified and therefore cannot be relied on to provide confidentiality or integrity, and DoD data may be compromised.
 
 SUSE operating systems using encryption are required to use FIPS-compliant mechanisms for authenticating to cryptographic modules. 
 
@@ -729,7 +736,7 @@ Check that the "ClientAliveInterval" parameter is set to a value of "600" with t
 
 ClientAliveInterval 600
 
-If "ClientAliveInterval" is not set to "600" in "/etc/ssh/sshd_config", this is a finding.</check-content></check></Rule></Group><Group id="V-234828"><title>SRG-OS-000138-GPOS-00069</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-234828r958524_rule" weight="10.0" severity="medium"><version>SLES-15-010300</version><title>The sticky bit must be set on all SUSE operating system world-writable directories.</title><description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, and hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
+If "ClientAliveInterval" is not set to "600" in "/etc/ssh/sshd_config", this is a finding.</check-content></check></Rule></Group><Group id="V-234828"><title>SRG-OS-000138-GPOS-00069</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-234828r1137695_rule" weight="10.0" severity="medium"><version>SLES-15-010300</version><title>The sticky bit must be set on all SUSE operating system world-writable directories.</title><description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, and hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
 
 This requirement generally applies to the design of an information technology product, but it can also apply to the configuration of particular information system components that are, or use, such products. This can be verified by acceptance/validation processes in DoD or other government agencies.
 
@@ -1288,13 +1295,13 @@ Check for the presence of the packages required to support multifactor authentic
 
 &gt; zypper info coolkey | grep -i installed
 
-If any of the packages required for multifactor authentication are not installed, this is a finding.</check-content></check></Rule></Group><Group id="V-234855"><title>SRG-OS-000375-GPOS-00160</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-234855r1009616_rule" weight="10.0" severity="medium"><version>SLES-15-010470</version><title>The SUSE operating system must implement certificate status checking for multifactor authentication.</title><description>&lt;VulnDiscussion&gt;Using an authentication device, such as a Common Access Card (CAC) or token separate from the information system, ensures credentials stored on the authentication device will not be affected if the information system is compromised.
+If any of the packages required for multifactor authentication are not installed, this is a finding.</check-content></check></Rule></Group><Group id="V-234855"><title>SRG-OS-000375-GPOS-00160</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-234855r1155789_rule" weight="10.0" severity="medium"><version>SLES-15-010470</version><title>The SUSE operating system must implement certificate status checking for multifactor authentication.</title><description>&lt;VulnDiscussion&gt;Using an authentication device, such as a common access card (CAC) or token separate from the information system, ensures credentials stored on the authentication device will not be affected if the information system is compromised.
 
 Multifactor solutions that require devices separate from information systems to gain access include hardware tokens providing time-based or challenge-response authenticators, and smart cards such as the U.S. Government Personal Identity Verification (PIV) card and the DOD CAC.
 
 A privileged account is defined as an information system account with authorizations of a privileged user.
 
-Remote access is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, non-organization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
+Remote access is access to DOD nonpublic information systems by an authorized user (or an information system) communicating through an external, nonorganization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.
 
 This requirement only applies to components with device-specific functions, or for organizational users (e.g., VPN, proxy capability). This does not apply to authentication for the purpose of configuring the device itself (management).
 
@@ -1304,7 +1311,7 @@ Modify all of the cert_policy lines in "/etc/pam_pkcs11/pam_pkcs11.conf" to incl
 
 Note: OCSP allows sending request for certificate status information. Additional certificate validation polices are permitted.
 
-Additional information on the configuration of multifactor authentication on the SUSE operating system can be found at https://www.suse.com/communities/blog/configuring-smart-card-authentication-suse-linux-enterprise/.</fixtext><fix id="F-38006r618835_fix" /><check system="C-38043r618834_chk"><check-content-ref href="SUSE_Linux_Enterprise_Server_15_STIG.xml" name="M" /><check-content>Verify the SUSE operating system implements certificate status checking for multifactor authentication.
+Additional information on the configuration of multifactor authentication on the SUSE operating system can be found at https://www.suse.com/communities/blog/configuring-smart-card-authentication-suse-linux-enterprise/.</fixtext><fix id="F-38006r618835_fix" /><check system="C-38043r1155788_chk"><check-content-ref href="SUSE_Linux_Enterprise_Server_15_STIG.xml" name="M" /><check-content>Verify the SUSE operating system implements certificate status checking for multifactor authentication.
 
 Check that certificate status checking for multifactor authentication is implemented with the following command:
 
@@ -1312,7 +1319,7 @@ Check that certificate status checking for multifactor authentication is impleme
 
 cert_policy = ca,ocsp_on,signature,crl_auto;
 
-If "cert_policy" is not set to include "ocsp", this is a finding.</check-content></check></Rule></Group><Group id="V-234856"><title>SRG-OS-000378-GPOS-00163</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-234856r958820_rule" weight="10.0" severity="medium"><version>SLES-15-010480</version><title>The SUSE operating system must disable the USB mass storage kernel module.</title><description>&lt;VulnDiscussion&gt;Without identifying devices, unidentified or unknown devices may be introduced, thereby facilitating malicious activity.
+If "cert_policy" is not set to include "ocsp_on", this is a finding.</check-content></check></Rule></Group><Group id="V-234856"><title>SRG-OS-000378-GPOS-00163</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-234856r958820_rule" weight="10.0" severity="medium"><version>SLES-15-010480</version><title>The SUSE operating system must disable the USB mass storage kernel module.</title><description>&lt;VulnDiscussion&gt;Without identifying devices, unidentified or unknown devices may be introduced, thereby facilitating malicious activity.
 
 Peripherals include but are not limited to such devices as flash drives, external storage, and printers.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Server 15</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Server 15</dc:subject><dc:identifier>5274</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001958</ident><fixtext fixref="F-38007r618838_fix">Configure the SUSE operating system to prevent USB mass storage devices from automounting when connected to the host.
 
@@ -1624,19 +1631,7 @@ Check to see if the root account password or account expires with the following
 
 Password expires:never
 
-If "Password expires" or "Account expires" is set to anything other than "never", this is a finding.</check-content></check></Rule></Group><Group id="V-234873"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-234873r991589_rule" weight="10.0" severity="low"><version>SLES-15-020080</version><title>The SUSE operating system must display the date and time of the last successful account logon upon logon.</title><description>&lt;VulnDiscussion&gt;Providing users with feedback on when account accesses last occurred facilitates user recognition and reporting of unauthorized account use.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Server 15</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Server 15</dc:subject><dc:identifier>5274</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000052</ident><fixtext fixref="F-38024r618889_fix">Configure the SUSE operating system to provide users with feedback on when account accesses last occurred by setting the required configuration options in "/etc/pam.d/login". 
-
-Add the following line to the top of "/etc/pam.d/login":
-
-session required pam_lastlog.so showfailed</fixtext><fix id="F-38024r618889_fix" /><check system="C-38061r618888_chk"><check-content-ref href="SUSE_Linux_Enterprise_Server_15_STIG.xml" name="M" /><check-content>Verify the SUSE operating system users are provided with feedback on when account accesses last occurred.
-
-Check that "pam_lastlog" is used and not silent with the following command:
-
-&gt; grep pam_lastlog /etc/pam.d/login
-
-session required pam_lastlog.so showfailed 
-
-If "pam_lastlog" is missing from "/etc/pam.d/login" file, the "silent" option is present, or the returned line is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-234874"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-234874r991589_rule" weight="10.0" severity="medium"><version>SLES-15-020090</version><title>The SUSE operating system must not have unnecessary accounts.</title><description>&lt;VulnDiscussion&gt;Accounts providing no operational purpose provide additional opportunities for system compromise. Unnecessary accounts include user accounts for individuals not requiring access to the system and application accounts for applications not installed on the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Server 15</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Server 15</dc:subject><dc:identifier>5274</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-38025r618892_fix">Configure the SUSE operating system so all accounts on the system are assigned to an active system, application, or user account. 
+If "Password expires" or "Account expires" is set to anything other than "never", this is a finding.</check-content></check></Rule></Group><Group id="V-234874"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-234874r991589_rule" weight="10.0" severity="medium"><version>SLES-15-020090</version><title>The SUSE operating system must not have unnecessary accounts.</title><description>&lt;VulnDiscussion&gt;Accounts providing no operational purpose provide additional opportunities for system compromise. Unnecessary accounts include user accounts for individuals not requiring access to the system and application accounts for applications not installed on the system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Server 15</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Server 15</dc:subject><dc:identifier>5274</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-38025r618892_fix">Configure the SUSE operating system so all accounts on the system are assigned to an active system, application, or user account. 
 
 Remove accounts that do not support approved system activities or that allow for a normal user to perform administrative-level actions. 
 
@@ -3663,11 +3658,9 @@ ctrl-alt-del.target
 Loaded: masked (/dev/null; maksed)
 Active: inactive (dead)
 
-If the ctrl-alt-del.target is not masked, this is a finding.</check-content></check></Rule></Group><Group id="V-234989"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-234989r991589_rule" weight="10.0" severity="high"><version>SLES-15-040061</version><title>The SUSE operating system must disable the x86 Ctrl-Alt-Delete key sequence for Graphical User Interfaces.</title><description>&lt;VulnDiscussion&gt;A locally logged-on user, who presses Ctrl-Alt-Delete when at the console, can reboot the system. If accidentally pressed, as could happen in the case of a mixed OS environment, this can create the risk of short-term loss of availability of systems due to unintentional reboot. In the graphical user interface environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is reduced because the user will be prompted before any action is taken.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Server 15</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Server 15</dc:subject><dc:identifier>5274</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-38140r619237_fix">Configure the system to disable the Ctrl-Alt-Delete sequence for the
-graphical user interface.
+If the ctrl-alt-del.target is not masked, this is a finding.</check-content></check></Rule></Group><Group id="V-234989"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-234989r1155792_rule" weight="10.0" severity="high"><version>SLES-15-040061</version><title>The SUSE operating system must disable the x86 Ctrl-Alt-Delete key sequence for Graphical User Interfaces.</title><description>&lt;VulnDiscussion&gt;A locally logged-on user, who presses Ctrl-Alt-Delete when at the console, can reboot the system. If accidentally pressed, as could happen in the case of a mixed OS environment, this can create the risk of short-term loss of availability of systems due to unintentional reboot. In the graphical user interface environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is reduced because the user will be prompted before any action is taken.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Server 15</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Server 15</dc:subject><dc:identifier>5274</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-38140r1155791_fix">Configure the system to disable the Ctrl-Alt-Delete sequence for the graphical user interface.
 
-Create a database to contain the system-wide setting (if it does not
-already exist) with the following steps:
+Create a database to contain the systemwide setting (if it does not already exist) with the following steps:
 
 1. Create a user profile and with the listed content:
 
@@ -3684,33 +3677,30 @@ system-db:local
 
 /etc/dconf/db/local.d/01-fips-settings
 [org/gnome/settings-daemon/plugins/media-keys]
-logout=['']
+logout=''
 
 /etc/dconf/db/local.d/locks/01-fips-locks 
 /org/gnome/settings-daemon/plugins/media-keys/logout
 
 4. Update the dconf database: 
 
-&gt; sudo dconf update</fixtext><fix id="F-38140r619237_fix" /><check system="C-38177r619236_chk"><check-content-ref href="SUSE_Linux_Enterprise_Server_15_STIG.xml" name="M" /><check-content>Note: If a graphical user interface is not installed, this requirement is Not Applicable.
+&gt; sudo dconf update</fixtext><fix id="F-38140r1155791_fix" /><check system="C-38177r1155790_chk"><check-content-ref href="SUSE_Linux_Enterprise_Server_15_STIG.xml" name="M" /><check-content>Note: If a graphical user interface is not installed, this requirement is Not Applicable.
 
-Verify the SUSE operating system is not configured to reboot the system
-when Ctrl-Alt-Delete is pressed in the graphical user interface.
+Verify the SUSE operating system is not configured to reboot the system when Ctrl-Alt-Delete is pressed in the graphical user interface.
 
-Check that the dconf setting was disabled to allow the Ctrl-Alt-Delete
-sequence in the graphical user interface with the following command:
+Check that the dconf setting was disabled to allow the Ctrl-Alt-Delete sequence in the graphical user interface with the following command:
 
 Check the default logout key sequence:
 
 &gt; sudo gsettings get org.gnome.settings-daemon.plugins.media-keys logout
-['']
+''
 
 Check that the value is not writable and cannot be changed by the user:
 
 &gt; sudo gsettings writable org.gnome.settings-daemon.plugins.media-keys logout
 false
 
-If the logout value is not [''] and the writable status is not false, this
-is a finding.</check-content></check></Rule></Group><Group id="V-234990"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-234990r1106565_rule" weight="10.0" severity="high"><version>SLES-15-040062</version><title>The SUSE operating system must disable the systemd Ctrl-Alt-Delete burst key sequence.</title><description>&lt;VulnDiscussion&gt;A locally logged-on user, who presses Ctrl-Alt-Delete when at the console, can reboot the system. If accidentally pressed, as could happen in the case of a mixed OS environment, this can create the risk of short-term loss of availability of systems due to unintentional reboot. In the graphical user interface environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is reduced because the user will be prompted before any action is taken.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Server 15</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Server 15</dc:subject><dc:identifier>5274</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-38141r1102124_fix">Configure the system to disable the CtrlAltDelBurstAction by adding it to a drop file in a "/etc/systemd/system.conf.d/" configuration file:
+If the logout value is not [''] and the writable status is not false, this is a finding.</check-content></check></Rule></Group><Group id="V-234990"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-234990r1106565_rule" weight="10.0" severity="high"><version>SLES-15-040062</version><title>The SUSE operating system must disable the systemd Ctrl-Alt-Delete burst key sequence.</title><description>&lt;VulnDiscussion&gt;A locally logged-on user, who presses Ctrl-Alt-Delete when at the console, can reboot the system. If accidentally pressed, as could happen in the case of a mixed OS environment, this can create the risk of short-term loss of availability of systems due to unintentional reboot. In the graphical user interface environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is reduced because the user will be prompted before any action is taken.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Server 15</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Server 15</dc:subject><dc:identifier>5274</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-38141r1102124_fix">Configure the system to disable the CtrlAltDelBurstAction by adding it to a drop file in a "/etc/systemd/system.conf.d/" configuration file:
 
 If no drop file exists, create one with the following command:
 
@@ -4364,7 +4354,7 @@ Restart the "sshd" service for changes to take effect:
 
 KexAlgorithms ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256
  
-If "KexAlgorithms" is not configured, is commented out, or does not contain only the algorithms "ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256" in exact order, this is a finding.</check-content></check></Rule></Group><Group id="V-255921"><title>SRG-OS-000138-GPOS-00069</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-255921r958524_rule" weight="10.0" severity="low"><version>SLES-15-010375</version><title>The SUSE operating system must restrict access to the kernel message buffer.</title><description>&lt;VulnDiscussion&gt;Restricting access to the kernel message buffer limits access only to root. This prevents attackers from gaining additional system information as a nonprivileged user.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Server 15</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Server 15</dc:subject><dc:identifier>5274</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001090</ident><fixtext fixref="F-59541r880963_fix">Configure the operating system to restrict access to the kernel message buffer.
+If "KexAlgorithms" is not configured, is commented out, or does not contain only the algorithms "ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256" in exact order, this is a finding.</check-content></check></Rule></Group><Group id="V-255921"><title>SRG-OS-000138-GPOS-00069</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-255921r1137695_rule" weight="10.0" severity="low"><version>SLES-15-010375</version><title>The SUSE operating system must restrict access to the kernel message buffer.</title><description>&lt;VulnDiscussion&gt;Restricting access to the kernel message buffer limits access only to root. This prevents attackers from gaining additional system information as a nonprivileged user.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Server 15</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Server 15</dc:subject><dc:identifier>5274</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001090</ident><fixtext fixref="F-59541r880963_fix">Configure the operating system to restrict access to the kernel message buffer.
 
 Set the system to the required kernel parameter by adding or modifying the following line in /etc/sysctl.conf or a config file in the /etc/sysctl.d/ directory:
 
diff --git a/shared/references/disa-stig-slmicro5-v1r2-xccdf-manual.xml b/shared/references/disa-stig-slmicro5-v1r3-xccdf-manual.xml
similarity index 87%
rename from shared/references/disa-stig-slmicro5-v1r2-xccdf-manual.xml
rename to shared/references/disa-stig-slmicro5-v1r3-xccdf-manual.xml
index 5d041d34d222..d53d2389953f 100644
--- a/shared/references/disa-stig-slmicro5-v1r2-xccdf-manual.xml
+++ b/shared/references/disa-stig-slmicro5-v1r3-xccdf-manual.xml
@@ -1,10 +1,21 @@
-<?xml version="1.0" encoding="utf-8"?><?xml-stylesheet type='text/xsl' href='STIG_unclass.xsl'?><Benchmark xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.1 http://nvd.nist.gov/schema/xccdf-1.1.4.xsd http://cpe.mitre.org/dictionary/2.0 http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd" id="SLEM_5_STIG" xml:lang="en" xmlns="http://checklists.nist.gov/xccdf/1.1"><status date="2025-05-08">accepted</status><title>SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide</title><description>This Security Technical Implementation Guide is published as a tool to improve the security of Department of Defense (DOD) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.</description><notice id="terms-of-use" xml:lang="en"></notice><front-matter xml:lang="en"></front-matter><rear-matter xml:lang="en"></rear-matter><reference href="https://cyber.mil"><dc:publisher>DISA</dc:publisher><dc:source>STIG.DOD.MIL</dc:source></reference><plain-text id="release-info">Release: 2 Benchmark Date: 02 Jul 2025</plain-text><plain-text id="generator">3.5</plain-text><plain-text id="conventionsVersion">1.10.0</plain-text><version>1</version><Profile id="MAC-1_Classified"><title>I - Mission Critical Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-261263" selected="true" /><select idref="V-261264" selected="true" /><select idref="V-261265" selected="true" /><select idref="V-261266" selected="true" /><select idref="V-261267" selected="true" /><select idref="V-261268" selected="true" /><select idref="V-261269" selected="true" /><select idref="V-261270" selected="true" /><select idref="V-261271" selected="true" /><select idref="V-261272" selected="true" /><select idref="V-261273" selected="true" /><select idref="V-261274" selected="true" /><select idref="V-261275" selected="true" /><select idref="V-261276" selected="true" /><select idref="V-261277" selected="true" /><select idref="V-261278" selected="true" /><select idref="V-261279" selected="true" /><select idref="V-261280" selected="true" /><select idref="V-261281" selected="true" /><select idref="V-261282" selected="true" /><select idref="V-261283" selected="true" /><select idref="V-261284" selected="true" /><select idref="V-261285" selected="true" /><select idref="V-261286" selected="true" /><select idref="V-261287" selected="true" /><select idref="V-261288" selected="true" /><select idref="V-261289" selected="true" /><select idref="V-261290" selected="true" /><select idref="V-261291" selected="true" /><select idref="V-261292" selected="true" /><select idref="V-261293" selected="true" /><select idref="V-261294" selected="true" /><select idref="V-261295" selected="true" /><select idref="V-261296" selected="true" /><select idref="V-261297" selected="true" /><select idref="V-261298" selected="true" /><select idref="V-261299" selected="true" /><select idref="V-261300" selected="true" /><select idref="V-261301" selected="true" /><select idref="V-261302" selected="true" /><select idref="V-261303" selected="true" /><select idref="V-261304" selected="true" /><select idref="V-261305" selected="true" /><select idref="V-261306" selected="true" /><select idref="V-261307" selected="true" /><select idref="V-261308" selected="true" /><select idref="V-261309" selected="true" /><select idref="V-261310" selected="true" /><select idref="V-261311" selected="true" /><select idref="V-261312" selected="true" /><select idref="V-261313" selected="true" /><select idref="V-261314" selected="true" /><select idref="V-261315" selected="true" /><select idref="V-261316" selected="true" /><select idref="V-261317" selected="true" /><select idref="V-261318" selected="true" /><select idref="V-261319" selected="true" /><select idref="V-261320" selected="true" /><select idref="V-261321" selected="true" /><select idref="V-261322" selected="true" /><select idref="V-261323" selected="true" /><select idref="V-261324" selected="true" /><select idref="V-261325" selected="true" /><select idref="V-261326" selected="true" /><select idref="V-261327" selected="true" /><select idref="V-261328" selected="true" /><select idref="V-261329" selected="true" /><select idref="V-261330" selected="true" /><select idref="V-261331" selected="true" /><select idref="V-261332" selected="true" /><select idref="V-261333" selected="true" /><select idref="V-261334" selected="true" /><select idref="V-261335" selected="true" /><select idref="V-261336" selected="true" /><select idref="V-261337" selected="true" /><select idref="V-261338" selected="true" /><select idref="V-261339" selected="true" /><select idref="V-261340" selected="true" /><select idref="V-261341" selected="true" /><select idref="V-261342" selected="true" /><select idref="V-261343" selected="true" /><select idref="V-261344" selected="true" /><select idref="V-261345" selected="true" /><select idref="V-261346" selected="true" /><select idref="V-261347" selected="true" /><select idref="V-261348" selected="true" /><select idref="V-261349" selected="true" /><select idref="V-261350" selected="true" /><select idref="V-261351" selected="true" /><select idref="V-261352" selected="true" /><select idref="V-261353" selected="true" /><select idref="V-261354" selected="true" /><select idref="V-261355" selected="true" /><select idref="V-261356" selected="true" /><select idref="V-261357" selected="true" /><select idref="V-261358" selected="true" /><select idref="V-261359" selected="true" /><select idref="V-261360" selected="true" /><select idref="V-261361" selected="true" /><select idref="V-261362" selected="true" /><select idref="V-261363" selected="true" /><select idref="V-261364" selected="true" /><select idref="V-261365" selected="true" /><select idref="V-261367" selected="true" /><select idref="V-261368" selected="true" /><select idref="V-261369" selected="true" /><select idref="V-261370" selected="true" /><select idref="V-261371" selected="true" /><select idref="V-261372" selected="true" /><select idref="V-261373" selected="true" /><select idref="V-261374" selected="true" /><select idref="V-261375" selected="true" /><select idref="V-261376" selected="true" /><select idref="V-261377" selected="true" /><select idref="V-261378" selected="true" /><select idref="V-261379" selected="true" /><select idref="V-261380" selected="true" /><select idref="V-261381" selected="true" /><select idref="V-261382" selected="true" /><select idref="V-261383" selected="true" /><select idref="V-261384" selected="true" /><select idref="V-261385" selected="true" /><select idref="V-261386" selected="true" /><select idref="V-261387" selected="true" /><select idref="V-261388" selected="true" /><select idref="V-261389" selected="true" /><select idref="V-261390" selected="true" /><select idref="V-261391" selected="true" /><select idref="V-261392" selected="true" /><select idref="V-261393" selected="true" /><select idref="V-261394" selected="true" /><select idref="V-261395" selected="true" /><select idref="V-261396" selected="true" /><select idref="V-261397" selected="true" /><select idref="V-261398" selected="true" /><select idref="V-261399" selected="true" /><select idref="V-261400" selected="true" /><select idref="V-261401" selected="true" /><select idref="V-261402" selected="true" /><select idref="V-261403" selected="true" /><select idref="V-261404" selected="true" /><select idref="V-261405" selected="true" /><select idref="V-261406" selected="true" /><select idref="V-261407" selected="true" /><select idref="V-261408" selected="true" /><select idref="V-261409" selected="true" /><select idref="V-261410" selected="true" /><select idref="V-261411" selected="true" /><select idref="V-261412" selected="true" /><select idref="V-261413" selected="true" /><select idref="V-261414" selected="true" /><select idref="V-261415" selected="true" /><select idref="V-261416" selected="true" /><select idref="V-261417" selected="true" /><select idref="V-261418" selected="true" /><select idref="V-261419" selected="true" /><select idref="V-261420" selected="true" /><select idref="V-261421" selected="true" /><select idref="V-261422" selected="true" /><select idref="V-261423" selected="true" /><select idref="V-261424" selected="true" /><select idref="V-261425" selected="true" /><select idref="V-261426" selected="true" /><select idref="V-261427" selected="true" /><select idref="V-261428" selected="true" /><select idref="V-261429" selected="true" /><select idref="V-261430" selected="true" /><select idref="V-261431" selected="true" /><select idref="V-261432" selected="true" /><select idref="V-261433" selected="true" /><select idref="V-261434" selected="true" /><select idref="V-261435" selected="true" /><select idref="V-261436" selected="true" /><select idref="V-261437" selected="true" /><select idref="V-261438" selected="true" /><select idref="V-261439" selected="true" /><select idref="V-261440" selected="true" /><select idref="V-261441" selected="true" /><select idref="V-261442" selected="true" /><select idref="V-261443" selected="true" /><select idref="V-261444" selected="true" /><select idref="V-261445" selected="true" /><select idref="V-261446" selected="true" /><select idref="V-261447" selected="true" /><select idref="V-261448" selected="true" /><select idref="V-261449" selected="true" /><select idref="V-261450" selected="true" /><select idref="V-261451" selected="true" /><select idref="V-261452" selected="true" /><select idref="V-261453" selected="true" /><select idref="V-261454" selected="true" /><select idref="V-261455" selected="true" /><select idref="V-261456" selected="true" /><select idref="V-261457" selected="true" /><select idref="V-261458" selected="true" /><select idref="V-261459" selected="true" /><select idref="V-261460" selected="true" /><select idref="V-261461" selected="true" /><select idref="V-261462" selected="true" /><select idref="V-261463" selected="true" /><select idref="V-261464" selected="true" /><select idref="V-261465" selected="true" /><select idref="V-261466" selected="true" /><select idref="V-261467" selected="true" /><select idref="V-261468" selected="true" /><select idref="V-261469" selected="true" /><select idref="V-261470" selected="true" /><select idref="V-261471" selected="true" /><select idref="V-261472" selected="true" /><select idref="V-261473" selected="true" /></Profile><Profile id="MAC-1_Public"><title>I - Mission Critical Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-261263" selected="true" /><select idref="V-261264" selected="true" /><select idref="V-261265" selected="true" /><select idref="V-261266" selected="true" /><select idref="V-261267" selected="true" /><select idref="V-261268" selected="true" /><select idref="V-261269" selected="true" /><select idref="V-261270" selected="true" /><select idref="V-261271" selected="true" /><select idref="V-261272" selected="true" /><select idref="V-261273" selected="true" /><select idref="V-261274" selected="true" /><select idref="V-261275" selected="true" /><select idref="V-261276" selected="true" /><select idref="V-261277" selected="true" /><select idref="V-261278" selected="true" /><select idref="V-261279" selected="true" /><select idref="V-261280" selected="true" /><select idref="V-261281" selected="true" /><select idref="V-261282" selected="true" /><select idref="V-261283" selected="true" /><select idref="V-261284" selected="true" /><select idref="V-261285" selected="true" /><select idref="V-261286" selected="true" /><select idref="V-261287" selected="true" /><select idref="V-261288" selected="true" /><select idref="V-261289" selected="true" /><select idref="V-261290" selected="true" /><select idref="V-261291" selected="true" /><select idref="V-261292" selected="true" /><select idref="V-261293" selected="true" /><select idref="V-261294" selected="true" /><select idref="V-261295" selected="true" /><select idref="V-261296" selected="true" /><select idref="V-261297" selected="true" /><select idref="V-261298" selected="true" /><select idref="V-261299" selected="true" /><select idref="V-261300" selected="true" /><select idref="V-261301" selected="true" /><select idref="V-261302" selected="true" /><select idref="V-261303" selected="true" /><select idref="V-261304" selected="true" /><select idref="V-261305" selected="true" /><select idref="V-261306" selected="true" /><select idref="V-261307" selected="true" /><select idref="V-261308" selected="true" /><select idref="V-261309" selected="true" /><select idref="V-261310" selected="true" /><select idref="V-261311" selected="true" /><select idref="V-261312" selected="true" /><select idref="V-261313" selected="true" /><select idref="V-261314" selected="true" /><select idref="V-261315" selected="true" /><select idref="V-261316" selected="true" /><select idref="V-261317" selected="true" /><select idref="V-261318" selected="true" /><select idref="V-261319" selected="true" /><select idref="V-261320" selected="true" /><select idref="V-261321" selected="true" /><select idref="V-261322" selected="true" /><select idref="V-261323" selected="true" /><select idref="V-261324" selected="true" /><select idref="V-261325" selected="true" /><select idref="V-261326" selected="true" /><select idref="V-261327" selected="true" /><select idref="V-261328" selected="true" /><select idref="V-261329" selected="true" /><select idref="V-261330" selected="true" /><select idref="V-261331" selected="true" /><select idref="V-261332" selected="true" /><select idref="V-261333" selected="true" /><select idref="V-261334" selected="true" /><select idref="V-261335" selected="true" /><select idref="V-261336" selected="true" /><select idref="V-261337" selected="true" /><select idref="V-261338" selected="true" /><select idref="V-261339" selected="true" /><select idref="V-261340" selected="true" /><select idref="V-261341" selected="true" /><select idref="V-261342" selected="true" /><select idref="V-261343" selected="true" /><select idref="V-261344" selected="true" /><select idref="V-261345" selected="true" /><select idref="V-261346" selected="true" /><select idref="V-261347" selected="true" /><select idref="V-261348" selected="true" /><select idref="V-261349" selected="true" /><select idref="V-261350" selected="true" /><select idref="V-261351" selected="true" /><select idref="V-261352" selected="true" /><select idref="V-261353" selected="true" /><select idref="V-261354" selected="true" /><select idref="V-261355" selected="true" /><select idref="V-261356" selected="true" /><select idref="V-261357" selected="true" /><select idref="V-261358" selected="true" /><select idref="V-261359" selected="true" /><select idref="V-261360" selected="true" /><select idref="V-261361" selected="true" /><select idref="V-261362" selected="true" /><select idref="V-261363" selected="true" /><select idref="V-261364" selected="true" /><select idref="V-261365" selected="true" /><select idref="V-261367" selected="true" /><select idref="V-261368" selected="true" /><select idref="V-261369" selected="true" /><select idref="V-261370" selected="true" /><select idref="V-261371" selected="true" /><select idref="V-261372" selected="true" /><select idref="V-261373" selected="true" /><select idref="V-261374" selected="true" /><select idref="V-261375" selected="true" /><select idref="V-261376" selected="true" /><select idref="V-261377" selected="true" /><select idref="V-261378" selected="true" /><select idref="V-261379" selected="true" /><select idref="V-261380" selected="true" /><select idref="V-261381" selected="true" /><select idref="V-261382" selected="true" /><select idref="V-261383" selected="true" /><select idref="V-261384" selected="true" /><select idref="V-261385" selected="true" /><select idref="V-261386" selected="true" /><select idref="V-261387" selected="true" /><select idref="V-261388" selected="true" /><select idref="V-261389" selected="true" /><select idref="V-261390" selected="true" /><select idref="V-261391" selected="true" /><select idref="V-261392" selected="true" /><select idref="V-261393" selected="true" /><select idref="V-261394" selected="true" /><select idref="V-261395" selected="true" /><select idref="V-261396" selected="true" /><select idref="V-261397" selected="true" /><select idref="V-261398" selected="true" /><select idref="V-261399" selected="true" /><select idref="V-261400" selected="true" /><select idref="V-261401" selected="true" /><select idref="V-261402" selected="true" /><select idref="V-261403" selected="true" /><select idref="V-261404" selected="true" /><select idref="V-261405" selected="true" /><select idref="V-261406" selected="true" /><select idref="V-261407" selected="true" /><select idref="V-261408" selected="true" /><select idref="V-261409" selected="true" /><select idref="V-261410" selected="true" /><select idref="V-261411" selected="true" /><select idref="V-261412" selected="true" /><select idref="V-261413" selected="true" /><select idref="V-261414" selected="true" /><select idref="V-261415" selected="true" /><select idref="V-261416" selected="true" /><select idref="V-261417" selected="true" /><select idref="V-261418" selected="true" /><select idref="V-261419" selected="true" /><select idref="V-261420" selected="true" /><select idref="V-261421" selected="true" /><select idref="V-261422" selected="true" /><select idref="V-261423" selected="true" /><select idref="V-261424" selected="true" /><select idref="V-261425" selected="true" /><select idref="V-261426" selected="true" /><select idref="V-261427" selected="true" /><select idref="V-261428" selected="true" /><select idref="V-261429" selected="true" /><select idref="V-261430" selected="true" /><select idref="V-261431" selected="true" /><select idref="V-261432" selected="true" /><select idref="V-261433" selected="true" /><select idref="V-261434" selected="true" /><select idref="V-261435" selected="true" /><select idref="V-261436" selected="true" /><select idref="V-261437" selected="true" /><select idref="V-261438" selected="true" /><select idref="V-261439" selected="true" /><select idref="V-261440" selected="true" /><select idref="V-261441" selected="true" /><select idref="V-261442" selected="true" /><select idref="V-261443" selected="true" /><select idref="V-261444" selected="true" /><select idref="V-261445" selected="true" /><select idref="V-261446" selected="true" /><select idref="V-261447" selected="true" /><select idref="V-261448" selected="true" /><select idref="V-261449" selected="true" /><select idref="V-261450" selected="true" /><select idref="V-261451" selected="true" /><select idref="V-261452" selected="true" /><select idref="V-261453" selected="true" /><select idref="V-261454" selected="true" /><select idref="V-261455" selected="true" /><select idref="V-261456" selected="true" /><select idref="V-261457" selected="true" /><select idref="V-261458" selected="true" /><select idref="V-261459" selected="true" /><select idref="V-261460" selected="true" /><select idref="V-261461" selected="true" /><select idref="V-261462" selected="true" /><select idref="V-261463" selected="true" /><select idref="V-261464" selected="true" /><select idref="V-261465" selected="true" /><select idref="V-261466" selected="true" /><select idref="V-261467" selected="true" /><select idref="V-261468" selected="true" /><select idref="V-261469" selected="true" /><select idref="V-261470" selected="true" /><select idref="V-261471" selected="true" /><select idref="V-261472" selected="true" /><select idref="V-261473" selected="true" /></Profile><Profile id="MAC-1_Sensitive"><title>I - Mission Critical Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-261263" selected="true" /><select idref="V-261264" selected="true" /><select idref="V-261265" selected="true" /><select idref="V-261266" selected="true" /><select idref="V-261267" selected="true" /><select idref="V-261268" selected="true" /><select idref="V-261269" selected="true" /><select idref="V-261270" selected="true" /><select idref="V-261271" selected="true" /><select idref="V-261272" selected="true" /><select idref="V-261273" selected="true" /><select idref="V-261274" selected="true" /><select idref="V-261275" selected="true" /><select idref="V-261276" selected="true" /><select idref="V-261277" selected="true" /><select idref="V-261278" selected="true" /><select idref="V-261279" selected="true" /><select idref="V-261280" selected="true" /><select idref="V-261281" selected="true" /><select idref="V-261282" selected="true" /><select idref="V-261283" selected="true" /><select idref="V-261284" selected="true" /><select idref="V-261285" selected="true" /><select idref="V-261286" selected="true" /><select idref="V-261287" selected="true" /><select idref="V-261288" selected="true" /><select idref="V-261289" selected="true" /><select idref="V-261290" selected="true" /><select idref="V-261291" selected="true" /><select idref="V-261292" selected="true" /><select idref="V-261293" selected="true" /><select idref="V-261294" selected="true" /><select idref="V-261295" selected="true" /><select idref="V-261296" selected="true" /><select idref="V-261297" selected="true" /><select idref="V-261298" selected="true" /><select idref="V-261299" selected="true" /><select idref="V-261300" selected="true" /><select idref="V-261301" selected="true" /><select idref="V-261302" selected="true" /><select idref="V-261303" selected="true" /><select idref="V-261304" selected="true" /><select idref="V-261305" selected="true" /><select idref="V-261306" selected="true" /><select idref="V-261307" selected="true" /><select idref="V-261308" selected="true" /><select idref="V-261309" selected="true" /><select idref="V-261310" selected="true" /><select idref="V-261311" selected="true" /><select idref="V-261312" selected="true" /><select idref="V-261313" selected="true" /><select idref="V-261314" selected="true" /><select idref="V-261315" selected="true" /><select idref="V-261316" selected="true" /><select idref="V-261317" selected="true" /><select idref="V-261318" selected="true" /><select idref="V-261319" selected="true" /><select idref="V-261320" selected="true" /><select idref="V-261321" selected="true" /><select idref="V-261322" selected="true" /><select idref="V-261323" selected="true" /><select idref="V-261324" selected="true" /><select idref="V-261325" selected="true" /><select idref="V-261326" selected="true" /><select idref="V-261327" selected="true" /><select idref="V-261328" selected="true" /><select idref="V-261329" selected="true" /><select idref="V-261330" selected="true" /><select idref="V-261331" selected="true" /><select idref="V-261332" selected="true" /><select idref="V-261333" selected="true" /><select idref="V-261334" selected="true" /><select idref="V-261335" selected="true" /><select idref="V-261336" selected="true" /><select idref="V-261337" selected="true" /><select idref="V-261338" selected="true" /><select idref="V-261339" selected="true" /><select idref="V-261340" selected="true" /><select idref="V-261341" selected="true" /><select idref="V-261342" selected="true" /><select idref="V-261343" selected="true" /><select idref="V-261344" selected="true" /><select idref="V-261345" selected="true" /><select idref="V-261346" selected="true" /><select idref="V-261347" selected="true" /><select idref="V-261348" selected="true" /><select idref="V-261349" selected="true" /><select idref="V-261350" selected="true" /><select idref="V-261351" selected="true" /><select idref="V-261352" selected="true" /><select idref="V-261353" selected="true" /><select idref="V-261354" selected="true" /><select idref="V-261355" selected="true" /><select idref="V-261356" selected="true" /><select idref="V-261357" selected="true" /><select idref="V-261358" selected="true" /><select idref="V-261359" selected="true" /><select idref="V-261360" selected="true" /><select idref="V-261361" selected="true" /><select idref="V-261362" selected="true" /><select idref="V-261363" selected="true" /><select idref="V-261364" selected="true" /><select idref="V-261365" selected="true" /><select idref="V-261367" selected="true" /><select idref="V-261368" selected="true" /><select idref="V-261369" selected="true" /><select idref="V-261370" selected="true" /><select idref="V-261371" selected="true" /><select idref="V-261372" selected="true" /><select idref="V-261373" selected="true" /><select idref="V-261374" selected="true" /><select idref="V-261375" selected="true" /><select idref="V-261376" selected="true" /><select idref="V-261377" selected="true" /><select idref="V-261378" selected="true" /><select idref="V-261379" selected="true" /><select idref="V-261380" selected="true" /><select idref="V-261381" selected="true" /><select idref="V-261382" selected="true" /><select idref="V-261383" selected="true" /><select idref="V-261384" selected="true" /><select idref="V-261385" selected="true" /><select idref="V-261386" selected="true" /><select idref="V-261387" selected="true" /><select idref="V-261388" selected="true" /><select idref="V-261389" selected="true" /><select idref="V-261390" selected="true" /><select idref="V-261391" selected="true" /><select idref="V-261392" selected="true" /><select idref="V-261393" selected="true" /><select idref="V-261394" selected="true" /><select idref="V-261395" selected="true" /><select idref="V-261396" selected="true" /><select idref="V-261397" selected="true" /><select idref="V-261398" selected="true" /><select idref="V-261399" selected="true" /><select idref="V-261400" selected="true" /><select idref="V-261401" selected="true" /><select idref="V-261402" selected="true" /><select idref="V-261403" selected="true" /><select idref="V-261404" selected="true" /><select idref="V-261405" selected="true" /><select idref="V-261406" selected="true" /><select idref="V-261407" selected="true" /><select idref="V-261408" selected="true" /><select idref="V-261409" selected="true" /><select idref="V-261410" selected="true" /><select idref="V-261411" selected="true" /><select idref="V-261412" selected="true" /><select idref="V-261413" selected="true" /><select idref="V-261414" selected="true" /><select idref="V-261415" selected="true" /><select idref="V-261416" selected="true" /><select idref="V-261417" selected="true" /><select idref="V-261418" selected="true" /><select idref="V-261419" selected="true" /><select idref="V-261420" selected="true" /><select idref="V-261421" selected="true" /><select idref="V-261422" selected="true" /><select idref="V-261423" selected="true" /><select idref="V-261424" selected="true" /><select idref="V-261425" selected="true" /><select idref="V-261426" selected="true" /><select idref="V-261427" selected="true" /><select idref="V-261428" selected="true" /><select idref="V-261429" selected="true" /><select idref="V-261430" selected="true" /><select idref="V-261431" selected="true" /><select idref="V-261432" selected="true" /><select idref="V-261433" selected="true" /><select idref="V-261434" selected="true" /><select idref="V-261435" selected="true" /><select idref="V-261436" selected="true" /><select idref="V-261437" selected="true" /><select idref="V-261438" selected="true" /><select idref="V-261439" selected="true" /><select idref="V-261440" selected="true" /><select idref="V-261441" selected="true" /><select idref="V-261442" selected="true" /><select idref="V-261443" selected="true" /><select idref="V-261444" selected="true" /><select idref="V-261445" selected="true" /><select idref="V-261446" selected="true" /><select idref="V-261447" selected="true" /><select idref="V-261448" selected="true" /><select idref="V-261449" selected="true" /><select idref="V-261450" selected="true" /><select idref="V-261451" selected="true" /><select idref="V-261452" selected="true" /><select idref="V-261453" selected="true" /><select idref="V-261454" selected="true" /><select idref="V-261455" selected="true" /><select idref="V-261456" selected="true" /><select idref="V-261457" selected="true" /><select idref="V-261458" selected="true" /><select idref="V-261459" selected="true" /><select idref="V-261460" selected="true" /><select idref="V-261461" selected="true" /><select idref="V-261462" selected="true" /><select idref="V-261463" selected="true" /><select idref="V-261464" selected="true" /><select idref="V-261465" selected="true" /><select idref="V-261466" selected="true" /><select idref="V-261467" selected="true" /><select idref="V-261468" selected="true" /><select idref="V-261469" selected="true" /><select idref="V-261470" selected="true" /><select idref="V-261471" selected="true" /><select idref="V-261472" selected="true" /><select idref="V-261473" selected="true" /></Profile><Profile id="MAC-2_Classified"><title>II - Mission Support Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-261263" selected="true" /><select idref="V-261264" selected="true" /><select idref="V-261265" selected="true" /><select idref="V-261266" selected="true" /><select idref="V-261267" selected="true" /><select idref="V-261268" selected="true" /><select idref="V-261269" selected="true" /><select idref="V-261270" selected="true" /><select idref="V-261271" selected="true" /><select idref="V-261272" selected="true" /><select idref="V-261273" selected="true" /><select idref="V-261274" selected="true" /><select idref="V-261275" selected="true" /><select idref="V-261276" selected="true" /><select idref="V-261277" selected="true" /><select idref="V-261278" selected="true" /><select idref="V-261279" selected="true" /><select idref="V-261280" selected="true" /><select idref="V-261281" selected="true" /><select idref="V-261282" selected="true" /><select idref="V-261283" selected="true" /><select idref="V-261284" selected="true" /><select idref="V-261285" selected="true" /><select idref="V-261286" selected="true" /><select idref="V-261287" selected="true" /><select idref="V-261288" selected="true" /><select idref="V-261289" selected="true" /><select idref="V-261290" selected="true" /><select idref="V-261291" selected="true" /><select idref="V-261292" selected="true" /><select idref="V-261293" selected="true" /><select idref="V-261294" selected="true" /><select idref="V-261295" selected="true" /><select idref="V-261296" selected="true" /><select idref="V-261297" selected="true" /><select idref="V-261298" selected="true" /><select idref="V-261299" selected="true" /><select idref="V-261300" selected="true" /><select idref="V-261301" selected="true" /><select idref="V-261302" selected="true" /><select idref="V-261303" selected="true" /><select idref="V-261304" selected="true" /><select idref="V-261305" selected="true" /><select idref="V-261306" selected="true" /><select idref="V-261307" selected="true" /><select idref="V-261308" selected="true" /><select idref="V-261309" selected="true" /><select idref="V-261310" selected="true" /><select idref="V-261311" selected="true" /><select idref="V-261312" selected="true" /><select idref="V-261313" selected="true" /><select idref="V-261314" selected="true" /><select idref="V-261315" selected="true" /><select idref="V-261316" selected="true" /><select idref="V-261317" selected="true" /><select idref="V-261318" selected="true" /><select idref="V-261319" selected="true" /><select idref="V-261320" selected="true" /><select idref="V-261321" selected="true" /><select idref="V-261322" selected="true" /><select idref="V-261323" selected="true" /><select idref="V-261324" selected="true" /><select idref="V-261325" selected="true" /><select idref="V-261326" selected="true" /><select idref="V-261327" selected="true" /><select idref="V-261328" selected="true" /><select idref="V-261329" selected="true" /><select idref="V-261330" selected="true" /><select idref="V-261331" selected="true" /><select idref="V-261332" selected="true" /><select idref="V-261333" selected="true" /><select idref="V-261334" selected="true" /><select idref="V-261335" selected="true" /><select idref="V-261336" selected="true" /><select idref="V-261337" selected="true" /><select idref="V-261338" selected="true" /><select idref="V-261339" selected="true" /><select idref="V-261340" selected="true" /><select idref="V-261341" selected="true" /><select idref="V-261342" selected="true" /><select idref="V-261343" selected="true" /><select idref="V-261344" selected="true" /><select idref="V-261345" selected="true" /><select idref="V-261346" selected="true" /><select idref="V-261347" selected="true" /><select idref="V-261348" selected="true" /><select idref="V-261349" selected="true" /><select idref="V-261350" selected="true" /><select idref="V-261351" selected="true" /><select idref="V-261352" selected="true" /><select idref="V-261353" selected="true" /><select idref="V-261354" selected="true" /><select idref="V-261355" selected="true" /><select idref="V-261356" selected="true" /><select idref="V-261357" selected="true" /><select idref="V-261358" selected="true" /><select idref="V-261359" selected="true" /><select idref="V-261360" selected="true" /><select idref="V-261361" selected="true" /><select idref="V-261362" selected="true" /><select idref="V-261363" selected="true" /><select idref="V-261364" selected="true" /><select idref="V-261365" selected="true" /><select idref="V-261367" selected="true" /><select idref="V-261368" selected="true" /><select idref="V-261369" selected="true" /><select idref="V-261370" selected="true" /><select idref="V-261371" selected="true" /><select idref="V-261372" selected="true" /><select idref="V-261373" selected="true" /><select idref="V-261374" selected="true" /><select idref="V-261375" selected="true" /><select idref="V-261376" selected="true" /><select idref="V-261377" selected="true" /><select idref="V-261378" selected="true" /><select idref="V-261379" selected="true" /><select idref="V-261380" selected="true" /><select idref="V-261381" selected="true" /><select idref="V-261382" selected="true" /><select idref="V-261383" selected="true" /><select idref="V-261384" selected="true" /><select idref="V-261385" selected="true" /><select idref="V-261386" selected="true" /><select idref="V-261387" selected="true" /><select idref="V-261388" selected="true" /><select idref="V-261389" selected="true" /><select idref="V-261390" selected="true" /><select idref="V-261391" selected="true" /><select idref="V-261392" selected="true" /><select idref="V-261393" selected="true" /><select idref="V-261394" selected="true" /><select idref="V-261395" selected="true" /><select idref="V-261396" selected="true" /><select idref="V-261397" selected="true" /><select idref="V-261398" selected="true" /><select idref="V-261399" selected="true" /><select idref="V-261400" selected="true" /><select idref="V-261401" selected="true" /><select idref="V-261402" selected="true" /><select idref="V-261403" selected="true" /><select idref="V-261404" selected="true" /><select idref="V-261405" selected="true" /><select idref="V-261406" selected="true" /><select idref="V-261407" selected="true" /><select idref="V-261408" selected="true" /><select idref="V-261409" selected="true" /><select idref="V-261410" selected="true" /><select idref="V-261411" selected="true" /><select idref="V-261412" selected="true" /><select idref="V-261413" selected="true" /><select idref="V-261414" selected="true" /><select idref="V-261415" selected="true" /><select idref="V-261416" selected="true" /><select idref="V-261417" selected="true" /><select idref="V-261418" selected="true" /><select idref="V-261419" selected="true" /><select idref="V-261420" selected="true" /><select idref="V-261421" selected="true" /><select idref="V-261422" selected="true" /><select idref="V-261423" selected="true" /><select idref="V-261424" selected="true" /><select idref="V-261425" selected="true" /><select idref="V-261426" selected="true" /><select idref="V-261427" selected="true" /><select idref="V-261428" selected="true" /><select idref="V-261429" selected="true" /><select idref="V-261430" selected="true" /><select idref="V-261431" selected="true" /><select idref="V-261432" selected="true" /><select idref="V-261433" selected="true" /><select idref="V-261434" selected="true" /><select idref="V-261435" selected="true" /><select idref="V-261436" selected="true" /><select idref="V-261437" selected="true" /><select idref="V-261438" selected="true" /><select idref="V-261439" selected="true" /><select idref="V-261440" selected="true" /><select idref="V-261441" selected="true" /><select idref="V-261442" selected="true" /><select idref="V-261443" selected="true" /><select idref="V-261444" selected="true" /><select idref="V-261445" selected="true" /><select idref="V-261446" selected="true" /><select idref="V-261447" selected="true" /><select idref="V-261448" selected="true" /><select idref="V-261449" selected="true" /><select idref="V-261450" selected="true" /><select idref="V-261451" selected="true" /><select idref="V-261452" selected="true" /><select idref="V-261453" selected="true" /><select idref="V-261454" selected="true" /><select idref="V-261455" selected="true" /><select idref="V-261456" selected="true" /><select idref="V-261457" selected="true" /><select idref="V-261458" selected="true" /><select idref="V-261459" selected="true" /><select idref="V-261460" selected="true" /><select idref="V-261461" selected="true" /><select idref="V-261462" selected="true" /><select idref="V-261463" selected="true" /><select idref="V-261464" selected="true" /><select idref="V-261465" selected="true" /><select idref="V-261466" selected="true" /><select idref="V-261467" selected="true" /><select idref="V-261468" selected="true" /><select idref="V-261469" selected="true" /><select idref="V-261470" selected="true" /><select idref="V-261471" selected="true" /><select idref="V-261472" selected="true" /><select idref="V-261473" selected="true" /></Profile><Profile id="MAC-2_Public"><title>II - Mission Support Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-261263" selected="true" /><select idref="V-261264" selected="true" /><select idref="V-261265" selected="true" /><select idref="V-261266" selected="true" /><select idref="V-261267" selected="true" /><select idref="V-261268" selected="true" /><select idref="V-261269" selected="true" /><select idref="V-261270" selected="true" /><select idref="V-261271" selected="true" /><select idref="V-261272" selected="true" /><select idref="V-261273" selected="true" /><select idref="V-261274" selected="true" /><select idref="V-261275" selected="true" /><select idref="V-261276" selected="true" /><select idref="V-261277" selected="true" /><select idref="V-261278" selected="true" /><select idref="V-261279" selected="true" /><select idref="V-261280" selected="true" /><select idref="V-261281" selected="true" /><select idref="V-261282" selected="true" /><select idref="V-261283" selected="true" /><select idref="V-261284" selected="true" /><select idref="V-261285" selected="true" /><select idref="V-261286" selected="true" /><select idref="V-261287" selected="true" /><select idref="V-261288" selected="true" /><select idref="V-261289" selected="true" /><select idref="V-261290" selected="true" /><select idref="V-261291" selected="true" /><select idref="V-261292" selected="true" /><select idref="V-261293" selected="true" /><select idref="V-261294" selected="true" /><select idref="V-261295" selected="true" /><select idref="V-261296" selected="true" /><select idref="V-261297" selected="true" /><select idref="V-261298" selected="true" /><select idref="V-261299" selected="true" /><select idref="V-261300" selected="true" /><select idref="V-261301" selected="true" /><select idref="V-261302" selected="true" /><select idref="V-261303" selected="true" /><select idref="V-261304" selected="true" /><select idref="V-261305" selected="true" /><select idref="V-261306" selected="true" /><select idref="V-261307" selected="true" /><select idref="V-261308" selected="true" /><select idref="V-261309" selected="true" /><select idref="V-261310" selected="true" /><select idref="V-261311" selected="true" /><select idref="V-261312" selected="true" /><select idref="V-261313" selected="true" /><select idref="V-261314" selected="true" /><select idref="V-261315" selected="true" /><select idref="V-261316" selected="true" /><select idref="V-261317" selected="true" /><select idref="V-261318" selected="true" /><select idref="V-261319" selected="true" /><select idref="V-261320" selected="true" /><select idref="V-261321" selected="true" /><select idref="V-261322" selected="true" /><select idref="V-261323" selected="true" /><select idref="V-261324" selected="true" /><select idref="V-261325" selected="true" /><select idref="V-261326" selected="true" /><select idref="V-261327" selected="true" /><select idref="V-261328" selected="true" /><select idref="V-261329" selected="true" /><select idref="V-261330" selected="true" /><select idref="V-261331" selected="true" /><select idref="V-261332" selected="true" /><select idref="V-261333" selected="true" /><select idref="V-261334" selected="true" /><select idref="V-261335" selected="true" /><select idref="V-261336" selected="true" /><select idref="V-261337" selected="true" /><select idref="V-261338" selected="true" /><select idref="V-261339" selected="true" /><select idref="V-261340" selected="true" /><select idref="V-261341" selected="true" /><select idref="V-261342" selected="true" /><select idref="V-261343" selected="true" /><select idref="V-261344" selected="true" /><select idref="V-261345" selected="true" /><select idref="V-261346" selected="true" /><select idref="V-261347" selected="true" /><select idref="V-261348" selected="true" /><select idref="V-261349" selected="true" /><select idref="V-261350" selected="true" /><select idref="V-261351" selected="true" /><select idref="V-261352" selected="true" /><select idref="V-261353" selected="true" /><select idref="V-261354" selected="true" /><select idref="V-261355" selected="true" /><select idref="V-261356" selected="true" /><select idref="V-261357" selected="true" /><select idref="V-261358" selected="true" /><select idref="V-261359" selected="true" /><select idref="V-261360" selected="true" /><select idref="V-261361" selected="true" /><select idref="V-261362" selected="true" /><select idref="V-261363" selected="true" /><select idref="V-261364" selected="true" /><select idref="V-261365" selected="true" /><select idref="V-261367" selected="true" /><select idref="V-261368" selected="true" /><select idref="V-261369" selected="true" /><select idref="V-261370" selected="true" /><select idref="V-261371" selected="true" /><select idref="V-261372" selected="true" /><select idref="V-261373" selected="true" /><select idref="V-261374" selected="true" /><select idref="V-261375" selected="true" /><select idref="V-261376" selected="true" /><select idref="V-261377" selected="true" /><select idref="V-261378" selected="true" /><select idref="V-261379" selected="true" /><select idref="V-261380" selected="true" /><select idref="V-261381" selected="true" /><select idref="V-261382" selected="true" /><select idref="V-261383" selected="true" /><select idref="V-261384" selected="true" /><select idref="V-261385" selected="true" /><select idref="V-261386" selected="true" /><select idref="V-261387" selected="true" /><select idref="V-261388" selected="true" /><select idref="V-261389" selected="true" /><select idref="V-261390" selected="true" /><select idref="V-261391" selected="true" /><select idref="V-261392" selected="true" /><select idref="V-261393" selected="true" /><select idref="V-261394" selected="true" /><select idref="V-261395" selected="true" /><select idref="V-261396" selected="true" /><select idref="V-261397" selected="true" /><select idref="V-261398" selected="true" /><select idref="V-261399" selected="true" /><select idref="V-261400" selected="true" /><select idref="V-261401" selected="true" /><select idref="V-261402" selected="true" /><select idref="V-261403" selected="true" /><select idref="V-261404" selected="true" /><select idref="V-261405" selected="true" /><select idref="V-261406" selected="true" /><select idref="V-261407" selected="true" /><select idref="V-261408" selected="true" /><select idref="V-261409" selected="true" /><select idref="V-261410" selected="true" /><select idref="V-261411" selected="true" /><select idref="V-261412" selected="true" /><select idref="V-261413" selected="true" /><select idref="V-261414" selected="true" /><select idref="V-261415" selected="true" /><select idref="V-261416" selected="true" /><select idref="V-261417" selected="true" /><select idref="V-261418" selected="true" /><select idref="V-261419" selected="true" /><select idref="V-261420" selected="true" /><select idref="V-261421" selected="true" /><select idref="V-261422" selected="true" /><select idref="V-261423" selected="true" /><select idref="V-261424" selected="true" /><select idref="V-261425" selected="true" /><select idref="V-261426" selected="true" /><select idref="V-261427" selected="true" /><select idref="V-261428" selected="true" /><select idref="V-261429" selected="true" /><select idref="V-261430" selected="true" /><select idref="V-261431" selected="true" /><select idref="V-261432" selected="true" /><select idref="V-261433" selected="true" /><select idref="V-261434" selected="true" /><select idref="V-261435" selected="true" /><select idref="V-261436" selected="true" /><select idref="V-261437" selected="true" /><select idref="V-261438" selected="true" /><select idref="V-261439" selected="true" /><select idref="V-261440" selected="true" /><select idref="V-261441" selected="true" /><select idref="V-261442" selected="true" /><select idref="V-261443" selected="true" /><select idref="V-261444" selected="true" /><select idref="V-261445" selected="true" /><select idref="V-261446" selected="true" /><select idref="V-261447" selected="true" /><select idref="V-261448" selected="true" /><select idref="V-261449" selected="true" /><select idref="V-261450" selected="true" /><select idref="V-261451" selected="true" /><select idref="V-261452" selected="true" /><select idref="V-261453" selected="true" /><select idref="V-261454" selected="true" /><select idref="V-261455" selected="true" /><select idref="V-261456" selected="true" /><select idref="V-261457" selected="true" /><select idref="V-261458" selected="true" /><select idref="V-261459" selected="true" /><select idref="V-261460" selected="true" /><select idref="V-261461" selected="true" /><select idref="V-261462" selected="true" /><select idref="V-261463" selected="true" /><select idref="V-261464" selected="true" /><select idref="V-261465" selected="true" /><select idref="V-261466" selected="true" /><select idref="V-261467" selected="true" /><select idref="V-261468" selected="true" /><select idref="V-261469" selected="true" /><select idref="V-261470" selected="true" /><select idref="V-261471" selected="true" /><select idref="V-261472" selected="true" /><select idref="V-261473" selected="true" /></Profile><Profile id="MAC-2_Sensitive"><title>II - Mission Support Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-261263" selected="true" /><select idref="V-261264" selected="true" /><select idref="V-261265" selected="true" /><select idref="V-261266" selected="true" /><select idref="V-261267" selected="true" /><select idref="V-261268" selected="true" /><select idref="V-261269" selected="true" /><select idref="V-261270" selected="true" /><select idref="V-261271" selected="true" /><select idref="V-261272" selected="true" /><select idref="V-261273" selected="true" /><select idref="V-261274" selected="true" /><select idref="V-261275" selected="true" /><select idref="V-261276" selected="true" /><select idref="V-261277" selected="true" /><select idref="V-261278" selected="true" /><select idref="V-261279" selected="true" /><select idref="V-261280" selected="true" /><select idref="V-261281" selected="true" /><select idref="V-261282" selected="true" /><select idref="V-261283" selected="true" /><select idref="V-261284" selected="true" /><select idref="V-261285" selected="true" /><select idref="V-261286" selected="true" /><select idref="V-261287" selected="true" /><select idref="V-261288" selected="true" /><select idref="V-261289" selected="true" /><select idref="V-261290" selected="true" /><select idref="V-261291" selected="true" /><select idref="V-261292" selected="true" /><select idref="V-261293" selected="true" /><select idref="V-261294" selected="true" /><select idref="V-261295" selected="true" /><select idref="V-261296" selected="true" /><select idref="V-261297" selected="true" /><select idref="V-261298" selected="true" /><select idref="V-261299" selected="true" /><select idref="V-261300" selected="true" /><select idref="V-261301" selected="true" /><select idref="V-261302" selected="true" /><select idref="V-261303" selected="true" /><select idref="V-261304" selected="true" /><select idref="V-261305" selected="true" /><select idref="V-261306" selected="true" /><select idref="V-261307" selected="true" /><select idref="V-261308" selected="true" /><select idref="V-261309" selected="true" /><select idref="V-261310" selected="true" /><select idref="V-261311" selected="true" /><select idref="V-261312" selected="true" /><select idref="V-261313" selected="true" /><select idref="V-261314" selected="true" /><select idref="V-261315" selected="true" /><select idref="V-261316" selected="true" /><select idref="V-261317" selected="true" /><select idref="V-261318" selected="true" /><select idref="V-261319" selected="true" /><select idref="V-261320" selected="true" /><select idref="V-261321" selected="true" /><select idref="V-261322" selected="true" /><select idref="V-261323" selected="true" /><select idref="V-261324" selected="true" /><select idref="V-261325" selected="true" /><select idref="V-261326" selected="true" /><select idref="V-261327" selected="true" /><select idref="V-261328" selected="true" /><select idref="V-261329" selected="true" /><select idref="V-261330" selected="true" /><select idref="V-261331" selected="true" /><select idref="V-261332" selected="true" /><select idref="V-261333" selected="true" /><select idref="V-261334" selected="true" /><select idref="V-261335" selected="true" /><select idref="V-261336" selected="true" /><select idref="V-261337" selected="true" /><select idref="V-261338" selected="true" /><select idref="V-261339" selected="true" /><select idref="V-261340" selected="true" /><select idref="V-261341" selected="true" /><select idref="V-261342" selected="true" /><select idref="V-261343" selected="true" /><select idref="V-261344" selected="true" /><select idref="V-261345" selected="true" /><select idref="V-261346" selected="true" /><select idref="V-261347" selected="true" /><select idref="V-261348" selected="true" /><select idref="V-261349" selected="true" /><select idref="V-261350" selected="true" /><select idref="V-261351" selected="true" /><select idref="V-261352" selected="true" /><select idref="V-261353" selected="true" /><select idref="V-261354" selected="true" /><select idref="V-261355" selected="true" /><select idref="V-261356" selected="true" /><select idref="V-261357" selected="true" /><select idref="V-261358" selected="true" /><select idref="V-261359" selected="true" /><select idref="V-261360" selected="true" /><select idref="V-261361" selected="true" /><select idref="V-261362" selected="true" /><select idref="V-261363" selected="true" /><select idref="V-261364" selected="true" /><select idref="V-261365" selected="true" /><select idref="V-261367" selected="true" /><select idref="V-261368" selected="true" /><select idref="V-261369" selected="true" /><select idref="V-261370" selected="true" /><select idref="V-261371" selected="true" /><select idref="V-261372" selected="true" /><select idref="V-261373" selected="true" /><select idref="V-261374" selected="true" /><select idref="V-261375" selected="true" /><select idref="V-261376" selected="true" /><select idref="V-261377" selected="true" /><select idref="V-261378" selected="true" /><select idref="V-261379" selected="true" /><select idref="V-261380" selected="true" /><select idref="V-261381" selected="true" /><select idref="V-261382" selected="true" /><select idref="V-261383" selected="true" /><select idref="V-261384" selected="true" /><select idref="V-261385" selected="true" /><select idref="V-261386" selected="true" /><select idref="V-261387" selected="true" /><select idref="V-261388" selected="true" /><select idref="V-261389" selected="true" /><select idref="V-261390" selected="true" /><select idref="V-261391" selected="true" /><select idref="V-261392" selected="true" /><select idref="V-261393" selected="true" /><select idref="V-261394" selected="true" /><select idref="V-261395" selected="true" /><select idref="V-261396" selected="true" /><select idref="V-261397" selected="true" /><select idref="V-261398" selected="true" /><select idref="V-261399" selected="true" /><select idref="V-261400" selected="true" /><select idref="V-261401" selected="true" /><select idref="V-261402" selected="true" /><select idref="V-261403" selected="true" /><select idref="V-261404" selected="true" /><select idref="V-261405" selected="true" /><select idref="V-261406" selected="true" /><select idref="V-261407" selected="true" /><select idref="V-261408" selected="true" /><select idref="V-261409" selected="true" /><select idref="V-261410" selected="true" /><select idref="V-261411" selected="true" /><select idref="V-261412" selected="true" /><select idref="V-261413" selected="true" /><select idref="V-261414" selected="true" /><select idref="V-261415" selected="true" /><select idref="V-261416" selected="true" /><select idref="V-261417" selected="true" /><select idref="V-261418" selected="true" /><select idref="V-261419" selected="true" /><select idref="V-261420" selected="true" /><select idref="V-261421" selected="true" /><select idref="V-261422" selected="true" /><select idref="V-261423" selected="true" /><select idref="V-261424" selected="true" /><select idref="V-261425" selected="true" /><select idref="V-261426" selected="true" /><select idref="V-261427" selected="true" /><select idref="V-261428" selected="true" /><select idref="V-261429" selected="true" /><select idref="V-261430" selected="true" /><select idref="V-261431" selected="true" /><select idref="V-261432" selected="true" /><select idref="V-261433" selected="true" /><select idref="V-261434" selected="true" /><select idref="V-261435" selected="true" /><select idref="V-261436" selected="true" /><select idref="V-261437" selected="true" /><select idref="V-261438" selected="true" /><select idref="V-261439" selected="true" /><select idref="V-261440" selected="true" /><select idref="V-261441" selected="true" /><select idref="V-261442" selected="true" /><select idref="V-261443" selected="true" /><select idref="V-261444" selected="true" /><select idref="V-261445" selected="true" /><select idref="V-261446" selected="true" /><select idref="V-261447" selected="true" /><select idref="V-261448" selected="true" /><select idref="V-261449" selected="true" /><select idref="V-261450" selected="true" /><select idref="V-261451" selected="true" /><select idref="V-261452" selected="true" /><select idref="V-261453" selected="true" /><select idref="V-261454" selected="true" /><select idref="V-261455" selected="true" /><select idref="V-261456" selected="true" /><select idref="V-261457" selected="true" /><select idref="V-261458" selected="true" /><select idref="V-261459" selected="true" /><select idref="V-261460" selected="true" /><select idref="V-261461" selected="true" /><select idref="V-261462" selected="true" /><select idref="V-261463" selected="true" /><select idref="V-261464" selected="true" /><select idref="V-261465" selected="true" /><select idref="V-261466" selected="true" /><select idref="V-261467" selected="true" /><select idref="V-261468" selected="true" /><select idref="V-261469" selected="true" /><select idref="V-261470" selected="true" /><select idref="V-261471" selected="true" /><select idref="V-261472" selected="true" /><select idref="V-261473" selected="true" /></Profile><Profile id="MAC-3_Classified"><title>III - Administrative Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-261263" selected="true" /><select idref="V-261264" selected="true" /><select idref="V-261265" selected="true" /><select idref="V-261266" selected="true" /><select idref="V-261267" selected="true" /><select idref="V-261268" selected="true" /><select idref="V-261269" selected="true" /><select idref="V-261270" selected="true" /><select idref="V-261271" selected="true" /><select idref="V-261272" selected="true" /><select idref="V-261273" selected="true" /><select idref="V-261274" selected="true" /><select idref="V-261275" selected="true" /><select idref="V-261276" selected="true" /><select idref="V-261277" selected="true" /><select idref="V-261278" selected="true" /><select idref="V-261279" selected="true" /><select idref="V-261280" selected="true" /><select idref="V-261281" selected="true" /><select idref="V-261282" selected="true" /><select idref="V-261283" selected="true" /><select idref="V-261284" selected="true" /><select idref="V-261285" selected="true" /><select idref="V-261286" selected="true" /><select idref="V-261287" selected="true" /><select idref="V-261288" selected="true" /><select idref="V-261289" selected="true" /><select idref="V-261290" selected="true" /><select idref="V-261291" selected="true" /><select idref="V-261292" selected="true" /><select idref="V-261293" selected="true" /><select idref="V-261294" selected="true" /><select idref="V-261295" selected="true" /><select idref="V-261296" selected="true" /><select idref="V-261297" selected="true" /><select idref="V-261298" selected="true" /><select idref="V-261299" selected="true" /><select idref="V-261300" selected="true" /><select idref="V-261301" selected="true" /><select idref="V-261302" selected="true" /><select idref="V-261303" selected="true" /><select idref="V-261304" selected="true" /><select idref="V-261305" selected="true" /><select idref="V-261306" selected="true" /><select idref="V-261307" selected="true" /><select idref="V-261308" selected="true" /><select idref="V-261309" selected="true" /><select idref="V-261310" selected="true" /><select idref="V-261311" selected="true" /><select idref="V-261312" selected="true" /><select idref="V-261313" selected="true" /><select idref="V-261314" selected="true" /><select idref="V-261315" selected="true" /><select idref="V-261316" selected="true" /><select idref="V-261317" selected="true" /><select idref="V-261318" selected="true" /><select idref="V-261319" selected="true" /><select idref="V-261320" selected="true" /><select idref="V-261321" selected="true" /><select idref="V-261322" selected="true" /><select idref="V-261323" selected="true" /><select idref="V-261324" selected="true" /><select idref="V-261325" selected="true" /><select idref="V-261326" selected="true" /><select idref="V-261327" selected="true" /><select idref="V-261328" selected="true" /><select idref="V-261329" selected="true" /><select idref="V-261330" selected="true" /><select idref="V-261331" selected="true" /><select idref="V-261332" selected="true" /><select idref="V-261333" selected="true" /><select idref="V-261334" selected="true" /><select idref="V-261335" selected="true" /><select idref="V-261336" selected="true" /><select idref="V-261337" selected="true" /><select idref="V-261338" selected="true" /><select idref="V-261339" selected="true" /><select idref="V-261340" selected="true" /><select idref="V-261341" selected="true" /><select idref="V-261342" selected="true" /><select idref="V-261343" selected="true" /><select idref="V-261344" selected="true" /><select idref="V-261345" selected="true" /><select idref="V-261346" selected="true" /><select idref="V-261347" selected="true" /><select idref="V-261348" selected="true" /><select idref="V-261349" selected="true" /><select idref="V-261350" selected="true" /><select idref="V-261351" selected="true" /><select idref="V-261352" selected="true" /><select idref="V-261353" selected="true" /><select idref="V-261354" selected="true" /><select idref="V-261355" selected="true" /><select idref="V-261356" selected="true" /><select idref="V-261357" selected="true" /><select idref="V-261358" selected="true" /><select idref="V-261359" selected="true" /><select idref="V-261360" selected="true" /><select idref="V-261361" selected="true" /><select idref="V-261362" selected="true" /><select idref="V-261363" selected="true" /><select idref="V-261364" selected="true" /><select idref="V-261365" selected="true" /><select idref="V-261367" selected="true" /><select idref="V-261368" selected="true" /><select idref="V-261369" selected="true" /><select idref="V-261370" selected="true" /><select idref="V-261371" selected="true" /><select idref="V-261372" selected="true" /><select idref="V-261373" selected="true" /><select idref="V-261374" selected="true" /><select idref="V-261375" selected="true" /><select idref="V-261376" selected="true" /><select idref="V-261377" selected="true" /><select idref="V-261378" selected="true" /><select idref="V-261379" selected="true" /><select idref="V-261380" selected="true" /><select idref="V-261381" selected="true" /><select idref="V-261382" selected="true" /><select idref="V-261383" selected="true" /><select idref="V-261384" selected="true" /><select idref="V-261385" selected="true" /><select idref="V-261386" selected="true" /><select idref="V-261387" selected="true" /><select idref="V-261388" selected="true" /><select idref="V-261389" selected="true" /><select idref="V-261390" selected="true" /><select idref="V-261391" selected="true" /><select idref="V-261392" selected="true" /><select idref="V-261393" selected="true" /><select idref="V-261394" selected="true" /><select idref="V-261395" selected="true" /><select idref="V-261396" selected="true" /><select idref="V-261397" selected="true" /><select idref="V-261398" selected="true" /><select idref="V-261399" selected="true" /><select idref="V-261400" selected="true" /><select idref="V-261401" selected="true" /><select idref="V-261402" selected="true" /><select idref="V-261403" selected="true" /><select idref="V-261404" selected="true" /><select idref="V-261405" selected="true" /><select idref="V-261406" selected="true" /><select idref="V-261407" selected="true" /><select idref="V-261408" selected="true" /><select idref="V-261409" selected="true" /><select idref="V-261410" selected="true" /><select idref="V-261411" selected="true" /><select idref="V-261412" selected="true" /><select idref="V-261413" selected="true" /><select idref="V-261414" selected="true" /><select idref="V-261415" selected="true" /><select idref="V-261416" selected="true" /><select idref="V-261417" selected="true" /><select idref="V-261418" selected="true" /><select idref="V-261419" selected="true" /><select idref="V-261420" selected="true" /><select idref="V-261421" selected="true" /><select idref="V-261422" selected="true" /><select idref="V-261423" selected="true" /><select idref="V-261424" selected="true" /><select idref="V-261425" selected="true" /><select idref="V-261426" selected="true" /><select idref="V-261427" selected="true" /><select idref="V-261428" selected="true" /><select idref="V-261429" selected="true" /><select idref="V-261430" selected="true" /><select idref="V-261431" selected="true" /><select idref="V-261432" selected="true" /><select idref="V-261433" selected="true" /><select idref="V-261434" selected="true" /><select idref="V-261435" selected="true" /><select idref="V-261436" selected="true" /><select idref="V-261437" selected="true" /><select idref="V-261438" selected="true" /><select idref="V-261439" selected="true" /><select idref="V-261440" selected="true" /><select idref="V-261441" selected="true" /><select idref="V-261442" selected="true" /><select idref="V-261443" selected="true" /><select idref="V-261444" selected="true" /><select idref="V-261445" selected="true" /><select idref="V-261446" selected="true" /><select idref="V-261447" selected="true" /><select idref="V-261448" selected="true" /><select idref="V-261449" selected="true" /><select idref="V-261450" selected="true" /><select idref="V-261451" selected="true" /><select idref="V-261452" selected="true" /><select idref="V-261453" selected="true" /><select idref="V-261454" selected="true" /><select idref="V-261455" selected="true" /><select idref="V-261456" selected="true" /><select idref="V-261457" selected="true" /><select idref="V-261458" selected="true" /><select idref="V-261459" selected="true" /><select idref="V-261460" selected="true" /><select idref="V-261461" selected="true" /><select idref="V-261462" selected="true" /><select idref="V-261463" selected="true" /><select idref="V-261464" selected="true" /><select idref="V-261465" selected="true" /><select idref="V-261466" selected="true" /><select idref="V-261467" selected="true" /><select idref="V-261468" selected="true" /><select idref="V-261469" selected="true" /><select idref="V-261470" selected="true" /><select idref="V-261471" selected="true" /><select idref="V-261472" selected="true" /><select idref="V-261473" selected="true" /></Profile><Profile id="MAC-3_Public"><title>III - Administrative Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-261263" selected="true" /><select idref="V-261264" selected="true" /><select idref="V-261265" selected="true" /><select idref="V-261266" selected="true" /><select idref="V-261267" selected="true" /><select idref="V-261268" selected="true" /><select idref="V-261269" selected="true" /><select idref="V-261270" selected="true" /><select idref="V-261271" selected="true" /><select idref="V-261272" selected="true" /><select idref="V-261273" selected="true" /><select idref="V-261274" selected="true" /><select idref="V-261275" selected="true" /><select idref="V-261276" selected="true" /><select idref="V-261277" selected="true" /><select idref="V-261278" selected="true" /><select idref="V-261279" selected="true" /><select idref="V-261280" selected="true" /><select idref="V-261281" selected="true" /><select idref="V-261282" selected="true" /><select idref="V-261283" selected="true" /><select idref="V-261284" selected="true" /><select idref="V-261285" selected="true" /><select idref="V-261286" selected="true" /><select idref="V-261287" selected="true" /><select idref="V-261288" selected="true" /><select idref="V-261289" selected="true" /><select idref="V-261290" selected="true" /><select idref="V-261291" selected="true" /><select idref="V-261292" selected="true" /><select idref="V-261293" selected="true" /><select idref="V-261294" selected="true" /><select idref="V-261295" selected="true" /><select idref="V-261296" selected="true" /><select idref="V-261297" selected="true" /><select idref="V-261298" selected="true" /><select idref="V-261299" selected="true" /><select idref="V-261300" selected="true" /><select idref="V-261301" selected="true" /><select idref="V-261302" selected="true" /><select idref="V-261303" selected="true" /><select idref="V-261304" selected="true" /><select idref="V-261305" selected="true" /><select idref="V-261306" selected="true" /><select idref="V-261307" selected="true" /><select idref="V-261308" selected="true" /><select idref="V-261309" selected="true" /><select idref="V-261310" selected="true" /><select idref="V-261311" selected="true" /><select idref="V-261312" selected="true" /><select idref="V-261313" selected="true" /><select idref="V-261314" selected="true" /><select idref="V-261315" selected="true" /><select idref="V-261316" selected="true" /><select idref="V-261317" selected="true" /><select idref="V-261318" selected="true" /><select idref="V-261319" selected="true" /><select idref="V-261320" selected="true" /><select idref="V-261321" selected="true" /><select idref="V-261322" selected="true" /><select idref="V-261323" selected="true" /><select idref="V-261324" selected="true" /><select idref="V-261325" selected="true" /><select idref="V-261326" selected="true" /><select idref="V-261327" selected="true" /><select idref="V-261328" selected="true" /><select idref="V-261329" selected="true" /><select idref="V-261330" selected="true" /><select idref="V-261331" selected="true" /><select idref="V-261332" selected="true" /><select idref="V-261333" selected="true" /><select idref="V-261334" selected="true" /><select idref="V-261335" selected="true" /><select idref="V-261336" selected="true" /><select idref="V-261337" selected="true" /><select idref="V-261338" selected="true" /><select idref="V-261339" selected="true" /><select idref="V-261340" selected="true" /><select idref="V-261341" selected="true" /><select idref="V-261342" selected="true" /><select idref="V-261343" selected="true" /><select idref="V-261344" selected="true" /><select idref="V-261345" selected="true" /><select idref="V-261346" selected="true" /><select idref="V-261347" selected="true" /><select idref="V-261348" selected="true" /><select idref="V-261349" selected="true" /><select idref="V-261350" selected="true" /><select idref="V-261351" selected="true" /><select idref="V-261352" selected="true" /><select idref="V-261353" selected="true" /><select idref="V-261354" selected="true" /><select idref="V-261355" selected="true" /><select idref="V-261356" selected="true" /><select idref="V-261357" selected="true" /><select idref="V-261358" selected="true" /><select idref="V-261359" selected="true" /><select idref="V-261360" selected="true" /><select idref="V-261361" selected="true" /><select idref="V-261362" selected="true" /><select idref="V-261363" selected="true" /><select idref="V-261364" selected="true" /><select idref="V-261365" selected="true" /><select idref="V-261367" selected="true" /><select idref="V-261368" selected="true" /><select idref="V-261369" selected="true" /><select idref="V-261370" selected="true" /><select idref="V-261371" selected="true" /><select idref="V-261372" selected="true" /><select idref="V-261373" selected="true" /><select idref="V-261374" selected="true" /><select idref="V-261375" selected="true" /><select idref="V-261376" selected="true" /><select idref="V-261377" selected="true" /><select idref="V-261378" selected="true" /><select idref="V-261379" selected="true" /><select idref="V-261380" selected="true" /><select idref="V-261381" selected="true" /><select idref="V-261382" selected="true" /><select idref="V-261383" selected="true" /><select idref="V-261384" selected="true" /><select idref="V-261385" selected="true" /><select idref="V-261386" selected="true" /><select idref="V-261387" selected="true" /><select idref="V-261388" selected="true" /><select idref="V-261389" selected="true" /><select idref="V-261390" selected="true" /><select idref="V-261391" selected="true" /><select idref="V-261392" selected="true" /><select idref="V-261393" selected="true" /><select idref="V-261394" selected="true" /><select idref="V-261395" selected="true" /><select idref="V-261396" selected="true" /><select idref="V-261397" selected="true" /><select idref="V-261398" selected="true" /><select idref="V-261399" selected="true" /><select idref="V-261400" selected="true" /><select idref="V-261401" selected="true" /><select idref="V-261402" selected="true" /><select idref="V-261403" selected="true" /><select idref="V-261404" selected="true" /><select idref="V-261405" selected="true" /><select idref="V-261406" selected="true" /><select idref="V-261407" selected="true" /><select idref="V-261408" selected="true" /><select idref="V-261409" selected="true" /><select idref="V-261410" selected="true" /><select idref="V-261411" selected="true" /><select idref="V-261412" selected="true" /><select idref="V-261413" selected="true" /><select idref="V-261414" selected="true" /><select idref="V-261415" selected="true" /><select idref="V-261416" selected="true" /><select idref="V-261417" selected="true" /><select idref="V-261418" selected="true" /><select idref="V-261419" selected="true" /><select idref="V-261420" selected="true" /><select idref="V-261421" selected="true" /><select idref="V-261422" selected="true" /><select idref="V-261423" selected="true" /><select idref="V-261424" selected="true" /><select idref="V-261425" selected="true" /><select idref="V-261426" selected="true" /><select idref="V-261427" selected="true" /><select idref="V-261428" selected="true" /><select idref="V-261429" selected="true" /><select idref="V-261430" selected="true" /><select idref="V-261431" selected="true" /><select idref="V-261432" selected="true" /><select idref="V-261433" selected="true" /><select idref="V-261434" selected="true" /><select idref="V-261435" selected="true" /><select idref="V-261436" selected="true" /><select idref="V-261437" selected="true" /><select idref="V-261438" selected="true" /><select idref="V-261439" selected="true" /><select idref="V-261440" selected="true" /><select idref="V-261441" selected="true" /><select idref="V-261442" selected="true" /><select idref="V-261443" selected="true" /><select idref="V-261444" selected="true" /><select idref="V-261445" selected="true" /><select idref="V-261446" selected="true" /><select idref="V-261447" selected="true" /><select idref="V-261448" selected="true" /><select idref="V-261449" selected="true" /><select idref="V-261450" selected="true" /><select idref="V-261451" selected="true" /><select idref="V-261452" selected="true" /><select idref="V-261453" selected="true" /><select idref="V-261454" selected="true" /><select idref="V-261455" selected="true" /><select idref="V-261456" selected="true" /><select idref="V-261457" selected="true" /><select idref="V-261458" selected="true" /><select idref="V-261459" selected="true" /><select idref="V-261460" selected="true" /><select idref="V-261461" selected="true" /><select idref="V-261462" selected="true" /><select idref="V-261463" selected="true" /><select idref="V-261464" selected="true" /><select idref="V-261465" selected="true" /><select idref="V-261466" selected="true" /><select idref="V-261467" selected="true" /><select idref="V-261468" selected="true" /><select idref="V-261469" selected="true" /><select idref="V-261470" selected="true" /><select idref="V-261471" selected="true" /><select idref="V-261472" selected="true" /><select idref="V-261473" selected="true" /></Profile><Profile id="MAC-3_Sensitive"><title>III - Administrative Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-261263" selected="true" /><select idref="V-261264" selected="true" /><select idref="V-261265" selected="true" /><select idref="V-261266" selected="true" /><select idref="V-261267" selected="true" /><select idref="V-261268" selected="true" /><select idref="V-261269" selected="true" /><select idref="V-261270" selected="true" /><select idref="V-261271" selected="true" /><select idref="V-261272" selected="true" /><select idref="V-261273" selected="true" /><select idref="V-261274" selected="true" /><select idref="V-261275" selected="true" /><select idref="V-261276" selected="true" /><select idref="V-261277" selected="true" /><select idref="V-261278" selected="true" /><select idref="V-261279" selected="true" /><select idref="V-261280" selected="true" /><select idref="V-261281" selected="true" /><select idref="V-261282" selected="true" /><select idref="V-261283" selected="true" /><select idref="V-261284" selected="true" /><select idref="V-261285" selected="true" /><select idref="V-261286" selected="true" /><select idref="V-261287" selected="true" /><select idref="V-261288" selected="true" /><select idref="V-261289" selected="true" /><select idref="V-261290" selected="true" /><select idref="V-261291" selected="true" /><select idref="V-261292" selected="true" /><select idref="V-261293" selected="true" /><select idref="V-261294" selected="true" /><select idref="V-261295" selected="true" /><select idref="V-261296" selected="true" /><select idref="V-261297" selected="true" /><select idref="V-261298" selected="true" /><select idref="V-261299" selected="true" /><select idref="V-261300" selected="true" /><select idref="V-261301" selected="true" /><select idref="V-261302" selected="true" /><select idref="V-261303" selected="true" /><select idref="V-261304" selected="true" /><select idref="V-261305" selected="true" /><select idref="V-261306" selected="true" /><select idref="V-261307" selected="true" /><select idref="V-261308" selected="true" /><select idref="V-261309" selected="true" /><select idref="V-261310" selected="true" /><select idref="V-261311" selected="true" /><select idref="V-261312" selected="true" /><select idref="V-261313" selected="true" /><select idref="V-261314" selected="true" /><select idref="V-261315" selected="true" /><select idref="V-261316" selected="true" /><select idref="V-261317" selected="true" /><select idref="V-261318" selected="true" /><select idref="V-261319" selected="true" /><select idref="V-261320" selected="true" /><select idref="V-261321" selected="true" /><select idref="V-261322" selected="true" /><select idref="V-261323" selected="true" /><select idref="V-261324" selected="true" /><select idref="V-261325" selected="true" /><select idref="V-261326" selected="true" /><select idref="V-261327" selected="true" /><select idref="V-261328" selected="true" /><select idref="V-261329" selected="true" /><select idref="V-261330" selected="true" /><select idref="V-261331" selected="true" /><select idref="V-261332" selected="true" /><select idref="V-261333" selected="true" /><select idref="V-261334" selected="true" /><select idref="V-261335" selected="true" /><select idref="V-261336" selected="true" /><select idref="V-261337" selected="true" /><select idref="V-261338" selected="true" /><select idref="V-261339" selected="true" /><select idref="V-261340" selected="true" /><select idref="V-261341" selected="true" /><select idref="V-261342" selected="true" /><select idref="V-261343" selected="true" /><select idref="V-261344" selected="true" /><select idref="V-261345" selected="true" /><select idref="V-261346" selected="true" /><select idref="V-261347" selected="true" /><select idref="V-261348" selected="true" /><select idref="V-261349" selected="true" /><select idref="V-261350" selected="true" /><select idref="V-261351" selected="true" /><select idref="V-261352" selected="true" /><select idref="V-261353" selected="true" /><select idref="V-261354" selected="true" /><select idref="V-261355" selected="true" /><select idref="V-261356" selected="true" /><select idref="V-261357" selected="true" /><select idref="V-261358" selected="true" /><select idref="V-261359" selected="true" /><select idref="V-261360" selected="true" /><select idref="V-261361" selected="true" /><select idref="V-261362" selected="true" /><select idref="V-261363" selected="true" /><select idref="V-261364" selected="true" /><select idref="V-261365" selected="true" /><select idref="V-261367" selected="true" /><select idref="V-261368" selected="true" /><select idref="V-261369" selected="true" /><select idref="V-261370" selected="true" /><select idref="V-261371" selected="true" /><select idref="V-261372" selected="true" /><select idref="V-261373" selected="true" /><select idref="V-261374" selected="true" /><select idref="V-261375" selected="true" /><select idref="V-261376" selected="true" /><select idref="V-261377" selected="true" /><select idref="V-261378" selected="true" /><select idref="V-261379" selected="true" /><select idref="V-261380" selected="true" /><select idref="V-261381" selected="true" /><select idref="V-261382" selected="true" /><select idref="V-261383" selected="true" /><select idref="V-261384" selected="true" /><select idref="V-261385" selected="true" /><select idref="V-261386" selected="true" /><select idref="V-261387" selected="true" /><select idref="V-261388" selected="true" /><select idref="V-261389" selected="true" /><select idref="V-261390" selected="true" /><select idref="V-261391" selected="true" /><select idref="V-261392" selected="true" /><select idref="V-261393" selected="true" /><select idref="V-261394" selected="true" /><select idref="V-261395" selected="true" /><select idref="V-261396" selected="true" /><select idref="V-261397" selected="true" /><select idref="V-261398" selected="true" /><select idref="V-261399" selected="true" /><select idref="V-261400" selected="true" /><select idref="V-261401" selected="true" /><select idref="V-261402" selected="true" /><select idref="V-261403" selected="true" /><select idref="V-261404" selected="true" /><select idref="V-261405" selected="true" /><select idref="V-261406" selected="true" /><select idref="V-261407" selected="true" /><select idref="V-261408" selected="true" /><select idref="V-261409" selected="true" /><select idref="V-261410" selected="true" /><select idref="V-261411" selected="true" /><select idref="V-261412" selected="true" /><select idref="V-261413" selected="true" /><select idref="V-261414" selected="true" /><select idref="V-261415" selected="true" /><select idref="V-261416" selected="true" /><select idref="V-261417" selected="true" /><select idref="V-261418" selected="true" /><select idref="V-261419" selected="true" /><select idref="V-261420" selected="true" /><select idref="V-261421" selected="true" /><select idref="V-261422" selected="true" /><select idref="V-261423" selected="true" /><select idref="V-261424" selected="true" /><select idref="V-261425" selected="true" /><select idref="V-261426" selected="true" /><select idref="V-261427" selected="true" /><select idref="V-261428" selected="true" /><select idref="V-261429" selected="true" /><select idref="V-261430" selected="true" /><select idref="V-261431" selected="true" /><select idref="V-261432" selected="true" /><select idref="V-261433" selected="true" /><select idref="V-261434" selected="true" /><select idref="V-261435" selected="true" /><select idref="V-261436" selected="true" /><select idref="V-261437" selected="true" /><select idref="V-261438" selected="true" /><select idref="V-261439" selected="true" /><select idref="V-261440" selected="true" /><select idref="V-261441" selected="true" /><select idref="V-261442" selected="true" /><select idref="V-261443" selected="true" /><select idref="V-261444" selected="true" /><select idref="V-261445" selected="true" /><select idref="V-261446" selected="true" /><select idref="V-261447" selected="true" /><select idref="V-261448" selected="true" /><select idref="V-261449" selected="true" /><select idref="V-261450" selected="true" /><select idref="V-261451" selected="true" /><select idref="V-261452" selected="true" /><select idref="V-261453" selected="true" /><select idref="V-261454" selected="true" /><select idref="V-261455" selected="true" /><select idref="V-261456" selected="true" /><select idref="V-261457" selected="true" /><select idref="V-261458" selected="true" /><select idref="V-261459" selected="true" /><select idref="V-261460" selected="true" /><select idref="V-261461" selected="true" /><select idref="V-261462" selected="true" /><select idref="V-261463" selected="true" /><select idref="V-261464" selected="true" /><select idref="V-261465" selected="true" /><select idref="V-261466" selected="true" /><select idref="V-261467" selected="true" /><select idref="V-261468" selected="true" /><select idref="V-261469" selected="true" /><select idref="V-261470" selected="true" /><select idref="V-261471" selected="true" /><select idref="V-261472" selected="true" /><select idref="V-261473" selected="true" /></Profile><Group id="V-261263"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-261263r996826_rule" weight="10.0" severity="high"><version>SLEM-05-211010</version><title>SLEM 5 must be a vendor-supported release.</title><description>&lt;VulnDiscussion&gt;A SLEM 5 release is considered supported if the vendor continues to provide security patches for the product. With an unsupported release, it will not be possible to resolve security issues discovered in the system software.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Micro (SLEM) 5</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Micro (SLEM) 5</dc:subject><dc:identifier>5596</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-64900r996825_fix">Upgrade SLEM 5 to a version supported by the vendor. If the system is not registered with the SUSE Customer Center, register the system against the correct subscription.
+<?xml version="1.0" encoding="utf-8"?><?xml-stylesheet type='text/xsl' href='STIG_unclass.xsl'?><Benchmark xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.1 http://nvd.nist.gov/schema/xccdf-1.1.4.xsd http://cpe.mitre.org/dictionary/2.0 http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd" id="SLEM_5_STIG" xml:lang="en" xmlns="http://checklists.nist.gov/xccdf/1.1"><status date="2025-11-20">accepted</status><title>SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide</title><description>This Security Technical Implementation Guide is published as a tool to improve the security of Department of Defense (DOD) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.</description><notice id="terms-of-use" xml:lang="en"></notice><front-matter xml:lang="en"></front-matter><rear-matter xml:lang="en"></rear-matter><reference href="https://cyber.mil"><dc:publisher>DISA</dc:publisher><dc:source>STIG.DOD.MIL</dc:source></reference><plain-text id="release-info">Release: 3 Benchmark Date: 05 Jan 2026</plain-text><plain-text id="generator">3.5.2</plain-text><plain-text id="conventionsVersion">1.10.0</plain-text><version>1</version><Profile id="MAC-1_Classified"><title>I - Mission Critical Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-261263" selected="true" /><select idref="V-261264" selected="true" /><select idref="V-261265" selected="true" /><select idref="V-261266" selected="true" /><select idref="V-261267" selected="true" /><select idref="V-261268" selected="true" /><select idref="V-261269" selected="true" /><select idref="V-261270" selected="true" /><select idref="V-261271" selected="true" /><select idref="V-261272" selected="true" /><select idref="V-261273" selected="true" /><select idref="V-261274" selected="true" /><select idref="V-261275" selected="true" /><select idref="V-261276" selected="true" /><select idref="V-261277" selected="true" /><select idref="V-261278" selected="true" /><select idref="V-261279" selected="true" /><select idref="V-261280" selected="true" /><select idref="V-261281" selected="true" /><select idref="V-261282" selected="true" /><select idref="V-261283" selected="true" /><select idref="V-261284" selected="true" /><select idref="V-261285" selected="true" /><select idref="V-261286" selected="true" /><select idref="V-261287" selected="true" /><select idref="V-261288" selected="true" /><select idref="V-261289" selected="true" /><select idref="V-261290" selected="true" /><select idref="V-261291" selected="true" /><select idref="V-261292" selected="true" /><select idref="V-261293" selected="true" /><select idref="V-261294" selected="true" /><select idref="V-261295" selected="true" /><select idref="V-261296" selected="true" /><select idref="V-261297" selected="true" /><select idref="V-261298" selected="true" /><select idref="V-261299" selected="true" /><select idref="V-261300" selected="true" /><select idref="V-261301" selected="true" /><select idref="V-261302" selected="true" /><select idref="V-261303" selected="true" /><select idref="V-261304" selected="true" /><select idref="V-261305" selected="true" /><select idref="V-261306" selected="true" /><select idref="V-261307" selected="true" /><select idref="V-261308" selected="true" /><select idref="V-261309" selected="true" /><select idref="V-261310" selected="true" /><select idref="V-261311" selected="true" /><select idref="V-261312" selected="true" /><select idref="V-261313" selected="true" /><select idref="V-261314" selected="true" /><select idref="V-261315" selected="true" /><select idref="V-261316" selected="true" /><select idref="V-261317" selected="true" /><select idref="V-261318" selected="true" /><select idref="V-261319" selected="true" /><select idref="V-261320" selected="true" /><select idref="V-261321" selected="true" /><select idref="V-261322" selected="true" /><select idref="V-261323" selected="true" /><select idref="V-261324" selected="true" /><select idref="V-261325" selected="true" /><select idref="V-261326" selected="true" /><select idref="V-261327" selected="true" /><select idref="V-261328" selected="true" /><select idref="V-261329" selected="true" /><select idref="V-261330" selected="true" /><select idref="V-261331" selected="true" /><select idref="V-261332" selected="true" /><select idref="V-261333" selected="true" /><select idref="V-261334" selected="true" /><select idref="V-261335" selected="true" /><select idref="V-261336" selected="true" /><select idref="V-261337" selected="true" /><select idref="V-261338" selected="true" /><select idref="V-261339" selected="true" /><select idref="V-261340" selected="true" /><select idref="V-261341" selected="true" /><select idref="V-261342" selected="true" /><select idref="V-261343" selected="true" /><select idref="V-261344" selected="true" /><select idref="V-261345" selected="true" /><select idref="V-261346" selected="true" /><select idref="V-261347" selected="true" /><select idref="V-261348" selected="true" /><select idref="V-261349" selected="true" /><select idref="V-261350" selected="true" /><select idref="V-261351" selected="true" /><select idref="V-261352" selected="true" /><select idref="V-261353" selected="true" /><select idref="V-261354" selected="true" /><select idref="V-261355" selected="true" /><select idref="V-261356" selected="true" /><select idref="V-261357" selected="true" /><select idref="V-261358" selected="true" /><select idref="V-261359" selected="true" /><select idref="V-261360" selected="true" /><select idref="V-261361" selected="true" /><select idref="V-261363" selected="true" /><select idref="V-261364" selected="true" /><select idref="V-261365" selected="true" /><select idref="V-261367" selected="true" /><select idref="V-261368" selected="true" /><select idref="V-261369" selected="true" /><select idref="V-261370" selected="true" /><select idref="V-261371" selected="true" /><select idref="V-261372" selected="true" /><select idref="V-261373" selected="true" /><select idref="V-261374" selected="true" /><select idref="V-261375" selected="true" /><select idref="V-261376" selected="true" /><select idref="V-261377" selected="true" /><select idref="V-261378" selected="true" /><select idref="V-261379" selected="true" /><select idref="V-261380" selected="true" /><select idref="V-261381" selected="true" /><select idref="V-261382" selected="true" /><select idref="V-261383" selected="true" /><select idref="V-261384" selected="true" /><select idref="V-261385" selected="true" /><select idref="V-261386" selected="true" /><select idref="V-261387" selected="true" /><select idref="V-261388" selected="true" /><select idref="V-261389" selected="true" /><select idref="V-261390" selected="true" /><select idref="V-261391" selected="true" /><select idref="V-261392" selected="true" /><select idref="V-261393" selected="true" /><select idref="V-261394" selected="true" /><select idref="V-261395" selected="true" /><select idref="V-261396" selected="true" /><select idref="V-261397" selected="true" /><select idref="V-261398" selected="true" /><select idref="V-261399" selected="true" /><select idref="V-261400" selected="true" /><select idref="V-261401" selected="true" /><select idref="V-261402" selected="true" /><select idref="V-261403" selected="true" /><select idref="V-261404" selected="true" /><select idref="V-261405" selected="true" /><select idref="V-261406" selected="true" /><select idref="V-261407" selected="true" /><select idref="V-261408" selected="true" /><select idref="V-261409" selected="true" /><select idref="V-261410" selected="true" /><select idref="V-261411" selected="true" /><select idref="V-261412" selected="true" /><select idref="V-261413" selected="true" /><select idref="V-261414" selected="true" /><select idref="V-261415" selected="true" /><select idref="V-261416" selected="true" /><select idref="V-261417" selected="true" /><select idref="V-261418" selected="true" /><select idref="V-261419" selected="true" /><select idref="V-261420" selected="true" /><select idref="V-261421" selected="true" /><select idref="V-261422" selected="true" /><select idref="V-261423" selected="true" /><select idref="V-261424" selected="true" /><select idref="V-261425" selected="true" /><select idref="V-261426" selected="true" /><select idref="V-261427" selected="true" /><select idref="V-261428" selected="true" /><select idref="V-261429" selected="true" /><select idref="V-261430" selected="true" /><select idref="V-261431" selected="true" /><select idref="V-261432" selected="true" /><select idref="V-261433" selected="true" /><select idref="V-261434" selected="true" /><select idref="V-261435" selected="true" /><select idref="V-261436" selected="true" /><select idref="V-261437" selected="true" /><select idref="V-261438" selected="true" /><select idref="V-261439" selected="true" /><select idref="V-261440" selected="true" /><select idref="V-261441" selected="true" /><select idref="V-261442" selected="true" /><select idref="V-261443" selected="true" /><select idref="V-261444" selected="true" /><select idref="V-261445" selected="true" /><select idref="V-261446" selected="true" /><select idref="V-261447" selected="true" /><select idref="V-261448" selected="true" /><select idref="V-261449" selected="true" /><select idref="V-261450" selected="true" /><select idref="V-261451" selected="true" /><select idref="V-261452" selected="true" /><select idref="V-261453" selected="true" /><select idref="V-261454" selected="true" /><select idref="V-261455" selected="true" /><select idref="V-261456" selected="true" /><select idref="V-261457" selected="true" /><select idref="V-261458" selected="true" /><select idref="V-261459" selected="true" /><select idref="V-261460" selected="true" /><select idref="V-261461" selected="true" /><select idref="V-261462" selected="true" /><select idref="V-261463" selected="true" /><select idref="V-261464" selected="true" /><select idref="V-261465" selected="true" /><select idref="V-261466" selected="true" /><select idref="V-261467" selected="true" /><select idref="V-261468" selected="true" /><select idref="V-261469" selected="true" /><select idref="V-261470" selected="true" /><select idref="V-261471" selected="true" /><select idref="V-261472" selected="true" /><select idref="V-261473" selected="true" /></Profile><Profile id="MAC-1_Public"><title>I - Mission Critical Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-261263" selected="true" /><select idref="V-261264" selected="true" /><select idref="V-261265" selected="true" /><select idref="V-261266" selected="true" /><select idref="V-261267" selected="true" /><select idref="V-261268" selected="true" /><select idref="V-261269" selected="true" /><select idref="V-261270" selected="true" /><select idref="V-261271" selected="true" /><select idref="V-261272" selected="true" /><select idref="V-261273" selected="true" /><select idref="V-261274" selected="true" /><select idref="V-261275" selected="true" /><select idref="V-261276" selected="true" /><select idref="V-261277" selected="true" /><select idref="V-261278" selected="true" /><select idref="V-261279" selected="true" /><select idref="V-261280" selected="true" /><select idref="V-261281" selected="true" /><select idref="V-261282" selected="true" /><select idref="V-261283" selected="true" /><select idref="V-261284" selected="true" /><select idref="V-261285" selected="true" /><select idref="V-261286" selected="true" /><select idref="V-261287" selected="true" /><select idref="V-261288" selected="true" /><select idref="V-261289" selected="true" /><select idref="V-261290" selected="true" /><select idref="V-261291" selected="true" /><select idref="V-261292" selected="true" /><select idref="V-261293" selected="true" /><select idref="V-261294" selected="true" /><select idref="V-261295" selected="true" /><select idref="V-261296" selected="true" /><select idref="V-261297" selected="true" /><select idref="V-261298" selected="true" /><select idref="V-261299" selected="true" /><select idref="V-261300" selected="true" /><select idref="V-261301" selected="true" /><select idref="V-261302" selected="true" /><select idref="V-261303" selected="true" /><select idref="V-261304" selected="true" /><select idref="V-261305" selected="true" /><select idref="V-261306" selected="true" /><select idref="V-261307" selected="true" /><select idref="V-261308" selected="true" /><select idref="V-261309" selected="true" /><select idref="V-261310" selected="true" /><select idref="V-261311" selected="true" /><select idref="V-261312" selected="true" /><select idref="V-261313" selected="true" /><select idref="V-261314" selected="true" /><select idref="V-261315" selected="true" /><select idref="V-261316" selected="true" /><select idref="V-261317" selected="true" /><select idref="V-261318" selected="true" /><select idref="V-261319" selected="true" /><select idref="V-261320" selected="true" /><select idref="V-261321" selected="true" /><select idref="V-261322" selected="true" /><select idref="V-261323" selected="true" /><select idref="V-261324" selected="true" /><select idref="V-261325" selected="true" /><select idref="V-261326" selected="true" /><select idref="V-261327" selected="true" /><select idref="V-261328" selected="true" /><select idref="V-261329" selected="true" /><select idref="V-261330" selected="true" /><select idref="V-261331" selected="true" /><select idref="V-261332" selected="true" /><select idref="V-261333" selected="true" /><select idref="V-261334" selected="true" /><select idref="V-261335" selected="true" /><select idref="V-261336" selected="true" /><select idref="V-261337" selected="true" /><select idref="V-261338" selected="true" /><select idref="V-261339" selected="true" /><select idref="V-261340" selected="true" /><select idref="V-261341" selected="true" /><select idref="V-261342" selected="true" /><select idref="V-261343" selected="true" /><select idref="V-261344" selected="true" /><select idref="V-261345" selected="true" /><select idref="V-261346" selected="true" /><select idref="V-261347" selected="true" /><select idref="V-261348" selected="true" /><select idref="V-261349" selected="true" /><select idref="V-261350" selected="true" /><select idref="V-261351" selected="true" /><select idref="V-261352" selected="true" /><select idref="V-261353" selected="true" /><select idref="V-261354" selected="true" /><select idref="V-261355" selected="true" /><select idref="V-261356" selected="true" /><select idref="V-261357" selected="true" /><select idref="V-261358" selected="true" /><select idref="V-261359" selected="true" /><select idref="V-261360" selected="true" /><select idref="V-261361" selected="true" /><select idref="V-261363" selected="true" /><select idref="V-261364" selected="true" /><select idref="V-261365" selected="true" /><select idref="V-261367" selected="true" /><select idref="V-261368" selected="true" /><select idref="V-261369" selected="true" /><select idref="V-261370" selected="true" /><select idref="V-261371" selected="true" /><select idref="V-261372" selected="true" /><select idref="V-261373" selected="true" /><select idref="V-261374" selected="true" /><select idref="V-261375" selected="true" /><select idref="V-261376" selected="true" /><select idref="V-261377" selected="true" /><select idref="V-261378" selected="true" /><select idref="V-261379" selected="true" /><select idref="V-261380" selected="true" /><select idref="V-261381" selected="true" /><select idref="V-261382" selected="true" /><select idref="V-261383" selected="true" /><select idref="V-261384" selected="true" /><select idref="V-261385" selected="true" /><select idref="V-261386" selected="true" /><select idref="V-261387" selected="true" /><select idref="V-261388" selected="true" /><select idref="V-261389" selected="true" /><select idref="V-261390" selected="true" /><select idref="V-261391" selected="true" /><select idref="V-261392" selected="true" /><select idref="V-261393" selected="true" /><select idref="V-261394" selected="true" /><select idref="V-261395" selected="true" /><select idref="V-261396" selected="true" /><select idref="V-261397" selected="true" /><select idref="V-261398" selected="true" /><select idref="V-261399" selected="true" /><select idref="V-261400" selected="true" /><select idref="V-261401" selected="true" /><select idref="V-261402" selected="true" /><select idref="V-261403" selected="true" /><select idref="V-261404" selected="true" /><select idref="V-261405" selected="true" /><select idref="V-261406" selected="true" /><select idref="V-261407" selected="true" /><select idref="V-261408" selected="true" /><select idref="V-261409" selected="true" /><select idref="V-261410" selected="true" /><select idref="V-261411" selected="true" /><select idref="V-261412" selected="true" /><select idref="V-261413" selected="true" /><select idref="V-261414" selected="true" /><select idref="V-261415" selected="true" /><select idref="V-261416" selected="true" /><select idref="V-261417" selected="true" /><select idref="V-261418" selected="true" /><select idref="V-261419" selected="true" /><select idref="V-261420" selected="true" /><select idref="V-261421" selected="true" /><select idref="V-261422" selected="true" /><select idref="V-261423" selected="true" /><select idref="V-261424" selected="true" /><select idref="V-261425" selected="true" /><select idref="V-261426" selected="true" /><select idref="V-261427" selected="true" /><select idref="V-261428" selected="true" /><select idref="V-261429" selected="true" /><select idref="V-261430" selected="true" /><select idref="V-261431" selected="true" /><select idref="V-261432" selected="true" /><select idref="V-261433" selected="true" /><select idref="V-261434" selected="true" /><select idref="V-261435" selected="true" /><select idref="V-261436" selected="true" /><select idref="V-261437" selected="true" /><select idref="V-261438" selected="true" /><select idref="V-261439" selected="true" /><select idref="V-261440" selected="true" /><select idref="V-261441" selected="true" /><select idref="V-261442" selected="true" /><select idref="V-261443" selected="true" /><select idref="V-261444" selected="true" /><select idref="V-261445" selected="true" /><select idref="V-261446" selected="true" /><select idref="V-261447" selected="true" /><select idref="V-261448" selected="true" /><select idref="V-261449" selected="true" /><select idref="V-261450" selected="true" /><select idref="V-261451" selected="true" /><select idref="V-261452" selected="true" /><select idref="V-261453" selected="true" /><select idref="V-261454" selected="true" /><select idref="V-261455" selected="true" /><select idref="V-261456" selected="true" /><select idref="V-261457" selected="true" /><select idref="V-261458" selected="true" /><select idref="V-261459" selected="true" /><select idref="V-261460" selected="true" /><select idref="V-261461" selected="true" /><select idref="V-261462" selected="true" /><select idref="V-261463" selected="true" /><select idref="V-261464" selected="true" /><select idref="V-261465" selected="true" /><select idref="V-261466" selected="true" /><select idref="V-261467" selected="true" /><select idref="V-261468" selected="true" /><select idref="V-261469" selected="true" /><select idref="V-261470" selected="true" /><select idref="V-261471" selected="true" /><select idref="V-261472" selected="true" /><select idref="V-261473" selected="true" /></Profile><Profile id="MAC-1_Sensitive"><title>I - Mission Critical Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-261263" selected="true" /><select idref="V-261264" selected="true" /><select idref="V-261265" selected="true" /><select idref="V-261266" selected="true" /><select idref="V-261267" selected="true" /><select idref="V-261268" selected="true" /><select idref="V-261269" selected="true" /><select idref="V-261270" selected="true" /><select idref="V-261271" selected="true" /><select idref="V-261272" selected="true" /><select idref="V-261273" selected="true" /><select idref="V-261274" selected="true" /><select idref="V-261275" selected="true" /><select idref="V-261276" selected="true" /><select idref="V-261277" selected="true" /><select idref="V-261278" selected="true" /><select idref="V-261279" selected="true" /><select idref="V-261280" selected="true" /><select idref="V-261281" selected="true" /><select idref="V-261282" selected="true" /><select idref="V-261283" selected="true" /><select idref="V-261284" selected="true" /><select idref="V-261285" selected="true" /><select idref="V-261286" selected="true" /><select idref="V-261287" selected="true" /><select idref="V-261288" selected="true" /><select idref="V-261289" selected="true" /><select idref="V-261290" selected="true" /><select idref="V-261291" selected="true" /><select idref="V-261292" selected="true" /><select idref="V-261293" selected="true" /><select idref="V-261294" selected="true" /><select idref="V-261295" selected="true" /><select idref="V-261296" selected="true" /><select idref="V-261297" selected="true" /><select idref="V-261298" selected="true" /><select idref="V-261299" selected="true" /><select idref="V-261300" selected="true" /><select idref="V-261301" selected="true" /><select idref="V-261302" selected="true" /><select idref="V-261303" selected="true" /><select idref="V-261304" selected="true" /><select idref="V-261305" selected="true" /><select idref="V-261306" selected="true" /><select idref="V-261307" selected="true" /><select idref="V-261308" selected="true" /><select idref="V-261309" selected="true" /><select idref="V-261310" selected="true" /><select idref="V-261311" selected="true" /><select idref="V-261312" selected="true" /><select idref="V-261313" selected="true" /><select idref="V-261314" selected="true" /><select idref="V-261315" selected="true" /><select idref="V-261316" selected="true" /><select idref="V-261317" selected="true" /><select idref="V-261318" selected="true" /><select idref="V-261319" selected="true" /><select idref="V-261320" selected="true" /><select idref="V-261321" selected="true" /><select idref="V-261322" selected="true" /><select idref="V-261323" selected="true" /><select idref="V-261324" selected="true" /><select idref="V-261325" selected="true" /><select idref="V-261326" selected="true" /><select idref="V-261327" selected="true" /><select idref="V-261328" selected="true" /><select idref="V-261329" selected="true" /><select idref="V-261330" selected="true" /><select idref="V-261331" selected="true" /><select idref="V-261332" selected="true" /><select idref="V-261333" selected="true" /><select idref="V-261334" selected="true" /><select idref="V-261335" selected="true" /><select idref="V-261336" selected="true" /><select idref="V-261337" selected="true" /><select idref="V-261338" selected="true" /><select idref="V-261339" selected="true" /><select idref="V-261340" selected="true" /><select idref="V-261341" selected="true" /><select idref="V-261342" selected="true" /><select idref="V-261343" selected="true" /><select idref="V-261344" selected="true" /><select idref="V-261345" selected="true" /><select idref="V-261346" selected="true" /><select idref="V-261347" selected="true" /><select idref="V-261348" selected="true" /><select idref="V-261349" selected="true" /><select idref="V-261350" selected="true" /><select idref="V-261351" selected="true" /><select idref="V-261352" selected="true" /><select idref="V-261353" selected="true" /><select idref="V-261354" selected="true" /><select idref="V-261355" selected="true" /><select idref="V-261356" selected="true" /><select idref="V-261357" selected="true" /><select idref="V-261358" selected="true" /><select idref="V-261359" selected="true" /><select idref="V-261360" selected="true" /><select idref="V-261361" selected="true" /><select idref="V-261363" selected="true" /><select idref="V-261364" selected="true" /><select idref="V-261365" selected="true" /><select idref="V-261367" selected="true" /><select idref="V-261368" selected="true" /><select idref="V-261369" selected="true" /><select idref="V-261370" selected="true" /><select idref="V-261371" selected="true" /><select idref="V-261372" selected="true" /><select idref="V-261373" selected="true" /><select idref="V-261374" selected="true" /><select idref="V-261375" selected="true" /><select idref="V-261376" selected="true" /><select idref="V-261377" selected="true" /><select idref="V-261378" selected="true" /><select idref="V-261379" selected="true" /><select idref="V-261380" selected="true" /><select idref="V-261381" selected="true" /><select idref="V-261382" selected="true" /><select idref="V-261383" selected="true" /><select idref="V-261384" selected="true" /><select idref="V-261385" selected="true" /><select idref="V-261386" selected="true" /><select idref="V-261387" selected="true" /><select idref="V-261388" selected="true" /><select idref="V-261389" selected="true" /><select idref="V-261390" selected="true" /><select idref="V-261391" selected="true" /><select idref="V-261392" selected="true" /><select idref="V-261393" selected="true" /><select idref="V-261394" selected="true" /><select idref="V-261395" selected="true" /><select idref="V-261396" selected="true" /><select idref="V-261397" selected="true" /><select idref="V-261398" selected="true" /><select idref="V-261399" selected="true" /><select idref="V-261400" selected="true" /><select idref="V-261401" selected="true" /><select idref="V-261402" selected="true" /><select idref="V-261403" selected="true" /><select idref="V-261404" selected="true" /><select idref="V-261405" selected="true" /><select idref="V-261406" selected="true" /><select idref="V-261407" selected="true" /><select idref="V-261408" selected="true" /><select idref="V-261409" selected="true" /><select idref="V-261410" selected="true" /><select idref="V-261411" selected="true" /><select idref="V-261412" selected="true" /><select idref="V-261413" selected="true" /><select idref="V-261414" selected="true" /><select idref="V-261415" selected="true" /><select idref="V-261416" selected="true" /><select idref="V-261417" selected="true" /><select idref="V-261418" selected="true" /><select idref="V-261419" selected="true" /><select idref="V-261420" selected="true" /><select idref="V-261421" selected="true" /><select idref="V-261422" selected="true" /><select idref="V-261423" selected="true" /><select idref="V-261424" selected="true" /><select idref="V-261425" selected="true" /><select idref="V-261426" selected="true" /><select idref="V-261427" selected="true" /><select idref="V-261428" selected="true" /><select idref="V-261429" selected="true" /><select idref="V-261430" selected="true" /><select idref="V-261431" selected="true" /><select idref="V-261432" selected="true" /><select idref="V-261433" selected="true" /><select idref="V-261434" selected="true" /><select idref="V-261435" selected="true" /><select idref="V-261436" selected="true" /><select idref="V-261437" selected="true" /><select idref="V-261438" selected="true" /><select idref="V-261439" selected="true" /><select idref="V-261440" selected="true" /><select idref="V-261441" selected="true" /><select idref="V-261442" selected="true" /><select idref="V-261443" selected="true" /><select idref="V-261444" selected="true" /><select idref="V-261445" selected="true" /><select idref="V-261446" selected="true" /><select idref="V-261447" selected="true" /><select idref="V-261448" selected="true" /><select idref="V-261449" selected="true" /><select idref="V-261450" selected="true" /><select idref="V-261451" selected="true" /><select idref="V-261452" selected="true" /><select idref="V-261453" selected="true" /><select idref="V-261454" selected="true" /><select idref="V-261455" selected="true" /><select idref="V-261456" selected="true" /><select idref="V-261457" selected="true" /><select idref="V-261458" selected="true" /><select idref="V-261459" selected="true" /><select idref="V-261460" selected="true" /><select idref="V-261461" selected="true" /><select idref="V-261462" selected="true" /><select idref="V-261463" selected="true" /><select idref="V-261464" selected="true" /><select idref="V-261465" selected="true" /><select idref="V-261466" selected="true" /><select idref="V-261467" selected="true" /><select idref="V-261468" selected="true" /><select idref="V-261469" selected="true" /><select idref="V-261470" selected="true" /><select idref="V-261471" selected="true" /><select idref="V-261472" selected="true" /><select idref="V-261473" selected="true" /></Profile><Profile id="MAC-2_Classified"><title>II - Mission Support Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-261263" selected="true" /><select idref="V-261264" selected="true" /><select idref="V-261265" selected="true" /><select idref="V-261266" selected="true" /><select idref="V-261267" selected="true" /><select idref="V-261268" selected="true" /><select idref="V-261269" selected="true" /><select idref="V-261270" selected="true" /><select idref="V-261271" selected="true" /><select idref="V-261272" selected="true" /><select idref="V-261273" selected="true" /><select idref="V-261274" selected="true" /><select idref="V-261275" selected="true" /><select idref="V-261276" selected="true" /><select idref="V-261277" selected="true" /><select idref="V-261278" selected="true" /><select idref="V-261279" selected="true" /><select idref="V-261280" selected="true" /><select idref="V-261281" selected="true" /><select idref="V-261282" selected="true" /><select idref="V-261283" selected="true" /><select idref="V-261284" selected="true" /><select idref="V-261285" selected="true" /><select idref="V-261286" selected="true" /><select idref="V-261287" selected="true" /><select idref="V-261288" selected="true" /><select idref="V-261289" selected="true" /><select idref="V-261290" selected="true" /><select idref="V-261291" selected="true" /><select idref="V-261292" selected="true" /><select idref="V-261293" selected="true" /><select idref="V-261294" selected="true" /><select idref="V-261295" selected="true" /><select idref="V-261296" selected="true" /><select idref="V-261297" selected="true" /><select idref="V-261298" selected="true" /><select idref="V-261299" selected="true" /><select idref="V-261300" selected="true" /><select idref="V-261301" selected="true" /><select idref="V-261302" selected="true" /><select idref="V-261303" selected="true" /><select idref="V-261304" selected="true" /><select idref="V-261305" selected="true" /><select idref="V-261306" selected="true" /><select idref="V-261307" selected="true" /><select idref="V-261308" selected="true" /><select idref="V-261309" selected="true" /><select idref="V-261310" selected="true" /><select idref="V-261311" selected="true" /><select idref="V-261312" selected="true" /><select idref="V-261313" selected="true" /><select idref="V-261314" selected="true" /><select idref="V-261315" selected="true" /><select idref="V-261316" selected="true" /><select idref="V-261317" selected="true" /><select idref="V-261318" selected="true" /><select idref="V-261319" selected="true" /><select idref="V-261320" selected="true" /><select idref="V-261321" selected="true" /><select idref="V-261322" selected="true" /><select idref="V-261323" selected="true" /><select idref="V-261324" selected="true" /><select idref="V-261325" selected="true" /><select idref="V-261326" selected="true" /><select idref="V-261327" selected="true" /><select idref="V-261328" selected="true" /><select idref="V-261329" selected="true" /><select idref="V-261330" selected="true" /><select idref="V-261331" selected="true" /><select idref="V-261332" selected="true" /><select idref="V-261333" selected="true" /><select idref="V-261334" selected="true" /><select idref="V-261335" selected="true" /><select idref="V-261336" selected="true" /><select idref="V-261337" selected="true" /><select idref="V-261338" selected="true" /><select idref="V-261339" selected="true" /><select idref="V-261340" selected="true" /><select idref="V-261341" selected="true" /><select idref="V-261342" selected="true" /><select idref="V-261343" selected="true" /><select idref="V-261344" selected="true" /><select idref="V-261345" selected="true" /><select idref="V-261346" selected="true" /><select idref="V-261347" selected="true" /><select idref="V-261348" selected="true" /><select idref="V-261349" selected="true" /><select idref="V-261350" selected="true" /><select idref="V-261351" selected="true" /><select idref="V-261352" selected="true" /><select idref="V-261353" selected="true" /><select idref="V-261354" selected="true" /><select idref="V-261355" selected="true" /><select idref="V-261356" selected="true" /><select idref="V-261357" selected="true" /><select idref="V-261358" selected="true" /><select idref="V-261359" selected="true" /><select idref="V-261360" selected="true" /><select idref="V-261361" selected="true" /><select idref="V-261363" selected="true" /><select idref="V-261364" selected="true" /><select idref="V-261365" selected="true" /><select idref="V-261367" selected="true" /><select idref="V-261368" selected="true" /><select idref="V-261369" selected="true" /><select idref="V-261370" selected="true" /><select idref="V-261371" selected="true" /><select idref="V-261372" selected="true" /><select idref="V-261373" selected="true" /><select idref="V-261374" selected="true" /><select idref="V-261375" selected="true" /><select idref="V-261376" selected="true" /><select idref="V-261377" selected="true" /><select idref="V-261378" selected="true" /><select idref="V-261379" selected="true" /><select idref="V-261380" selected="true" /><select idref="V-261381" selected="true" /><select idref="V-261382" selected="true" /><select idref="V-261383" selected="true" /><select idref="V-261384" selected="true" /><select idref="V-261385" selected="true" /><select idref="V-261386" selected="true" /><select idref="V-261387" selected="true" /><select idref="V-261388" selected="true" /><select idref="V-261389" selected="true" /><select idref="V-261390" selected="true" /><select idref="V-261391" selected="true" /><select idref="V-261392" selected="true" /><select idref="V-261393" selected="true" /><select idref="V-261394" selected="true" /><select idref="V-261395" selected="true" /><select idref="V-261396" selected="true" /><select idref="V-261397" selected="true" /><select idref="V-261398" selected="true" /><select idref="V-261399" selected="true" /><select idref="V-261400" selected="true" /><select idref="V-261401" selected="true" /><select idref="V-261402" selected="true" /><select idref="V-261403" selected="true" /><select idref="V-261404" selected="true" /><select idref="V-261405" selected="true" /><select idref="V-261406" selected="true" /><select idref="V-261407" selected="true" /><select idref="V-261408" selected="true" /><select idref="V-261409" selected="true" /><select idref="V-261410" selected="true" /><select idref="V-261411" selected="true" /><select idref="V-261412" selected="true" /><select idref="V-261413" selected="true" /><select idref="V-261414" selected="true" /><select idref="V-261415" selected="true" /><select idref="V-261416" selected="true" /><select idref="V-261417" selected="true" /><select idref="V-261418" selected="true" /><select idref="V-261419" selected="true" /><select idref="V-261420" selected="true" /><select idref="V-261421" selected="true" /><select idref="V-261422" selected="true" /><select idref="V-261423" selected="true" /><select idref="V-261424" selected="true" /><select idref="V-261425" selected="true" /><select idref="V-261426" selected="true" /><select idref="V-261427" selected="true" /><select idref="V-261428" selected="true" /><select idref="V-261429" selected="true" /><select idref="V-261430" selected="true" /><select idref="V-261431" selected="true" /><select idref="V-261432" selected="true" /><select idref="V-261433" selected="true" /><select idref="V-261434" selected="true" /><select idref="V-261435" selected="true" /><select idref="V-261436" selected="true" /><select idref="V-261437" selected="true" /><select idref="V-261438" selected="true" /><select idref="V-261439" selected="true" /><select idref="V-261440" selected="true" /><select idref="V-261441" selected="true" /><select idref="V-261442" selected="true" /><select idref="V-261443" selected="true" /><select idref="V-261444" selected="true" /><select idref="V-261445" selected="true" /><select idref="V-261446" selected="true" /><select idref="V-261447" selected="true" /><select idref="V-261448" selected="true" /><select idref="V-261449" selected="true" /><select idref="V-261450" selected="true" /><select idref="V-261451" selected="true" /><select idref="V-261452" selected="true" /><select idref="V-261453" selected="true" /><select idref="V-261454" selected="true" /><select idref="V-261455" selected="true" /><select idref="V-261456" selected="true" /><select idref="V-261457" selected="true" /><select idref="V-261458" selected="true" /><select idref="V-261459" selected="true" /><select idref="V-261460" selected="true" /><select idref="V-261461" selected="true" /><select idref="V-261462" selected="true" /><select idref="V-261463" selected="true" /><select idref="V-261464" selected="true" /><select idref="V-261465" selected="true" /><select idref="V-261466" selected="true" /><select idref="V-261467" selected="true" /><select idref="V-261468" selected="true" /><select idref="V-261469" selected="true" /><select idref="V-261470" selected="true" /><select idref="V-261471" selected="true" /><select idref="V-261472" selected="true" /><select idref="V-261473" selected="true" /></Profile><Profile id="MAC-2_Public"><title>II - Mission Support Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-261263" selected="true" /><select idref="V-261264" selected="true" /><select idref="V-261265" selected="true" /><select idref="V-261266" selected="true" /><select idref="V-261267" selected="true" /><select idref="V-261268" selected="true" /><select idref="V-261269" selected="true" /><select idref="V-261270" selected="true" /><select idref="V-261271" selected="true" /><select idref="V-261272" selected="true" /><select idref="V-261273" selected="true" /><select idref="V-261274" selected="true" /><select idref="V-261275" selected="true" /><select idref="V-261276" selected="true" /><select idref="V-261277" selected="true" /><select idref="V-261278" selected="true" /><select idref="V-261279" selected="true" /><select idref="V-261280" selected="true" /><select idref="V-261281" selected="true" /><select idref="V-261282" selected="true" /><select idref="V-261283" selected="true" /><select idref="V-261284" selected="true" /><select idref="V-261285" selected="true" /><select idref="V-261286" selected="true" /><select idref="V-261287" selected="true" /><select idref="V-261288" selected="true" /><select idref="V-261289" selected="true" /><select idref="V-261290" selected="true" /><select idref="V-261291" selected="true" /><select idref="V-261292" selected="true" /><select idref="V-261293" selected="true" /><select idref="V-261294" selected="true" /><select idref="V-261295" selected="true" /><select idref="V-261296" selected="true" /><select idref="V-261297" selected="true" /><select idref="V-261298" selected="true" /><select idref="V-261299" selected="true" /><select idref="V-261300" selected="true" /><select idref="V-261301" selected="true" /><select idref="V-261302" selected="true" /><select idref="V-261303" selected="true" /><select idref="V-261304" selected="true" /><select idref="V-261305" selected="true" /><select idref="V-261306" selected="true" /><select idref="V-261307" selected="true" /><select idref="V-261308" selected="true" /><select idref="V-261309" selected="true" /><select idref="V-261310" selected="true" /><select idref="V-261311" selected="true" /><select idref="V-261312" selected="true" /><select idref="V-261313" selected="true" /><select idref="V-261314" selected="true" /><select idref="V-261315" selected="true" /><select idref="V-261316" selected="true" /><select idref="V-261317" selected="true" /><select idref="V-261318" selected="true" /><select idref="V-261319" selected="true" /><select idref="V-261320" selected="true" /><select idref="V-261321" selected="true" /><select idref="V-261322" selected="true" /><select idref="V-261323" selected="true" /><select idref="V-261324" selected="true" /><select idref="V-261325" selected="true" /><select idref="V-261326" selected="true" /><select idref="V-261327" selected="true" /><select idref="V-261328" selected="true" /><select idref="V-261329" selected="true" /><select idref="V-261330" selected="true" /><select idref="V-261331" selected="true" /><select idref="V-261332" selected="true" /><select idref="V-261333" selected="true" /><select idref="V-261334" selected="true" /><select idref="V-261335" selected="true" /><select idref="V-261336" selected="true" /><select idref="V-261337" selected="true" /><select idref="V-261338" selected="true" /><select idref="V-261339" selected="true" /><select idref="V-261340" selected="true" /><select idref="V-261341" selected="true" /><select idref="V-261342" selected="true" /><select idref="V-261343" selected="true" /><select idref="V-261344" selected="true" /><select idref="V-261345" selected="true" /><select idref="V-261346" selected="true" /><select idref="V-261347" selected="true" /><select idref="V-261348" selected="true" /><select idref="V-261349" selected="true" /><select idref="V-261350" selected="true" /><select idref="V-261351" selected="true" /><select idref="V-261352" selected="true" /><select idref="V-261353" selected="true" /><select idref="V-261354" selected="true" /><select idref="V-261355" selected="true" /><select idref="V-261356" selected="true" /><select idref="V-261357" selected="true" /><select idref="V-261358" selected="true" /><select idref="V-261359" selected="true" /><select idref="V-261360" selected="true" /><select idref="V-261361" selected="true" /><select idref="V-261363" selected="true" /><select idref="V-261364" selected="true" /><select idref="V-261365" selected="true" /><select idref="V-261367" selected="true" /><select idref="V-261368" selected="true" /><select idref="V-261369" selected="true" /><select idref="V-261370" selected="true" /><select idref="V-261371" selected="true" /><select idref="V-261372" selected="true" /><select idref="V-261373" selected="true" /><select idref="V-261374" selected="true" /><select idref="V-261375" selected="true" /><select idref="V-261376" selected="true" /><select idref="V-261377" selected="true" /><select idref="V-261378" selected="true" /><select idref="V-261379" selected="true" /><select idref="V-261380" selected="true" /><select idref="V-261381" selected="true" /><select idref="V-261382" selected="true" /><select idref="V-261383" selected="true" /><select idref="V-261384" selected="true" /><select idref="V-261385" selected="true" /><select idref="V-261386" selected="true" /><select idref="V-261387" selected="true" /><select idref="V-261388" selected="true" /><select idref="V-261389" selected="true" /><select idref="V-261390" selected="true" /><select idref="V-261391" selected="true" /><select idref="V-261392" selected="true" /><select idref="V-261393" selected="true" /><select idref="V-261394" selected="true" /><select idref="V-261395" selected="true" /><select idref="V-261396" selected="true" /><select idref="V-261397" selected="true" /><select idref="V-261398" selected="true" /><select idref="V-261399" selected="true" /><select idref="V-261400" selected="true" /><select idref="V-261401" selected="true" /><select idref="V-261402" selected="true" /><select idref="V-261403" selected="true" /><select idref="V-261404" selected="true" /><select idref="V-261405" selected="true" /><select idref="V-261406" selected="true" /><select idref="V-261407" selected="true" /><select idref="V-261408" selected="true" /><select idref="V-261409" selected="true" /><select idref="V-261410" selected="true" /><select idref="V-261411" selected="true" /><select idref="V-261412" selected="true" /><select idref="V-261413" selected="true" /><select idref="V-261414" selected="true" /><select idref="V-261415" selected="true" /><select idref="V-261416" selected="true" /><select idref="V-261417" selected="true" /><select idref="V-261418" selected="true" /><select idref="V-261419" selected="true" /><select idref="V-261420" selected="true" /><select idref="V-261421" selected="true" /><select idref="V-261422" selected="true" /><select idref="V-261423" selected="true" /><select idref="V-261424" selected="true" /><select idref="V-261425" selected="true" /><select idref="V-261426" selected="true" /><select idref="V-261427" selected="true" /><select idref="V-261428" selected="true" /><select idref="V-261429" selected="true" /><select idref="V-261430" selected="true" /><select idref="V-261431" selected="true" /><select idref="V-261432" selected="true" /><select idref="V-261433" selected="true" /><select idref="V-261434" selected="true" /><select idref="V-261435" selected="true" /><select idref="V-261436" selected="true" /><select idref="V-261437" selected="true" /><select idref="V-261438" selected="true" /><select idref="V-261439" selected="true" /><select idref="V-261440" selected="true" /><select idref="V-261441" selected="true" /><select idref="V-261442" selected="true" /><select idref="V-261443" selected="true" /><select idref="V-261444" selected="true" /><select idref="V-261445" selected="true" /><select idref="V-261446" selected="true" /><select idref="V-261447" selected="true" /><select idref="V-261448" selected="true" /><select idref="V-261449" selected="true" /><select idref="V-261450" selected="true" /><select idref="V-261451" selected="true" /><select idref="V-261452" selected="true" /><select idref="V-261453" selected="true" /><select idref="V-261454" selected="true" /><select idref="V-261455" selected="true" /><select idref="V-261456" selected="true" /><select idref="V-261457" selected="true" /><select idref="V-261458" selected="true" /><select idref="V-261459" selected="true" /><select idref="V-261460" selected="true" /><select idref="V-261461" selected="true" /><select idref="V-261462" selected="true" /><select idref="V-261463" selected="true" /><select idref="V-261464" selected="true" /><select idref="V-261465" selected="true" /><select idref="V-261466" selected="true" /><select idref="V-261467" selected="true" /><select idref="V-261468" selected="true" /><select idref="V-261469" selected="true" /><select idref="V-261470" selected="true" /><select idref="V-261471" selected="true" /><select idref="V-261472" selected="true" /><select idref="V-261473" selected="true" /></Profile><Profile id="MAC-2_Sensitive"><title>II - Mission Support Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-261263" selected="true" /><select idref="V-261264" selected="true" /><select idref="V-261265" selected="true" /><select idref="V-261266" selected="true" /><select idref="V-261267" selected="true" /><select idref="V-261268" selected="true" /><select idref="V-261269" selected="true" /><select idref="V-261270" selected="true" /><select idref="V-261271" selected="true" /><select idref="V-261272" selected="true" /><select idref="V-261273" selected="true" /><select idref="V-261274" selected="true" /><select idref="V-261275" selected="true" /><select idref="V-261276" selected="true" /><select idref="V-261277" selected="true" /><select idref="V-261278" selected="true" /><select idref="V-261279" selected="true" /><select idref="V-261280" selected="true" /><select idref="V-261281" selected="true" /><select idref="V-261282" selected="true" /><select idref="V-261283" selected="true" /><select idref="V-261284" selected="true" /><select idref="V-261285" selected="true" /><select idref="V-261286" selected="true" /><select idref="V-261287" selected="true" /><select idref="V-261288" selected="true" /><select idref="V-261289" selected="true" /><select idref="V-261290" selected="true" /><select idref="V-261291" selected="true" /><select idref="V-261292" selected="true" /><select idref="V-261293" selected="true" /><select idref="V-261294" selected="true" /><select idref="V-261295" selected="true" /><select idref="V-261296" selected="true" /><select idref="V-261297" selected="true" /><select idref="V-261298" selected="true" /><select idref="V-261299" selected="true" /><select idref="V-261300" selected="true" /><select idref="V-261301" selected="true" /><select idref="V-261302" selected="true" /><select idref="V-261303" selected="true" /><select idref="V-261304" selected="true" /><select idref="V-261305" selected="true" /><select idref="V-261306" selected="true" /><select idref="V-261307" selected="true" /><select idref="V-261308" selected="true" /><select idref="V-261309" selected="true" /><select idref="V-261310" selected="true" /><select idref="V-261311" selected="true" /><select idref="V-261312" selected="true" /><select idref="V-261313" selected="true" /><select idref="V-261314" selected="true" /><select idref="V-261315" selected="true" /><select idref="V-261316" selected="true" /><select idref="V-261317" selected="true" /><select idref="V-261318" selected="true" /><select idref="V-261319" selected="true" /><select idref="V-261320" selected="true" /><select idref="V-261321" selected="true" /><select idref="V-261322" selected="true" /><select idref="V-261323" selected="true" /><select idref="V-261324" selected="true" /><select idref="V-261325" selected="true" /><select idref="V-261326" selected="true" /><select idref="V-261327" selected="true" /><select idref="V-261328" selected="true" /><select idref="V-261329" selected="true" /><select idref="V-261330" selected="true" /><select idref="V-261331" selected="true" /><select idref="V-261332" selected="true" /><select idref="V-261333" selected="true" /><select idref="V-261334" selected="true" /><select idref="V-261335" selected="true" /><select idref="V-261336" selected="true" /><select idref="V-261337" selected="true" /><select idref="V-261338" selected="true" /><select idref="V-261339" selected="true" /><select idref="V-261340" selected="true" /><select idref="V-261341" selected="true" /><select idref="V-261342" selected="true" /><select idref="V-261343" selected="true" /><select idref="V-261344" selected="true" /><select idref="V-261345" selected="true" /><select idref="V-261346" selected="true" /><select idref="V-261347" selected="true" /><select idref="V-261348" selected="true" /><select idref="V-261349" selected="true" /><select idref="V-261350" selected="true" /><select idref="V-261351" selected="true" /><select idref="V-261352" selected="true" /><select idref="V-261353" selected="true" /><select idref="V-261354" selected="true" /><select idref="V-261355" selected="true" /><select idref="V-261356" selected="true" /><select idref="V-261357" selected="true" /><select idref="V-261358" selected="true" /><select idref="V-261359" selected="true" /><select idref="V-261360" selected="true" /><select idref="V-261361" selected="true" /><select idref="V-261363" selected="true" /><select idref="V-261364" selected="true" /><select idref="V-261365" selected="true" /><select idref="V-261367" selected="true" /><select idref="V-261368" selected="true" /><select idref="V-261369" selected="true" /><select idref="V-261370" selected="true" /><select idref="V-261371" selected="true" /><select idref="V-261372" selected="true" /><select idref="V-261373" selected="true" /><select idref="V-261374" selected="true" /><select idref="V-261375" selected="true" /><select idref="V-261376" selected="true" /><select idref="V-261377" selected="true" /><select idref="V-261378" selected="true" /><select idref="V-261379" selected="true" /><select idref="V-261380" selected="true" /><select idref="V-261381" selected="true" /><select idref="V-261382" selected="true" /><select idref="V-261383" selected="true" /><select idref="V-261384" selected="true" /><select idref="V-261385" selected="true" /><select idref="V-261386" selected="true" /><select idref="V-261387" selected="true" /><select idref="V-261388" selected="true" /><select idref="V-261389" selected="true" /><select idref="V-261390" selected="true" /><select idref="V-261391" selected="true" /><select idref="V-261392" selected="true" /><select idref="V-261393" selected="true" /><select idref="V-261394" selected="true" /><select idref="V-261395" selected="true" /><select idref="V-261396" selected="true" /><select idref="V-261397" selected="true" /><select idref="V-261398" selected="true" /><select idref="V-261399" selected="true" /><select idref="V-261400" selected="true" /><select idref="V-261401" selected="true" /><select idref="V-261402" selected="true" /><select idref="V-261403" selected="true" /><select idref="V-261404" selected="true" /><select idref="V-261405" selected="true" /><select idref="V-261406" selected="true" /><select idref="V-261407" selected="true" /><select idref="V-261408" selected="true" /><select idref="V-261409" selected="true" /><select idref="V-261410" selected="true" /><select idref="V-261411" selected="true" /><select idref="V-261412" selected="true" /><select idref="V-261413" selected="true" /><select idref="V-261414" selected="true" /><select idref="V-261415" selected="true" /><select idref="V-261416" selected="true" /><select idref="V-261417" selected="true" /><select idref="V-261418" selected="true" /><select idref="V-261419" selected="true" /><select idref="V-261420" selected="true" /><select idref="V-261421" selected="true" /><select idref="V-261422" selected="true" /><select idref="V-261423" selected="true" /><select idref="V-261424" selected="true" /><select idref="V-261425" selected="true" /><select idref="V-261426" selected="true" /><select idref="V-261427" selected="true" /><select idref="V-261428" selected="true" /><select idref="V-261429" selected="true" /><select idref="V-261430" selected="true" /><select idref="V-261431" selected="true" /><select idref="V-261432" selected="true" /><select idref="V-261433" selected="true" /><select idref="V-261434" selected="true" /><select idref="V-261435" selected="true" /><select idref="V-261436" selected="true" /><select idref="V-261437" selected="true" /><select idref="V-261438" selected="true" /><select idref="V-261439" selected="true" /><select idref="V-261440" selected="true" /><select idref="V-261441" selected="true" /><select idref="V-261442" selected="true" /><select idref="V-261443" selected="true" /><select idref="V-261444" selected="true" /><select idref="V-261445" selected="true" /><select idref="V-261446" selected="true" /><select idref="V-261447" selected="true" /><select idref="V-261448" selected="true" /><select idref="V-261449" selected="true" /><select idref="V-261450" selected="true" /><select idref="V-261451" selected="true" /><select idref="V-261452" selected="true" /><select idref="V-261453" selected="true" /><select idref="V-261454" selected="true" /><select idref="V-261455" selected="true" /><select idref="V-261456" selected="true" /><select idref="V-261457" selected="true" /><select idref="V-261458" selected="true" /><select idref="V-261459" selected="true" /><select idref="V-261460" selected="true" /><select idref="V-261461" selected="true" /><select idref="V-261462" selected="true" /><select idref="V-261463" selected="true" /><select idref="V-261464" selected="true" /><select idref="V-261465" selected="true" /><select idref="V-261466" selected="true" /><select idref="V-261467" selected="true" /><select idref="V-261468" selected="true" /><select idref="V-261469" selected="true" /><select idref="V-261470" selected="true" /><select idref="V-261471" selected="true" /><select idref="V-261472" selected="true" /><select idref="V-261473" selected="true" /></Profile><Profile id="MAC-3_Classified"><title>III - Administrative Classified</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-261263" selected="true" /><select idref="V-261264" selected="true" /><select idref="V-261265" selected="true" /><select idref="V-261266" selected="true" /><select idref="V-261267" selected="true" /><select idref="V-261268" selected="true" /><select idref="V-261269" selected="true" /><select idref="V-261270" selected="true" /><select idref="V-261271" selected="true" /><select idref="V-261272" selected="true" /><select idref="V-261273" selected="true" /><select idref="V-261274" selected="true" /><select idref="V-261275" selected="true" /><select idref="V-261276" selected="true" /><select idref="V-261277" selected="true" /><select idref="V-261278" selected="true" /><select idref="V-261279" selected="true" /><select idref="V-261280" selected="true" /><select idref="V-261281" selected="true" /><select idref="V-261282" selected="true" /><select idref="V-261283" selected="true" /><select idref="V-261284" selected="true" /><select idref="V-261285" selected="true" /><select idref="V-261286" selected="true" /><select idref="V-261287" selected="true" /><select idref="V-261288" selected="true" /><select idref="V-261289" selected="true" /><select idref="V-261290" selected="true" /><select idref="V-261291" selected="true" /><select idref="V-261292" selected="true" /><select idref="V-261293" selected="true" /><select idref="V-261294" selected="true" /><select idref="V-261295" selected="true" /><select idref="V-261296" selected="true" /><select idref="V-261297" selected="true" /><select idref="V-261298" selected="true" /><select idref="V-261299" selected="true" /><select idref="V-261300" selected="true" /><select idref="V-261301" selected="true" /><select idref="V-261302" selected="true" /><select idref="V-261303" selected="true" /><select idref="V-261304" selected="true" /><select idref="V-261305" selected="true" /><select idref="V-261306" selected="true" /><select idref="V-261307" selected="true" /><select idref="V-261308" selected="true" /><select idref="V-261309" selected="true" /><select idref="V-261310" selected="true" /><select idref="V-261311" selected="true" /><select idref="V-261312" selected="true" /><select idref="V-261313" selected="true" /><select idref="V-261314" selected="true" /><select idref="V-261315" selected="true" /><select idref="V-261316" selected="true" /><select idref="V-261317" selected="true" /><select idref="V-261318" selected="true" /><select idref="V-261319" selected="true" /><select idref="V-261320" selected="true" /><select idref="V-261321" selected="true" /><select idref="V-261322" selected="true" /><select idref="V-261323" selected="true" /><select idref="V-261324" selected="true" /><select idref="V-261325" selected="true" /><select idref="V-261326" selected="true" /><select idref="V-261327" selected="true" /><select idref="V-261328" selected="true" /><select idref="V-261329" selected="true" /><select idref="V-261330" selected="true" /><select idref="V-261331" selected="true" /><select idref="V-261332" selected="true" /><select idref="V-261333" selected="true" /><select idref="V-261334" selected="true" /><select idref="V-261335" selected="true" /><select idref="V-261336" selected="true" /><select idref="V-261337" selected="true" /><select idref="V-261338" selected="true" /><select idref="V-261339" selected="true" /><select idref="V-261340" selected="true" /><select idref="V-261341" selected="true" /><select idref="V-261342" selected="true" /><select idref="V-261343" selected="true" /><select idref="V-261344" selected="true" /><select idref="V-261345" selected="true" /><select idref="V-261346" selected="true" /><select idref="V-261347" selected="true" /><select idref="V-261348" selected="true" /><select idref="V-261349" selected="true" /><select idref="V-261350" selected="true" /><select idref="V-261351" selected="true" /><select idref="V-261352" selected="true" /><select idref="V-261353" selected="true" /><select idref="V-261354" selected="true" /><select idref="V-261355" selected="true" /><select idref="V-261356" selected="true" /><select idref="V-261357" selected="true" /><select idref="V-261358" selected="true" /><select idref="V-261359" selected="true" /><select idref="V-261360" selected="true" /><select idref="V-261361" selected="true" /><select idref="V-261363" selected="true" /><select idref="V-261364" selected="true" /><select idref="V-261365" selected="true" /><select idref="V-261367" selected="true" /><select idref="V-261368" selected="true" /><select idref="V-261369" selected="true" /><select idref="V-261370" selected="true" /><select idref="V-261371" selected="true" /><select idref="V-261372" selected="true" /><select idref="V-261373" selected="true" /><select idref="V-261374" selected="true" /><select idref="V-261375" selected="true" /><select idref="V-261376" selected="true" /><select idref="V-261377" selected="true" /><select idref="V-261378" selected="true" /><select idref="V-261379" selected="true" /><select idref="V-261380" selected="true" /><select idref="V-261381" selected="true" /><select idref="V-261382" selected="true" /><select idref="V-261383" selected="true" /><select idref="V-261384" selected="true" /><select idref="V-261385" selected="true" /><select idref="V-261386" selected="true" /><select idref="V-261387" selected="true" /><select idref="V-261388" selected="true" /><select idref="V-261389" selected="true" /><select idref="V-261390" selected="true" /><select idref="V-261391" selected="true" /><select idref="V-261392" selected="true" /><select idref="V-261393" selected="true" /><select idref="V-261394" selected="true" /><select idref="V-261395" selected="true" /><select idref="V-261396" selected="true" /><select idref="V-261397" selected="true" /><select idref="V-261398" selected="true" /><select idref="V-261399" selected="true" /><select idref="V-261400" selected="true" /><select idref="V-261401" selected="true" /><select idref="V-261402" selected="true" /><select idref="V-261403" selected="true" /><select idref="V-261404" selected="true" /><select idref="V-261405" selected="true" /><select idref="V-261406" selected="true" /><select idref="V-261407" selected="true" /><select idref="V-261408" selected="true" /><select idref="V-261409" selected="true" /><select idref="V-261410" selected="true" /><select idref="V-261411" selected="true" /><select idref="V-261412" selected="true" /><select idref="V-261413" selected="true" /><select idref="V-261414" selected="true" /><select idref="V-261415" selected="true" /><select idref="V-261416" selected="true" /><select idref="V-261417" selected="true" /><select idref="V-261418" selected="true" /><select idref="V-261419" selected="true" /><select idref="V-261420" selected="true" /><select idref="V-261421" selected="true" /><select idref="V-261422" selected="true" /><select idref="V-261423" selected="true" /><select idref="V-261424" selected="true" /><select idref="V-261425" selected="true" /><select idref="V-261426" selected="true" /><select idref="V-261427" selected="true" /><select idref="V-261428" selected="true" /><select idref="V-261429" selected="true" /><select idref="V-261430" selected="true" /><select idref="V-261431" selected="true" /><select idref="V-261432" selected="true" /><select idref="V-261433" selected="true" /><select idref="V-261434" selected="true" /><select idref="V-261435" selected="true" /><select idref="V-261436" selected="true" /><select idref="V-261437" selected="true" /><select idref="V-261438" selected="true" /><select idref="V-261439" selected="true" /><select idref="V-261440" selected="true" /><select idref="V-261441" selected="true" /><select idref="V-261442" selected="true" /><select idref="V-261443" selected="true" /><select idref="V-261444" selected="true" /><select idref="V-261445" selected="true" /><select idref="V-261446" selected="true" /><select idref="V-261447" selected="true" /><select idref="V-261448" selected="true" /><select idref="V-261449" selected="true" /><select idref="V-261450" selected="true" /><select idref="V-261451" selected="true" /><select idref="V-261452" selected="true" /><select idref="V-261453" selected="true" /><select idref="V-261454" selected="true" /><select idref="V-261455" selected="true" /><select idref="V-261456" selected="true" /><select idref="V-261457" selected="true" /><select idref="V-261458" selected="true" /><select idref="V-261459" selected="true" /><select idref="V-261460" selected="true" /><select idref="V-261461" selected="true" /><select idref="V-261462" selected="true" /><select idref="V-261463" selected="true" /><select idref="V-261464" selected="true" /><select idref="V-261465" selected="true" /><select idref="V-261466" selected="true" /><select idref="V-261467" selected="true" /><select idref="V-261468" selected="true" /><select idref="V-261469" selected="true" /><select idref="V-261470" selected="true" /><select idref="V-261471" selected="true" /><select idref="V-261472" selected="true" /><select idref="V-261473" selected="true" /></Profile><Profile id="MAC-3_Public"><title>III - Administrative Public</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-261263" selected="true" /><select idref="V-261264" selected="true" /><select idref="V-261265" selected="true" /><select idref="V-261266" selected="true" /><select idref="V-261267" selected="true" /><select idref="V-261268" selected="true" /><select idref="V-261269" selected="true" /><select idref="V-261270" selected="true" /><select idref="V-261271" selected="true" /><select idref="V-261272" selected="true" /><select idref="V-261273" selected="true" /><select idref="V-261274" selected="true" /><select idref="V-261275" selected="true" /><select idref="V-261276" selected="true" /><select idref="V-261277" selected="true" /><select idref="V-261278" selected="true" /><select idref="V-261279" selected="true" /><select idref="V-261280" selected="true" /><select idref="V-261281" selected="true" /><select idref="V-261282" selected="true" /><select idref="V-261283" selected="true" /><select idref="V-261284" selected="true" /><select idref="V-261285" selected="true" /><select idref="V-261286" selected="true" /><select idref="V-261287" selected="true" /><select idref="V-261288" selected="true" /><select idref="V-261289" selected="true" /><select idref="V-261290" selected="true" /><select idref="V-261291" selected="true" /><select idref="V-261292" selected="true" /><select idref="V-261293" selected="true" /><select idref="V-261294" selected="true" /><select idref="V-261295" selected="true" /><select idref="V-261296" selected="true" /><select idref="V-261297" selected="true" /><select idref="V-261298" selected="true" /><select idref="V-261299" selected="true" /><select idref="V-261300" selected="true" /><select idref="V-261301" selected="true" /><select idref="V-261302" selected="true" /><select idref="V-261303" selected="true" /><select idref="V-261304" selected="true" /><select idref="V-261305" selected="true" /><select idref="V-261306" selected="true" /><select idref="V-261307" selected="true" /><select idref="V-261308" selected="true" /><select idref="V-261309" selected="true" /><select idref="V-261310" selected="true" /><select idref="V-261311" selected="true" /><select idref="V-261312" selected="true" /><select idref="V-261313" selected="true" /><select idref="V-261314" selected="true" /><select idref="V-261315" selected="true" /><select idref="V-261316" selected="true" /><select idref="V-261317" selected="true" /><select idref="V-261318" selected="true" /><select idref="V-261319" selected="true" /><select idref="V-261320" selected="true" /><select idref="V-261321" selected="true" /><select idref="V-261322" selected="true" /><select idref="V-261323" selected="true" /><select idref="V-261324" selected="true" /><select idref="V-261325" selected="true" /><select idref="V-261326" selected="true" /><select idref="V-261327" selected="true" /><select idref="V-261328" selected="true" /><select idref="V-261329" selected="true" /><select idref="V-261330" selected="true" /><select idref="V-261331" selected="true" /><select idref="V-261332" selected="true" /><select idref="V-261333" selected="true" /><select idref="V-261334" selected="true" /><select idref="V-261335" selected="true" /><select idref="V-261336" selected="true" /><select idref="V-261337" selected="true" /><select idref="V-261338" selected="true" /><select idref="V-261339" selected="true" /><select idref="V-261340" selected="true" /><select idref="V-261341" selected="true" /><select idref="V-261342" selected="true" /><select idref="V-261343" selected="true" /><select idref="V-261344" selected="true" /><select idref="V-261345" selected="true" /><select idref="V-261346" selected="true" /><select idref="V-261347" selected="true" /><select idref="V-261348" selected="true" /><select idref="V-261349" selected="true" /><select idref="V-261350" selected="true" /><select idref="V-261351" selected="true" /><select idref="V-261352" selected="true" /><select idref="V-261353" selected="true" /><select idref="V-261354" selected="true" /><select idref="V-261355" selected="true" /><select idref="V-261356" selected="true" /><select idref="V-261357" selected="true" /><select idref="V-261358" selected="true" /><select idref="V-261359" selected="true" /><select idref="V-261360" selected="true" /><select idref="V-261361" selected="true" /><select idref="V-261363" selected="true" /><select idref="V-261364" selected="true" /><select idref="V-261365" selected="true" /><select idref="V-261367" selected="true" /><select idref="V-261368" selected="true" /><select idref="V-261369" selected="true" /><select idref="V-261370" selected="true" /><select idref="V-261371" selected="true" /><select idref="V-261372" selected="true" /><select idref="V-261373" selected="true" /><select idref="V-261374" selected="true" /><select idref="V-261375" selected="true" /><select idref="V-261376" selected="true" /><select idref="V-261377" selected="true" /><select idref="V-261378" selected="true" /><select idref="V-261379" selected="true" /><select idref="V-261380" selected="true" /><select idref="V-261381" selected="true" /><select idref="V-261382" selected="true" /><select idref="V-261383" selected="true" /><select idref="V-261384" selected="true" /><select idref="V-261385" selected="true" /><select idref="V-261386" selected="true" /><select idref="V-261387" selected="true" /><select idref="V-261388" selected="true" /><select idref="V-261389" selected="true" /><select idref="V-261390" selected="true" /><select idref="V-261391" selected="true" /><select idref="V-261392" selected="true" /><select idref="V-261393" selected="true" /><select idref="V-261394" selected="true" /><select idref="V-261395" selected="true" /><select idref="V-261396" selected="true" /><select idref="V-261397" selected="true" /><select idref="V-261398" selected="true" /><select idref="V-261399" selected="true" /><select idref="V-261400" selected="true" /><select idref="V-261401" selected="true" /><select idref="V-261402" selected="true" /><select idref="V-261403" selected="true" /><select idref="V-261404" selected="true" /><select idref="V-261405" selected="true" /><select idref="V-261406" selected="true" /><select idref="V-261407" selected="true" /><select idref="V-261408" selected="true" /><select idref="V-261409" selected="true" /><select idref="V-261410" selected="true" /><select idref="V-261411" selected="true" /><select idref="V-261412" selected="true" /><select idref="V-261413" selected="true" /><select idref="V-261414" selected="true" /><select idref="V-261415" selected="true" /><select idref="V-261416" selected="true" /><select idref="V-261417" selected="true" /><select idref="V-261418" selected="true" /><select idref="V-261419" selected="true" /><select idref="V-261420" selected="true" /><select idref="V-261421" selected="true" /><select idref="V-261422" selected="true" /><select idref="V-261423" selected="true" /><select idref="V-261424" selected="true" /><select idref="V-261425" selected="true" /><select idref="V-261426" selected="true" /><select idref="V-261427" selected="true" /><select idref="V-261428" selected="true" /><select idref="V-261429" selected="true" /><select idref="V-261430" selected="true" /><select idref="V-261431" selected="true" /><select idref="V-261432" selected="true" /><select idref="V-261433" selected="true" /><select idref="V-261434" selected="true" /><select idref="V-261435" selected="true" /><select idref="V-261436" selected="true" /><select idref="V-261437" selected="true" /><select idref="V-261438" selected="true" /><select idref="V-261439" selected="true" /><select idref="V-261440" selected="true" /><select idref="V-261441" selected="true" /><select idref="V-261442" selected="true" /><select idref="V-261443" selected="true" /><select idref="V-261444" selected="true" /><select idref="V-261445" selected="true" /><select idref="V-261446" selected="true" /><select idref="V-261447" selected="true" /><select idref="V-261448" selected="true" /><select idref="V-261449" selected="true" /><select idref="V-261450" selected="true" /><select idref="V-261451" selected="true" /><select idref="V-261452" selected="true" /><select idref="V-261453" selected="true" /><select idref="V-261454" selected="true" /><select idref="V-261455" selected="true" /><select idref="V-261456" selected="true" /><select idref="V-261457" selected="true" /><select idref="V-261458" selected="true" /><select idref="V-261459" selected="true" /><select idref="V-261460" selected="true" /><select idref="V-261461" selected="true" /><select idref="V-261462" selected="true" /><select idref="V-261463" selected="true" /><select idref="V-261464" selected="true" /><select idref="V-261465" selected="true" /><select idref="V-261466" selected="true" /><select idref="V-261467" selected="true" /><select idref="V-261468" selected="true" /><select idref="V-261469" selected="true" /><select idref="V-261470" selected="true" /><select idref="V-261471" selected="true" /><select idref="V-261472" selected="true" /><select idref="V-261473" selected="true" /></Profile><Profile id="MAC-3_Sensitive"><title>III - Administrative Sensitive</title><description>&lt;ProfileDescription&gt;&lt;/ProfileDescription&gt;</description><select idref="V-261263" selected="true" /><select idref="V-261264" selected="true" /><select idref="V-261265" selected="true" /><select idref="V-261266" selected="true" /><select idref="V-261267" selected="true" /><select idref="V-261268" selected="true" /><select idref="V-261269" selected="true" /><select idref="V-261270" selected="true" /><select idref="V-261271" selected="true" /><select idref="V-261272" selected="true" /><select idref="V-261273" selected="true" /><select idref="V-261274" selected="true" /><select idref="V-261275" selected="true" /><select idref="V-261276" selected="true" /><select idref="V-261277" selected="true" /><select idref="V-261278" selected="true" /><select idref="V-261279" selected="true" /><select idref="V-261280" selected="true" /><select idref="V-261281" selected="true" /><select idref="V-261282" selected="true" /><select idref="V-261283" selected="true" /><select idref="V-261284" selected="true" /><select idref="V-261285" selected="true" /><select idref="V-261286" selected="true" /><select idref="V-261287" selected="true" /><select idref="V-261288" selected="true" /><select idref="V-261289" selected="true" /><select idref="V-261290" selected="true" /><select idref="V-261291" selected="true" /><select idref="V-261292" selected="true" /><select idref="V-261293" selected="true" /><select idref="V-261294" selected="true" /><select idref="V-261295" selected="true" /><select idref="V-261296" selected="true" /><select idref="V-261297" selected="true" /><select idref="V-261298" selected="true" /><select idref="V-261299" selected="true" /><select idref="V-261300" selected="true" /><select idref="V-261301" selected="true" /><select idref="V-261302" selected="true" /><select idref="V-261303" selected="true" /><select idref="V-261304" selected="true" /><select idref="V-261305" selected="true" /><select idref="V-261306" selected="true" /><select idref="V-261307" selected="true" /><select idref="V-261308" selected="true" /><select idref="V-261309" selected="true" /><select idref="V-261310" selected="true" /><select idref="V-261311" selected="true" /><select idref="V-261312" selected="true" /><select idref="V-261313" selected="true" /><select idref="V-261314" selected="true" /><select idref="V-261315" selected="true" /><select idref="V-261316" selected="true" /><select idref="V-261317" selected="true" /><select idref="V-261318" selected="true" /><select idref="V-261319" selected="true" /><select idref="V-261320" selected="true" /><select idref="V-261321" selected="true" /><select idref="V-261322" selected="true" /><select idref="V-261323" selected="true" /><select idref="V-261324" selected="true" /><select idref="V-261325" selected="true" /><select idref="V-261326" selected="true" /><select idref="V-261327" selected="true" /><select idref="V-261328" selected="true" /><select idref="V-261329" selected="true" /><select idref="V-261330" selected="true" /><select idref="V-261331" selected="true" /><select idref="V-261332" selected="true" /><select idref="V-261333" selected="true" /><select idref="V-261334" selected="true" /><select idref="V-261335" selected="true" /><select idref="V-261336" selected="true" /><select idref="V-261337" selected="true" /><select idref="V-261338" selected="true" /><select idref="V-261339" selected="true" /><select idref="V-261340" selected="true" /><select idref="V-261341" selected="true" /><select idref="V-261342" selected="true" /><select idref="V-261343" selected="true" /><select idref="V-261344" selected="true" /><select idref="V-261345" selected="true" /><select idref="V-261346" selected="true" /><select idref="V-261347" selected="true" /><select idref="V-261348" selected="true" /><select idref="V-261349" selected="true" /><select idref="V-261350" selected="true" /><select idref="V-261351" selected="true" /><select idref="V-261352" selected="true" /><select idref="V-261353" selected="true" /><select idref="V-261354" selected="true" /><select idref="V-261355" selected="true" /><select idref="V-261356" selected="true" /><select idref="V-261357" selected="true" /><select idref="V-261358" selected="true" /><select idref="V-261359" selected="true" /><select idref="V-261360" selected="true" /><select idref="V-261361" selected="true" /><select idref="V-261363" selected="true" /><select idref="V-261364" selected="true" /><select idref="V-261365" selected="true" /><select idref="V-261367" selected="true" /><select idref="V-261368" selected="true" /><select idref="V-261369" selected="true" /><select idref="V-261370" selected="true" /><select idref="V-261371" selected="true" /><select idref="V-261372" selected="true" /><select idref="V-261373" selected="true" /><select idref="V-261374" selected="true" /><select idref="V-261375" selected="true" /><select idref="V-261376" selected="true" /><select idref="V-261377" selected="true" /><select idref="V-261378" selected="true" /><select idref="V-261379" selected="true" /><select idref="V-261380" selected="true" /><select idref="V-261381" selected="true" /><select idref="V-261382" selected="true" /><select idref="V-261383" selected="true" /><select idref="V-261384" selected="true" /><select idref="V-261385" selected="true" /><select idref="V-261386" selected="true" /><select idref="V-261387" selected="true" /><select idref="V-261388" selected="true" /><select idref="V-261389" selected="true" /><select idref="V-261390" selected="true" /><select idref="V-261391" selected="true" /><select idref="V-261392" selected="true" /><select idref="V-261393" selected="true" /><select idref="V-261394" selected="true" /><select idref="V-261395" selected="true" /><select idref="V-261396" selected="true" /><select idref="V-261397" selected="true" /><select idref="V-261398" selected="true" /><select idref="V-261399" selected="true" /><select idref="V-261400" selected="true" /><select idref="V-261401" selected="true" /><select idref="V-261402" selected="true" /><select idref="V-261403" selected="true" /><select idref="V-261404" selected="true" /><select idref="V-261405" selected="true" /><select idref="V-261406" selected="true" /><select idref="V-261407" selected="true" /><select idref="V-261408" selected="true" /><select idref="V-261409" selected="true" /><select idref="V-261410" selected="true" /><select idref="V-261411" selected="true" /><select idref="V-261412" selected="true" /><select idref="V-261413" selected="true" /><select idref="V-261414" selected="true" /><select idref="V-261415" selected="true" /><select idref="V-261416" selected="true" /><select idref="V-261417" selected="true" /><select idref="V-261418" selected="true" /><select idref="V-261419" selected="true" /><select idref="V-261420" selected="true" /><select idref="V-261421" selected="true" /><select idref="V-261422" selected="true" /><select idref="V-261423" selected="true" /><select idref="V-261424" selected="true" /><select idref="V-261425" selected="true" /><select idref="V-261426" selected="true" /><select idref="V-261427" selected="true" /><select idref="V-261428" selected="true" /><select idref="V-261429" selected="true" /><select idref="V-261430" selected="true" /><select idref="V-261431" selected="true" /><select idref="V-261432" selected="true" /><select idref="V-261433" selected="true" /><select idref="V-261434" selected="true" /><select idref="V-261435" selected="true" /><select idref="V-261436" selected="true" /><select idref="V-261437" selected="true" /><select idref="V-261438" selected="true" /><select idref="V-261439" selected="true" /><select idref="V-261440" selected="true" /><select idref="V-261441" selected="true" /><select idref="V-261442" selected="true" /><select idref="V-261443" selected="true" /><select idref="V-261444" selected="true" /><select idref="V-261445" selected="true" /><select idref="V-261446" selected="true" /><select idref="V-261447" selected="true" /><select idref="V-261448" selected="true" /><select idref="V-261449" selected="true" /><select idref="V-261450" selected="true" /><select idref="V-261451" selected="true" /><select idref="V-261452" selected="true" /><select idref="V-261453" selected="true" /><select idref="V-261454" selected="true" /><select idref="V-261455" selected="true" /><select idref="V-261456" selected="true" /><select idref="V-261457" selected="true" /><select idref="V-261458" selected="true" /><select idref="V-261459" selected="true" /><select idref="V-261460" selected="true" /><select idref="V-261461" selected="true" /><select idref="V-261462" selected="true" /><select idref="V-261463" selected="true" /><select idref="V-261464" selected="true" /><select idref="V-261465" selected="true" /><select idref="V-261466" selected="true" /><select idref="V-261467" selected="true" /><select idref="V-261468" selected="true" /><select idref="V-261469" selected="true" /><select idref="V-261470" selected="true" /><select idref="V-261471" selected="true" /><select idref="V-261472" selected="true" /><select idref="V-261473" selected="true" /></Profile><Group id="V-261263"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-261263r1155781_rule" weight="10.0" severity="high"><version>SLEM-05-211010</version><title>SLEM 5 must be a vendor-supported release.</title><description>&lt;VulnDiscussion&gt;A SLEM 5 release is considered supported if the vendor continues to provide security patches for the product. With an unsupported release, it will not be possible to resolve security issues discovered in the system software.
 
-If the system requires Long-Term Service Pack Support (LTSS), obtain the correct LTSS subscription for the system.</fixtext><fix id="F-64900r996825_fix" /><check system="C-64992r995654_chk"><check-content-ref href="SUSE_Linux_Enterprise_Micro_(SLEM)_5_STIG.xml" name="M" /><check-content>Verify that the version of SLEM 5 is vendor supported with the following command:
+End Of Life dates for SUSE Linux Micro releases are as follows:
+Service Pack Release	Release Date	General Support Ends
+SUSE Linux Micro 5.0	30 Mar 2021		31 Mar 2022
+SUSE Linux Micro 5.1	26 Oct 2021		31 Oct 2025
+SUSE Linux Micro 5.2	14 Apr 2022		30 Apr 2026
+SUSE Linux Micro 5.3	25 Oct 2022		30 Oct 2026
+SUSE Linux Micro 5.4	20 Apr 2023		30 Apr 2027
+SUSE Linux Micro 5.5	12 Oct 2023		31 Oct 2027
+SUSE Linux Micro 6.0	06 Jun 2024		30 Jun 2028
+SUSE Linux Micro 6.1	26 Nov 2024		30 Nov 2028&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Micro (SLEM) 5</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Micro (SLEM) 5</dc:subject><dc:identifier>5596</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-64900r996825_fix">Upgrade SLEM 5 to a version supported by the vendor. If the system is not registered with the SUSE Customer Center, register the system against the correct subscription.
+
+If the system requires Long-Term Service Pack Support (LTSS), obtain the correct LTSS subscription for the system.</fixtext><fix id="F-64900r996825_fix" /><check system="C-64992r1155780_chk"><check-content-ref href="SUSE_Linux_Enterprise_Micro_(SLEM)_5_STIG.xml" name="M" /><check-content>Verify the version of SLEM 5 is vendor supported with the following command:
 
      &gt; cat /etc/os-release
      NAME="SLE Micro"
-     VERSION="5.2"
+     VERSION="5.5"
      ...
 
 If the installed version of SLEM 5 is not supported, this is a finding.</check-content></check></Rule></Group><Group id="V-261264"><title>SRG-OS-000191-GPOS-00080</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-261264r995659_rule" weight="10.0" severity="medium"><version>SLEM-05-211015</version><title>SLEM 5 must implement an endpoint security tool.</title><description>&lt;VulnDiscussion&gt;Adding endpoint security tools can provide the capability to automatically take actions in response to malicious behavior, which can provide additional agility in reacting to network threats. These tools also often include a reporting capability to provide network awareness of the system, which may not otherwise exist in an organization's systems management regime.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Micro (SLEM) 5</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Micro (SLEM) 5</dc:subject><dc:identifier>5596</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001233</ident><fixtext fixref="F-64901r995658_fix">Install and enable an endpoint security tool.</fixtext><fix id="F-64901r995658_fix" /><check system="C-64993r995657_chk"><check-content-ref href="SUSE_Linux_Enterprise_Micro_(SLEM)_5_STIG.xml" name="M" /><check-content>Verify that SLEM 5 has implemented an endpoint security tool.
@@ -79,7 +90,7 @@ Then, reload the daemon to take effect:
           Loaded: masked (Reason: Unit ctrl-alt-del.target is masked.)
           Active: inactive (dead)
 
-If ctrl-alt-del.target is not masked, this is a finding.</check-content></check></Rule></Group><Group id="V-261267"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-261267r996295_rule" weight="10.0" severity="high"><version>SLEM-05-212010</version><title>SLEM 5 with a basic input/output system (BIOS) must require authentication upon booting into single-user and maintenance modes.</title><description>&lt;VulnDiscussion&gt;To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DOD-approved PKIs, all DOD systems (e.g., web servers and web portals) must be properly configured to incorporate access control methods that do not rely solely on the possession of a certificate for access. Successful authentication must not automatically give an entity access to an asset or security boundary. Authorization procedures and controls must be implemented to ensure each authenticated entity also has a validated and current authorization. Authorization is the process of determining whether an entity, once authenticated, is permitted to access a specific asset. Information systems use access control policies and enforcement mechanisms to implement this requirement.
+If ctrl-alt-del.target is not masked, this is a finding.</check-content></check></Rule></Group><Group id="V-261267"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-261267r1137691_rule" weight="10.0" severity="high"><version>SLEM-05-212010</version><title>SLEM 5 with a basic input/output system (BIOS) must require authentication upon booting into single-user and maintenance modes.</title><description>&lt;VulnDiscussion&gt;To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DOD-approved PKIs, all DOD systems (e.g., web servers and web portals) must be properly configured to incorporate access control methods that do not rely solely on the possession of a certificate for access. Successful authentication must not automatically give an entity access to an asset or security boundary. Authorization procedures and controls must be implemented to ensure each authenticated entity also has a validated and current authorization. Authorization is the process of determining whether an entity, once authenticated, is permitted to access a specific asset. Information systems use access control policies and enforcement mechanisms to implement this requirement.
 
 Access control policies include identity-based policies, role-based policies, and attribute-based policies. Access enforcement mechanisms include access control lists, access control matrices, and cryptography. These policies and mechanisms must be employed by the application to control access between users (or processes acting on behalf of users) and objects (e.g., devices, files, records, processes, programs, and domains) in the information system.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Micro (SLEM) 5</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Micro (SLEM) 5</dc:subject><dc:identifier>5596</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-64904r996294_fix">Note: If the system does not use a BIOS, this requirement is not applicable.
 
@@ -108,7 +119,7 @@ Verify that SLEM 5 has set an encrypted root password with the following command
      &gt; sudo cat /boot/grub2/grub.cfg | grep -i password 
      password_pbkdf2 root grub.pbkdf2.sha512.10000.03255F190F0E2F7B4F0D1C3216012309162F022A7A636771
 
-If the root password entry does not begin with "password_pbkdf2", this is a finding.</check-content></check></Rule></Group><Group id="V-261268"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-261268r996298_rule" weight="10.0" severity="high"><version>SLEM-05-212015</version><title>SLEM 5 with Unified Extensible Firmware Interface (UEFI) implemented must require authentication upon booting into single-user mode and maintenance.</title><description>&lt;VulnDiscussion&gt;If the system allows a user to boot into single-user or maintenance mode without authentication, any user that invokes single-user or maintenance mode is granted privileged access to all system information.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Micro (SLEM) 5</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Micro (SLEM) 5</dc:subject><dc:identifier>5596</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-64905r996297_fix">Note: If the system does not use UEFI, this requirement is not applicable.
+If the root password entry does not begin with "password_pbkdf2", this is a finding.</check-content></check></Rule></Group><Group id="V-261268"><title>SRG-OS-000080-GPOS-00048</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-261268r1137691_rule" weight="10.0" severity="high"><version>SLEM-05-212015</version><title>SLEM 5 with Unified Extensible Firmware Interface (UEFI) implemented must require authentication upon booting into single-user mode and maintenance.</title><description>&lt;VulnDiscussion&gt;If the system allows a user to boot into single-user or maintenance mode without authentication, any user that invokes single-user or maintenance mode is granted privileged access to all system information.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Micro (SLEM) 5</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Micro (SLEM) 5</dc:subject><dc:identifier>5596</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000213</ident><fixtext fixref="F-64905r996297_fix">Note: If the system does not use UEFI, this requirement is not applicable.
 
 Configure SLEM 5 to encrypt the boot password.
 
@@ -135,7 +146,7 @@ Verify that SLEM 5 has set an encrypted root password with the following command
      &gt; sudo cat /boot/efi/EFI/BOOT/grub.cfg | grep -i password 
      password_pbkdf2 root grub.pbkdf2.sha512.10000.03255F190F0E2F7B4F0D1C3216012309162F022A7A636771
 
-If the root password entry does not begin with "password_pbkdf2", this is a finding.</check-content></check></Rule></Group><Group id="V-261269"><title>SRG-OS-000138-GPOS-00069</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-261269r996301_rule" weight="10.0" severity="medium"><version>SLEM-05-213010</version><title>SLEM 5 must restrict access to the kernel message buffer.</title><description>&lt;VulnDiscussion&gt;Restricting access to the kernel message buffer limits access only to root. This prevents attackers from gaining additional system information as a nonprivileged user.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Micro (SLEM) 5</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Micro (SLEM) 5</dc:subject><dc:identifier>5596</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001090</ident><fixtext fixref="F-64906r996300_fix">Configure SLEM 5 to restrict access to the kernel message buffer.
+If the root password entry does not begin with "password_pbkdf2", this is a finding.</check-content></check></Rule></Group><Group id="V-261269"><title>SRG-OS-000138-GPOS-00069</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-261269r1137695_rule" weight="10.0" severity="medium"><version>SLEM-05-213010</version><title>SLEM 5 must restrict access to the kernel message buffer.</title><description>&lt;VulnDiscussion&gt;Restricting access to the kernel message buffer limits access only to root. This prevents attackers from gaining additional system information as a nonprivileged user.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Micro (SLEM) 5</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Micro (SLEM) 5</dc:subject><dc:identifier>5596</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001090</ident><fixtext fixref="F-64906r996300_fix">Configure SLEM 5 to restrict access to the kernel message buffer.
 
 Set the system to the required kernel parameter by adding or modifying the following line in /etc/sysctl.conf or a config file in the /etc/sysctl.d/ directory:
 
@@ -387,15 +398,13 @@ Print the currently active file system mount options of the file system(s) that
 
 If a file system containing user home directories is not mounted with the FSTYPE OPTION nosuid, this is a finding.
 
-Note: If a separate file system has not been created for the user home directories (user home directories are mounted under "/"), this is not a finding as the "nosuid" option cannot be used on the "/" system.</check-content></check></Rule></Group><Group id="V-261286"><title>SRG-OS-000114-GPOS-00059</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-261286r996338_rule" weight="10.0" severity="medium"><version>SLEM-05-231050</version><title>SLEM 5 must disable the file system automounter unless required.</title><description>&lt;VulnDiscussion&gt;Automatically mounting file systems permits easy introduction of unknown devices, thereby facilitating malicious activity.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Micro (SLEM) 5</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Micro (SLEM) 5</dc:subject><dc:identifier>5596</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000778</ident><fixtext fixref="F-64923r996337_fix">Configure SLEM 5 to disable the ability to automount devices.
+Note: If a separate file system has not been created for the user home directories (user home directories are mounted under "/"), this is not a finding as the "nosuid" option cannot be used on the "/" system.</check-content></check></Rule></Group><Group id="V-261286"><title>SRG-OS-000114-GPOS-00059</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-261286r1155779_rule" weight="10.0" severity="medium"><version>SLEM-05-231050</version><title>SLEM 5 must disable the file system automounter.</title><description>&lt;VulnDiscussion&gt;Automatically mounting file systems permits easy introduction of unknown devices, thereby facilitating malicious activity.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Micro (SLEM) 5</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Micro (SLEM) 5</dc:subject><dc:identifier>5596</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000778</ident><fixtext fixref="F-64923r1155778_fix">Configure SLEM 5 to disable the ability to automount devices.
 
 Turn off the automount service with the following command:
 
      &gt; sudo systemctl stop autofs
 
-     &gt; sudo systemctl disable autofs
-
-If "autofs" is required for Network File System (NFS), it must be documented with the ISSO.</fixtext><fix id="F-64923r996337_fix" /><check system="C-65015r996336_chk"><check-content-ref href="SUSE_Linux_Enterprise_Micro_(SLEM)_5_STIG.xml" name="M" /><check-content>Verify SLEM 5 disables the ability to automount devices.
+     &gt; sudo systemctl disable autofs</fixtext><fix id="F-64923r1155778_fix" /><check system="C-65015r1155777_chk"><check-content-ref href="SUSE_Linux_Enterprise_Micro_(SLEM)_5_STIG.xml" name="M" /><check-content>Verify SLEM 5 disables the ability to automount devices.
 
 Verify the automounter service is installed with the following command:
 
@@ -408,7 +417,7 @@ If it is installed, verify the automounter service is active with the following
           Loaded: loaded (/usr/lib/systemd/system/autofs.service; disabled)
           Active: inactive (dead)
 
-If the "autofs" status is set to "active" and is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.</check-content></check></Rule></Group><Group id="V-261287"><title>SRG-OS-000259-GPOS-00100</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-261287r996341_rule" weight="10.0" severity="medium"><version>SLEM-05-232010</version><title>SLEM 5 must have directories that contain system commands set to a mode of 755 or less permissive.</title><description>&lt;VulnDiscussion&gt;If SLEM 5 were to allow any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
+If the "autofs" status is set to "active" this is a finding.</check-content></check></Rule></Group><Group id="V-261287"><title>SRG-OS-000259-GPOS-00100</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-261287r996341_rule" weight="10.0" severity="medium"><version>SLEM-05-232010</version><title>SLEM 5 must have directories that contain system commands set to a mode of 755 or less permissive.</title><description>&lt;VulnDiscussion&gt;If SLEM 5 were to allow any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.
 
 This requirement applies to SLEM 5 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs which execute with escalated privileges. Only qualified and authorized individuals must be allowed to obtain access to information system components for purposes of initiating changes, including upgrades and modifications.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Micro (SLEM) 5</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Micro (SLEM) 5</dc:subject><dc:identifier>5596</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-001499</ident><fixtext fixref="F-64924r996340_fix">Configure the system commands to be protected from unauthorized access. Run the following command:
 
@@ -643,7 +652,7 @@ The only authorized public directories are those temporary directories supplied
      drwxrwxrwt. 2 root root 220 Aug 26 13:23 /dev/shm
      drwxrwxrwt. 14 root root 4096 Aug 26 13:29 /tmp
 
-If any world-writable directories are not owned by root, sys, bin, or an application group associated with the directory, this is a finding.</check-content></check></Rule></Group><Group id="V-261307"><title>SRG-OS-000138-GPOS-00069</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-261307r996392_rule" weight="10.0" severity="medium"><version>SLEM-05-232110</version><title>The sticky bit must be set on all SLEM 5 world-writable directories.</title><description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, and hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
+If any world-writable directories are not owned by root, sys, bin, or an application group associated with the directory, this is a finding.</check-content></check></Rule></Group><Group id="V-261307"><title>SRG-OS-000138-GPOS-00069</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-261307r1137695_rule" weight="10.0" severity="medium"><version>SLEM-05-232110</version><title>The sticky bit must be set on all SLEM 5 world-writable directories.</title><description>&lt;VulnDiscussion&gt;Preventing unauthorized information transfers mitigates the risk of information, including encrypted representations of information, produced by the actions of prior users/roles (or the actions of processes acting on behalf of prior users/roles) from being available to any current users/roles (or current processes) that obtain access to shared system resources (e.g., registers, main memory, and hard disks) after those resources have been released back to information systems. The control of information in shared resources is also commonly referred to as object reuse and residual information protection.
 
 This requirement generally applies to the design of an information technology product, but it can also apply to the configuration of particular information system components that are, or use, such products. This can be verified by acceptance/validation processes in DOD or other government agencies.
 
@@ -1422,16 +1431,7 @@ Edit the file "/etc/passwd" and provide each interactive user account that has a
 
      &gt; awk -F ":" 'list[$3]++{print $1, $3}' /etc/passwd
 
-If output is produced, this is a finding.</check-content></check></Rule></Group><Group id="V-261362"><title>SRG-OS-000480-GPOS-00227</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-261362r996533_rule" weight="10.0" severity="medium"><version>SLEM-05-412010</version><title>SLEM 5 must display the date and time of the last successful account logon upon logon.</title><description>&lt;VulnDiscussion&gt;Providing users with feedback on when account accesses last occurred facilitates user recognition and reporting of unauthorized account use.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/FalseNegatives&gt;&lt;Documentable&gt;false&lt;/Documentable&gt;&lt;Mitigations&gt;&lt;/Mitigations&gt;&lt;SeverityOverrideGuidance&gt;&lt;/SeverityOverrideGuidance&gt;&lt;PotentialImpacts&gt;&lt;/PotentialImpacts&gt;&lt;ThirdPartyTools&gt;&lt;/ThirdPartyTools&gt;&lt;MitigationControl&gt;&lt;/MitigationControl&gt;&lt;Responsibility&gt;&lt;/Responsibility&gt;&lt;IAControls&gt;&lt;/IAControls&gt;</description><reference><dc:title>DPMS Target SUSE Linux Enterprise Micro (SLEM) 5</dc:title><dc:publisher>DISA</dc:publisher><dc:type>DPMS Target</dc:type><dc:subject>SUSE Linux Enterprise Micro (SLEM) 5</dc:subject><dc:identifier>5596</dc:identifier></reference><ident system="http://cyber.mil/cci">CCI-000366</ident><fixtext fixref="F-64999r996532_fix">Configure SLEM 5 to provide users with feedback on when account accesses last occurred by setting the required configuration options in "/etc/pam.d/login".
-
-Add the following line to the top of "/etc/pam.d/login":
-
-session required pam_lastlog.so showfailed</fixtext><fix id="F-64999r996532_fix" /><check system="C-65091r996531_chk"><check-content-ref href="SUSE_Linux_Enterprise_Micro_(SLEM)_5_STIG.xml" name="M" /><check-content>Verify SLEM 5 users are provided with feedback on when account accesses last occurred with the following command:
-
-     &gt; grep pam_lastlog /etc/pam.d/login
-     session required pam_lastlog.so showfailed 
-
-If "pam_lastlog" is missing from "/etc/pam.d/login" file, the "silent" option is present, the second column value different from "requisite", or the returned line is commented out, this is a finding.</check-content></check></Rule></Group><Group id="V-261363"><title>SRG-OS-000029-GPOS-00010</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-261363r996536_rule" weight="10.0" severity="medium"><version>SLEM-05-412015</version><title>SLEM 5 must initiate a session lock after a 15-minute period of inactivity.</title><description>&lt;VulnDiscussion&gt;A session time-out lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not log out because of the temporary nature of the absence.
+If output is produced, this is a finding.</check-content></check></Rule></Group><Group id="V-261363"><title>SRG-OS-000029-GPOS-00010</title><description>&lt;GroupDescription&gt;&lt;/GroupDescription&gt;</description><Rule id="SV-261363r996536_rule" weight="10.0" severity="medium"><version>SLEM-05-412015</version><title>SLEM 5 must initiate a session lock after a 15-minute period of inactivity.</title><description>&lt;VulnDiscussion&gt;A session time-out lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not log out because of the temporary nature of the absence.
 
 Rather than relying on the users to manually lock their SLEM 5 session prior to vacating the vicinity, SLEM 5 needs to be able to identify when a user's session has idled and take action to initiate the session lock.
 
diff --git a/shared/templates/audit_rules_watch/tests/augenrules_correct.pass.sh b/shared/templates/audit_rules_watch/tests/augenrules_correct.pass.sh
index 5b03c4d941f3..ff32b83145e7 100644
--- a/shared/templates/audit_rules_watch/tests/augenrules_correct.pass.sh
+++ b/shared/templates/audit_rules_watch/tests/augenrules_correct.pass.sh
@@ -1,6 +1,8 @@
 #!/bin/bash
 # packages = audit
 
+{{{ setup_augenrules_environment() }}}
+
 path={{{ PATH }}}
 style={{{ audit_watches_style }}}
 filter_type={{{ FILTER_TYPE }}}
diff --git a/shared/templates/audit_rules_watch/tests/augenrules_correct_extra_permission.pass.sh b/shared/templates/audit_rules_watch/tests/augenrules_correct_extra_permission.pass.sh
index 1dbc7bfc3085..845653165303 100644
--- a/shared/templates/audit_rules_watch/tests/augenrules_correct_extra_permission.pass.sh
+++ b/shared/templates/audit_rules_watch/tests/augenrules_correct_extra_permission.pass.sh
@@ -1,6 +1,8 @@
 #!/bin/bash
 # packages = audit
 
+{{{ setup_augenrules_environment() }}}
+
 path={{{ PATH }}}
 style={{{ audit_watches_style }}}
 filter_type={{{ FILTER_TYPE }}}
diff --git a/shared/templates/audit_rules_watch/tests/augenrules_correct_without_key.pass.sh b/shared/templates/audit_rules_watch/tests/augenrules_correct_without_key.pass.sh
index bdd78b2296df..6726a76bd795 100644
--- a/shared/templates/audit_rules_watch/tests/augenrules_correct_without_key.pass.sh
+++ b/shared/templates/audit_rules_watch/tests/augenrules_correct_without_key.pass.sh
@@ -1,6 +1,8 @@
 #!/bin/bash
 # packages = audit
 
+{{{ setup_augenrules_environment() }}}
+
 path={{{ PATH }}}
 style={{{ audit_watches_style }}}
 filter_type={{{ FILTER_TYPE }}}
diff --git a/shared/templates/audit_rules_watch/tests/augenrules_remove_all_rules.fail.sh b/shared/templates/audit_rules_watch/tests/augenrules_remove_all_rules.fail.sh
index 3fa1b4180dd2..3b1d1a24bd70 100644
--- a/shared/templates/audit_rules_watch/tests/augenrules_remove_all_rules.fail.sh
+++ b/shared/templates/audit_rules_watch/tests/augenrules_remove_all_rules.fail.sh
@@ -1,6 +1,8 @@
 #!/bin/bash
 # packages = audit
 
+{{{ setup_augenrules_environment() }}}
+
 path={{{ PATH }}}
 style={{{ audit_watches_style }}}
 filter_type={{{ FILTER_TYPE }}}
diff --git a/shared/templates/audit_rules_watch/tests/augenrules_wrong_rule.fail.sh b/shared/templates/audit_rules_watch/tests/augenrules_wrong_rule.fail.sh
index 6530b87af549..a0cc8870ed87 100644
--- a/shared/templates/audit_rules_watch/tests/augenrules_wrong_rule.fail.sh
+++ b/shared/templates/audit_rules_watch/tests/augenrules_wrong_rule.fail.sh
@@ -1,6 +1,8 @@
 #!/bin/bash
 # packages = audit
 
+{{{ setup_augenrules_environment() }}}
+
 path={{{ PATH }}}
 style={{{ audit_watches_style }}}
 filter_type={{{ FILTER_TYPE }}}
diff --git a/shared/templates/audit_rules_watch/tests/augenrules_wrong_rule_without_key.fail.sh b/shared/templates/audit_rules_watch/tests/augenrules_wrong_rule_without_key.fail.sh
index fce102beca00..5dad7131b0be 100644
--- a/shared/templates/audit_rules_watch/tests/augenrules_wrong_rule_without_key.fail.sh
+++ b/shared/templates/audit_rules_watch/tests/augenrules_wrong_rule_without_key.fail.sh
@@ -1,6 +1,8 @@
 #!/bin/bash
 # packages = audit
 
+{{{ setup_augenrules_environment() }}}
+
 path={{{ PATH }}}
 style={{{ audit_watches_style }}}
 filter_type={{{ FILTER_TYPE }}}
diff --git a/shared/templates/audit_rules_watch/tests/rules_not_there.fail.sh b/shared/templates/audit_rules_watch/tests/rules_not_there.fail.sh
index 46629244c959..40930c2cdd10 100644
--- a/shared/templates/audit_rules_watch/tests/rules_not_there.fail.sh
+++ b/shared/templates/audit_rules_watch/tests/rules_not_there.fail.sh
@@ -1,6 +1,7 @@
 #!/bin/bash
 # packages = audit
 
+{{{ setup_augenrules_environment() }}}
 
 rm -f /etc/audit/rules.d/*
 > /etc/audit/audit.rules
diff --git a/shared/templates/crypto_sub_policies/ansible.template b/shared/templates/crypto_sub_policies/ansible.template
index 688b681a97bd..7152802d1b50 100644
--- a/shared/templates/crypto_sub_policies/ansible.template
+++ b/shared/templates/crypto_sub_policies/ansible.template
@@ -4,7 +4,18 @@
 # complexity = low
 # disruption = low
 
+-   name: "{{{ rule_title }}} - Set the base crypto policy"
+    ansible.builtin.set_fact:
+        expected_crypto_policy: "{{{ BASE_POLICY }}}"
+
 {{% for sub_policy in SUB_POLICIES %}}
+{{% if "scope" in sub_policy %}}
+-   name: "{{{ rule_title }}} - Check That /etc/crypto-policies/back-ends/{{{ sub_policy.scope }}}.config Exists"
+    ansible.builtin.stat:
+        path: /etc/crypto-policies/back-ends/{{{ sub_policy.scope }}}.config
+    register: crypto_{{{ sub_policy.scope | replace("-", "_") }}}_scope
+{{% endif %}}
+
 -   name: "{{{ rule_title }}} - Create custom crypto policy module {{{ sub_policy.module_name }}}"
     ansible.builtin.lineinfile:
         path: /etc/crypto-policies/policies/modules/{{{ sub_policy.module_name }}}.pmod
@@ -14,6 +25,16 @@
         line: {{{ sub_policy.key }}} = {{{ sub_policy.value }}}
         create: true
         regexp: "{{{ sub_policy.key }}}"
+{{% if "scope" in sub_policy %}}
+    when: crypto_{{{ sub_policy.scope | replace("-", "_") }}}_scope.stat.exists
+{{% endif %}}
+
+-   name: "{{{ rule_title }}} - Update the expected policy"
+    ansible.builtin.set_fact:
+        expected_crypto_policy: "{{ expected_crypto_policy + ':{{{ sub_policy.module_name }}}' }}"
+{{% if "scope" in sub_policy %}}
+    when: crypto_{{{ sub_policy.scope | replace("-", "_") }}}_scope.stat.exists
+{{% endif %}}
 {{% endfor %}}
 
 -   name: "{{{ rule_title }}} - Check current crypto policy"
@@ -24,5 +45,5 @@
     check_mode: false
 
 -   name: "{{{ rule_title }}} - Update crypto-policies"
-    ansible.builtin.command: update-crypto-policies --set {{{ BASE_POLICY }}}:{{{ CONFIGURE_CRYPTO_POLICY_MODULES }}}
-    when: current_crypto_policy.stdout.strip() != "{{{ BASE_POLICY }}}:{{{ CONFIGURE_CRYPTO_POLICY_MODULES }}}"
+    ansible.builtin.command: update-crypto-policies --set {{ expected_crypto_policy }}
+    when: current_crypto_policy.stdout.strip() != expected_crypto_policy
diff --git a/shared/templates/crypto_sub_policies/bash.template b/shared/templates/crypto_sub_policies/bash.template
index e8915cb3daf3..685e90e54846 100644
--- a/shared/templates/crypto_sub_policies/bash.template
+++ b/shared/templates/crypto_sub_policies/bash.template
@@ -4,12 +4,22 @@
 # complexity = low
 # disruption = low
 
-{{% for sub_policy in SUB_POLICIES %}}
-{{{ bash_file_contents("/etc/crypto-policies/policies/modules/" ~ sub_policy.module_name ~ ".pmod", sub_policy.key ~ " = " ~ sub_policy.value) }}}
-{{% endfor %}}
+expected_crypto_policy="{{{ BASE_POLICY }}}"
+
+{{% for sub_policy in SUB_POLICIES -%}}
+{{% if "scope" in sub_policy %}}
+# this module is applicable only if {{{ sub_policy.scope }}} scope is available in crypto-policies
+if [[ -f /etc/crypto-policies/back-ends/{{{ sub_policy.scope }}}.config ]] ; then
+{{%- endif %}}
+expected_crypto_policy="${expected_crypto_policy}:{{{ sub_policy.module_name }}}"
+{{{ bash_file_contents("/etc/crypto-policies/policies/modules/" ~ sub_policy.module_name ~ ".pmod", sub_policy.key ~ " = " ~ sub_policy.value) | trim }}}
+{{% if "scope" in sub_policy -%}}
+fi
+{{% endif %}}
+{{%- endfor %}}
 
 current_crypto_policy=$(update-crypto-policies --show)
-expected_crypto_policy="{{{ BASE_POLICY }}}:{{{ CONFIGURE_CRYPTO_POLICY_MODULES }}}"
+
 if [[ "$current_crypto_policy" != "$expected_crypto_policy" ]] ; then
     update-crypto-policies --set "$expected_crypto_policy"
 fi
diff --git a/shared/templates/crypto_sub_policies/oval.template b/shared/templates/crypto_sub_policies/oval.template
index 272ae6ee31df..b45e533287a9 100644
--- a/shared/templates/crypto_sub_policies/oval.template
+++ b/shared/templates/crypto_sub_policies/oval.template
@@ -3,8 +3,18 @@
         {{{ oval_metadata("Ensure that the custom crypto policy module is configured", rule_title=rule_title) }}}
         <criteria operator="AND" comment="Ensure that all of the correct lines are in the file.">
         {{% for sub_policy in SUB_POLICIES %}}
-            <criterion comment="Check that {{{ sub_policy.key }}} is configured in {{{ sub_policy.module_name }}}.pmod"
+            {{% if "scope" in sub_policy %}}
+                <criteria operator="OR" comment="If {{{ sub_policy.scope }}} scope is available then {{{ sub_policy.key }}} must be configured in {{{ sub_policy.module_name }}}.pmod">
+                    <criterion comment="Check that {{{ sub_policy.scope }}} scope is not available" negate="true" test_ref="test_{{{ rule_id }}}_{{{ sub_policy.scope }}}" />
+                    <criteria operator="AND" comment="Check that {{{ sub_policy.scope }}} scope is available AND {{{ sub_policy.key }}} is configured in {{{ sub_policy.module_name }}}.pmod">
+                        <criterion comment="Check that {{{ sub_policy.scope }}} scope is available" test_ref="test_{{{ rule_id }}}_{{{ sub_policy.scope }}}" />
+                        <criterion comment="Check that {{{ sub_policy.key }}} is configured in {{{ sub_policy.module_name }}}.pmod" test_ref="test_{{{ rule_id }}}_{{{ sub_policy.module_name }}}"/>
+                    </criteria>
+                </criteria>
+            {{% else %}}
+                <criterion comment="Check that {{{ sub_policy.key }}} is configured in {{{ sub_policy.module_name }}}.pmod"
                        test_ref="test_{{{ rule_id }}}_{{{ sub_policy.module_name }}}"/>
+            {{% endif %}}
         {{% endfor %}}
         </criteria>
     </definition>
@@ -21,5 +31,14 @@
             <ind:pattern operation="pattern match">^{{{ sub_policy.key }}} = {{{ sub_policy.value | escape_regex }}}$</ind:pattern>
             <ind:instance datatype="int">1</ind:instance>
         </ind:textfilecontent54_object>
+        {{% if "scope" in sub_policy %}}
+            <unix:file_test comment="Check that {{{ sub_policy.scope }}} scope is available" id="test_{{{ rule_id }}}_{{{ sub_policy.scope }}}" check="all" check_existence="all_exist" version="1">
+                <unix:object object_ref="object_{{{ rule_id }}}_{{{ sub_policy.scope }}}" />
+            </unix:file_test>
+
+            <unix:file_object comment="/etc/crypto-policies/back-ends/{{{ sub_policy.scope }}}.config" id="object_{{{ rule_id }}}_{{{ sub_policy.scope }}}" version="1">
+                <unix:filepath>/etc/crypto-policies/back-ends/{{{ sub_policy.scope }}}.config</unix:filepath>
+            </unix:file_object>
+        {{% endif %}}
         {{% endfor %}}
 </def-group>
diff --git a/shared/templates/crypto_sub_policies/template.py b/shared/templates/crypto_sub_policies/template.py
deleted file mode 100644
index 8e256ae08291..000000000000
--- a/shared/templates/crypto_sub_policies/template.py
+++ /dev/null
@@ -1,3 +0,0 @@
-def preprocess(data, lang):
-    data["configure_crypto_policy_modules"] = ":".join([sub_policy["module_name"] for sub_policy in data["sub_policies"]])
-    return data
diff --git a/shared/templates/file_owner/oval.template b/shared/templates/file_owner/oval.template
index 30d53803c7e0..75a2a491a6be 100644
--- a/shared/templates/file_owner/oval.template
+++ b/shared/templates/file_owner/oval.template
@@ -22,7 +22,7 @@
   {{%- else %}}
   {{%- for own in OWNERS %}}
   <unix:password_object id="object_file_owner{{{ FILEID }}}_{{{ own }}}_uid" version="1">
-    <unix:username operation="pattern match">{{{ own }}}</unix:username>
+    <unix:username operation="equals">{{{ own }}}</unix:username>
   </unix:password_object>
   <local_variable id="var_file_owner{{{ FILEID }}}_{{{ own }}}_uid" comment="Retrieve the uid of {{{ own }}}" datatype="int" version="1">
     <object_component item_field="user_id" object_ref="object_file_owner{{{ FILEID }}}_{{{ own }}}_uid" />
diff --git a/shared/templates/file_owner/tests/incorrect_owner.fail.sh b/shared/templates/file_owner/tests/incorrect_owner.fail.sh
index 4192e8b2b01d..7ec65d4b981b 100644
--- a/shared/templates/file_owner/tests/incorrect_owner.fail.sh
+++ b/shared/templates/file_owner/tests/incorrect_owner.fail.sh
@@ -2,7 +2,10 @@
 {{%- if NO_REMEDIATION %}}
 # remediation = none
 {{%- endif %}}
+
 useradd testuser_123
+
+{{% set OWNERS=UID_OR_NAME.split("|") %}}
 {{%- for own in OWNERS %}}
 id "{{{ own }}}" &>/dev/null || useradd {{{ own }}}
 {{%- endfor %}}
diff --git a/shared/templates/pam_options/ansible.template b/shared/templates/pam_options/ansible.template
index 5308b0625466..8da6a86a3fbc 100644
--- a/shared/templates/pam_options/ansible.template
+++ b/shared/templates/pam_options/ansible.template
@@ -10,13 +10,14 @@
 # updated the Ansible pamd module to do that, we will need to use regexp
 # for now.
 
-
-# declare the XCCDF vars if any
-{{% for arg in ARGUMENTS %}}
-{{% if arg['variable']|length %}}
-- (xccdf-var var_password_pam_{{{ arg['variable'] }}})
+{{% if product == 'sle16' %}}
+- name: Copy default /usr/lib/pam.d/{{ '{{{ PATH }}}' | basename }} to {{{ PATH }}}
+  ansible.builtin.copy:
+    src: /usr/lib/pam.d/{{ '{{{ PATH }}}' | basename }}
+    dest: {{{ PATH }}}
+    force: no
+    mode: '0644'
 {{% endif %}}
-{{% endfor %}}
 
 - name: Set control_flag fact
   ansible.builtin.set_fact:
@@ -33,7 +34,7 @@
     path: {{{ PATH }}}
     line: '{{{ TYPE }}} {{{ CONTROL_FLAG }}} {{{ MODULE }}}'
     state: present
-  when: check_pam_module_result.stdout is defined and '"{{{ MODULE }}}" not in check_pam_module_result.stdout'
+  when: check_pam_module_result is not skipped and check_pam_module_result.stdout is defined and "{{{ MODULE }}}" not in check_pam_module_result.stdout
 
 - name: Ensure '{{{ MODULE }}}' module has conforming control flag
   ansible.builtin.lineinfile:
@@ -41,7 +42,7 @@
     regexp: '^(\s*{{{ TYPE }}}\s+)\S+(\s+{{{ MODULE }}}\s+.*)'
     line: '\g<1>{{{ CONTROL_FLAG }}}\g<2>'
     backrefs: yes
-  when: control_flag|length
+  when: check_pam_module_result is not skipped and control_flag|length
 
 {{% for arg in ARGUMENTS %}}
 # NOTE: if 'remove_argument' is present and set to some value, we assume
@@ -56,13 +57,22 @@
 {{% elif arg['variable']|length %}}
 # NOTE(gyee): if 'var' is used, user is meant to set the argument to a
 # static value
+{{% if arg['variable_name'] %}}
+{{% set pam_variable_name = arg['variable_name'] %}}
+{{% else %}}
+{{% set pam_variable_name = "var_password_pam_" + arg['variable'] %}}
+{{% endif %}}
+{{{ ansible_instantiate_variables(pam_variable_name) }}}
+
+{{% set pam_variable_value = "{{ " + pam_variable_name + " }}" %}}
 
-- name: Ensure "{{{ MODULE }}}" module has argument "{{{ arg['variable'] }}}={{ var_password_pam_{{{ arg['variable'] }}} }}"
+- name: Ensure "{{{ MODULE }}}" module has argument "{{{ arg['variable'] }}}={{{ pam_variable_value }}}"
   ansible.builtin.lineinfile:
     path: {{{ PATH }}}
     regexp: '^(\s*{{{ TYPE }}}\s+{{{ CONTROL_FLAG }}}\s+{{{ MODULE }}}(?:\s+\S+)*\s+{{{ arg['variable'] }}}=)(?:\S+)((\s+\S+)*\s*\\*\s*)$'
-    line: '\g<1>{{ var_password_pam_{{{ arg['variable'] }}} }}\g<2>'
+    line: '\g<1>{{{ pam_variable_value }}}\g<2>'
     backrefs: yes
+  when: check_pam_module_result is not skipped
 
 - name: Check the presence of "{{{ arg['variable'] }}}" argument in "{{{ MODULE }}}" module
   ansible.builtin.shell: |
@@ -74,9 +84,9 @@
   ansible.builtin.lineinfile:
     path: {{{ PATH }}}
     regexp: '^(\s*{{{ TYPE }}}\s+{{{ CONTROL_FLAG }}}\s+{{{ MODULE }}})((\s+\S+)*\s*(\\)*$)'
-    line: '\g<1> {{{ arg['variable'] }}}={{ var_password_pam_{{{ arg['variable'] }}} }}\g<2>'
+    line: '\g<1> {{{ arg['variable'] }}}={{{ pam_variable_value }}}\g<2>'
     backrefs: yes
-  when: check_pam_module_argument_result is not skipped and '"{{{ arg['variable'] }}}" not in check_pam_module_argument_result.stdout'
+  when: check_pam_module_argument_result is not skipped and "{{{ arg['variable'] }}}" not in check_pam_module_argument_result.stdout
 {{% else %}}
 - name: Set argument_value fact
   ansible.builtin.set_fact:
@@ -102,6 +112,6 @@
     regexp: '^(\s*{{{ TYPE }}}\s+{{{ CONTROL_FLAG }}}\s+{{{ MODULE }}})((\s+\S+)*\s*(\\)*$)'
     line: '\g<1> {{{ arg['new_argument'] }}}\g<2>'
     backrefs: yes
-  when: check_pam_module_argument_result is not skipped and '"{{{ arg['argument'] }}}" not in check_pam_module_argument_result.stdout'
+  when: check_pam_module_argument_result is not skipped and "{{{ arg['argument'] }}}" not in check_pam_module_argument_result.stdout
 {{% endif %}}
 {{% endfor %}}
diff --git a/shared/templates/pam_options/bash.template b/shared/templates/pam_options/bash.template
index 49b717c6cb45..a3b4ca92863a 100644
--- a/shared/templates/pam_options/bash.template
+++ b/shared/templates/pam_options/bash.template
@@ -10,10 +10,22 @@ declare -a ARGS=()
 declare -a NEW_ARGS=()
 declare -a DEL_ARGS=()
 
+{{% if product == 'sle16' %}}
+PAM_DEFAULTS_FILE_NAME="/usr/lib/pam.d/$(basename "{{{ PATH }}}")"
+if ! [ -e "{{{ PATH }}}" ] ; then
+    cp "${PAM_DEFAULTS_FILE_NAME}" "{{{ PATH }}}"
+fi
+{{% endif %}}
+
 {{% for arg in ARGUMENTS -%}}
 {{% if arg['variable'] | length -%}}
-{{{ bash_instantiate_variables("var_password_pam_" + arg['variable']) }}}
-VALUES+=("${{{ "var_password_pam_" + arg['variable'] }}}")
+{{% if arg['variable_name'] %}}
+{{% set pam_variable_name = arg['variable_name'] %}}
+{{% else %}}
+{{% set pam_variable_name = "var_password_pam_" + arg['variable'] %}}
+{{% endif %}}
+{{{ bash_instantiate_variables(pam_variable_name) }}}
+VALUES+=("${{{ pam_variable_name }}}")
 VALUE_NAMES+=("{{{ arg['variable'] }}}")
 {{%- else %}}
 VALUES+=("")
diff --git a/shared/templates/pam_options/oval.template b/shared/templates/pam_options/oval.template
index e517a837f463..9751c025adb6 100644
--- a/shared/templates/pam_options/oval.template
+++ b/shared/templates/pam_options/oval.template
@@ -4,22 +4,63 @@
    {{% set MATCH_CONTROL_FLAG = '\S+' %}}
 {{% endif %}}
 
+{{% if product == 'sle16' %}}
+{{% set PAM_VENDOR_FILE = "/usr/lib/pam.d/" + PATH.split('/') | last %}}
+{{% endif %}}
+
 <def-group>
   <definition class="compliance" id="{{{ _RULE_ID }}}" version="3">
     {{{ oval_metadata("Configure PAM module", rule_title=rule_title) }}}
-    <criteria operator="AND" comment="Make sure arguments are properly configured">
-{{% for arg in ARGUMENTS %}}
-{{% if arg['variable']|length %}}
-      <criterion test_ref="test_pam_{{{ TYPE|lower }}}_{{{ MODULE|lower|replace('.so', '') }}}_{{{ arg['variable']|lower }}}" comment="Verify {{{ arg['variable'] }}} is set to the desired state" />
+{{% if product == 'sle16' %}}
+    <criteria comment="PAM options properly configured" operator="OR">
+      <criteria operator="AND" comment="Make sure arguments are properly configured in {{{ PAM_VENDOR_FILE }}}">
+            <criterion comment="test if configuration file {{{ PATH }}} exists for {{{ rule_id }}}" test_ref="test_{{{ rule_id }}}_config_file_exists" negate="true"/>
+        {{% for arg in ARGUMENTS %}}
+        {{% if arg['variable']|length %}}
+            <criterion test_ref="test_pam_vendor_{{{ TYPE|lower }}}_{{{ MODULE|lower|replace('.so', '') }}}_{{{ arg['variable']|lower }}}" comment="Verify {{{ arg['variable'] }}} is set to the desired state" />
+        {{% else %}}
+            <criterion test_ref="test_pam_vendor_{{{ TYPE|lower }}}_{{{ MODULE|lower|replace('.so', '') }}}_{{{ arg['argument']|lower }}}" comment="Verify {{{ arg['argument'] }}} is set to the desired state" />
+        {{% endif %}}
+        {{% endfor %}}
+      </criteria>
+        <criteria operator="AND" comment="Make sure arguments are properly configured in {{{ PATH }}}">
+            {{{ oval_config_file_exists_criterion(PATH, rule_id=rule_id) }}}
+        {{% for arg in ARGUMENTS %}}
+        {{% if arg['variable']|length %}}
+            <criterion test_ref="test_pam_{{{ TYPE|lower }}}_{{{ MODULE|lower|replace('.so', '') }}}_{{{ arg['variable']|lower }}}" comment="Verify {{{ arg['variable'] }}} is set to the desired state" />
+        {{% else %}}
+            <criterion test_ref="test_pam_{{{ TYPE|lower }}}_{{{ MODULE|lower|replace('.so', '') }}}_{{{ arg['argument']|lower }}}" comment="Verify {{{ arg['argument'] }}} is set to the desired state" />
+        {{% endif %}}
+        {{% endfor %}}
+      </criteria>
+    </criteria>
 {{% else %}}
-      <criterion test_ref="test_pam_{{{ TYPE|lower }}}_{{{ MODULE|lower|replace('.so', '') }}}_{{{ arg['argument']|lower }}}" comment="Verify {{{ arg['argument'] }}} is set to the desired state" />
-{{% endif %}}
-{{% endfor %}}
+    <criteria operator="AND" comment="Make sure arguments are properly configured in {{{ PATH }}}">
+    {{% for arg in ARGUMENTS %}}
+    {{% if arg['variable']|length %}}
+        <criterion test_ref="test_pam_{{{ TYPE|lower }}}_{{{ MODULE|lower|replace('.so', '') }}}_{{{ arg['variable']|lower }}}" comment="Verify {{{ arg['variable'] }}} is set to the desired state" />
+    {{% else %}}
+        <criterion test_ref="test_pam_{{{ TYPE|lower }}}_{{{ MODULE|lower|replace('.so', '') }}}_{{{ arg['argument']|lower }}}" comment="Verify {{{ arg['argument'] }}} is set to the desired state" />
+    {{% endif %}}
+    {{% endfor %}}
     </criteria>
+{{% endif %}}
   </definition>
 
+{{% if product == 'sle16' %}}
+{{{ oval_config_file_exists_test(PATH, rule_id=rule_id) }}}
+{{{ oval_config_file_exists_object(PATH, rule_id=rule_id) }}}
+{{% endif %}}
+
 {{% for arg in ARGUMENTS %}}
 {{% if arg['variable']|length %}}
+{{% if arg['variable_name'] %}}
+{{% set pam_variable_name = arg['variable_name'] %}}
+{{% else %}}
+{{% set pam_variable_name = "var_password_pam_" + arg['variable'] %}}
+{{% endif %}}
+
+
   <ind:textfilecontent54_test id="test_pam_{{{ TYPE|lower }}}_{{{ MODULE|lower|replace('.so', '') }}}_{{{ arg['variable']|lower }}}"
   check="all"
   comment="Verify {{{ arg['variable'] }}} configuation of {{{ MODULE }}}" version="1">
@@ -29,15 +70,33 @@
 
   <ind:textfilecontent54_object id="object_pam_{{{ TYPE|lower }}}_{{{ MODULE|lower|replace('.so', '') }}}_{{{ arg['variable']|lower }}}" comment="Check {{{ arg['variable'] }}} configuration of PAM {{{ MODULE }}} module" version="1">
     <ind:filepath>{{{ PATH }}}</ind:filepath>
-    <ind:pattern operation="pattern match">^\s*{{{ TYPE }}}\s+{{{ MATCH_CONTROL_FLAG }}}\s+{{{ MODULE }}}.*\s{{{ arg['variable'] }}}=(-?\d+)(?:\s+.*)?</ind:pattern>
+    <ind:pattern operation="pattern match">^\s*{{{ TYPE }}}\s+{{{ MATCH_CONTROL_FLAG }}}\s+{{{ MODULE }}}.*\s{{{ arg['variable'] }}}=(-?[a-zA-Z0-9]+)(?:\s+.*)?</ind:pattern>
     <ind:instance datatype="int" operation="greater than or equal">1</ind:instance>
   </ind:textfilecontent54_object>
 
   <ind:textfilecontent54_state id="state_pam_{{{ TYPE|lower }}}_{{{ MODULE|lower|replace('.so', '') }}}_{{{ arg['variable']|lower }}}" version="3">
-    <ind:subexpression datatype="int" operation="{{{ arg['operation'] }}}" var_ref="var_password_pam_{{{ arg['variable'] }}}" />
+    <ind:subexpression datatype={{% if arg['datatype'] %}}"{{{ arg['datatype'] }}}"{{% else %}}"int"{{% endif %}}
+     operation="{{{ arg['operation'] }}}" var_ref="{{{ pam_variable_name }}}" />
   </ind:textfilecontent54_state>
 
-  <external_variable comment="PAM external variable var_password_pam_{{{ arg['variable'] }}}" datatype="int" id="var_password_pam_{{{ arg['variable'] }}}" version="1" />
+  <external_variable comment="PAM external variable {{{ pam_variable_name }}}" datatype="int" id="{{{ pam_variable_name }}}" version="1" />
+
+{{% if product == 'sle16' %}}
+  <ind:textfilecontent54_test id="test_pam_vendor_{{{ TYPE|lower }}}_{{{ MODULE|lower|replace('.so', '') }}}_{{{ arg['variable']|lower }}}"
+  check="all"
+  comment="Verify {{{ arg['variable'] }}} configuation of {{{ MODULE }}}" version="1">
+    <ind:object object_ref="object_pam_vendor_{{{ TYPE|lower }}}_{{{ MODULE|lower|replace('.so', '') }}}_{{{ arg['variable']|lower }}}" />
+    <ind:state state_ref="state_pam_{{{ TYPE|lower }}}_{{{ MODULE|lower|replace('.so', '') }}}_{{{ arg['variable']|lower }}}" />
+  </ind:textfilecontent54_test>
+
+  <ind:textfilecontent54_object id="object_pam_vendor_{{{ TYPE|lower }}}_{{{ MODULE|lower|replace('.so', '') }}}_{{{ arg['variable']|lower }}}" comment="Check {{{ arg['variable'] }}} configuration of PAM {{{ MODULE }}} module" version="1">
+    <ind:filepath>{{{ PAM_VENDOR_FILE }}}</ind:filepath>
+    <ind:pattern operation="pattern match">^\s*{{{ TYPE }}}\s+{{{ MATCH_CONTROL_FLAG }}}\s+{{{ MODULE }}}.*\s{{{ arg['variable'] }}}=(-?[a-zA-Z0-9]+)(?:\s+.*)?</ind:pattern>
+    <ind:instance datatype="int" operation="greater than or equal">1</ind:instance>
+  </ind:textfilecontent54_object>
+{{% endif %}}
+
+
 {{% else %}}
   <ind:textfilecontent54_test id="test_pam_{{{ TYPE|lower }}}_{{{ MODULE|lower|replace('.so', '') }}}_{{{ arg['argument']|lower }}}"
   check="all" check_existence={{% if arg['remove_argument']|length %}}"none_exist"{{% else %}}"all_exist"{{% endif %}}
@@ -54,6 +113,24 @@
 {{% endif %}}
     <ind:instance datatype="int">1</ind:instance>
   </ind:textfilecontent54_object>
+
+{{% if product == 'sle16' %}}
+  <ind:textfilecontent54_test id="test_pam_vendor_{{{ TYPE|lower }}}_{{{ MODULE|lower|replace('.so', '') }}}_{{{ arg['argument']|lower }}}"
+  check="all" check_existence={{% if arg['remove_argument']|length %}}"none_exist"{{% else %}}"all_exist"{{% endif %}}
+  comment="Verify {{{ arg['argument'] }}} configuation of {{{ MODULE }}}" version="1">
+    <ind:object object_ref="object_pam_vendor_{{{ TYPE|lower }}}_{{{ MODULE|lower|replace('.so', '') }}}_{{{ arg['argument']|lower }}}" />
+  </ind:textfilecontent54_test>
+
+  <ind:textfilecontent54_object id="object_pam_vendor_{{{ TYPE|lower }}}_{{{ MODULE|lower|replace('.so', '') }}}_{{{ arg['argument']|lower }}}" comment="Check {{{ arg['argument'] }}} configuration of PAM {{{ MODULE }}} module" version="1">
+    <ind:filepath>{{{ PAM_VENDOR_FILE }}}</ind:filepath>
+{{% if arg['argument_match']|length %}}
+    <ind:pattern operation="pattern match">^\s*{{{ TYPE }}}(?:(?!\n)\s)+{{{ MATCH_CONTROL_FLAG }}}(?:(?!\n)\s)+{{{ MODULE }}}((?!\n)\s[^\n]+)?(?!\n)\s+{{{ arg['argument'] }}}={{{ arg['argument_match'] }}}((\s+\S+)*\s*\\*\s*)$</ind:pattern>
+{{% else %}}
+    <ind:pattern operation="pattern match">^\s*{{{ TYPE }}}(?:(?!\n)\s)+{{{ MATCH_CONTROL_FLAG }}}(?:(?!\n)\s)+{{{ MODULE }}}((?!\n)\s[^\n]+)?(?!\n)\s+{{{ arg['argument'] }}}((\s+\S+)*\s*\\*\s*)$</ind:pattern>
+{{% endif %}}
+    <ind:instance datatype="int">1</ind:instance>
+  </ind:textfilecontent54_object>
+{{% endif %}}
 {{% endif %}}
 {{% endfor %}}
 </def-group>
diff --git a/shared/templates/sshd_lineinfile/ansible.template b/shared/templates/sshd_lineinfile/ansible.template
index a5a1f2302d7b..0739450cdf24 100644
--- a/shared/templates/sshd_lineinfile/ansible.template
+++ b/shared/templates/sshd_lineinfile/ansible.template
@@ -6,19 +6,44 @@
 
 {{% if XCCDF_VARIABLE %}}
 {{{ ansible_instantiate_variables(XCCDF_VARIABLE) }}}
-{{{
-    ansible_sshd_set(
-        parameter=PARAMETER,
-        value="{{ "+XCCDF_VARIABLE+" }}",
-        config_is_distributed=sshd_distributed_config,
-        config_basename=CONFIG_BASENAME, rule_title=rule_title)
-}}}
+    {{%- if product == 'sle16' -%}}
+        {{{
+            ansible_sshd_set_usr(
+                parameter=PARAMETER,
+                value="{{ "+XCCDF_VARIABLE+" }}",
+                copy_defaults='true',
+                config_basename=CONFIG_BASENAME,
+                rule_title=rule_title
+            )
+        }}}
+    {{%- else -%}}
+        {{{
+            ansible_sshd_set(
+                parameter=PARAMETER,
+                value="{{ "+XCCDF_VARIABLE+" }}",
+                config_is_distributed=sshd_distributed_config,
+                config_basename=CONFIG_BASENAME, rule_title=rule_title)
+        }}}
+    {{%- endif -%}}
 {{% else %}}
-{{{
-    ansible_sshd_set(
-        parameter=PARAMETER,
-        value=VALUE,
-        config_is_distributed=sshd_distributed_config,
-        config_basename=CONFIG_BASENAME, rule_title=rule_title)
-}}}
+    {{%- if product == 'sle16' -%}}
+        {{{
+            ansible_sshd_set_usr(
+                parameter=PARAMETER,
+                value=VALUE,
+                copy_defaults='true',
+                config_basename=CONFIG_BASENAME,
+                rule_title=rule_title
+            )
+        }}}
+    {{%- else -%}}
+        {{{
+            ansible_sshd_set(
+                parameter=PARAMETER,
+                value=VALUE,
+                config_is_distributed=sshd_distributed_config,
+                config_basename=CONFIG_BASENAME, rule_title=rule_title)
+        }}}
+    {{%- endif -%}}
+
  {{% endif %}}
diff --git a/shared/templates/sshd_lineinfile/bash.template b/shared/templates/sshd_lineinfile/bash.template
index aec5c2029a3a..4bec19d82f43 100644
--- a/shared/templates/sshd_lineinfile/bash.template
+++ b/shared/templates/sshd_lineinfile/bash.template
@@ -5,8 +5,16 @@
 # disruption = low
 
 {{% if XCCDF_VARIABLE %}}
-{{{ bash_instantiate_variables(XCCDF_VARIABLE) }}}
-{{{ bash_sshd_remediation(parameter=PARAMETER, value="$" ~ XCCDF_VARIABLE, config_is_distributed=sshd_distributed_config, config_basename=CONFIG_BASENAME, rule_id=rule_id) -}}}
-{{% else %}}
-{{{ bash_sshd_remediation(parameter=PARAMETER, value=VALUE, config_is_distributed=sshd_distributed_config, config_basename=CONFIG_BASENAME, rule_id=rule_id) -}}}
-{{% endif %}}
+    {{{- bash_instantiate_variables(XCCDF_VARIABLE) -}}}
+    {{%- if product == 'sle16' -%}}
+        {{{- bash_sshd_remediation_usr(parameter=PARAMETER, value="$" ~ XCCDF_VARIABLE, copy_defaults=true, config_basename=CONFIG_BASENAME, rule_id=rule_id) -}}}
+    {{%- else -%}}
+        {{{- bash_sshd_remediation(parameter=PARAMETER, value="$" ~ XCCDF_VARIABLE, config_is_distributed=sshd_distributed_config, config_basename=CONFIG_BASENAME, rule_id=rule_id) -}}}
+    {{%- endif -%}}
+{{%- else -%}}
+    {{%- if product == 'sle16' -%}}
+        {{{- bash_sshd_remediation_usr(parameter=PARAMETER, value=VALUE, copy_defaults=true, config_basename=CONFIG_BASENAME, rule_id=rule_id) -}}}
+    {{%- else -%}}
+        {{{- bash_sshd_remediation(parameter=PARAMETER, value=VALUE, config_is_distributed=sshd_distributed_config, config_basename=CONFIG_BASENAME, rule_id=rule_id) -}}}
+    {{%- endif -%}}
+{{%- endif -%}}
diff --git a/shared/templates/sshd_lineinfile/oval.template b/shared/templates/sshd_lineinfile/oval.template
index d3f4218ec300..20e9534ff10f 100644
--- a/shared/templates/sshd_lineinfile/oval.template
+++ b/shared/templates/sshd_lineinfile/oval.template
@@ -1,5 +1,53 @@
-{{%- if XCCDF_VARIABLE -%}}
-{{{ sshd_oval_check(parameter=PARAMETER, xccdf_variable=XCCDF_VARIABLE, missing_parameter_pass=MISSING_PARAMETER_PASS, config_is_distributed=sshd_distributed_config, runtime_check=sshd_runtime_check, datatype=DATATYPE, rule_id=rule_id, rule_title=rule_title) }}}
+{{%- if product == 'sle16' -%}}
+    {{%- if XCCDF_VARIABLE -%}}
+        {{{
+            sshd_oval_check_usr(
+                parameter=PARAMETER,
+                xccdf_variable=XCCDF_VARIABLE,
+                missing_parameter_pass=MISSING_PARAMETER_PASS,
+                datatype=DATATYPE,
+                rule_id=rule_id,
+                rule_title=rule_title
+            )
+        }}}
+    {{%- else -%}}
+        {{{
+            sshd_oval_check_usr(
+            parameter=PARAMETER,
+            value=VALUE,
+            missing_parameter_pass=MISSING_PARAMETER_PASS,
+            datatype=DATATYPE,
+            rule_id=rule_id,
+            rule_title=rule_title
+            )
+        }}}
+    {{%- endif -%}}
 {{%- else -%}}
-{{{ sshd_oval_check(parameter=PARAMETER, value=VALUE, missing_parameter_pass=MISSING_PARAMETER_PASS, config_is_distributed=sshd_distributed_config, runtime_check=sshd_runtime_check, datatype=DATATYPE, rule_id=rule_id, rule_title=rule_title) }}}
+    {{%- if XCCDF_VARIABLE -%}}
+        {{{
+            sshd_oval_check(
+                parameter=PARAMETER,
+                xccdf_variable=XCCDF_VARIABLE,
+                missing_parameter_pass=MISSING_PARAMETER_PASS,
+                config_is_distributed=sshd_distributed_config,
+                runtime_check=sshd_runtime_check,
+                datatype=DATATYPE,
+                rule_id=rule_id,
+                rule_title=rule_title
+            )
+        }}}
+    {{%- else -%}}
+        {{{
+            sshd_oval_check(
+            parameter=PARAMETER,
+            value=VALUE,
+            missing_parameter_pass=MISSING_PARAMETER_PASS,
+            config_is_distributed=sshd_distributed_config,
+            runtime_check=sshd_runtime_check,
+            datatype=DATATYPE,
+            rule_id=rule_id,
+            rule_title=rule_title
+            )
+        }}}
+    {{%- endif -%}}
 {{%- endif -%}}
diff --git a/shared/templates/sshd_lineinfile/tests/common.sh b/shared/templates/sshd_lineinfile/tests/common.sh
index 2f811821fde2..23d7937088af 100644
--- a/shared/templates/sshd_lineinfile/tests/common.sh
+++ b/shared/templates/sshd_lineinfile/tests/common.sh
@@ -3,8 +3,13 @@
 mkdir -p /etc/ssh/sshd_config.d
 touch /etc/ssh/sshd_config.d/nothing
 
-if grep -q "^\s*{{{ PARAMETER }}}" /etc/ssh/sshd_config /etc/ssh/sshd_config.d/* ; then
-	sed -i "s/^{{{ PARAMETER }}}.*/# {{{ PARAMETER }}} {{{ CORRECT_VALUE }}}/g" /etc/ssh/sshd_config /etc/ssh/sshd_config.d/*
+declare -a SSHD_PATHS=("/etc/ssh/sshd_config" /etc/ssh/sshd_config.d/*)
+{{% if product == 'sle16' %}}
+SSHD_PATHS+=("/usr/etc/ssh/sshd_config" /usr/etc/ssh/sshd_config.d/*)
+{{% endif %}}
+
+if grep -q "^\s*{{{ PARAMETER }}}" "${SSHD_PATHS[@]}" ; then
+	sed -i "s/^{{{ PARAMETER }}}.*/# {{{ PARAMETER }}} {{{ CORRECT_VALUE }}}/g" "${SSHD_PATHS[@]}"
 else
 	echo "# {{{ PARAMETER }}} {{{ CORRECT_VALUE }}}" >> /etc/ssh/sshd_config
 fi
diff --git a/shared/templates/sshd_lineinfile/tests/correct_value_directory.pass.sh b/shared/templates/sshd_lineinfile/tests/correct_value_directory.pass.sh
index 3114b75fe541..c0926871f3a3 100644
--- a/shared/templates/sshd_lineinfile/tests/correct_value_directory.pass.sh
+++ b/shared/templates/sshd_lineinfile/tests/correct_value_directory.pass.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 
-# platform = multi_platform_fedora,Oracle Linux 8,Oracle Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 10,multi_platform_ubuntu
+# platform = Oracle Linux 8,Oracle Linux 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 9,SUSE Linux Enterprise 16,multi_platform_fedora,multi_platform_ubuntu
 {{%- if XCCDF_VARIABLE %}}
 # variables = {{{ XCCDF_VARIABLE }}}={{{ CORRECT_VALUE }}}
 {{%- endif %}}
@@ -12,4 +12,3 @@ source common.sh
 {{% endif %}}
 
 {{{ bash_sshd_remediation(parameter=PARAMETER, value=CORRECT_VALUE, config_is_distributed=sshd_distributed_config, rule_id=rule_id) -}}}
-
diff --git a/shared/templates/sshd_lineinfile/tests/correct_value_usr_config_dir.pass.sh b/shared/templates/sshd_lineinfile/tests/correct_value_usr_config_dir.pass.sh
new file mode 100644
index 000000000000..b853676b0552
--- /dev/null
+++ b/shared/templates/sshd_lineinfile/tests/correct_value_usr_config_dir.pass.sh
@@ -0,0 +1,9 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+source common.sh
+
+{{%- if XCCDF_VARIABLE %}}
+# variables = {{{ XCCDF_VARIABLE }}}={{{ CORRECT_VALUE }}}
+{{%- endif %}}
+
+echo "{{{ PARAMETER }}} {{{ CORRECT_VALUE }}}" >> /usr/etc/ssh/sshd_config.d/oscap-sshd-config.conf
diff --git a/shared/templates/sshd_lineinfile/tests/correct_value_usr_config_path.pass.sh b/shared/templates/sshd_lineinfile/tests/correct_value_usr_config_path.pass.sh
new file mode 100644
index 000000000000..b5dfae159dac
--- /dev/null
+++ b/shared/templates/sshd_lineinfile/tests/correct_value_usr_config_path.pass.sh
@@ -0,0 +1,13 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+source common.sh
+
+{{%- if XCCDF_VARIABLE %}}
+# variables = {{{ XCCDF_VARIABLE }}}={{{ CORRECT_VALUE }}}
+{{%- endif %}}
+
+if [ -e "/etc/ssh/sshd_config" ] ; then
+    rm /etc/ssh/sshd_config
+fi
+
+echo "{{{ PARAMETER }}} {{{ CORRECT_VALUE }}}" >> /usr/etc/ssh/sshd_config
diff --git a/shared/templates/sshd_lineinfile/tests/duplicated_param.pass.sh b/shared/templates/sshd_lineinfile/tests/duplicated_param.pass.sh
index aac35afbcad6..8d3d7be24f18 100644
--- a/shared/templates/sshd_lineinfile/tests/duplicated_param.pass.sh
+++ b/shared/templates/sshd_lineinfile/tests/duplicated_param.pass.sh
@@ -1,12 +1,15 @@
 #!/bin/bash
 
-
+declare -a SSHD_PATHS=("/etc/ssh/sshd_config" /etc/ssh/sshd_config.d/*)
+{{% if product == 'sle16' %}}
+SSHD_PATHS+=("/usr/etc/ssh/sshd_config" /usr/etc/ssh/sshd_config.d/*)
+{{% endif %}}
 
 mkdir -p /etc/ssh/sshd_config.d
 touch /etc/ssh/sshd_config.d/nothing
 
-if grep -q "^\s*{{{ PARAMETER }}}" /etc/ssh/sshd_config /etc/ssh/sshd_config.d/* ; then
-    sed -i "/^\s*{{{ PARAMETER }}}.*/Id" /etc/ssh/sshd_config /etc/ssh/sshd_config.d/*
+if grep -q "^\s*{{{ PARAMETER }}}" "${SSHD_PATHS[@]}" ; then
+    sed -i "/^\s*{{{ PARAMETER }}}.*/Id" "${SSHD_PATHS[@]}"
 fi
 
 {{% if XCCDF_VARIABLE %}}
diff --git a/shared/templates/sshd_lineinfile/tests/duplicated_param_directory.pass.sh b/shared/templates/sshd_lineinfile/tests/duplicated_param_directory.pass.sh
index b05adb222229..82208603091e 100644
--- a/shared/templates/sshd_lineinfile/tests/duplicated_param_directory.pass.sh
+++ b/shared/templates/sshd_lineinfile/tests/duplicated_param_directory.pass.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 
-# platform = multi_platform_fedora,Oracle Linux 8,Oracle Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 10,multi_platform_ubuntu
+# platform = Oracle Linux 8,Oracle Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 10,SUSE Linux Enterprise 16,multi_platform_fedora,multi_platform_ubuntu
 
 mkdir -p /etc/ssh/sshd_config.d
 touch /etc/ssh/sshd_config.d/nothing
@@ -9,8 +9,13 @@ touch /etc/ssh/sshd_config.d/nothing
 {{{ bash_replace_or_append("/etc/ssh/sshd_config", "Include", "/etc/ssh/sshd_config.d/*.conf", "%s %s", cce_identifiers=cce_identifiers) }}}
 {{% endif %}}
 
-if grep -q "^\s*{{{ PARAMETER }}}" /etc/ssh/sshd_config /etc/ssh/sshd_config.d/* ; then
-    sed -i "/^\s*{{{ PARAMETER }}}.*/Id" /etc/ssh/sshd_config /etc/ssh/sshd_config.d/*
+declare -a SSHD_PATHS=("/etc/ssh/sshd_config" /etc/ssh/sshd_config.d/*)
+{{% if product == 'sle16' %}}
+SSHD_PATHS+=("/usr/etc/ssh/sshd_config" /usr/etc/ssh/sshd_config.d/*)
+{{% endif %}}
+
+if grep -q "^\s*{{{ PARAMETER }}}" "${SSHD_PATHS[@]}" ; then
+    sed -i "/^\s*{{{ PARAMETER }}}.*/Id" "${SSHD_PATHS[@]}"
 fi
 
 {{% if XCCDF_VARIABLE %}}
diff --git a/shared/templates/sshd_lineinfile/tests/line_not_there.fail.sh b/shared/templates/sshd_lineinfile/tests/line_not_there.fail.sh
index 5bc6d1043169..da6e5e46e494 100644
--- a/shared/templates/sshd_lineinfile/tests/line_not_there.fail.sh
+++ b/shared/templates/sshd_lineinfile/tests/line_not_there.fail.sh
@@ -5,4 +5,9 @@ SSHD_PARAM={{{ PARAMETER }}}
 mkdir -p /etc/ssh/sshd_config.d
 touch /etc/ssh/sshd_config.d/nothing
 
+{{% if product == 'sle16' %}}
+touch /etc/ssh/sshd_config
+sed -i "/^\s*${SSHD_PARAM}.*/Id" /etc/ssh/sshd_config /etc/ssh/sshd_config.d/* /usr/etc/ssh/sshd_config /usr/etc/ssh/sshd_config.d/*
+{{% else %}}
 sed -i "/^\s*${SSHD_PARAM}.*/Id" /etc/ssh/sshd_config /etc/ssh/sshd_config.d/*
+{{% endif %}}
diff --git a/shared/templates/sshd_lineinfile/tests/param_conflict_directory.fail.sh b/shared/templates/sshd_lineinfile/tests/param_conflict_directory.fail.sh
index d91244f7a08a..265edbc57b95 100644
--- a/shared/templates/sshd_lineinfile/tests/param_conflict_directory.fail.sh
+++ b/shared/templates/sshd_lineinfile/tests/param_conflict_directory.fail.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 
-# platform = multi_platform_fedora,Oracle Linux 8,Oracle Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 10,multi_platform_ubuntu
+# platform = Oracle Linux 8,Oracle Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 10,SUSE Linux Enterprise 16,multi_platform_fedora,multi_platform_ubuntu
 
 
 {{% if XCCDF_VARIABLE %}}
diff --git a/shared/templates/sshd_lineinfile/tests/param_conflict_file_with_directory.fail.sh b/shared/templates/sshd_lineinfile/tests/param_conflict_file_with_directory.fail.sh
index 15eb1d87033b..f9684e501973 100644
--- a/shared/templates/sshd_lineinfile/tests/param_conflict_file_with_directory.fail.sh
+++ b/shared/templates/sshd_lineinfile/tests/param_conflict_file_with_directory.fail.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 
-# platform = multi_platform_fedora,Oracle Linux 8,Oracle Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 10,multi_platform_ubuntu
+# platform = Oracle Linux 8,Oracle Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 10,SUSE Linux Enterprise 16,multi_platform_fedora,multi_platform_ubuntu
 
 {{% if XCCDF_VARIABLE %}}
 # variables = {{{ XCCDF_VARIABLE }}}={{{ CORRECT_VALUE }}}
diff --git a/shared/templates/sshd_lineinfile/tests/wrong_value_directory.fail.sh b/shared/templates/sshd_lineinfile/tests/wrong_value_directory.fail.sh
index c5f2c41e875a..5c94854046f8 100644
--- a/shared/templates/sshd_lineinfile/tests/wrong_value_directory.fail.sh
+++ b/shared/templates/sshd_lineinfile/tests/wrong_value_directory.fail.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 
-# platform = multi_platform_fedora,Oracle Linux 8,Oracle Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 10,multi_platform_ubuntu
+# platform = Oracle Linux 8,Oracle Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 10,SUSE Linux Enterprise 16,multi_platform_fedora,multi_platform_ubuntu
 
 {{% if XCCDF_VARIABLE %}}
 # variables = {{{ XCCDF_VARIABLE }}}={{{ CORRECT_VALUE }}}
diff --git a/shared/templates/sshd_lineinfile/tests/wrong_value_usr_config_dir.fail.sh b/shared/templates/sshd_lineinfile/tests/wrong_value_usr_config_dir.fail.sh
new file mode 100644
index 000000000000..a073ad1c0991
--- /dev/null
+++ b/shared/templates/sshd_lineinfile/tests/wrong_value_usr_config_dir.fail.sh
@@ -0,0 +1,14 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+
+{{% if XCCDF_VARIABLE %}}
+# variables = {{{ XCCDF_VARIABLE }}}={{{ CORRECT_VALUE }}}
+{{% endif %}}
+
+touch /usr/etc/ssh/sshd_config.d/oscap-sshd-config.conf
+
+if grep -q "^\s*{{{ PARAMETER }}}" /usr/etc/ssh/sshd_config /usr/etc/ssh/sshd_config.d/* ; then
+	sed -i "/^\s*{{{ PARAMETER }}}.*/Id" /usr/etc/ssh/sshd_config /usr/etc/ssh/sshd_config.d/*
+fi
+
+echo "{{{ PARAMETER }}} {{{ WRONG_VALUE }}}" > /usr/etc/ssh/sshd_config.d/oscap-sshd-config.conf
diff --git a/shared/templates/sshd_lineinfile/tests/wrong_value_usr_config_path.fail.sh b/shared/templates/sshd_lineinfile/tests/wrong_value_usr_config_path.fail.sh
new file mode 100644
index 000000000000..0ff115b7e45e
--- /dev/null
+++ b/shared/templates/sshd_lineinfile/tests/wrong_value_usr_config_path.fail.sh
@@ -0,0 +1,16 @@
+#!/bin/bash
+# platform = SUSE Linux Enterprise 16
+
+{{% if XCCDF_VARIABLE %}}
+# variables = {{{ XCCDF_VARIABLE }}}={{{ CORRECT_VALUE }}}
+{{% endif %}}
+
+if [ -e "/etc/ssh/sshd_config" ] ; then
+    rm /etc/ssh/sshd_config
+fi
+
+if grep -q "^\s*{{{ PARAMETER }}}" /usr/etc/ssh/sshd_config /usr/etc/ssh/sshd_config.d/* ; then
+	sed -i "/^\s*{{{ PARAMETER }}}.*/Id" /usr/etc/ssh/sshd_config /usr/etc/ssh/sshd_config.d/*
+fi
+
+echo "{{{ PARAMETER }}} {{{ WRONG_VALUE }}}" >> /usr/etc/ssh/sshd_config
diff --git a/shared/templates/systemd_dropin_configuration/tests/commented_out_correct_value_master.fail.sh b/shared/templates/systemd_dropin_configuration/tests/commented_out_correct_value_master.fail.sh
new file mode 100644
index 000000000000..90b69e6f4047
--- /dev/null
+++ b/shared/templates/systemd_dropin_configuration/tests/commented_out_correct_value_master.fail.sh
@@ -0,0 +1,13 @@
+#!/bin/bash
+SECTION="{{{ SECTION }}}"
+PARAM="{{{ PARAM }}}"
+VALUE="{{{ VALUE }}}"
+MASTER_CFG_FILE="{{{ MASTER_CFG_FILE }}}"
+
+# This setup tests if remediation is "tricked" by a commented-out correct value.
+# It sets an active bad value and a commented-out good value.
+{{% if NO_QUOTES %}}
+echo -e "[$SECTION]\n$PARAM=badval\n#$PARAM=$VALUE" > "$MASTER_CFG_FILE"
+{{% else %}}
+echo -e "[$SECTION]\n$PARAM=\"badval\"\n#$PARAM=\"$VALUE\"" > "$MASTER_CFG_FILE"
+{{% endif %}}
diff --git a/ssg/ansible.py b/ssg/ansible.py
index 3eb3eca83e5f..d30ecd991c55 100644
--- a/ssg/ansible.py
+++ b/ssg/ansible.py
@@ -67,7 +67,7 @@ def remove_too_many_blank_lines(ansible_src):
     Returns:
         str: The modified string with excessive blank lines reduced.
     """
-    return re.sub(r'\n{4,}', '\n\n\n', ansible_src, 0, flags=re.M)
+    return re.sub(r'\n{4,}', '\n\n\n', ansible_src, count=0, flags=re.MULTILINE)
 
 
 def remove_trailing_whitespace(ansible_src):
@@ -81,7 +81,7 @@ def remove_trailing_whitespace(ansible_src):
         str: The Ansible source code with trailing whitespace removed from each line.
     """
 
-    return re.sub(r'[ \t]+$', '', ansible_src, 0, flags=re.M)
+    return re.sub(r'[ \t]+$', '', ansible_src, count=0, flags=re.MULTILINE)
 
 
 package_facts_task = collections.OrderedDict([
diff --git a/ssg/boolean_expression.py b/ssg/boolean_expression.py
index 740bf3eb4252..b13b90d639d0 100644
--- a/ssg/boolean_expression.py
+++ b/ssg/boolean_expression.py
@@ -71,7 +71,7 @@ def __call__(self, **kwargs):
             full_name += '[' + self.arg + ']'
         val = kwargs.get(full_name, False)
         if self.requirement.has_version_specs():
-            if type(val) is str:
+            if isinstance(val, str):
                 return val in self.requirement
             return False
         return bool(val)
diff --git a/ssg/build_cpe.py b/ssg/build_cpe.py
index dfba1a06090e..56bee9acf778 100644
--- a/ssg/build_cpe.py
+++ b/ssg/build_cpe.py
@@ -45,7 +45,7 @@ def load_product_cpes(self, env_yaml):
             product_cpes_list = env_yaml["cpes"]
             self.load_product_cpes_from_list(product_cpes_list)
         except KeyError:
-            raise Exception("Product %s does not define 'cpes'" % (env_yaml["product"]))
+            raise Exception("Product %s does not define 'cpes'" % (env_yaml["product"])) from None
 
     def load_product_cpes_from_list(self, product_cpes_list):
         for cpe_dict_repr in product_cpes_list:
@@ -107,7 +107,7 @@ def get_cpe(self, cpe_id_or_name):
                         cpe_id_or_name)
                 return self.cpes_by_id[cpe_id_or_name]
         except KeyError:
-            raise CPEDoesNotExist("CPE %s is not defined" % cpe_id_or_name)
+            raise CPEDoesNotExist("CPE %s is not defined" % cpe_id_or_name) from None
 
     def add_resolved_cpe_items_from_platform(self, platform):
         for fact_ref in platform.get_fact_refs():
@@ -267,7 +267,7 @@ def create_resolved_cpe_item_for_fact_ref(self, fact_ref):
             raise KeyError(
                 "The {0} CPE item does not support the argument {1}. "
                 "Following arguments are supported: {2}".format(
-                    self.id_, fact_ref.arg, [a for a in self.args.keys()]))
+                    self.id_, fact_ref.arg, [a for a in self.args.keys()])) from None
         resolved_parameters.update(fact_ref.as_dict())
         cpe_item_as_dict = self.represent_as_dict()
         cpe_item_as_dict["args"] = None
diff --git a/ssg/build_guides.py b/ssg/build_guides.py
index 15eab17758a7..c54580df484a 100644
--- a/ssg/build_guides.py
+++ b/ssg/build_guides.py
@@ -1,10 +1,11 @@
 from __future__ import absolute_import
 
 import os
+import queue
+import subprocess
 import sys
 from collections import namedtuple
 
-from .shims import subprocess_check_output, Queue
 from .xccdf import get_profile_choices_for_input, get_profile_short_id
 from .xccdf import PROFILE_ID_SKIPLIST
 from .constants import OSCAP_DS_STRING, OSCAP_PATH
@@ -48,10 +49,10 @@ def generate_for_input_content(input_content, benchmark_id, profile_id):
         args.extend(["--profile", profile_id])
     args.append(input_content)
 
-    return subprocess_check_output(args).decode("utf-8")
+    return subprocess.check_output(args).decode("utf-8")
 
 
-def builder(queue):
+def builder(task_queue):
     """
     Fetch from a queue of tasks, process tasks until the queue is empty.
     Each task is processed with generate_for_input_content, and the
@@ -62,7 +63,7 @@ def builder(queue):
     while True:
         try:
             benchmark_id, profile_id, input_path, guide_path = \
-                queue.get(False)
+                task_queue.get(False)
 
             guide_html = generate_for_input_content(
                 input_path, benchmark_id, profile_id
@@ -71,16 +72,16 @@ def builder(queue):
             with open(guide_path, "wb") as guide_file:
                 guide_file.write(guide_html.encode("utf-8"))
 
-            queue.task_done()
-        except Queue.Empty:
+            task_queue.task_done()
+        except queue.Empty:
             break
         except Exception as error:
             sys.stderr.write(
                 "Fatal error encountered when generating guide '%s'. "
                 "Error details:\n%s\n\n" % (guide_path, error)
             )
-            with queue.mutex:
-                queue.queue.clear()
+            with task_queue.mutex:
+                task_queue.queue.clear()
             raise error
 
 
@@ -172,7 +173,7 @@ def fill_queue(benchmarks, benchmark_profile_pairs, input_path, path_base,
     index_links = []
     index_options = {}
     index_initial_src = None
-    queue = Queue.Queue()
+    task_queue = queue.Queue()
 
     task = namedtuple('task', ['benchmark_id', 'profile_id', 'input_path', 'guide_path'])
 
@@ -202,9 +203,9 @@ def fill_queue(benchmarks, benchmark_profile_pairs, input_path, path_base,
         if index_initial_src is None:
             index_initial_src = guide_filename
 
-        queue.put(task(benchmark_id, profile_id, input_path, guide_path))
+        task_queue.put(task(benchmark_id, profile_id, input_path, guide_path))
 
-    return index_links, index_options, index_initial_src, queue
+    return index_links, index_options, index_initial_src, task_queue
 
 
 def build_index(benchmarks, input_basename, index_links, index_options,
diff --git a/ssg/build_remediations.py b/ssg/build_remediations.py
index 8ce637eff8fe..9c3ef1c3eb3e 100644
--- a/ssg/build_remediations.py
+++ b/ssg/build_remediations.py
@@ -391,7 +391,7 @@ def inject_package_facts_task(self, parsed_snippet):
 
             # When clause of the task can be string or a list, lets normalize to list
             task_when = p_task.get("when", "")
-            if type(task_when) is str:
+            if isinstance(task_when, str):
                 task_when = [task_when]
             for when in task_when:
                 if "ansible_facts.packages" in when:
diff --git a/ssg/build_renumber.py b/ssg/build_renumber.py
index 11ef6d961346..1c75f45ceb75 100644
--- a/ssg/build_renumber.py
+++ b/ssg/build_renumber.py
@@ -179,7 +179,7 @@ def link(self):
             # (either CCE-XXXX-X, or CCE-XXXXX-X). Drop from XCCDF those who don't follow it
             verify_correct_form_of_referenced_cce_identifiers(self.xccdftree)
         except SSGError as exc:
-            raise SSGError("Error processing {0}: {1}".format(self.fname, str(exc)))
+            raise SSGError("Error processing {0}: {1}".format(self.fname, str(exc))) from exc
 
         self.oval_document = self.translator.translate_oval_document(
             self.oval_document, store_defname=True
diff --git a/ssg/build_yaml.py b/ssg/build_yaml.py
index 39b428979355..ea834512228e 100644
--- a/ssg/build_yaml.py
+++ b/ssg/build_yaml.py
@@ -585,7 +585,7 @@ def add_profiles_from_dir(self, dir_, env_yaml, product_cpes):
             except Exception as exc:
                 msg = ("Error building profile from '{fname}': '{error}'"
                        .format(fname=dir_item_path, error=str(exc)))
-                raise RuntimeError(msg)
+                raise RuntimeError(msg) from exc
             if new_profile is None:
                 continue
 
@@ -1753,7 +1753,7 @@ def _convert_platform_names(rule, product_cpes):
             except Exception as e:
                 msg = "Unable to process platforms in rule '%s': %s" % (
                     rule.id_, str(e))
-                raise Exception(msg)
+                raise Exception(msg) from e
             cpe_platform = add_platform_if_not_defined(
                 cpe_platform, product_cpes)
             rule.cpe_platform_names.add(cpe_platform.id_)
@@ -1839,7 +1839,7 @@ def normalize(self, product):
                 "Error normalizing '{rule}': {msg}"
                 .format(rule=self.id_, msg=str(exc))
             )
-            raise RuntimeError(msg)
+            raise RuntimeError(msg) from exc
 
     def add_stig_references(self, stig_references):
         """
@@ -2058,7 +2058,7 @@ def make_refs_and_identifiers_product_specific(self, product):
                     "Error processing {what} for rule '{rid}': {msg}"
                     .format(what=name, rid=self.id_, msg=str(exc))
                 )
-                raise ValueError(msg)
+                raise ValueError(msg) from exc
             dic.clear()
             dic.update(new_items)
 
diff --git a/ssg/constants.py b/ssg/constants.py
index f104ecec2c34..fcac3b80bbcf 100644
--- a/ssg/constants.py
+++ b/ssg/constants.py
@@ -43,6 +43,7 @@
     'anolis8',
     'anolis23',
     'al2023',
+    'bascontrol22d4',
     'debian11', 'debian12', 'debian13',
     'example',
     'eks',
@@ -213,6 +214,7 @@
     "Anolis OS 8": "anolis8",
     "Anolis OS 23": "anolis23",
     "Amazon Linux 2023": "al2023",
+    "Contemporary Controls BAScontrol22D BACnet/IP Sedona Unitary Controller 4": "bascontrol22d4",
     "Debian 11": "debian11",
     "Debian 12": "debian12",
     "Debian 13": "debian13",
@@ -287,17 +289,15 @@
     )
 )
 
-
-MULTI_PLATFORM_LIST = ["rhel", "fedora", "rhv", "debian", "ubuntu",
-                       "openeuler", "kylinserver",
-                       "opensuse", "sle", "tencentos", "ol", "ocp", "rhcos",
-                       "example", "eks", "alinux", "anolis", "openembedded", "al",
-                       "slmicro", "almalinux"]
+MULTI_PLATFORM_LIST = ["al", "alinux", "almalinux", "anolis", "bascontrol22d", "debian", "eks",
+                       "example", "fedora", "kylinserver", "ocp", "ol", "openembedded", "openeuler",
+                       "opensuse", "rhcos", "rhel", "rhv", "sle", "slmicro", "tencentos", "ubuntu"]
 
 MULTI_PLATFORM_MAPPING = {
     "multi_platform_alinux": ["alinux2", "alinux3"],
     "multi_platform_almalinux": ["almalinux9"],
     "multi_platform_anolis": ["anolis8", "anolis23"],
+    "multi_platform_bascontrol22d": ["bascontrol22d4"],
     "multi_platform_debian": ["debian11", "debian12", "debian13"],
     "multi_platform_example": ["example"],
     "multi_platform_eks": ["eks"],
@@ -429,6 +429,7 @@
     'kylinserver': 'Kylin Server',
     'rhel': 'Red Hat Enterprise Linux',
     'rhv': 'Red Hat Virtualization',
+    'bascontrol22d': 'Contemporary Controls BAScontrol22D',
     'debian': 'Debian',
     'ubuntu': 'Ubuntu',
     'eap': 'JBoss Enterprise Application Platform',
@@ -459,6 +460,12 @@
 DEFAULT_FAILLOCK_PATH = '/var/run/faillock'
 DEFAULT_SSH_DISTRIBUTED_CONFIG = 'false'
 DEFAULT_SSH_RUNTIME_CHECK = 'false'
+DEFAULT_SSHD_MAIN_CONFIG_FILE = '/etc/ssh/sshd_config'
+DEFAULT_SSHD_CONFIG_DIR = '/etc/ssh/sshd_config.d'
+DEFAULT_SSHD_HARDENING_CONFIG_BASENAME = '00-complianceascode-hardening.conf'
+DEFAULT_SSHD_SYSCONFIG_FILE = '/etc/sysconfig/sshd'
+DEFAULT_SSH_CLIENT_MAIN_CONFIG_FILE = '/etc/ssh/ssh_config'
+DEFAULT_SSH_CLIENT_CONFIG_DIR = '/etc/ssh/ssh_config.d'
 DEFAULT_PRODUCT = 'example'
 DEFAULT_CHRONY_CONF_PATH = '/etc/chrony.conf'
 DEFAULT_CHRONY_D_PATH = '/etc/chrony.d/'
diff --git a/ssg/contributors.py b/ssg/contributors.py
index 2abc9fb4684a..5c81296d148c 100644
--- a/ssg/contributors.py
+++ b/ssg/contributors.py
@@ -8,8 +8,7 @@
 import datetime
 import re
 import os.path
-
-from .shims import subprocess_check_output
+import subprocess
 
 
 MANUAL_EDIT_WARNING = """This file is generated using the %s script. DO NOT MANUALLY EDIT!!!!
@@ -124,7 +123,7 @@ def generate():
             - contributors_md (str): The contributors list in Markdown format.
             - contributors_xml (str): The contributors list in XML format.
     """
-    output = subprocess_check_output(["git", "shortlog", "-se"]).decode("utf-8")
+    output = subprocess.check_output(["git", "shortlog", "-se"]).decode("utf-8")
     contributions_by_email = _get_contributions_by_canonical_email(output)
     contributors = _get_contributor_email_mapping(contributions_by_email)
 
diff --git a/ssg/controls.py b/ssg/controls.py
index 5a077a6d13da..c537bb1baf6d 100644
--- a/ssg/controls.py
+++ b/ssg/controls.py
@@ -211,7 +211,7 @@ def _check_keys(cls, control_dict):
                 raise ValueError("Key %s is not allowed in a control file." % key)
 
     @classmethod
-    def from_control_dict(cls, control_dict, env_yaml=None, default_level=["default"]):
+    def from_control_dict(cls, control_dict, env_yaml=None, default_level=None):
         """
         Create a control instance from a dictionary of control attributes.
 
@@ -227,6 +227,8 @@ def from_control_dict(cls, control_dict, env_yaml=None, default_level=["default"
         Raises:
             ValueError: If the 'automated' key has an invalid value or if 'levels' is not a list.
         """
+        if default_level is None:
+            default_level = ["default"]
         cls._check_keys(control_dict)
         control = cls()
         control.id = ssg.utils.required_key(control_dict, "id")
@@ -254,7 +256,7 @@ def from_control_dict(cls, control_dict, env_yaml=None, default_level=["default"
                 % (control.automated,  control.id, control.title))
             raise ValueError(msg)
         control.levels = control_dict.get("levels", default_level)
-        if type(control.levels) is not list:
+        if not isinstance(control.levels, list):
             msg = "Levels for %s must be an array" % control.id
             raise ValueError(msg)
         control.notes = control_dict.get("notes", "")
@@ -307,7 +309,7 @@ def add_references(self, reference_type, rules):
                     "Please remove any duplicate listing of rule '%s' in "
                     "control '%s'." % (
                         rule.id_, self.id))
-                raise ValueError(msg)
+                raise ValueError(msg) from None
 
 
 class Level(ssg.entities.common.XCCDFEntity):
@@ -499,7 +501,7 @@ def _create_control_from_subtree(self, subtree):
             msg = (
                 "Unable to parse controls from {filename}: {error}"
                 .format(filename=self.filepath, error=str(exc)))
-            raise RuntimeError(msg)
+            raise RuntimeError(msg) from exc
         return control
 
     def _extract_and_record_subcontrols(self, current_control, controls_tree):
@@ -683,7 +685,7 @@ def get_control(self, control_id):
             msg = "%s not found in policy %s" % (
                 control_id, self.id
             )
-            raise ValueError(msg)
+            raise ValueError(msg) from None
 
     def get_level(self, level_id):
         """
@@ -705,7 +707,7 @@ def get_level(self, level_id):
             msg = "Level %s not found in policy %s" % (
                 level_id, self.id
             )
-            raise ValueError(msg)
+            raise ValueError(msg) from None
 
     def get_level_with_ancestors_sequence(self, level_id):
         """
diff --git a/ssg/entities/common.py b/ssg/entities/common.py
index 53ec63f074de..9ddbbc7422fe 100644
--- a/ssg/entities/common.py
+++ b/ssg/entities/common.py
@@ -119,7 +119,7 @@ def add_sub_element(parent, tag, ns, data):
     except Exception:
         msg = ("Error adding subelement to an element '{0}' from string: '{1}'"
                .format(parent.tag, ustr))
-        raise RuntimeError(msg)
+        raise RuntimeError(msg) from None
 
     # Apart from HTML and XML elements the rule descriptions and similar
     # also contain <xccdf:sub> elements, where we need to add the prefix
@@ -254,7 +254,7 @@ def parse_yaml_into_processed_dict(cls, yaml_file, env_yaml=None, product_cpes=N
             msg = (
                 "Error processing {yaml_file}: {exc}"
                 .format(yaml_file=yaml_file, exc=str(exc)))
-            raise ValueError(msg)
+            raise ValueError(msg) from exc
 
         if yaml_data:
             msg = (
@@ -296,7 +296,7 @@ def from_yaml(cls, yaml_file, env_yaml=None, product_cpes=None):
             msg = (
                 "Error loading a {class_name} from {filename}: {error}"
                 .format(class_name=cls.__name__, filename=yaml_file, error=str(exc)))
-            raise RuntimeError(msg)
+            raise RuntimeError(msg) from exc
 
         result = cls.get_instance_from_full_dict(data_dict)
 
@@ -312,7 +312,7 @@ def from_compiled_json(cls, json_file_path, env_yaml=None, product_cpes=None):
             msg = (
                 "Error loading a {class_name} from {filename}: {error}"
                 .format(class_name=cls.__name__, filename=json_file_path, error=str(exc)))
-            raise RuntimeError(msg)
+            raise RuntimeError(msg) from exc
 
         result = cls.get_instance_from_full_dict(data_dict)
 
@@ -465,7 +465,7 @@ def get_template_name(self):
             return self.template["name"]
         except KeyError:
             raise ValueError(
-                "Templatable {0} is missing template name under template key".format(self))
+                "Templatable {0} is missing template name under template key".format(self)) from None
 
     def get_template_context(self, env_yaml):
         # TODO: The first two variables, 'rule_id' and 'rule_title' are expected by some
diff --git a/ssg/entities/profile_base.py b/ssg/entities/profile_base.py
index c1fd9ddb3987..9cbb67920b8f 100644
--- a/ssg/entities/profile_base.py
+++ b/ssg/entities/profile_base.py
@@ -84,7 +84,7 @@ def process_input_dict(cls, input_contents, env_yaml, product_cpes):
                     msg = (
                         "Unsupported platform '{platform}' in a profile."
                         .format(platform=platform))
-                    raise CPEDoesNotExist(msg)
+                    raise CPEDoesNotExist(msg) from None
 
         allowed_profile_statuses = ["draft", "interim", "accepted", "deprecated"]
         if input_contents["status"] and input_contents["status"] not in allowed_profile_statuses:
diff --git a/ssg/jinja.py b/ssg/jinja.py
index 50e55b8c847e..9b5dbdb42445 100644
--- a/ssg/jinja.py
+++ b/ssg/jinja.py
@@ -66,7 +66,7 @@ def get_source(self, environment, template):
         except Exception as exc:
             msg = ("Error reading file {template}: {exc}"
                    .format(template=template, exc=str(exc)))
-            raise RuntimeError(msg)
+            raise RuntimeError(msg) from exc
         finally:
             template_file.close()
 
@@ -255,7 +255,7 @@ def _load_macros_from_directory(macros_directory, substitutions_dict):
     except Exception as exc:
         msg = ("Error extracting macro definitions from '{1}': {0}"
                .format(str(exc), filename))
-        raise RuntimeError(msg)
+        raise RuntimeError(msg) from exc
 
 
 def _load_macros(macros_directory, substitutions_dict=None):
diff --git a/ssg/playbook_builder.py b/ssg/playbook_builder.py
index 0be06e2adf43..d5e67fa4cf92 100644
--- a/ssg/playbook_builder.py
+++ b/ssg/playbook_builder.py
@@ -50,7 +50,7 @@ def choose_variable_value(self, var_id, variables, refinements):
         try:
             options = variables[var_id]
         except KeyError:
-            raise ValueError("Variable '%s' doesn't exist." % var_id)
+            raise ValueError("Variable '%s' doesn't exist." % var_id) from None
         try:
             value = options[selector]
         except KeyError:
@@ -67,7 +67,7 @@ def choose_variable_value(self, var_id, variables, refinements):
                     "Selector '%s' doesn't exist in variable '%s'. "
                     "Available selectors: %s." %
                     (selector, var_id, ", ".join(options.keys()))
-                )
+                ) from None
         return value
 
     def get_data_from_snippet(self, snippet_yaml, variables, refinements):
diff --git a/ssg/products.py b/ssg/products.py
index 4c1e0c65367d..77b110b2d298 100644
--- a/ssg/products.py
+++ b/ssg/products.py
@@ -17,6 +17,12 @@
                         DEFAULT_RSYSLOG_CAFILE,
                         DEFAULT_SSH_DISTRIBUTED_CONFIG,
                         DEFAULT_SSH_RUNTIME_CHECK,
+                        DEFAULT_SSHD_MAIN_CONFIG_FILE,
+                        DEFAULT_SSHD_CONFIG_DIR,
+                        DEFAULT_SSHD_HARDENING_CONFIG_BASENAME,
+                        DEFAULT_SSHD_SYSCONFIG_FILE,
+                        DEFAULT_SSH_CLIENT_MAIN_CONFIG_FILE,
+                        DEFAULT_SSH_CLIENT_CONFIG_DIR,
                         DEFAULT_CHRONY_CONF_PATH,
                         DEFAULT_CHRONY_D_PATH,
                         DEFAULT_AUDISP_CONF_PATH,
@@ -111,6 +117,27 @@ def _get_implied_properties(existing_properties):
     if "sshd_runtime_check" not in existing_properties:
         result["sshd_runtime_check"] = DEFAULT_SSH_RUNTIME_CHECK
 
+    if "sshd_main_config_file" not in existing_properties:
+        result["sshd_main_config_file"] = DEFAULT_SSHD_MAIN_CONFIG_FILE
+
+    if "sshd_config_dir" not in existing_properties:
+        result["sshd_config_dir"] = DEFAULT_SSHD_CONFIG_DIR
+
+    if "sshd_config_base_dir" not in existing_properties:
+        result["sshd_config_base_dir"] = os.path.dirname(result["sshd_main_config_file"])
+
+    if "sshd_hardening_config_basename" not in existing_properties:
+        result["sshd_hardening_config_basename"] = DEFAULT_SSHD_HARDENING_CONFIG_BASENAME
+
+    if "sshd_sysconfig_file" not in existing_properties:
+        result["sshd_sysconfig_file"] = DEFAULT_SSHD_SYSCONFIG_FILE
+
+    if "ssh_client_main_config_file" not in existing_properties:
+        result["ssh_client_main_config_file"] = DEFAULT_SSH_CLIENT_MAIN_CONFIG_FILE
+
+    if "ssh_client_config_dir" not in existing_properties:
+        result["ssh_client_config_dir"] = DEFAULT_SSH_CLIENT_CONFIG_DIR
+
     if "product" not in existing_properties:
         result["product"] = DEFAULT_PRODUCT
 
diff --git a/ssg/shims.py b/ssg/shims.py
deleted file mode 100644
index b688420ead27..000000000000
--- a/ssg/shims.py
+++ /dev/null
@@ -1,55 +0,0 @@
-from __future__ import absolute_import
-
-import subprocess
-
-import queue as Queue
-
-
-def subprocess_check_output(*popenargs, **kwargs):
-    """
-    Run command with arguments and return its output as a byte string.
-
-    This function is a backport of subprocess.check_output from Python 2.7 standard library,
-    compatible with BSD-3.
-
-    Args:
-        *popenargs: Variable length argument list to pass to subprocess.Popen.
-        **kwargs: Arbitrary keyword arguments to pass to subprocess.Popen.
-
-    Returns:
-        bytes: The output of the command.
-
-    Raises:
-        subprocess.CalledProcessError: If the command exits with a non-zero status.
-    """
-    # Backport of subprocess.check_output taken from
-    # https://gist.github.com/edufelipe/1027906
-    #
-    # Originally from Python 2.7 stdlib under PSF, compatible with BSD-3
-    # Copyright (c) 2003-2005 by Peter Astrand <astrand@lysator.liu.se>
-    # Changes by Eduardo Felipe
-
-    process = subprocess.Popen(stdout=subprocess.PIPE, *popenargs, **kwargs)
-    output, unused_err = process.communicate()
-    retcode = process.poll()
-    if retcode:
-        cmd = kwargs.get("args")
-        if cmd is None:
-            cmd = popenargs[0]
-        error = subprocess.CalledProcessError(retcode, cmd)
-        error.output = output
-        raise error
-    return output
-
-
-if hasattr(subprocess, "check_output"):
-    # if available we just use the real function
-    subprocess_check_output = subprocess.check_output
-
-
-def input_func(prompt=None):
-    try:
-        return str(raw_input(prompt))
-    except NameError:
-        return input(prompt)
-
diff --git a/ssg/templates.py b/ssg/templates.py
index 883382462c05..862b75b962fa 100644
--- a/ssg/templates.py
+++ b/ssg/templates.py
@@ -382,7 +382,7 @@ def get_lang_contents_for_templatable(self, templatable, language):
                                                    language, local_env_yaml)
         except Exception as e:
             raise RuntimeError("Unable to generate {0} template language for Templatable {1}: {2}"
-                               .format(language.name, templatable, e))
+                               .format(language.name, templatable, e)) from e
 
     def write_lang_contents_for_templatable(self, filled_template, lang, templatable):
         """
diff --git a/ssg/yaml.py b/ssg/yaml.py
index d356c39f3a68..a52aa65d5327 100644
--- a/ssg/yaml.py
+++ b/ssg/yaml.py
@@ -118,7 +118,7 @@ def _get_yaml_contents_without_documentation_complete(parsed_yaml, substitutions
     return parsed_yaml
 
 
-def _open_yaml(stream, original_file=None, substitutions_dict={}):
+def _open_yaml(stream, original_file=None, substitutions_dict=None):
     """
     Open given file-like object and parse it as YAML.
 
@@ -137,6 +137,8 @@ def _open_yaml(stream, original_file=None, substitutions_dict={}):
                                   set to "false".
         Exception: For any other exceptions, including tab indentation errors in the file.
     """
+    if substitutions_dict is None:
+        substitutions_dict = {}
     try:
         yaml_contents = yaml.load(stream, Loader=yaml_SafeLoader)
 
diff --git a/tests/automatus.py b/tests/automatus.py
index 560a938323f0..3dfc4770d6d9 100755
--- a/tests/automatus.py
+++ b/tests/automatus.py
@@ -432,7 +432,7 @@ def normalize_passed_arguments(options):
         options.benchmark_id = bench_id
     except RuntimeError as exc:
         msg = "Error inferring benchmark ID from component refId: {}".format(str(exc))
-        raise RuntimeError(msg)
+        raise RuntimeError(msg) from exc
 
     if options.docker:
         options.test_env = ssg_test_suite.test_env.DockerTestEnv(
@@ -469,7 +469,7 @@ def normalize_passed_arguments(options):
         options.benchmark_cpes = benchmark_cpes
     except RuntimeError as exc:
         msg = "Error inferring platform from benchmark: {}".format(str(exc))
-        raise RuntimeError(msg)
+        raise RuntimeError(msg) from exc
 
 
 def main():
diff --git a/tests/data/product_stability/alinux2.yml b/tests/data/product_stability/alinux2.yml
index 5c49951cfdfc..6c410a2d2cf1 100644
--- a/tests/data/product_stability/alinux2.yml
+++ b/tests/data/product_stability/alinux2.yml
@@ -39,6 +39,8 @@ init_system: systemd
 login_defs_path: /etc/login.defs
 nobody_gid: 65534
 nobody_uid: 65534
+ssh_client_config_dir: /etc/ssh/ssh_config.d
+ssh_client_main_config_file: /etc/ssh/ssh_config
 pam_faillock_conf_path: /etc/security/faillock.conf
 pkg_manager: yum
 pkg_manager_config_file: /etc/yum.conf
@@ -87,7 +89,12 @@ reference_uris:
   stigid: https://www.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
   stigref: https://www.cyber.mil/stigs/srg-stig-tools/
 rsyslog_cafile: /etc/pki/tls/cert.pem
+sshd_config_base_dir: /etc/ssh
+sshd_config_dir: /etc/ssh/sshd_config.d
 sshd_distributed_config: 'false'
+sshd_hardening_config_basename: 00-complianceascode-hardening.conf
+sshd_main_config_file: /etc/ssh/sshd_config
+sshd_sysconfig_file: /etc/sysconfig/sshd
 sshd_runtime_check: 'false'
 sysctl_remediate_drop_in_file: 'false'
 target_oval_version:
diff --git a/tests/data/product_stability/alinux3.yml b/tests/data/product_stability/alinux3.yml
index 6a3f6906a444..91b9a49f8eb5 100644
--- a/tests/data/product_stability/alinux3.yml
+++ b/tests/data/product_stability/alinux3.yml
@@ -39,6 +39,8 @@ init_system: systemd
 login_defs_path: /etc/login.defs
 nobody_gid: 65534
 nobody_uid: 65534
+ssh_client_config_dir: /etc/ssh/ssh_config.d
+ssh_client_main_config_file: /etc/ssh/ssh_config
 pam_faillock_conf_path: /etc/security/faillock.conf
 pkg_manager: yum
 pkg_manager_config_file: /etc/yum.conf
@@ -87,7 +89,12 @@ reference_uris:
   stigid: https://www.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
   stigref: https://www.cyber.mil/stigs/srg-stig-tools/
 rsyslog_cafile: /etc/pki/tls/cert.pem
+sshd_config_base_dir: /etc/ssh
+sshd_config_dir: /etc/ssh/sshd_config.d
 sshd_distributed_config: 'false'
+sshd_hardening_config_basename: 00-complianceascode-hardening.conf
+sshd_main_config_file: /etc/ssh/sshd_config
+sshd_sysconfig_file: /etc/sysconfig/sshd
 sshd_runtime_check: 'false'
 sysctl_remediate_drop_in_file: 'false'
 target_oval_version:
diff --git a/tests/data/product_stability/anolis23.yml b/tests/data/product_stability/anolis23.yml
index a75b269f7a1d..c48f1b9c6658 100644
--- a/tests/data/product_stability/anolis23.yml
+++ b/tests/data/product_stability/anolis23.yml
@@ -38,6 +38,8 @@ init_system: systemd
 login_defs_path: /etc/login.defs
 nobody_gid: 65534
 nobody_uid: 65534
+ssh_client_config_dir: /etc/ssh/ssh_config.d
+ssh_client_main_config_file: /etc/ssh/ssh_config
 pam_faillock_conf_path: /etc/security/faillock.conf
 pkg_manager: yum
 pkg_manager_config_file: /etc/yum.conf
@@ -86,7 +88,12 @@ reference_uris:
   stigid: https://www.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
   stigref: https://www.cyber.mil/stigs/srg-stig-tools/
 rsyslog_cafile: /etc/pki/tls/cert.pem
+sshd_config_base_dir: /etc/ssh
+sshd_config_dir: /etc/ssh/sshd_config.d
 sshd_distributed_config: 'false'
+sshd_hardening_config_basename: 00-complianceascode-hardening.conf
+sshd_main_config_file: /etc/ssh/sshd_config
+sshd_sysconfig_file: /etc/sysconfig/sshd
 sshd_runtime_check: 'false'
 sysctl_remediate_drop_in_file: 'false'
 target_oval_version:
diff --git a/tests/data/product_stability/anolis8.yml b/tests/data/product_stability/anolis8.yml
index 3718ddc46c3e..61579dcd96c8 100644
--- a/tests/data/product_stability/anolis8.yml
+++ b/tests/data/product_stability/anolis8.yml
@@ -38,6 +38,8 @@ init_system: systemd
 login_defs_path: /etc/login.defs
 nobody_gid: 65534
 nobody_uid: 65534
+ssh_client_config_dir: /etc/ssh/ssh_config.d
+ssh_client_main_config_file: /etc/ssh/ssh_config
 pam_faillock_conf_path: /etc/security/faillock.conf
 pkg_manager: yum
 pkg_manager_config_file: /etc/yum.conf
@@ -86,7 +88,12 @@ reference_uris:
   stigid: https://www.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
   stigref: https://www.cyber.mil/stigs/srg-stig-tools/
 rsyslog_cafile: /etc/pki/tls/cert.pem
+sshd_config_base_dir: /etc/ssh
+sshd_config_dir: /etc/ssh/sshd_config.d
 sshd_distributed_config: 'false'
+sshd_hardening_config_basename: 00-complianceascode-hardening.conf
+sshd_main_config_file: /etc/ssh/sshd_config
+sshd_sysconfig_file: /etc/sysconfig/sshd
 sshd_runtime_check: 'false'
 sysctl_remediate_drop_in_file: 'false'
 target_oval_version:
diff --git a/tests/data/product_stability/debian11.yml b/tests/data/product_stability/debian11.yml
index e158e949bf47..f598ac3aa581 100644
--- a/tests/data/product_stability/debian11.yml
+++ b/tests/data/product_stability/debian11.yml
@@ -43,6 +43,8 @@ login_defs_path: /etc/login.defs
 major_version_ordinal: 11
 nobody_gid: 65534
 nobody_uid: 65534
+ssh_client_config_dir: /etc/ssh/ssh_config.d
+ssh_client_main_config_file: /etc/ssh/ssh_config
 pam_faillock_conf_path: /etc/security/faillock.conf
 pkg_manager: apt_get
 pkg_system: dpkg
@@ -96,7 +98,12 @@ reference_uris:
   stigid: https://www.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
   stigref: https://www.cyber.mil/stigs/srg-stig-tools/
 rsyslog_cafile: /etc/pki/tls/cert.pem
+sshd_config_base_dir: /etc/ssh
+sshd_config_dir: /etc/ssh/sshd_config.d
 sshd_distributed_config: 'false'
+sshd_hardening_config_basename: 00-complianceascode-hardening.conf
+sshd_main_config_file: /etc/ssh/sshd_config
+sshd_sysconfig_file: /etc/sysconfig/sshd
 sshd_runtime_check: 'false'
 sysctl_remediate_drop_in_file: 'false'
 target_oval_version:
diff --git a/tests/data/product_stability/debian12.yml b/tests/data/product_stability/debian12.yml
index 4433efbfa427..8c72066213f9 100644
--- a/tests/data/product_stability/debian12.yml
+++ b/tests/data/product_stability/debian12.yml
@@ -43,6 +43,8 @@ login_defs_path: /etc/login.defs
 major_version_ordinal: 12
 nobody_gid: 65534
 nobody_uid: 65534
+ssh_client_config_dir: /etc/ssh/ssh_config.d
+ssh_client_main_config_file: /etc/ssh/ssh_config
 oval_feed_url: https://www.debian.org/security/oval/oval-definitions-bookworm.xml.bz2
 pam_faillock_conf_path: /etc/security/faillock.conf
 pkg_manager: apt_get
@@ -98,7 +100,12 @@ reference_uris:
   stigid: https://www.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
   stigref: https://www.cyber.mil/stigs/srg-stig-tools/
 rsyslog_cafile: /etc/pki/tls/cert.pem
+sshd_config_base_dir: /etc/ssh
+sshd_config_dir: /etc/ssh/sshd_config.d
 sshd_distributed_config: 'false'
+sshd_hardening_config_basename: 00-complianceascode-hardening.conf
+sshd_main_config_file: /etc/ssh/sshd_config
+sshd_sysconfig_file: /etc/sysconfig/sshd
 sshd_runtime_check: 'false'
 sysctl_remediate_drop_in_file: 'false'
 target_oval_version:
diff --git a/tests/data/product_stability/debian13.yml b/tests/data/product_stability/debian13.yml
index f396cebdb375..031dd9856d7a 100644
--- a/tests/data/product_stability/debian13.yml
+++ b/tests/data/product_stability/debian13.yml
@@ -44,6 +44,8 @@ login_defs_path: /etc/login.defs
 major_version_ordinal: 13
 nobody_gid: 65534
 nobody_uid: 65534
+ssh_client_config_dir: /etc/ssh/ssh_config.d
+ssh_client_main_config_file: /etc/ssh/ssh_config
 oval_feed_url: https://www.debian.org/security/oval/oval-definitions-trixie.xml.bz2
 pam_faillock_conf_path: /etc/security/faillock.conf
 pkg_manager: apt_get
@@ -98,7 +100,12 @@ reference_uris:
   stigid: https://www.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
   stigref: https://www.cyber.mil/stigs/srg-stig-tools/
 rsyslog_cafile: /etc/pki/tls/cert.pem
+sshd_config_base_dir: /etc/ssh
+sshd_config_dir: /etc/ssh/sshd_config.d
 sshd_distributed_config: 'false'
+sshd_hardening_config_basename: 00-complianceascode-hardening.conf
+sshd_main_config_file: /etc/ssh/sshd_config
+sshd_sysconfig_file: /etc/sysconfig/sshd
 sshd_runtime_check: 'false'
 sysctl_remediate_drop_in_file: 'false'
 target_oval_version:
diff --git a/tests/data/product_stability/eks.yml b/tests/data/product_stability/eks.yml
index 749fc432b180..94ec7ba4b230 100644
--- a/tests/data/product_stability/eks.yml
+++ b/tests/data/product_stability/eks.yml
@@ -47,6 +47,8 @@ init_system: systemd
 login_defs_path: /etc/login.defs
 nobody_gid: 65534
 nobody_uid: 65534
+ssh_client_config_dir: /etc/ssh/ssh_config.d
+ssh_client_main_config_file: /etc/ssh/ssh_config
 pam_faillock_conf_path: /etc/security/faillock.conf
 pkg_system: rpm
 platform_package_overrides:
@@ -94,7 +96,12 @@ reference_uris:
   stigid: https://www.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
   stigref: https://www.cyber.mil/stigs/srg-stig-tools/
 rsyslog_cafile: /etc/pki/tls/cert.pem
+sshd_config_base_dir: /etc/ssh
+sshd_config_dir: /etc/ssh/sshd_config.d
 sshd_distributed_config: 'false'
+sshd_hardening_config_basename: 00-complianceascode-hardening.conf
+sshd_main_config_file: /etc/ssh/sshd_config
+sshd_sysconfig_file: /etc/sysconfig/sshd
 sshd_runtime_check: 'false'
 sysctl_remediate_drop_in_file: 'false'
 target_oval_version:
diff --git a/tests/data/product_stability/example.yml b/tests/data/product_stability/example.yml
index 14d69b7c198f..ed647b05316f 100644
--- a/tests/data/product_stability/example.yml
+++ b/tests/data/product_stability/example.yml
@@ -40,6 +40,8 @@ init_system: systemd
 login_defs_path: /etc/login.defs
 nobody_gid: 65534
 nobody_uid: 65534
+ssh_client_config_dir: /etc/ssh/ssh_config.d
+ssh_client_main_config_file: /etc/ssh/ssh_config
 pam_faillock_conf_path: /etc/security/faillock.conf
 pkg_manager: dnf
 pkg_manager_config_file: /etc/dnf/dnf.conf
@@ -88,7 +90,12 @@ reference_uris:
   stigid: https://www.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
   stigref: https://www.cyber.mil/stigs/srg-stig-tools/
 rsyslog_cafile: /etc/pki/tls/cert.pem
+sshd_config_base_dir: /etc/ssh
+sshd_config_dir: /etc/ssh/sshd_config.d
 sshd_distributed_config: 'false'
+sshd_hardening_config_basename: 00-complianceascode-hardening.conf
+sshd_main_config_file: /etc/ssh/sshd_config
+sshd_sysconfig_file: /etc/sysconfig/sshd
 sshd_runtime_check: 'false'
 sysctl_remediate_drop_in_file: 'false'
 target_oval_version:
diff --git a/tests/data/product_stability/fedora.yml b/tests/data/product_stability/fedora.yml
index d0885a22d8ad..7f236804bcfb 100644
--- a/tests/data/product_stability/fedora.yml
+++ b/tests/data/product_stability/fedora.yml
@@ -75,6 +75,8 @@ latest_version: 38
 login_defs_path: /etc/login.defs
 nobody_gid: 65534
 nobody_uid: 65534
+ssh_client_config_dir: /etc/ssh/ssh_config.d
+ssh_client_main_config_file: /etc/ssh/ssh_config
 pam_faillock_conf_path: /etc/security/faillock.conf
 pkg_manager: dnf
 pkg_manager_config_file: /etc/dnf/dnf.conf
@@ -132,7 +134,12 @@ reference_uris:
   stigid: https://www.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
   stigref: https://www.cyber.mil/stigs/srg-stig-tools/
 rsyslog_cafile: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
+sshd_config_base_dir: /etc/ssh
+sshd_config_dir: /etc/ssh/sshd_config.d
 sshd_distributed_config: 'true'
+sshd_hardening_config_basename: 00-complianceascode-hardening.conf
+sshd_main_config_file: /etc/ssh/sshd_config
+sshd_sysconfig_file: /etc/sysconfig/sshd
 sshd_runtime_check: 'false'
 sysctl_remediate_drop_in_file: 'false'
 target_oval_version:
diff --git a/tests/data/product_stability/firefox.yml b/tests/data/product_stability/firefox.yml
index 23f9456dbaf5..16129e9dca76 100644
--- a/tests/data/product_stability/firefox.yml
+++ b/tests/data/product_stability/firefox.yml
@@ -38,6 +38,8 @@ grub_helper_executable: grubby
 login_defs_path: /etc/login.defs
 nobody_gid: 65534
 nobody_uid: 65534
+ssh_client_config_dir: /etc/ssh/ssh_config.d
+ssh_client_main_config_file: /etc/ssh/ssh_config
 pam_faillock_conf_path: /etc/security/faillock.conf
 platform_package_overrides:
   aarch64_arch: null
@@ -83,7 +85,12 @@ reference_uris:
   stigid: https://www.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
   stigref: https://www.cyber.mil/stigs/srg-stig-tools/
 rsyslog_cafile: /etc/pki/tls/cert.pem
+sshd_config_base_dir: /etc/ssh
+sshd_config_dir: /etc/ssh/sshd_config.d
 sshd_distributed_config: 'false'
+sshd_hardening_config_basename: 00-complianceascode-hardening.conf
+sshd_main_config_file: /etc/ssh/sshd_config
+sshd_sysconfig_file: /etc/sysconfig/sshd
 sshd_runtime_check: 'false'
 sysctl_remediate_drop_in_file: 'false'
 target_oval_version:
diff --git a/tests/data/product_stability/ocp4.yml b/tests/data/product_stability/ocp4.yml
index b0f8c5866d48..5957eda9ce3d 100644
--- a/tests/data/product_stability/ocp4.yml
+++ b/tests/data/product_stability/ocp4.yml
@@ -147,6 +147,8 @@ init_system: systemd
 login_defs_path: /etc/login.defs
 nobody_gid: 65534
 nobody_uid: 65534
+ssh_client_config_dir: /etc/ssh/ssh_config.d
+ssh_client_main_config_file: /etc/ssh/ssh_config
 pam_faillock_conf_path: /etc/security/faillock.conf
 pkg_system: rpm
 platform_package_overrides:
@@ -194,7 +196,12 @@ reference_uris:
   stigid: https://www.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform
   stigref: https://www.cyber.mil/stigs/srg-stig-tools/
 rsyslog_cafile: /etc/pki/tls/cert.pem
+sshd_config_base_dir: /etc/ssh
+sshd_config_dir: /etc/ssh/sshd_config.d
 sshd_distributed_config: 'false'
+sshd_hardening_config_basename: 00-complianceascode-hardening.conf
+sshd_main_config_file: /etc/ssh/sshd_config
+sshd_sysconfig_file: /etc/sysconfig/sshd
 sshd_runtime_check: 'false'
 sysctl_remediate_drop_in_file: 'false'
 target_oval_version:
diff --git a/tests/data/product_stability/ol7.yml b/tests/data/product_stability/ol7.yml
index 4d692ffb7ca5..404b2d59f495 100644
--- a/tests/data/product_stability/ol7.yml
+++ b/tests/data/product_stability/ol7.yml
@@ -44,6 +44,8 @@ login_defs_path: /etc/login.defs
 major_version_ordinal: 7
 nobody_gid: 65534
 nobody_uid: 65534
+ssh_client_config_dir: /etc/ssh/ssh_config.d
+ssh_client_main_config_file: /etc/ssh/ssh_config
 oval_feed_url: https://linux.oracle.com/security/oval/com.oracle.elsa-ol7.xml.bz2
 pam_faillock_conf_path: /etc/security/faillock.conf
 pkg_manager: yum
@@ -98,7 +100,12 @@ reference_uris:
   stigref: https://www.cyber.mil/stigs/srg-stig-tools/
 release_key_fingerprint: 42144123FECFC55B9086313D72F97B74EC551F03
 rsyslog_cafile: /etc/pki/tls/cert.pem
+sshd_config_base_dir: /etc/ssh
+sshd_config_dir: /etc/ssh/sshd_config.d
 sshd_distributed_config: 'false'
+sshd_hardening_config_basename: 00-complianceascode-hardening.conf
+sshd_main_config_file: /etc/ssh/sshd_config
+sshd_sysconfig_file: /etc/sysconfig/sshd
 sshd_runtime_check: 'false'
 sysctl_remediate_drop_in_file: 'false'
 target_oval_version:
diff --git a/tests/data/product_stability/ol8.yml b/tests/data/product_stability/ol8.yml
index f3ac4181da82..6c3880c5d617 100644
--- a/tests/data/product_stability/ol8.yml
+++ b/tests/data/product_stability/ol8.yml
@@ -34,6 +34,8 @@ login_defs_path: /etc/login.defs
 major_version_ordinal: 8
 nobody_gid: 65534
 nobody_uid: 65534
+ssh_client_config_dir: /etc/ssh/ssh_config.d
+ssh_client_main_config_file: /etc/ssh/ssh_config
 oval_feed_url: https://linux.oracle.com/security/oval/com.oracle.elsa-ol8.xml.bz2
 pam_faillock_conf_path: /etc/security/faillock.conf
 pkg_manager: yum
@@ -67,7 +69,12 @@ reference_uris: {anssi: 'https://cyber.gouv.fr/sites/default/files/document/linu
   stigref: 'https://www.cyber.mil/stigs/srg-stig-tools/'}
 release_key_fingerprint: 76FD3DB13AB67410B89DB10E82562EA9AD986DA3
 rsyslog_cafile: /etc/pki/tls/cert.pem
+sshd_config_base_dir: /etc/ssh
+sshd_config_dir: /etc/ssh/sshd_config.d
 sshd_distributed_config: 'false'
+sshd_hardening_config_basename: 00-complianceascode-hardening.conf
+sshd_main_config_file: /etc/ssh/sshd_config
+sshd_sysconfig_file: /etc/sysconfig/sshd
 sshd_runtime_check: 'false'
 sysctl_remediate_drop_in_file: 'true'
 target_oval_version: [5, 11]
diff --git a/tests/data/product_stability/ol9.yml b/tests/data/product_stability/ol9.yml
index 1bf88e99cfd9..a765d43ad3f2 100644
--- a/tests/data/product_stability/ol9.yml
+++ b/tests/data/product_stability/ol9.yml
@@ -37,6 +37,8 @@ login_defs_path: /etc/login.defs
 major_version_ordinal: 9
 nobody_gid: 65534
 nobody_uid: 65534
+ssh_client_config_dir: /etc/ssh/ssh_config.d
+ssh_client_main_config_file: /etc/ssh/ssh_config
 oval_feed_url: https://linux.oracle.com/security/oval/com.oracle.elsa-ol9.xml.bz2
 pam_faillock_conf_path: /etc/security/faillock.conf
 pkg_manager: yum
@@ -70,7 +72,12 @@ reference_uris: {anssi: 'https://cyber.gouv.fr/sites/default/files/document/linu
   stigref: 'https://www.cyber.mil/stigs/srg-stig-tools/'}
 release_key_fingerprint: 3E6D826D3FBAB389C2F38E34BC4D06A08D8B756F
 rsyslog_cafile: /etc/pki/tls/cert.pem
+sshd_config_base_dir: /etc/ssh
+sshd_config_dir: /etc/ssh/sshd_config.d
 sshd_distributed_config: 'true'
+sshd_hardening_config_basename: 00-complianceascode-hardening.conf
+sshd_main_config_file: /etc/ssh/sshd_config
+sshd_sysconfig_file: /etc/sysconfig/sshd
 sshd_runtime_check: 'false'
 sysctl_remediate_drop_in_file: 'true'
 target_oval_version: [5, 11]
diff --git a/tests/data/product_stability/openembedded.yml b/tests/data/product_stability/openembedded.yml
index 344874dfc136..158a3b57f02d 100644
--- a/tests/data/product_stability/openembedded.yml
+++ b/tests/data/product_stability/openembedded.yml
@@ -51,6 +51,8 @@ init_system: systemd
 login_defs_path: /etc/login.defs
 nobody_gid: 65534
 nobody_uid: 65534
+ssh_client_config_dir: /etc/ssh/ssh_config.d
+ssh_client_main_config_file: /etc/ssh/ssh_config
 pam_faillock_conf_path: /etc/security/faillock.conf
 pkg_manager: dnf
 pkg_manager_config_file: /etc/dnf/dnf.conf
@@ -99,7 +101,12 @@ reference_uris:
   stigid: https://www.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
   stigref: https://www.cyber.mil/stigs/srg-stig-tools/
 rsyslog_cafile: /etc/pki/tls/cert.pem
+sshd_config_base_dir: /etc/ssh
+sshd_config_dir: /etc/ssh/sshd_config.d
 sshd_distributed_config: 'false'
+sshd_hardening_config_basename: 00-complianceascode-hardening.conf
+sshd_main_config_file: /etc/ssh/sshd_config
+sshd_sysconfig_file: /etc/sysconfig/sshd
 sshd_runtime_check: 'false'
 sysctl_remediate_drop_in_file: 'false'
 target_oval_version:
diff --git a/tests/data/product_stability/opensuse.yml b/tests/data/product_stability/opensuse.yml
index 9174e81bd4df..188726c01e92 100644
--- a/tests/data/product_stability/opensuse.yml
+++ b/tests/data/product_stability/opensuse.yml
@@ -47,6 +47,8 @@ init_system: systemd
 login_defs_path: /etc/login.defs
 nobody_gid: 65534
 nobody_uid: 65534
+ssh_client_config_dir: /etc/ssh/ssh_config.d
+ssh_client_main_config_file: /etc/ssh/ssh_config
 pam_faillock_conf_path: /etc/security/faillock.conf
 pkg_manager: zypper
 pkg_manager_config_file: /etc/zypp/zypper.conf
@@ -95,7 +97,12 @@ reference_uris:
   stigid: https://www.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
   stigref: https://www.cyber.mil/stigs/srg-stig-tools/
 rsyslog_cafile: /etc/pki/tls/cert.pem
+sshd_config_base_dir: /etc/ssh
+sshd_config_dir: /etc/ssh/sshd_config.d
 sshd_distributed_config: 'false'
+sshd_hardening_config_basename: 00-complianceascode-hardening.conf
+sshd_main_config_file: /etc/ssh/sshd_config
+sshd_sysconfig_file: /etc/sysconfig/sshd
 sshd_runtime_check: 'false'
 sysctl_remediate_drop_in_file: 'false'
 target_oval_version:
diff --git a/tests/data/product_stability/rhcos4.yml b/tests/data/product_stability/rhcos4.yml
index ccb1445bee05..d20e239d57d0 100644
--- a/tests/data/product_stability/rhcos4.yml
+++ b/tests/data/product_stability/rhcos4.yml
@@ -41,6 +41,8 @@ init_system: systemd
 login_defs_path: /etc/login.defs
 nobody_gid: 65534
 nobody_uid: 65534
+ssh_client_config_dir: /etc/ssh/ssh_config.d
+ssh_client_main_config_file: /etc/ssh/ssh_config
 pam_faillock_conf_path: /etc/security/faillock.conf
 pkg_manager: dnf
 pkg_manager_config_file: /etc/dnf/dnf.conf
@@ -92,7 +94,12 @@ reference_uris:
   stigref: https://www.cyber.mil/stigs/srg-stig-tools/
 release_key_fingerprint: 567E347AD0044ADE55BA8A5F199E2F91FD431D51
 rsyslog_cafile: /etc/pki/tls/cert.pem
+sshd_config_base_dir: /etc/ssh
+sshd_config_dir: /etc/ssh/sshd_config.d
 sshd_distributed_config: 'true'
+sshd_hardening_config_basename: 00-complianceascode-hardening.conf
+sshd_main_config_file: /etc/ssh/sshd_config
+sshd_sysconfig_file: /etc/sysconfig/sshd
 sshd_runtime_check: 'true'
 sysctl_remediate_drop_in_file: 'false'
 target_oval_version:
diff --git a/tests/data/product_stability/rhel10.yml b/tests/data/product_stability/rhel10.yml
index 1e96007149d5..fb89fbb3c2ce 100644
--- a/tests/data/product_stability/rhel10.yml
+++ b/tests/data/product_stability/rhel10.yml
@@ -47,6 +47,8 @@ login_defs_path: /etc/login.defs
 major_version_ordinal: 10
 nobody_gid: 65534
 nobody_uid: 65534
+ssh_client_config_dir: /etc/ssh/ssh_config.d
+ssh_client_main_config_file: /etc/ssh/ssh_config
 pam_faillock_conf_path: /etc/security/faillock.conf
 pkg_manager: dnf
 pkg_manager_config_file: /etc/dnf/dnf.conf
@@ -102,7 +104,12 @@ reference_uris:
   stigref: https://www.cyber.mil/stigs/srg-stig-tools/
 release_key_fingerprint: 567E347AD0044ADE55BA8A5F199E2F91FD431D51
 rsyslog_cafile: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
+sshd_config_base_dir: /etc/ssh
+sshd_config_dir: /etc/ssh/sshd_config.d
 sshd_distributed_config: 'true'
+sshd_hardening_config_basename: 00-complianceascode-hardening.conf
+sshd_main_config_file: /etc/ssh/sshd_config
+sshd_sysconfig_file: /etc/sysconfig/sshd
 sshd_runtime_check: 'false'
 sysctl_remediate_drop_in_file: 'true'
 target_oval_version:
diff --git a/tests/data/product_stability/rhel8.yml b/tests/data/product_stability/rhel8.yml
index 519c9ece1ffb..e2377a08651c 100644
--- a/tests/data/product_stability/rhel8.yml
+++ b/tests/data/product_stability/rhel8.yml
@@ -97,6 +97,8 @@ login_defs_path: /etc/login.defs
 major_version_ordinal: 8
 nobody_gid: 65534
 nobody_uid: 65534
+ssh_client_config_dir: /etc/ssh/ssh_config.d
+ssh_client_main_config_file: /etc/ssh/ssh_config
 pam_faillock_conf_path: /etc/security/faillock.conf
 pkg_manager: yum
 pkg_manager_config_file: /etc/yum.conf
@@ -149,7 +151,12 @@ reference_uris:
   stigref: https://www.cyber.mil/stigs/srg-stig-tools/
 release_key_fingerprint: 567E347AD0044ADE55BA8A5F199E2F91FD431D51
 rsyslog_cafile: /etc/pki/tls/cert.pem
+sshd_config_base_dir: /etc/ssh
+sshd_config_dir: /etc/ssh/sshd_config.d
 sshd_distributed_config: 'false'
+sshd_hardening_config_basename: 00-complianceascode-hardening.conf
+sshd_main_config_file: /etc/ssh/sshd_config
+sshd_sysconfig_file: /etc/sysconfig/sshd
 sshd_runtime_check: 'false'
 sysctl_remediate_drop_in_file: 'true'
 target_oval_version:
diff --git a/tests/data/product_stability/rhel9.yml b/tests/data/product_stability/rhel9.yml
index 6e23814da258..93c04da18761 100644
--- a/tests/data/product_stability/rhel9.yml
+++ b/tests/data/product_stability/rhel9.yml
@@ -53,6 +53,8 @@ login_defs_path: /etc/login.defs
 major_version_ordinal: 9
 nobody_gid: 65534
 nobody_uid: 65534
+ssh_client_config_dir: /etc/ssh/ssh_config.d
+ssh_client_main_config_file: /etc/ssh/ssh_config
 pam_faillock_conf_path: /etc/security/faillock.conf
 pkg_manager: dnf
 pkg_manager_config_file: /etc/dnf/dnf.conf
@@ -106,7 +108,12 @@ reference_uris:
   stigref: https://www.cyber.mil/stigs/srg-stig-tools/
 release_key_fingerprint: 567E347AD0044ADE55BA8A5F199E2F91FD431D51
 rsyslog_cafile: /etc/pki/tls/cert.pem
+sshd_config_base_dir: /etc/ssh
+sshd_config_dir: /etc/ssh/sshd_config.d
 sshd_distributed_config: 'true'
+sshd_hardening_config_basename: 00-complianceascode-hardening.conf
+sshd_main_config_file: /etc/ssh/sshd_config
+sshd_sysconfig_file: /etc/sysconfig/sshd
 sshd_runtime_check: 'false'
 sysctl_remediate_drop_in_file: 'true'
 target_oval_version:
diff --git a/tests/data/product_stability/rhv4.yml b/tests/data/product_stability/rhv4.yml
index 18a495e60dde..d5c4bb7f1d28 100644
--- a/tests/data/product_stability/rhv4.yml
+++ b/tests/data/product_stability/rhv4.yml
@@ -46,6 +46,8 @@ init_system: systemd
 login_defs_path: /etc/login.defs
 nobody_gid: 65534
 nobody_uid: 65534
+ssh_client_config_dir: /etc/ssh/ssh_config.d
+ssh_client_main_config_file: /etc/ssh/ssh_config
 pam_faillock_conf_path: /etc/security/faillock.conf
 pkg_manager: yum
 pkg_manager_config_file: /etc/yum.conf
@@ -97,7 +99,12 @@ reference_uris:
   stigref: https://www.cyber.mil/stigs/srg-stig-tools/
 release_key_fingerprint: 567E347AD0044ADE55BA8A5F199E2F91FD431D51
 rsyslog_cafile: /etc/pki/tls/cert.pem
+sshd_config_base_dir: /etc/ssh
+sshd_config_dir: /etc/ssh/sshd_config.d
 sshd_distributed_config: 'false'
+sshd_hardening_config_basename: 00-complianceascode-hardening.conf
+sshd_main_config_file: /etc/ssh/sshd_config
+sshd_sysconfig_file: /etc/sysconfig/sshd
 sshd_runtime_check: 'false'
 sysctl_remediate_drop_in_file: 'false'
 target_oval_version:
diff --git a/tests/data/product_stability/sle12.yml b/tests/data/product_stability/sle12.yml
index fd1c6c58f621..6f37d82c4335 100644
--- a/tests/data/product_stability/sle12.yml
+++ b/tests/data/product_stability/sle12.yml
@@ -46,6 +46,8 @@ login_defs_path: /etc/login.defs
 major_version_ordinal: 12
 nobody_gid: 65534
 nobody_uid: 65534
+ssh_client_config_dir: /etc/ssh/ssh_config.d
+ssh_client_main_config_file: /etc/ssh/ssh_config
 oval_feed_url: https://ftp.suse.com/pub/projects/security/oval/suse.linux.enterprise.12-patch.xml.bz2
 pam_faillock_conf_path: /etc/security/faillock.conf
 pkg_manager: zypper
@@ -97,7 +99,12 @@ reference_uris:
   stigid: https://www.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
   stigref: https://www.cyber.mil/stigs/srg-stig-tools/
 rsyslog_cafile: /etc/pki/tls/cert.pem
+sshd_config_base_dir: /etc/ssh
+sshd_config_dir: /etc/ssh/sshd_config.d
 sshd_distributed_config: 'false'
+sshd_hardening_config_basename: 00-complianceascode-hardening.conf
+sshd_main_config_file: /etc/ssh/sshd_config
+sshd_sysconfig_file: /etc/sysconfig/sshd
 sshd_runtime_check: 'false'
 sysctl_remediate_drop_in_file: 'true'
 target_oval_version:
diff --git a/tests/data/product_stability/sle15.yml b/tests/data/product_stability/sle15.yml
index df80c5c692d4..b8bc702adbe9 100644
--- a/tests/data/product_stability/sle15.yml
+++ b/tests/data/product_stability/sle15.yml
@@ -47,6 +47,8 @@ login_defs_path: /etc/login.defs
 major_version_ordinal: 15
 nobody_gid: 65534
 nobody_uid: 65534
+ssh_client_config_dir: /etc/ssh/ssh_config.d
+ssh_client_main_config_file: /etc/ssh/ssh_config
 oval_feed_url: https://ftp.suse.com/pub/projects/security/oval/suse.linux.enterprise.15-patch.xml.bz2
 pam_faillock_conf_path: /etc/security/faillock.conf
 pkg_manager: zypper
@@ -103,7 +105,12 @@ reference_uris:
   suse-general: not_publicly_available
 release_key_fingerprint: FEAB502539D846DB2C0961CA70AF9E8139DB7C82
 rsyslog_cafile: /etc/pki/tls/cert.pem
+sshd_config_base_dir: /etc/ssh
+sshd_config_dir: /etc/ssh/sshd_config.d
 sshd_distributed_config: 'false'
+sshd_hardening_config_basename: 00-complianceascode-hardening.conf
+sshd_main_config_file: /etc/ssh/sshd_config
+sshd_sysconfig_file: /etc/sysconfig/sshd
 sshd_runtime_check: 'false'
 sysctl_remediate_drop_in_file: 'true'
 target_oval_version:
diff --git a/tests/data/product_stability/ubuntu2204.yml b/tests/data/product_stability/ubuntu2204.yml
index 7010b1dae93a..5a5e96f69018 100644
--- a/tests/data/product_stability/ubuntu2204.yml
+++ b/tests/data/product_stability/ubuntu2204.yml
@@ -11,6 +11,9 @@ audit_binaries:
 - /sbin/autrace
 - /sbin/auditd
 - /sbin/augenrules
+- /sbin/audisp-syslog
+- /sbin/audisp-remote
+- /sbin/audispd-zos-remote
 audit_watches_style: legacy
 auid: 1000
 basic_properties_derived: true
@@ -44,6 +47,8 @@ login_defs_path: /etc/login.defs
 major_version_ordinal: 2204
 nobody_gid: 65534
 nobody_uid: 65534
+ssh_client_config_dir: /etc/ssh/ssh_config.d
+ssh_client_main_config_file: /etc/ssh/ssh_config
 oval_feed_url: https://security-metadata.canonical.com/oval/com.ubuntu.jammy.usn.oval.xml.bz2
 pam_faillock_conf_path: /etc/security/faillock.conf
 pkg_manager: apt_get
@@ -106,7 +111,12 @@ reference_uris:
   stigid: https://www.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
   stigref: https://www.cyber.mil/stigs/srg-stig-tools/
 rsyslog_cafile: /etc/pki/tls/cert.pem
+sshd_config_base_dir: /etc/ssh
+sshd_config_dir: /etc/ssh/sshd_config.d
 sshd_distributed_config: 'true'
+sshd_hardening_config_basename: 00-complianceascode-hardening.conf
+sshd_main_config_file: /etc/ssh/sshd_config
+sshd_sysconfig_file: /etc/sysconfig/sshd
 sshd_runtime_check: 'false'
 sysctl_remediate_drop_in_file: 'false'
 target_oval_version:
diff --git a/tests/data/product_stability/ubuntu2404.yml b/tests/data/product_stability/ubuntu2404.yml
index 9918311b1913..6dfd8c9862e0 100644
--- a/tests/data/product_stability/ubuntu2404.yml
+++ b/tests/data/product_stability/ubuntu2404.yml
@@ -11,6 +11,9 @@ audit_binaries:
   - /sbin/autrace
   - /sbin/auditd
   - /sbin/augenrules
+  - /sbin/audisp-syslog
+  - /sbin/audisp-remote
+  - /sbin/audispd-zos-remote
 audit_watches_style: legacy
 auid: 1000
 basic_properties_derived: true
@@ -45,6 +48,8 @@ login_defs_path: /etc/login.defs
 major_version_ordinal: 2404
 nobody_gid: 65534
 nobody_uid: 65534
+ssh_client_config_dir: /etc/ssh/ssh_config.d
+ssh_client_main_config_file: /etc/ssh/ssh_config
 oval_feed_url: https://security-metadata.canonical.com/oval/com.ubuntu.noble.usn.oval.xml.bz2
 pam_faillock_conf_path: /etc/security/faillock.conf
 pkg_manager: apt_get
@@ -107,7 +112,12 @@ reference_uris:
   stigid: https://www.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
   stigref: https://www.cyber.mil/stigs/srg-stig-tools/
 rsyslog_cafile: /etc/pki/tls/cert.pem
+sshd_config_base_dir: /etc/ssh
+sshd_config_dir: /etc/ssh/sshd_config.d
 sshd_distributed_config: 'true'
+sshd_hardening_config_basename: 00-complianceascode-hardening.conf
+sshd_main_config_file: /etc/ssh/sshd_config
+sshd_sysconfig_file: /etc/sysconfig/sshd
 sshd_runtime_check: 'false'
 sysctl_remediate_drop_in_file: 'false'
 target_oval_version:
diff --git a/tests/data/profile_stability/rhel10/bsi.profile b/tests/data/profile_stability/rhel10/bsi.profile
new file mode 100644
index 000000000000..1742a8456cef
--- /dev/null
+++ b/tests/data/profile_stability/rhel10/bsi.profile
@@ -0,0 +1,216 @@
+account_unique_id
+account_unique_name
+aide_build_database
+aide_periodic_cron_checking
+aide_scan_notification
+audit_rules_continue_loading
+audit_rules_dac_modification_chmod
+audit_rules_dac_modification_chown
+audit_rules_dac_modification_fchmod
+audit_rules_dac_modification_fchmodat
+audit_rules_dac_modification_fchmodat2
+audit_rules_dac_modification_fchown
+audit_rules_dac_modification_fchownat
+audit_rules_dac_modification_fremovexattr
+audit_rules_dac_modification_fsetxattr
+audit_rules_dac_modification_lchown
+audit_rules_dac_modification_lremovexattr
+audit_rules_dac_modification_lsetxattr
+audit_rules_dac_modification_removexattr
+audit_rules_dac_modification_setxattr
+audit_rules_execution_chcon
+audit_rules_execution_setfacl
+audit_rules_login_events_faillock
+audit_rules_login_events_lastlog
+audit_rules_privileged_commands
+audit_rules_privileged_commands_usermod
+audit_rules_session_events
+audit_rules_suid_auid_privilege_function
+audit_rules_sysadmin_actions
+audit_rules_usergroup_modification_group
+audit_rules_usergroup_modification_gshadow
+audit_rules_usergroup_modification_opasswd
+audit_rules_usergroup_modification_passwd
+audit_rules_usergroup_modification_shadow
+audit_sudo_log_events
+bios_disable_usb_boot
+bios_enable_execution_restrictions
+configure_firewalld_ports
+directory_groupowner_sshd_config_d
+directory_owner_sshd_config_d
+directory_permissions_sshd_config_d
+encrypt_partitions
+fapolicy_default_deny
+file_group_ownership_var_log_audit
+file_groupowner_at_allow
+file_groupowner_backup_etc_group
+file_groupowner_backup_etc_gshadow
+file_groupowner_backup_etc_passwd
+file_groupowner_backup_etc_shadow
+file_groupowner_cron_allow
+file_groupowner_cron_d
+file_groupowner_cron_daily
+file_groupowner_cron_hourly
+file_groupowner_cron_monthly
+file_groupowner_cron_weekly
+file_groupowner_cron_yearly
+file_groupowner_crontab
+file_groupowner_efi_grub2_cfg
+file_groupowner_efi_user_cfg
+file_groupowner_etc_group
+file_groupowner_etc_gshadow
+file_groupowner_etc_issue
+file_groupowner_etc_issue_net
+file_groupowner_etc_motd
+file_groupowner_etc_passwd
+file_groupowner_etc_security_opasswd
+file_groupowner_etc_security_opasswd_old
+file_groupowner_etc_shadow
+file_groupowner_etc_shells
+file_groupowner_grub2_cfg
+file_groupowner_sshd_config
+file_groupowner_sshd_drop_in_config
+file_groupowner_user_cfg
+file_groupownership_audit_binaries
+file_groupownership_audit_configuration
+file_groupownership_home_directories
+file_groupownership_sshd_private_key
+file_groupownership_sshd_pub_key
+file_owner_at_allow
+file_owner_backup_etc_group
+file_owner_backup_etc_gshadow
+file_owner_backup_etc_passwd
+file_owner_backup_etc_shadow
+file_owner_cron_allow
+file_owner_cron_d
+file_owner_cron_daily
+file_owner_cron_hourly
+file_owner_cron_monthly
+file_owner_cron_weekly
+file_owner_cron_yearly
+file_owner_crontab
+file_owner_efi_grub2_cfg
+file_owner_efi_user_cfg
+file_owner_etc_group
+file_owner_etc_gshadow
+file_owner_etc_issue
+file_owner_etc_issue_net
+file_owner_etc_motd
+file_owner_etc_passwd
+file_owner_etc_security_opasswd
+file_owner_etc_security_opasswd_old
+file_owner_etc_shadow
+file_owner_etc_shells
+file_owner_grub2_cfg
+file_owner_sshd_config
+file_owner_sshd_drop_in_config
+file_owner_user_cfg
+file_ownership_audit_binaries
+file_ownership_audit_configuration
+file_ownership_home_directories
+file_ownership_sshd_private_key
+file_ownership_sshd_pub_key
+file_ownership_var_log_audit
+file_permission_user_bash_history
+file_permissions_at_allow
+file_permissions_audit_binaries
+file_permissions_audit_configuration
+file_permissions_backup_etc_group
+file_permissions_backup_etc_gshadow
+file_permissions_backup_etc_passwd
+file_permissions_backup_etc_shadow
+file_permissions_cron_allow
+file_permissions_cron_d
+file_permissions_cron_daily
+file_permissions_cron_hourly
+file_permissions_cron_monthly
+file_permissions_cron_weekly
+file_permissions_cron_yearly
+file_permissions_crontab
+file_permissions_efi_grub2_cfg
+file_permissions_efi_user_cfg
+file_permissions_etc_group
+file_permissions_etc_gshadow
+file_permissions_etc_issue
+file_permissions_etc_issue_net
+file_permissions_etc_motd
+file_permissions_etc_passwd
+file_permissions_etc_security_opasswd
+file_permissions_etc_security_opasswd_old
+file_permissions_etc_shadow
+file_permissions_etc_shells
+file_permissions_grub2_cfg
+file_permissions_home_directories
+file_permissions_sshd_config
+file_permissions_sshd_drop_in_config
+file_permissions_sshd_private_key
+file_permissions_sshd_pub_key
+file_permissions_unauthorized_sgid
+file_permissions_unauthorized_suid
+file_permissions_unauthorized_world_writable
+file_permissions_ungroupowned
+file_permissions_user_cfg
+file_permissions_var_log_audit
+firewalld_sshd_port_enabled
+gid_passwd_group_same
+group_unique_id
+group_unique_name
+grub2_audit_argument
+grub2_audit_backlog_limit_argument
+grub2_enable_selinux
+grub2_nousb_argument
+grub2_rng_core_default_quality_argument
+install_antivirus
+install_endpoint_security_software
+install_hids
+kernel_module_bluetooth_disabled
+kernel_module_cfg80211_disabled
+kernel_module_firewire-core_disabled
+kernel_module_iwlmvm_disabled
+kernel_module_iwlwifi_disabled
+kernel_module_mac80211_disabled
+kernel_module_usb-storage_disabled
+mask_nonessential_services
+no_files_or_dirs_ungroupowned
+no_files_or_dirs_unowned_by_user
+only_allow_specific_certs
+package_aide_installed
+package_audit-libs_installed
+package_audit_installed
+package_cron_installed
+package_fapolicyd_installed
+package_firewalld_installed
+package_libselinux_installed
+package_telnet-server_removed
+package_telnet_removed
+partition_for_home
+partition_for_opt
+partition_for_tmp
+partition_for_usr
+partition_for_var
+partition_for_var_log
+partition_for_var_tmp
+rpm_verify_hashes
+rpm_verify_ownership
+selinux_confinement_of_daemons
+selinux_not_disabled
+selinux_policytype
+selinux_state
+service_auditd_enabled
+service_autofs_disabled
+service_bluetooth_disabled
+service_fapolicyd_enabled
+service_firewalld_enabled
+service_sshd_enabled
+set_firewalld_appropriate_zone
+sshd_allow_only_protocol2
+sshd_disable_empty_passwords
+sshd_disable_root_password_login
+sshd_enable_pubkey_auth
+unnecessary_firewalld_services_ports_disabled
+var_accounts_passwords_pam_faillock_dir=run
+var_audit_backlog_limit=8192
+var_selinux_policy_name=targeted
+var_selinux_state=enforcing
+wireless_disable_in_bios
+wireless_disable_interfaces
diff --git a/tests/data/profile_stability/rhel10/cis.profile b/tests/data/profile_stability/rhel10/cis.profile
index acb21b876b66..d59c4fb53bde 100644
--- a/tests/data/profile_stability/rhel10/cis.profile
+++ b/tests/data/profile_stability/rhel10/cis.profile
@@ -140,6 +140,8 @@ dconf_gnome_screensaver_idle_delay
 dconf_gnome_screensaver_lock_delay
 dconf_gnome_screensaver_user_locks
 dconf_gnome_session_idle_user_locks
+dconf_login_banner_contents=cis_default
+dconf_login_banner_text=cis_banners
 dir_perms_world_writable_sticky_bits
 directory_groupowner_sshd_config_d
 directory_owner_sshd_config_d
@@ -151,6 +153,7 @@ disable_weak_deps
 ensure_gpgcheck_globally_activated
 ensure_journald_and_rsyslog_not_active_together
 ensure_pam_wheel_group_empty
+ensure_redhat_gpgkey_installed
 ensure_root_password_configured
 file_at_allow_exists
 file_at_deny_not_exist
@@ -285,7 +288,6 @@ kernel_module_squashfs_disabled
 kernel_module_tipc_disabled
 kernel_module_udf_disabled
 kernel_module_usb-storage_disabled
-login_banner_text=cis_banners
 mount_option_dev_shm_nodev
 mount_option_dev_shm_noexec
 mount_option_dev_shm_nosuid
@@ -322,7 +324,6 @@ package_audit_installed
 package_bind_removed
 package_cron_installed
 package_cyrus-imapd_removed
-package_dnsmasq_removed
 package_dovecot_removed
 package_firewalld_installed
 package_ftp_removed
@@ -369,6 +370,7 @@ service_bluetooth_disabled
 service_cockpit_disabled
 service_crond_enabled
 service_cups_disabled
+service_dnsmasq_disabled
 service_firewalld_enabled
 service_nfs_disabled
 service_rpcbind_disabled
diff --git a/tests/data/profile_stability/rhel10/cis_server_l1.profile b/tests/data/profile_stability/rhel10/cis_server_l1.profile
index 1a8d4a413244..4eb3eeccf11e 100644
--- a/tests/data/profile_stability/rhel10/cis_server_l1.profile
+++ b/tests/data/profile_stability/rhel10/cis_server_l1.profile
@@ -63,6 +63,8 @@ dconf_gnome_screensaver_idle_delay
 dconf_gnome_screensaver_lock_delay
 dconf_gnome_screensaver_user_locks
 dconf_gnome_session_idle_user_locks
+dconf_login_banner_contents=cis_default
+dconf_login_banner_text=cis_banners
 dir_perms_world_writable_sticky_bits
 directory_groupowner_sshd_config_d
 directory_owner_sshd_config_d
@@ -72,6 +74,7 @@ disable_users_coredumps
 ensure_gpgcheck_globally_activated
 ensure_journald_and_rsyslog_not_active_together
 ensure_pam_wheel_group_empty
+ensure_redhat_gpgkey_installed
 ensure_root_password_configured
 file_at_allow_exists
 file_at_deny_not_exist
@@ -192,7 +195,6 @@ kernel_module_rds_disabled
 kernel_module_sctp_disabled
 kernel_module_tipc_disabled
 kernel_module_usb-storage_disabled
-login_banner_text=cis_banners
 mount_option_dev_shm_nodev
 mount_option_dev_shm_noexec
 mount_option_dev_shm_nosuid
@@ -226,7 +228,6 @@ package_aide_installed
 package_bind_removed
 package_cron_installed
 package_cyrus-imapd_removed
-package_dnsmasq_removed
 package_dovecot_removed
 package_firewalld_installed
 package_ftp_removed
@@ -262,6 +263,7 @@ service_avahi-daemon_disabled
 service_bluetooth_disabled
 service_crond_enabled
 service_cups_disabled
+service_dnsmasq_disabled
 service_firewalld_enabled
 service_nfs_disabled
 service_rpcbind_disabled
diff --git a/tests/data/profile_stability/rhel10/cis_workstation_l1.profile b/tests/data/profile_stability/rhel10/cis_workstation_l1.profile
index 63186a34c258..ee18ebf6b8ed 100644
--- a/tests/data/profile_stability/rhel10/cis_workstation_l1.profile
+++ b/tests/data/profile_stability/rhel10/cis_workstation_l1.profile
@@ -61,6 +61,8 @@ dconf_gnome_screensaver_idle_delay
 dconf_gnome_screensaver_lock_delay
 dconf_gnome_screensaver_user_locks
 dconf_gnome_session_idle_user_locks
+dconf_login_banner_contents=cis_default
+dconf_login_banner_text=cis_banners
 dir_perms_world_writable_sticky_bits
 directory_groupowner_sshd_config_d
 directory_owner_sshd_config_d
@@ -70,6 +72,7 @@ disable_users_coredumps
 ensure_gpgcheck_globally_activated
 ensure_journald_and_rsyslog_not_active_together
 ensure_pam_wheel_group_empty
+ensure_redhat_gpgkey_installed
 ensure_root_password_configured
 file_at_allow_exists
 file_at_deny_not_exist
@@ -188,7 +191,6 @@ kernel_module_jffs2_disabled
 kernel_module_rds_disabled
 kernel_module_sctp_disabled
 kernel_module_tipc_disabled
-login_banner_text=cis_banners
 mount_option_dev_shm_nodev
 mount_option_dev_shm_noexec
 mount_option_dev_shm_nosuid
@@ -222,7 +224,6 @@ package_aide_installed
 package_bind_removed
 package_cron_installed
 package_cyrus-imapd_removed
-package_dnsmasq_removed
 package_dovecot_removed
 package_firewalld_installed
 package_ftp_removed
@@ -253,6 +254,7 @@ rsyslog_files_permissions
 selinux_not_disabled
 selinux_policytype
 service_crond_enabled
+service_dnsmasq_disabled
 service_firewalld_enabled
 service_nfs_disabled
 service_rpcbind_disabled
diff --git a/tests/data/profile_stability/rhel10/cis_workstation_l2.profile b/tests/data/profile_stability/rhel10/cis_workstation_l2.profile
index 221ffac17557..44b0fc37e7ec 100644
--- a/tests/data/profile_stability/rhel10/cis_workstation_l2.profile
+++ b/tests/data/profile_stability/rhel10/cis_workstation_l2.profile
@@ -140,6 +140,8 @@ dconf_gnome_screensaver_idle_delay
 dconf_gnome_screensaver_lock_delay
 dconf_gnome_screensaver_user_locks
 dconf_gnome_session_idle_user_locks
+dconf_login_banner_contents=cis_default
+dconf_login_banner_text=cis_banners
 dir_perms_world_writable_sticky_bits
 directory_groupowner_sshd_config_d
 directory_owner_sshd_config_d
@@ -151,6 +153,7 @@ disable_weak_deps
 ensure_gpgcheck_globally_activated
 ensure_journald_and_rsyslog_not_active_together
 ensure_pam_wheel_group_empty
+ensure_redhat_gpgkey_installed
 ensure_root_password_configured
 file_at_allow_exists
 file_at_deny_not_exist
@@ -285,7 +288,6 @@ kernel_module_squashfs_disabled
 kernel_module_tipc_disabled
 kernel_module_udf_disabled
 kernel_module_usb-storage_disabled
-login_banner_text=cis_banners
 mount_option_dev_shm_nodev
 mount_option_dev_shm_noexec
 mount_option_dev_shm_nosuid
@@ -322,7 +324,6 @@ package_audit_installed
 package_bind_removed
 package_cron_installed
 package_cyrus-imapd_removed
-package_dnsmasq_removed
 package_dovecot_removed
 package_firewalld_installed
 package_ftp_removed
@@ -365,6 +366,7 @@ service_avahi-daemon_disabled
 service_bluetooth_disabled
 service_cockpit_disabled
 service_crond_enabled
+service_dnsmasq_disabled
 service_firewalld_enabled
 service_nfs_disabled
 service_rpcbind_disabled
diff --git a/tests/data/profile_stability/rhel10/stig.profile b/tests/data/profile_stability/rhel10/stig.profile
index d9709ad69bbf..dd157f79d28e 100644
--- a/tests/data/profile_stability/rhel10/stig.profile
+++ b/tests/data/profile_stability/rhel10/stig.profile
@@ -318,6 +318,7 @@ kernel_module_sctp_disabled
 kernel_module_tipc_disabled
 kernel_module_usb-storage_disabled
 libreswan_approved_tunnels
+login_banner_contents=dod_default
 login_banner_text=dod_banners
 logind_session_timeout
 mount_option_boot_nodev
diff --git a/tests/data/profile_stability/rhel10/stig_gui.profile b/tests/data/profile_stability/rhel10/stig_gui.profile
index e5632d66dad0..22c29b3b1a40 100644
--- a/tests/data/profile_stability/rhel10/stig_gui.profile
+++ b/tests/data/profile_stability/rhel10/stig_gui.profile
@@ -318,6 +318,7 @@ kernel_module_sctp_disabled
 kernel_module_tipc_disabled
 kernel_module_usb-storage_disabled
 libreswan_approved_tunnels
+login_banner_contents=dod_default
 login_banner_text=dod_banners
 mount_option_boot_nodev
 mount_option_boot_nosuid
diff --git a/tests/data/profile_stability/rhel8/cis.profile b/tests/data/profile_stability/rhel8/cis.profile
index 40ef7718866d..bd44b63338dc 100644
--- a/tests/data/profile_stability/rhel8/cis.profile
+++ b/tests/data/profile_stability/rhel8/cis.profile
@@ -130,6 +130,8 @@ dconf_gnome_screensaver_idle_delay
 dconf_gnome_screensaver_lock_delay
 dconf_gnome_screensaver_user_locks
 dconf_gnome_session_idle_user_locks
+dconf_login_banner_contents=cis_default
+dconf_login_banner_text=cis_banners
 dir_perms_world_writable_sticky_bits
 directory_permissions_var_log_audit
 disable_host_auth
@@ -139,6 +141,7 @@ enable_authselect
 ensure_gpgcheck_globally_activated
 ensure_gpgcheck_never_disabled
 ensure_pam_wheel_group_empty
+ensure_redhat_gpgkey_installed
 ensure_root_password_configured
 file_at_allow_exists
 file_at_deny_not_exist
@@ -283,7 +286,6 @@ kernel_module_squashfs_disabled
 kernel_module_tipc_disabled
 kernel_module_udf_disabled
 kernel_module_usb-storage_disabled
-login_banner_text=cis_banners
 mount_option_dev_shm_nodev
 mount_option_dev_shm_noexec
 mount_option_dev_shm_nosuid
@@ -323,7 +325,6 @@ package_chrony_installed
 package_cron_installed
 package_cyrus-imapd_removed
 package_dhcp_removed
-package_dnsmasq_removed
 package_dovecot_removed
 package_firewalld_installed
 package_ftp_removed
@@ -376,6 +377,7 @@ service_bluetooth_disabled
 service_cockpit_disabled
 service_crond_enabled
 service_cups_disabled
+service_dnsmasq_disabled
 service_firewalld_enabled
 service_nfs_disabled
 service_rpcbind_disabled
diff --git a/tests/data/profile_stability/rhel8/cis_server_l1.profile b/tests/data/profile_stability/rhel8/cis_server_l1.profile
index c186914d253b..02e03741db9a 100644
--- a/tests/data/profile_stability/rhel8/cis_server_l1.profile
+++ b/tests/data/profile_stability/rhel8/cis_server_l1.profile
@@ -63,6 +63,8 @@ dconf_gnome_screensaver_idle_delay
 dconf_gnome_screensaver_lock_delay
 dconf_gnome_screensaver_user_locks
 dconf_gnome_session_idle_user_locks
+dconf_login_banner_contents=cis_default
+dconf_login_banner_text=cis_banners
 dir_perms_world_writable_sticky_bits
 disable_host_auth
 disable_users_coredumps
@@ -70,6 +72,7 @@ enable_authselect
 ensure_gpgcheck_globally_activated
 ensure_gpgcheck_never_disabled
 ensure_pam_wheel_group_empty
+ensure_redhat_gpgkey_installed
 ensure_root_password_configured
 file_at_allow_exists
 file_at_deny_not_exist
@@ -200,7 +203,6 @@ kernel_module_rds_disabled
 kernel_module_sctp_disabled
 kernel_module_tipc_disabled
 kernel_module_usb-storage_disabled
-login_banner_text=cis_banners
 mount_option_dev_shm_nodev
 mount_option_dev_shm_noexec
 mount_option_dev_shm_nosuid
@@ -237,7 +239,6 @@ package_chrony_installed
 package_cron_installed
 package_cyrus-imapd_removed
 package_dhcp_removed
-package_dnsmasq_removed
 package_dovecot_removed
 package_firewalld_installed
 package_ftp_removed
@@ -279,6 +280,7 @@ service_avahi-daemon_disabled
 service_bluetooth_disabled
 service_crond_enabled
 service_cups_disabled
+service_dnsmasq_disabled
 service_firewalld_enabled
 service_nfs_disabled
 service_rpcbind_disabled
diff --git a/tests/data/profile_stability/rhel8/cis_workstation_l1.profile b/tests/data/profile_stability/rhel8/cis_workstation_l1.profile
index f53d2e0dd714..2576b980b21d 100644
--- a/tests/data/profile_stability/rhel8/cis_workstation_l1.profile
+++ b/tests/data/profile_stability/rhel8/cis_workstation_l1.profile
@@ -61,6 +61,8 @@ dconf_gnome_screensaver_idle_delay
 dconf_gnome_screensaver_lock_delay
 dconf_gnome_screensaver_user_locks
 dconf_gnome_session_idle_user_locks
+dconf_login_banner_contents=cis_default
+dconf_login_banner_text=cis_banners
 dir_perms_world_writable_sticky_bits
 disable_host_auth
 disable_users_coredumps
@@ -68,6 +70,7 @@ enable_authselect
 ensure_gpgcheck_globally_activated
 ensure_gpgcheck_never_disabled
 ensure_pam_wheel_group_empty
+ensure_redhat_gpgkey_installed
 ensure_root_password_configured
 file_at_allow_exists
 file_at_deny_not_exist
@@ -197,7 +200,6 @@ kernel_module_jffs2_disabled
 kernel_module_rds_disabled
 kernel_module_sctp_disabled
 kernel_module_tipc_disabled
-login_banner_text=cis_banners
 mount_option_dev_shm_nodev
 mount_option_dev_shm_noexec
 mount_option_dev_shm_nosuid
@@ -234,7 +236,6 @@ package_chrony_installed
 package_cron_installed
 package_cyrus-imapd_removed
 package_dhcp_removed
-package_dnsmasq_removed
 package_dovecot_removed
 package_firewalld_installed
 package_ftp_removed
@@ -271,6 +272,7 @@ rsyslog_nolisten
 selinux_not_disabled
 selinux_policytype
 service_crond_enabled
+service_dnsmasq_disabled
 service_firewalld_enabled
 service_nfs_disabled
 service_rpcbind_disabled
diff --git a/tests/data/profile_stability/rhel8/cis_workstation_l2.profile b/tests/data/profile_stability/rhel8/cis_workstation_l2.profile
index f43c7d9ea9b5..165fa1148947 100644
--- a/tests/data/profile_stability/rhel8/cis_workstation_l2.profile
+++ b/tests/data/profile_stability/rhel8/cis_workstation_l2.profile
@@ -130,6 +130,8 @@ dconf_gnome_screensaver_idle_delay
 dconf_gnome_screensaver_lock_delay
 dconf_gnome_screensaver_user_locks
 dconf_gnome_session_idle_user_locks
+dconf_login_banner_contents=cis_default
+dconf_login_banner_text=cis_banners
 dir_perms_world_writable_sticky_bits
 directory_permissions_var_log_audit
 disable_host_auth
@@ -139,6 +141,7 @@ enable_authselect
 ensure_gpgcheck_globally_activated
 ensure_gpgcheck_never_disabled
 ensure_pam_wheel_group_empty
+ensure_redhat_gpgkey_installed
 ensure_root_password_configured
 file_at_allow_exists
 file_at_deny_not_exist
@@ -283,7 +286,6 @@ kernel_module_squashfs_disabled
 kernel_module_tipc_disabled
 kernel_module_udf_disabled
 kernel_module_usb-storage_disabled
-login_banner_text=cis_banners
 mount_option_dev_shm_nodev
 mount_option_dev_shm_noexec
 mount_option_dev_shm_nosuid
@@ -323,7 +325,6 @@ package_chrony_installed
 package_cron_installed
 package_cyrus-imapd_removed
 package_dhcp_removed
-package_dnsmasq_removed
 package_dovecot_removed
 package_firewalld_installed
 package_ftp_removed
@@ -372,6 +373,7 @@ service_avahi-daemon_disabled
 service_bluetooth_disabled
 service_cockpit_disabled
 service_crond_enabled
+service_dnsmasq_disabled
 service_firewalld_enabled
 service_nfs_disabled
 service_rpcbind_disabled
diff --git a/tests/data/profile_stability/rhel8/rht-ccp.profile b/tests/data/profile_stability/rhel8/rht-ccp.profile
index 6d06160f5770..4faa19a2b5ec 100644
--- a/tests/data/profile_stability/rhel8/rht-ccp.profile
+++ b/tests/data/profile_stability/rhel8/rht-ccp.profile
@@ -41,6 +41,7 @@ firewalld_sshd_port_enabled
 grub2_password
 kernel_module_dccp_disabled
 kernel_module_sctp_disabled
+login_banner_contents=usgcb_default
 login_banner_text=usgcb_default
 no_empty_passwords
 no_shelllogin_for_systemaccounts
diff --git a/tests/data/profile_stability/rhel8/stig.profile b/tests/data/profile_stability/rhel8/stig.profile
index 60efb6228656..e6e3561e18a8 100644
--- a/tests/data/profile_stability/rhel8/stig.profile
+++ b/tests/data/profile_stability/rhel8/stig.profile
@@ -35,15 +35,13 @@ accounts_passwords_pam_faillock_dir
 accounts_passwords_pam_faillock_interval
 accounts_passwords_pam_faillock_silent
 accounts_passwords_pam_faillock_unlock_time
-accounts_umask_etc_bashrc
-accounts_umask_etc_csh_cshrc
+accounts_tmout
 accounts_umask_etc_login_defs
-accounts_umask_etc_profile
 accounts_umask_interactive_users
-accounts_user_dot_no_world_writable_programs
 accounts_user_home_paths_only
 accounts_user_interactive_home_directory_defined
 accounts_user_interactive_home_directory_exists
+accounts_user_interactive_home_directory_on_separate_partition
 accounts_users_home_files_groupownership
 accounts_users_home_files_permissions
 aide_build_database
@@ -140,12 +138,7 @@ clean_components_post_updating
 configure_bind_crypto_policy
 configure_crypto_policy
 configure_firewalld_ports
-configure_gnutls_tls_crypto_policy
-configure_kerberos_crypto_policy
 configure_libreswan_crypto_policy
-configure_openssl_crypto_policy
-configure_openssl_tls_crypto_policy
-configure_ssh_crypto_policy
 configure_usbguard_auditbackend
 configured_firewalld_default_deny
 coredump_disable_backtraces
@@ -161,6 +154,8 @@ dconf_gnome_screensaver_lock_enabled
 dconf_gnome_screensaver_lock_locked
 dconf_gnome_screensaver_user_locks
 dconf_gnome_session_idle_user_locks
+dconf_login_banner_contents=dod_default
+dconf_login_banner_text=dod_banners
 dir_group_ownership_library_dirs
 dir_ownership_library_dirs
 dir_permissions_library_dirs
@@ -174,10 +169,7 @@ disable_ctrlaltdel_burstaction
 disable_ctrlaltdel_reboot
 disable_users_coredumps
 disallow_bypass_password_sudo
-display_login_attempts
 enable_authselect
-enable_dracut_fips_module
-enable_fips_mode
 enable_gpgcheck_for_all_repositories
 encrypt_partitions
 ensure_epel_repos_disabled
@@ -210,6 +202,7 @@ file_permissions_var_log
 file_permissions_var_log_audit
 file_permissions_var_log_messages
 fips_crypto_subpolicy
+fips_custom_stig_sub_policy
 firewalld-backend
 gnome_gdm_disable_automatic_login
 grub2_admin_username
@@ -222,10 +215,6 @@ grub2_pti_argument
 grub2_uefi_admin_username
 grub2_uefi_password
 grub2_vsyscall_argument
-harden_sshd_ciphers_openssh_conf_crypto_policy
-harden_sshd_ciphers_opensshserver_conf_crypto_policy
-harden_sshd_macs_openssh_conf_crypto_policy
-harden_sshd_macs_opensshserver_conf_crypto_policy
 install_smartcard_packages
 installed_OS_is_vendor_supported
 kerberos_disable_no_keytab
@@ -238,6 +227,7 @@ kernel_module_sctp_disabled
 kernel_module_tipc_disabled
 kernel_module_usb-storage_disabled
 kernel_module_uvcvideo_disabled
+login_banner_contents=dod_default
 login_banner_text=dod_banners
 logind_session_timeout
 mount_option_boot_efi_nosuid
@@ -280,6 +270,7 @@ package_abrt-plugin-sosreport_removed
 package_abrt_removed
 package_aide_installed
 package_audit_installed
+package_crypto-policies_installed
 package_fapolicyd_installed
 package_firewalld_installed
 package_gssproxy_removed
@@ -359,7 +350,6 @@ sshd_print_last_log
 sshd_rekey_limit
 sshd_set_idle_timeout
 sshd_set_keepalive
-sshd_use_approved_kex_ordered_stig
 sshd_use_strong_rng
 sshd_x11_use_localhost
 sssd_certificate_verification
@@ -373,7 +363,6 @@ sudo_require_reauthentication
 sudo_restrict_privilege_elevation_to_authorized
 sudoers_default_includedir
 sudoers_validate_passwd
-sysctl_crypto_fips_enabled
 sysctl_fs_protected_hardlinks
 sysctl_fs_protected_symlinks
 sysctl_kernel_core_pattern
@@ -413,6 +402,7 @@ var_accounts_minimum_age_login_defs=1
 var_accounts_passwords_pam_faillock_deny=3
 var_accounts_passwords_pam_faillock_fail_interval=900
 var_accounts_passwords_pam_faillock_unlock_time=never
+var_accounts_tmout=10_min
 var_accounts_user_umask=077
 var_audit_backlog_limit=8192
 var_auditd_action_mail_acct=root
@@ -451,7 +441,7 @@ var_ssh_client_rekey_limit_time=1hour
 var_sshd_set_keepalive=1
 var_sssd_certificate_verification_digest_function=sha1
 var_sudo_timestamp_timeout=always_prompt
-var_system_crypto_policy=fips
+var_system_crypto_policy=fips_stig
 var_time_service_set_maxpoll=18_hours
 var_user_initialization_files_regex=all_dotfiles
 wireless_disable_interfaces
diff --git a/tests/data/profile_stability/rhel8/stig_gui.profile b/tests/data/profile_stability/rhel8/stig_gui.profile
index 2c4efdbf7465..79544c850455 100644
--- a/tests/data/profile_stability/rhel8/stig_gui.profile
+++ b/tests/data/profile_stability/rhel8/stig_gui.profile
@@ -35,15 +35,13 @@ accounts_passwords_pam_faillock_dir
 accounts_passwords_pam_faillock_interval
 accounts_passwords_pam_faillock_silent
 accounts_passwords_pam_faillock_unlock_time
-accounts_umask_etc_bashrc
-accounts_umask_etc_csh_cshrc
+accounts_tmout
 accounts_umask_etc_login_defs
-accounts_umask_etc_profile
 accounts_umask_interactive_users
-accounts_user_dot_no_world_writable_programs
 accounts_user_home_paths_only
 accounts_user_interactive_home_directory_defined
 accounts_user_interactive_home_directory_exists
+accounts_user_interactive_home_directory_on_separate_partition
 accounts_users_home_files_groupownership
 accounts_users_home_files_permissions
 aide_build_database
@@ -140,12 +138,7 @@ clean_components_post_updating
 configure_bind_crypto_policy
 configure_crypto_policy
 configure_firewalld_ports
-configure_gnutls_tls_crypto_policy
-configure_kerberos_crypto_policy
 configure_libreswan_crypto_policy
-configure_openssl_crypto_policy
-configure_openssl_tls_crypto_policy
-configure_ssh_crypto_policy
 configure_usbguard_auditbackend
 configured_firewalld_default_deny
 coredump_disable_backtraces
@@ -161,6 +154,8 @@ dconf_gnome_screensaver_lock_enabled
 dconf_gnome_screensaver_lock_locked
 dconf_gnome_screensaver_user_locks
 dconf_gnome_session_idle_user_locks
+dconf_login_banner_contents=dod_default
+dconf_login_banner_text=dod_banners
 dir_group_ownership_library_dirs
 dir_ownership_library_dirs
 dir_permissions_library_dirs
@@ -174,10 +169,7 @@ disable_ctrlaltdel_burstaction
 disable_ctrlaltdel_reboot
 disable_users_coredumps
 disallow_bypass_password_sudo
-display_login_attempts
 enable_authselect
-enable_dracut_fips_module
-enable_fips_mode
 enable_gpgcheck_for_all_repositories
 encrypt_partitions
 ensure_epel_repos_disabled
@@ -210,6 +202,7 @@ file_permissions_var_log
 file_permissions_var_log_audit
 file_permissions_var_log_messages
 fips_crypto_subpolicy
+fips_custom_stig_sub_policy
 firewalld-backend
 gnome_gdm_disable_automatic_login
 grub2_admin_username
@@ -222,10 +215,6 @@ grub2_pti_argument
 grub2_uefi_admin_username
 grub2_uefi_password
 grub2_vsyscall_argument
-harden_sshd_ciphers_openssh_conf_crypto_policy
-harden_sshd_ciphers_opensshserver_conf_crypto_policy
-harden_sshd_macs_openssh_conf_crypto_policy
-harden_sshd_macs_opensshserver_conf_crypto_policy
 install_smartcard_packages
 installed_OS_is_vendor_supported
 kerberos_disable_no_keytab
@@ -238,6 +227,7 @@ kernel_module_sctp_disabled
 kernel_module_tipc_disabled
 kernel_module_usb-storage_disabled
 kernel_module_uvcvideo_disabled
+login_banner_contents=dod_default
 login_banner_text=dod_banners
 mount_option_boot_efi_nosuid
 mount_option_boot_nosuid
@@ -279,6 +269,7 @@ package_abrt-plugin-sosreport_removed
 package_abrt_removed
 package_aide_installed
 package_audit_installed
+package_crypto-policies_installed
 package_fapolicyd_installed
 package_firewalld_installed
 package_gssproxy_removed
@@ -357,7 +348,6 @@ sshd_print_last_log
 sshd_rekey_limit
 sshd_set_idle_timeout
 sshd_set_keepalive
-sshd_use_approved_kex_ordered_stig
 sshd_use_strong_rng
 sshd_x11_use_localhost
 sssd_certificate_verification
@@ -371,7 +361,6 @@ sudo_require_reauthentication
 sudo_restrict_privilege_elevation_to_authorized
 sudoers_default_includedir
 sudoers_validate_passwd
-sysctl_crypto_fips_enabled
 sysctl_fs_protected_hardlinks
 sysctl_fs_protected_symlinks
 sysctl_kernel_core_pattern
@@ -411,6 +400,7 @@ var_accounts_minimum_age_login_defs=1
 var_accounts_passwords_pam_faillock_deny=3
 var_accounts_passwords_pam_faillock_fail_interval=900
 var_accounts_passwords_pam_faillock_unlock_time=never
+var_accounts_tmout=10_min
 var_accounts_user_umask=077
 var_audit_backlog_limit=8192
 var_auditd_action_mail_acct=root
@@ -449,7 +439,7 @@ var_ssh_client_rekey_limit_time=1hour
 var_sshd_set_keepalive=1
 var_sssd_certificate_verification_digest_function=sha1
 var_sudo_timestamp_timeout=always_prompt
-var_system_crypto_policy=fips
+var_system_crypto_policy=fips_stig
 var_time_service_set_maxpoll=18_hours
 var_user_initialization_files_regex=all_dotfiles
 wireless_disable_interfaces
diff --git a/tests/data/profile_stability/rhel9/bsi.profile b/tests/data/profile_stability/rhel9/bsi.profile
new file mode 100644
index 000000000000..f58133592b00
--- /dev/null
+++ b/tests/data/profile_stability/rhel9/bsi.profile
@@ -0,0 +1,196 @@
+account_unique_id
+account_unique_name
+aide_build_database
+aide_periodic_cron_checking
+aide_scan_notification
+audit_rules_dac_modification_chmod
+audit_rules_dac_modification_chown
+audit_rules_dac_modification_fchmod
+audit_rules_dac_modification_fchmodat
+audit_rules_dac_modification_fchown
+audit_rules_dac_modification_fchownat
+audit_rules_dac_modification_fremovexattr
+audit_rules_dac_modification_fsetxattr
+audit_rules_dac_modification_lchown
+audit_rules_dac_modification_lremovexattr
+audit_rules_dac_modification_lsetxattr
+audit_rules_dac_modification_removexattr
+audit_rules_dac_modification_setxattr
+audit_rules_execution_chcon
+audit_rules_execution_setfacl
+audit_rules_login_events_faillock
+audit_rules_login_events_lastlog
+audit_rules_privileged_commands
+audit_rules_privileged_commands_usermod
+audit_rules_session_events
+audit_rules_suid_auid_privilege_function
+audit_rules_sysadmin_actions
+audit_rules_usergroup_modification_group
+audit_rules_usergroup_modification_gshadow
+audit_rules_usergroup_modification_opasswd
+audit_rules_usergroup_modification_passwd
+audit_rules_usergroup_modification_shadow
+audit_sudo_log_events
+bios_disable_usb_boot
+bios_enable_execution_restrictions
+configure_firewalld_ports
+encrypt_partitions
+fapolicy_default_deny
+file_group_ownership_var_log_audit
+file_groupowner_at_allow
+file_groupowner_backup_etc_group
+file_groupowner_backup_etc_gshadow
+file_groupowner_backup_etc_passwd
+file_groupowner_backup_etc_shadow
+file_groupowner_cron_allow
+file_groupowner_cron_d
+file_groupowner_cron_daily
+file_groupowner_cron_hourly
+file_groupowner_cron_monthly
+file_groupowner_cron_weekly
+file_groupowner_crontab
+file_groupowner_efi_grub2_cfg
+file_groupowner_efi_user_cfg
+file_groupowner_etc_group
+file_groupowner_etc_gshadow
+file_groupowner_etc_issue
+file_groupowner_etc_issue_net
+file_groupowner_etc_motd
+file_groupowner_etc_passwd
+file_groupowner_etc_shadow
+file_groupowner_etc_shells
+file_groupowner_grub2_cfg
+file_groupowner_sshd_config
+file_groupowner_user_cfg
+file_groupownership_audit_binaries
+file_groupownership_audit_configuration
+file_groupownership_home_directories
+file_groupownership_sshd_private_key
+file_groupownership_sshd_pub_key
+file_owner_at_allow
+file_owner_backup_etc_group
+file_owner_backup_etc_gshadow
+file_owner_backup_etc_passwd
+file_owner_backup_etc_shadow
+file_owner_cron_allow
+file_owner_cron_d
+file_owner_cron_daily
+file_owner_cron_hourly
+file_owner_cron_monthly
+file_owner_cron_weekly
+file_owner_crontab
+file_owner_efi_grub2_cfg
+file_owner_efi_user_cfg
+file_owner_etc_group
+file_owner_etc_gshadow
+file_owner_etc_issue
+file_owner_etc_issue_net
+file_owner_etc_motd
+file_owner_etc_passwd
+file_owner_etc_shadow
+file_owner_etc_shells
+file_owner_grub2_cfg
+file_owner_sshd_config
+file_owner_user_cfg
+file_ownership_audit_binaries
+file_ownership_audit_configuration
+file_ownership_home_directories
+file_ownership_sshd_private_key
+file_ownership_sshd_pub_key
+file_ownership_var_log_audit
+file_permissions_at_allow
+file_permissions_audit_binaries
+file_permissions_audit_configuration
+file_permissions_backup_etc_group
+file_permissions_backup_etc_gshadow
+file_permissions_backup_etc_passwd
+file_permissions_backup_etc_shadow
+file_permissions_cron_allow
+file_permissions_cron_d
+file_permissions_cron_daily
+file_permissions_cron_hourly
+file_permissions_cron_monthly
+file_permissions_cron_weekly
+file_permissions_crontab
+file_permissions_efi_grub2_cfg
+file_permissions_efi_user_cfg
+file_permissions_etc_group
+file_permissions_etc_gshadow
+file_permissions_etc_issue
+file_permissions_etc_issue_net
+file_permissions_etc_motd
+file_permissions_etc_passwd
+file_permissions_etc_shadow
+file_permissions_etc_shells
+file_permissions_grub2_cfg
+file_permissions_home_directories
+file_permissions_sshd_config
+file_permissions_sshd_private_key
+file_permissions_sshd_pub_key
+file_permissions_unauthorized_sgid
+file_permissions_unauthorized_suid
+file_permissions_unauthorized_world_writable
+file_permissions_ungroupowned
+file_permissions_user_cfg
+file_permissions_var_log_audit
+firewalld_sshd_port_enabled
+gid_passwd_group_same
+group_unique_id
+group_unique_name
+grub2_audit_argument
+grub2_audit_backlog_limit_argument
+grub2_enable_selinux
+grub2_nousb_argument
+grub2_rng_core_default_quality_argument
+install_antivirus
+install_endpoint_security_software
+install_hids
+kernel_module_bluetooth_disabled
+kernel_module_cfg80211_disabled
+kernel_module_firewire-core_disabled
+kernel_module_iwlmvm_disabled
+kernel_module_iwlwifi_disabled
+kernel_module_mac80211_disabled
+kernel_module_usb-storage_disabled
+mask_nonessential_services
+only_allow_specific_certs
+package_aide_installed
+package_audit-libs_installed
+package_audit_installed
+package_cron_installed
+package_fapolicyd_installed
+package_firewalld_installed
+package_libselinux_installed
+package_telnet-server_removed
+package_telnet_removed
+partition_for_home
+partition_for_opt
+partition_for_tmp
+partition_for_usr
+partition_for_var
+partition_for_var_log
+partition_for_var_tmp
+rpm_verify_hashes
+rpm_verify_ownership
+selinux_confinement_of_daemons
+selinux_not_disabled
+selinux_policytype
+selinux_state
+service_auditd_enabled
+service_autofs_disabled
+service_bluetooth_disabled
+service_fapolicyd_enabled
+service_firewalld_enabled
+service_sshd_enabled
+set_firewalld_appropriate_zone
+sshd_allow_only_protocol2
+sshd_disable_empty_passwords
+sshd_disable_root_password_login
+sshd_enable_pubkey_auth
+unnecessary_firewalld_services_ports_disabled
+var_accounts_passwords_pam_faillock_dir=run
+var_audit_backlog_limit=8192
+var_selinux_policy_name=targeted
+var_selinux_state=enforcing
+wireless_disable_in_bios
+wireless_disable_interfaces
diff --git a/tests/data/profile_stability/rhel9/ccn_advanced.profile b/tests/data/profile_stability/rhel9/ccn_advanced.profile
index 00b9660909b3..5a07e93c9a1c 100644
--- a/tests/data/profile_stability/rhel9/ccn_advanced.profile
+++ b/tests/data/profile_stability/rhel9/ccn_advanced.profile
@@ -66,6 +66,8 @@ dconf_gnome_disable_user_list
 dconf_gnome_login_banner_text
 dconf_gnome_screensaver_idle_delay
 dconf_gnome_screensaver_lock_delay
+dconf_login_banner_contents=cis_default
+dconf_login_banner_text=cis_banners
 directory_permissions_var_log_audit
 enable_authselect
 encrypt_partitions
@@ -90,7 +92,10 @@ inactivity_timeout_value=5_minutes
 kernel_module_squashfs_disabled
 kernel_module_udf_disabled
 kernel_module_usb-storage_disabled
+login_banner_contents=cis_default
 login_banner_text=cis_banners
+motd_banner_contents=cis_default
+motd_banner_text=cis_banners
 mount_option_boot_efi_nosuid
 mount_option_boot_nodev
 mount_option_boot_noexec
@@ -111,6 +116,7 @@ package_telnet-server_removed
 package_tftp-server_removed
 package_usbguard_installed
 package_vsftpd_removed
+remote_login_banner_contents=cis_default
 remote_login_banner_text=cis_banners
 selinux_policytype
 selinux_state
diff --git a/tests/data/profile_stability/rhel9/ccn_basic.profile b/tests/data/profile_stability/rhel9/ccn_basic.profile
index 00b96ffc1172..b1fb2d97365b 100644
--- a/tests/data/profile_stability/rhel9/ccn_basic.profile
+++ b/tests/data/profile_stability/rhel9/ccn_basic.profile
@@ -46,6 +46,8 @@ configure_crypto_policy
 dconf_db_up_to_date
 dconf_gnome_banner_enabled
 dconf_gnome_login_banner_text
+dconf_login_banner_contents=cis_default
+dconf_login_banner_text=cis_banners
 enable_authselect
 file_groupowner_grub2_cfg
 file_groupowner_user_cfg
@@ -56,13 +58,17 @@ file_permissions_user_cfg
 firewalld_loopback_traffic_restricted
 firewalld_loopback_traffic_trusted
 grub2_password
+login_banner_contents=cis_default
 login_banner_text=cis_banners
+motd_banner_contents=cis_default
+motd_banner_text=cis_banners
 mount_option_boot_efi_nosuid
 mount_option_boot_nodev
 mount_option_boot_noexec
 mount_option_boot_nosuid
 package_firewalld_installed
 package_usbguard_installed
+remote_login_banner_contents=cis_default
 remote_login_banner_text=cis_banners
 service_firewalld_enabled
 service_nftables_disabled
diff --git a/tests/data/profile_stability/rhel9/ccn_intermediate.profile b/tests/data/profile_stability/rhel9/ccn_intermediate.profile
index 80b4ea6efe36..6f226054e656 100644
--- a/tests/data/profile_stability/rhel9/ccn_intermediate.profile
+++ b/tests/data/profile_stability/rhel9/ccn_intermediate.profile
@@ -55,6 +55,8 @@ dconf_gnome_disable_user_list
 dconf_gnome_login_banner_text
 dconf_gnome_screensaver_idle_delay
 dconf_gnome_screensaver_lock_delay
+dconf_login_banner_contents=cis_default
+dconf_login_banner_text=cis_banners
 directory_permissions_var_log_audit
 enable_authselect
 ensure_root_password_configured
@@ -78,7 +80,10 @@ inactivity_timeout_value=5_minutes
 kernel_module_squashfs_disabled
 kernel_module_udf_disabled
 kernel_module_usb-storage_disabled
+login_banner_contents=cis_default
 login_banner_text=cis_banners
+motd_banner_contents=cis_default
+motd_banner_text=cis_banners
 mount_option_boot_efi_nosuid
 mount_option_boot_nodev
 mount_option_boot_noexec
@@ -98,6 +103,7 @@ package_telnet-server_removed
 package_tftp-server_removed
 package_usbguard_installed
 package_vsftpd_removed
+remote_login_banner_contents=cis_default
 remote_login_banner_text=cis_banners
 selinux_policytype
 selinux_state
diff --git a/tests/data/profile_stability/rhel9/cis.profile b/tests/data/profile_stability/rhel9/cis.profile
index 65f2ddc07f7e..a2f7813238af 100644
--- a/tests/data/profile_stability/rhel9/cis.profile
+++ b/tests/data/profile_stability/rhel9/cis.profile
@@ -128,6 +128,8 @@ dconf_gnome_screensaver_idle_delay
 dconf_gnome_screensaver_lock_delay
 dconf_gnome_screensaver_user_locks
 dconf_gnome_session_idle_user_locks
+dconf_login_banner_contents=cis_default
+dconf_login_banner_text=cis_banners
 dir_perms_world_writable_sticky_bits
 directory_permissions_var_log_audit
 disable_host_auth
@@ -135,6 +137,7 @@ enable_authselect
 ensure_gpgcheck_globally_activated
 ensure_gpgcheck_never_disabled
 ensure_pam_wheel_group_empty
+ensure_redhat_gpgkey_installed
 ensure_root_password_configured
 file_at_allow_exists
 file_at_deny_not_exist
@@ -254,7 +257,6 @@ kernel_module_squashfs_disabled
 kernel_module_tipc_disabled
 kernel_module_udf_disabled
 kernel_module_usb-storage_disabled
-login_banner_text=cis_banners
 mount_option_dev_shm_nodev
 mount_option_dev_shm_noexec
 mount_option_dev_shm_nosuid
@@ -292,7 +294,6 @@ package_chrony_installed
 package_cron_installed
 package_cyrus-imapd_removed
 package_dhcp_removed
-package_dnsmasq_removed
 package_dovecot_removed
 package_firewalld_installed
 package_ftp_removed
@@ -339,6 +340,7 @@ service_avahi-daemon_disabled
 service_bluetooth_disabled
 service_crond_enabled
 service_cups_disabled
+service_dnsmasq_disabled
 service_firewalld_enabled
 service_nfs_disabled
 service_nftables_disabled
diff --git a/tests/data/profile_stability/rhel9/cis_server_l1.profile b/tests/data/profile_stability/rhel9/cis_server_l1.profile
index ac83e2c0a321..fb24601f97fe 100644
--- a/tests/data/profile_stability/rhel9/cis_server_l1.profile
+++ b/tests/data/profile_stability/rhel9/cis_server_l1.profile
@@ -57,12 +57,15 @@ dconf_gnome_screensaver_idle_delay
 dconf_gnome_screensaver_lock_delay
 dconf_gnome_screensaver_user_locks
 dconf_gnome_session_idle_user_locks
+dconf_login_banner_contents=cis_default
+dconf_login_banner_text=cis_banners
 dir_perms_world_writable_sticky_bits
 disable_host_auth
 enable_authselect
 ensure_gpgcheck_globally_activated
 ensure_gpgcheck_never_disabled
 ensure_pam_wheel_group_empty
+ensure_redhat_gpgkey_installed
 ensure_root_password_configured
 file_at_allow_exists
 file_at_deny_not_exist
@@ -165,7 +168,6 @@ kernel_module_hfs_disabled
 kernel_module_hfsplus_disabled
 kernel_module_jffs2_disabled
 kernel_module_usb-storage_disabled
-login_banner_text=cis_banners
 mount_option_dev_shm_nodev
 mount_option_dev_shm_noexec
 mount_option_dev_shm_nosuid
@@ -201,7 +203,6 @@ package_chrony_installed
 package_cron_installed
 package_cyrus-imapd_removed
 package_dhcp_removed
-package_dnsmasq_removed
 package_dovecot_removed
 package_firewalld_installed
 package_ftp_removed
@@ -238,6 +239,7 @@ service_avahi-daemon_disabled
 service_bluetooth_disabled
 service_crond_enabled
 service_cups_disabled
+service_dnsmasq_disabled
 service_firewalld_enabled
 service_nfs_disabled
 service_nftables_disabled
diff --git a/tests/data/profile_stability/rhel9/cis_workstation_l1.profile b/tests/data/profile_stability/rhel9/cis_workstation_l1.profile
index fb685c741479..799da33423e1 100644
--- a/tests/data/profile_stability/rhel9/cis_workstation_l1.profile
+++ b/tests/data/profile_stability/rhel9/cis_workstation_l1.profile
@@ -55,12 +55,15 @@ dconf_gnome_screensaver_idle_delay
 dconf_gnome_screensaver_lock_delay
 dconf_gnome_screensaver_user_locks
 dconf_gnome_session_idle_user_locks
+dconf_login_banner_contents=cis_default
+dconf_login_banner_text=cis_banners
 dir_perms_world_writable_sticky_bits
 disable_host_auth
 enable_authselect
 ensure_gpgcheck_globally_activated
 ensure_gpgcheck_never_disabled
 ensure_pam_wheel_group_empty
+ensure_redhat_gpgkey_installed
 ensure_root_password_configured
 file_at_allow_exists
 file_at_deny_not_exist
@@ -162,7 +165,6 @@ kernel_module_freevxfs_disabled
 kernel_module_hfs_disabled
 kernel_module_hfsplus_disabled
 kernel_module_jffs2_disabled
-login_banner_text=cis_banners
 mount_option_dev_shm_nodev
 mount_option_dev_shm_noexec
 mount_option_dev_shm_nosuid
@@ -198,7 +200,6 @@ package_chrony_installed
 package_cron_installed
 package_cyrus-imapd_removed
 package_dhcp_removed
-package_dnsmasq_removed
 package_dovecot_removed
 package_firewalld_installed
 package_ftp_removed
@@ -230,6 +231,7 @@ rsyslog_files_permissions
 selinux_not_disabled
 selinux_policytype
 service_crond_enabled
+service_dnsmasq_disabled
 service_firewalld_enabled
 service_nfs_disabled
 service_nftables_disabled
diff --git a/tests/data/profile_stability/rhel9/cis_workstation_l2.profile b/tests/data/profile_stability/rhel9/cis_workstation_l2.profile
index 3fc4bebf0c4a..4e0da9c5fe6a 100644
--- a/tests/data/profile_stability/rhel9/cis_workstation_l2.profile
+++ b/tests/data/profile_stability/rhel9/cis_workstation_l2.profile
@@ -128,6 +128,8 @@ dconf_gnome_screensaver_idle_delay
 dconf_gnome_screensaver_lock_delay
 dconf_gnome_screensaver_user_locks
 dconf_gnome_session_idle_user_locks
+dconf_login_banner_contents=cis_default
+dconf_login_banner_text=cis_banners
 dir_perms_world_writable_sticky_bits
 directory_permissions_var_log_audit
 disable_host_auth
@@ -135,6 +137,7 @@ enable_authselect
 ensure_gpgcheck_globally_activated
 ensure_gpgcheck_never_disabled
 ensure_pam_wheel_group_empty
+ensure_redhat_gpgkey_installed
 ensure_root_password_configured
 file_at_allow_exists
 file_at_deny_not_exist
@@ -254,7 +257,6 @@ kernel_module_squashfs_disabled
 kernel_module_tipc_disabled
 kernel_module_udf_disabled
 kernel_module_usb-storage_disabled
-login_banner_text=cis_banners
 mount_option_dev_shm_nodev
 mount_option_dev_shm_noexec
 mount_option_dev_shm_nosuid
@@ -292,7 +294,6 @@ package_chrony_installed
 package_cron_installed
 package_cyrus-imapd_removed
 package_dhcp_removed
-package_dnsmasq_removed
 package_dovecot_removed
 package_firewalld_installed
 package_ftp_removed
@@ -335,6 +336,7 @@ service_autofs_disabled
 service_avahi-daemon_disabled
 service_bluetooth_disabled
 service_crond_enabled
+service_dnsmasq_disabled
 service_firewalld_enabled
 service_nfs_disabled
 service_nftables_disabled
diff --git a/tests/data/profile_stability/rhel9/stig.profile b/tests/data/profile_stability/rhel9/stig.profile
index f9cb4c7564e3..54b834b2cfd3 100644
--- a/tests/data/profile_stability/rhel9/stig.profile
+++ b/tests/data/profile_stability/rhel9/stig.profile
@@ -70,6 +70,7 @@ audit_rules_dac_modification_removexattr
 audit_rules_dac_modification_setxattr
 audit_rules_dac_modification_umount
 audit_rules_dac_modification_umount2
+audit_rules_etc_cron_d
 audit_rules_execution_chacl
 audit_rules_execution_chcon
 audit_rules_execution_semanage
@@ -123,6 +124,7 @@ audit_rules_usergroup_modification_gshadow
 audit_rules_usergroup_modification_opasswd
 audit_rules_usergroup_modification_passwd
 audit_rules_usergroup_modification_shadow
+audit_rules_var_spool_cron
 auditd_audispd_configure_sufficiently_large_partition
 auditd_data_disk_error_action_stig
 auditd_data_disk_full_action_stig
@@ -147,7 +149,6 @@ chronyd_specify_remote_server
 clean_components_post_updating
 configure_bind_crypto_policy
 configure_crypto_policy
-configure_kerberos_crypto_policy
 configure_libreswan_crypto_policy
 configure_opensc_card_drivers
 configure_usbguard_auditbackend
@@ -169,11 +170,13 @@ dconf_gnome_screensaver_lock_enabled
 dconf_gnome_screensaver_mode_blank
 dconf_gnome_screensaver_user_locks
 dconf_gnome_session_idle_user_locks
+dconf_login_banner_contents=dod_default
+dconf_login_banner_text=dod_banners
 dir_group_ownership_library_dirs
 dir_ownership_library_dirs
 dir_permissions_library_dirs
-dir_perms_world_writable_root_owned
 dir_perms_world_writable_sticky_bits
+dir_perms_world_writable_system_owned
 directory_group_ownership_var_log_audit
 directory_groupowner_sshd_config_d
 directory_owner_sshd_config_d
@@ -291,6 +294,7 @@ harden_sshd_ciphers_openssh_conf_crypto_policy
 harden_sshd_ciphers_opensshserver_conf_crypto_policy
 harden_sshd_macs_openssh_conf_crypto_policy
 harden_sshd_macs_opensshserver_conf_crypto_policy
+inactivity_timeout_value=10_minutes
 install_smartcard_packages
 installed_OS_is_vendor_supported
 kernel_module_atm_disabled
@@ -302,6 +306,7 @@ kernel_module_sctp_disabled
 kernel_module_tipc_disabled
 kernel_module_usb-storage_disabled
 libreswan_approved_tunnels
+login_banner_contents=dod_default
 login_banner_text=dod_banners
 logind_session_timeout
 mount_option_boot_efi_nosuid
@@ -510,7 +515,7 @@ var_auditd_name_format=stig
 var_auditd_space_left_action=email
 var_auditd_space_left_percentage=25pc
 var_authselect_profile=sssd
-var_logind_session_timeout=15_minutes
+var_logind_session_timeout=10_minutes
 var_multiple_time_servers=stig
 var_networkmanager_dns_mode=explicit_default
 var_password_hashing_algorithm=SHA512
diff --git a/tests/data/profile_stability/rhel9/stig_gui.profile b/tests/data/profile_stability/rhel9/stig_gui.profile
index 8bcd4a87c353..70e9b9c0914b 100644
--- a/tests/data/profile_stability/rhel9/stig_gui.profile
+++ b/tests/data/profile_stability/rhel9/stig_gui.profile
@@ -70,6 +70,7 @@ audit_rules_dac_modification_removexattr
 audit_rules_dac_modification_setxattr
 audit_rules_dac_modification_umount
 audit_rules_dac_modification_umount2
+audit_rules_etc_cron_d
 audit_rules_execution_chacl
 audit_rules_execution_chcon
 audit_rules_execution_semanage
@@ -123,6 +124,7 @@ audit_rules_usergroup_modification_gshadow
 audit_rules_usergroup_modification_opasswd
 audit_rules_usergroup_modification_passwd
 audit_rules_usergroup_modification_shadow
+audit_rules_var_spool_cron
 auditd_audispd_configure_sufficiently_large_partition
 auditd_data_disk_error_action_stig
 auditd_data_disk_full_action_stig
@@ -147,7 +149,6 @@ chronyd_specify_remote_server
 clean_components_post_updating
 configure_bind_crypto_policy
 configure_crypto_policy
-configure_kerberos_crypto_policy
 configure_libreswan_crypto_policy
 configure_opensc_card_drivers
 configure_usbguard_auditbackend
@@ -169,11 +170,13 @@ dconf_gnome_screensaver_lock_enabled
 dconf_gnome_screensaver_mode_blank
 dconf_gnome_screensaver_user_locks
 dconf_gnome_session_idle_user_locks
+dconf_login_banner_contents=dod_default
+dconf_login_banner_text=dod_banners
 dir_group_ownership_library_dirs
 dir_ownership_library_dirs
 dir_permissions_library_dirs
-dir_perms_world_writable_root_owned
 dir_perms_world_writable_sticky_bits
+dir_perms_world_writable_system_owned
 directory_group_ownership_var_log_audit
 directory_groupowner_sshd_config_d
 directory_owner_sshd_config_d
@@ -291,6 +294,7 @@ harden_sshd_ciphers_openssh_conf_crypto_policy
 harden_sshd_ciphers_opensshserver_conf_crypto_policy
 harden_sshd_macs_openssh_conf_crypto_policy
 harden_sshd_macs_opensshserver_conf_crypto_policy
+inactivity_timeout_value=10_minutes
 install_smartcard_packages
 installed_OS_is_vendor_supported
 kernel_module_atm_disabled
@@ -302,6 +306,7 @@ kernel_module_sctp_disabled
 kernel_module_tipc_disabled
 kernel_module_usb-storage_disabled
 libreswan_approved_tunnels
+login_banner_contents=dod_default
 login_banner_text=dod_banners
 mount_option_boot_efi_nosuid
 mount_option_boot_nodev
@@ -508,7 +513,7 @@ var_auditd_name_format=stig
 var_auditd_space_left_action=email
 var_auditd_space_left_percentage=25pc
 var_authselect_profile=sssd
-var_logind_session_timeout=15_minutes
+var_logind_session_timeout=10_minutes
 var_multiple_time_servers=stig
 var_networkmanager_dns_mode=explicit_default
 var_password_hashing_algorithm=SHA512
diff --git a/tests/shared/audit_rules_watch/auditctl_wrong_rule.fail.sh b/tests/shared/audit_rules_watch/auditctl_wrong_rule.fail.sh
index e17d5be18d41..5151b4181df1 100644
--- a/tests/shared/audit_rules_watch/auditctl_wrong_rule.fail.sh
+++ b/tests/shared/audit_rules_watch/auditctl_wrong_rule.fail.sh
@@ -2,8 +2,11 @@
 # packages = audit
 
 if [[ "$style" == "modern" ]] ; then
+    escaped_path=$(echo "$path" | sed 's/\//\\\//g')
+    sed -i "/$filter_type=$escaped_path/d" /etc/audit/audit.rules 
     echo "-a always,exit -F arch=b32 -F $filter_type=$path -F perm=w -F key=logins" >> /etc/audit/audit.rules
     echo "-a always,exit -F arch=b64 -F $filter_type=$path -F perm=w -F key=logins" >> /etc/audit/audit.rules
 else
+    sed -i "\#-w $path#d" /etc/audit/audit.rules
     echo "-w $path -p w -k logins" >> /etc/audit/audit.rules
 fi
diff --git a/tests/shared/audit_rules_watch/auditctl_wrong_rule_without_key.fail.sh b/tests/shared/audit_rules_watch/auditctl_wrong_rule_without_key.fail.sh
index 4cf6a4c52725..98b0fdbcc042 100644
--- a/tests/shared/audit_rules_watch/auditctl_wrong_rule_without_key.fail.sh
+++ b/tests/shared/audit_rules_watch/auditctl_wrong_rule_without_key.fail.sh
@@ -2,8 +2,11 @@
 # packages = audit
 
 if [[ "$style" == "modern" ]] ; then
+    escaped_path=$(echo "$path" | sed 's/\//\\\//g')
+    sed -i "/$filter_type=$escaped_path/d" /etc/audit/audit.rules
     echo "-a always,exit -F arch=b32 -F $filter_type=$path -F perm=w" >> /etc/audit/audit.rules
     echo "-a always,exit -F arch=b64 -F $filter_type=$path -F perm=w" >> /etc/audit/audit.rules
 else
+    sed -i "\#-w $path#d" /etc/audit/audit.rules
     echo "-w $path -p w" >> /etc/audit/audit.rules
 fi
diff --git a/tests/shared/audit_rules_watch/augenrules_wrong_rule.fail.sh b/tests/shared/audit_rules_watch/augenrules_wrong_rule.fail.sh
index ab664a4d6987..ceebf8688b9d 100644
--- a/tests/shared/audit_rules_watch/augenrules_wrong_rule.fail.sh
+++ b/tests/shared/audit_rules_watch/augenrules_wrong_rule.fail.sh
@@ -3,8 +3,11 @@
 
 
 if [[ "$style" == "modern" ]] ; then
+    escaped_path=$(echo "$path" | sed 's/\//\\\//g')
+    sed -i "/$filter_type=$escaped_path/d" /etc/audit/rules.d/*.rules 2>/dev/null || true
     echo "-a always,exit -F arch=b32 -F $filter_type=$path -F perm=w -F key=logins" >> /etc/audit/rules.d/login.rules
     echo "-a always,exit -F arch=b64 -F $filter_type=$path -F perm=w -F key=logins" >> /etc/audit/rules.d/login.rules
 else
+    sed -i "\#-w $path#d" /etc/audit/rules.d/*.rules 2>/dev/null || true
     echo "-w $path -p w -k login" >> /etc/audit/rules.d/login.rules
 fi
diff --git a/tests/shared/audit_rules_watch/augenrules_wrong_rule_without_key.fail.sh b/tests/shared/audit_rules_watch/augenrules_wrong_rule_without_key.fail.sh
index 80bd5f72cfc6..b5a1cb50b7a6 100644
--- a/tests/shared/audit_rules_watch/augenrules_wrong_rule_without_key.fail.sh
+++ b/tests/shared/audit_rules_watch/augenrules_wrong_rule_without_key.fail.sh
@@ -3,8 +3,11 @@
 
 
 if [[ "$style" == "modern" ]] ; then
+    escaped_path=$(echo "$path" | sed 's/\//\\\//g')
+    sed -i "/$filter_type=$escaped_path/d" /etc/audit/rules.d/*.rules 2>/dev/null || true
     echo "-a always,exit -F arch=b32 -F $filter_type=$path -F perm=w" >> /etc/audit/rules.d/login.rules
     echo "-a always,exit -F arch=b64 -F $filter_type=$path -F perm=w" >> /etc/audit/rules.d/login.rules
 else
+    sed -i "\#-w $path#d" /etc/audit/rules.d/*.rules 2>/dev/null || true
     echo "-w $path -p w" >> /etc/audit/rules.d/login.rules
 fi
diff --git a/tests/ssg_test_suite/oscap.py b/tests/ssg_test_suite/oscap.py
index c828e7eac95f..141abb00ff60 100644
--- a/tests/ssg_test_suite/oscap.py
+++ b/tests/ssg_test_suite/oscap.py
@@ -15,8 +15,6 @@
 from tests.ssg_test_suite import test_env
 from tests.ssg_test_suite import common
 
-from ssg.shims import input_func
-
 logging.getLogger(__name__).addHandler(logging.NullHandler())
 
 _CONTEXT_RETURN_CODES = {'pass': 0,
@@ -316,7 +314,7 @@ def _generate_report_file(self):
     def _wait_for_continue(self):
         """ In case user requests to leave machine in failed state for hands
         on debugging, ask for keypress to continue."""
-        input_func("Paused for manual debugging. Continue by pressing return.")
+        input("Paused for manual debugging. Continue by pressing return.")
 
     def prepare_online_scanning_arguments(self):
         self.command_options.extend([
@@ -702,7 +700,7 @@ def start(self):
         except Exception as exc:
             msg = ("Failed to start test environment '{0}': {1}"
                    .format(self.test_env.name, str(exc)))
-            raise RuntimeError(msg)
+            raise RuntimeError(msg) from exc
 
     def finalize(self):
         if not self.executed_tests:
@@ -713,7 +711,7 @@ def finalize(self):
         except Exception as exc:
             msg = ("Failed to finalize test environment '{0}': {1}"
                    .format(self.test_env.name, str(exc)))
-            raise RuntimeError(msg)
+            raise RuntimeError(msg) from exc
 
 
 REMEDIATION_PROFILE_RUNNERS = {
diff --git a/tests/ssg_test_suite/rule.py b/tests/ssg_test_suite/rule.py
index 5d8acbe19393..691e71fd1b0e 100644
--- a/tests/ssg_test_suite/rule.py
+++ b/tests/ssg_test_suite/rule.py
@@ -272,7 +272,7 @@ def _prepare_environment(self, test_content_by_rule_id):
                 self.test_env, test_content_by_rule_id)
         except RuntimeError as exc:
             msg = "Unable to upload test scripts: {more_info}".format(more_info=str(exc))
-            raise RuntimeError(msg)
+            raise RuntimeError(msg) from exc
 
         self._ensure_package_present_for_all_scenarios(test_content_by_rule_id)
 
@@ -302,7 +302,7 @@ def _get_rules_to_test(self):
             self.datastream, self.benchmark_id)
         rules = []
 
-        for dirpath, dirnames, filenames in common.walk_through_benchmark_dirs(
+        for dirpath, _, _ in common.walk_through_benchmark_dirs(
                 product):
             if not is_rule_dir(dirpath):
                 continue
diff --git a/tests/ssg_test_suite/test_env.py b/tests/ssg_test_suite/test_env.py
index 63bd416c9e33..e35ddc4eb57c 100644
--- a/tests/ssg_test_suite/test_env.py
+++ b/tests/ssg_test_suite/test_env.py
@@ -157,7 +157,7 @@ def scp_transfer_file(self, source, destination, log_file, error_msg=None):
         except Exception as exc:
             error_msg = error_msg + ": " + str(exc)
             logging.error(error_msg)
-            raise RuntimeError(error_msg)
+            raise RuntimeError(error_msg) from exc
 
     def finalize(self):
         """
@@ -221,7 +221,7 @@ def __init__(self, mode, hypervisor, domain_name, keep_snapshots):
             import libvirt
         except ImportError:
             raise RuntimeError("Can't import libvirt module, libvirt backend will "
-                               "therefore not work.")
+                               "therefore not work.") from None
 
         self.domain = None
 
@@ -367,13 +367,13 @@ def get_ssh_port(self):
                     "This usually means that the container backend reported its configuration "
                     "in an unexpected format."
                 )
-                raise RuntimeError(msg)
+                raise RuntimeError(msg) from None
 
             if self.internal_ssh_port in ports:
                 ssh_port = ports[self.internal_ssh_port]
             else:
                 msg = "Unable to detect the SSH port for the container."
-                raise RuntimeError(msg)
+                raise RuntimeError(msg) from None
         else:
             ssh_port = self.internal_ssh_port
         return ssh_port
@@ -455,7 +455,7 @@ def __init__(self, mode, image_name):
         try:
             import docker
         except ImportError:
-            raise RuntimeError("Can't import the docker module, Docker backend will not work.")
+            raise RuntimeError("Can't import the docker module, Docker backend will not work.") from None
         try:
             self.client = docker.from_env(version="auto")
             self.client.ping()
@@ -466,7 +466,7 @@ def __init__(self, mode, image_name):
                 "is the Docker service started "
                 "and do you have rights to access it?"
                 .format(str(exc)))
-            raise RuntimeError(msg)
+            raise RuntimeError(msg) from exc
 
     def _commit(self, container, image):
         container.commit(repository=image)
@@ -521,7 +521,7 @@ def _commit(self, container, image):
         except subprocess.CalledProcessError as e:
             msg = "Command '{0}' returned {1}:\n{2}".format(
                 " ".join(e.cmd), e.returncode, e.output.decode("utf-8"))
-            raise RuntimeError(msg)
+            raise RuntimeError(msg) from e
 
     def _new_container_from_image(self, image_name, container_name):
         long_name = "{0}_{1}".format(self._name_stem, container_name)
@@ -533,6 +533,8 @@ def _new_container_from_image(self, image_name, container_name):
                       "--cap-add=cap_sys_admin",
                       "--cap-add=cap_sys_chroot",
                     #   "--privileged",
+                      "--network", "slirp4netns:mtu=1500",
+                      "--cap-add=cap_net_admin",
                       "--publish", "{}".format(self.internal_ssh_port), "--detach", image_name,
                       "/usr/sbin/sshd", "-p", "{}".format(self.internal_ssh_port), "-D"]
         try:
@@ -540,7 +542,7 @@ def _new_container_from_image(self, image_name, container_name):
         except subprocess.CalledProcessError as e:
             msg = "Command '{0}' returned {1}:\n{2}".format(
                 " ".join(e.cmd), e.returncode, e.output.decode("utf-8"))
-            raise RuntimeError(msg)
+            raise RuntimeError(msg) from e
         container_id = podman_output.decode("utf-8").strip()
         return container_id
 
@@ -554,7 +556,7 @@ def get_ip_address(self):
         except subprocess.CalledProcessError as e:
             msg = "Command '{0}' returned {1}:\n{2}".format(
                 " ".join(e.cmd), e.returncode, e.output.decode("utf-8"))
-            raise RuntimeError(msg)
+            raise RuntimeError(msg) from e
         ip_address = podman_output.decode("utf-8").strip()
         if not ip_address:
             ip_address = "localhost"
@@ -568,7 +570,7 @@ def _get_container_ports(self, container):
         except subprocess.CalledProcessError as e:
             msg = "Command '{0}' returned {1}:\n{2}".format(
                 " ".join(e.cmd), e.returncode, e.output.decode("utf-8"))
-            raise RuntimeError(msg)
+            raise RuntimeError(msg) from e
         return self.extract_port_map(json.loads(podman_output))
 
     def extract_port_map(self, podman_network_data):
@@ -591,14 +593,14 @@ def _terminate_current_running_container_if_applicable(self):
             except subprocess.CalledProcessError as e:
                 msg = "Command '{0}' returned {1}:\n{2}".format(
                     " ".join(e.cmd), e.returncode, e.output.decode("utf-8"))
-                raise RuntimeError(msg)
+                raise RuntimeError(msg) from e
             podman_cmd = ["podman", "rm", running_state]
             try:
                 subprocess.check_output(podman_cmd, stderr=subprocess.STDOUT)
             except subprocess.CalledProcessError as e:
                 msg = "Command '{0}' returned {1}:\n{2}".format(
                     " ".join(e.cmd), e.returncode, e.output.decode("utf-8"))
-                raise RuntimeError(msg)
+                raise RuntimeError(msg) from e
 
     def _remove_image(self, image):
         podman_cmd = ["podman", "rmi", image]
@@ -607,7 +609,7 @@ def _remove_image(self, image):
         except subprocess.CalledProcessError as e:
             msg = "Command '{0}' returned {1}:\n{2}".format(
                 " ".join(e.cmd), e.returncode, e.output.decode("utf-8"))
-            raise RuntimeError(msg)
+            raise RuntimeError(msg) from e
 
     def _local_oscap_check_base_arguments(self):
         raise NotImplementedError("OpenSCAP doesn't support offline scanning of Podman Containers")
diff --git a/tests/ssg_test_suite/virt.py b/tests/ssg_test_suite/virt.py
index 1c88ddb44d2c..17a4816acda1 100644
--- a/tests/ssg_test_suite/virt.py
+++ b/tests/ssg_test_suite/virt.py
@@ -144,7 +144,7 @@ def determine_ip(domain):
                             0)
 
     # get IPv4 address of the guest
-    for (name, val) in ifaces.items():
+    for (_, val) in ifaces.items():
         if val['hwaddr'] == domain_mac and val['addrs']:
             for ipaddr in val['addrs']:
                 if ipaddr['type'] == libvirt.VIR_IP_ADDR_TYPE_IPV4:
@@ -194,7 +194,7 @@ def reboot_domain(domain, domain_ip, ssh_port):
                 str_err = ("Timeout reached: '{0}' ({1}:{2}) domain does not "
                            "accept connections.".format(domain.name(), domain_ip, ssh_port))
                 logging.debug(str_err)
-                raise TimeoutError(str_err)
+                raise TimeoutError(str_err) from None
         else:
             ssh_socket.close()
             break
diff --git a/tests/stable_profile_ids.py b/tests/stable_profile_ids.py
index 35a3cc8923c6..d71cac6f3e56 100755
--- a/tests/stable_profile_ids.py
+++ b/tests/stable_profile_ids.py
@@ -56,7 +56,7 @@ def gather_profiles_from_datastream(path, build_dir, profiles_per_benchmark):
     benchmark_profile_pairs = ssg.build_guides.get_benchmark_profile_pairs(
         input_tree, benchmarks)
 
-    for bench_id, profile_id, title in benchmark_profile_pairs:
+    for bench_id, profile_id, _ in benchmark_profile_pairs:
         bench_short_id = bench_id[len(BENCHMARK_ID_PREFIX):]
         if respective_datastream_absent(bench_short_id, build_dir):
             continue
diff --git a/tests/test_profile_stability.py b/tests/test_profile_stability.py
index 8d89dfc8b67d..d72b3af2f79d 100644
--- a/tests/test_profile_stability.py
+++ b/tests/test_profile_stability.py
@@ -34,7 +34,7 @@ def compare_sets(reference, sample):
 
 def get_references_filenames(ref_root):
     found = []
-    for root, dirs, files in os.walk(ref_root):
+    for root, _, files in os.walk(ref_root):
         for basename in files:
             if fnmatch.fnmatch(basename, "*.profile"):
                 filename = os.path.join(root, basename)
diff --git a/tests/tmt/fedora-cis/main.fmf b/tests/tmt/fedora-cis/main.fmf
new file mode 100644
index 000000000000..2fe6663887e8
--- /dev/null
+++ b/tests/tmt/fedora-cis/main.fmf
@@ -0,0 +1,22 @@
+/plan:
+    discover:
+        how: fmf
+        test: /fedora-cis/test
+    execute:
+        how: tmt
+    report:
+        how: html
+
+/test:
+    summary: Runs oscap remediation using the CIS profile
+    description: |-
+        This ensures that the CIS profile is in a fairly good condition on
+        Fedora, to be used for ComplyTime demos, and as a baseline profile
+        for the community to target if they choose to adapt the ComplyTime
+        tooling.
+    test: ./test.sh
+    duration: 1h
+    require:
+        - openscap-scanner
+        - openscap-report
+        - scap-security-guide
diff --git a/tests/tmt/tests/fedora-cis/test.sh b/tests/tmt/fedora-cis/test.sh
similarity index 100%
rename from tests/tmt/tests/fedora-cis/test.sh
rename to tests/tmt/fedora-cis/test.sh
diff --git a/tests/tmt/plans/contest.fmf b/tests/tmt/plans/contest.fmf
deleted file mode 100644
index 39056e491125..000000000000
--- a/tests/tmt/plans/contest.fmf
+++ /dev/null
@@ -1,130 +0,0 @@
-discover:
-    how: fmf
-    url: https://github.com/RHSecurityCompliance/contest.git
-execute:
-    how: tmt
-adjust:
-  - environment:
-        CONTEST_VERBOSE: 0
-report:
-    how: html
-
-#
-# Hardening via ansible-playbook remediation
-#
-
-/hardening/host-os/ansible/anssi_bp28_high:
-    discover+: {test: /hardening/host-os/ansible/anssi_bp28_high$}
-
-/hardening/host-os/ansible/bsi:
-    discover+: {test: /hardening/host-os/ansible/bsi$}
-
-/hardening/host-os/ansible/ccn_advanced:
-    discover+: {test: /hardening/host-os/ansible/ccn_advanced$}
-
-/hardening/host-os/ansible/cis:
-    discover+: {test: /hardening/host-os/ansible/cis$}
-
-/hardening/host-os/ansible/cis_server_l1:
-    discover+: {test: /hardening/host-os/ansible/cis_server_l1$}
-
-/hardening/host-os/ansible/cis_workstation_l1:
-    discover+: {test: /hardening/host-os/ansible/cis_workstation_l1$}
-
-/hardening/host-os/ansible/cis_workstation_l2:
-    discover+: {test: /hardening/host-os/ansible/cis_workstation_l2$}
-
-/hardening/host-os/ansible/cui:
-    discover+: {test: /hardening/host-os/ansible/cui$}
-
-/hardening/host-os/ansible/e8:
-    discover+: {test: /hardening/host-os/ansible/e8$}
-
-/hardening/host-os/ansible/hipaa:
-    discover+: {test: /hardening/host-os/ansible/hipaa$}
-
-/hardening/host-os/ansible/ism_o:
-    discover+: {test: /hardening/host-os/ansible/ism_o$}
-
-/hardening/host-os/ansible/ism_o_top_secret:
-    discover+: {test: /hardening/host-os/ansible/ism_o_top_secret$}
-
-/hardening/host-os/ansible/ospp:
-    discover+: {test: /hardening/host-os/ansible/ospp$}
-
-/hardening/host-os/ansible/pci-dss:
-    discover+: {test: /hardening/host-os/ansible/pci-dss$}
-
-/hardening/host-os/ansible/stig:
-    discover+: {test: /hardening/host-os/ansible/stig$}
-
-#
-# Hardening via oscap xccdf eval --remediate
-#
-
-/hardening/host-os/oscap/anssi_bp28_high:
-    discover+: {test: /hardening/host-os/oscap/anssi_bp28_high$}
-
-/hardening/host-os/oscap/bsi:
-    discover+: {test: /hardening/host-os/oscap/bsi$}
-
-/hardening/host-os/oscap/ccn_advanced:
-    discover+: {test: /hardening/host-os/oscap/ccn_advanced$}
-
-/hardening/host-os/oscap/cis:
-    discover+: {test: /hardening/host-os/oscap/cis$}
-
-/hardening/host-os/oscap/cis_server_l1:
-    discover+: {test: /hardening/host-os/oscap/cis_server_l1$}
-
-/hardening/host-os/oscap/cis_workstation_l1:
-    discover+: {test: /hardening/host-os/oscap/cis_workstation_l1$}
-
-/hardening/host-os/oscap/cis_workstation_l2:
-    discover+: {test: /hardening/host-os/oscap/cis_workstation_l2$}
-
-/hardening/host-os/oscap/cui:
-    discover+: {test: /hardening/host-os/oscap/cui$}
-
-/hardening/host-os/oscap/e8:
-    discover+: {test: /hardening/host-os/oscap/e8$}
-
-/hardening/host-os/oscap/hipaa:
-    discover+: {test: /hardening/host-os/oscap/hipaa$}
-
-/hardening/host-os/oscap/ism_o:
-    discover+: {test: /hardening/host-os/oscap/ism_o$}
-
-/hardening/host-os/oscap/ism_o_top_secret:
-    discover+: {test: /hardening/host-os/oscap/ism_o_top_secret$}
-
-/hardening/host-os/oscap/ospp:
-    discover+: {test: /hardening/host-os/oscap/ospp$}
-
-/hardening/host-os/oscap/pci-dss:
-    discover+: {test: /hardening/host-os/oscap/pci-dss$}
-
-/hardening/host-os/oscap/stig:
-    discover+: {test: /hardening/host-os/oscap/stig$}
-
-#
-# Misc smoke/sanity tests
-#
-
-/static-checks:
-    discover+:
-        test: /static-checks
-        exclude:
-          # exclude here due to the test failing frequently for short periods
-          # of time, as many websites have temporary availability issues
-          - /static-checks/html-links
-          # these always fail, meant for manual review
-          - /static-checks/diff
-          # The value of this test is debatable and therefore it should not delay upstream gating.
-          # Our SCAP datastream is often noncompliant from the start, for example by containing SCE checks.
-          - /static-checks/nist-validation
-
-
-# Fedora specific plan
-/rpmbuild-ctest-fedora:
-    discover+: {test: /static-checks/rpmbuild-ctest}
diff --git a/tests/tmt/plans/fedora-cis.fmf b/tests/tmt/plans/fedora-cis.fmf
deleted file mode 100644
index 7045aba0a895..000000000000
--- a/tests/tmt/plans/fedora-cis.fmf
+++ /dev/null
@@ -1,7 +0,0 @@
-discover:
-    how: fmf
-    test: /tests/fedora-cis
-execute:
-    how: tmt
-report:
-    how: html
diff --git a/tests/tmt/tests/fedora-cis/main.fmf b/tests/tmt/tests/fedora-cis/main.fmf
deleted file mode 100644
index f4f82cb0cd8e..000000000000
--- a/tests/tmt/tests/fedora-cis/main.fmf
+++ /dev/null
@@ -1,11 +0,0 @@
-summary: Runs oscap remediation using the CIS profile
-description: |-
-    This ensures that the CIS profile is in a fairly good condition on Fedora,
-    to be used for ComplyTime demos, and as a baseline profile for the community
-    to target if they choose to adapt the ComplyTime tooling.
-test: ./test.sh
-duration: 1h
-require:
-    - openscap-scanner
-    - openscap-report
-    - scap-security-guide
diff --git a/tests/unit/bash/test_bash_ensure_ini_config.bats.jinja b/tests/unit/bash/test_bash_ensure_ini_config.bats.jinja
index 34a90ce2398b..95dfa0acb8da 100644
--- a/tests/unit/bash/test_bash_ensure_ini_config.bats.jinja
+++ b/tests/unit/bash/test_bash_ensure_ini_config.bats.jinja
@@ -46,7 +46,7 @@ teardown() {
 
 @test "bash_ensure_ini_config - Basic value remediation" {
     printf "[pam]\npam_cert_auth = false\n" > sssd_test/sssd.conf
-    expected_output="[pam]\npam_cert_auth=true\n"
+    expected_output="[pam]\npam_cert_auth = true\n"
 
     call_bash_ensure_ini_config "sssd_test/sssd.conf" "pam" "pam_cert_auth" "true"
 
@@ -57,7 +57,7 @@ teardown() {
 @test "bash_ensure_ini_config - Value remediation in multiple files" {
     printf "[pam]\npam_cert_auth = false\n" > sssd_test/sssd.conf
     printf "[pam]\npam_cert_auth = false\n" > pam_cert_auth.conf
-    expected_output="[pam]\npam_cert_auth=true\n"
+    expected_output="[pam]\npam_cert_auth = true\n"
 
     call_bash_ensure_ini_config "sssd_test/sssd.conf pam_cert_auth.conf" "pam" "pam_cert_auth" "true"
 
@@ -70,7 +70,7 @@ teardown() {
 
 @test "bash_ensure_ini_config - No remediation happened" {
     printf "[pam]\npam_cert_auth = true\n" > sssd_test/sssd.conf
-    expected_output="[pam]\npam_cert_auth=true\n"
+    expected_output="[pam]\npam_cert_auth = true\n"
 
     call_bash_ensure_ini_config "sssd_test/sssd.conf" "pam" "pam_cert_auth" "true"
 
diff --git a/tests/unit/ssg-module/test_build_renumber.py b/tests/unit/ssg-module/test_build_renumber.py
index 493016892c1b..90db64ecfa20 100644
--- a/tests/unit/ssg-module/test_build_renumber.py
+++ b/tests/unit/ssg-module/test_build_renumber.py
@@ -195,8 +195,6 @@ def xccdf_with_no_cce():
 
 def test_verify_correct_form_of_referenced_cce_identifiers_no_cce(
         xccdf_with_no_cce):
-    try:
-        ssg.build_renumber.verify_correct_form_of_referenced_cce_identifiers(
+    # Should not raise an exception when there's no CCE
+    ssg.build_renumber.verify_correct_form_of_referenced_cce_identifiers(
             xccdf_with_no_cce)
-    except SSGError as e:
-        assert False, "Raised SSGError: " + str(e)
diff --git a/tests/unit/ssg-module/test_build_yaml.py b/tests/unit/ssg-module/test_build_yaml.py
index 60e703a8fdf4..38c2802f4b98 100644
--- a/tests/unit/ssg-module/test_build_yaml.py
+++ b/tests/unit/ssg-module/test_build_yaml.py
@@ -572,7 +572,8 @@ def test_profile_with_version(profile_with_version):
     profile_el = profile_with_version.to_xml_element()
     assert profile_el.find("{%s}version" % XCCDF12_NS).text == "3.2.1"
 
+
 def test_profile_ospp_with_invalid_status():
     value_file = os.path.join(DATADIR, "ospp_invalid_status.profile")
-    with pytest.raises(Exception):
+    with pytest.raises(RuntimeError):
         profile = ssg.build_yaml.Profile.from_yaml(value_file)  # noqa: F841
diff --git a/tests/unit/utils/oscal/test_cd_generator.py b/tests/unit/utils/oscal/test_cd_generator.py
index 313499a61e48..1d210995779a 100644
--- a/tests/unit/utils/oscal/test_cd_generator.py
+++ b/tests/unit/utils/oscal/test_cd_generator.py
@@ -57,7 +57,7 @@ def vendor_dir() -> Generator[str, None, None]:
         except Exception as e:
             raise TrestleError(
                 f"Initialization failed for temporary trestle directory: {e}."
-            )
+            ) from e
         yield tmpdir
 
 
diff --git a/utils/ansible_playbook_to_role.py b/utils/ansible_playbook_to_role.py
index e30bac625481..4faeb7ca3690 100755
--- a/utils/ansible_playbook_to_role.py
+++ b/utils/ansible_playbook_to_role.py
@@ -22,7 +22,7 @@
 except ImportError:
     print("Please install PyGithub, you need a specific version of pygithub, install it through $ pip install \"PyGithub>=1.58.2,<2.0\"",
           file=sys.stderr)
-    raise SystemExit(1)
+    raise SystemExit(1) from None
 
 
 try:
@@ -31,7 +31,7 @@
     from ssg.utils import mkdir_p
 except ImportError:
     print("Unable to find the ssg module. Please run 'source .pyenv.sh'", file=sys.stderr)
-    raise SystemExit(1)
+    raise SystemExit(1) from None
 
 
 def memoize(f):
@@ -197,7 +197,7 @@ def added_variables(self):
         variables = set()
         for task in self.tasks_data:
             if "tags" not in task:
-                next
+                continue
             if "when" not in task:
                 task["when"] = []
             elif isinstance(task["when"], str):
@@ -280,7 +280,7 @@ def _description(self):
                 break
             else:
                 desc += (line + "\n")
-        return desc.strip("\n\n")
+        return desc.strip("\n")
 
     @property
     def _update_galaxy_tags(self):
diff --git a/utils/ansible_shell_diff.py b/utils/ansible_shell_diff.py
index 48d5f447102d..8c55ea1f79f2 100755
--- a/utils/ansible_shell_diff.py
+++ b/utils/ansible_shell_diff.py
@@ -25,7 +25,7 @@ def get_shell_tasks(tasks):
     for task in tasks:
         for task_name in ['shell', 'ansible.builtin.shell', 'command', 'ansible.builtin.command']:
             if task_name in task:
-                if type(task[task_name]) is dict and 'cmd' in task[task_name]:
+                if isinstance(task[task_name], dict) and 'cmd' in task[task_name]:
                     shell_tasks.append(task[task_name]['cmd'])
                 else:
                     shell_tasks.append(task[task_name])
diff --git a/utils/fix_rules.py b/utils/fix_rules.py
index 1708b155253b..71fd850c1cb0 100755
--- a/utils/fix_rules.py
+++ b/utils/fix_rules.py
@@ -9,7 +9,6 @@
 import re
 
 from ssg import yaml, cce, products
-from ssg.shims import input_func
 from ssg.utils import read_file_list
 import ssg
 import ssg.products
@@ -439,7 +438,7 @@ def has_product_cce(yaml_contents, product):
     if not yaml_contents[section]:
         return False
 
-    for i_type, i_value in yaml_contents[section].items():
+    for i_type, _ in yaml_contents[section].items():
         if i_type[0:3] != 'cce' or "@" not in i_type:
             continue
 
@@ -499,7 +498,7 @@ def _fixed_file_contents(path, file_contents, product_yaml, func):
         new_file_contents = func(file_contents, yaml_contents)
     except Exception as exc:
         msg = "Refusing to fix file: {path}: {error}".format(path=path, error=str(exc))
-        raise RuntimeError(msg)
+        raise RuntimeError(msg) from exc
 
     return new_file_contents
 
@@ -540,7 +539,7 @@ def fix_file_prompt(path, product_yaml, func, args):
 
     response = 'n'
     if need_input:
-        response = input_func("Confirm writing output to %s: (y/n): " % path)
+        response = input("Confirm writing output to %s: (y/n): " % path)
 
     if args.assume_yes or response.strip().lower() == 'y':
         changes = True
@@ -576,16 +575,16 @@ def is_relevant_rule(rule_path, rule, rule_lines):
 
         cce = cce_pool.random_cce()
 
-        def fix_callback(file_contents, yaml_contents):
+        def fix_callback(file_contents, yaml_contents, cce=cce):
             return add_product_cce(file_contents, yaml_contents, product_yaml["product"], cce)
 
         try:
             changes = fix_file(rule_path, product_yaml, fix_callback)
         except RuntimeError as exc:
-            msg = (  # noqa: F841
+            msg = (
                 "Error adding CCE into {rule_path}: {exc}"
                 .format(rule_path=rule_path, exc=str(exc)))
-            raise RuntimeError(exc)
+            raise RuntimeError(msg) from exc
 
         if changes:
             cce_pool.remove_cce_from_file(cce)
diff --git a/utils/generate_profile.py b/utils/generate_profile.py
index b02b12b839ea..bd7917581a7e 100755
--- a/utils/generate_profile.py
+++ b/utils/generate_profile.py
@@ -194,8 +194,8 @@ def _generate(self, node: pycompliance.Node) -> dict:
             d['levels'] = node.level.replace(' ', '_').lower()
         if node.children:
             d['controls'] = []
-        for node in node.children:
-            d['controls'].append(self._generate(node))
+            for sub_node in node.children:
+                d['controls'].append(self._generate(sub_node))
         return d
 
 
diff --git a/utils/oscal/params_extractor.py b/utils/oscal/params_extractor.py
index e69aeb2c2f67..a329dc6c05b2 100644
--- a/utils/oscal/params_extractor.py
+++ b/utils/oscal/params_extractor.py
@@ -96,6 +96,7 @@ def get_all_selected_values(self) -> Dict[str, str]:
 
     def _load_param_info(self, param_id: str) -> ParamInfo:
         """Load the param from the var file."""
+        file = None
         try:
             file = self.param_files_for_product[param_id]
             value_yaml = ssg.build_yaml.Value.from_yaml(file, self.env_yaml)
@@ -110,7 +111,7 @@ def _load_param_info(self, param_id: str) -> ParamInfo:
             logger.info(f"Adding parameter {parameter_id}")
             return param_obj
         except KeyError as e:
-            raise ValueError(f"Could not find parameter {param_id}: {e}")
+            raise ValueError(f"Could not find parameter {param_id}: {e}") from e
         except ValueError as e:
             logger.warning(f"Var file {file} has missing fields: {e}")
-            return param_obj
+            raise
diff --git a/utils/release_helper.py b/utils/release_helper.py
index e351a2f797f7..de6680283afa 100755
--- a/utils/release_helper.py
+++ b/utils/release_helper.py
@@ -242,10 +242,10 @@ def create_repo_milestone(repo, name) -> None:
             f'Stabilization phase starts on {formatted_date_stabilization}')
         try:
             repo.create_milestone(
-                title=name, description=milestone_description, due_on=estimated_release_date)
+                title=name, description=milestone_description, due_on=future_release_date)
             print(f'Milestone {name} successfully created with the following information:')
             print(f'Description: {milestone_description}')
-            print(f'Due on: {estimated_release_date}')
+            print(f'Due on: {future_release_date}')
         except Exception as e:
             print(f'Error: {e}')
             exit(1)
@@ -353,9 +353,10 @@ def get_next_stabilization_date(release_date: datetime) -> datetime:
 
 def get_next_release_date(latest_release_date: datetime) -> datetime:
     month = get_next_quarter_second_month(latest_release_date)
-    now = datetime.now(UTC)
 
-    if month > 9 and latest_release_date <= now:
+    # If the next release month is earlier in the year than the latest release month,
+    # it means we've wrapped around to the next year
+    if month <= latest_release_date.month:
         year = latest_release_date.year + 1
     else:
         year = latest_release_date.year